last executing test programs: 9.670598901s ago: executing program 2 (id=1461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000080)=""/33, 0x21}, {0x0}], 0x4) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x3, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40101) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008060001080006040008aaaaaaaa010101bbbbbbbbbbbbffffffff"], 0x0) (async, rerun: 32) r3 = dup(r2) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'lo\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x4, 0xffffff7f, 0xffff7fff, 0x0, 0x1ff, 0xfff, 0x1273, 0x9}}) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) open$dir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1a3) (async, rerun: 64) r5 = syz_io_uring_setup(0x238, &(0x7f00000003c0)={0x0, 0x59ef, 0x10100, 0x2, 0x14f, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) (async, rerun: 32) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, 0x0) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = eventfd2(0x1, 0x80801) (async) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000080)={0x60000000}) (async) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000040)="6eb3ef930c53dea1", 0x8}], 0x1) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r12, 0x0, 0xf3a, 0x0) 9.415839372s ago: executing program 2 (id=1463): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) write$sequencer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00000601f6050e"], 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @loopback}}, [0x6, 0x5, 0x81, 0x43, 0x8000000000000000, 0x7, 0x7fffffffffffffff, 0x4, 0xfffffffffffffffa, 0x8000000000000000, 0x9, 0x2, 0x3, 0x200, 0xfffffffffffffffc]}, &(0x7f0000000340)=0x100) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x40001) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x6, 0x3136564e, 0x3, @stepwise={0x80004, 0xffffffff, 0x4, 0x34d48743, 0x80000001, 0x200}}) r11 = socket(0x25, 0x4, 0x7ffffeff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xfff1}, {0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9f96}, @TCA_RATE={0x6, 0x5, {0x7c, 0xfc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r13, @ANYBLOB="020028bd7000fbdbdf250e0000004c000380060007004e240000080001000200000014000600fc003e4eef0eefa51de57d00000000000000000000000000011400020062617461647630000000000000000000060004000400000008000300005d1f918000028008000700ffff00000c000380080001000200000008000500000000004400038008000100ec4423c308000300030000000800030001000000060004000100000008000100010000000800030000000000060007004e23000008000500ac1e000108000600a4090000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008887}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) 6.984857477s ago: executing program 2 (id=1468): syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040), &(0x7f00000000c0)) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000580)={{0x1, 0x100, 0x0, 0x8001, 0x2, 0xfffffffb}, 0xf3, [0x2, 0x3, 0xb55, 0x8, 0x7, 0x2, 0x6, 0x0, 0x1, 0x1326, 0x6, 0x7, 0x5, 0x1, 0x2, 0x0, 0x0, 0x9, 0xc, 0x8001, 0x10001, 0x101, 0x4, 0x80, 0x7, 0x0, 0xa2d, 0x0, 0x8, 0x0, 0x7, 0x9a3a6c3, 0x5, 0xfffffffb, 0x2, 0x800, 0x8, 0x3, 0x9, 0xc0, 0xd, 0xffff0001, 0x8001, 0x2, 0x1, 0xffffffff, 0x4, 0xffffff81, 0xa, 0x8, 0xffffffff, 0x5e9, 0x673b, 0xffff, 0x8a, 0x7, 0x78, 0xb, 0x5, 0xd, 0x7, 0x2, 0x7, 0xfffff8a8, 0x2, 0xfff, 0x5, 0x1, 0x51f, 0x18000000, 0x400, 0xf227, 0x0, 0x220, 0x80000001, 0x6, 0x9, 0x2, 0x4, 0x4, 0x6, 0xfffffff7, 0xa, 0x6, 0x5, 0xfffffff7, 0x0, 0x1000, 0x7, 0x7fff, 0x5, 0x5, 0xad6, 0x7, 0x8, 0xffffff3a, 0x43, 0xffff7f26, 0x3, 0x401, 0x10000, 0xfffffde3, 0x4, 0x6, 0x8, 0x6, 0x0, 0xfffffff1, 0x0, 0x10001, 0x5, 0x10, 0x800, 0x0, 0x10000, 0x2, 0x1, 0x7, 0x5, 0x8001, 0x5, 0x3, 0x3ff, 0xfffffe00, 0x97c, 0x9, 0x4, 0x0, 0x8, 0x0, 0xe, 0x1, 0x6, 0x4, 0x7, 0x2, 0xe, 0x9, 0x9, 0xffffffff, 0x0, 0x3, 0x8000, 0x80, 0x0, 0x7, 0x8, 0x0, 0x2, 0x6, 0x81, 0x3ff, 0x3ff, 0x4, 0x6, 0xc, 0x4, 0x2, 0x0, 0x74, 0x738, 0x6, 0x3, 0x0, 0x7, 0x81, 0x84, 0x5, 0x1, 0x8, 0x2, 0x1, 0x5, 0x3, 0x3, 0x6, 0x5, 0x7, 0x300, 0xffff, 0x2, 0x7fff, 0x0, 0xb, 0x2, 0x0, 0xa, 0x1, 0x3, 0x3, 0x6, 0x5, 0x58d0, 0x8144, 0x1, 0x0, 0x8000, 0xfffffff8, 0x5, 0x8, 0xa, 0x3, 0x7fff, 0x10000, 0x4, 0x5, 0x400, 0x2, 0x1, 0x7, 0xff, 0x5, 0x5, 0xfffffc01, 0x2, 0xd191, 0xa3e, 0x2, 0x6, 0x436, 0x400, 0x8, 0x0, 0x2, 0x4, 0xffff, 0xfffffff0, 0x10001, 0x80000001, 0x1e, 0x2, 0x8, 0x90d, 0x248, 0xa7, 0xeb4, 0x9, 0xffffff3c, 0x9, 0x4, 0x6, 0x9, 0x40, 0x0, 0x2, 0x0, 0x8001, 0x86, 0x6e, 0x96c5, 0x2, 0xffffffff, 0x9, 0x7, 0x8, 0x0, 0x1, 0x7, 0xc8, 0x3, 0x8b1, 0x776, 0xd7d80000, 0x584e, 0x9, 0x200, 0x1, 0x9, 0xffffffff, 0x77f, 0x5, 0x4, 0x9f, 0xe, 0x1, 0x80, 0x8000, 0x1, 0x3ff, 0x5917, 0x0, 0x4, 0x3120, 0x6, 0x0, 0x24d6, 0x0, 0x1000, 0x5, 0x5e, 0x3e7a16cf, 0x0, 0x7, 0xfe, 0xf9, 0xd, 0x10001, 0x0, 0x10, 0x6, 0x5, 0x7, 0x9179, 0x1, 0xd31, 0x2, 0x2, 0x7, 0xfffffff8, 0x84d, 0x8, 0x0, 0x1212, 0x7, 0xffffffb0, 0x4, 0x9, 0x88, 0x5, 0x8, 0xfffffffb, 0x4, 0x2, 0x5, 0xaa25, 0x2, 0xffffffff, 0x200, 0xe4e, 0x3, 0x2, 0x9, 0x6, 0x7, 0x5, 0x3, 0x7, 0x9, 0x9, 0x152e2303, 0x5, 0x8, 0x6, 0x1, 0x3, 0x3ff, 0x4, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x9, 0x7, 0xa, 0x80000000, 0x111, 0x8, 0x5, 0x1, 0x0, 0x7, 0x505, 0x1, 0x10, 0x7, 0xfffffff8, 0x7, 0x200, 0x7ff, 0x400, 0x6, 0x0, 0x81, 0x7fffffff, 0xea, 0xae46, 0x900000, 0x10, 0x5f, 0x1000, 0x4, 0x1ff, 0x9, 0x10, 0x800005, 0x9, 0x9, 0x54f, 0x5, 0x2, 0x6e4e, 0x4, 0x0, 0x9, 0x800, 0x10, 0x0, 0x8, 0x38c, 0x9e, 0x8000, 0x8, 0x9, 0x8, 0xff, 0x5, 0x10001, 0x401, 0x3, 0xa, 0x0, 0x6, 0x1000, 0x7fffffff, 0x0, 0x1, 0x80000001, 0x9, 0x5, 0xfffff800, 0x87, 0x9, 0x0, 0x64c1, 0x6, 0x1, 0x1, 0x93, 0x400000, 0xfff, 0x8000, 0x0, 0x10, 0x2, 0x5c, 0x7, 0x40, 0xa2c9, 0x0, 0x6, 0x3fffc000, 0x8, 0x7, 0xfff, 0x8, 0x1, 0x4, 0x0, 0xd, 0x2, 0x3, 0x200, 0x1, 0x5, 0x5, 0x86af, 0x2d, 0x4, 0x9, 0x7, 0x6, 0xb18, 0xa, 0x7f, 0x3, 0x1198, 0xf, 0x5, 0x101, 0x9, 0x6c5a, 0x0, 0x1550, 0x0, 0x2, 0xfff, 0x6, 0x55, 0x7, 0x3, 0xfffffffd, 0x8, 0x2, 0x1, 0x3de, 0x7, 0x7, 0x7, 0x7, 0x8, 0x0, 0x2, 0x7, 0x10000, 0x367, 0xa, 0x1000, 0x400, 0x3, 0x5, 0xfff, 0xce46, 0x2, 0x6, 0x9, 0x987, 0x5, 0x826, 0x7, 0x80000000, 0xfff, 0x800, 0xff, 0x6, 0x2, 0x82, 0x0, 0xdb, 0xe, 0xd7, 0x7e, 0x2a5e, 0x0, 0x5, 0x1, 0x96d, 0xa, 0x0, 0xb0, 0xff, 0x2, 0x9, 0x1, 0xdd2, 0x4, 0x1eb, 0x9, 0x40, 0x0, 0xfffffff8, 0x5, 0x563, 0x74, 0x329478b7, 0x7, 0x8, 0x9, 0x8, 0x401f, 0xffffff01, 0xe, 0x10000, 0x0, 0x2, 0x2b, 0x4, 0x9, 0x3, 0x7, 0x3, 0x3, 0x101, 0xd, 0xa8e, 0x9, 0x3, 0x2, 0xfffffff7, 0x4, 0x2, 0xd899, 0x8, 0x7, 0xbea3, 0x8e, 0x4, 0x8, 0x0, 0x1ff, 0xff, 0x3, 0xfffffff8, 0x30, 0xd9, 0x1ff, 0x10001, 0xd, 0x3, 0x9, 0x2, 0x3ff, 0x0, 0x80000000, 0x1, 0x0, 0xffffffff, 0x8, 0x40, 0x1, 0x0, 0xa, 0x3ff, 0x33000, 0x7, 0x4, 0x6, 0x5, 0x3, 0x81, 0x800, 0xfd2, 0x80000000, 0x6, 0x0, 0x400, 0x10000, 0x3, 0x5, 0x101, 0x8, 0x7fffffff, 0x3, 0x37, 0x5, 0x716, 0x2, 0x5, 0x6, 0x9, 0x81, 0x4, 0x0, 0x2, 0xfffffffc, 0x1ff, 0x8, 0x7fffffff, 0x37d, 0x8000, 0x80, 0xd4e, 0x80000001, 0xd7, 0xfffffff2, 0x1, 0x7, 0x4dca, 0x4, 0x1, 0x8000, 0x6, 0xfff, 0x1ff, 0x0, 0x8, 0x3, 0x9, 0x8, 0x0, 0x18bd, 0x8, 0x7, 0xffffffff, 0xfffffffb, 0x0, 0x100, 0x9, 0x3, 0xd, 0x4, 0x0, 0x6, 0x3, 0x1, 0xae52, 0xfffffff7, 0xfffffffc, 0x7, 0x80000000, 0x6, 0x401, 0x2008000, 0x4, 0x5, 0x9, 0x0, 0xffffab21, 0x5, 0xe220, 0x0, 0x2, 0xf, 0xfffffffb, 0x1, 0xfff, 0x2, 0x4, 0xf5e, 0x1ff, 0x6, 0x5, 0x7fffffff, 0xc, 0xfffffff8, 0x6, 0x1000, 0x400, 0x1ff, 0x8, 0x900, 0x8, 0x6, 0x1, 0x2, 0x5, 0x4, 0x2, 0x1, 0x7, 0x5, 0x8000, 0x9, 0xa7e, 0x9, 0x6, 0xf, 0xde9, 0x2, 0x8, 0x5, 0x3, 0xb7, 0x3, 0xfff, 0x7, 0xd, 0x401, 0x5, 0xe, 0x10001, 0x3, 0xfe000000, 0x6, 0x7, 0x1c, 0x1d32, 0x7, 0x1, 0x8a8, 0x9, 0x2, 0xffffff65, 0x0, 0x365, 0xed, 0x3ff, 0xde, 0xfff, 0x6, 0xfffff801, 0x400, 0x7fff, 0xe3, 0x4, 0x3, 0x4, 0xa1a, 0x9, 0x81, 0x7, 0x5c9, 0xf, 0xa, 0x800, 0xa0, 0x9c, 0x5, 0x6, 0x5, 0x7, 0x7, 0x2, 0x7, 0x5, 0xfffffff9, 0x0, 0x10, 0x4, 0xfffffffa, 0xfffffff9, 0x1, 0xe8cc, 0x7, 0x8000, 0x7, 0x0, 0x638, 0xc, 0xf, 0x2, 0x80000000, 0x9725, 0x10, 0x4, 0x0, 0xffff8000, 0x2, 0x3, 0xd, 0x1, 0x6, 0x7971b501, 0x1, 0x2, 0xe, 0x1, 0x6, 0x3, 0x100, 0x4, 0x6, 0x5, 0xf5, 0x212c7387, 0x7f, 0x2, 0x3, 0x7f, 0x80, 0x7, 0x9, 0x1, 0x3, 0xdebc, 0x7ff, 0x6, 0x5, 0x0, 0x5, 0xd1, 0x6, 0x90b, 0xfffff801, 0x4, 0x5, 0x4, 0x400, 0x200, 0x9, 0x37d, 0x400000, 0x400, 0x200, 0xdd4a, 0x59, 0x8, 0xff, 0x4, 0xe, 0xf, 0x4, 0x8, 0x38, 0x5, 0x5, 0xfffffffc, 0x200, 0xf48, 0x6, 0x5, 0xfffffffd, 0x3, 0x0, 0x2, 0x4e, 0x0, 0x0, 0xab5a, 0x7, 0x200000, 0x7fffffff, 0x8, 0x9, 0x7, 0xfffffeff, 0xffffffff, 0x56, 0x2, 0x7, 0xa7cd, 0x3ff, 0x73, 0x6, 0x4, 0xf23124ea, 0x3, 0x1, 0xb, 0x4, 0x3, 0x3, 0x3, 0x1, 0xcc9, 0xfffffff8, 0xb6, 0x1, 0x6, 0x5ef, 0x40, 0x0, 0x3, 0x7, 0x1, 0x4, 0x0, 0x9, 0x3, 0x8, 0x6, 0xfffffff9, 0x7, 0x1f73, 0x7, 0x217, 0x9, 0x70, 0x1, 0x1000, 0xd, 0x9, 0x2e, 0x4, 0x2, 0x8, 0xe3, 0xfffffffd, 0x8, 0x66e, 0x3, 0x41, 0x8, 0x4b3, 0x3, 0x7, 0x101, 0x8, 0x7, 0x3ff, 0x4, 0x9, 0x6, 0x81, 0x8, 0xc3f, 0x5, 0xffffffff, 0x8, 0x3, 0x0, 0x70, 0x78, 0x3, 0x7, 0x26d, 0x0, 0x2, 0x2, 0x495bb62b, 0x3, 0x6b21, 0xc0d, 0x3, 0x6fa, 0x876, 0x1, 0x4, 0x100, 0x7fffffff, 0x3, 0x401, 0xd6a, 0xff, 0x8, 0xffff, 0x3, 0xffff, 0x2cb, 0x9, 0xd5d6, 0x4, 0x7, 0x6, 0x40, 0x101, 0x1ff, 0x9, 0x8, 0xd, 0x2, 0x1c00, 0x9, 0x10000, 0x4, 0x9, 0x7, 0x9, 0xffffff80, 0x6, 0x66cc, 0x6, 0xfffffe01, 0x1000, 0x6, 0x4, 0xfff, 0x1, 0x3, 0x6, 0x0, 0x9, 0x200, 0x8, 0x7309336d]}) 6.973130742s ago: executing program 1 (id=1469): r0 = socket$kcm(0x2b, 0x1, 0x0) (async) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43b, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x7655, 0xc954, 0x2, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x61) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = dup3(r6, r4, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r6, &(0x7f0000000640)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r7, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="9da9b107d30773a557f4e29cb34996964c1166b17a5669df8248be60409f28dfeb267ee562daf8099d659ff4283a584d79907fa20ce8bdc78aaa8d0505d9c8295e5dcdfb5dac063565b38913", 0x4c}], 0x1}}], 0x1, 0x4000001) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r7) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x1000000000000000, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff68, 0x4}, 0x0, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 6.748691188s ago: executing program 1 (id=1472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x541d9}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0xd}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x284, 0x0, 0xfffffffffffffffa}]}) 5.786909109s ago: executing program 1 (id=1474): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x40000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x40000000}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300060009210000000122050009058103"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) close_range(r0, r6, 0x0) (async) close_range(r0, r6, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000540)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 4.777856182s ago: executing program 4 (id=1477): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_cmd={0x7, 0x48, 0xffff7fff, 0x7, 0xff, 0x0, 0x1, 0x8, 0x4, 0x5, 0x0, 0xfffff5b6, 0x79c9, 0x10, 0x0, 0xfffffff7, [0x5, 0x10]}}) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000240)={0x2, r3}) fcntl$notify(r2, 0x402, 0x80000035) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 4.434796674s ago: executing program 4 (id=1478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x771f6ad8}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x404, &(0x7f0000000440)={[{0xed, 0x4e00, "32597b24840f233bc2ffe840e91cf2aca67cca3b3a50aa822193fcd3ee8bdfb537eb46d2b04ff6db1684f0bda8fd3834f8d5e94d5cc843d5bf325c223b87494b14cc3fff9938a0cb0961194cfc1317ab5054b89b8b280c3940de27341d4520a4c371b5834d1ed43734dfb63931b99e42623365bfa856151256c7f45c603b9a3ef4539529e709b6db78641ab5295880ce1db5b2e4e208e913426d1180b51ac7b6cffda120cea9cf9909e712e8629e0ca6caaae078e0f82cb9866d618cc9aed9a88c8d1a7b597cfcbbcf4a52be2fe2dbfbf47a38279391a4845946c858c256781913fb8fca907cf763a880bfb503"}, {0x45, 0x4e00, "b599f5dd61699a3d09782e8d9798620d7b23ed570d167cf20ff7be062bdbd883f25905c15d8494c9a6a097f635dac45dc56636ce1f258863f54552ca1b1d9dec615e26ed14"}, {0x79, 0x4e00, "3d27e6056ff07245cfd71756283d8430cd3dd3ca4420824da31aa82b1369e13c53fa66d1a6d194adc2eb4ee017c2d9f7c979ca3a4270b75a63824b2443660092ad4c8ed86aa17814fc067a571b38525f7be7e53812fc468f1d3cf98cd4f38f32fd610dd8eb6d866ac4913f6a01b69c830e02594f0d66cb5b55"}, {0x21, 0x4e00, "d749a78830cf8c6c2daa6c095f12045043c7996ea36a491f558077052d7ff1b457"}, {0x215, 0x4e00, "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"}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r8 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r10, 0xc008ae05, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffb) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000000000010400000000141a000002000000240001801400018008000100e000000108000200640101000c00028005000100000000002400028014000180080001000000000008000200ac1e08010c0002800500010000000000080007400000000104000f80f23ccdd9df901eb7551054f810a299ae74864e81321da9fae957738a43b586466ff8fb1fec43fedd2c8bc4e40ad3a746d309b5ceae578caba9737d97ae8a082851a3a976e974d9a6c4"], 0x68}}, 0x0) 3.862745281s ago: executing program 0 (id=1480): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) write$sequencer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00000601f6050e"], 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x40012141, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x40001) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x6, 0x3136564e, 0x3, @stepwise={0x80004, 0xffffffff, 0x4, 0x34d48743, 0x80000001, 0x200}}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_LIMIT={0xf, 0x1, 0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r13, @ANYBLOB="020028bd7000fbdbdf250e0000004c000380060007004e240000080001000200000014000600fc003e4eef0eefa51de57d00000000000000000000000000011400020062617461647630000000000000000000060004000400000008000300005d1f918000028008000700ffff00000c000380080001000200000008000500000000004400038008000100ec4423c308000300030000000800030001000000060004000100000008000100010000000800030000000000060007004e23000008000500ac1e000108000600a4090000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008887}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) 3.848813146s ago: executing program 3 (id=1481): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x200002, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/4\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, r6, 0xfffffffffffffffb, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) mknod$loop(&(0x7f0000000140)='./file1\x00', 0xfff, 0x1) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="ffffffffffffff7f2f36", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r2, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) mmap(&(0x7f0000231000/0x1000)=nil, 0x1000, 0x1, 0x104072, r7, 0x94173000) 3.786398691s ago: executing program 2 (id=1482): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=@fragment={0xdb, 0x0, 0xfc, 0x0, 0x0, 0x3, 0x67}, 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f00000002c0)) 3.639043199s ago: executing program 1 (id=1483): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000080ffffff00000000ffffffff9500000000003500ea104b0b068163739f52e55a7a220054a8d28fab6a270e319af8ffffffffffffffda6d43891c8ccc1caddf059c09110aa8e52e10e9c36f8b314c1e5f90fa1bfac8b86a8390d37d87028cdec34211a3dbd6a3c2c56560edebdd70914246255ab1c77fa68e61046acaef3d507ff860ec86fae80cc636b862dea7cbb0"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xc) r2 = signalfd(r0, &(0x7f0000000000)={[0x8000000000000000]}, 0x8) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000040)=[0x2a, 0x7]) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x10, 0x7, 0x5169, 0x1000, {{0x2f, 0x4, 0x2, 0x2d, 0xbc, 0x67, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x1b, 0x4f, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}, @loopback]}, @end, @rr={0x7, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @end, @timestamp_addr={0x44, 0x54, 0x44, 0x1, 0x0, [{@rand_addr=0x64010102, 0x4}, {@private=0xa010101, 0x7129}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3e}}, {@local, 0x40}, {@remote, 0x1}, {@local, 0x401}, {@local, 0x65ac}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x1c, 0x3, 0xd, [{@multicast2, 0x4}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1}]}, @rr={0x7, 0xf, 0xc1, [@local, @rand_addr=0x64010102, @empty]}]}}}}}) sendmsg$sock(r2, &(0x7f0000000200)={&(0x7f0000000180)=@ll={0x11, 0x2, r5, 0x1, 0x7f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000380)="1165e84e85c53f2f009d23424c40af0ab1d5b1b932af616d489258aef0b75e40847eb15a4e6e9e195e0d15fe496445d521e5fd128ea680ce1273085f292c11fc2bfa2ad10a7610fa1c040d9e44e6f958d94edca19cc6d95f59aa8aa217baed88aa04183d91527b3dca8d991d37c0e73ff1bb26179001d81dbb99b6bafd9b6ae5921851d82c57067bddc30202574af801ae6c6352bcef6dd98553a364380918fefaf95f7e49165d8ea7", 0xa9}, {&(0x7f0000000440)="00d133716d326e90a0f25f21847fdab5ae72b065231875e2eb794fbf648f2ded2ee4386b3bf828ce4efa0bb445289f29e5a55584b4fe1c10bf8333966bf0c6579e368995057241cc30e72e21d82948058360e116ba9138e4a87f5373d92d9415471c66136d9e0ece00849d098f9f13ae551b86049a26fd98e9ce96c6d5a7b4d7fe604f7c36f7a059e83806aa78f423627eab5162b6b758d170cf73aea24221c7b667d85e873cac87de308f", 0xab}, {&(0x7f0000000540)="7b78ba79dffdcbced0dc7c55f97f4b2ce6ec6385e1e13b908e02f328e81844b37e1a61b9401f6cb85ee07a19fa532e5838b296ce844b18f97d6e81004c7b978d1384a1bc33017de40e2864f0254dd57ca3989784af22bd23d2335be4ba0c520a214f3f748876112c01270548ff1e15ffa335626cb676ca8d212201306cfd5ae92c9e0d7805ec83662bb17c95de2b6979fa701461a9e83c862a005b8135787a17cbb4b529178bfd32e9fadc8d35352dbf173467a24e9c7090", 0xb8}], 0x3}, 0x90) 3.63789111s ago: executing program 2 (id=1484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x3, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x8, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x0, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x80000238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x8, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x2, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@ipv4_delroute={0x1c, 0x18, 0x901, 0x4, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, 0xff, 0x3, 0xff}}, 0x1c}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x1d, &(0x7f0000000680)=0x1, 0x4) (async) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0xfffffffffffff8f1, 0x8100) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x6, 0x8081}, 0x8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xb, 0x2, 0x9, 0x1000}, &(0x7f0000000940)=0x98) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000460900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x3}]}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x303}, "bb86d2a5f51c5b87", "5b04bb4a6c7847feef21cdc744cbc06f", "82b5a272", "3a6a17e0f11de5a5"}, 0x28) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) r8 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000240)={0x40000004}) (async) epoll_pwait(r8, &(0x7f0000000040)=[{}], 0x1, 0x4, 0x0, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 3.430148954s ago: executing program 3 (id=1485): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1, 0x1000}) (async) socket$inet6_sctp(0xa, 0x3, 0x84) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r2 = socket(0x1, 0xa, 0x4ad3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0xfffffffffffffffe, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x0, 0x5}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000001280)={&(0x7f0000000280)=[0x80000001, 0x5, 0x9, 0xa0, 0x1, 0x40, 0x8, 0x7, 0x1, 0x2, 0x4, 0x8000, 0x0, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x9, 0x8, 0x8001, 0x3ff, 0xd3c, 0x2, 0x5, 0x9, 0x3, 0x3, 0x8, 0x1, 0x5, 0xa, 0x6, 0x2, 0x6, 0x2, 0x10, 0xf, 0x7, 0x3ff, 0xb852, 0x9e, 0x8001, 0x9, 0x9, 0x5, 0x10001, 0x9, 0x0, 0x6, 0x7fffffff, 0xd, 0x9, 0xffff, 0x2, 0x0, 0xff00, 0x8, 0x8001, 0xff, 0xa45, 0x7, 0x81, 0xf, 0x8, 0x6, 0xc, 0x1, 0xffffff68, 0x4, 0x3, 0x923b, 0x7, 0x4, 0x5, 0x4, 0x10000, 0x3ff, 0x83, 0x0, 0xff, 0xfffeffff, 0x401, 0x200, 0x0, 0x1, 0x9, 0x7, 0x6, 0x9, 0x6, 0xfffffffd, 0x3, 0x1, 0x4, 0x2, 0x0, 0x1, 0x8, 0x80000000, 0xfffffffc, 0x100, 0x6, 0x4, 0xd, 0x4, 0x6, 0x5, 0x2, 0x1, 0x80, 0x5, 0xffff, 0xd, 0x200, 0x5, 0x7, 0x10f8cc08, 0x7, 0x2, 0x7, 0x10, 0xffffffff, 0x4, 0x5, 0x0, 0x7, 0xfd51, 0x7ff, 0x7fffffff, 0xa, 0x7, 0x3, 0x8, 0x8b3, 0x4, 0x5, 0x5, 0x8, 0x0, 0xffffffff, 0xfffffe8f, 0x1, 0x2, 0xdc1, 0x4, 0x5, 0x1, 0x4, 0xffff, 0x382, 0x3, 0x7e6, 0x7, 0x1, 0x9, 0x3, 0xce5c, 0x4, 0x9, 0x273d, 0xc0000000, 0x6, 0x45, 0x3, 0x3192, 0x3, 0x9, 0x4, 0x4, 0x3, 0x3, 0xb, 0x0, 0xb08, 0x0, 0x9, 0xf, 0x2, 0x800, 0xffffff14, 0x446c1f4a, 0xa, 0x4, 0x8, 0x400, 0x8, 0xffff, 0x9, 0x4a, 0x0, 0x9, 0x2, 0x422, 0x3, 0x2, 0x4, 0xe4, 0xc0000000, 0x80, 0x7, 0x4aa, 0x9c, 0x8001, 0x28d3, 0x7f, 0x6, 0x5, 0x0, 0x2, 0x1, 0x7, 0x80000000, 0x50, 0x5, 0x9, 0x6, 0x9, 0x1, 0x3, 0x800, 0x1e000000, 0x0, 0x5, 0xffff5e2a, 0x6, 0x6, 0x8, 0x5, 0x4, 0x0, 0xff, 0x8, 0x0, 0x5, 0x1, 0xfffffff7, 0x7, 0x4, 0x9, 0x3, 0x4, 0x6b4f, 0x7, 0x7, 0x7, 0x4, 0x1ff, 0x5, 0x6, 0xfff, 0x400, 0x2, 0x100, 0x43ed, 0x4, 0x2, 0x6, 0x1e7585cc, 0x7, 0x101, 0x358, 0x1, 0x3000000, 0x7f, 0x8, 0x7, 0x5, 0xa5, 0x8, 0xfffffffa, 0x90000, 0x5, 0x4, 0x7, 0x7, 0xffff, 0x40, 0xff, 0x1, 0xb, 0x8, 0x2, 0xffff9e4d, 0x9, 0x5, 0x7ff, 0x6, 0x3, 0x9, 0x8000, 0x9254, 0x8, 0x1, 0x2, 0x9, 0x6, 0xe926, 0x3, 0xfffffffa, 0x1, 0x10001, 0xc4, 0x5, 0x3, 0xbaa0, 0x3, 0xfd, 0x3, 0xf0c1, 0x1, 0x8, 0xfffffffe, 0x3, 0xe8b, 0x2, 0x80000, 0xdd0, 0x81, 0x7fffffff, 0x6, 0x1b, 0x816, 0x7, 0x3, 0x400, 0x8, 0x4, 0x7, 0x1ff0, 0x1000, 0x2, 0x3, 0x4, 0xffff882a, 0xe, 0x7, 0xca, 0xfff, 0x9abb, 0xffffffff, 0x7, 0x7, 0x928c, 0x800, 0x77d9, 0x6, 0x5, 0x7fff, 0x7, 0x0, 0x101, 0x8, 0xffffffc1, 0x9e, 0x10, 0x0, 0xad, 0x1, 0x8, 0x5, 0x81, 0xfffffffc, 0x8, 0x6, 0x12, 0x2, 0xffffffff, 0x5, 0x9, 0x4fd, 0xc, 0x6f584cc5, 0x8, 0xffffffff, 0x7, 0x400, 0x9, 0x8001, 0xc, 0x0, 0x1, 0x47, 0x3, 0x100, 0xe6, 0xe, 0x4, 0x100, 0x73e, 0x8001, 0xffff, 0x8, 0x1, 0x2, 0x0, 0x10001, 0xa75, 0x1, 0x6, 0x3e9, 0x7, 0x2, 0xffffffff, 0x2, 0x3, 0x1, 0x7, 0x81, 0x3, 0xb3, 0x101, 0x14a, 0xe8500000, 0x0, 0x7, 0x8, 0x47, 0x10001, 0x5, 0x6080, 0x9, 0x5, 0x8, 0xd, 0xa, 0xfffffff9, 0x400, 0x6, 0x5, 0x7, 0x8c3, 0x9, 0x82e, 0xfff, 0x8, 0x5, 0x9, 0x613d, 0x9, 0x0, 0x0, 0x3, 0xe, 0x9, 0x10001, 0x1, 0x2, 0x80000000, 0x5, 0x4, 0x6, 0xffffffff, 0x4, 0xad8, 0xb5, 0xa6, 0xfffffff7, 0x6, 0x9, 0x0, 0x8, 0x1ff, 0x9, 0xd5, 0x6, 0x8000, 0x8, 0x47, 0xa2e, 0x7, 0x4, 0x1, 0x5, 0x2d, 0x2, 0xdf9, 0x2, 0x6, 0x3, 0x0, 0x6, 0xffc00000, 0x6, 0x4, 0x8, 0x80000000, 0x4, 0x1, 0x63a, 0x91, 0x9, 0x7, 0x2, 0x8, 0x1, 0x2, 0x0, 0x3, 0xffffff6b, 0x6, 0x80000000, 0xf40, 0x2, 0x7fffffff, 0x4, 0xd, 0x1000, 0xffffff33, 0xfffffffd, 0xd, 0x2, 0x8, 0x6, 0x0, 0x55, 0x2, 0xfffffff8, 0x401, 0x80, 0x3, 0x5, 0xa, 0xd80, 0x7f, 0x80000001, 0xfffffffc, 0x100000, 0x3cd, 0x1, 0x1, 0xd1, 0x8001, 0x3, 0x7, 0x7, 0x17a3df3, 0x39f, 0x0, 0x0, 0xb0c, 0x8, 0x3ff, 0xf0b3, 0x2, 0x1, 0x6, 0x8, 0x9, 0x2, 0x0, 0x7, 0x7, 0x1, 0x6de8fa9f, 0x8, 0x8, 0x8, 0x43, 0x40, 0x2, 0x4, 0xffff, 0x2, 0xfff, 0x1, 0x4, 0x5, 0xc01, 0x7, 0x3, 0x8, 0x4, 0xffff, 0x9, 0x8, 0x4, 0xc, 0xffff0000, 0x5, 0x100, 0x80000000, 0x3, 0x8001, 0x8, 0x9, 0xe, 0x3, 0x5, 0x0, 0x4, 0x6, 0xbf, 0x4, 0x80000000, 0xffffffff, 0x0, 0x8, 0x7, 0x3ff, 0x9, 0xffff, 0x63, 0xdbef, 0x8, 0x2, 0x101, 0xc, 0x9, 0x3, 0xc0e, 0x9, 0x8, 0x3, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0xff, 0x7fff, 0x3, 0x8, 0x6b2d, 0xd77, 0x6, 0x2, 0x4, 0x5, 0x9, 0x8, 0x6, 0x6, 0x1, 0x2, 0x200, 0x3, 0x1, 0x6, 0x4, 0x0, 0x1a2, 0x6, 0xc, 0x3, 0x7, 0x5, 0xe, 0xfffffff7, 0x8, 0xa45, 0x0, 0xfffffffa, 0x7, 0x800, 0x10, 0x2, 0xb, 0x2, 0xc, 0x16, 0x3, 0x6, 0x0, 0x3ff, 0x10, 0xddda, 0x17400, 0x8, 0x9, 0x5, 0x8, 0xf85, 0x1, 0xb, 0x3, 0x80000001, 0x7, 0xfd6, 0x2, 0x80000000, 0xd, 0x4, 0x112, 0x6, 0x6, 0x2, 0xfff, 0x8, 0x10b, 0x80000001, 0x2, 0x3, 0xa, 0x3, 0xff, 0x8, 0x6, 0x7, 0x7, 0x66e, 0x7, 0x2, 0x5e7, 0x1, 0x4, 0x4, 0x1, 0x47d, 0x6, 0x7, 0x1, 0x3, 0x4ea, 0x2, 0x2, 0x1, 0x80000000, 0xffff7fff, 0x9, 0x7f, 0x200, 0x8, 0xd, 0x7, 0x401, 0xffffff81, 0x3, 0x5, 0xef63, 0x1b, 0x9, 0x9, 0x7, 0x80000000, 0x10, 0x156b07ea, 0x4, 0x5, 0x8001, 0x7, 0x5, 0xc00, 0x1000, 0x3, 0x2, 0x5, 0x0, 0x8, 0x1, 0x0, 0x400, 0x3, 0xb, 0xaffd, 0x1ff, 0x100, 0x9, 0x7ff, 0x68, 0x6, 0x5, 0x70, 0xf2f, 0x1, 0x7, 0x8, 0xfaa, 0x1, 0x740e, 0x4, 0x3, 0x8, 0x4000000, 0x5, 0x6, 0x1, 0x9, 0x1, 0x0, 0xf4c, 0x1ff, 0x1f4, 0x0, 0x7f, 0x6, 0xffff15fa, 0x1, 0x9, 0x6, 0x32, 0x4, 0x3, 0xeba5, 0x40, 0x0, 0x8000, 0x41c9, 0x4f, 0xd, 0x0, 0x7, 0x2, 0x4, 0x5, 0xca3f, 0x14, 0x8, 0x4, 0x2, 0x4, 0xad, 0x2, 0x3901, 0xa3e0, 0x0, 0x4, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0xa5b, 0x0, 0x101, 0x1, 0x7, 0x0, 0xd, 0x561, 0x9, 0x4, 0xfffffff8, 0xe0d, 0x7ff, 0x6, 0xa6d, 0x369e, 0xdee, 0x4, 0x2, 0xd6f, 0x1, 0x1000, 0x7ff, 0x5, 0x3, 0x6, 0xb8a7, 0x9, 0x7ff, 0x6, 0x2, 0xfff, 0x9, 0x8, 0x1, 0x80000000, 0x9, 0x3, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x8, 0x0, 0x2, 0xdb91, 0xffffffb4, 0xf4, 0x7fffffff, 0xfffffff7, 0xd5d, 0x0, 0x7, 0x572, 0x2, 0x200, 0x9, 0x80, 0x9, 0x3, 0x0, 0x7, 0x6, 0x101, 0x8c53, 0x200, 0xfffffffa, 0x4, 0x1ff, 0x1000, 0xffffff7f, 0x8, 0x1, 0x71c, 0x200, 0x9, 0x1b7ed0cb, 0x2, 0x9, 0x2, 0xa4, 0x3, 0x1, 0x7dc, 0x8, 0x6, 0x61fa, 0x3ff, 0x8, 0x80000001, 0x3, 0xfd, 0x5, 0x80, 0x0, 0x40, 0x6eaa, 0x4, 0x1, 0x7, 0xad, 0xf, 0xd, 0x4, 0xb, 0x1, 0x0, 0x8, 0x4, 0x800, 0x8, 0x0, 0x1, 0x7, 0x37, 0x1000, 0x8, 0x7, 0x9, 0x8, 0x3ff, 0x4, 0xfffffffd, 0x5, 0x7, 0x3, 0x1, 0xc3b, 0x7, 0x1, 0xc0c, 0x9, 0x832, 0x10, 0x4, 0x3, 0xf4, 0xfffffffc, 0x1, 0x81, 0x1, 0x3, 0x9, 0x8, 0xab, 0x6, 0x0, 0x3f, 0x8, 0x7ff, 0x0, 0x1, 0x2, 0xa, 0x4, 0xfff, 0x9, 0x0, 0xfffffffa, 0x7, 0x1000, 0x5, 0x3, 0x9, 0x7, 0x7, 0x9, 0x5, 0x5, 0x101, 0x401, 0xfaf4, 0x6, 0x3ff, 0x40, 0x8, 0x327, 0x0, 0x17, 0xffffffff, 0x2, 0x7ff, 0x1, 0x7f, 0xd, 0x8, 0x0, 0x3ff, 0x2, 0x0, 0x9, 0xfde, 0x5, 0x4, 0xffffe7aa, 0x1, 0x3, 0x5, 0x7], 0x4, 0x400, 0x6}) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000012c0)={0x0, 0xffff, 0xa, [0x200, 0x7f, 0xe, 0x800, 0x1ff, 0x6, 0xfff2, 0xa, 0xa0fc, 0xa5e]}, &(0x7f0000001300)=0x1c) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) (async) shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x78, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6558}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xf, 0x7, 0x1, 0x0, "aa309654e6a6e8d203ebef"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000001500)=@req={0x28, &(0x7f00000014c0)={'ip6erspan0\x00', @ifru_names='wlan1\x00'}}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000001540)={'dvmrp0\x00', {0x2, 0x4e24, @multicast1}}) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001580)={{0x8080000, 0x1f000, 0xf, 0x5, 0xa7, 0x2, 0x0, 0x21, 0x7, 0xb, 0x6, 0x2}, {0x9000, 0xffff1000, 0xa, 0x0, 0x6, 0x81, 0x40, 0x3, 0xf, 0x7, 0x0, 0x9}, {0x1000, 0x1000, 0xf, 0x1, 0xb1, 0x8, 0x9, 0x3, 0x3, 0x0, 0x9e, 0x81}, {0xeeee8000, 0x8000, 0x3, 0xc, 0x3, 0x20, 0x6, 0x4, 0x8, 0x9, 0x6, 0x7}, {0xdddd1000, 0x9000, 0xf, 0x18, 0x8, 0x3, 0x6, 0x6, 0x3, 0xb, 0x7, 0xd}, {0x70000, 0x4ccc77ff, 0x4, 0x8, 0x8, 0x3c, 0x7, 0x6, 0x8, 0x10, 0xf9, 0x8}, {0x41000, 0x30000, 0xc, 0x5, 0x4, 0x0, 0x3, 0x4, 0x5, 0x9, 0x5, 0x1}, {0xc000, 0x5000, 0x4, 0xa, 0x3, 0xff, 0xff, 0xf8, 0x3, 0x3, 0xa, 0x4}, {0xeeee8000, 0x40}, {0x25000, 0x6}, 0x40000004, 0x0, 0x200000, 0x40640, 0x7f, 0x6b00, 0x9000, [0x0, 0x31a, 0x2, 0x1]}) mkdir(&(0x7f00000016c0)='./file0\x00', 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x67}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x40) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000001c40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0xdd4e025edea0eb5d}, 0xc, &(0x7f0000001c00)={&(0x7f0000001880)={0x370, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x401}}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8001}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}]}, @NFQA_CT={0x28, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, @NFQA_EXP={0x168, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x11c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x108}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, @NFQA_PAYLOAD={0x72, 0xa, "5ea27052a9c3224d74c26f2f2f4736595db731e27403dbefd33fcc9f06e2026e9ecef8f6fa039a48649b2ce25253778e6fd028f9ecedfcb35039108e059203d5b08a08e83150085f91399e11c711026b6b8c7be2d5282efd32defaf23dc29e0565d14a2d32c0aa75e7f43d28bfdc"}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8b}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2}}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_PAYLOAD={0xe9, 0xa, "058cdbcb6b5100fb3e608e2ddd85a2e035748dc643399a241f36aad28691c4dc60ea17cce6b4851b33498513c72042665b83868ef7407b20be539976668a3fd0f8bcea5cc8e56bbf9eb4ef2a71434a98152160981d11c058784d23d149506060955a68e50fe98306ee6c9913ff057c9cb7a762f816d3a87f2487921bad9a7446e8b8df0a1395a4745868a2446d5c0b3f6e34af0146ae91b757fc0aeb09ed9e45168d8d57a9ba593df06bc8aaff87e206f172b4072dd7083df370145e9e2b8c5b2228fa0e9aa9501c6a37cc60a454d795278e8d781b380cf81393b12de151811691f466ddda"}]}, 0x370}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000001c80)={0x31, 0x6, 0x0, {0x2, 0x3, 0x8, 0x0, 'nl80211\x00'}}, 0x31) (async) r5 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002780)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001cc0)="f1ca2d678c4d2dfb2eb92586590a4e7ae017cb335103962bfd0a9112702d0041443fe186db067c29384df8d915d354b8", 0x30}, {&(0x7f0000001d00)="5ec066f0037c12bc76a7a141a44afb29b4bd367ed755e4dbddddccfbf6fee47fd8bfd5d4fe748f7eede60b3059d417a646336926b622e39c873d099eda274d70da8bc914bf29ca9c0638842ac97115cf0d015ffe17cd4e664956ff6da66b2e9d4bd298c2d6f213471b5f4c8b2220fe094a6e04", 0x73}, {&(0x7f0000001d80)="17eb471d2e63c8813f0727702935b46e31ee18eba73a5791028617dea9152393d925d0c502190f9d133dec05b99231bf62728abbd027e25080abca9cded4297d8b148bd558add0f7d7f90c2f38411365446f71d10ad5136290e48415fafa5030250990e41da688e0b868136c1929f86680b920c4ba997c5865b9ac68c5905c6f37a5b532a6d8d3c8d504bee6c51d4810ecd2130c5f59687f701fd9b944ed7ffbbd8ddd34fa3bb70bd43bf9ac7920daa03a509a7b91bb26", 0xb7}, {&(0x7f0000001e40)="17ede0356c1b8550d665342e02a3257706dc8dd20bc60c67a375a9a3b2d92dca0d92332b0cd5fd721c2bbf1646770c", 0x2f}], 0x4, &(0x7f0000001ec0)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e76}], 0x48, 0x40010}, {0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001f40)="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", 0xfc}, {&(0x7f0000002040)="8e05bc539b8d8c0ba3b42b8dd255cfb886b2b4c8eef9ad33d6621f5b39e4add72ca307077e4c72b036252eaec4ca9041371e707224867f41a8a43aa8513dbd6bd669391e9412ceb72971a252cdeb71c6e93afcc8ef7ebfdf4e91aba2d75c87fc6f38836b518354ace414c14da5ae780f825eeecea0de744c25fdf3fbb98b901a8c5ab0f9a152377ebd4f35fb7d36b821705fdb33265c4d3864b966a5c1276bcb6e7bc59804d13ccb10e98429fd35acda87dd", 0xb2}, {&(0x7f0000002100)="d1d9d32e070be5ea4ca9e171d3dcd04de585643e476501f6e0de47abe17b6a1c62ca66dd3a3e484642921829a1c8f72bd2f2dcd033e063ad2646cf61023266ab6fa714f9246f367d996dc16c4f32ce3da1bb6162c31de2c6aa8dd9e8fb2042a372f3c0", 0x63}, {&(0x7f0000002180)="5105d8315d8a9278c130916f56d7893c4d254676e103387905799b7832c67c9c3a38dac04a80404ad365ff283ee35bb801e22ff7c4b39986dac49485290ea09db1ef1c4c6d57cd8c6e3918b648d75c59b5c4e5746bdaac", 0x57}, {&(0x7f0000002200)="7d8fb0687d0a7ddd88e87fb2a61c2bf8e21a721c9fb2e5e68c9f236197a7a7680cf086001213d7fe3f924966226312d6d6481562c7889cbc9460efe0a8de3101097bf9fa5b081bc262a2e8357d5842f8addcc7291683aa704b46d2d20801a44cfb7cf34ab919d11c397c14a553f34ce1fc19b3d6ab025984d96ff9787d362862ed0ec8fe694c91fa8db3d3d3855c735b61f6263f27a7a87245e14737bce2f78fe746866efe", 0xa5}], 0x5, &(0x7f0000002340)=[@iv={0x28, 0x117, 0x2, 0x11, "e51b72cdda64775a36ace7dcfc58e58a15"}, @op={0x18, 0x117, 0x3, 0x1}], 0x40, 0x20028000}, {0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002380)="9628bd3dfb7f2735dc142d501334a6c6f483f24ca1dce186ca6fed2268509f28de3a2d6f06bfd5d3200c967a67e64b8daaf7b8929972bda10ee2b49916182dc5d6972bcf486eca209e231940b27724c21656480423a4f7768c9ab53cba36c319f7a365e1c26f057b8363eb539195b696a60d6a60f84490cf28641330b556b55f0ebca9adca3a722447244bf9216cfa01c51c113c360066d32d8201a2f7837a3a427fb59707d45bec74808719a92f347e6c3c51c380efa5de743e153afa9eb81eb2839349c7a7673bb107d0c0443434242d4a0c92f41c26521a138c30dd154c85ced300f7", 0xe4}], 0x1, &(0x7f00000024c0)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0xcf5}, @iv={0x40, 0x117, 0x2, 0x2b, "dd8d17099a8ad96e972ec5b01f801bfb4b12027a20a75309065e3bd7694193840ee26af2cf9609891265b9"}], 0x70, 0x4000000}, {0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002540)="d9ce368b3348381d606598cdc60cd73c", 0x10}, {&(0x7f0000002580)="44ded81053c1d988e72e348e4af44273d264aa08b84a60e8f77f40dbb6071dcf582b331a68ab1013747ad0405fd2ba955454fe0fdd5d490fd1246c47de8ef300c32f456db06b7c422eb9ae45071edc18398636b2ba24cb634f44db3bde16a17701f7c8d523c76bd52a6aaee7097a4c5656b3d69a1ec10ed8925df0f1459745f5d80d57e1de8586536f16447698b37aba9f55ac6a8f9db8094ac86e21fb5d3bb0f57dde3beff95a1cb8d82c5908963fe8a41c30ae4934c5e5ad668b4858a10096cd79078e88e98c6206f00417638943ba29295363f353a158bf6e647146e67ab1aed180b8b17850", 0xe7}, {&(0x7f0000002680)="52385604088a64bd01bc409be5f4b88cf50db64686b512878c2dc332f650d075741511f3ed2f701e8f93096c6d309360c18e73e11d00b0cee3d13e955f8d390ab3e7a1ab8a0f1bf90715a0331bfd36dcca6f683e0ce7045b14d4e2fd69df8a380ab7d58985ac925ca1030fbf4d31dc44d1", 0x71}], 0x3, &(0x7f0000002740)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x4000004}], 0x4, 0x40) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000028c0), r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000002a40)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002900)={0xf4, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffdd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff1}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7e}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x508}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x24) syz_io_uring_setup(0x110f, &(0x7f0000002a80)={0x0, 0xc1eb, 0x1000, 0x2, 0x32d, 0x0, r3}, &(0x7f0000002b00), &(0x7f0000002b40)) landlock_create_ruleset(&(0x7f0000002b80)={0x1c1b, 0x2}, 0x18, 0x2) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002c00), r2) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4008850) 3.34288235s ago: executing program 2 (id=1486): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202000279bc56a6944edf9c442b95120f2854dcd3c26f3c1adcac465797c8d9d7e403af9988c48e265616085c7cadc276086b0352a1a7"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f00000001c0)=[{0x0, 0x2d}, {&(0x7f0000000080)=""/41, 0xd}], 0x2) add_key(&(0x7f00000002c0)='logon\x00', 0x0, &(0x7f0000000440)="2022a76aa2740d1b43a96453bd718d0c12844726586bc1c0d000fede1ab33ff3b42cea22cb4b195ca9c2e9e82b51433048ccf8e08a2ab9172ca8909fff976513ff667fb514bf4231904e68f0d3551ae6a243a579dcc4026419f74afd9026a40b65ca79591924bd8e", 0x68, 0xfffffffffffffff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x40000000000005) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01cabc2e469b3b0121f83500000200c4a2e0f3db0f31d2c74424001e09000008442402e4000000654c0fc72ef3410fc777d36436440f0966b8502466ef", 0x44}], 0x1, 0x11, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xff000000], [], 'veth0_macvtap\x00', 'xfrm0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00', {0xff}}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r7, @ANYBLOB='\x00'/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) 3.275586673s ago: executing program 3 (id=1487): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x100000d6}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="f78d6c3bb8d23594655015697b5eb8a3", 0x10}], 0x1, 0x0, 0x0, 0x20000804}], 0x1, 0x2ede8ec33678cf20) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) io_uring_enter(r0, 0x623, 0x4c1, 0x4, 0x0, 0x0) 3.010054208s ago: executing program 3 (id=1488): syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01"], 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x8001], [{0xffffffff, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x800000, 0x7}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0) (async) r1 = syz_mount_image$fuse(0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x7, &(0x7f0000000340)=[{0x200, 0x9, 0x9}, {0x1, 0x7, 0x8, 0x1}, {0x6, 0x0, 0x5, 0x9}, {0xc090, 0x5, 0xc4, 0x7}, {0xec6e, 0x4, 0x1, 0x9}, {0x5, 0x4, 0xf9, 0x10d4d}, {0x800, 0x40, 0x9, 0x1}]}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0) (async) statx(r1, &(0x7f0000000540)='./file0\x00', 0x100, 0x100, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, r4, &(0x7f0000000680)='./file0\x00') (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0xf4, 0x3d, 0xe6, 0x10, 0x93a, 0x260e, 0x4353, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x10, 0x9, "", [{{0x9, 0x4, 0xc8, 0x7, 0x0, 0x93, 0x0, 0xa0, 0x40}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x8, 0x70bd2c, 0x25dfdbff, {0x80, 0x20, 0x20, 0x8, 0x0, 0x1, 0x0, 0x1, 0x800}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) (async) r5 = open$dir(&(0x7f0000000440)='./file0\x00', 0x200, 0x24) getdents(r5, &(0x7f00000006c0)=""/197, 0xc5) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001500010000000000000000000a00000004"], 0x44}}, 0x94) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], 0x1, 0x400, 0x0, 0xffffffffffffffff}) ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f00000001c0)) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r9, 0x0, 0x10001, 0x0, 0x6, 0x294c9c, 0x231d88}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r9, 0x3ba0, &(0x7f0000000280)={0x48, 0x6, r7, 0x0, r10}) 2.808702633s ago: executing program 3 (id=1489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r4, 0x1}}, 0x18) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) close(r5) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000400)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0x2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0x9, 0x7, 0x0, 0x2, 0x10000101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x80000008, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0xffffffff, 0x4, 0x5, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x9, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x672, 0x401, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x0, 0x5, 0x20200, 0xed5, 0xafab, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x0, 0x2, 0x7, 0x7, 0x101, 0x2d5421e5, 0x7, 0x10000, 0xfffffffc, 0xed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x2, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xffff0327, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xcc3f, 0x3, 0xcd34, 0x9, 0x8001, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x1, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 2.763800608s ago: executing program 0 (id=1490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)="6504ddf83bc8ea7d178d7fae63dcf5f7f70ce32b0ede4b29e9b908e69720689292bf83144e1be18162e56962a5a37b4cf25946cc9275b0b47892b67cedc5a22f5b6f141b9fc7a22f30f3c2309c8123337cfc88f7ecace2b720d2c41a4d", 0x5d, 0x8804, 0x0, 0x0) r3 = dup2(r0, r1) close_range(r3, 0xffffffffffffffff, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x20000000}) 2.681519584s ago: executing program 0 (id=1491): syz_usb_connect(0x4, 0x280, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xa, 0x4, 0x1, 0x20}, 0x55, &(0x7f0000000480)={0x5, 0xf, 0x55, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x3, 0xe17d}, @generic={0x1a, 0x10, 0x3, "9ac881a3ae04fcad2a493f9622e11d61a812d114b4f651"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x7, 0x9794}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "bf8b586cc689ad817bc4916a6e077510"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "437154b0d67c8c9425d5652d7c92982c"}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x436}}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000540)=[0x0, 0x0], 0x2, 0x800}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x9, 0xcdc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0), 0x275f3b0249a66392}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) syz_usb_connect(0x4, 0x280, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xa, 0x4, 0x1, 0x20}, 0x55, &(0x7f0000000480)={0x5, 0xf, 0x55, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x3, 0xe17d}, @generic={0x1a, 0x10, 0x3, "9ac881a3ae04fcad2a493f9622e11d61a812d114b4f651"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x7, 0x9794}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "bf8b586cc689ad817bc4916a6e077510"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "437154b0d67c8c9425d5652d7c92982c"}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x436}}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000540)=[0x0, 0x0], 0x2, 0x800}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x9, 0xcdc}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0), 0x275f3b0249a66392}, 0x20) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) (async) 2.554017865s ago: executing program 4 (id=1492): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) (async) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={0x0, 0xe, 0x1, 'p'}, 0x9) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x4, 0x5, 0x20000}, 0x10}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d146"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 2.41424463s ago: executing program 4 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000580)=0x10) io_uring_setup(0x7c43, &(0x7f0000000000)={0x0, 0xaad1, 0x4, 0x0, 0x3bd}) r2 = io_uring_setup(0x4161, &(0x7f0000000100)={0x0, 0xe4e4, 0x1000, 0x3, 0x17f}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bdcb82264b222c557000fbdbdf250b0000000c0005800700010069620000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) io_uring_enter(r2, 0x627, 0x4d1, 0x63, 0x0, 0x47) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) socket(0x2b, 0x80801, 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000140)={0x2, 0x0, 0x0, r9}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r11 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000080)={0x10000000}) 2.157350236s ago: executing program 1 (id=1494): memfd_create(&(0x7f00000002c0)='R\x17\bK\x85X\xa3\x1b\xc7p\x13\x10\xa8F\xb4.\'\x19\x8b\xe2\xd8\xf8\xa21{.;0\x17\x11\n\x8d\xfa\xa8\x05\x1b\xdd*\xf8\xf3_\x1a\xd1F\x16\x88N#\xc2\xb1\x1c\x05\x00\x00\x00\x00\x00\x00\a!\xcd\x84;\x13\x9d\xe7\x03\xe6\x1d8\x9f\xa8A', 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x80000701) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000340)=""/150, &(0x7f0000000100)="09b29da8b3fd8a0807f36304036ab7938982d70f7ebd782d9cbd1ec276f6f7b2e734d6", &(0x7f0000000180)="03", 0x1, r4}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) write$tun(r5, &(0x7f0000000040)=ANY=[], 0xfdef) 2.093838126s ago: executing program 3 (id=1495): syz_usb_connect(0x0, 0x10b, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x0) (async) r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffc, 0x48b03) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000780)={0x0, 0x29b, 0x2, '\x00', &(0x7f0000000740)=0x6}) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000780)={0x0, 0x29b, 0x2, '\x00', &(0x7f0000000740)=0x6}) socket(0xa, 0x5, 0x0) (async) r4 = socket(0xa, 0x5, 0x0) r5 = socket(0x2, 0x805, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003ac0)=@newsa={0x184, 0x10, 0x713, 0x70bd26, 0x25dfdbff, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x20, 0x0, 0x3b, 0x0, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x100, 0x2, 0x1000000000000006}, {0x4, 0x7fffffffffffffff}, {0xfffffffd}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x200}}, @algo_auth={0x48, 0x1, {{'sha384-ce\x00'}}}]}, 0xfffffffffffffeac}, 0x1, 0x0, 0x0, 0x880}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x9, 0x5, 0x3, 0x0, 0x7, 0x3, 0x9, r8}}], 0x30}, 0x2400c005) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x1200000000000) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x1200000000000) r9 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0}) syz_usb_control_io(r9, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x40, 0xc, 0x7d, {0x7d, 0x24, "2ffcdac6b5865382b8177589f0526a339d1037ea965312e10302764a325fbc6bd01cc781fd07f8caf9f7ffe05dfb38ce63ea4046841379911ff531dc2e544d539ae9dbf4bc99a1e852e717a76eaa16883ce48d1936cd3f0375787815599c7ad571e71d0590e4b8b62b3762e1d76b84c18383e678710df321e99f35"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000000580)={0x0, 0xf, 0x76, {0x5, 0xf, 0x76, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x9d, 0x6, 0x1, 0xf00, 0x3, [0x3f0f, 0x3f30, 0x7f8000, 0x3f00, 0xc0, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "967fb922640725629b2e629021d1f2e9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x4, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x6b, 0x8, 0x0, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x5, 0xf00, 0x9, [0xf, 0x1fe3f00, 0xc0cf, 0xff0000, 0xffc0cf, 0xc000]}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3d, 0x18, 0x5, 0xc7, "68efa712", "71ce2b36"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x8, 0x5, 0x3, 0xf, 0x4}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x40, 0x9, 0x8f, "9a6c612c5900ff436ec61f826faeec0ddca7d49d96791e8a896979a9e21e2e78f1e16d0cd80c57a1505db84beb196d32ec2a1f1f6bc8fa8200692e154613c6b3b65bb3555b7a77027882d36283e55dc2633537cb7ae4d1d3bcf5c512e5717cd81f522751fed058c27c4a851cbbeee12815034999efc3aa1494e4397763b4fefbf2790bdb0525c811a2a4db8f3052e9"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x100, 0x2, [0xf0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x18}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "438c"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "4103"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xcf}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0xfc}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io(r9, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x40, 0xc, 0x7d, {0x7d, 0x24, "2ffcdac6b5865382b8177589f0526a339d1037ea965312e10302764a325fbc6bd01cc781fd07f8caf9f7ffe05dfb38ce63ea4046841379911ff531dc2e544d539ae9dbf4bc99a1e852e717a76eaa16883ce48d1936cd3f0375787815599c7ad571e71d0590e4b8b62b3762e1d76b84c18383e678710df321e99f35"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000000580)={0x0, 0xf, 0x76, {0x5, 0xf, 0x76, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x9d, 0x6, 0x1, 0xf00, 0x3, [0x3f0f, 0x3f30, 0x7f8000, 0x3f00, 0xc0, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "967fb922640725629b2e629021d1f2e9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x4, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x6b, 0x8, 0x0, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x5, 0xf00, 0x9, [0xf, 0x1fe3f00, 0xc0cf, 0xff0000, 0xffc0cf, 0xc000]}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3d, 0x18, 0x5, 0xc7, "68efa712", "71ce2b36"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x8, 0x5, 0x3, 0xf, 0x4}}}, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x40, 0x9, 0x8f, "9a6c612c5900ff436ec61f826faeec0ddca7d49d96791e8a896979a9e21e2e78f1e16d0cd80c57a1505db84beb196d32ec2a1f1f6bc8fa8200692e154613c6b3b65bb3555b7a77027882d36283e55dc2633537cb7ae4d1d3bcf5c512e5717cd81f522751fed058c27c4a851cbbeee12815034999efc3aa1494e4397763b4fefbf2790bdb0525c811a2a4db8f3052e9"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x100, 0x2, [0xf0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0x18}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "438c"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, "4103"}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xcf}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0xfc}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x4}}) r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x2321, 0x2}, 0x18, 0x3) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) (async) r11 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570646174652064656661756c7420757365723a1609"], 0x17, 0xfffffffffffffffd) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570646174652064656661756c7420757365723a1609"], 0x17, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)='H', 0x1}], 0x1) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.034472764s ago: executing program 1 (id=1496): r0 = memfd_secret(0x80000) readahead(r0, 0x7, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000880)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.962686243s ago: executing program 0 (id=1497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x211000, 0x8}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xdddd1000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0xc, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x6, 0xd, 0xf, '\x00', 0x1}, {0x9a, 0x0, 0x4, '\x00', 0xff}, {0xc4, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x9, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x22, '\x00', 0x5}, {0x30, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000000c0)={0x33, @local, 0x4e21, 0x2, 'lblc\x00', 0x4, 0xffff, 0x4b}, 0x2c) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0x50}}, 0x0) 1.314211674s ago: executing program 4 (id=1498): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x100000d6}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="f78d6c3bb8d23594655015697b5eb8a3", 0x10}], 0x1, 0x0, 0x0, 0x20000804}], 0x1, 0x2ede8ec33678cf20) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) io_uring_enter(r0, 0x623, 0x4c1, 0x4, 0x0, 0x0) 1.217748007s ago: executing program 4 (id=1499): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445", 0x76}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000ac0)}], 0x9, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 1.110965675s ago: executing program 0 (id=1500): socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="7a0af8ff752500003ca100000000000007010000f8ffffffb702000005000000bf130000000000008500000007000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651064d08dde084e0c7ffddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e13b2f9614d547244a22000000000000db453620ce72d75946c0b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef4a96279856076ff7ac9ba09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be22dda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed5441218c54d0b3e9f298392b3276fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314d7bb31ad9713d249499ed0d8a24abd57e052888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000eaffffffffffffff0000000000c9b46ff99a039eda74f74fe532dcfcd2c315b626fd768dbdf00fd532575767a7bca3968f50c20cfcaf91ab14b77f87e476bcf45fff904531adea62a517702743bf3492c8952c8e1fc37674de47d5881750516404c647fe02085b1a9603227411b17b6c7bc84fdfa0cfce589550df8faeeae5ca5024b374da260be559a741d22370373392ed74a7d1aff96a5b59775237f50c6bd8e0c4a7666be5962cd0931845e659a03a48fe85d370d9b6b755a2f66989da880c899d4d1c6757be6baffdce49b8c81f43d933549289dd475e39f399f6822a111ed8142b5dd2c01a15c949d86bd93b580800"/798], &(0x7f0000000100)='GPL\x00', 0xffffff14, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 0 (id=1501): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x0, 0x200}, 0x4, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x10000000, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r4}, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000500)={0x50, 0xcd9b, 0x1d, {0x1000, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x407, {0x8, 0xfffb, 0xeb4d, 0xf7f3}}}) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xd60b, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = syz_io_uring_setup(0x1238, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 851.630:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f72ce39c799 code=0x7ffc0000 [ 396.966356][ T30] audit: type=1326 audit(1773679851.630:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72ce39c799 code=0x7ffc0000 [ 396.989055][ T30] audit: type=1326 audit(1773679851.630:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.4.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72ce39c799 code=0x7ffc0000 [ 397.024653][ T5912] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 397.204430][ T5912] usb 1-1: device descriptor read/64, error -71 [ 397.258928][ T797] usb 3-1: USB disconnect, device number 57 [ 397.275258][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.327616][ T5912] usb usb1-port1: attempt power cycle [ 397.679960][T10735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.794537][ T5912] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 398.314745][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.490432][T10751] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 398.833393][ T5912] usb 1-1: device descriptor read/8, error -71 [ 399.348005][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.694518][ T5912] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 399.754161][ T5912] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 399.762556][ T5912] usb 1-1: config 0 has no interface number 0 [ 399.784466][ T5912] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 399.828644][ T5912] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 399.864425][ T5912] usb 1-1: config 0 interface 113 has no altsetting 0 [ 399.883792][T10778] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 399.909076][ T5912] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 399.922690][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.974440][ T5912] usb 1-1: Product: syz [ 400.034581][ T5912] usb 1-1: Manufacturer: syz [ 400.039249][ T5912] usb 1-1: SerialNumber: syz [ 400.084772][ T5912] usb 1-1: config 0 descriptor?? [ 400.102437][ T5912] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 400.175922][T10778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1146'. [ 400.483852][ T5912] net_ratelimit: 1 callbacks suppressed [ 400.483872][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.504813][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.607529][T10791] fuse: Bad value for 'fd' [ 400.704843][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.734207][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.748046][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.040388][ T5912] usb 1-1: USB disconnect, device number 64 [ 401.714221][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.272451][T10810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1154'. [ 402.384469][ T797] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 402.414434][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 402.454727][ T5893] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 402.548219][ T797] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 402.564511][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 402.569884][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.582362][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 402.600814][ T797] usb 2-1: Product: syz [ 402.610751][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 402.621759][ T797] usb 2-1: Manufacturer: syz [ 402.631420][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 402.636629][ T797] usb 2-1: SerialNumber: syz [ 402.646977][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 402.657637][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.673161][ T9] usb 4-1: Product: syz [ 402.677654][ T9] usb 4-1: Manufacturer: syz [ 402.682317][ T9] usb 4-1: SerialNumber: syz [ 402.704986][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.718686][ T5893] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 402.737983][ T9] usb 4-1: config 0 descriptor?? [ 402.743292][ T5893] usb 3-1: config 0 has no interface number 0 [ 402.752087][ T5893] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 402.775170][T10812] netlink: 'syz.4.1156': attribute type 13 has an invalid length. [ 402.781142][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 402.793435][ T5893] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 402.810683][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.815158][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 402.826577][ T5893] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.848992][ T5893] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 402.865087][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.895845][ T5893] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 402.906884][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.928613][ T5893] usb 3-1: config 0 descriptor?? [ 402.947545][ T5893] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 403.080462][ T797] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 403.111677][ T797] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 403.421337][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 403.437325][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 403.551453][T10803] binder: BINDER_SET_CONTEXT_MGR already set [ 403.557729][T10803] binder: 10802:10803 ioctl 4018620d 200000000040 returned -16 [ 403.639995][ T797] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 403.768260][ T797] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 403.847115][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.867521][ T797] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 403.979370][ T797] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 404.038538][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 404.083235][ T9] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 404.117972][ T797] usb 2-1: USB disconnect, device number 52 [ 404.722950][T10849] fuse: Unknown parameter 'group_id00000000000000000000' [ 404.859356][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 404.894989][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.897930][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 404.958704][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 404.987092][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 405.026356][ T9] usb 4-1: USB disconnect, device number 57 [ 405.240453][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 405.240476][ T30] audit: type=1804 audit(1773679861.070:275): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1160" name="bus" dev="ramfs" ino=34196 res=1 errno=0 [ 405.294770][T10856] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 405.404456][ T797] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 405.564532][ T797] usb 2-1: Using ep0 maxpacket: 8 [ 405.571846][ T797] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 405.584960][ T797] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.586895][T10856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1160'. [ 405.707766][ T24] usb 3-1: USB disconnect, device number 58 [ 405.804462][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 405.825915][ T797] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.836045][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.855607][ T797] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.875990][ T797] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.905396][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.950560][ T797] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 406.052441][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.949467][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.160263][ T797] usb 2-1: usb_control_msg returned -32 [ 407.179844][ T797] usbtmc 2-1:16.0: can't read capabilities [ 407.496331][T10873] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1167'. [ 407.801107][T10881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1164'. [ 408.389569][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.463441][T10885] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 408.510718][ T5912] usb 2-1: USB disconnect, device number 53 [ 408.635500][T10891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.869257][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.035209][T10896] fuse: Unknown parameter 'group_id00000000000000000000' [ 409.043599][T10893] bond1: option mode: invalid value (255) [ 409.209564][T10893] bond1 (unregistering): Released all slaves [ 409.473578][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.984532][ T797] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 410.172435][ T797] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 410.208801][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 410.239631][ T797] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 410.327300][ T797] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 410.339131][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.347873][ T797] usb 5-1: Product: syz [ 410.352288][ T797] usb 5-1: Manufacturer: syz [ 410.469538][ T797] usb 5-1: SerialNumber: syz [ 410.518330][ T797] usb 5-1: config 0 descriptor?? [ 410.549882][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.596675][T10909] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.196783][T10909] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.584845][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.702086][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 411.914663][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.964665][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 412.466019][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.624819][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.930871][ T29] usb 5-1: USB disconnect, device number 73 [ 413.015836][ T30] audit: type=1326 audit(1773679868.960:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326179c799 code=0x7ffc0000 [ 413.047703][T10952] loop2: detected capacity change from 0 to 7 [ 413.059513][T10949] syzkaller0: entered promiscuous mode [ 413.065215][T10949] syzkaller0: entered allmulticast mode [ 413.076910][T10952] Dev loop2: unable to read RDB block 7 [ 413.111519][ T30] audit: type=1326 audit(1773679868.960:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f326179c799 code=0x7ffc0000 [ 413.120617][T10952] loop2: unable to read partition table [ 413.153953][T10952] loop2: partition table beyond EOD, truncated [ 413.160553][T10952] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 413.195977][ T30] audit: type=1326 audit(1773679868.960:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326179c799 code=0x7ffc0000 [ 413.224415][ T30] audit: type=1326 audit(1773679868.980:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f326179c799 code=0x7ffc0000 [ 413.266542][ T30] audit: type=1326 audit(1773679868.990:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326179c799 code=0x7ffc0000 [ 413.369809][ T30] audit: type=1326 audit(1773679869.000:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f326179c799 code=0x7ffc0000 [ 413.475546][ T30] audit: type=1326 audit(1773679869.000:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326179c799 code=0x7ffc0000 [ 413.500106][ T30] audit: type=1326 audit(1773679869.000:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326179c799 code=0x7ffc0000 [ 413.522744][ T29] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 413.594069][ T30] audit: type=1326 audit(1773679869.000:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f326179c799 code=0x7ffc0000 [ 413.664790][ T30] audit: type=1326 audit(1773679869.000:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10948 comm="syz.0.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f326179c799 code=0x7ffc0000 [ 413.682397][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.759401][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 413.804030][ T29] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 413.905063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.913504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.921944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.950485][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 413.994286][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 414.431008][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 414.462875][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 414.504501][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.513847][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.544939][ T29] usb 5-1: Product: syz [ 414.549171][ T29] usb 5-1: Manufacturer: syz [ 414.574419][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 414.584245][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.598886][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 414.604160][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 414.609987][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 414.704850][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.750013][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 414.804019][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 414.811373][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 414.819318][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.854499][ T29] usb 5-1: USB disconnect, device number 74 [ 414.946756][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.001749][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.071109][ T9] usb 1-1: Product: syz [ 415.079814][ T9] usb 1-1: Manufacturer: syz [ 415.099607][ T9] usb 1-1: SerialNumber: syz [ 415.247862][T10976] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1192'. [ 415.357032][ T9] cdc_ncm 1-1:1.0: bind() failure [ 415.370212][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 415.405560][ T9] cdc_ncm 1-1:1.1: bind() failure [ 415.441212][ T9] usb 1-1: USB disconnect, device number 65 [ 415.504269][T10980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1189'. [ 416.247417][T10988] fuse: Bad value for 'user_id' [ 416.252325][T10988] fuse: Bad value for 'user_id' [ 416.655368][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 416.894414][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 416.918021][ T9] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 416.936206][ T9] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 416.948871][ T5912] net_ratelimit: 1 callbacks suppressed [ 416.948886][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.018039][ T9] usb 5-1: config 3 has no interface number 0 [ 417.037626][ T9] usb 5-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 417.220675][ T9] usb 5-1: config 3 interface 45 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 417.338155][ T9] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.375441][ T9] usb 5-1: config 3 interface 45 has no altsetting 0 [ 417.424816][ T5912] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 417.464548][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 417.513894][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.534175][ T9] usb 5-1: Product: syz [ 417.546264][ T9] usb 5-1: Manufacturer: syz [ 417.563866][ T9] usb 5-1: SerialNumber: syz [ 417.584488][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 417.591500][ T5912] usb 3-1: config 0 has no interfaces? [ 417.603770][ T5912] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 417.633876][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.664279][ T5912] usb 3-1: Product: syz [ 417.674497][ T5912] usb 3-1: Manufacturer: syz [ 417.679169][ T5912] usb 3-1: SerialNumber: syz [ 417.723176][ T5912] usb 3-1: config 0 descriptor?? [ 417.903004][ T9] usb 5-1: USB disconnect, device number 75 [ 417.952246][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.993096][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.008125][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.095703][ T5893] usb 3-1: USB disconnect, device number 59 [ 418.196267][T11005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.364468][ T5925] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 418.511105][ T29] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 418.518995][ T5925] usb 2-1: device descriptor read/64, error -71 [ 418.735091][ T29] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 418.797031][ T5925] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 418.815150][ T29] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 419.025489][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.125008][ T29] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 419.264547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.351187][ T29] usb 4-1: config 150 has no interface number 0 [ 419.357892][ T5925] usb 2-1: device descriptor read/64, error -71 [ 419.394459][ T29] usb 4-1: config 150 interface 204 has no altsetting 0 [ 419.477352][ T5925] usb usb2-port1: attempt power cycle [ 419.523084][ T29] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 419.534427][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.543163][ T29] usb 4-1: Product: syz [ 419.553586][ T29] usb 4-1: Manufacturer: syz [ 419.558651][ T29] usb 4-1: SerialNumber: syz [ 419.767841][T11028] fuse: Bad value for 'user_id' [ 419.772937][T11028] fuse: Bad value for 'user_id' [ 419.835071][ T29] usb 4-1: USB disconnect, device number 58 [ 419.844779][T11032] loop2: detected capacity change from 0 to 7 [ 419.864842][ T5925] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 419.872888][ T5832] Dev loop2: unable to read RDB block 7 [ 419.884910][ T5832] loop2: unable to read partition table [ 419.901026][ T5925] usb 2-1: device descriptor read/8, error -71 [ 419.901069][ T5832] loop2: partition table beyond EOD, truncated [ 419.923502][T11034] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1209'. [ 419.928286][T11032] Dev loop2: unable to read RDB block 7 [ 419.944784][T11034] sit1: entered allmulticast mode [ 419.949950][T11032] loop2: unable to read partition table [ 419.971991][T11032] loop2: partition table beyond EOD, truncated [ 420.034582][T11032] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 420.070814][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.155048][ T5925] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 420.185230][ T5925] usb 2-1: device descriptor read/8, error -71 [ 420.255913][T11037] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1210'. [ 420.304492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.685098][ T5925] usb usb2-port1: unable to enumerate USB device [ 420.699679][T11043] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1212'. [ 421.025139][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.109650][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.282781][T11060] syzkaller0: entered promiscuous mode [ 421.288624][T11060] syzkaller0: entered allmulticast mode [ 421.296624][T11062] ip6tnl0: Caught tx_queue_len zero misconfig [ 421.303147][T11060] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1215'. [ 422.064631][ T5893] net_ratelimit: 3 callbacks suppressed [ 422.064651][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.100209][T11072] fuse: Bad value for 'user_id' [ 422.114462][T11072] fuse: Bad value for 'user_id' [ 422.228992][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.265976][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.872853][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 423.872874][ T30] audit: type=1326 audit(1773679879.810:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11091 comm="syz.4.1224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72ce39c799 code=0x0 [ 424.046676][T11093] trusted_key: encrypted_key: insufficient parameters specified [ 424.064580][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.315108][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.661940][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 424.702995][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 424.798676][T11102] netlink: 'syz.1.1226': attribute type 11 has an invalid length. [ 424.835331][T11102] netlink: 'syz.1.1226': attribute type 12 has an invalid length. [ 425.270198][ T5912] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 425.344865][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.364421][ T5925] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 425.450757][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 425.470906][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 425.484475][ T980] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 425.662305][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 425.679792][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 425.715067][ T5925] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 425.724546][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.735361][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 425.749276][ T5925] usb 4-1: Product: syz [ 425.753973][ T5925] usb 4-1: Manufacturer: syz [ 425.760742][ T5925] usb 4-1: SerialNumber: syz [ 425.784543][ T5925] usb 4-1: config 0 descriptor?? [ 425.796153][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 425.810193][ T5925] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 425.821149][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 425.840790][ T5925] usb 4-1: Detected FT4233HP [ 425.854517][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 425.872888][ T980] usb 2-1: config 1 has an invalid interface number: 228 but max is 0 [ 425.881719][ T980] usb 2-1: config 1 has no interface number 0 [ 425.889405][ T980] usb 2-1: config 1 interface 228 has no altsetting 0 [ 425.910468][ T980] usb 2-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 425.926680][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.013114][ T5925] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 426.027753][ T5925] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 426.038475][ T5912] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 426.064123][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.077787][ T980] usb 2-1: Product: syz [ 426.090422][ T5925] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 426.103506][ T980] usb 2-1: Manufacturer: syz [ 426.108305][ T5912] usb 1-1: Product: syz [ 426.113001][ T980] usb 2-1: SerialNumber: syz [ 426.120355][ T5912] usb 1-1: Manufacturer: syz [ 426.138723][ T5925] usb 4-1: USB disconnect, device number 59 [ 426.168324][ T5912] usb 1-1: SerialNumber: syz [ 426.190342][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1233'. [ 426.267704][ T5925] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 426.281876][ T5912] usb 1-1: config 0 descriptor?? [ 426.289751][ T5925] ftdi_sio 4-1:0.0: device disconnected [ 426.314040][ T5912] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 426.347516][ T5912] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 426.482407][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.490659][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.610908][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.781006][T11119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.126305][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.184609][ T797] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 427.344762][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 427.413738][ T797] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 427.442615][ T797] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 427.470471][ T797] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 427.504641][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.543506][ T797] usb 4-1: config 250 has no interface number 0 [ 427.560290][ T797] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 427.629155][ T797] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 427.861907][ T797] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.893993][ T797] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.975591][ T797] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 428.051616][ T5912] usb 1-1: USB disconnect, device number 66 [ 428.099841][ T797] usb 4-1: config 250 interface 228 has no altsetting 0 [ 428.122067][T11116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.147096][ T797] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 428.171131][T11116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.190432][ T797] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 428.248328][ T980] usb 2-1: USB disconnect, device number 58 [ 428.256764][ T797] usb 4-1: Product: syz [ 428.276382][ T797] usb 4-1: SerialNumber: syz [ 428.329680][ T797] hub 4-1:250.228: bad descriptor, ignoring hub [ 428.351685][ T797] hub 4-1:250.228: probe with driver hub failed with error -5 [ 428.424506][ T5912] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 428.519899][T11143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1237'. [ 428.539828][ T797] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 60 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 428.551581][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.601422][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 428.625158][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.675014][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.706258][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 428.789513][ T5912] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 428.808922][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.810629][ T797] usb 4-1: reset high-speed USB device number 60 using dummy_hcd [ 428.836456][ T5912] usb 1-1: config 0 descriptor?? [ 429.062103][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.295935][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.915790][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.929677][ T5912] nintendo 0003:057E:2019.0010: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 429.965694][ T797] usb 4-1: device descriptor read/all, error -71 [ 430.120306][ T5912] nintendo 0003:057E:2019.0010: Failed to get joycon info; ret=-38 [ 430.145903][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.175181][ T5912] nintendo 0003:057E:2019.0010: Failed to retrieve controller info; ret=-38 [ 430.208913][ T5912] nintendo 0003:057E:2019.0010: Failed to initialize controller; ret=-38 [ 430.237325][ T5912] nintendo 0003:057E:2019.0010: probe - fail = -38 [ 430.261739][ T5912] nintendo 0003:057E:2019.0010: probe with driver nintendo failed with error -38 [ 430.409489][ T30] audit: type=1400 audit(1773679886.320:309): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11167 comm="syz.3.1241" [ 430.438884][ T5912] usb 1-1: USB disconnect, device number 67 [ 430.799552][T11182] ip6gretap0: entered promiscuous mode [ 430.805654][T11182] macvtap1: entered promiscuous mode [ 430.884509][ T797] usb 4-1: reset high-speed USB device number 60 using dummy_hcd [ 430.893910][ T797] usb 4-1: device reset changed ep0 maxpacket size! [ 430.917619][ T797] usb 4-1: USB disconnect, device number 60 [ 430.944641][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.964212][T11182] ip6gretap0: left promiscuous mode [ 430.970904][ T797] usblp0: removed [ 430.981591][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 431.133699][T11185] bridge_slave_1: left allmulticast mode [ 431.145732][T11185] bridge_slave_1: left promiscuous mode [ 431.182649][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.286417][T11185] bridge_slave_0: left allmulticast mode [ 431.310389][T11185] bridge_slave_0: left promiscuous mode [ 431.328431][T11185] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.354453][ T797] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 431.399495][ T9] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 431.646746][ T30] audit: type=1804 audit(1773679887.370:310): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1248" name="bus" dev="ramfs" ino=37130 res=1 errno=0 [ 431.666787][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.675242][ T5886] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 431.682927][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 431.691361][ T797] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 431.701570][ T797] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 431.722079][ T797] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 39329, setting to 1024 [ 431.733860][ T797] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 431.754454][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 431.763735][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.779049][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.793217][ T797] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.802396][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 431.810715][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.843496][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 431.852708][ T797] usb 4-1: SerialNumber: syz [ 431.860559][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 432.106111][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 432.166583][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 432.184568][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 432.204561][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.216775][ T5886] usb 5-1: config 1 has an invalid interface number: 228 but max is 0 [ 432.225064][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.227137][T11168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 432.252564][ T5886] usb 5-1: config 1 has no interface number 0 [ 432.269272][ T5886] usb 5-1: config 1 interface 228 has no altsetting 0 [ 432.276237][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 432.288086][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 432.301441][ T5886] usb 5-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 432.414811][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.428649][ T5886] usb 5-1: Product: syz [ 432.432907][ T5886] usb 5-1: Manufacturer: syz [ 432.456355][ T797] cdc_acm 4-1:1.0: skipping garbage [ 432.462542][ T797] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 432.476067][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 432.565775][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 432.576804][ T5886] usb 5-1: SerialNumber: syz [ 432.587218][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.599479][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 432.673764][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 432.700344][ T9] usb 1-1: string descriptor 0 read error: -22 [ 432.706933][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 432.716772][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.817537][ T980] usb 4-1: USB disconnect, device number 61 [ 432.848437][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 432.975556][ T9] usb 1-1: USB disconnect, device number 68 [ 433.188054][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.281382][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.335609][T11201] adutux: No device or device unplugged -19 [ 433.802672][T11215] macsec0: entered promiscuous mode [ 433.812925][T11215] macsec0: entered allmulticast mode [ 433.825803][T11215] veth1_macvtap: entered allmulticast mode [ 434.131278][ T5886] usb 5-1: USB disconnect, device number 76 [ 434.320255][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.358800][T11240] geneve2: entered promiscuous mode [ 434.364077][T11240] geneve2: entered allmulticast mode [ 434.744729][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 434.972650][ T5886] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 435.164959][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.182537][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.215162][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 435.237246][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.245871][ T9] usb 5-1: SerialNumber: syz [ 435.376407][T11260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.391395][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.413186][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.437181][ T5886] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 435.454901][ T5886] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.489058][ T5886] usb 4-1: config 0 interface 0 has no altsetting 0 [ 435.511717][T11263] sg_write: data in/out 446940/208 bytes for SCSI command 0x0-- guessing data in; [ 435.511717][T11263] program syz.2.1262 not setting count and/or reply_len properly [ 435.547305][ T5886] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 435.558170][ T9] usb 5-1: 0:2 : does not exist [ 435.570096][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.598312][ T5886] usb 4-1: Product: syz [ 435.613819][ T5886] usb 4-1: Manufacturer: syz [ 435.633001][ T5886] usb 4-1: SerialNumber: syz [ 435.644056][ T5886] usb 4-1: config 0 descriptor?? [ 435.682064][ T5886] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 435.696489][ T9] usb 5-1: USB disconnect, device number 77 [ 435.753936][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.889271][ T5886] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 435.912915][ T5886] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 435.930717][ T5886] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 436.091858][ T980] usb 4-1: USB disconnect, device number 62 [ 436.234636][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.258908][T11260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.279879][T11260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.291331][T11260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.311038][T11260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.454451][ T5886] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 436.614584][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 436.625523][ T5886] usb 5-1: config 1 has an invalid interface number: 228 but max is 0 [ 436.654456][ T5886] usb 5-1: config 1 has no interface number 0 [ 436.667401][ T5886] usb 5-1: config 1 interface 228 has no altsetting 0 [ 436.680816][T11279] xt_hashlimit: size too large, truncated to 1048576 [ 436.709235][ T5886] usb 5-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 436.736245][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.764934][ T5886] usb 5-1: Product: syz [ 436.772026][ T5886] usb 5-1: Manufacturer: syz [ 436.782242][ T5886] usb 5-1: SerialNumber: syz [ 437.279545][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1270'. [ 437.312424][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 437.421990][T11296] bridge2: entered promiscuous mode [ 437.449325][T11296] bridge2: port 1(macsec1) entered blocking state [ 437.449487][T11296] bridge2: port 1(macsec1) entered disabled state [ 437.449614][T11296] macsec1: entered allmulticast mode [ 437.449627][T11296] bridge2: entered allmulticast mode [ 437.469406][T11296] macsec1: left allmulticast mode [ 437.469427][T11296] bridge2: left allmulticast mode [ 437.513216][ T5912] net_ratelimit: 4 callbacks suppressed [ 437.513238][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.547769][T11296] bridge2: left promiscuous mode [ 437.884494][ T9] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 438.039107][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.039135][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.039163][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 438.039197][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.042472][ T9] usb 3-1: config 0 descriptor?? [ 438.544873][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.552384][ T9] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 438.552424][ T9] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 438.552480][ T9] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 438.552509][ T9] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 438.552538][ T9] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 438.552565][ T9] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 438.552619][ T9] isku 0003:1E7D:319C.0011: unknown main item tag 0x0 [ 438.558012][ T9] isku 0003:1E7D:319C.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 438.771855][ T9] isku 0003:1E7D:319C.0011: couldn't init struct isku_device [ 438.771937][ T9] isku 0003:1E7D:319C.0011: couldn't install keyboard [ 438.775786][ T9] isku 0003:1E7D:319C.0011: probe with driver isku failed with error -71 [ 438.782881][ T9] usb 3-1: USB disconnect, device number 60 [ 438.916441][T11317] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 438.916498][T11317] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 438.918942][T11317] vhci_hcd vhci_hcd.0: Device attached [ 439.140781][T11325] xt_connbytes: Forcing CT accounting to be enabled [ 439.149335][T11318] vhci_hcd: connection closed [ 439.153603][ T49] vhci_hcd vhci_hcd.1: stop threads [ 439.201284][T11326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1272'. [ 439.229570][ T5912] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 439.237257][ T5886] usb 5-1: USB disconnect, device number 78 [ 439.305602][ T49] vhci_hcd vhci_hcd.1: release socket [ 439.321759][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.343118][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 439.811795][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.931025][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 439.988951][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.995533][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.355673][ T5886] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 440.455694][T11349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.542895][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 440.564234][ T5886] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 440.578751][ T5886] usb 5-1: config 0 has no interface number 0 [ 440.585559][ T5886] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.844396][ T5886] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.869856][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.884462][ T9] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 440.923520][ T5886] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 441.248168][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.265235][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.287394][ T9] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 441.295963][ T9] usb 3-1: config 0 has no interface number 0 [ 441.310687][ T9] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 441.384280][ T5886] usb 5-1: config 0 descriptor?? [ 441.424137][ T9] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 441.512961][ T9] usb 3-1: config 0 interface 113 has no altsetting 0 [ 441.612816][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 441.630087][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.661612][ T9] usb 3-1: Product: syz [ 441.673145][ T9] usb 3-1: Manufacturer: syz [ 441.693672][ T9] usb 3-1: SerialNumber: syz [ 441.714109][ T9] usb 3-1: config 0 descriptor?? [ 441.803590][T11360] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 441.850200][ C0] usb 3-1: NFC: Urb failure (status -71) [ 441.879432][ T9] usb 3-1: NFC: Unable to get FW version [ 441.896762][ T9] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 441.915258][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.145653][T11338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.502156][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.680089][ T5886] usbhid 5-1:0.4: can't add hid device: -71 [ 442.687524][ T5886] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 442.718133][ T5886] usb 5-1: USB disconnect, device number 79 [ 442.828375][T11374] netlink: 'syz.1.1285': attribute type 3 has an invalid length. [ 443.013038][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.444506][ T5886] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 443.548327][T11381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1289'. [ 443.632813][T11383] fuse: Unknown parameter 'fd0x000000000000000a00000000000000000000' [ 443.643177][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 443.652160][ T5886] usb 1-1: config 1 has an invalid interface number: 228 but max is 0 [ 443.660703][ T5886] usb 1-1: config 1 has no interface number 0 [ 443.671327][ T5886] usb 1-1: config 1 interface 228 has no altsetting 0 [ 443.694662][ T5886] usb 1-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 443.716869][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.735572][ T5886] usb 1-1: Product: syz [ 443.740015][ T5886] usb 1-1: Manufacturer: syz [ 443.764087][ T5886] usb 1-1: SerialNumber: syz [ 443.914683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.923172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.931605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.033732][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1287'. [ 444.114928][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.374540][ T5912] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 444.755169][ T24] usb 3-1: USB disconnect, device number 61 [ 445.117080][T11405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.201819][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.294761][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.372273][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.473211][ T5886] usb 1-1: USB disconnect, device number 69 [ 447.504841][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.965160][T11431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.554612][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.370694][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.745471][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.634436][ T797] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 450.790167][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.809416][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 450.831291][ T797] usb 2-1: config 1 has an invalid interface number: 228 but max is 0 [ 450.870226][ T797] usb 2-1: config 1 has no interface number 0 [ 450.876816][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.890640][ T797] usb 2-1: config 1 interface 228 has no altsetting 0 [ 450.927130][ T797] usb 2-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 450.968651][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.976509][T11466] loop5: detected capacity change from 0 to 7 [ 450.988274][T11466] Dev loop5: unable to read RDB block 7 [ 451.003517][T11466] loop5: unable to read partition table [ 451.011299][ T797] usb 2-1: Product: syz [ 451.021208][ T797] usb 2-1: Manufacturer: syz [ 451.051080][ T797] usb 2-1: SerialNumber: syz [ 451.058969][T11466] loop5: partition table beyond EOD, truncated [ 451.091901][T11466] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 451.315333][T11460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.345059][T11471] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.1310'. [ 451.364664][T11460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.373166][T11460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.626447][T11477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 451.851270][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.064485][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1311'. [ 452.614687][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.674443][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 452.834789][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 452.853628][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 452.862618][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 452.876706][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 453.018574][ T10] usb 5-1: config 1 has no interface number 0 [ 453.041407][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.088409][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 453.139196][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 453.188143][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.296684][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 453.312320][ T797] usb 2-1: USB disconnect, device number 59 [ 453.501450][ T10] snd_usb_pod 5-1:1.1: invalid control EP [ 453.508241][ T10] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 453.524448][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 453.548755][ T10] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 453.708429][ T10] usb 5-1: USB disconnect, device number 80 [ 454.003781][ T5912] net_ratelimit: 3 callbacks suppressed [ 454.003800][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.033689][T11498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.153092][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1317'. [ 454.915718][ T5886] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 455.051788][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.079483][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 455.098913][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 455.120777][ T5886] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2031, setting to 1024 [ 455.219341][ T5886] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 455.239023][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.254431][ T5886] usb 1-1: Product: syz [ 455.268849][ T5886] usb 1-1: Manufacturer: syz [ 455.289089][ T5886] usb 1-1: SerialNumber: syz [ 455.337479][T11498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.347370][T11498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.356725][T11498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.366012][T11498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.374390][T11498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.383314][T11498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.594639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.674617][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.779753][ T5886] usb 1-1: 1:1: cannot set freq 15490714 to ep 0x1 [ 455.848865][ T5886] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 456.019133][ T5886] usb 1-1: USB disconnect, device number 70 [ 457.245355][ T5886] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 457.315395][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 457.429483][ T5886] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 457.449033][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.463537][ T5886] usb 5-1: Product: syz [ 457.473141][ T5886] usb 5-1: Manufacturer: syz [ 457.477896][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 457.483712][ T5886] usb 5-1: SerialNumber: syz [ 457.509709][ T9] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 457.519084][ T797] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 457.530001][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.544692][ T9] usb 1-1: Product: syz [ 457.549097][ T9] usb 1-1: Manufacturer: syz [ 457.553746][ T9] usb 1-1: SerialNumber: syz [ 457.602823][ T9] usb 1-1: config 0 descriptor?? [ 457.627777][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 457.686668][ T797] usb 3-1: Using ep0 maxpacket: 16 [ 457.694030][ T797] usb 3-1: config 1 has an invalid interface number: 228 but max is 0 [ 457.702668][ T797] usb 3-1: config 1 has no interface number 0 [ 457.724913][ T797] usb 3-1: config 1 interface 228 has no altsetting 0 [ 457.734674][ T797] usb 3-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 457.759130][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.768420][ T797] usb 3-1: Product: syz [ 457.772628][ T797] usb 3-1: Manufacturer: syz [ 457.778330][ T797] usb 3-1: SerialNumber: syz [ 457.964530][ T5886] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 459.109290][ T9] gspca_ov534_9: reg_r err -71 [ 459.264773][ T24] net_ratelimit: 6 callbacks suppressed [ 459.264793][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.384474][ T9] gspca_ov534_9: Unknown sensor 0000 [ 459.384576][ T9] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 459.400786][ T9] usb 1-1: USB disconnect, device number 71 [ 459.854227][T11537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1327'. [ 460.235539][ T797] usb 3-1: USB disconnect, device number 62 [ 460.309710][ T5886] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 460.314819][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.392827][ T5886] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 460.418516][ T5886] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 460.430545][ T5886] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 460.472455][ T5886] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 460.484616][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.506064][ T5886] usb 5-1: USB disconnect, device number 81 [ 460.532604][ T5977] udevd[5977]: setting mode of /dev/bus/usb/005/081 to 020664 failed: No such file or directory [ 460.556468][ T5977] udevd[5977]: setting owner of /dev/bus/usb/005/081 to uid=0, gid=0 failed: No such file or directory [ 460.946359][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'. [ 460.964691][T11548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.026535][T11548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.301366][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1328'. [ 461.349272][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.391768][T11552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.746717][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.282693][T11570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.393562][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.484417][ T797] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 463.541656][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.696864][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 463.720347][ T797] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 463.761592][ T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.797139][ T797] usb 1-1: config 0 has no interface number 0 [ 463.830372][ T797] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 463.934433][ T797] usb 1-1: config 0 interface 196 has no altsetting 0 [ 463.958835][ T797] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 463.987210][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.041860][ T797] usb 1-1: Product: syz [ 464.063152][ T797] usb 1-1: Manufacturer: syz [ 464.078560][ T797] usb 1-1: SerialNumber: syz [ 464.125028][ T797] usb 1-1: config 0 descriptor?? [ 464.360613][T11586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.373101][T11586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.389980][T11589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1338'. [ 464.431971][ T797] ipheth 1-1:0.196: Unable to find endpoints [ 464.482855][ T797] usb 1-1: USB disconnect, device number 72 [ 464.563978][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.584275][T11593] loop2: detected capacity change from 0 to 7 [ 464.784752][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.423068][ T30] audit: type=1804 audit(1773679920.870:311): pid=11604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1340" name="bus" dev="ramfs" ino=39264 res=1 errno=0 [ 465.483095][T11608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.789668][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.882206][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.919779][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1346'. [ 467.074774][ T980] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 467.176755][T11624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.224408][ T980] usb 4-1: device descriptor read/64, error -71 [ 467.324482][ T5925] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 467.473958][ T980] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 467.484402][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.515827][ T5925] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 467.572351][ T5925] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 467.581675][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.590344][ T5925] usb 1-1: Product: syz [ 467.598563][ T5925] usb 1-1: Manufacturer: syz [ 467.603249][ T5925] usb 1-1: SerialNumber: syz [ 467.610013][ T980] usb 4-1: device descriptor read/64, error -71 [ 467.650632][ T5925] usb 1-1: config 0 descriptor?? [ 467.744924][ T980] usb usb4-port1: attempt power cycle [ 467.792411][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 467.884591][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.916040][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.169448][ T980] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 468.208988][ T980] usb 4-1: device descriptor read/8, error -71 [ 468.463199][ T980] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 468.485285][ T980] usb 4-1: device descriptor read/8, error -71 [ 468.595070][ T980] usb usb4-port1: unable to enumerate USB device [ 468.944729][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.005589][T11646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1351'. [ 469.671061][T11662] loop2: detected capacity change from 0 to 7 [ 469.682653][ T5977] Dev loop2: unable to read RDB block 7 [ 469.692138][ T5977] loop2: unable to read partition table [ 469.700538][ T5977] loop2: partition table beyond EOD, truncated [ 469.726616][T11662] Dev loop2: unable to read RDB block 7 [ 469.732356][T11662] loop2: unable to read partition table [ 469.761684][T11662] loop2: partition table beyond EOD, truncated [ 469.804529][T11662] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 469.948574][ T5925] usb 1-1: USB disconnect, device number 73 [ 469.997251][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.076618][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.221012][T11673] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1356'. [ 470.230551][T11673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1356'. [ 470.264609][ T5912] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 470.310593][T11677] xt_hashlimit: max too large, truncated to 1048576 [ 470.404410][ T5912] usb 4-1: device descriptor read/64, error -71 [ 470.472277][ T30] audit: type=1804 audit(1773679926.400:312): pid=11682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1358" name="bus" dev="ramfs" ino=38870 res=1 errno=0 [ 470.509259][ T5886] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 470.547325][T11683] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 470.758280][T11683] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 470.774064][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 470.804443][ T5912] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 470.810737][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 470.821531][ T5886] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 470.842265][ T5886] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 471.166480][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.193737][ T5912] usb 4-1: device descriptor read/64, error -71 [ 471.208921][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.247691][ T5886] usb 5-1: config 13 has no interface number 0 [ 471.264394][ T5886] usb 5-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 471.293908][ T5886] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0 [ 471.314212][ T5886] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.327910][ T5912] usb usb4-port1: attempt power cycle [ 471.357981][ T5886] usb 5-1: config 13 interface 50 has no altsetting 0 [ 471.379044][ T5886] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 471.394174][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.404658][ T5886] usb 5-1: Product: syz [ 471.409445][ T5886] usb 5-1: Manufacturer: syz [ 471.414084][ T5886] usb 5-1: SerialNumber: syz [ 471.674432][ T5912] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 472.068201][ T5912] usb 4-1: device descriptor read/8, error -71 [ 472.094647][ T5886] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 472.115456][ T5886] usb 5-1: MIDIStreaming interface descriptor not found [ 472.233230][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.324435][ T5912] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 472.365693][ T5912] usb 4-1: device descriptor read/8, error -71 [ 472.458934][ T5886] usb 5-1: USB disconnect, device number 82 [ 472.469467][T11700] loop2: detected capacity change from 0 to 7 [ 472.475926][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1364'. [ 472.515242][ T5912] usb usb4-port1: unable to enumerate USB device [ 472.536704][T11700] Dev loop2: unable to read RDB block 7 [ 472.542417][T11700] loop2: unable to read partition table [ 472.605649][T11700] loop2: partition table beyond EOD, truncated [ 472.613016][T11700] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 472.645030][ T9] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 472.985970][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.996542][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 473.025341][T11706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.050182][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 473.064175][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.084212][ T9] usb 2-1: Product: syz [ 473.267940][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.431429][ T9] usb 2-1: Manufacturer: syz [ 473.441585][ T9] usb 2-1: SerialNumber: syz [ 473.450989][ T9] usb 2-1: config 0 descriptor?? [ 473.833559][T11720] syzkaller0: entered promiscuous mode [ 474.054049][T11720] syzkaller0: entered allmulticast mode [ 474.372468][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.444675][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.525870][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.030883][ T30] audit: type=1804 audit(1773679931.950:313): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1374" name="bus" dev="ramfs" ino=39445 res=1 errno=0 [ 476.130149][T11757] netlink: 'syz.2.1374': attribute type 1 has an invalid length. [ 476.171938][T11756] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 476.729657][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.995247][ T9] usb 2-1: USB disconnect, device number 60 [ 477.424589][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.749816][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.026437][T11793] netlink: 'syz.1.1382': attribute type 2 has an invalid length. [ 478.034246][T11793] netlink: 'syz.1.1382': attribute type 8 has an invalid length. [ 478.077902][T11793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1382'. [ 478.105772][T11800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.244764][T11802] netlink: 'syz.3.1383': attribute type 4 has an invalid length. [ 478.258527][T11802] netlink: 'syz.3.1383': attribute type 4 has an invalid length. [ 478.307307][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 478.376514][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 478.504527][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 478.517017][ T9] usb 1-1: config 1 has an invalid interface number: 228 but max is 0 [ 478.551570][ T9] usb 1-1: config 1 has no interface number 0 [ 478.590574][ T9] usb 1-1: config 1 interface 228 has no altsetting 0 [ 478.607834][ T9] usb 1-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 478.634407][ T5912] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 478.640452][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.691157][T11807] lo: entered allmulticast mode [ 478.703607][ T9] usb 1-1: Product: syz [ 478.713485][ T9] usb 1-1: Manufacturer: syz [ 478.735117][ T9] usb 1-1: SerialNumber: syz [ 478.749204][T11807] tunl0: entered allmulticast mode [ 478.800448][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 478.813044][T11807] gre0: entered allmulticast mode [ 478.830218][ T5912] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 478.859354][ T5912] usb 2-1: config 2 has no interface number 0 [ 478.868771][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.912015][T11807] gretap0: entered allmulticast mode [ 478.928027][ T5912] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 479.054426][ T5912] usb 2-1: config 2 interface 88 has no altsetting 0 [ 479.061541][T11807] erspan0: entered allmulticast mode [ 479.078003][T11807] ip_vti0: entered allmulticast mode [ 479.126672][T11807] ip6_vti0: entered allmulticast mode [ 479.216648][T11807] sit0: entered allmulticast mode [ 479.223996][ T5912] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 479.243730][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.296518][ T5912] usb 2-1: Product: syz [ 479.300775][ T5912] usb 2-1: Manufacturer: syz [ 479.320387][T11807] ip6tnl0: entered allmulticast mode [ 479.345914][ T5912] usb 2-1: SerialNumber: syz [ 479.361831][T11807] ip6gre0: entered allmulticast mode [ 479.400890][T11806] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 479.459666][T11807] syz_tun: entered allmulticast mode [ 479.617603][T11807] ip6gretap0: entered allmulticast mode [ 479.657003][T11807] vcan0: entered allmulticast mode [ 479.683329][T11807] bond0: entered allmulticast mode [ 479.701833][T11807] bond_slave_0: entered allmulticast mode [ 479.804611][T11807] bond_slave_1: entered allmulticast mode [ 479.819971][T11807] team0: entered allmulticast mode [ 479.839549][T11806] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 479.851186][T11807] team_slave_0: entered allmulticast mode [ 479.864590][T11807] team_slave_1: entered allmulticast mode [ 479.893272][T11807] dummy0: entered allmulticast mode [ 479.915707][T11817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.929325][T11807] nlmon0: entered allmulticast mode [ 479.966456][T11807] caif0: entered allmulticast mode [ 479.974933][T11813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.020430][T11807] batadv0: entered allmulticast mode [ 480.049885][T11807] vxcan0: entered allmulticast mode [ 480.058365][ T5912] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 480.078428][ T5912] asix 2-1:2.88: probe with driver asix failed with error -71 [ 480.087560][T11807] vxcan1: entered allmulticast mode [ 480.124088][T11807] veth0: entered allmulticast mode [ 480.130724][ T5912] usb 2-1: USB disconnect, device number 61 [ 480.155025][T11807] veth1: entered allmulticast mode [ 480.263554][T11807] wg0: entered allmulticast mode [ 480.319358][T11807] wg1: entered allmulticast mode [ 480.358334][T11807] wg2: entered allmulticast mode [ 480.379108][T11807] veth0_to_bridge: entered allmulticast mode [ 480.414875][T11807] bridge_slave_0: entered allmulticast mode [ 480.451911][T11807] veth1_to_bridge: entered allmulticast mode [ 480.466811][T11807] bridge_slave_1: entered allmulticast mode [ 480.476679][T11807] veth0_to_bond: entered allmulticast mode [ 480.488079][T11815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.518470][T11807] veth1_to_bond: entered allmulticast mode [ 480.568013][T11807] veth0_to_team: entered allmulticast mode [ 480.649235][T11807] veth1_to_team: entered allmulticast mode [ 480.689809][ T9] usb 1-1: USB disconnect, device number 74 [ 480.750019][T11807] veth0_to_batadv: entered allmulticast mode [ 480.813000][T11807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.821375][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 480.866880][T11807] batadv_slave_0: entered allmulticast mode [ 480.908588][T11807] veth1_to_batadv: entered allmulticast mode [ 480.956130][T11807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.983994][T11807] batadv_slave_1: entered allmulticast mode [ 481.015526][T11807] xfrm0: entered allmulticast mode [ 481.056093][T11807] veth0_to_hsr: entered allmulticast mode [ 481.081105][T11807] hsr_slave_0: entered allmulticast mode [ 481.120116][T11807] veth1_to_hsr: entered allmulticast mode [ 481.140310][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.185516][T11807] hsr_slave_1: entered allmulticast mode [ 481.233438][T11807] hsr0: entered allmulticast mode [ 481.266334][T11807] veth1_virt_wifi: entered allmulticast mode [ 481.309187][T11807] veth0_virt_wifi: entered allmulticast mode [ 481.357450][T11807] veth1_vlan: entered allmulticast mode [ 481.385046][T11807] veth0_vlan: entered allmulticast mode [ 481.420018][T11807] vlan0: entered allmulticast mode [ 481.440075][T11847] loop2: detected capacity change from 0 to 7 [ 481.446570][T11807] vlan1: entered allmulticast mode [ 481.484025][T11847] Dev loop2: unable to read RDB block 7 [ 481.514587][T11847] loop2: unable to read partition table [ 481.521698][T11847] loop2: partition table beyond EOD, truncated [ 481.570919][T11807] macvlan0: entered allmulticast mode [ 481.584528][T11847] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 481.606486][T11807] macvlan1: entered allmulticast mode [ 481.629794][T11807] ipvlan0: entered allmulticast mode [ 481.642403][T11807] ipvlan1: entered allmulticast mode [ 481.651182][T11807] veth1_macvtap: entered allmulticast mode [ 481.690814][T11807] veth0_macvtap: entered allmulticast mode [ 481.740269][T11807] macvtap0: entered allmulticast mode [ 481.752629][T11807] macsec0: entered allmulticast mode [ 481.788521][T11807] geneve0: entered allmulticast mode [ 481.804997][T11807] geneve1: entered allmulticast mode [ 481.820753][T11807] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 481.870355][T11807] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 481.930589][T11807] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 481.947269][T11807] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 481.968249][T11807] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 481.980567][T11807] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 481.999546][T11807] gretap1: entered allmulticast mode [ 482.010470][T11807] batman_adv: batadv0: Interface deactivated: macsec1 [ 482.024241][T11807] macsec1: entered allmulticast mode [ 482.037776][T11807] mac80211_hwsim hwsim19 wlan2: entered allmulticast mode [ 482.052655][T11807] bridge0: entered allmulticast mode [ 482.073106][T11807] mac80211_hwsim hwsim25 wlan3: entered allmulticast mode [ 482.108467][T11807] mac80211_hwsim hwsim26 wlan4: entered allmulticast mode [ 482.116486][T11807] pimreg0: entered allmulticast mode [ 482.126345][T11807] wireguard0: entered allmulticast mode [ 482.176093][T11807] veth1.2: entered allmulticast mode [ 482.239658][T11807] bond1: entered allmulticast mode [ 482.261798][T11807] syztnl0: entered allmulticast mode [ 482.297649][ T9548] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.329466][ T9548] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.341892][T11818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.402106][ T9548] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.663945][ T9548] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.788982][T11865] x_tables: duplicate underflow at hook 3 [ 483.054406][T11838] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 483.204439][T11838] usb 4-1: device descriptor read/64, error -71 [ 483.356295][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.504565][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.554451][T11838] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 483.740938][T11838] usb 4-1: device descriptor read/64, error -71 [ 483.855434][T11838] usb usb4-port1: attempt power cycle [ 483.864649][T11851] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 484.016592][T11851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.054544][T11851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.071304][T11851] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.076251][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 484.085962][T11851] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 484.114758][T11851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.152635][T11851] usb 5-1: config 0 descriptor?? [ 484.204684][T11838] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 484.225199][T11838] usb 4-1: device descriptor read/8, error -71 [ 484.264469][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 484.271701][ T9] usb 1-1: config index 0 descriptor too short (expected 1810, got 18) [ 484.280813][ T9] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 484.290267][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.311818][ T9] usb 1-1: config 0 descriptor?? [ 484.356006][ T9] gspca_main: etoms-2.14.0 probing 102c:6151 [ 484.379621][T11892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.387067][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.474425][T11838] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 484.805333][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.814832][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.824473][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.839874][T11851] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 484.885260][T11838] usb 4-1: device descriptor read/8, error -71 [ 484.934663][ T9] usb 1-1: USB disconnect, device number 75 [ 484.995374][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.003758][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.038830][T11838] usb usb4-port1: unable to enumerate USB device [ 485.936431][ C0] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -1 [ 486.084445][T11851] usb 5-1: reset high-speed USB device number 83 using dummy_hcd [ 486.603600][ T78] net_ratelimit: 4 callbacks suppressed [ 486.603618][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.619062][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.627990][T11824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.636433][T11824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.646779][T11812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.655011][T11812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.845885][T11910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 486.852205][T11910] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 487.027556][T11910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 487.065771][T11822] usb 5-1: USB disconnect, device number 83 [ 487.073586][T11910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 487.319252][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 487.545155][T11931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1405'. [ 487.554784][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 487.674678][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.717514][T11910] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 487.723488][T11910] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 487.753684][T11910] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 487.768576][T11910] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 488.014764][T11910] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 488.025358][T11910] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 488.224404][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 488.297472][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 488.508448][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 489.182971][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 489.189174][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.265397][ T9551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.275939][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.467314][T11948] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 489.800507][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 489.829855][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 490.119525][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 490.125844][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 490.133747][ T9] usb 2-1: can't read configurations, error -71 [ 490.304411][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 490.341078][ T30] audit: type=1326 audit(1773679946.280:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb19c799 code=0x7fc00000 [ 490.414730][ T30] audit: type=1326 audit(1773679946.280:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fcfcb19c799 code=0x7fc00000 [ 490.929068][ T30] audit: type=1326 audit(1773679946.280:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb19c799 code=0x7fc00000 [ 490.994431][ T30] audit: type=1326 audit(1773679946.280:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb19c799 code=0x7fc00000 [ 491.072884][ T30] audit: type=1326 audit(1773679946.280:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb19c799 code=0x7fc00000 [ 491.214786][ T30] audit: type=1326 audit(1773679946.280:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb19c799 code=0x7fc00000 [ 491.244679][ T30] audit: type=1326 audit(1773679946.280:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb19c799 code=0x7fc00000 [ 491.277263][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 491.307592][ T30] audit: type=1326 audit(1773679946.280:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb19c799 code=0x7fc00000 [ 491.354452][ T30] audit: type=1326 audit(1773679946.310:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb19c799 code=0x7fc00000 [ 491.379340][ T30] audit: type=1326 audit(1773679946.310:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11936 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb19c799 code=0x7fc00000 [ 491.688459][T11967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.734468][T11851] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 491.854485][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 491.904373][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 492.041650][T11851] usb 5-1: Using ep0 maxpacket: 32 [ 492.074395][T11851] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 492.205865][T11851] usb 5-1: config 0 has no interface number 0 [ 492.212021][T11851] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 492.222231][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 492.238733][T11851] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 492.269836][T11851] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 492.307149][T11822] net_ratelimit: 4 callbacks suppressed [ 492.307165][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.324147][T11851] usb 5-1: config 0 interface 196 has no altsetting 0 [ 492.376164][T11851] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 492.424100][T11851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.468304][ T9549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.476514][ T9549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.485316][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.499043][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.510514][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.520571][T11812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.552894][T11851] usb 5-1: Product: syz [ 492.714392][T11851] usb 5-1: Manufacturer: syz [ 492.719867][T11851] usb 5-1: SerialNumber: syz [ 492.731888][T11851] usb 5-1: config 0 descriptor?? [ 492.893275][T11962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.250184][T11978] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 493.414416][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 493.523556][T11851] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 493.562238][T11851] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 493.564628][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 493.585218][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.607077][T11851] usb 5-1: USB disconnect, device number 84 [ 493.632789][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 493.641456][ T10] usb 1-1: config 0 has no interface number 0 [ 493.650808][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 493.671520][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.704068][ T10] usb 1-1: Product: syz [ 493.732639][ T10] usb 1-1: Manufacturer: syz [ 493.745931][T11851] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 493.755867][ T10] usb 1-1: SerialNumber: syz [ 493.795024][ T10] usb 1-1: config 0 descriptor?? [ 493.837797][ T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 493.864997][ T10] usb 1-1: selecting invalid altsetting 1 [ 493.884493][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 493.918358][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 493.979417][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 494.004745][ T10] usb 1-1: media controller created [ 494.031216][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.114939][ T10] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 494.143355][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 494.192709][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 494.204605][T11851] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 494.323228][T11996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1422'. [ 494.332381][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'. [ 494.394267][ T10] usb 1-1: USB disconnect, device number 76 [ 494.404917][T11851] usb 3-1: Using ep0 maxpacket: 16 [ 494.511897][T11851] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 494.520932][T11851] usb 3-1: config 0 has no interface number 0 [ 494.529421][T11851] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.540628][T11812] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 494.555608][T11851] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 494.590149][T11851] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 494.602522][T11851] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 494.612484][T11851] usb 3-1: Product: syz [ 494.618195][T11851] usb 3-1: SerialNumber: syz [ 494.624901][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.641743][T11851] usb 3-1: config 0 descriptor?? [ 494.650748][T11851] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 494.694480][T11812] usb 5-1: Using ep0 maxpacket: 8 [ 494.712238][T11812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.743761][T11851] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input31 [ 494.762716][T11812] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.854262][T11812] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 494.879747][T11812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.891848][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.907180][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.924165][T11812] usb 5-1: Product: syz [ 494.974751][T11812] usb 5-1: Manufacturer: syz [ 494.992127][T11812] usb 5-1: SerialNumber: syz [ 495.095776][T11812] usb 5-1: config 0 descriptor?? [ 495.214615][T11851] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 495.377513][T11851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 495.387485][T11851] usb 2-1: config 1 has no interface number 0 [ 495.400168][T11851] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.419614][T11851] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 495.429194][T11851] usb 2-1: Product: syz [ 495.437245][T11851] usb 2-1: Manufacturer: syz [ 495.454456][T11851] usb 2-1: SerialNumber: syz [ 495.501214][T11851] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 495.527538][T11851] cdc_ncm 2-1:1.1: bind() failure [ 495.589833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.715252][T11812] usb 2-1: USB disconnect, device number 64 [ 495.807904][T12012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1426'. [ 496.314564][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 496.954006][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 496.963053][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 496.970324][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 496.977721][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 496.985874][T11851] usb 3-1: USB disconnect, device number 63 [ 496.992881][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 496.999892][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 497.043963][T11851] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 497.082375][T12037] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 497.265704][T11812] usb 5-1: USB disconnect, device number 85 [ 497.318970][T12037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.484404][ T10] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 497.575265][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 497.624753][T12049] chnl_net:caif_netlink_parms(): no params data found [ 497.639664][ T10] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 497.657114][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.668291][ T49] net_ratelimit: 2 callbacks suppressed [ 497.668304][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.684612][ T10] usb 4-1: config 0 has no interface number 0 [ 497.687446][T11812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.699628][T11838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.733899][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 497.745111][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.758749][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.423185][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 498.423207][ T30] audit: type=1804 audit(1773679953.720:381): pid=12056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1436" name="bus" dev="ramfs" ino=41076 res=1 errno=0 [ 498.484402][ T9] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 498.511178][ T10] usb 4-1: Product: syz [ 498.519783][ T10] usb 4-1: Manufacturer: syz [ 498.526379][ T10] usb 4-1: SerialNumber: syz [ 498.526858][T12057] netlink: 'syz.4.1436': attribute type 1 has an invalid length. [ 498.548434][T12059] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 498.553684][ T10] usb 4-1: config 0 descriptor?? [ 498.583669][T12059] bond1: (slave lo): making interface the new active one [ 498.592327][T12059] bond1: (slave lo): Enslaving as an active interface with an up link [ 498.601472][T12059] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 498.656289][ T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 498.668137][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.678911][ T9] usb 3-1: config 0 has no interface number 0 [ 498.687717][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 498.708330][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.724428][ T9] usb 3-1: Product: syz [ 498.735277][ T9] usb 3-1: Manufacturer: syz [ 498.746500][ T9] usb 3-1: SerialNumber: syz [ 498.788867][ T10] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 498.796764][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.805718][ T9] usb 3-1: config 0 descriptor?? [ 498.819102][ T10] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 498.851789][ T10] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 498.863751][ T10] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 498.871702][T11838] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 498.885601][T11808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.898366][ T10] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 498.926050][ T10] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 498.976376][T12069] binder: 12068:12069 unknown command 1077961494 [ 498.982768][T12069] binder: 12068:12069 ioctl c0306201 200000000100 returned -22 [ 499.037549][T12032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.048232][T12032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.059597][T11812] usb 4-1: USB disconnect, device number 76 [ 499.064019][T11838] usb 2-1: config 2 interface 0 altsetting 178 endpoint 0xA has an invalid bInterval 101, changing to 7 [ 499.081041][T11812] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 499.083558][ T9] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 499.091297][T11851] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 499.100867][T11838] usb 2-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid maxpacket 25708, setting to 1024 [ 499.123049][T11812] keyspan 4-1:0.133: device disconnected [ 499.134569][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 499.152749][T11838] usb 2-1: config 2 interface 0 has no altsetting 0 [ 499.163330][T11838] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 499.173246][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 499.188940][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 499.197275][T11838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.206561][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 499.216077][T11838] usb 2-1: Product: syz [ 499.220276][T11838] usb 2-1: Manufacturer: syz [ 499.226945][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 499.235438][T11838] usb 2-1: SerialNumber: syz [ 499.296585][T11851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.314249][T11851] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 499.330208][T11851] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 499.339751][T11851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.348376][T11851] usb 1-1: Product: syz [ 499.352778][T11851] usb 1-1: Manufacturer: syz [ 499.357558][T11851] usb 1-1: SerialNumber: syz [ 499.366027][T11851] usb 1-1: config 0 descriptor?? [ 499.376125][T12076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.391140][T12076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.443295][ T9] usb 3-1: USB disconnect, device number 64 [ 499.488513][T11838] ims_pcu 2-1:2.0: Incorrect number of endpoints on data interface (1) [ 499.500476][T11838] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22 [ 499.519765][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 499.564709][ T9] keyspan 3-1:0.133: device disconnected [ 499.576113][T11838] usb 2-1: USB disconnect, device number 65 [ 499.835605][T11812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.674438][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 500.704731][T11838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.835337][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 500.874778][T11812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.941092][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 500.972283][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.047953][ T9] usb 2-1: config 0 descriptor?? [ 501.105587][ T9] pwc: Logitech QuickCam Zoom USB webcam detected. [ 501.145121][ T9] pwc: Warning: more than 1 configuration available. [ 501.432456][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.440672][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.748299][T12113] fuse: Unknown parameter 'rootmodev' [ 502.219967][T11851] usb 1-1: USB disconnect, device number 77 [ 502.428865][T12130] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1448'. [ 502.482859][T12130] [U] Nd [3 [ 502.664486][T11838] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 502.816436][T12137] net_ratelimit: 8 callbacks suppressed [ 502.816453][T12137] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 502.878308][T11838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 502.893490][T11838] usb 3-1: string descriptor 0 read error: -22 [ 502.900278][T11838] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 502.922536][T11838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.944956][T11812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.977465][T11838] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.993135][T11838] usb 3-1: MIDIStreaming interface descriptor not found [ 503.577438][T11838] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 503.659897][ T9] pwc: Failed to set LED on/off time (-71) [ 503.667506][T12156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1458'. [ 503.689155][ T9] pwc: send_video_command error -71 [ 503.788750][T11808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.799533][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 503.807908][ T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 503.810594][T11812] usb 3-1: USB disconnect, device number 65 [ 503.827778][T11838] usb 5-1: Using ep0 maxpacket: 16 [ 503.843608][T11838] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 503.899823][T11838] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 503.931501][ T9] usb 2-1: USB disconnect, device number 66 [ 504.046519][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.067028][T11838] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 504.084247][T11838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.121915][T11838] usb 5-1: Product: syz [ 504.136761][T11838] usb 5-1: Manufacturer: syz [ 504.154941][T11838] usb 5-1: SerialNumber: syz [ 504.434484][ T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 504.523062][T11838] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 504.531328][T11838] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 504.574628][T11838] usb 5-1: USB disconnect, device number 86 [ 504.663622][ T30] audit: type=1804 audit(1773679960.530:382): pid=12175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1463" name="bus" dev="ramfs" ino=41309 res=1 errno=0 [ 504.810653][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 504.845346][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 504.904525][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.927323][ T10] usb 1-1: config 0 descriptor?? [ 505.000342][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.049772][T12177] bond1: (slave lo): Releasing backup interface [ 505.104579][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.139098][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 505.146767][T12177] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 505.356704][ T30] audit: type=1804 audit(1773679961.250:383): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1464" name="bus" dev="ramfs" ino=41327 res=1 errno=0 [ 505.388026][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 505.415472][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 505.433593][ T10] usb 1-1: media controller created [ 505.942559][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.983404][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.990838][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.148245][T11812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.179065][T12177] bridge_slave_0: left allmulticast mode [ 506.186328][T12177] bridge_slave_0: left promiscuous mode [ 506.192425][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.210748][T12177] bridge_slave_1: left allmulticast mode [ 506.216829][T12177] bridge_slave_1: left promiscuous mode [ 506.222782][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.235364][T12177] veth0_to_bond: left allmulticast mode [ 506.241178][T12177] veth0_to_bond: left promiscuous mode [ 506.248925][T12177] bridge1: port 2(veth0_to_bond) entered disabled state [ 506.266119][T12177] bond0: (slave bond_slave_0): Releasing backup interface [ 506.281116][T12177] bond0: (slave bond_slave_1): Releasing backup interface [ 506.298053][T12177] team0: Port device team_slave_0 removed [ 506.312231][T12177] team0: Port device team_slave_1 removed [ 506.322719][T12177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.333888][T12177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.353049][T12177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 506.375996][T12185] netlink: 'syz.4.1464': attribute type 1 has an invalid length. [ 506.403910][T12188] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 506.817219][T11835] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 506.852487][T12197] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1470'. [ 506.874781][T11838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.974438][T11835] usb 4-1: Using ep0 maxpacket: 16 [ 506.982541][T11835] usb 4-1: config 1 interface 0 has no altsetting 0 [ 506.995201][T11835] usb 4-1: string descriptor 0 read error: -22 [ 507.001731][T11835] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.40 [ 507.032211][T11835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.157446][T11838] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 507.184584][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.343631][ T10] az6027: usb out operation failed. (-71) [ 507.349913][ T10] az6027: usb out operation failed. (-71) [ 507.359165][T11838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.370317][ T10] stb0899_attach: Driver disabled by Kconfig [ 507.385164][T11838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.402375][ T10] az6027: no front-end attached [ 507.402375][ T10] [ 507.435321][T12212] syz_tun: entered promiscuous mode [ 507.444378][T11838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.458238][ T10] az6027: usb out operation failed. (-71) [ 507.464146][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 507.490762][T11838] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.560750][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 507.576193][T11835] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 507.583316][T11835] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 507.600404][T11835] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 507.607896][T11838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.623715][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 507.634624][T11835] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 507.646258][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 507.665943][T11835] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 507.680454][T11838] usb 3-1: config 0 descriptor?? [ 507.700003][T11835] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 507.709028][ T10] usb 1-1: USB disconnect, device number 78 [ 507.738018][T11835] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 507.856538][T11835] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 507.886901][T11835] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 507.893967][T11835] lenovo 0003:17EF:6067.0013: unknown main item tag 0x0 [ 507.963404][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.023873][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.057113][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 508.149314][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 508.200740][T11838] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 508.228276][T11822] net_ratelimit: 1 callbacks suppressed [ 508.228293][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.243673][T11835] lenovo 0003:17EF:6067.0013: hidraw1: USB HID vff.7f Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 508.297811][T11835] usb 4-1: USB disconnect, device number 77 [ 508.387312][T12224] fido_id[12224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 508.434596][T11812] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 508.444550][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 508.475856][T11838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.596692][T11812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.617356][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 508.634417][T11812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.634436][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 508.644260][T11812] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 508.674146][T11812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.674181][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 508.748830][ T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 508.757562][T11812] usb 2-1: config 0 descriptor?? [ 508.794635][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.806005][ T10] usb 1-1: Product: syz [ 508.823603][ T10] usb 1-1: Manufacturer: syz [ 508.836082][ T10] usb 1-1: SerialNumber: syz [ 508.884255][ T10] usb 1-1: config 0 descriptor?? [ 508.901560][T12214] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 508.922340][T12214] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 508.944184][ T10] usb 1-1: ucan: probing device on interface #0 [ 509.151542][ T10] usb 1-1: ucan: could not read protocol version, ret=-71 [ 509.159444][ T10] usb 1-1: ucan: probe failed; try to update the device firmware [ 509.192563][ T10] usb 1-1: USB disconnect, device number 79 [ 509.207158][T11812] lenovo 0003:17EF:6047.0015: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 509.264618][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.347479][T12237] vlan0: left allmulticast mode [ 509.392465][T11822] usb 2-1: USB disconnect, device number 67 [ 509.446696][ C1] plantronics 0003:047F:FFFF.0014: usb_submit_urb(ctrl) failed: -1 [ 509.604396][T11851] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 509.754410][T11851] usb 5-1: Using ep0 maxpacket: 32 [ 509.762543][T11851] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 509.773832][T11851] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 509.784051][T11851] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 509.795034][T11851] usb 5-1: config 1 has no interface number 0 [ 509.807935][T11851] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.819486][T11851] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 509.833077][T11851] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 509.844596][T11851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.877705][T11851] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 509.912214][T11835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.017097][ T30] audit: type=1804 audit(1773679965.960:384): pid=12248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1480" name="bus" dev="ramfs" ino=41503 res=1 errno=0 [ 510.077140][T11851] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 510.093168][T12252] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 510.170786][T12247] syzkaller0: entered promiscuous mode [ 510.186081][T12247] syzkaller0: entered allmulticast mode [ 510.210544][T12252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.227307][ T10] usb 3-1: USB disconnect, device number 66 [ 510.305300][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.485217][T11822] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 510.631540][T11835] usb 5-1: USB disconnect, device number 87 [ 510.638857][T11835] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 510.666436][T11822] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 510.687382][T11822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.710915][T11822] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 510.734867][T11822] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 510.763100][T11822] usb 2-1: Manufacturer: syz [ 510.795327][T11822] usb 2-1: config 0 descriptor?? [ 510.884242][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 510.947584][T11822] rc_core: IR keymap rc-hauppauge not found [ 510.984680][T11822] Registered IR keymap rc-empty [ 510.990702][T11822] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 511.026749][T11822] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 511.064283][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 511.080694][T11822] usb 2-1: USB disconnect, device number 68 [ 511.094614][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 511.107994][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 511.125468][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 511.165831][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 511.187803][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 511.228502][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 511.249420][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 511.274894][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 511.294355][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.315354][ T10] usb 3-1: config 0 descriptor?? [ 511.347607][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.533765][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 511.560200][ T10] usb 3-1: USB disconnect, device number 67 [ 511.571095][ T10] usblp0: removed [ 511.727759][T12301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.774960][T12301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.792470][T12301] binder_alloc: binder_alloc_mmap_handler: 12299 200000ffc000-200001000000 already mapped failed -16 [ 511.817982][T12302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.829839][T12302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.841264][T12301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.861134][T12302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.871907][T12301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.889560][T12302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.905613][T12301] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 511.955140][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 511.967876][T12306] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 511.988357][T12306] kvm: Disabled LAPIC found during irq injection [ 512.045782][T11835] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 512.085019][ T10] usb 4-1: device descriptor read/64, error -71 [ 512.091472][T11838] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 512.206333][T11835] usb 3-1: Using ep0 maxpacket: 32 [ 512.236714][T11835] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 512.247601][T11835] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 512.256600][T11838] usb 2-1: Using ep0 maxpacket: 8 [ 512.261831][T11835] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 512.271224][T11835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 512.284727][T11835] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 512.295128][T11835] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 512.308824][T11835] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 512.309994][T11838] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 512.329328][T11835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.354452][ T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 512.362317][T11835] usb 3-1: config 0 descriptor?? [ 512.369210][T11838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 512.384576][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.385245][T11838] usb 2-1: Product: syz [ 512.405099][T11838] usb 2-1: Manufacturer: syz [ 512.409895][T11838] usb 2-1: SerialNumber: syz [ 512.431104][T11838] usb 2-1: config 0 descriptor?? [ 512.447577][T11838] gspca_main: sq905-2.14.0 probing 2770:9120 [ 512.554456][ T10] usb 4-1: device descriptor read/64, error -71 [ 512.602313][T11835] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 512.670794][ T10] usb usb4-port1: attempt power cycle [ 512.851799][T12317] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 512.873100][T12319] xt_hashlimit: max too large, truncated to 1048576 [ 513.360280][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.369220][T11838] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 513.379408][T11838] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 513.425340][T11822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.426446][T11835] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 513.441161][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 513.466519][ T10] usb 4-1: device descriptor read/8, error -71 [ 513.597803][T11835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 513.608553][T11835] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 513.619393][T11835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 54, changing to 7 [ 513.632669][T11835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58050, setting to 1024 [ 513.652664][T11835] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 513.661983][T11835] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 513.670939][T11835] usb 5-1: Manufacturer: syz [ 513.678970][T11835] usb 5-1: config 0 descriptor?? [ 513.689373][T11835] smsusb:smsusb_probe: board id=9, interface number 0 [ 513.701036][T11835] smsusb:siano_media_device_register: media controller created [ 513.709451][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 513.730174][T11835] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 513.742940][ T10] usb 4-1: device descriptor read/8, error -71 [ 513.754441][T11835] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 513.774425][T11835] ------------[ cut here ]------------ [ 513.780050][T11835] !PageLargeKmalloc(page) [ 513.780079][T11835] WARNING: mm/slub.c:6393 at free_large_kmalloc+0xa3/0x140, CPU#0: kworker/0:15/11835 [ 513.794228][T11835] Modules linked in: [ 513.798650][T11835] CPU: 0 UID: 0 PID: 11835 Comm: kworker/0:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.810210][T11835] Tainted: [L]=SOFTLOCKUP [ 513.814800][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.825070][T11835] Workqueue: usb_hub_wq hub_event [ 513.830297][T11835] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 513.836160][T11835] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 1e c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 92 18 f1 8d 5b 41 5e 5d e9 a7 de 03 ff [ 513.855858][T11835] RSP: 0018:ffffc90004a16b20 EFLAGS: 00010206 [ 513.862094][T11835] RAX: 00000000ff000000 RBX: ffffea00010a9880 RCX: 0000000000100001 [ 513.870240][T11835] RDX: ffffc9001ad73000 RSI: ffff888042a62000 RDI: ffffea00010a9880 [ 513.878258][T11835] RBP: 0000000000000000 R08: ffff88802a061c03 R09: 1ffff1100540c380 [ 513.886337][T11835] R10: dffffc0000000000 R11: ffffed100540c381 R12: 1ffff1100dbb1282 [ 513.894370][T11835] R13: 0000000000000000 R14: ffff88802a061c60 R15: dffffc0000000000 [ 513.902375][T11835] FS: 0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 513.911355][T11835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.917971][T11835] CR2: 00007eff78d214f3 CR3: 0000000061206000 CR4: 00000000003526f0 [ 513.926003][T11835] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 513.934000][T11835] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 513.942060][T11835] Call Trace: [ 513.945468][T11835] [ 513.948446][T11835] usb_free_urb+0xd0/0x120 [ 513.952904][T11835] smsusb_term_device+0x1d7/0x3e0 [ 513.958056][T11835] smsusb_probe+0x1aba/0x2280 [ 513.962789][T11835] ? __pfx_smsusb_probe+0x10/0x10 [ 513.967947][T11835] ? do_raw_spin_lock+0x12b/0x2f0 [ 513.973026][T11835] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 513.978639][T11835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 513.984631][T11835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 513.990473][T11835] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 513.996245][T11835] usb_probe_interface+0x668/0xc90 [ 514.001417][T11835] ? __pfx_usb_probe_interface+0x10/0x10 [ 514.007104][T11835] really_probe+0x267/0xaf0 [ 514.011669][T11835] __driver_probe_device+0x18c/0x320 [ 514.017004][T11835] driver_probe_device+0x4f/0x240 [ 514.022220][T11835] __device_attach_driver+0x279/0x430 [ 514.027639][T11835] bus_for_each_drv+0x258/0x2f0 [ 514.032501][T11835] ? __pfx___device_attach_driver+0x10/0x10 [ 514.038425][T11835] ? __pfx_bus_for_each_drv+0x10/0x10 [ 514.043821][T11835] ? lockdep_hardirqs_on+0x7a/0x110 [ 514.049116][T11835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 514.054983][T11835] __device_attach+0x2c5/0x450 [ 514.059765][T11835] ? __pfx___device_attach+0x10/0x10 [ 514.065135][T11835] ? _raw_spin_unlock+0x28/0x50 [ 514.070023][T11835] device_initial_probe+0xa1/0xd0 [ 514.075092][T11835] bus_probe_device+0x12a/0x220 [ 514.079951][T11835] ? device_add+0x726/0xb70 [ 514.084572][T11835] device_add+0x7b6/0xb70 [ 514.088916][T11835] usb_set_configuration+0x1a87/0x2110 [ 514.094472][T11835] usb_generic_driver_probe+0x8d/0x150 [ 514.100006][T11835] usb_probe_device+0x1c4/0x3b0 [ 514.104923][T11835] ? __pfx_usb_probe_device+0x10/0x10 [ 514.110317][T11835] really_probe+0x267/0xaf0 [ 514.114855][T11835] __driver_probe_device+0x18c/0x320 [ 514.120165][T11835] driver_probe_device+0x4f/0x240 [ 514.125252][T11835] __device_attach_driver+0x279/0x430 [ 514.130648][T11835] bus_for_each_drv+0x258/0x2f0 [ 514.135546][T11835] ? __pfx___device_attach_driver+0x10/0x10 [ 514.141451][T11835] ? __pfx_bus_for_each_drv+0x10/0x10 [ 514.147235][T11835] ? lockdep_hardirqs_on+0x7a/0x110 [ 514.152445][T11835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 514.158482][T11835] __device_attach+0x2c5/0x450 [ 514.163261][T11835] ? __pfx___device_attach+0x10/0x10 [ 514.168590][T11835] ? _raw_spin_unlock+0x28/0x50 [ 514.173460][T11835] device_initial_probe+0xa1/0xd0 [ 514.178530][T11835] bus_probe_device+0x12a/0x220 [ 514.183379][T11835] ? device_add+0x726/0xb70 [ 514.187930][T11835] device_add+0x7b6/0xb70 [ 514.192270][T11835] usb_new_device+0xa08/0x16f0 [ 514.197085][T11835] ? __pfx_usb_new_device+0x10/0x10 [ 514.202298][T11835] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.207529][T11835] hub_event+0x2a1c/0x4f30 [ 514.211986][T11835] ? __pfx_hub_event+0x10/0x10 [ 514.216892][T11835] ? process_scheduled_works+0xa8d/0x18c0 [ 514.222658][T11835] ? process_scheduled_works+0xa8d/0x18c0 [ 514.228495][T11835] process_scheduled_works+0xb6e/0x18c0 [ 514.234077][T11835] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.240105][T11835] ? assign_work+0x3d5/0x5e0 [ 514.244763][T11835] worker_thread+0xa53/0xfc0 [ 514.249389][T11835] kthread+0x388/0x470 [ 514.253485][T11835] ? __pfx_worker_thread+0x10/0x10 [ 514.258634][T11835] ? __pfx_kthread+0x10/0x10 [ 514.263260][T11835] ret_from_fork+0x51e/0xb90 [ 514.267940][T11835] ? __pfx_ret_from_fork+0x10/0x10 [ 514.273059][T11835] ? __switch_to+0xc7d/0x1450 [ 514.277795][T11835] ? __pfx_kthread+0x10/0x10 [ 514.282392][T11835] ret_from_fork_asm+0x1a/0x30 [ 514.287208][T11835] [ 514.290242][T11835] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 514.297523][T11835] CPU: 0 UID: 0 PID: 11835 Comm: kworker/0:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.308634][T11835] Tainted: [L]=SOFTLOCKUP [ 514.312956][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.323104][T11835] Workqueue: usb_hub_wq hub_event [ 514.328146][T11835] Call Trace: [ 514.331431][T11835] [ 514.334373][T11835] vpanic+0x56c/0xa60 [ 514.338432][T11835] ? __pfx__printk+0x10/0x10 [ 514.343033][T11835] ? __pfx_vpanic+0x10/0x10 [ 514.347567][T11835] ? is_bpf_text_address+0x292/0x2b0 [ 514.352869][T11835] ? is_bpf_text_address+0x26/0x2b0 [ 514.358142][T11835] panic+0xc5/0xd0 [ 514.361882][T11835] ? __pfx_panic+0x10/0x10 [ 514.366344][T11835] ? ret_from_fork_asm+0x1a/0x30 [ 514.371300][T11835] __warn+0x315/0x4f0 [ 514.375296][T11835] ? free_large_kmalloc+0xa3/0x140 [ 514.380447][T11835] ? free_large_kmalloc+0xa3/0x140 [ 514.385582][T11835] __report_bug+0x29a/0x540 [ 514.390204][T11835] ? device_initial_probe+0xa1/0xd0 [ 514.395444][T11835] ? bus_probe_device+0x12a/0x220 [ 514.400476][T11835] ? device_add+0x7b6/0xb70 [ 514.405002][T11835] ? free_large_kmalloc+0xa3/0x140 [ 514.410217][T11835] ? __pfx___report_bug+0x10/0x10 [ 514.415262][T11835] ? usb_new_device+0xa08/0x16f0 [ 514.420225][T11835] ? hub_event+0x2a1c/0x4f30 [ 514.424834][T11835] ? process_scheduled_works+0xb6e/0x18c0 [ 514.430611][T11835] ? smscore_unregister_device+0x651/0x780 [ 514.436542][T11835] ? free_large_kmalloc+0xa3/0x140 [ 514.441676][T11835] report_bug+0x16a/0x220 [ 514.446022][T11835] ? free_large_kmalloc+0xa3/0x140 [ 514.451154][T11835] ? free_large_kmalloc+0xa5/0x140 [ 514.456273][T11835] handle_bug+0x9c/0x200 [ 514.460535][T11835] exc_invalid_op+0x1a/0x50 [ 514.465053][T11835] asm_exc_invalid_op+0x1a/0x20 [ 514.469978][T11835] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 514.475728][T11835] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 1e c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 92 18 f1 8d 5b 41 5e 5d e9 a7 de 03 ff [ 514.495339][T11835] RSP: 0018:ffffc90004a16b20 EFLAGS: 00010206 [ 514.501441][T11835] RAX: 00000000ff000000 RBX: ffffea00010a9880 RCX: 0000000000100001 [ 514.509431][T11835] RDX: ffffc9001ad73000 RSI: ffff888042a62000 RDI: ffffea00010a9880 [ 514.517420][T11835] RBP: 0000000000000000 R08: ffff88802a061c03 R09: 1ffff1100540c380 [ 514.525427][T11835] R10: dffffc0000000000 R11: ffffed100540c381 R12: 1ffff1100dbb1282 [ 514.533398][T11835] R13: 0000000000000000 R14: ffff88802a061c60 R15: dffffc0000000000 [ 514.541398][T11835] usb_free_urb+0xd0/0x120 [ 514.545829][T11835] smsusb_term_device+0x1d7/0x3e0 [ 514.550906][T11835] smsusb_probe+0x1aba/0x2280 [ 514.555596][T11835] ? __pfx_smsusb_probe+0x10/0x10 [ 514.560623][T11835] ? do_raw_spin_lock+0x12b/0x2f0 [ 514.565652][T11835] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 514.571238][T11835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 514.577058][T11835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 514.582883][T11835] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 514.588531][T11835] usb_probe_interface+0x668/0xc90 [ 514.593661][T11835] ? __pfx_usb_probe_interface+0x10/0x10 [ 514.599315][T11835] really_probe+0x267/0xaf0 [ 514.603842][T11835] __driver_probe_device+0x18c/0x320 [ 514.609161][T11835] driver_probe_device+0x4f/0x240 [ 514.614195][T11835] __device_attach_driver+0x279/0x430 [ 514.619582][T11835] bus_for_each_drv+0x258/0x2f0 [ 514.624455][T11835] ? __pfx___device_attach_driver+0x10/0x10 [ 514.630390][T11835] ? __pfx_bus_for_each_drv+0x10/0x10 [ 514.635769][T11835] ? lockdep_hardirqs_on+0x7a/0x110 [ 514.640972][T11835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 514.646793][T11835] __device_attach+0x2c5/0x450 [ 514.651575][T11835] ? __pfx___device_attach+0x10/0x10 [ 514.656898][T11835] ? _raw_spin_unlock+0x28/0x50 [ 514.661783][T11835] device_initial_probe+0xa1/0xd0 [ 514.666814][T11835] bus_probe_device+0x12a/0x220 [ 514.671667][T11835] ? device_add+0x726/0xb70 [ 514.676171][T11835] device_add+0x7b6/0xb70 [ 514.680510][T11835] usb_set_configuration+0x1a87/0x2110 [ 514.685988][T11835] usb_generic_driver_probe+0x8d/0x150 [ 514.691450][T11835] usb_probe_device+0x1c4/0x3b0 [ 514.696307][T11835] ? __pfx_usb_probe_device+0x10/0x10 [ 514.701691][T11835] really_probe+0x267/0xaf0 [ 514.706218][T11835] __driver_probe_device+0x18c/0x320 [ 514.711513][T11835] driver_probe_device+0x4f/0x240 [ 514.716544][T11835] __device_attach_driver+0x279/0x430 [ 514.721942][T11835] bus_for_each_drv+0x258/0x2f0 [ 514.726802][T11835] ? __pfx___device_attach_driver+0x10/0x10 [ 514.732699][T11835] ? __pfx_bus_for_each_drv+0x10/0x10 [ 514.738069][T11835] ? lockdep_hardirqs_on+0x7a/0x110 [ 514.743271][T11835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 514.749087][T11835] __device_attach+0x2c5/0x450 [ 514.753867][T11835] ? __pfx___device_attach+0x10/0x10 [ 514.759164][T11835] ? _raw_spin_unlock+0x28/0x50 [ 514.764029][T11835] device_initial_probe+0xa1/0xd0 [ 514.769060][T11835] bus_probe_device+0x12a/0x220 [ 514.773917][T11835] ? device_add+0x726/0xb70 [ 514.778426][T11835] device_add+0x7b6/0xb70 [ 514.782760][T11835] usb_new_device+0xa08/0x16f0 [ 514.787531][T11835] ? __pfx_usb_new_device+0x10/0x10 [ 514.792736][T11835] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.797940][T11835] hub_event+0x2a1c/0x4f30 [ 514.802396][T11835] ? __pfx_hub_event+0x10/0x10 [ 514.807191][T11835] ? process_scheduled_works+0xa8d/0x18c0 [ 514.812920][T11835] ? process_scheduled_works+0xa8d/0x18c0 [ 514.818670][T11835] process_scheduled_works+0xb6e/0x18c0 [ 514.824247][T11835] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.830266][T11835] ? assign_work+0x3d5/0x5e0 [ 514.834875][T11835] worker_thread+0xa53/0xfc0 [ 514.839508][T11835] kthread+0x388/0x470 [ 514.843579][T11835] ? __pfx_worker_thread+0x10/0x10 [ 514.848715][T11835] ? __pfx_kthread+0x10/0x10 [ 514.853308][T11835] ret_from_fork+0x51e/0xb90 [ 514.857916][T11835] ? __pfx_ret_from_fork+0x10/0x10 [ 514.863033][T11835] ? __switch_to+0xc7d/0x1450 [ 514.867716][T11835] ? __pfx_kthread+0x10/0x10 [ 514.872342][T11835] ret_from_fork_asm+0x1a/0x30 [ 514.877130][T11835] [ 514.880779][T11835] Kernel Offset: disabled [ 514.885122][T11835] Rebooting in 86400 seconds..