last executing test programs: 17m57.666420034s ago: executing program 3 (id=853): fsopen(&(0x7f0000000000)='smb3\x00', 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) (async) r1 = socket(0x2b, 0x1, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x78) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10000000000000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x20041) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x40000) inotify_init1(0x0) close(0x3) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000200", @ANYRES32=0x0, @ANYBLOB="08000f00", @ANYRES32=0x0, @ANYBLOB="040002808d58cc44e01bc894f27be47ea12648045b291356e0c88d43830cb53e39433916600bb524c40c"], 0x30}}, 0xc000) (async) socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r9 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x6, 0xdc, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r9, @ANYBLOB="4814a2efa2e02807"], 0x0) 17m55.928427018s ago: executing program 3 (id=857): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xd2, &(0x7f0000000ac0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) ppoll(&(0x7f0000000000)=[{r3, 0x6000}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, r5}) 17m52.781166757s ago: executing program 3 (id=874): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffd4, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) write$char_usb(r5, &(0x7f0000002280)="61dfbdb4ec684ae15814cd30990f1e65efa4669e3ba2f4550933ea5599cebb65900b270e913631557ab3a3e0775d662df35d5117c3178460a39f2f452874434e9cc99f2c61fb1366157476daf0a00dbeb7e28ffc2722fe632f3d93ce503eb3385c653d0e0ad370258167904fe6e7af0def905f32cf8585c06bbeac2c54e9c02ece2ed5cb3723f4ed967a4e588ae14e08fb07efb9472457ef6eeea6d98fb34c94c159b857dcb53cc8563ee9", 0xab) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x6, 0x4}) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x82}) close(r6) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x6, 0x7d, 0x0, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x0, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0xa9b, 0x2c018, '\x00', 'syz1\x00', {0x5fd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 17m51.722450409s ago: executing program 3 (id=881): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x18088, 0x80}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0x8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000b0601080000000000000000070000000900020073797a3100000000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$nl_netfilter(r4, &(0x7f0000001840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001800)={&(0x7f0000000680)={0x1148, 0x7, 0x1, 0x3, 0xc, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@generic="89cc354aef46a23b90c090d3fd1067e214bef4b4b9a64eca2a7b2a6198cac92d4b6da4e9e1779465e55a2338f4340b4ab0a0f342003cb27b68a740078fd4a0b5228c", @nested={0x104b, 0x157, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @ipv4=@remote}, @generic="0f0504627822076d97c1184a3e577e915722682145febf087d74f93374e8ec4c1287f5e4dd4f777ffc95fd6f10513ed285936d6c422dc6", @typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="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"]}, @typed={0x8, 0x166, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="a63e3653a4294f6eb97b5d8f9f42858624d185d83a4b546af4c197cb3ebaac4223d0700260463ca70ea4fd4672f95f53ecfdd0e20d26901598273c773a1ec6441ca3496b797052c342a3d67abbfafafafb0c8a23610cedf57b62731767d1bc669a3ca888a32dada4e1ddcf646a99e77d56e085d1498d0f50fa6219cb3f670c1a62618d210ebb5510df695e9731710929f3072ac32e7c", @typed={0x8, 0x96, 0x0, 0x0, @fd=r0}]}, 0x1148}}, 0x400c800) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '\x00'}, &(0x7f0000000280)=""/186, 0xba) 17m51.483039507s ago: executing program 3 (id=882): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000480)={[0x8000]}, &(0x7f00000004c0), 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008, r1}, 0x18) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f000001fac0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000570008001340"], 0x64}, 0x1, 0x0, 0x0, 0x40890}, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000400)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000440)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x3, 0x40000, 0x2000, &(0x7f0000181000/0x2000)=nil}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000440)={&(0x7f00000000c0), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x7, 0xd2, 0x20000, {r8, r9/1000+60000}, {0x77359400}, {0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "ed32c7ec9a8e6df4"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000540)={{&(0x7f00007c5000/0x2000)=nil, 0x2000}, 0x4}) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r10, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x20, 0x0) 17m51.174153119s ago: executing program 3 (id=885): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x8000) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, 0x0) 17m50.530627755s ago: executing program 32 (id=885): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x8000) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, 0x0) 12.265115821s ago: executing program 0 (id=5674): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/217) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, 0x0) close_range(r2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000008000000000000000c00000081117d000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008340201210126ff0905850308"], 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)={0x34, 0x3e, 0x107, 0x3, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0xa, 0x1, 0x0, 0x0, @str='l2\b\x12\x00\x00'}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000811}, 0x400c000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) move_pages(0x0, 0x5, &(0x7f00000000c0)=[&(0x7f00001d3000/0x4000)=nil, &(0x7f0000657000/0x4000)=nil, &(0x7f000053c000/0x3000)=nil, &(0x7f0000527000/0x1000)=nil, &(0x7f0000185000/0x4000)=nil], &(0x7f0000000100)=[0x4, 0x7fffffff, 0x7, 0x80000000, 0x80000000], &(0x7f0000000140)=[0x0, 0x0], 0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000fb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) 8.949129837s ago: executing program 0 (id=5688): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) unshare(0x22020600) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) poll(&(0x7f0000000100)=[{r1, 0x242}], 0x1, 0x82) (async, rerun: 64) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x1010000000000005) close(0x3) (async) ppoll(&(0x7f0000000100)=[{r2, 0x6000}], 0x1, 0x0, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x2, 0xc7) 7.537550432s ago: executing program 0 (id=5699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000003, 0x41, 0x2000000, 0x0, 0x9, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x7], 0x10000, 0x2283}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x801, &(0x7f0000006680)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv4_newrule={0x30, 0x20, 0xf4db158ec847dc81, 0x70bd28, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000883000/0x1000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) 5.821797056s ago: executing program 1 (id=5711): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="04ed5b1be84be54e592cb5406f05578d29000300465a6fbcaf"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x190) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x2, 0x4ed5df13bd56cd16, 0x0, 0x0, @sint={0x7f, 0x3}}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f0000000480)={0x3, 0x1, 0x0, 0x0, &(0x7f0000001c00)=[{}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8800) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000380)) ioctl$int_in(r7, 0x5452, &(0x7f00000004c0)=0x3) 5.797113497s ago: executing program 0 (id=5712): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7fff, 0x700000000, 0x1, 0x2, 0x2, 0x3], 0x1, 0x0, 0x0, [{}]}, 0x88) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x80}}, {@max_read={'max_read', 0x3d, 0x7b5d}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'broute\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@appraise}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}}, 0x0, 0x0, &(0x7f0000000200)="db587f85d6b4dde0d7b9d7e6a69896ccf417eabb4a722adfb8cac0003b60a507e638fdc87358c133b3f96366a24448215061481025606ed947e5fb64c7383a66180c639cb0a8e2b8cad6") openat$incfs(r1, &(0x7f0000000280)='.log\x00', 0x10000, 0x61) 5.33994648s ago: executing program 2 (id=5715): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="bd9dc055f844d457d84ca98a3ff7994716675c4fc624a8429f61deb2e8e430", @ANYBLOB="5da0ada092f50c1cb14245142199ece9706a482df0ecf69c12a4dd2639e34480af1abfe5ae59aca678701befb06eb8d902271e4041bdebaf286e9773c3549f98b4a92969f33272746429fd58469c2fdf54def154d0ab16dbe9f20e81372992d6f7a8a7128ba48e95f12f84d3213aa4c941f772f41ff1cf74b429c7882c355dc8892669a8c79272e79670fba5d8fc83d5e59ce0148b513583f78e9547cf84d1267787ba3055ed8051d8baa924535f4e", @ANYBLOB="163f65103ae5953015b5a77d96d327e52517b29fd46902677b1a7c120388551d5bb71bb61249ecbfedf9fc334614de585161f4200b1d7da7bdf0329979e05ef2acdc7b82fd", @ANYRES16=r2], 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2400}, {0x0}], 0x5) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000100)=0x9) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) io_setup(0xe8, 0x0) open(0x0, 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x7) syz_open_dev$mouse(0x0, 0x3000000000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@hci={0x1f, 0x0, 0x4}, 0x80) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 4.735008113s ago: executing program 1 (id=5720): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000613079373af726ef4bb7e00d2cac08004500001c010000000011907800000000e0000001"], 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty=0xe0000000, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) r1 = socket(0x2, 0x3, 0xff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}]}, 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac9824be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}], 0x1, 0x488c4) 4.420702822s ago: executing program 2 (id=5722): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x10001, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000040)=0x10001, 0x4, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) 4.32329196s ago: executing program 2 (id=5723): syz_usb_connect$uac2(0x2, 0x8f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027d000301061002080b0100010c200009040000000101200009240180ff071d00040c2403020403050400ff011c08240a0402950501090401000001022000090401010101022000090501"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) r0 = socket(0x10, 0x80002, 0x2) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) syz_io_uring_setup(0x6901, &(0x7f0000000080)={0x0, 0x6526, 0x0, 0x2, 0x1008, 0x0, r1}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) 4.222098442s ago: executing program 4 (id=5724): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x0, 0x5, 0x28, {0x28, 0xe, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x2, 0x0, 0xd0e, 0xa2}) syz_usb_connect(0x0, 0x100, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x28, 0xf7, 0xbc, 0x20, 0x582, 0x4d, 0x488f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x6, 0x4, 0xa0, 0xf3, "", [{{0x9, 0x4, 0x3a, 0x6, 0x2, 0x8f, 0xfe, 0x28, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x25}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x10, "49a94479de"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0xff13, 0x5, '$'}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x4, 0x6, 0xd}]}, @generic={0xa5, 0x1, "a6333ed046822efc01d6ce4049db7f7105e1cac315a2f8293e98d7bff6c0c63e6a053cb0d17e9266bc13054ca2909aeb5439431bdcfad911a9b34c141be0b9cab1098d9304ad13cdb8e7f8acda2aed99d38db86f8badd1c9dce173c1e90cc39f9530d1e72d076478b0c6ad77d746c00212742bb9ef45af3fb8d76675418f72f511c3d6db555fa0f5373165e2251c3d59255112ebede0df940202878b4111e64f03146b"}], [{{0x9, 0x5, 0xa, 0x1, 0x10, 0xf8, 0x7, 0x5}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x9, 0x1, 0x3}}]}}]}}]}}, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000740)={0xc, 0x8, 0xfa00, {&(0x7f00000005c0)}}, 0x10) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r4, 0x1) keyctl$read(0xb, r4, &(0x7f0000000100)=""/30, 0x1e) syz_usb_connect(0x2, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xe, 0x43, 0x6b, 0x8, 0xccd, 0x8e, 0xa900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0xbc, 0x11, 0x2, 0x89, 0x18, 0x4a, 0x4, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e5, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, &(0x7f0000000380)={0x14, &(0x7f00000001c0)={0x0, 0xd, 0xb5, {0xb5, 0x0, "0dfc1a58c3f88cab1b37ecd1a8060b6638cac22e26a81f0b6ff150a34e6fc8b0d33237714682b4daa1173487e1040b8d78cc63a92537ae720a1f551d4bd2f14ca078089cd5dd0ce61c8284bc7947a266a617975f4e59642cf37b2509c6a5aad6fc21f6a27d53555302ac5b61712afde790300059350f9a70cb274999ef677a56a8fa11913ff5a128b61e157436843e02c38f168ea1871563ae6840149176e77b5b64aca6c842ba0b36c43bbab6bc487a420a0b"}}, &(0x7f0000000280)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "79f6e8d1ff1bef0375ba0407e6c44dbf55a1e4aedee13a220bae57ca2b2f0d7cc2d9b479e69c1bf232c48fdedefd8bd45d1e33b97a14cb2625dfeb45e09c1d23d7aa3e2ded0d17423b18940637939ba8e9a574d0f7f00e84ee8aff002833e7926477543a5b673f73c0c1ba1d4ce9ebd3f11ad5f26e55e694841c95e36b6308d92c12edcc97d6460727a418c0cfbf1a6ef4abc714051de8e47030691c2c0be1ca50cde2741ef0b6d575c398c8833f4c0008893b52a13ec827fc0efb1992a50ce1510585ffa9918d6003d8390f89a9b2b842d482b433d64fd844a8d9351c1bc0f52f5dea9d3d"}}}, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x0, 0x17, 0x57, "a0449e7881a6502ce425166ee53814dadd8562df37fdab892400642a8c9cb47c1c9b49a70202d486b2dfb3b0773c0d35d1b5468075139a402ea34b4e1ba9ff75111f98754df75298d4a86b034cea2385e619c30eee3e0b"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x3ff}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "c85ee3cbba88ef903162d7e704cdd5b0179fee348428f5268f011c866d0953adf332e31aef2bd5490a9e749d5e23a8"}}) 3.952665915s ago: executing program 1 (id=5725): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffff8, @local}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4600}, 0x24040080) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) close(0x3) 3.952046834s ago: executing program 0 (id=5726): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x804, 0x6}, 0x3d, [0x6, 0xc95b, 0x9, 0x8, 0x81, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0xd1, 0x6, 0x4, 0x100, 0x7, 0x7, 0x7, 0x3, 0x3c57, 0x1, 0x24, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x3, 0xa, 0x0, 0x71, 0x1, 0xe, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x6, 0x5, 0x4, 0x9, 0x0, 0x80, 0x2000, 0x4, 0x6, 0x8c0, 0x4, 0x1, 0x40], [0x10080007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xfc, 0x2d, 0x2bf, 0x6c9, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x2, 0x1c, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0xd, 0x4, 0x410, 0x1, 0x6, 0x400401, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0xe6c3, 0xfffffffa, 0x9, 0x7, 0x5, 0x0, 0x10003, 0x7, 0x5e0176bd, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x8, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x5, 0x1, 0x5, 0x64e, 0xfffffdfa, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0xb, 0x5, 0x2, 0x60002, 0xf, 0x7, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x3, 0x4, 0x402, 0xffffffff, 0xa5, 0x7, 0x6, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0x3, 0x400000, 0xfff7fff9, 0x10000000, 0x1, 0x5, 0x8, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x6, 0xfffffffc, 0x5, 0x938, 0x6, 0x7, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x87, 0x5, 0x7, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x0, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xfffffffe, 0x7, 0x405, 0x8, 0xff, 0x103, 0xfffffff1, 0x10002, 0xa, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x800, 0x6, 0x101, 0x10000, 0x2, 0x8, 0x2b91, 0xffffffff, 0x8, 0x9, 0x1, 0x6c0b, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xffffffff]}, 0x45c) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0xc201}) ioctl$TUNSETDEBUG(r7, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETIFF(r7, 0x800454d2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r9, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001300)=""/4100, 0x1004}], 0x2, 0x8c0, 0x2bd6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r10 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r10, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1000842900000043000000"], 0x10}}], 0x1, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x206, 0x59, 0x7, 0x4, 0x9, r11}) 3.837681229s ago: executing program 1 (id=5727): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x6) 3.733069134s ago: executing program 1 (id=5729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x10000000000000f7, 0x0, [{0x487, 0x0, 0x80000001}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x5b) read$watch_queue(r6, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r8 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0x991, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) 3.717771262s ago: executing program 5 (id=5730): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="04ed5b1be84be54e592cb5406f05578d29000300465a6fbcaf"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x190) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x2, 0x4ed5df13bd56cd16, 0x0, 0x0, @sint={0x7f, 0x3}}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f0000000480)={0x3, 0x1, 0x0, 0x0, &(0x7f0000001c00)=[{}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8800) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000380)) ioctl$int_in(r7, 0x5452, &(0x7f00000004c0)=0x3) 3.696356272s ago: executing program 2 (id=5731): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xd, 0x1, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0xbf, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.520550522s ago: executing program 4 (id=5732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r1, 0x8cee000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x7, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c54000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000010000000000000000000700000014000400ff0100000000000000000000000000010c000280040001"], 0x94}}, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r7, r5) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000002c0)={0x3, 0x8, 0x4, 0x0, 0x5, {0x77359400}, {0x3, 0x1, 0x92, 0x6, 0x2, 0x8, "ef733c3d"}, 0x2, 0x4, {}, 0xdb, 0x0, r7}) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x4008840) 2.755226181s ago: executing program 5 (id=5733): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xc9d3, 0x0, 0x0, 0x2}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000740)={0x0, 0x1460, 0x400, 0x1, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4000, 0x80, 0x2a9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd576, 0x20, 0x1009, 0x27f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x100, 0xffffffff, 0xed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a5a, 0x1001, 0x2000002, 0x2a3, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r4, '\x00', {0x1, 0x487, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x6, 0x100, 0x8009, 0x0, 0x6, "100056f200"}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8004) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000340), 0x0, 0x0, 0x3) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@ipv6_getrule={0x1c, 0x22, 0x2, 0x70bd28, 0x25dfdbfe, {0xa, 0x14, 0x20, 0x0, 0x68, 0x0, 0x0, 0x1, 0x4}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0xd801) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r10, &(0x7f0000000040)='\x00', 0x1, 0x1300) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x1c, r13, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) 2.507212513s ago: executing program 4 (id=5734): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x4}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="3200000000000080"], 0x8) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x92}], 0x1}, 0x7101}], 0x1, 0x4001c00) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "d7e60b99abe50e75e07bf056f2936dd93adb289b895bb1cb40cd08f76b4a59f4", "1655f8d9360db5a2b3d53b2c16221bb5", {"b6aff81ea1641811a3294978e016aca4", "e22819d68cc64d5c6a4ff56363718ef7"}}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = signalfd(r1, &(0x7f0000000000)={[0x5]}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) write$tun(r3, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x50) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000000c0)=0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r7, &(0x7f0000000280), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@gettaction={0x94, 0x32, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x97b6}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff001}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 1.976901785s ago: executing program 4 (id=5735): syz_usb_connect$uac1(0x5, 0x85, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x3, 0x90, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x4, 0x2, 0x9, 0x80, 0x1a}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x1f}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa, 0xff, 0x21, {0x7, 0x25, 0x1, 0xc, 0x7, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x22, 0x9, 0x0, {0x7, 0x25, 0x1, 0x0, 0xe, 0x1}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x40a00, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) socket$kcm(0x29, 0x7, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x14082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x4d) 1.820648401s ago: executing program 5 (id=5736): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}, {}, {}, {0xdd86}, {0x8, 0x22eb, 0x7ffffff}}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_vif\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_vif\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/17, 0x11}], 0x1, 0x4006, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.750897165s ago: executing program 5 (id=5737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00'], 0xfe, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'xfrm0\x00'}}, 0x1e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r7, r6, 0x0, 0xfffa83) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) sendfile(r6, r8, &(0x7f00000001c0)=0x7, 0x7fff) write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[], 0x47) splice(r4, 0x0, r3, 0x0, 0x5, 0x0) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x8, 0x2000800, 0x238d117e660ceb5b, 0x401, 0x6, 0x7f, 0x2bf, 0x0, 0x0, 0x100, 0x27}}, 0x50) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r10) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000004000000400001"], 0x54}}, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000002240)='./cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.440372527s ago: executing program 0 (id=5738): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e21, 0x4, @loopback}, @ib={0x1b, 0x0, 0x9, {"0100"}}}}, 0x118) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=ANY=[@ANYBLOB="80010000100033060200000c00000000ac14145a000000000000000000000000ac1e0001d5ac3b73c4fab9d70000000000000000000000000000ba13f8cfdada", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000300)=@multiplanar_fd={0x2, 0x1, 0x4, 0x10000, 0x3ff, {}, {0x4, 0xc, 0x9, 0x4a, 0x3, 0x5a, "1db42612"}, 0xd, 0x4, {0x0}, 0x1ffff}) r5 = accept(r0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x1b, 0x200, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1}, 0xffffffffffffffff, 0x9}}, 0x48) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0xffffffffffffff1c) r7 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000780)=[@cpuid={0x64, 0x18, {0x100, 0x1}}, @nested_load_syzos={0x136, 0x50, {0x3, 0xc, [@nested_load_syzos={0x136, 0x30, {0x1, 0x2000000008, [@nested_amd_clgi={0x17f, 0x10}]}}]}}, @wr_crn={0x67, 0x20, {0x6, 0x7223}}, @out_dx={0x6a, 0x28, {0x104f, 0x7, 0x8af}}, @nested_vmlaunch={0x12f, 0x18, 0x5}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x0, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0xa77, 0x1}}, @nested_vmresume={0x130, 0x18, 0x80}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5, 0x5, 0x1}}, @cpuid={0x64, 0x18, {0x1502, 0x4}}, @uexit={0x0, 0x18, 0xe67}, @nested_vmresume={0x130, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x29}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0x74df}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4b5, 0x5, 0x5, 0x7}}, @nested_amd_stgi={0x17e, 0x10}], 0x2a0}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000300)="9a0000af00baf80c66b864a44d8866efbafc0ced660f3880aeca6e0fc798aa003e829328000e660f38911f00673e66670f30f20f2b5d6c440f20c0663505000000440f22c0f0fe4b00", 0x49}], 0x1, 0x2b, &(0x7f0000000440)=[@flags={0x3, 0x100000}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000030000e7ff000008004500005800000000ff019078ac1e0001ac1414aa0c68d6870801046cac1414"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) epoll_create1(0x0) r9 = socket$unix(0x1, 0x1, 0x0) close(r9) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0xfffffd64}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 1.424499567s ago: executing program 4 (id=5739): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x6) 1.362724395s ago: executing program 4 (id=5740): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) openat$full(0xffffffffffffff9c, 0x0, 0x10203, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x1a5601) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0}) r5 = openat$sndseq(0xffffff9c, 0x0, 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000002000)) r6 = socket$inet(0x2, 0x1, 0xfffffffc) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000100)={{0xf7, @loopback, 0x4e24, 0x0, 'none\x00', 0x42, 0x5, 0x3}, {@dev={0xac, 0x14, 0x14, 0x5}, 0x4e21, 0x3, 0x9, 0x4, 0x5}}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000400)=ANY=[@ANYBLOB="2a00000008021100000108021100000008021100000000000000000000000000640001000006020202020202010782848b960c121872060303030303034d6e609fbb2ff63f11dcae47e85607e18f9735cb299d1e9f2ec1e075bc6397287a26a84f0c380a637cfd5c96e36d33e252e947e0f37f0a7374ee537bbe790702b97e22cc45f3e634823d4881e48ea20bde1a0d3b65547cb9fbfc2d152731e7382c04d47c096e43b426e025780673d6"], 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000180)=ANY=[@ANYBLOB="18b508005a6c9751f00508021100000008023b00bc3f4f01e214d0edb00b0c6fb8ff2fa66875b5b18414115ad13331ca37f25c3b018b5351ac5446245187494fca6a83b6b667197c69a65198a5bb764263"], 0x1c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_route(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f0000000980)={0x1, 0x0, [{0x40000082, 0x0, 0x5}]}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x88282, 0x0) 824.981331ms ago: executing program 5 (id=5741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x33) wait4(r6, 0x0, 0x0, 0x0) tkill(r6, 0x3) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, r6, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2080) pselect6(0x40, &(0x7f0000000980)={0x0, 0x2, 0x8000000000000000, 0x9, 0x7fffffffffffffff, 0x4, 0xffff, 0x41}, 0x0, &(0x7f0000000a00)={0x8, 0x7, 0x690, 0x8846, 0x89b, 0x6, 0x436, 0xd}, &(0x7f0000000a40)={0x0, 0x989680}, 0x0) syz_ublk_setup_queues(r2, r8, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x913c, 0x4000, 0x8000001, 0x3ab, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0xa, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21af, 0x10, 0x2, 0x902c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfbee, 0x5200, 0x2, 0x821b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x80a0000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80c81, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r11, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r12, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r12, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r11, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r13, r12, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) syz_kvm_setup_cpu$x86(r1, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) r14 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0xf}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r14, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r14, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) sendmsg$key(r14, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x2, 0x17, 0xff, 0x8, 0x20, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0xc2}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x68748510, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in6={0xa, 0x4e21, 0x10000, @private2, 0x8}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4f945317}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_address={0x3, 0x6, 0x2b, 0x30, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, @sadb_ident={0x2, 0x0, 0x858, 0x0, 0x5}, @sadb_x_nat_t_type={0x1, 0x14, 0x67}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd28, 0x34ff}, @sadb_lifetime={0x4, 0x2, 0x8001, 0xffffffffffffffff, 0xa, 0x2}]}, 0x100}}, 0x2040880) 595.083301ms ago: executing program 2 (id=5742): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000051c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005180)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x158, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0xb6, 0xc, "e353bc9b865dff9265ae649f25efc09fadf0785cf2113c66cf5f7b650fab6634919a27c7e5c356c6f23515b66b661f3e5ff7f399146692610b8d2c0e776614c852540136007dec2c19e10c6b84519b311dbcd2df8886d45c69ecfb978e643d7925fcf5fa27eea24064d09773c370ad117682b67f36706a628ce90ba7caccfc4f3aa8ba7f8bd09576e92b49f8547f7124378b0bba7588711973abf7e85c1d936a194161dcc389ad69faff6ab4aa9658e9aa82"}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff157b}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x198, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x87, 0x6, "35271df3c35abaab940678e6037796bf5011c6bcb4d1a4bb05ce4e7b0dd562521a50f456179a5ee657cf4f34cd57f250984307c9010f676244e49c4e2f575643ad00ce28486d737c9aae2d846d378d86418a33db1bf87f6e8b29e6b9726eee6f9e9aa38880972b01b3dd4378ea440c5339c9b6b5212bae08b3d668f2274107af5e7417"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "dd8cee34005dd0e6fe6e7dbca5d9355b6503015a70a832dbc098e7be3f4f5b307b7ee49001e61fefbb5e64df2bfa8b6ad1c66ffc4d6497c3f065f5b7d7f7ce6dc65b0450491de7c0d1ba77214317a52ebe5e0af5c80713d71eaabb720aefe5bf07cddb0968a95ec0ea2c2c81eb2a6d017ffc1a530979c621cad36570d99d8cfd52b21c54e8c3480ad0ce21a27c43d5df3f4669d662831fb08289ec0b06acdf7824f4acf4c4989dcca0be0a99"}]}, @NFT_MSG_DELSETELEM={0x264c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x262c, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "84a5b995c5523c62ad0987cc9c1eefaa530305905cc86f1701da65e39b7fefdb046b71ee45ad8259d0a729f9cc1357941685133cb09976"}]}, {0x504, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x450, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x68, 0x1, "4f281404b46106a9daa9fce22bf79f41a834d8e4e71faa7dbdf165f873bfae2886d8c49798a7a42356dfe51ee21a6ba8b321db4b0faeecd34cb3e8701fc9f0013b327c7537fba3db48f4e9cb8378dcf6982b47be734e2d84e461c2f696d0a175d331697e"}, @NFTA_DATA_VALUE={0x9c, 0x1, "0cc6a3892490938b870887661637049f9e549cc14d02a18486a9d1c449e12abe041b80feb4774784cee1f043d91b966786826d208053b46d03e228fa7b67c4eaa2922827d2adbf0fb860ccee8b7ec71bb9567164d644130ffa6a9b692f5f437ac20ce22676f652d9cd1b3d71156cccb0396c1f02aa47b2912bf1b78474560091c9035d1292f2b37979889d525016b423b2cdca0205f5b1d6"}, @NFTA_DATA_VALUE={0xf7, 0x1, "9809c1c61d17aebe9d18dfca25e0100e5cb012ee0a6cff4ea01d4c6f0aa26bed13024a75088ef16e332fa710bafcfb241f28190a366447c8863f0f0f4b6c7ed3d2bb31a516f8ff4b663e33d6e6e02d7e9ce1dca80ad2d30d721710d7bf5a6d1c3f43c6a121905b0c4799a166cc364f2adb0a8ec39d9b589157ef90d851a44ed708be17bf98b4667cc1ff8f7b72d9d72000d47977266fe3747e1460d74999a29906c294076e988e82d2b18757eba2c09d329850126cc5b4cf00712b0c498f37954e953c5bd2b53ab5835a79d0cc1f88dfe2cd67cd138f06ee1a4786c1e0d60fe20c8abad2b04981ef2da0f6cab273b45880adb6"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "23f26e529e66701f904ac2d14483f05542782f68dcab7ba0bd410d7290ab698c6470e4084e8992f2257a73ffe0b3e0b201e16126f5f03280ae21bc7783791fb5ded73d51aa5120ed0447805d4e747b43e838ec89082898c3079f"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0x6c, 0x1, "c848fbe6b93a87cd749ff8b4998eb906996256eb2d581a44c7523eec128c1deb35099579ce23cb5fd526d2c94bc242860c04114b56bc96452f89d41ce0e2135ba7a4935001f191aacec410d893b09d922e93925dcbc069dbbb341c55fb55a2fb905f7c6770c401fc"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x3b, 0x1, "cffb4cac838d839c78daca8576246c370188175e0f57b03d8562d4c17110a753f868de9a7bc081b36fe7e4886dc085cb0d119335aba455"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x8c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, {0x12f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x12e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xce, 0x1, "703d26b3595c6cbe1c890613da80e5376bab4bbd343944a62ab9e2d436e7501a703bd947dee70f18f824ae9550f2ba67662217d38436a10a183e4eee134137625343a60b6353a387e06403090898f3281430267ef1d1c674d01b23ce2a42d04fd86d8eb45b6c97534dc88e7202b83f4cb1b21bcb695f1592af108d7e544fcd676e17ac3aaf572f16723809d5762d4abc066db2596c8a61ceae44db3b2f6940a7de60f455d4165fe2988dc50d28dda32d5da7b9676369babb914bf02cd461a3d06ff6c79ab8a191060f6e"}, @NFTA_DATA_VALUE={0xa4, 0x1, "b24f090d31265ecf4c5f468cf8777af6297c5091d774e97ab51b6448cdef662f7acfa584c526acec8ddea2d1122ad9cf9ef01be1161ce510afa77ebdc1d9d1c642785a34427ddf904ecb5639c2bc5992b8937440bfef3b0cfbed20bdec49c3022e913a7f5e314024072f9a73aa6b29180283a86c2991b3a0007609a052db4dcf59bf50a876a74474a89ecea64645f1b877679547217c50b044bf7078b843a42d"}, @NFTA_DATA_VALUE={0x4f, 0x1, "0767e3db6f7a435133b5b16637fe4aa56360f5bf488c10bb3189e392c51fdfecf88f1f8d6cde2af6c26065feb8b4586894947711cdda4a7c5891bffa50ce6ba6c8f88dfb331a4c350b9de1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x78, 0x1, "23c322f369fc6b6fc4dd9e23055a77c6446883b41f3752798be3fab602ec3a08905fa468d7dc6a10d64c487fed3d1ac86ebeb61392b7c1f1bdbc840f116ba70854d206ce197e1c6996ee554d6303d6f603b7e73dd9fd9bc09a2fb2838301a2efc3665ea715e26378a5be0c8073a904e26560fdaf"}, @NFTA_DATA_VALUE={0x61, 0x1, "63c324c98066227b692693a75f095e1469d8d2a14f2e63008b9170c06dfeb999d8c839bc35ecaf7b9f44ae5bce471e85cc899d29728273d9f3229674761d1ed6908c7ca9851edd65b09adff71d1bcb30ff4daeab3b03fa15c11b6d35d2"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x410, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "0091da0e9c2285578b69c43282d6b474e0f498f549fad9c250ba8dcb0fa0cd05b3afc40eb1899c518c1e647998ba1dfca08b2e3be8e738d5a0e8df90830aed6b17e76e839811befbd2292a82e291968a0fec27758f381fcd649a1d87ff730ddd65d7bc343ee73667b4b627e473b32c53e875657fbf35f1d804e4b9bc721e6889e380f0230c8ca6a35731d28f526b2f26041b2b9617bb1d8135634ee88cb0f2a8e501361b1677451d3214d0b7f61c78c2c9ddba68d6963d25d49e26d6ce21242012983bc149cabcc2b6cdf6426addf13095b1870542332388fb9270df59fa8b7e4e93e4cb812a48"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x2dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "39982778c820b596be434e27bb36732588bed70f4558e3b884014cc7e5ac7e9ee7736fdbe158b6db88be0bd4df4b805ad46935f4d278a765bd2c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "6eeb6645b6c26165b3588aee22b99ea2aee7a4dbe5b9d0e89281876623a4cf7e95a229c7be0ba967233b43440244abed0e8e79ec820800e9871261da09a62d28d6473aa80923a0dcc5c6c93ea182d753114feb58088b4879dcda22f7b8c737f63618f4cb2b6bf00937c63a5a62ef540449513747b7c872a299d6b2a28f6305fb5a43f66e62f102af419f1afc5c44307e205af93e39d91cda02514db4e65d75fb0ad09691dbc6f6e27bedddddb7e31e45552dd04f76b56069f3ec36c1d333fada0a5b19ff25b9d4d849a2fc7be5b3ee68e0ac8f785db159031a95b964f47f6848448a5f4900248142c935a1c8ce4f2f"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x51, 0x1, "3fdd476ab24eb5a98e947dde991c1ed8f34108481750bf26684939e44f0a7419e5eb233c70187ce4036a77838298d05dac32d1b00b67dec4b7f54b156cfee697a33ca05f53855cc8bedf477cb8"}, @NFTA_DATA_VALUE={0xf2, 0x1, "1b69e94448b3a0d170c86cb7125e47a9107667bac12b38b895ae267d56fac136954ec5721d737d1d99c6fcbd9c31c092190bd14da1233a1038f179966be6fa2e2cf22749585bb8815fb8122a02b25509f4147751f1620ef122b2bda8f877a12a3c45e74c4a94d741da1a7dc584767724cdc2db380dc6f195258445dded676d165febb3ceb1cac581988e1b70db61f6c7f7638257d5d1d46d16dfbdc9d3933f45fe589878288e49b0273e72f3cd012f0afbd528202799317e3aa32f0806b774d219e359b472d5e47277ff7c1b5ed3aad0446e3cd2591d6ce1b3f734064155864827901515d34c86c1aae3b9cd95b3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x25, 0x1, "2f8145a978c1a8fc866bf927be7f3b1d2533d2cd8b313e6003157e9d068d1a4f59"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x45c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2f0, 0xb, 0x0, 0x1, [{0x29c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xe5, 0x3, "700aada0442ce797ad909dfba0f0d5ff6c61f61d181d7537c504d47db9194d8d4257fe202696a57a46a5cf1bd457a740aea3d8786dadb9ced7f474ba4d26718c2ac6e14727df9bbf686629c5bee93574e96caf239e1ebe20395a4e892fa61595bb8b24dc05cad49c17d0b9000dea41726a5fb176bb5af99212ec4bf259ca2c58314d8038d1abe25cc10116755d3dacf71cbd110c3de0be79095a4879daa062f920610fb06eab7dc8745094762534dc7c54f11eab0ef63f31ca5f37a6bc2c75243d3d778ebf6450a4be5ac5e072676f6e17b9dfad4afb699c7ea8c972f46e7a18f0"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0xed, 0x3, "22169cafbc0cdf955f5e305c6db55627f39649becdca48bca662e504bd1c143ab5a7fba1b9b190ea516e76d448766cdd117becc7457b3341a7d7d6852e413a8b05617b1ceea2d6bbe5ef21de68eb925da60d21a3db0e7365224fd43fcc8a98bdce5078227a0eae5d8a074078fc4fe7acda57cd9aaba5f7edff8d82031c896798d5965cd40854b7c00d3dd71563b2116fb2fcb981e2a0ee74b96e9ade863b92ddbb98f0b4f5002af741cb8aa960e32fd2835b70feafdd4e413aed9eeb25b145547b3d61b2d61aba9c5380df098c074d567ee46a73ddb74a9b8d54f7c3fca7b872f1b0890c47e9e616df"}, @NFTA_TARGET_INFO={0x91, 0x3, "8cd97195d8d2beae2a0e1c6c2f2315762151443b251b921f83f12ae5cc6c6d910b68bf1d2ac90b66512cfe41937f677e9115cc173a56b872ad5d253ad73856ec71ceb22d1a5ecf55d38e0605cefb84230d23fb29efb4e380b90a00764e9b5a997d9474d889a3eb890c5df8acaff71deb5ca435d1ef166f93adb1f58eb5b0d7373902fb380fcf0babaafe7bdd40"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x77, 0x1, "ecb8c312d8ddfd85c9023df5588150f54a27f0449d92e5cd48005c741dff5166f9179acaba300fe12d062704af7f654f84242790fcc103996c2696a9250662205d8c3d195efe4ef529430c0d587365d1bcdf0d51791dbbf8b17e5320c495a9eef2359abbca1cca990799c8c7fc811dbeb0dc40"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "8381e96a8e5519654e45def2eef39fb95f2c3a0f96f94bd1c511ede0fd9cf1c160f6fc18754f25b6513b5781b0bf138093f1204b7e9e0a5180ff8eea3a882a79f16909c2b6434d0356643298fe039295cd3c37f9961fadb1a10aeb2a7dbdadbfccbab4f7f7a2fd4f7a796da93e3cc5352ef82b65f3e51fbd0f4aaab8b71b1a528167e2f881532505855b6abfcb5abf9d743ebbac8f36"}]}]}, {0x4a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xc4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "981e54087917882f93696db40a2184d1dc0640c4d061051c700d892fd1bddb8564a5dfc85da6790ed1af7c7e0f0c51a2ef884732a8e4332ba43234d12e85c5eff6310987f307fa729bf16e9bac7bb05beda1fdd5ade7ab22d481e4df5aab09284a572c0c895f4a6d32a2be36dfa00e18fbc1173384031e434aaada5e5e53ab9f73f6004cfc21c2cd3964eafe9403c2c42c1603fec6026f663b6aeeb2096769ee1a02297aed2c874cd084e9db0ce663"}]}, @NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VALUE={0x98, 0x1, "8caa3c6aa53b9fc4deee0f254ed5a634927b7ad6011fe3446dd207379451a0976feb029142faa6d506340afee028db8cf0923dbe20cbe3c42a495feae299e21803a9c1d9a64aeee7623b4205ff0b97610d83821c4eb38ad084daf208b01003f7c054dae0e8dd6bd2b7b848a1c501ae88cd3add560591dbb56be822cb1f7dbf32af0c592e6a00c43327a65cc5a2d8a3e764444bac"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "e55b15ec3819665522412114f9578445d414772b09b0680a79af21a560d586b7c2d5f15875dccc7577ca227f166521336aad72caa3c837f640ac8d977fc47d65f1b2ec1cb03faa27d74407ca360b26f8828519c6948b219a2a1127e80a12fcbf169ee38bbf50bd6b7bef37c9230fb258f4b2269680e355e39909be164cb0c28387aed533cbdae9a9ad647a385ab94ea31de3ce212b7238145767e5f155d3e9e45fb7fe9f3e8bfb0f97"}, @NFTA_SET_ELEM_DATA={0x5c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "8b399c32c7f3d49e1d4e720767ba6af29bb1355e9cc737dd3744531fdbec1e899094ec20e732746bccbd34fb0d0f95de4d3f348554f833a100cdacdc103b00aecc71d19069efedb1a0a5cfc8f0686d5a27c828"}]}, @NFTA_SET_ELEM_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VALUE={0x46, 0x1, "a13656b305b7c94d7d4e34be1f34a3d48271451cb5efe974c62be4201e6ff6170e78a2de0742f896e659e63bedff9c627acef88f4dd90ee44f4459c792851acf6139"}]}, @NFTA_SET_ELEM_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7a, 0x1, "ff4486b6d277408774ac146f18d156d1bd938247b580b2a26af92adf5eaf6aec4c8482608b396456a80d6c90bc35e04c256fce7227bd007b1bf265819e2087b9d42a346d5d7b11d462b08772d8fc854f19f34f92eaab283cfad34687ff343722dfc9874dc6b1f353938f7514fb732307a88bddffdfd1"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x1f64, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1f3c, 0x3, 0x0, 0x1, [{0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "7df2a6ebe74e937caa933e93563df246040793cd506efb45e8"}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c}]}}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "e0b1e8c331f1dddd76aec97604bc6c94972a2aaf4a29758e0538d0fb6a1abfa5c55a3dbdb389f9828f15018d9a8ac80fe83a69112f7b7b3ab463dd08a95f1471ee54139c711a90a38199e1af3e5275e44df07e67194acb330cd5150ee73aa83ba9f63725cf30158a6c1d3dc3c26d45d51b46de3a6a7af1c613e675690fa4be823f741b665ffdc92fc18337522c15ecf6cdb1fb9bf6f025811135"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}]}, {0x124c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x1170, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "3d0cfdd0da952e201e78af7a00c077e38e45761c2d5ceffabb0c086ee83f4ce3435f15ce5130d9e6a001f4a63b83addafd00de34564b830d0f38b00565faae5c40098e4a38b07a534f5dafec5d65c30bf04fafd7000f51eaf171cd254d7baf52b271e806dd8ca02be9db17e71da30a1c3d1034a1127e1af79cbefcb7246e1c618ec3c2da90477e36a5530eedc921b80e6e71a72408bf4d9605864608e8b7cef80e183d1f89fa6386cc39341b78f5586d91a7326babaf55b3ee3cb8403a411eea2e18995c469661156c2170ef72dc3fe3"}, @NFTA_DATA_VALUE={0x47, 0x1, "839ae1108f9d53b9969b10e9763424ef9d1186e856a591525ea5f73db6d27afd191916622c289e4e3624c0eb10574e22eda935d83b0ff36c9e247aa7968358898945db"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x94, 0x6, 0x1, 0x0, "d9928c6e34d2f7681953ee373db2275c3f9f8224bfeaa7f0080d8ae0d70e8de83a48c7150844f02202a7feb090af94c772de4213e4044d1d1f4ff5347da3a2622529a74c991bd4816158fde4e59f9e33c0d6a33009c3474d6051db84f98b4814e03f4eeb9cc525d3dca1588714c43e783371abbe5483e43a4656bcc0b0a35041127160babc1634d37b44ea1df489b24b"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffa}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, {0x7e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "43610104041ff24b3b5c95204c79c876448aa9c7dcbb063129a4a4435583c6eca0e88be57ddf93f01b574c7720404930b9eca0b87086fb593f7e0345e355b195ed6b3d2e206445abe6a71ae447c6a34565dc3ec770"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x99, 0x1, "19e67e64ffa3ef337e0c0ed15e940ea03a8d3852efd9fbffd9f630170fb6b54f28f8b70ab2bee3338543295bbaf5e4bd8392a4df2b5ffaf92ccb7f9935362ea302c444a36363a07eba6421b253f0a1c4b6f8d4bd115e81eee190628124c23af052faedef4fbc1a9e1f17f6b4bb41ab540fb17694a498d4b7ce841ca53568ae807ed2767ea566c24b59d66d87493d6ddaa54c4dc5f3"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5bf2}, @NFTA_SET_ELEM_KEY_END={0x1e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x40, 0x1, "847265f69d5ce43c5bb681ed7e1dbb9c0fb9083c8127ac278d02a0270697b9681947e03c9e29576857da7794b76c33f2c5008ee8d8dbcb3dd32c6e65"}, @NFTA_DATA_VALUE={0x68, 0x1, "ffad6deb11809706cd6cdc9a66442206ff3e1946b2bc3c667bbc71fc46487083ffd72ae1585da61288f4819b2b5dc69312b2439db362fa3b7217d35b578915f39c55ee5bb88eaee2c7a67ad2a47a363eef70069873e42d17fcc01effa721f1bd4bf2e17a"}, @NFTA_DATA_VALUE={0x27, 0x1, "63f4aa786f14a14415f80a451ecb1b9822b50ba76b41b6c4a29ecb169a9a4b48f0afbb"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x48, 0x1, "edba60ba9c43e44e174747e1ea2205e898ad2425b1a7d5ddbc770d1ec9e0313ebd083c2176237b4753ac2e8ee4a2f4a2c61e79a01ac2d39b35e3d09ee575a42031e70060"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x188, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8}]}}}, {0x5c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x2b, 0x1, "8fdf8de4faea18a356915f10b6a7654fd2d5abd5003deb3048d306ab7c6b135707eb3f2302b5fc"}]}]}}}, {0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_DATA={0x184, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x74, 0x1, "4a830ed8c77d37df437a11818e783eccc2ed227334be9885191bfb2c09031d3647a9a5e36b9b0212316ad346b90ce1412199c5a228cf1bf8be0c17eb923901e0c590224fe908f5abe64f33e65e9e436e219b928a10dd21b75313dc3c9f7fc4a94e6a32f2d38ee4f5903ae7bd9be0177a"}, @NFTA_DATA_VALUE={0xab, 0x1, "7a30641bb24537fc93fd6c6ca37eced5e55ef74cd2e287cf5ad66a28f349249d4eaa0e8587770d28fa0efa36a87f7d4008615032feb0acbfafd19243c3807556bd54966dd731725e0dad67632adb709ba120e94a096b649f4c65652b4655eb979622398194c21b2ad0298f24d7297bcbaca1b89ee5af444f5c00f3b38f6b0675ebb2ced453512f07cb6fbfa936e22961d66f7f4357d588427d51f4a09aa7b3b713b33843d1d7f0"}, @NFTA_DATA_VALUE={0x1e, 0x1, "869f1308858cc756b3555262c54f58931ea72ccbe272357003ee"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x7e}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x44, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffdb35}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xda, 0x6, 0x1, 0x0, "3c09b58529487325bdd4260c7f79991eb90cbe5a656a44532fb6d05887f9d1749f9ea46710a920c30dc77c15fe4baa1181ec1765221ce63d0036fe51015e21b267cd208d4b77b8ad75e22c73bfc92d8e708e0f04f81c4c0bcd3c17c9cb716bab367c9ed64fc9406361ae10411c2b8b71c4f0215578621096a496ceb6b9e5110767ffe1123a2c53ed2a74329d4caea998257f2bd6de9da3ebd83c63b9f9f2af5161a0732966dbfdd154ae973e5576b6cf97b83a3c3a29001a72b7680573eb895d83ae3bd9bed30fce82aa2d042b604a7cb5633ad52def"}]}, {0x348, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x1e0, 0xb, 0x0, 0x1, [{0x1bc, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1ac, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_TO_DATA={0x1a0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "dca1ccbc91152199f3bf066c3e36fc3ce68faa7c3306dbc6faa1e287e6d68f7f80891193577e29b72a8bec44e946c14962a6b3023879bf6e1b78807a79b08ae6babd3f79eaa78352a64a7f816d16d64e32a7269ee41fd33607c940b3619b42f85169bf7eea56a59383a9b770e9a64f0a2c4180c3621ace44e152d70053ea"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xad, 0x1, "75cb5eaef4fcf9cb17b7ff43c4efae8532c284caf3257c4573f76920746227e24c00de24bf583ca06a05288927229ef4ecffab4bbb2ce2c999d8ffd208a39597bd29845b28a496cd8c43ce659c7be2bf19f9c8455f17fb68f5c4a3d771232c57f171b254def6b894ede948e9c66673e6ec970eba03ffc9b831deadfb5f9929be576d9c57aea4b4b037c8aabf883cddcd5547b0031eef0e98158c73cb358467a2b6105ab26c7fde4589"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x40, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x6b9ad0d7698c5342, 0x0, 0x0, {0x1}, [@NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48f4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000240)=""/180) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000180)=0x925) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x2, 0x3}}, 0x20) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x103040, 0x114) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x103040, 0x114) sendfile(r5, r6, &(0x7f0000000600)=0x400, 0xe) (async) sendfile(r5, r6, &(0x7f0000000600)=0x400, 0xe) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r2, 0x6f50, 0x1) 583.580047ms ago: executing program 1 (id=5743): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x89901) fchdir(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) close(r0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x80, 0x80140) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000000c0)={0x5, @sdr={0x20323159, 0x9}}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000200)={0x80, 0x6, 0x305, 0x4, 0x0, 0xfffe, 0x0}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f00000001c0)={0x100, 0x1, 0x0, 0x9, 0x2, [0x25c5, 0x65a, 0x3, 0x2]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) getsockname$netlink(r6, &(0x7f0000000040), &(0x7f0000000080)=0xc) setns(r8, 0x8020000) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r10, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r10, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x2, {0x2, 0xa}}, 0x0}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48043, 0x0) ioctl$TIOCSLCKTRMIOS(r11, 0x542f, 0x0) write$UHID_CREATE(r0, &(0x7f00000012c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000002c0)=""/4096, 0x1000, 0x1, 0x3, 0x10001, 0x1, 0xffff}}, 0x120) 96.497335ms ago: executing program 2 (id=5744): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bfe5f230dc5336a60596"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000300)='./file1\x00', 0x10000200) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@host, 0x2}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x5000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=5745): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@broadcast, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe0}, {0x0, 0xfffffffffffffbff, 0x40800000000000, 0x800000002000000}, 0x0, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0x5}]}, 0xc0}}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000020a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000007f000a002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x80) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) landlock_restrict_self(r2, 0x8) msgget(0x1, 0x344) statx(r1, &(0x7f0000000000)='./file4/file0\x00', 0x2000, 0x7ff, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0xa) kernel console output (not intermixed with test programs): ng 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1268.928820][T26089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5373'. [ 1268.951531][T24749] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1268.991183][T26092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.001247][T26092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.022049][T24749] usb 1-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 1269.074197][T24749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.122699][T24749] usb 1-1: config 0 descriptor?? [ 1269.218187][T26077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1269.496839][T11088] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1269.594933][T22255] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1269.634948][T11088] usb 6-1: device descriptor read/64, error -71 [ 1269.661910][T26108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.672112][T26108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.755202][T22255] usb 5-1: Using ep0 maxpacket: 8 [ 1269.761929][T22255] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1269.770623][T22255] usb 5-1: config 2 has no interface number 0 [ 1269.777590][T22255] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1269.806862][T22255] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1269.832031][T22255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.841624][T22255] usb 5-1: Product: syz [ 1269.847643][T22255] usb 5-1: Manufacturer: syz [ 1269.852463][T22255] usb 5-1: SerialNumber: syz [ 1269.865039][T24749] usbhid 1-1:0.0: can't add hid device: -71 [ 1269.875509][T11088] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1269.883408][T24749] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1269.898539][T24749] usb 1-1: USB disconnect, device number 85 [ 1270.015102][T11088] usb 6-1: device descriptor read/64, error -71 [ 1270.156356][T11088] usb usb6-port1: attempt power cycle [ 1270.199540][T26121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1270.218870][T26121] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1270.225416][T26121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1270.253772][T26121] vhci_hcd vhci_hcd.0: Device attached [ 1270.281766][T26127] binder: BINDER_SET_CONTEXT_MGR already set [ 1270.288690][T26127] binder: 26126:26127 ioctl 4018620d 200000000100 returned -16 [ 1270.302295][T22255] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1270.313629][T26127] binder: BINDER_SET_CONTEXT_MGR already set [ 1270.325983][T22255] usb 5-1: USB disconnect, device number 32 [ 1270.333230][T26127] binder: 26126:26127 ioctl 4018620d 2000000002c0 returned -16 [ 1270.423763][T26128] binder: 26126:26128 ioctl 2271 200000000380 returned -22 [ 1270.514922][T24749] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1270.518091][T17425] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1270.525129][T11088] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1270.605537][T11088] usb 6-1: device descriptor read/8, error -71 [ 1270.716675][T24749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.728678][T24749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.738521][T24749] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1270.749502][T24749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.759754][T24749] usb 2-1: config 0 descriptor?? [ 1270.845157][T11088] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1270.865587][T11088] usb 6-1: device descriptor read/8, error -71 [ 1270.880917][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1270.880934][ T29] audit: type=1326 audit(1780596901.809:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26139 comm="syz.4.5386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1270.915028][ T29] audit: type=1326 audit(1780596901.809:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26139 comm="syz.4.5386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1270.943865][ T29] audit: type=1326 audit(1780596901.809:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26139 comm="syz.4.5386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1270.974013][ T29] audit: type=1326 audit(1780596901.809:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26139 comm="syz.4.5386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1271.001605][T11088] usb usb6-port1: unable to enumerate USB device [ 1271.009689][ T29] audit: type=1326 audit(1780596901.839:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26139 comm="syz.4.5386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1271.034498][ T29] audit: type=1326 audit(1780596901.839:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26139 comm="syz.4.5386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1271.067268][ T29] audit: type=1326 audit(1780596901.839:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26139 comm="syz.4.5386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1271.092304][ T29] audit: type=1326 audit(1780596901.849:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26139 comm="syz.4.5386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1271.126101][ T29] audit: type=1326 audit(1780596901.849:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26139 comm="syz.4.5386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1271.156075][ T29] audit: type=1326 audit(1780596901.849:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26139 comm="syz.4.5386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1271.185083][T22255] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1271.236094][T26121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.246021][T26121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.341197][T22255] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1271.351408][T22255] usb 5-1: not running at top speed; connect to a high speed hub [ 1271.362349][T26147] kvm: apic: phys broadcast and lowest prio [ 1271.376685][T26147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.385381][T22255] usb 5-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 1271.396177][T22255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.414921][T22255] usb 5-1: Product: syz [ 1271.420626][T22255] usb 5-1: Manufacturer: syz [ 1271.428651][T24749] usbhid 2-1:0.0: can't add hid device: -71 [ 1271.429727][T26147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.436848][T24749] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1271.442463][T22255] usb 5-1: SerialNumber: syz [ 1271.460156][T26123] vhci_hcd: connection reset by peer [ 1271.466356][T26147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.476416][ T148] vhci_hcd vhci_hcd.1: stop threads [ 1271.481697][ T148] vhci_hcd vhci_hcd.1: release socket [ 1271.486807][T24749] usb 2-1: USB disconnect, device number 22 [ 1271.488534][ T148] vhci_hcd vhci_hcd.1: disconnect device [ 1271.502893][T26147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.716366][T26147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.731333][T26140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.741733][T26147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.750865][T26140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.768771][T26140] netlink: 'syz.4.5386': attribute type 32 has an invalid length. [ 1271.810017][T22255] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1271.945972][T22255] usb 5-1: USB disconnect, device number 33 [ 1272.024517][T19968] udevd[19968]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1272.455126][T22255] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1272.676772][T22255] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1272.698175][T22255] usb 2-1: config 211 has an invalid interface number: 123 but max is 0 [ 1272.720428][T22255] usb 2-1: config 211 has no interface number 0 [ 1272.742756][T22255] usb 2-1: config 211 interface 123 has no altsetting 0 [ 1272.752994][T22255] usb 2-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1272.766732][T22255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.775263][T22255] usb 2-1: Product: syz [ 1272.779548][T22255] usb 2-1: Manufacturer: syz [ 1272.784236][T22255] usb 2-1: SerialNumber: syz [ 1272.873209][T24749] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1273.057129][T24749] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1273.075071][T24749] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1273.104911][T24749] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1273.148549][T24749] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1273.171516][T24749] usb 6-1: string descriptor 0 read error: -22 [ 1273.184140][T24749] usb 6-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 1273.207217][T24749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.426073][T22255] usb-storage 2-1:211.123: USB Mass Storage device detected [ 1273.439242][T22255] usb-storage 2-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1273.452852][T26175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.465112][ T24] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1273.473066][T26175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.521595][T22255] usb 2-1: USB disconnect, device number 23 [ 1273.637349][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1273.649062][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1273.660941][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1273.674840][ T24] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= b.00 [ 1273.684037][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.700133][ T24] usb 5-1: config 0 descriptor?? [ 1273.714255][T26180] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 1273.732793][T24749] monterey 0003:0566:3004.0073: reserved main item tag 0xd [ 1273.740486][T24749] monterey 0003:0566:3004.0073: reserved main item tag 0xd [ 1273.747874][T24749] monterey 0003:0566:3004.0073: bogus close delimiter [ 1273.755642][T24749] monterey 0003:0566:3004.0073: item 0 0 2 10 parsing failed [ 1273.763769][T24749] monterey 0003:0566:3004.0073: probe with driver monterey failed with error -22 [ 1273.944681][T24749] usb 6-1: USB disconnect, device number 104 [ 1273.961950][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 1273.980201][T26189] binder: BINDER_SET_CONTEXT_MGR already set [ 1273.982671][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1273.987369][T26189] binder: 26188:26189 ioctl 4018620d 200000000100 returned -16 [ 1274.024626][ T24] usb 5-1: USB disconnect, device number 34 [ 1274.062788][T26189] binder: BINDER_SET_CONTEXT_MGR already set [ 1274.075834][T26189] binder: 26188:26189 ioctl 4018620d 2000000002c0 returned -16 [ 1274.160720][T26190] binder: 26188:26190 ioctl 2271 200000000380 returned -22 [ 1274.941507][T22255] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 1274.954968][T26196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.969909][T22255] hid-generic 0000:0000:0000.0074: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1275.151685][T26196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1275.175263][T26196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1275.208020][T26196] veth1_macvtap: left promiscuous mode [ 1275.220072][T26196] veth0_macvtap: left promiscuous mode [ 1275.227625][T26196] veth0_macvtap: entered promiscuous mode [ 1275.253303][T26196] veth1_macvtap: entered promiscuous mode [ 1275.310439][T26196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1275.342074][T26196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1275.352596][T26196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1275.365173][T26196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1275.385060][T26196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1275.397480][T26196] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 1275.408297][T26196] hsr1: left promiscuous mode [ 1275.424233][T26196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1275.452843][T26196] bond3: left promiscuous mode [ 1275.460908][T26196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1275.483397][T26196] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1275.536322][T18614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.543556][T18614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.574992][T26228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.595890][T18614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.603077][T18614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.611371][T26228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.695273][T17425] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1275.704802][T11088] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1275.723741][T18616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.724941][ T5723] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1275.753783][T18616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.792745][T18616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.838797][T18616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.935270][ T5723] usb 6-1: Using ep0 maxpacket: 32 [ 1275.944999][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1275.970183][ T5723] usb 6-1: config 6 has an invalid interface number: 44 but max is 0 [ 1275.970210][ T5723] usb 6-1: config 6 has no interface number 0 [ 1275.970237][ T5723] usb 6-1: config 6 interface 44 has no altsetting 0 [ 1275.976724][ T5723] usb 6-1: New USB device found, idVendor=2019, idProduct=ab31, bcdDevice= e.39 [ 1275.976752][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.976770][ T5723] usb 6-1: Product: syz [ 1275.976784][ T5723] usb 6-1: Manufacturer: syz [ 1275.976797][ T5723] usb 6-1: SerialNumber: syz [ 1276.024916][ T996] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1276.199466][T18617] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1276.201317][ T996] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1276.206533][ T996] usb 2-1: config 1 has an invalid interface number: 4 but max is 0 [ 1276.206593][ T996] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1276.206657][ T996] usb 2-1: config 1 has no interface number 0 [ 1276.206695][ T996] usb 2-1: config 1 interface 4 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1276.206741][ T996] usb 2-1: config 1 interface 4 has no altsetting 0 [ 1276.210952][ T996] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1276.357508][ T996] usb 2-1: New USB device strings: Mfr=254, Product=1, SerialNumber=3 [ 1276.368401][ T996] usb 2-1: Product: syz [ 1276.375648][ T996] usb 2-1: Manufacturer: syz [ 1276.380613][ T996] usb 2-1: SerialNumber: syz [ 1276.442563][ T5723] usb-storage 6-1:6.44: USB Mass Storage device detected [ 1276.848000][ T5723] usb 6-1: USB disconnect, device number 105 [ 1277.111850][T26254] binder: BINDER_SET_CONTEXT_MGR already set [ 1277.118208][T26254] binder: 26253:26254 ioctl 4018620d 200000000100 returned -16 [ 1277.130817][T26254] binder: BINDER_SET_CONTEXT_MGR already set [ 1277.139478][T26254] binder: 26253:26254 ioctl 4018620d 2000000002c0 returned -16 [ 1277.209415][T18615] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1277.222382][T18615] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1277.275406][T26260] binder: 26253:26260 ioctl 2271 200000000380 returned -22 [ 1277.508435][T26264] netlink: 'syz.2.5416': attribute type 2 has an invalid length. [ 1277.681269][T26266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.696143][T26266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.925125][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1278.305097][ T24] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1278.438707][ T24] usb 6-1: device descriptor read/64, error -71 [ 1278.499731][T26282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5421'. [ 1278.515000][T26281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.525015][T26281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.525378][T26282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.548139][T26282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.684874][ T24] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1278.794390][ T996] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.4/input/input175 [ 1278.818720][ T24] usb 6-1: device descriptor read/64, error -71 [ 1278.827464][ T4985] bcm5974 2-1:1.4: could not read from device [ 1278.847200][ T4985] bcm5974 2-1:1.4: could not read from device [ 1278.856532][ T996] usb 2-1: USB disconnect, device number 24 [ 1278.935311][ T24] usb usb6-port1: attempt power cycle [ 1278.940965][T20508] udevd[20508]: Error opening device "/dev/input/event4": No such file or directory [ 1278.956638][T20508] udevd[20508]: Unable to EVIOCGABS device "/dev/input/event4" [ 1278.964337][T20508] udevd[20508]: Unable to EVIOCGABS device "/dev/input/event4" [ 1278.974249][T20508] udevd[20508]: Unable to EVIOCGABS device "/dev/input/event4" [ 1278.982647][T20508] udevd[20508]: Unable to EVIOCGABS device "/dev/input/event4" [ 1279.184911][T24749] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1279.265947][T26290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5424'. [ 1279.277582][ T24] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1279.305586][ T24] usb 6-1: device descriptor read/8, error -71 [ 1279.345071][T24749] usb 5-1: device descriptor read/64, error -71 [ 1279.446692][T22252] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1279.544869][ T24] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1279.565299][ T24] usb 6-1: device descriptor read/8, error -71 [ 1279.585055][T24749] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1279.617544][T22252] usb 1-1: Using ep0 maxpacket: 16 [ 1279.624303][T22252] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1279.632713][T22252] usb 1-1: config 0 has no interface number 0 [ 1279.639249][T22252] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1279.649533][T22252] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1279.662181][T22252] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1279.671626][T22252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.675350][ T24] usb usb6-port1: unable to enumerate USB device [ 1279.679894][T22252] usb 1-1: Product: syz [ 1279.690291][T22252] usb 1-1: Manufacturer: syz [ 1279.699341][T22252] usb 1-1: SerialNumber: syz [ 1279.707050][T22252] usb 1-1: config 0 descriptor?? [ 1279.713383][T26292] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1279.721061][T26292] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1279.724863][T24749] usb 5-1: device descriptor read/64, error -71 [ 1279.845407][T24749] usb usb5-port1: attempt power cycle [ 1279.941927][T26292] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1279.949658][T26292] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1280.035029][ T996] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1280.163320][T26298] binder: BINDER_SET_CONTEXT_MGR already set [ 1280.171618][T26298] binder: 26297:26298 ioctl 4018620d 200000000100 returned -16 [ 1280.171959][T22252] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1280.184031][T26298] binder: BINDER_SET_CONTEXT_MGR already set [ 1280.195037][T22252] asix 1-1:0.34: probe with driver asix failed with error -61 [ 1280.196020][T24749] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1280.211585][T26298] binder: 26297:26298 ioctl 4018620d 2000000002c0 returned -16 [ 1280.216770][ T996] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1280.235075][ T996] usb 2-1: config 211 has an invalid interface number: 123 but max is 0 [ 1280.241072][T24749] usb 5-1: device descriptor read/8, error -71 [ 1280.243463][ T996] usb 2-1: config 211 has no interface number 0 [ 1280.243497][ T996] usb 2-1: config 211 interface 123 has no altsetting 0 [ 1280.270159][ T996] usb 2-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1280.280141][ T996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.281819][T26299] binder: 26297:26299 ioctl 2271 200000000380 returned -22 [ 1280.288424][ T996] usb 2-1: Product: syz [ 1280.300205][ T996] usb 2-1: Manufacturer: syz [ 1280.305681][ T996] usb 2-1: SerialNumber: syz [ 1280.485668][T24749] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1280.505348][T24749] usb 5-1: device descriptor read/8, error -71 [ 1280.615173][T24749] usb usb5-port1: unable to enumerate USB device [ 1280.767184][ T996] usb-storage 2-1:211.123: USB Mass Storage device detected [ 1280.778853][ T996] usb-storage 2-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1280.822127][ T996] usb 2-1: USB disconnect, device number 25 [ 1281.113810][T26307] netem: change failed [ 1281.188999][T26313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1281.195214][T26313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1281.201300][T26313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1281.208847][T26313] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1281.216996][T26313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1281.224573][T26313] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1281.241129][T26313] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1281.251885][T26313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1281.258382][T26313] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1281.268925][T26313] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1281.281374][T26316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.297957][T26316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.413310][T26318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.438138][T26318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.605217][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1281.985170][T24749] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1282.135594][T24749] usb 2-1: Using ep0 maxpacket: 32 [ 1282.147339][T24749] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1282.161842][T24749] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1282.172581][T24749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.184286][T24749] usb 2-1: Product: syz [ 1282.193233][T26339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5438'. [ 1282.203711][T24749] usb 2-1: Manufacturer: syz [ 1282.208805][T24749] usb 2-1: SerialNumber: syz [ 1282.220863][T26339] veth0_macvtap: left promiscuous mode [ 1282.299130][T26347] binder: BINDER_SET_CONTEXT_MGR already set [ 1282.305291][T26347] binder: 26346:26347 ioctl 4018620d 200000000100 returned -16 [ 1282.321029][T26347] binder: BINDER_SET_CONTEXT_MGR already set [ 1282.330809][T26347] binder: 26346:26347 ioctl 4018620d 2000000002c0 returned -16 [ 1282.397271][T26349] binder: 26346:26349 ioctl 2271 200000000380 returned -22 [ 1282.439852][T24749] usb 2-1: BAAD HEADPHONE p_chmask mismatch [ 1282.471896][T24749] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1282.488939][T24749] usb 2-1: USB disconnect, device number 26 [ 1282.510703][T19966] udevd[19966]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.525074][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1282.656472][T11088] usb 1-1: USB disconnect, device number 86 [ 1282.684855][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1282.692133][ T24] usb 5-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 1282.706478][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1282.723166][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2176, setting to 1024 [ 1282.735264][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1282.745617][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1282.760477][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1282.770025][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1282.778211][ T24] usb 5-1: Manufacturer: syz [ 1282.785655][ T24] usb 5-1: config 0 descriptor?? [ 1282.998558][T22252] usb 5-1: USB disconnect, device number 39 [ 1283.205210][T20550] Bluetooth: hci1: command 0x0406 tx timeout [ 1283.205228][T20507] Bluetooth: hci0: command 0x0406 tx timeout [ 1283.205243][T14992] Bluetooth: hci2: command 0x0406 tx timeout [ 1283.254903][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1283.294917][T11088] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1283.294981][T20550] Bluetooth: hci4: command 0x0c1a tx timeout [ 1283.305391][T14992] Bluetooth: hci3: command 0x0c1a tx timeout [ 1283.407895][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1283.417179][ T24] usb 2-1: config 211 has an invalid interface number: 123 but max is 0 [ 1283.428663][ T24] usb 2-1: config 211 has no interface number 0 [ 1283.435269][ T24] usb 2-1: config 211 interface 123 has no altsetting 0 [ 1283.445854][ T24] usb 2-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1283.457457][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.465745][T11088] usb 1-1: Using ep0 maxpacket: 16 [ 1283.470895][ T24] usb 2-1: Product: syz [ 1283.474882][T22252] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1283.475298][ T24] usb 2-1: Manufacturer: syz [ 1283.487966][ T24] usb 2-1: SerialNumber: syz [ 1283.493646][T11088] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1283.507705][T11088] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1283.517096][T11088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.525431][T11088] usb 1-1: Product: syz [ 1283.529633][T11088] usb 1-1: Manufacturer: syz [ 1283.534235][T11088] usb 1-1: SerialNumber: syz [ 1283.544624][T11088] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1283.551328][T11088] r8152-cfgselector 1-1: config 0 descriptor?? [ 1283.634895][T22252] usb 6-1: Using ep0 maxpacket: 8 [ 1283.644968][T22252] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1283.656943][T22252] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1283.672462][T22252] usb 6-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 1283.683391][T22252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.692481][T22252] usb 6-1: Product: syz [ 1283.696728][T22252] usb 6-1: Manufacturer: syz [ 1283.701455][T22252] usb 6-1: SerialNumber: syz [ 1283.884854][ T996] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1283.920803][T22252] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1283.986292][T22252] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1284.006367][T22252] usb 6-1: USB disconnect, device number 110 [ 1284.015245][ T24] usb-storage 2-1:211.123: USB Mass Storage device detected [ 1284.029487][ T24] usb-storage 2-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1284.044505][T20508] udevd[20508]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1284.088540][ T996] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1284.099242][ T996] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1284.108864][ T996] usb 5-1: config 150 has no interface number 0 [ 1284.115353][ T996] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1284.125906][ T996] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1284.137299][ T24] usb 2-1: USB disconnect, device number 27 [ 1284.139559][ T996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.175857][ T996] usb 5-1: Product: syz [ 1284.181111][ T996] usb 5-1: Manufacturer: syz [ 1284.188377][ T996] usb 5-1: SerialNumber: syz [ 1284.201965][ T5723] r8152-cfgselector 1-1: USB disconnect, device number 87 [ 1284.233390][T26366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.242479][T26366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.402578][ T996] xr_serial 5-1:150.204: skipping garbage [ 1284.412322][ T996] xr_serial 5-1:150.204: xr_serial converter detected [ 1284.885496][ T5723] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1285.050176][T26360] usb usb8: check_ctrlrecip: process 26360 (syz.4.5445) requesting ep 01 but needs 81 [ 1285.085164][ T5723] usb 6-1: Using ep0 maxpacket: 8 [ 1285.092592][ T5723] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1285.102084][ T5723] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1285.110597][T26360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1285.120374][ T5723] usb 6-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=22.d5 [ 1285.149113][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.172377][ T5723] usb 6-1: Product: syz [ 1285.179134][ T5723] usb 6-1: Manufacturer: syz [ 1285.184748][ T5723] usb 6-1: SerialNumber: syz [ 1285.192856][ T996] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1285.203552][ T5723] usb 6-1: config 0 descriptor?? [ 1285.214091][ T996] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1285.231048][ T996] usb 5-1: USB disconnect, device number 40 [ 1285.242265][ T996] xr_serial 5-1:150.204: device disconnected [ 1285.284906][T14992] Bluetooth: hci1: command 0x0406 tx timeout [ 1285.369291][T14992] Bluetooth: hci3: command 0x0c1a tx timeout [ 1285.375520][T14992] Bluetooth: hci4: command 0x0c1a tx timeout [ 1285.674438][T26383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5450'. [ 1285.922666][T26393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5452'. [ 1286.096082][T26402] binder: BINDER_SET_CONTEXT_MGR already set [ 1286.112408][T26402] binder: 26401:26402 ioctl 4018620d 200000000100 returned -16 [ 1286.140365][T26402] binder: BINDER_SET_CONTEXT_MGR already set [ 1286.146583][T26402] binder: 26401:26402 ioctl 4018620d 2000000002c0 returned -16 [ 1286.227669][T26403] binder: 26401:26403 ioctl 2271 200000000380 returned -22 [ 1287.288926][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 1287.288950][ T29] audit: type=1326 audit(1780596918.219:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.0.5449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7cd9ce59 code=0x7ffc0000 [ 1287.350709][ T29] audit: type=1326 audit(1780596918.279:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.0.5449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7cd9ce59 code=0x7ffc0000 [ 1287.444909][T20550] Bluetooth: hci4: command 0x0c1a tx timeout [ 1287.445012][T14992] Bluetooth: hci3: command 0x0c1a tx timeout [ 1287.481755][ T29] audit: type=1326 audit(1780596918.399:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.0.5449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c7cd9ce59 code=0x7ffc0000 [ 1287.511057][ T29] audit: type=1326 audit(1780596918.399:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.0.5449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7cd9ce59 code=0x7ffc0000 [ 1287.539675][ T29] audit: type=1326 audit(1780596918.399:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.0.5449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7cd9ce59 code=0x7ffc0000 [ 1287.631696][ T29] audit: type=1326 audit(1780596918.559:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.0.5449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c7cd9ce59 code=0x7ffc0000 [ 1287.750953][ T29] audit: type=1326 audit(1780596918.679:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.0.5449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7cd9ce59 code=0x7ffc0000 [ 1287.866257][ T29] audit: type=1326 audit(1780596918.799:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.0.5449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7cd9ce59 code=0x7ffc0000 [ 1287.890985][ T29] audit: type=1326 audit(1780596918.799:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.0.5449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c7cd9ce59 code=0x7ffc0000 [ 1287.917101][T11088] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1287.930681][ T29] audit: type=1326 audit(1780596918.799:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26386 comm="syz.0.5449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7cd9ce59 code=0x7ffc0000 [ 1287.957919][T26396] netlink: 'syz.0.5449': attribute type 4 has an invalid length. [ 1287.969180][T26396] netlink: 'syz.0.5449': attribute type 4 has an invalid length. [ 1288.096172][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1288.116866][T11088] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1288.129582][T11088] usb 2-1: config 211 has an invalid interface number: 123 but max is 0 [ 1288.173455][T11088] usb 2-1: config 211 has no interface number 0 [ 1288.180777][T11088] usb 2-1: config 211 interface 123 has no altsetting 0 [ 1288.190369][T11088] usb 2-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1288.202726][T11088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.211053][T11088] usb 2-1: Product: syz [ 1288.215941][T11088] usb 2-1: Manufacturer: syz [ 1288.220591][T11088] usb 2-1: SerialNumber: syz [ 1288.257135][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1288.264317][ T24] usb 5-1: config 6 has an invalid interface number: 221 but max is 0 [ 1288.274009][ T24] usb 5-1: config 6 has no interface number 0 [ 1288.281579][ T24] usb 5-1: config 6 interface 221 altsetting 6 has an endpoint descriptor with address 0x13, changing to 0x3 [ 1288.362921][ T24] usb 5-1: config 6 interface 221 altsetting 6 endpoint 0x3 has an invalid bInterval 80, changing to 10 [ 1288.394313][ T24] usb 5-1: config 6 interface 221 has no altsetting 0 [ 1288.409059][T26431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.427640][T26431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.433404][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 1288.473556][T26431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.480654][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.527829][T26431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.533364][ T24] usb 5-1: Product: syz [ 1288.583906][ T24] usb 5-1: Manufacturer: syz [ 1288.627468][ T24] usb 5-1: SerialNumber: syz [ 1289.362894][ T24] f81534a_ctrl 5-1:6.221: probe with driver f81534a_ctrl failed with error -71 [ 1289.450404][ T24] usb 5-1: USB disconnect, device number 41 [ 1290.309025][ T5723] pwc: Logitech ViewPort AV 100 webcam detected. [ 1290.466529][ T5723] pwc: Failed to set LED on/off time (-32) [ 1290.485096][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1290.486565][ T5723] pwc: send_video_command error -32 [ 1290.507632][ T5723] pwc: Failed to set video mode VGA@30 fps; return code = -32 [ 1290.523316][ T5723] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -32 [ 1291.251371][T26441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.269666][T26441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.449567][T11088] usb-storage 2-1:211.123: USB Mass Storage device detected [ 1291.525868][T11088] usb-storage 2-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1291.684363][T26449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5464'. [ 1291.760120][T11088] usb 2-1: USB disconnect, device number 28 [ 1292.095085][T11088] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1292.124301][T26455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.133971][T26455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.252905][T11088] usb 2-1: config index 0 descriptor too short (expected 65183, got 39) [ 1292.261488][T11088] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1292.271767][T11088] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1292.293342][T11088] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1292.303131][T11088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.311854][T11088] usb 2-1: Product: syz [ 1292.317150][T11088] usb 2-1: Manufacturer: syz [ 1292.322664][T11088] usb 2-1: SerialNumber: syz [ 1292.348924][T11088] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1292.403449][T11088] usb 6-1: USB disconnect, device number 111 [ 1292.582324][T26457] binder: BINDER_SET_CONTEXT_MGR already set [ 1292.590996][T26457] binder: 26456:26457 ioctl 4018620d 200000000100 returned -16 [ 1292.603354][T26457] binder: BINDER_SET_CONTEXT_MGR already set [ 1292.610708][T26457] binder: 26456:26457 ioctl 4018620d 2000000002c0 returned -16 [ 1292.678914][T26458] binder: 26456:26458 ioctl 2271 200000000380 returned -22 [ 1292.998022][T26464] macvlan0: entered promiscuous mode [ 1293.004119][T26464] netlink: 'syz.2.5469': attribute type 1 has an invalid length. [ 1293.012598][T26464] netlink: 'syz.2.5469': attribute type 2 has an invalid length. [ 1293.229940][T26467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5468'. [ 1293.492736][T26469] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5470'. [ 1293.774845][T11088] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 1293.939455][T11088] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1293.950881][T11088] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.960799][T11088] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1293.974033][T11088] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1293.981335][T11088] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1293.991769][T11088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.003264][T11088] usb 6-1: config 0 descriptor?? [ 1294.044934][T24749] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1294.206678][T24749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1294.220597][T24749] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1294.230776][T24749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1294.241853][T24749] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1294.253818][T24749] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1294.263012][T24749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.275386][T24749] usb 1-1: config 0 descriptor?? [ 1294.435232][T11088] kone 0003:1E7D:2CED.0075: unknown main item tag 0x0 [ 1294.443105][T11088] kone 0003:1E7D:2CED.0075: unknown main item tag 0x0 [ 1294.450263][T11088] kone 0003:1E7D:2CED.0075: unknown main item tag 0x0 [ 1294.457546][T11088] kone 0003:1E7D:2CED.0075: unknown main item tag 0x0 [ 1294.464391][T11088] kone 0003:1E7D:2CED.0075: unknown main item tag 0x0 [ 1294.471270][T11088] kone 0003:1E7D:2CED.0075: unknown main item tag 0x0 [ 1294.479416][T11088] kone 0003:1E7D:2CED.0075: unknown main item tag 0x0 [ 1294.486827][T11088] kone 0003:1E7D:2CED.0075: unknown main item tag 0x0 [ 1294.488789][T26474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.493669][T11088] kone 0003:1E7D:2CED.0075: unknown main item tag 0x0 [ 1294.508580][T26474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.521410][T24749] hdpvr 1-1:0.0: unexpected answer of status request, len -32 [ 1294.531134][T11088] kone 0003:1E7D:2CED.0075: unknown main item tag 0x0 [ 1294.538022][T24749] hdpvr 1-1:0.0: device init failed [ 1294.543275][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1294.554923][T24749] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1294.567125][T11088] kone 0003:1E7D:2CED.0075: hidraw0: USB HID vff.fe Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 1294.582476][T24749] usb 1-1: USB disconnect, device number 88 [ 1294.624447][T11088] usb 2-1: USB disconnect, device number 29 [ 1294.634181][T22252] usb 6-1: USB disconnect, device number 112 [ 1294.672183][T26480] fido_id[26480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1294.727515][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1294.737998][ T24] usb 5-1: config 211 has an invalid interface number: 123 but max is 0 [ 1294.747564][ T24] usb 5-1: config 211 has no interface number 0 [ 1294.753860][ T24] usb 5-1: config 211 interface 123 has no altsetting 0 [ 1294.763260][ T24] usb 5-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1294.773537][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.782183][ T24] usb 5-1: Product: syz [ 1294.786719][ T24] usb 5-1: Manufacturer: syz [ 1294.791404][ T24] usb 5-1: SerialNumber: syz [ 1295.005520][T11088] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1295.164885][T11088] usb 2-1: Using ep0 maxpacket: 8 [ 1295.177067][T11088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.216036][T11088] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1295.241348][T11088] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1295.265041][T11088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.286509][T11088] usb 2-1: config 0 descriptor?? [ 1295.355681][ T24] usb-storage 5-1:211.123: USB Mass Storage device detected [ 1295.367436][ T24] usb-storage 5-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1295.481938][ T24] usb 5-1: USB disconnect, device number 42 [ 1295.713904][T11088] hid-u2fzero 0003:10C4:8ACF.0076: item fetching failed at offset 0/40 [ 1295.714331][T26504] binder: BINDER_SET_CONTEXT_MGR already set [ 1295.731689][T26504] binder: 26502:26504 ioctl 4018620d 200000000100 returned -16 [ 1295.741607][T11088] hid-u2fzero 0003:10C4:8ACF.0076: probe with driver hid-u2fzero failed with error -22 [ 1295.764523][T26504] binder: BINDER_SET_CONTEXT_MGR already set [ 1295.773429][T26504] binder: 26502:26504 ioctl 4018620d 2000000002c0 returned -16 [ 1295.855999][T26508] binder: 26502:26508 ioctl 2271 200000000380 returned -22 [ 1295.950838][T22252] usb 2-1: USB disconnect, device number 30 [ 1296.204988][T11088] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1296.258025][T26512] hsr0: entered allmulticast mode [ 1296.284325][T26512] hsr_slave_0: entered allmulticast mode [ 1296.296314][T26512] hsr_slave_1: entered allmulticast mode [ 1296.365389][T11088] usb 5-1: Using ep0 maxpacket: 32 [ 1296.384179][T11088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.385299][T26512] hsr0: left allmulticast mode [ 1296.404088][T11088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.414105][T26512] hsr_slave_0: left allmulticast mode [ 1296.414128][T26512] hsr_slave_1: left allmulticast mode [ 1296.466232][T11088] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1296.486546][T11088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.518069][T11088] usb 5-1: config 0 descriptor?? [ 1296.542773][T11088] hub 5-1:0.0: USB hub found [ 1296.580658][T26514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.611252][T26514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.682109][T26518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5484'. [ 1296.707038][T26516] bond11: Removing last ns target with arp_interval on [ 1296.733513][T26518] bridge_slave_1: left allmulticast mode [ 1296.740273][T11088] hub 5-1:0.0: 1 port detected [ 1296.747180][T26516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5484'. [ 1296.762070][T26518] bridge_slave_1: left promiscuous mode [ 1296.776660][T26518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.803805][T26518] bridge_slave_0: left allmulticast mode [ 1296.810985][T26518] bridge_slave_0: left promiscuous mode [ 1296.830964][T26518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.964455][T26523] syzkaller0: entered promiscuous mode [ 1297.217166][ T996] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1297.295524][T22252] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1297.344392][T11088] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 1297.375460][ T996] usb 1-1: Using ep0 maxpacket: 16 [ 1297.398906][ T996] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1297.409878][ T996] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1297.419558][ T996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.432006][ T996] usb 1-1: Product: syz [ 1297.436637][ T996] usb 1-1: Manufacturer: syz [ 1297.441269][ T996] usb 1-1: SerialNumber: syz [ 1297.455050][ T996] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1297.461725][ T996] r8152-cfgselector 1-1: config 0 descriptor?? [ 1297.473688][T22252] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.485989][T22252] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.496675][T22252] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1297.509318][T22252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.525486][T22252] usb 6-1: config 0 descriptor?? [ 1297.545117][T26510] netlink: 'syz.4.5481': attribute type 1 has an invalid length. [ 1297.556533][T26510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5481'. [ 1297.617735][T26542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.631314][T26542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.681010][T26540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5490'. [ 1297.701944][T26540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5490'. [ 1297.983892][T22252] usbhid 6-1:0.0: can't add hid device: -71 [ 1297.993078][T22252] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1298.013672][T22252] usb 6-1: USB disconnect, device number 113 [ 1298.192889][T26553] xt_hashlimit: size too large, truncated to 1048576 [ 1298.342216][T26559] IPv6: addrconf: prefix option has invalid lifetime [ 1298.349244][T26562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.362149][T26562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.382390][ T996] r8152-cfgselector 1-1: USB disconnect, device number 89 [ 1298.423330][T26566] binder: BINDER_SET_CONTEXT_MGR already set [ 1298.430577][T26566] binder: 26565:26566 ioctl 4018620d 200000000100 returned -16 [ 1298.469182][T26566] binder: BINDER_SET_CONTEXT_MGR already set [ 1298.476390][T26566] binder: 26565:26566 ioctl 4018620d 2000000002c0 returned -16 [ 1298.559091][T26570] fuse: Bad value for 'fd' [ 1298.643294][T26571] binder: 26565:26571 ioctl 2271 200000000380 returned -22 [ 1298.671349][T26573] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1298.756613][T11088] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1298.914851][T11088] usb 2-1: device descriptor read/64, error -71 [ 1299.075167][ T24] usb 5-1: USB disconnect, device number 43 [ 1299.154862][T11088] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1299.297009][T11088] usb 2-1: device descriptor read/64, error -71 [ 1299.415728][T11088] usb usb2-port1: attempt power cycle [ 1299.724220][T26602] SET target dimension over the limit! [ 1299.740835][T26603] netlink: 'syz.2.5505': attribute type 62 has an invalid length. [ 1299.765899][T11088] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1299.785395][T11088] usb 2-1: device descriptor read/8, error -71 [ 1299.925630][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1300.024831][T11088] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1300.046095][T11088] usb 2-1: device descriptor read/8, error -71 [ 1300.087829][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.094562][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.102287][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1300.111013][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1300.121661][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1300.131806][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1300.142906][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1300.155977][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1300.165729][T11088] usb usb2-port1: unable to enumerate USB device [ 1300.172195][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1300.180790][ T24] usb 5-1: Product: syz [ 1300.185156][ T24] usb 5-1: Manufacturer: syz [ 1300.194922][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 1300.200192][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 1300.207001][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1300.213000][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 1300.595900][ T24] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1300.757529][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1300.775023][ T24] usb 1-1: config 211 has an invalid interface number: 123 but max is 0 [ 1300.800118][ T24] usb 1-1: config 211 has no interface number 0 [ 1300.813386][ T24] usb 1-1: config 211 interface 123 has no altsetting 0 [ 1300.828359][ T24] usb 1-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1300.838178][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.848101][ T24] usb 1-1: Product: syz [ 1300.850483][T26621] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5509'. [ 1300.852316][ T24] usb 1-1: Manufacturer: syz [ 1300.895132][ T24] usb 1-1: SerialNumber: syz [ 1300.954419][ T996] usb 5-1: USB disconnect, device number 44 [ 1301.023158][T26623] binder: BINDER_SET_CONTEXT_MGR already set [ 1301.037389][T26623] binder: 26622:26623 ioctl 4018620d 200000000100 returned -16 [ 1301.053760][T26623] binder: BINDER_SET_CONTEXT_MGR already set [ 1301.060122][T26623] binder: 26622:26623 ioctl 4018620d 2000000002c0 returned -16 [ 1301.127712][T26626] binder: 26622:26626 ioctl 2271 200000000380 returned -22 [ 1301.365074][ T996] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1301.366600][ T24] usb-storage 1-1:211.123: USB Mass Storage device detected [ 1301.386968][ T24] usb-storage 1-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1301.437679][ T24] usb 1-1: USB disconnect, device number 90 [ 1301.556906][ T996] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 1301.565892][ T996] usb 5-1: config 0 has no interface number 0 [ 1301.572565][ T996] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.584655][ T996] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.594977][ T996] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1301.604052][ T996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.615730][ T996] usb 5-1: config 0 descriptor?? [ 1301.937350][T26634] program syz.2.5513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1301.955151][T22252] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1302.024602][T26636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.039104][T26636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.087562][ T996] hid_parser_main: 530 callbacks suppressed [ 1302.087584][ T996] uclogic 0003:5543:0522.0077: unknown main item tag 0x0 [ 1302.101149][ T996] uclogic 0003:5543:0522.0077: unknown main item tag 0x0 [ 1302.108553][ T996] uclogic 0003:5543:0522.0077: unknown main item tag 0x0 [ 1302.118092][ T996] uclogic 0003:5543:0522.0077: unknown main item tag 0x0 [ 1302.125624][ T996] uclogic 0003:5543:0522.0077: unknown main item tag 0x0 [ 1302.137542][ T996] uclogic 0003:5543:0522.0077: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input17 [ 1302.155060][T22252] usb 2-1: Using ep0 maxpacket: 8 [ 1302.167460][T22252] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1302.184871][T22252] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1302.194949][T22252] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1302.204945][T22252] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1302.215117][T22252] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1302.229307][T22252] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1302.240384][T22252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.253174][ T24] usb 5-1: USB disconnect, device number 45 [ 1302.485383][T22252] usb 2-1: GET_CAPABILITIES returned 0 [ 1302.505244][T22252] usbtmc 2-1:16.0: can't read capabilities [ 1302.655146][T22255] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1302.805292][T22255] usb 1-1: Using ep0 maxpacket: 16 [ 1302.814038][T22255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.827233][T22255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.838283][T22255] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1302.851361][T22255] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1302.860583][T22255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.870971][T22255] usb 1-1: config 0 descriptor?? [ 1303.055964][T22252] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1303.216561][T22252] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1303.225004][T22252] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1303.233929][T22252] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.245898][T22252] usb 5-1: config 220 has no interface number 2 [ 1303.252224][T22252] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1303.266219][T22252] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1303.273035][T22252] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1303.280137][T22252] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1303.290738][T22252] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1303.296214][T26639] dummy0: entered promiscuous mode [ 1303.300217][T22252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.313741][T22252] usb 5-1: Product: syz [ 1303.318286][T22252] usb 5-1: Manufacturer: syz [ 1303.323026][T22252] usb 5-1: SerialNumber: syz [ 1303.324442][T26639] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1303.347896][T26639] hsr2: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 1303.358579][T26639] hsr2: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 1303.368979][T22255] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0078/input/input176 [ 1303.383023][T26639] hsr2: entered allmulticast mode [ 1303.389555][T26639] dummy0: entered allmulticast mode [ 1303.396147][T26639] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1303.449471][T22255] microsoft 0003:045E:07DA.0078: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1303.554859][T22252] usb 5-1: selecting invalid altsetting 0 [ 1303.573045][T22252] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1303.577819][ T24] usb 1-1: USB disconnect, device number 91 [ 1303.605484][T22252] uvcvideo 5-1:220.0: No valid video chain found. [ 1303.636709][T22252] usb 5-1: selecting invalid altsetting 0 [ 1303.649257][T22252] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1303.670854][T22252] usb 5-1: USB disconnect, device number 46 [ 1304.324939][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1304.470648][T26657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1304.481223][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1304.488819][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1304.502952][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1304.513582][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1304.525410][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1304.541246][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1304.550999][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.562820][T22252] usb 2-1: USB disconnect, device number 35 [ 1304.683884][T26662] binder: BINDER_SET_CONTEXT_MGR already set [ 1304.690031][T26662] binder: 26661:26662 ioctl 4018620d 200000000100 returned -16 [ 1304.703371][T26662] binder: BINDER_SET_CONTEXT_MGR already set [ 1304.711265][T26662] binder: 26661:26662 ioctl 4018620d 2000000002c0 returned -16 [ 1304.768711][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 1304.770833][T26663] binder: 26645:26663 ioctl c00c6211 9999999999999999 returned -14 [ 1304.783857][ T24] usbtmc 5-1:16.0: can't read capabilities [ 1304.791228][T26665] binder: 26661:26665 ioctl 2271 200000000380 returned -22 [ 1305.062221][T26669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.072457][T26669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.882271][T26680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.900240][T26680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.939486][T26680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.966016][T26680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.996808][T26680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.015273][T26680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.160092][T26682] binder: BINDER_SET_CONTEXT_MGR already set [ 1306.172847][T26682] binder: 26681:26682 ioctl 4018620d 200000000240 returned -16 [ 1306.195650][T26682] binder: BINDER_SET_CONTEXT_MGR already set [ 1306.201805][T26682] binder: 26681:26682 ioctl 4018620d 200000000040 returned -16 [ 1306.213958][T26682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1306.587718][T26694] kvm: apic: phys broadcast and lowest prio [ 1307.019419][T26710] binder: BINDER_SET_CONTEXT_MGR already set [ 1307.019441][T26710] binder: 26709:26710 ioctl 4018620d 200000000100 returned -16 [ 1307.021083][T26710] binder: BINDER_SET_CONTEXT_MGR already set [ 1307.021093][T26710] binder: 26709:26710 ioctl 4018620d 2000000002c0 returned -16 [ 1307.091802][T26712] binder: 26709:26712 ioctl 2271 200000000380 returned -22 [ 1307.134453][T22255] usb 5-1: USB disconnect, device number 47 [ 1307.210258][T14992] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 1307.399006][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1307.456580][T26720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1307.470655][T26720] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1307.486251][T26720] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1307.568415][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1307.578280][T26722] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1307.588951][ T24] usb 2-1: config 211 has an invalid interface number: 123 but max is 0 [ 1307.597560][ T24] usb 2-1: config 211 has no interface number 0 [ 1307.607012][ T24] usb 2-1: config 211 interface 123 has no altsetting 0 [ 1307.617056][ T24] usb 2-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1307.628362][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.638482][ T24] usb 2-1: Product: syz [ 1307.642734][ T24] usb 2-1: Manufacturer: syz [ 1307.647580][ T24] usb 2-1: SerialNumber: syz [ 1307.765025][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1307.875082][T22255] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1308.040675][T22255] usb 5-1: Using ep0 maxpacket: 8 [ 1308.072257][T22255] usb 5-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 1308.087690][T26726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5542'. [ 1308.097434][T22255] usb 5-1: config 0 has no interfaces? [ 1308.105067][T22255] usb 5-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 1308.116739][T22255] usb 5-1: config 0 has no interfaces? [ 1308.127959][T22255] usb 5-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 1308.139624][T22255] usb 5-1: config 0 has no interfaces? [ 1308.148253][T22255] usb 5-1: string descriptor 0 read error: -22 [ 1308.154807][T22255] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1308.164117][T22255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.181937][T22255] usb 5-1: config 0 descriptor?? [ 1308.186002][ T24] usb-storage 2-1:211.123: USB Mass Storage device detected [ 1308.256241][ T24] usb-storage 2-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1308.291861][ T24] usb 2-1: USB disconnect, device number 36 [ 1308.384852][T22252] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1308.410255][T26731] xt_hashlimit: size too large, truncated to 1048576 [ 1308.546794][T22252] usb 6-1: Using ep0 maxpacket: 8 [ 1308.553267][T22252] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1308.562981][T22252] usb 6-1: string descriptor 0 read error: -22 [ 1308.570706][T22252] usb 6-1: New USB device found, idVendor=0eef, idProduct=7302, bcdDevice= 0.40 [ 1308.580496][T22252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.963463][ T996] usb 5-1: USB disconnect, device number 48 [ 1309.034619][T26737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5545'. [ 1309.083624][T26737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5545'. [ 1309.094983][T22255] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1309.268165][T22255] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1309.289885][T22255] usb 2-1: config 0 has no interface number 0 [ 1309.308177][T22255] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1309.337272][T22255] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1309.380394][T22255] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1309.424834][T22255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.453207][T22255] usb 2-1: config 0 descriptor?? [ 1309.465693][T26735] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1309.486596][T26744] netlink: 'syz.4.5548': attribute type 1 has an invalid length. [ 1309.499673][T26744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.500283][T22255] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1309.518524][T26744] loop7: detected capacity change from 0 to 16384 [ 1309.533296][T26747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1309.648259][T26750] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5548'. [ 1309.740874][T26753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.776058][T26753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.797756][ T996] usb 2-1: USB disconnect, device number 37 [ 1309.803842][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1309.904321][T26749] loop7: detected capacity change from 16384 to 0 [ 1309.904503][ C1] blk_print_req_error: 151 callbacks suppressed [ 1309.904518][ C1] I/O error, dev loop7, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1309.938289][ C0] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1310.056693][T22252] hid-generic 0003:0EEF:7302.0079: unknown main item tag 0x0 [ 1310.084479][T22252] hid-generic 0003:0EEF:7302.0079: unknown main item tag 0x0 [ 1310.113570][T22252] hid-generic 0003:0EEF:7302.0079: unknown main item tag 0x0 [ 1310.144139][T26758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.152874][T22252] hid-generic 0003:0EEF:7302.0079: unknown main item tag 0x0 [ 1310.178921][T22252] hid-generic 0003:0EEF:7302.0079: unknown main item tag 0x0 [ 1310.208175][T22252] hid-generic 0003:0EEF:7302.0079: unknown main item tag 0x0 [ 1310.237784][T26761] fuse: Unknown parameter '00000000000000000005' [ 1310.253434][T22252] hid-generic 0003:0EEF:7302.0079: unknown main item tag 0x0 [ 1310.273731][T26761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5551'. [ 1310.277166][T22252] hid-generic 0003:0EEF:7302.0079: unknown main item tag 0x0 [ 1310.304641][T26761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5551'. [ 1310.334786][T22252] hid-generic 0003:0EEF:7302.0079: unknown main item tag 0x0 [ 1310.357131][T22252] hid-generic 0003:0EEF:7302.0079: unknown main item tag 0x0 [ 1310.430631][T26764] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5553'. [ 1310.535555][T22252] hid-generic 0003:0EEF:7302.0079: hidraw0: USB HID vff.7f Device [HID 0eef:7302] on usb-dummy_hcd.5-1/input0 [ 1310.654517][T26768] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1310.700062][T26768] netlink: 'syz.2.5554': attribute type 10 has an invalid length. [ 1310.726035][T26770] binder: BINDER_SET_CONTEXT_MGR already set [ 1310.732127][T26770] binder: 26769:26770 ioctl 4018620d 200000000100 returned -16 [ 1310.742847][T26770] binder: BINDER_SET_CONTEXT_MGR already set [ 1310.754348][T26770] binder: 26769:26770 ioctl 4018620d 2000000002c0 returned -16 [ 1310.820401][T26772] binder: 26769:26772 ioctl 2271 200000000380 returned -22 [ 1311.374927][ T1666] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1311.547450][ T1666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1311.580595][ T24] usb 6-1: USB disconnect, device number 114 [ 1311.589525][ T1666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.636360][ T1666] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1311.660018][T26792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5560'. [ 1311.693761][ T1666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.730949][ T1666] usb 5-1: config 0 descriptor?? [ 1311.888245][T26798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.915909][T26798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.932893][T26798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.944520][T26798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.160926][ T1666] usbhid 5-1:0.0: can't add hid device: -71 [ 1312.167562][ T1666] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1312.192543][ T1666] usb 5-1: USB disconnect, device number 49 [ 1312.574989][ T996] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1312.629711][T26822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.641940][T26822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.715830][T26823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5569'. [ 1312.756011][T26826] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5570'. [ 1312.779694][ T996] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.803080][ T996] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1312.936550][T26829] tipc: Enabled bearer , priority 10 [ 1313.010789][ T996] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1313.040719][ T996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.062234][ T996] usb 1-1: Product: syz [ 1313.066822][ T996] usb 1-1: Manufacturer: syz [ 1313.071671][ T996] usb 1-1: SerialNumber: syz [ 1313.110932][ T996] usb 1-1: 0:2 : does not exist [ 1313.357213][T26840] binder: BINDER_SET_CONTEXT_MGR already set [ 1313.375053][T26840] binder: 26839:26840 ioctl 4018620d 200000000100 returned -16 [ 1313.400517][T26840] binder: BINDER_SET_CONTEXT_MGR already set [ 1313.418529][T26840] binder: 26839:26840 ioctl 4018620d 2000000002c0 returned -16 [ 1313.527948][T26845] binder: 26839:26845 ioctl 2271 200000000380 returned -22 [ 1313.600925][T26847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5577'. [ 1313.610702][T26847] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5577'. [ 1313.620687][T26847] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5577'. [ 1313.637897][T26847] netlink: 'syz.5.5577': attribute type 1 has an invalid length. [ 1313.661895][T26847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1313.694200][T26847] bond2: (slave gretap1): making interface the new active one [ 1313.703067][T26847] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1313.721313][T26847] fuse: fd is not a fuse device [ 1313.735106][ T1666] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1313.874813][ T1666] usb 2-1: device descriptor read/64, error -71 [ 1314.114827][ T1666] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1314.245180][ T1666] usb 2-1: device descriptor read/64, error -71 [ 1314.355267][ T1666] usb usb2-port1: attempt power cycle [ 1314.695156][ T1666] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1314.715011][ T996] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1314.724527][ T1666] usb 2-1: device descriptor read/8, error -71 [ 1314.865082][ T996] usb 6-1: Using ep0 maxpacket: 16 [ 1314.872243][ T996] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1314.884292][ T996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1314.898326][ T996] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1314.907517][ T996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.915675][ T996] usb 6-1: Product: syz [ 1314.919932][ T996] usb 6-1: Manufacturer: syz [ 1314.924536][ T996] usb 6-1: SerialNumber: syz [ 1314.931518][ T996] usb 6-1: config 0 descriptor?? [ 1314.939855][ T996] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1314.949169][ T996] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1314.965295][ T1666] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1314.986229][ T1666] usb 2-1: device descriptor read/8, error -71 [ 1315.095899][ T1666] usb usb2-port1: unable to enumerate USB device [ 1315.165964][ T1666] usb 1-1: USB disconnect, device number 92 [ 1315.343404][T26870] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1315.380545][T26870] bond2: (slave lo): Enslaving as an active interface with an up link [ 1315.397353][T26870] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1315.566905][T26868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.581786][T26868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.599621][T26868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.612382][T26868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.635829][T26868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.646190][T26868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.657509][ T996] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1315.665175][ T996] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1315.672684][ T996] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1315.680700][ T996] em28xx 6-1:0.0: No AC97 audio processor [ 1315.775073][T17425] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 1315.944876][T17425] usb 5-1: Invalid ep0 maxpacket: 64 [ 1315.986039][ T996] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1316.095035][T17425] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 1316.137418][ T996] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.147680][ T996] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1316.159459][ T996] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1316.171040][ T996] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 1316.182664][ T996] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1316.197494][ T996] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1316.207369][ T996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.215992][ T996] usb 1-1: Product: syz [ 1316.220256][ T996] usb 1-1: Manufacturer: syz [ 1316.224893][ T996] usb 1-1: SerialNumber: syz [ 1316.231821][ T996] usb 1-1: config 0 descriptor?? [ 1316.237769][T26885] raw-gadget.8 gadget.0: fail, usb_ep_enable returned -22 [ 1316.264829][T17425] usb 5-1: Invalid ep0 maxpacket: 64 [ 1316.274119][T17425] usb usb5-port1: attempt power cycle [ 1316.296500][ T996] rc_core: IR keymap rc-xbox-dvd not found [ 1316.302389][ T996] Registered IR keymap rc-empty [ 1316.310731][ T996] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1316.321250][ T996] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input177 [ 1316.463755][T26883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.534589][T26883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.568257][T11088] usb 1-1: USB disconnect, device number 93 [ 1316.568273][ C0] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 1316.635101][T17425] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 1316.676447][T17425] usb 5-1: Invalid ep0 maxpacket: 64 [ 1316.784950][ T1666] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1316.796799][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1316.796821][ T29] audit: type=1800 audit(1780596947.729:3159): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5592" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1316.844925][T17425] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 1316.865811][T17425] usb 5-1: Invalid ep0 maxpacket: 64 [ 1316.871390][T17425] usb usb5-port1: unable to enumerate USB device [ 1316.938728][ T1666] usb 2-1: Using ep0 maxpacket: 16 [ 1316.949100][ T1666] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1316.962472][ T1666] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1316.974388][ T1666] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1316.986161][ T1666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.994624][ T1666] usb 2-1: Product: syz [ 1317.005129][T11088] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1317.013941][ T1666] usb 2-1: Manufacturer: syz [ 1317.024308][ T1666] usb 2-1: SerialNumber: syz [ 1317.036764][ T1666] usb 2-1: config 0 descriptor?? [ 1317.141115][T26907] binder: 26902:26907 ioctl c0306201 0 returned -14 [ 1317.216389][T11088] usb 1-1: Using ep0 maxpacket: 16 [ 1317.253109][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1317.306780][ T1666] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input178 [ 1317.336781][T11088] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.371348][T11088] usb 1-1: config 66 has 2 interfaces, different from the descriptor's value: 3 [ 1317.402932][T11088] usb 1-1: config 66 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1317.451043][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1317.463650][ T1666] imon:send_packet: packet tx failed (-71) [ 1317.485673][ T1666] imon 2-1:0.0: panel buttons/knobs setup failed [ 1317.597759][T17425] usb 6-1: USB disconnect, device number 115 [ 1317.620846][ T1666] rc_core: IR keymap rc-imon-pad not found [ 1317.635457][ T1666] Registered IR keymap rc-empty [ 1317.652547][ T1666] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1317.667257][T17425] em28xx 6-1:0.0: Disconnecting em28xx [ 1317.670618][ T1666] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1317.694575][ T1666] imon:send_packet: packet tx failed (-71) [ 1317.717273][ T1666] imon 2-1:0.0: remote input dev register failed [ 1317.717872][T17425] em28xx 6-1:0.0: Freeing device [ 1317.724014][ T1666] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 1317.811301][ T1666] imon 2-1:0.0: unable to initialize intf0, err 0 [ 1317.820778][ T1666] imon:imon_probe: failed to initialize context! [ 1317.828482][ T1666] imon 2-1:0.0: unable to register, err -19 [ 1317.847228][ T1666] usb 2-1: USB disconnect, device number 42 [ 1317.868596][T11088] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1317.897593][T11088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.922186][T11088] usb 1-1: Product: syz [ 1317.932337][T11088] usb 1-1: Manufacturer: syz [ 1317.939226][T11088] usb 1-1: SerialNumber: syz [ 1318.114831][T17425] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1318.243329][T11088] usb 1-1: Fast Track Pro config OK [ 1318.279594][T11088] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1318.296358][T17425] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1318.314776][T17425] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1318.334276][T17425] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1318.346725][T17425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.357230][T17425] usb 6-1: Product: syz [ 1318.361460][T17425] usb 6-1: Manufacturer: syz [ 1318.366231][T17425] usb 6-1: SerialNumber: syz [ 1318.381122][T17425] usb 6-1: config 0 descriptor?? [ 1318.392903][T17425] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1318.468064][T11088] usb 1-1: USB disconnect, device number 94 [ 1318.907355][T26932] bond5: (slave lo): Releasing backup interface [ 1318.926361][T26932] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1318.944956][ T996] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1318.948485][T26932] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1319.001729][T26934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.010637][T26934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.023696][T26934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.034007][T26934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.090328][T26940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.101945][T26940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.144988][ T996] usb 5-1: Using ep0 maxpacket: 32 [ 1319.152699][ T996] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.165453][ T996] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1319.177228][ T996] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1319.186228][ T996] usb 5-1: Product: syz [ 1319.190435][ T996] usb 5-1: Manufacturer: syz [ 1319.202511][ T996] hub 5-1:4.0: bad descriptor, ignoring hub [ 1319.209714][ T996] hub 5-1:4.0: probe with driver hub failed with error -5 [ 1319.218656][ T996] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 1319.406068][T11088] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1319.494829][ T1666] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1319.544839][T11088] usb 2-1: device descriptor read/64, error -71 [ 1319.677628][ T1666] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.677857][T17425] gspca_sunplus: reg_r err -71 [ 1319.712845][ T1666] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.718087][T17425] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1319.740227][ T996] usb 5-1: reset high-speed USB device number 54 using dummy_hcd [ 1319.741393][ T1666] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1319.755190][T17425] usb 6-1: USB disconnect, device number 116 [ 1319.769904][ T1666] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1319.784110][ T996] usb 5-1: device reset changed ep0 maxpacket size! [ 1319.785226][ T1666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.801170][T11088] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1319.812428][T26950] netlink: 324 bytes leftover after parsing attributes in process `syz.2.5605'. [ 1319.822923][ T996] usb 5-1: USB disconnect, device number 54 [ 1319.834006][ T1666] usb 1-1: config 0 descriptor?? [ 1319.935052][T11088] usb 2-1: device descriptor read/64, error -71 [ 1320.045616][T11088] usb usb2-port1: attempt power cycle [ 1320.052805][T26944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.062082][T26944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.115492][ T1666] usbhid 1-1:0.0: can't add hid device: -71 [ 1320.131065][ T1666] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1320.146450][ T996] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1320.149321][ T1666] usb 1-1: USB disconnect, device number 95 [ 1320.301930][ T996] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1320.314847][ T996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.323051][ T996] usb 5-1: Product: syz [ 1320.329452][ T996] usb 5-1: Manufacturer: syz [ 1320.334309][ T996] usb 5-1: SerialNumber: syz [ 1320.386508][T11088] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1320.422758][T26974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1320.437300][T11088] usb 2-1: device descriptor read/8, error -71 [ 1320.525149][ T1666] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 1320.551270][ T996] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1320.598629][ T996] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1320.649429][ T996] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1320.694070][ T996] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1320.694946][T11088] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1320.749549][ T996] usb 5-1: USB disconnect, device number 55 [ 1320.787433][T11088] usb 2-1: device descriptor read/8, error -71 [ 1320.843248][ T1666] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1320.860947][ T1666] usb 1-1: config 0 has no interface number 0 [ 1320.869851][ T1666] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1320.883282][ T1666] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.894912][ T1666] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1320.912670][T11088] usb usb2-port1: unable to enumerate USB device [ 1320.923767][ T1666] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1320.953893][ T1666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.990433][ T1666] usb 1-1: config 0 descriptor?? [ 1321.145877][ T29] audit: type=1326 audit(1780596952.069:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26970 comm="syz.5.5610" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe912d9ce59 code=0x0 [ 1321.417941][T26985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.438313][T26985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.504809][T22252] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1321.677160][T22252] usb 5-1: not running at top speed; connect to a high speed hub [ 1321.692712][T22252] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1321.715263][T22252] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1321.742697][T22252] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1321.770937][T22252] usb 5-1: New USB device found, idVendor=0582, idProduct=0108, bcdDevice= 0.40 [ 1321.780296][T22252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.788389][T22252] usb 5-1: Product: syz [ 1321.792605][T22252] usb 5-1: Manufacturer: Ñ— [ 1321.797249][T22252] usb 5-1: SerialNumber: syz [ 1321.813843][T26983] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1322.023138][T26994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.033270][T26994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.037197][T26983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.054638][T26983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.073000][T22252] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1322.084645][T22252] usb 5-1: MIDIStreaming interface descriptor not found [ 1322.093513][ T1666] uclogic 0003:2179:0053.007A: failed retrieving string descriptor #100: -71 [ 1322.106782][ T1666] uclogic 0003:2179:0053.007A: failed retrieving pen parameters: -71 [ 1322.115707][ T1666] uclogic 0003:2179:0053.007A: pen probing failed: -71 [ 1322.122850][ T1666] uclogic 0003:2179:0053.007A: failed probing parameters: -71 [ 1322.136009][ T1666] uclogic 0003:2179:0053.007A: probe with driver uclogic failed with error -71 [ 1322.136823][T17425] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1322.151258][ T1666] usb 1-1: USB disconnect, device number 96 [ 1322.202106][T22252] usb 5-1: USB disconnect, device number 56 [ 1322.334927][T17425] usb 6-1: Using ep0 maxpacket: 16 [ 1322.342301][T19968] udevd[19968]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1322.363420][T17425] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.381838][T17425] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1322.406350][T17425] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1322.424095][T17425] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1322.434898][T17425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.456886][T17425] usb 6-1: config 0 descriptor?? [ 1322.671804][ T29] audit: type=1326 audit(1780596953.599:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27010 comm="syz.4.5620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1322.699094][ T29] audit: type=1326 audit(1780596953.599:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27010 comm="syz.4.5620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1322.726582][ T29] audit: type=1326 audit(1780596953.599:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27010 comm="syz.4.5620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1322.756434][ T29] audit: type=1326 audit(1780596953.599:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27010 comm="syz.4.5620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1322.784626][ T29] audit: type=1326 audit(1780596953.599:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27010 comm="syz.4.5620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1322.810340][ T29] audit: type=1326 audit(1780596953.639:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27010 comm="syz.4.5620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1322.836234][ T29] audit: type=1326 audit(1780596953.639:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27010 comm="syz.4.5620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1322.861542][ T29] audit: type=1326 audit(1780596953.639:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27010 comm="syz.4.5620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1322.920998][T17425] uclogic 0003:28BD:0055.007B: interface is invalid, ignoring [ 1322.961436][ T29] audit: type=1326 audit(1780596953.659:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27010 comm="syz.4.5620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1322.993277][ T29] audit: type=1326 audit(1780596953.659:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27010 comm="syz.4.5620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4139ce59 code=0x7ffc0000 [ 1323.270202][T27030] binder: BINDER_SET_CONTEXT_MGR already set [ 1323.280614][T27030] binder: 27029:27030 ioctl 4018620d 200000000100 returned -16 [ 1323.292679][T27030] binder: BINDER_SET_CONTEXT_MGR already set [ 1323.299222][T27030] binder: 27029:27030 ioctl 4018620d 2000000002c0 returned -16 [ 1323.320134][T27032] gre1: entered promiscuous mode [ 1323.325591][T27032] gre1: entered allmulticast mode [ 1323.379477][T27037] binder: 27029:27037 ioctl c0306201 0 returned -14 [ 1323.388777][T27037] binder: 27029:27037 ioctl 2271 200000000380 returned -22 [ 1323.548200][T27039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5627'. [ 1323.573229][T27041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.584039][T27039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.900859][T27060] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5633'. [ 1323.960620][T27060] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5633'. [ 1324.068268][T27072] fuse: Unknown parameter '0x0000000000000004' [ 1324.261109][T27081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5639'. [ 1324.284594][T27081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.299717][T27081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.310118][T27081] bond0 (unregistering): Released all slaves [ 1324.497522][T27084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.506977][T27084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.572305][T27085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.581228][T27085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.888670][T11088] usb 6-1: USB disconnect, device number 117 [ 1325.526125][ T5723] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1325.690557][ T5723] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1325.699021][ T5723] usb 2-1: config 0 has no interface number 0 [ 1325.705209][ T5723] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1325.713859][ T5723] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1325.723034][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.731339][ T5723] usb 2-1: Product: syz [ 1325.735805][ T5723] usb 2-1: Manufacturer: syz [ 1325.740395][ T5723] usb 2-1: SerialNumber: syz [ 1325.747065][ T5723] usb 2-1: config 0 descriptor?? [ 1325.834786][T17425] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1325.996899][T17425] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.008002][T17425] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1326.102123][T17425] usb 1-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 1326.112554][T17425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.135652][T17425] usb 1-1: Product: syz [ 1326.147676][T17425] usb 1-1: Manufacturer: syz [ 1326.157431][T17425] usb 1-1: SerialNumber: syz [ 1326.186193][T27116] binder: BINDER_SET_CONTEXT_MGR already set [ 1326.192358][T27116] binder: 27115:27116 ioctl 4018620d 200000000100 returned -16 [ 1326.203658][T27116] binder: BINDER_SET_CONTEXT_MGR already set [ 1326.209923][T27116] binder: 27115:27116 ioctl 4018620d 2000000002c0 returned -16 [ 1326.280352][T27119] binder: 27115:27119 ioctl c0306201 0 returned -14 [ 1326.286908][T27099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.298212][T27119] binder: 27115:27119 ioctl 2271 200000000380 returned -22 [ 1326.298285][T27099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.395034][T17425] usb 1-1: USB disconnect, device number 97 [ 1326.520749][ T5723] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 1326.724569][T17425] usb 2-1: USB disconnect, device number 47 [ 1326.921100][T27122] random: crng reseeded on system resumption [ 1327.132690][T27132] xt_hashlimit: size too large, truncated to 1048576 [ 1327.224979][ T5723] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1327.446606][ T5723] usb 1-1: Using ep0 maxpacket: 32 [ 1327.469333][ T5723] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1327.479386][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.487782][ T5723] usb 1-1: Product: syz [ 1327.492165][ T5723] usb 1-1: Manufacturer: syz [ 1327.496966][ T5723] usb 1-1: SerialNumber: syz [ 1327.519898][ T5723] usb 1-1: config 0 descriptor?? [ 1327.551073][ T5723] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1327.560136][ T5723] dvb-usb: bulk message failed: -22 (4/0) [ 1327.567359][ T5723] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1327.577031][T27152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.587747][ T5723] dvb-usb: bulk message failed: -22 (5/0) [ 1327.590170][T27152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.595152][ T5723] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1327.620018][T27150] netlink: 'syz.1.5660': attribute type 4 has an invalid length. [ 1327.630468][T27150] netlink: 'syz.1.5660': attribute type 4 has an invalid length. [ 1327.639686][ T5723] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1327.652648][ T5723] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1327.662899][ T5723] usb 1-1: media controller created [ 1327.689827][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1327.729547][ T5723] usb 1-1: selecting invalid altsetting 3 [ 1327.743465][ T5723] ttusb2: set interface to alts=3 failed [ 1327.819835][T27124] dvb-usb: bulk message failed: -22 (8/0) [ 1327.827818][T27124] ttusb2: there might have been an error during control message transfer. (rlen = 4, was 0) [ 1327.838629][T27124] ttusb2: i2c transfer failed. [ 1327.855348][ T5723] DVB: Unable to find symbol tda10086_attach() [ 1327.861692][ T5723] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1327.871394][ T5723] dvb-usb: bulk message failed: -22 (4/0) [ 1327.877365][ T5723] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1327.896400][ T5723] dvb-usb: bulk message failed: -22 (5/0) [ 1327.902190][ T5723] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1327.912468][ T5723] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1327.984555][T27164] binder: BINDER_SET_CONTEXT_MGR already set [ 1327.991233][T27164] binder: 27163:27164 ioctl 4018620d 200000000100 returned -16 [ 1328.001624][T27164] binder: BINDER_SET_CONTEXT_MGR already set [ 1328.012653][T27164] binder: 27163:27164 ioctl 4018620d 2000000002c0 returned -16 [ 1328.090359][T27169] binder: 27163:27169 ioctl c0306201 0 returned -14 [ 1328.100125][T27169] binder: 27163:27169 ioctl 2271 200000000380 returned -22 [ 1328.116624][ T5723] usb 1-1: USB disconnect, device number 98 [ 1328.156751][ T5723] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1328.313036][T27177] sctp: [Deprecated]: syz.4.5668 (pid 27177) Use of int in max_burst socket option deprecated. [ 1328.313036][T27177] Use struct sctp_assoc_value instead [ 1328.624837][T11088] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1328.778695][T11088] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1328.789051][T11088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.799038][T11088] usb 5-1: Product: syz [ 1328.804058][T11088] usb 5-1: Manufacturer: syz [ 1328.809279][T11088] usb 5-1: SerialNumber: syz [ 1328.821087][T11088] usb 5-1: config 0 descriptor?? [ 1328.835842][T11088] hub 5-1:0.0: bad descriptor, ignoring hub [ 1328.841880][T11088] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1329.039867][T11088] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1329.053345][T11088] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1329.062478][T11088] dib0700: firmware download failed at 7 with -22 [ 1329.130233][T27189] netlink: 'syz.0.5673': attribute type 29 has an invalid length. [ 1329.164174][T27189] netlink: 'syz.0.5673': attribute type 29 has an invalid length. [ 1329.235190][ T996] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1329.243116][ T5723] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1329.431498][ T996] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1329.440950][ T996] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1329.450698][ T5723] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1329.460556][ T996] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.470940][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.479929][ T5723] usb 2-1: Product: syz [ 1329.484289][ T996] usb 6-1: config 220 has no interface number 2 [ 1329.493191][ T5723] usb 2-1: Manufacturer: syz [ 1329.498996][ T996] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1329.512916][ T5723] usb 2-1: SerialNumber: syz [ 1329.519621][ T996] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1329.532927][ T996] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1329.540958][ T5723] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1329.563558][T22252] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1329.574424][ T996] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1329.589340][ T996] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1329.602427][ T996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.611765][ T996] usb 6-1: Product: syz [ 1329.614854][T11088] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1329.616540][ T996] usb 6-1: Manufacturer: syz [ 1329.629902][ T996] usb 6-1: SerialNumber: syz [ 1329.775037][T11088] usb 1-1: Using ep0 maxpacket: 32 [ 1329.785247][T11088] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 1329.793562][T11088] usb 1-1: config 0 has no interface number 0 [ 1329.799845][T11088] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1329.813998][T11088] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1329.824386][T11088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.834118][T11088] usb 1-1: Product: syz [ 1329.838793][T11088] usb 1-1: Manufacturer: syz [ 1329.844314][T11088] usb 1-1: SerialNumber: syz [ 1329.862926][T11088] usb 1-1: config 0 descriptor?? [ 1329.865352][ T996] usb 6-1: selecting invalid altsetting 0 [ 1329.892937][ T996] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1329.922770][ T996] uvcvideo 6-1:220.0: No valid video chain found. [ 1329.944564][ T996] usb 6-1: selecting invalid altsetting 0 [ 1329.952252][ T996] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1329.970089][ T996] usb 6-1: USB disconnect, device number 118 [ 1330.002364][T27184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.024293][T27184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.063823][T17425] usb 2-1: USB disconnect, device number 48 [ 1330.139308][T20508] udevd[20508]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1330.340025][T27193] netlink: 'syz.0.5674': attribute type 2 has an invalid length. [ 1330.657657][T22252] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1330.674398][T22252] ath9k_htc: Failed to initialize the device [ 1330.698286][T17425] usb 2-1: ath9k_htc: USB layer deinitialized [ 1330.787166][T27204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1331.198865][T27219] binder: BINDER_SET_CONTEXT_MGR already set [ 1331.214892][T27219] binder: 27218:27219 ioctl 4018620d 200000000100 returned -16 [ 1331.233524][T27219] binder: BINDER_SET_CONTEXT_MGR already set [ 1331.255147][T27219] binder: 27218:27219 ioctl 4018620d 2000000002c0 returned -16 [ 1331.381190][T27224] binder: 27218:27224 ioctl 2271 200000000380 returned -22 [ 1331.516080][T11088] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1331.644944][T24749] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1331.665048][T11088] usb 2-1: Using ep0 maxpacket: 32 [ 1331.672527][T11088] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1331.681987][T11088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.693714][T11088] usb 2-1: config 0 descriptor?? [ 1331.706793][T11088] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1331.797136][T24749] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1331.806084][T24749] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1331.816818][T24749] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1331.825962][T24749] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1331.837379][T24749] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1331.850499][T24749] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1331.859947][T24749] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1331.868238][T24749] usb 6-1: Product: syz [ 1331.872665][T24749] usb 6-1: Manufacturer: syz [ 1331.885297][T24749] cdc_wdm 6-1:1.0: skipping garbage [ 1331.892166][T24749] cdc_wdm 6-1:1.0: skipping garbage [ 1331.899598][T24749] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1331.906103][T24749] cdc_wdm 6-1:1.0: Unknown control protocol [ 1331.906958][T27223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.929046][T27223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.947133][T27223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.959771][T27223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.972090][T27223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.983234][T27223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.996083][T27223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.009493][T27223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.020599][T27223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.047253][T27223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.137523][T27230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.146876][T27231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.156078][T27230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.164565][T27231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.178350][T27230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.189853][T27230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.236309][T27230] netlink: 'syz.4.5684': attribute type 5 has an invalid length. [ 1332.245685][T27231] netlink: 'syz.4.5684': attribute type 5 has an invalid length. [ 1332.271520][T11088] gspca_sunplus: reg_r err -71 [ 1332.286502][T11088] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1332.303128][T11088] usb 2-1: USB disconnect, device number 49 [ 1332.342030][T27235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.354146][T27235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.457743][T27242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.468077][T27242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.518988][ T5731] usb 1-1: USB disconnect, device number 99 [ 1332.686021][T27240] macvlan0: left promiscuous mode [ 1332.711455][T27240] team1: left promiscuous mode [ 1332.716876][T27240] team1: left allmulticast mode [ 1332.722904][T27240] team2: left promiscuous mode [ 1332.728884][T27240] team2: left allmulticast mode [ 1332.743763][T27227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.753553][T27240] gre1: left promiscuous mode [ 1332.759959][T27240] gre1: left allmulticast mode [ 1332.765344][T27227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.812089][T27241] macsec1: entered promiscuous mode [ 1332.818176][T27241] macsec1: entered allmulticast mode [ 1332.831323][T12531] usb 6-1: USB disconnect, device number 119 [ 1332.838592][T27249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.851503][T27249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.924978][ T5731] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1332.974250][T27249] tipc: Disabling bearer [ 1333.086790][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 1333.105671][ T5731] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1333.115863][ T5731] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1333.129503][ T5731] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1333.142937][ T5731] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1333.158024][ T5731] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1333.167508][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.460834][T27265] binder: BINDER_SET_CONTEXT_MGR already set [ 1333.467096][T27265] binder: 27264:27265 ioctl 4018620d 200000000100 returned -16 [ 1333.479510][T27265] binder: BINDER_SET_CONTEXT_MGR already set [ 1333.492593][T27265] binder: 27264:27265 ioctl 4018620d 2000000002c0 returned -16 [ 1333.544842][T12531] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1333.575075][ T5731] usb 1-1: GET_CAPABILITIES returned 0 [ 1333.591359][ T5731] usbtmc 1-1:16.0: can't read capabilities [ 1333.595618][T27269] binder: 27264:27269 ioctl 2271 200000000380 returned -22 [ 1333.704966][T12531] usb 2-1: Using ep0 maxpacket: 32 [ 1333.719630][ T5731] usb 1-1: USB disconnect, device number 100 [ 1333.737010][T12531] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1333.759905][T12531] usb 2-1: config 0 has no interface number 0 [ 1333.772794][T12531] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1333.784943][T12531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.793025][T12531] usb 2-1: Product: syz [ 1333.799795][T12531] usb 2-1: Manufacturer: syz [ 1333.804663][T12531] usb 2-1: SerialNumber: syz [ 1333.812436][T27272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.822837][T12531] usb 2-1: config 0 descriptor?? [ 1333.858045][T12531] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1333.864451][T27272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.877608][T12531] usb 2-1: selecting invalid altsetting 1 [ 1333.883444][T12531] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1333.916668][T12531] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1333.942940][T12531] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1333.953719][T12531] usb 2-1: media controller created [ 1333.969446][T12531] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1334.060616][T27258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5692'. [ 1334.186627][T27283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.195660][T27283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.216502][T27283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.226956][T27283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.397815][T27287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5701'. [ 1334.547929][T27293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.574436][T27293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.631814][T27296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.665325][ T5731] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 1334.666989][T27296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.694343][T27293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.740444][T27293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.045634][T12531] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1335.055442][T12531] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1335.093907][T27258] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1335.210475][T12531] usb 2-1: USB disconnect, device number 50 [ 1335.693958][T27306] veth2: entered allmulticast mode [ 1335.694014][T27316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.723584][T27316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.761689][T27314] bridge_slave_0: entered promiscuous mode [ 1335.781021][T27317] loop5: detected capacity change from 0 to 7 [ 1335.800044][T27317] Dev loop5: unable to read RDB block 7 [ 1335.806691][T27319] binder: BINDER_SET_CONTEXT_MGR already set [ 1335.814865][T27317] loop5: unable to read partition table [ 1335.827095][T27319] binder: 27318:27319 ioctl 4018620d 200000000100 returned -16 [ 1335.827445][T27317] loop5: partition table beyond EOD, truncated [ 1335.850045][T27319] binder: BINDER_SET_CONTEXT_MGR already set [ 1335.859353][T27317] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1335.865515][T27319] binder: 27318:27319 ioctl 4018620d 2000000002c0 returned -16 [ 1335.972687][T27320] binder: 27318:27320 ioctl 2271 200000000380 returned -22 [ 1336.004145][T27322] netlink: 'syz.2.5713': attribute type 1 has an invalid length. [ 1336.302685][T27327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.337089][T27327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.501894][T27336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.513926][T27336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.734634][T27336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.764029][T27336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.826412][T27341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5719'. [ 1337.154335][T27349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.182370][T27349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.248582][T27355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.258053][T27355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.349748][T27359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.361216][T27359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.373465][T27359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.382551][T27359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.393840][T27359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.405005][T27359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.417686][T27359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.427788][T27359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.574113][T27361] team_slave_1: entered allmulticast mode [ 1337.709757][T27363] tun0: tun_chr_ioctl cmd 2147767506 [ 1337.716791][T27363] netlink: 'syz.0.5726': attribute type 10 has an invalid length. [ 1337.875932][T27371] binder: BINDER_SET_CONTEXT_MGR already set [ 1337.883344][T27371] binder: 27370:27371 ioctl 4018620d 200000000100 returned -16 [ 1337.912472][T27371] binder: BINDER_SET_CONTEXT_MGR already set [ 1337.919224][T27371] binder: 27370:27371 ioctl 4018620d 2000000002c0 returned -16 [ 1337.937441][T27363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1337.990315][T27377] binder: 27370:27377 ioctl 2271 200000000380 returned -22 [ 1338.003004][T27375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.040871][T27375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.129988][T27363] geneve1: entered allmulticast mode [ 1338.152155][T27380] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5732'. [ 1338.166896][T11088] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1338.175832][T27380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5732'. [ 1338.328398][T27363] team0: Port device geneve1 added [ 1338.377553][T11088] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.389515][T11088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1338.399855][T11088] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1338.411878][T11088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.431157][T11088] usb 1-1: config 0 descriptor?? [ 1338.455762][T22252] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 1338.515969][T11088] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1338.522998][T11088] dvb-usb: bulk message failed: -22 (3/0) [ 1338.539222][T11088] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1338.549456][T11088] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1338.564600][T11088] usb 1-1: media controller created [ 1338.581163][T11088] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1338.616747][T22252] usb 2-1: Invalid ep0 maxpacket: 64 [ 1338.640633][T11088] dvb-usb: bulk message failed: -22 (6/0) [ 1338.647999][T11088] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1338.666942][T11088] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input180 [ 1338.680911][T11088] dvb-usb: schedule remote query interval to 150 msecs. [ 1338.692389][T11088] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1338.764972][T22252] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1338.844943][T11088] dvb-usb: bulk message failed: -22 (1/0) [ 1338.852062][T11088] dvb-usb: error while querying for an remote control event. [ 1338.925100][T22252] usb 2-1: Invalid ep0 maxpacket: 64 [ 1338.942046][T22252] usb usb2-port1: attempt power cycle [ 1339.015045][T24749] dvb-usb: bulk message failed: -22 (1/0) [ 1339.035393][T24749] dvb-usb: error while querying for an remote control event. [ 1339.078098][T12531] usb 1-1: USB disconnect, device number 101 [ 1339.129730][T12531] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1339.306167][T22252] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 1339.337728][T22252] usb 2-1: Invalid ep0 maxpacket: 64 [ 1339.484858][T22252] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 1339.508396][T22252] usb 2-1: Invalid ep0 maxpacket: 64 [ 1339.516404][T22252] usb usb2-port1: unable to enumerate USB device [ 1339.550357][T27397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.563057][T27397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.816866][T27403] fuse: Unknown parameter '0x0000000000000004' [ 1339.894935][ T5731] usb 6-1: device descriptor read/64, error -110 [ 1340.175062][ T5731] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 1340.279475][T27412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.314832][ T5731] usb 6-1: device descriptor read/64, error -32 [ 1340.344606][T27412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.425015][ T5731] usb usb6-port1: attempt power cycle [ 1340.444942][T24749] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1340.606607][T24749] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1340.615533][T24749] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1340.624445][T24749] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.636877][T24749] usb 1-1: config 220 has no interface number 2 [ 1340.643470][T24749] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1340.672224][T24749] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1340.686805][T24749] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1340.702396][T24749] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1340.721225][T24749] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1340.742995][T24749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.763310][T24749] usb 1-1: Product: syz [ 1340.771004][T24749] usb 1-1: Manufacturer: syz [ 1340.780863][T24749] usb 1-1: SerialNumber: syz [ 1340.797558][ T5731] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 1340.825645][ T5731] usb 6-1: device descriptor read/8, error -32 [ 1340.955342][ T5731] raw-gadget.4 gadget.5: failed to queue suspend event [ 1340.980835][ T5731] raw-gadget.4 gadget.5: failed to queue reset event [ 1341.065538][ T5731] raw-gadget.4 gadget.5: failed to queue resume event [ 1341.109646][T27414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1341.134856][ T5731] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1341.156337][T27422] netlink: 'syz.1.5743': attribute type 4 has an invalid length. [ 1341.185012][ C0] raw-gadget.4 gadget.5: ignoring, device is not running [ 1341.192237][ T5731] usb 6-1: device descriptor read/8, error -32 [ 1341.204966][T27422] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5743'. [ 1341.245885][T24749] usb 1-1: selecting invalid altsetting 0 [ 1341.261496][T24749] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1341.269359][T24749] uvcvideo 1-1:220.0: No valid video chain found. [ 1341.283179][T24749] usb 1-1: selecting invalid altsetting 0 [ 1341.304862][ T5731] raw-gadget.4 gadget.5: failed to queue suspend event [ 1341.314043][T24749] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1341.328557][ T5731] usb usb6-port1: unable to enumerate USB device [ 1341.331505][T24749] usb 1-1: USB disconnect, device number 102 [ 1341.442742][T27428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.461923][T27428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.568103][T27429] [ 1341.570456][T27429] ============================================ [ 1341.576603][T27429] WARNING: possible recursive locking detected [ 1341.582861][T27429] syzkaller #0 Tainted: G L [ 1341.588848][T27429] -------------------------------------------- [ 1341.595035][T27429] syz.2.5744/27429 is trying to acquire lock: [ 1341.601132][T27429] ffffffff8f3d63b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1341.611419][T27429] [ 1341.611419][T27429] but task is already holding lock: [ 1341.618770][T27429] ffffffff8f3d63b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1341.629288][T27429] [ 1341.629288][T27429] other info that might help us debug this: [ 1341.637351][T27429] Possible unsafe locking scenario: [ 1341.637351][T27429] [ 1341.644795][T27429] CPU0 [ 1341.648131][T27429] ---- [ 1341.651392][T27429] lock(qp_broker_list.mutex); [ 1341.656298][T27429] lock(qp_broker_list.mutex); [ 1341.661134][T27429] [ 1341.661134][T27429] *** DEADLOCK *** [ 1341.661134][T27429] [ 1341.669334][T27429] May be due to missing lock nesting notation [ 1341.669334][T27429] [ 1341.677663][T27429] 1 lock held by syz.2.5744/27429: [ 1341.682870][T27429] #0: ffffffff8f3d63b0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1341.684976][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1341.693503][T27429] [ 1341.693503][T27429] stack backtrace: [ 1341.693523][T27429] CPU: 0 UID: 0 PID: 27429 Comm: syz.2.5744 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.693545][T27429] Tainted: [L]=SOFTLOCKUP [ 1341.693552][T27429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1341.693563][T27429] Call Trace: [ 1341.693570][T27429] [ 1341.693580][T27429] dump_stack_lvl+0xe8/0x150 [ 1341.693613][T27429] print_deadlock_bug+0x279/0x290 [ 1341.693635][T27429] __lock_acquire+0x253f/0x2cf0 [ 1341.693654][T27429] ? is_bpf_text_address+0x292/0x2b0 [ 1341.693672][T27429] ? is_bpf_text_address+0x26/0x2b0 [ 1341.693688][T27429] ? kernel_text_address+0xa5/0xe0 [ 1341.693711][T27429] ? __kernel_text_address+0xd/0x30 [ 1341.693734][T27429] ? vmci_qp_broker_detach+0x117/0xf20 [ 1341.693753][T27429] lock_acquire+0x106/0x350 [ 1341.693768][T27429] ? vmci_qp_broker_detach+0x117/0xf20 [ 1341.693793][T27429] __mutex_lock+0x1a3/0x1550 [ 1341.693812][T27429] ? vmci_qp_broker_detach+0x117/0xf20 [ 1341.693833][T27429] ? kasan_save_track+0x4f/0x80 [ 1341.693854][T27429] ? kasan_save_track+0x3e/0x80 [ 1341.693873][T27429] ? kasan_save_free_info+0x46/0x50 [ 1341.693890][T27429] ? __kasan_slab_free+0x5c/0x80 [ 1341.693909][T27429] ? kfree+0x1c5/0x640 [ 1341.693927][T27429] ? vmci_ctx_put+0x5ef/0xc40 [ 1341.693941][T27429] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1341.693955][T27429] ? vmci_datagram_dispatch+0x450/0xc60 [ 1341.693970][T27429] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 1341.693989][T27429] ? vmci_host_close+0x98/0x160 [ 1341.694006][T27429] ? vmci_qp_broker_detach+0x117/0xf20 [ 1341.694025][T27429] ? exit_to_user_mode_loop+0x193/0x680 [ 1341.694041][T27429] ? __pfx___mutex_lock+0x10/0x10 [ 1341.694063][T27429] vmci_qp_broker_detach+0x117/0xf20 [ 1341.694086][T27429] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1341.694104][T27429] ? kasan_quarantine_put+0xbb/0x1f0 [ 1341.694131][T27429] ? lockdep_hardirqs_on+0x7a/0x110 [ 1341.694148][T27429] ? kfree+0x1c5/0x640 [ 1341.694164][T27429] ? vmci_ctx_put+0x5ef/0xc40 [ 1341.694177][T27429] ? vmci_ctx_put+0x141/0xc40 [ 1341.694192][T27429] vmci_ctx_put+0x64e/0xc40 [ 1341.694208][T27429] ? __pfx___schedule+0x10/0x10 [ 1341.694229][T27429] ? vmci_ctx_put+0x141/0xc40 [ 1341.694245][T27429] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1341.694261][T27429] ? preempt_schedule_thunk+0x16/0x30 [ 1341.694281][T27429] ? preempt_schedule_common+0x82/0xd0 [ 1341.694306][T27429] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1341.694325][T27429] vmci_datagram_dispatch+0x450/0xc60 [ 1341.694344][T27429] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1341.694363][T27429] vmci_qp_broker_detach+0x8dd/0xf20 [ 1341.694386][T27429] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1341.694405][T27429] ? kasan_quarantine_put+0xbb/0x1f0 [ 1341.694426][T27429] ? kfree+0x1c5/0x640 [ 1341.694443][T27429] ? vmci_ctx_put+0x5ef/0xc40 [ 1341.694457][T27429] ? vmci_ctx_put+0x141/0xc40 [ 1341.694472][T27429] vmci_ctx_put+0x64e/0xc40 [ 1341.694486][T27429] ? vmci_ctx_put+0x141/0xc40 [ 1341.694502][T27429] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1341.694523][T27429] vmci_host_close+0x98/0x160 [ 1341.694542][T27429] ? __pfx_vmci_host_close+0x10/0x10 [ 1341.694561][T27429] __fput+0x44f/0xa60 [ 1341.694582][T27429] task_work_run+0x1d9/0x270 [ 1341.694610][T27429] ? __pfx_task_work_run+0x10/0x10 [ 1341.694634][T27429] exit_to_user_mode_loop+0x193/0x680 [ 1341.694650][T27429] ? rcu_is_watching+0x15/0xb0 [ 1341.694669][T27429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.694687][T27429] do_syscall_64+0x353/0x580 [ 1341.694702][T27429] ? trace_irq_disable+0x3b/0x140 [ 1341.694723][T27429] ? clear_bhb_loop+0x40/0x90 [ 1341.694740][T27429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.694756][T27429] RIP: 0033:0x7fd2f259ce59 [ 1341.694773][T27429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.694787][T27429] RSP: 002b:00007fd2f34c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1341.694806][T27429] RAX: 0000000000000000 RBX: 00007fd2f2816090 RCX: 00007fd2f259ce59 [ 1341.694818][T27429] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 1341.694829][T27429] RBP: 00007fd2f2632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1341.694840][T27429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1341.694850][T27429] R13: 00007fd2f2816128 R14: 00007fd2f2816090 R15: 00007fd2f293fa48 [ 1341.694868][T27429]