last executing test programs: 13m1.890612754s ago: executing program 2 (id=248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 12m49.394561424s ago: executing program 0 (id=253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000006a00000a50000000060a0b0400000000000000000200fffe2400048020000180070001006374000014000280080001400000000208000240000000030900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 12m49.203770836s ago: executing program 2 (id=254): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1c, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x40800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x5) r4 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020600) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x13, 0x7, 0x55}, {@loopback, 0x4e27, 0x2000, 0x80000, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0xa2c65) getpgrp(0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12m48.666932541s ago: executing program 0 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 12m47.28386618s ago: executing program 0 (id=259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305000000000000000000000604", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028005001600010000000600020030"], 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 12m46.528974533s ago: executing program 1 (id=261): r0 = io_uring_setup(0x3642, &(0x7f0000000400)={0x0, 0xeb8a, 0x1000, 0xffffffff, 0x2d6}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x50000002}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1) 12m45.753652256s ago: executing program 0 (id=263): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000200)="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", 0x130, 0x24010095, &(0x7f0000000080)={0xa, 0x4e21, 0xd2, @mcast1, 0x56}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x4d, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000003000000000000810010000800450000b000000000fb019078ac1e0001ac1414aa03019078032400004500000000010000000100077f000001640100fe8677ffffffff000e08c82ce8da6ee06cb8dd94520509020007651442eb000e7434954373561de584b703c80005e706d30bd224f80207cfa11cab1a00108475be675de6a70a8525dc91e5c6060a0000000000800000021173bc23f9ffffffa30900a301c846000011c8f46976e79ea788f03d9d3205927e86cff972950f5812fe9725fb4a4f3e57b75529cc576fb569c3f2ee16b71f8652d984d482117c8b8c9e571790b0630f759ce982f57b1600"/254], 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000340)=0x2, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r2, r2) setpgid(0x0, r2) wait4(r2, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2}) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000480)) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000240)={0x2b, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5e1dee93"}}) setpgid(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8110ac00f8cd58700d305c7569f9000000009500000000080000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x87, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'wrr\x00', 0x0, 0x60000000, 0x6d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f26, 0x12002, 0xb, 0x8003, 0x10}}, 0x44) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x41c, 0x248, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x354, 0x20a, 0x278, 0x354, 0x278, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, [0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x4, 0x3}, 0x0, 0x224, 0x248, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x597, 'kmp\x00', "ad4bff4386cdeeecbb1592ef2ec6370f926ffd8034db5c419cf708b56fb841897a28e865757ba0e326a6c9cb18671e6de0db269d93b547047b86137fb2ec073d8004db4cb2d47c4aef08ba4c7c3c687a54219bf10914d82711449f7798c3963a9abd25ce0d48300ebf2f88f0a8a6a92b8f59bbc6596775a37e25eebbc12fcf3f", 0x4, 0x4, {0xffffffc0}}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de6d767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x6c, 0x0, {0xff}}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@ipv6={@local, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {0x44efc056fb5ee4c2}, 0x67, 0x1}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x478) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080012401606000008001340000000350213000300686173683a6e65752c696661636500000500054f5010dcf90a00000005000400000000000900020073797a310000005baad1f05580cb080655f2a2757e0be32e9179cd9d92ab001e43c8f5e39e05dc00"/136], 0x60}}, 0x0) 12m44.679166408s ago: executing program 4 (id=265): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030c00000027bd700000000000020009001000000001d700000000000003000600000000000200001f00000000000000000000000002000100000000000000031800000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) 12m43.757655799s ago: executing program 4 (id=267): r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x1a5601) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0}) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x80045300, &(0x7f0000002000)) socket$inet(0x2, 0x2000000080002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="2a00000008021100000108021100000008021100000000000000000000000000640001000006020202020202010782848b960c121872060303030303034d6e609fbb2ff63f11dcae47e85607e18f9735cb299d1e9f2ec1e075bc6397287a26a84f0c380a637cfd5c96e36d33e252e947e0f37f0a7374ee537bbe790702b97e22cc45f3e634823d4881e48ea20bde1a0d3b65547cb9fbfc2d152731e7382c04d47c096e43b426e025780673d613e7dc26d9cabfdb615d48806f"], 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="5a6c9751f005", @device_a, @device_b, {0xb, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x1fde, 0x3, 0x3, 0x0, 0x1, 0x1}}, @a_msdu}, 0x1c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_route(0x10, 0x3, 0x0) 12m43.738814971s ago: executing program 1 (id=268): syz_open_dev$ndb(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x40800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020600) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x13, 0x7, 0x55}, {@loopback, 0x4e27, 0x2000, 0x80000, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getpgrp(0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) 12m43.710818636s ago: executing program 2 (id=269): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="e80000000001050500000000000000000a0000003c0002802c000180140003002001000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c000180"], 0xe8}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012002927000000000000008b050021"], 0x38}}, 0x4) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x68, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$sock(r1, &(0x7f0000002080), 0x8000379, 0x4000801) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) recvmmsg(0xffffffffffffffff, &(0x7f00000029c0), 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004"], 0xff3c, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x565c}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/15, @ANYRES32=0x1], 0x48) r5 = fcntl$dupfd(r4, 0x406, r4) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x25, 0x60, 0x2, "", [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x3, 0x1, 0x3, 0x42, {0x9, 0x21, 0xfffe, 0x89, 0x1, {0x22, 0xff4}}, {{{0x9, 0x5, 0x81, 0x3, 0x737258fe258d1aa5, 0x16, 0x4, 0x3}}}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x300, 0x48, &(0x7f00000000c0)=""/72}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 12m42.143250618s ago: executing program 1 (id=271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x34}, [@alu={0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x300}, 0x94) 12m41.418118836s ago: executing program 1 (id=273): r0 = socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x3b5, 0xf9000000) close_range(r0, r0, 0x2) r1 = getpgrp(0xffffffffffffffff) ptrace(0x4208, r1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0xf6, 0x2001) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x932, 0x0, 0x7}, {0x4000009e, 0x0, 0x7}]}) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x20400, 0x0) getdents64(r4, &(0x7f00000000c0)=""/228, 0xe4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a5}], @NL80211_ATTR_SSID={0xa, 0x34, @random="863e83720831"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008854}, 0x800) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000380)=0x0) migrate_pages(r7, 0x5, &(0x7f00000003c0)=0x7, &(0x7f0000000400)=0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x8, 0x7811, 0x9, 0x8, {{0x1d, 0x4, 0x1, 0xf, 0x74, 0x66, 0x0, 0xa, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@end, @ra={0x94, 0x4}, @end, @rr={0x7, 0xf, 0x89, [@multicast2, @loopback, @empty]}, @lsrr={0x83, 0x7, 0x1e, [@loopback]}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0xf, 0x68, [@empty, @multicast1, @empty]}, @timestamp={0x44, 0x24, 0x8d, 0x0, 0x1, [0x3, 0x4, 0x8, 0x6, 0x7c6800, 0x5, 0x2, 0x5]}, @timestamp_addr={0x44, 0xc, 0x6e, 0x1, 0x3, [{@private=0xa010101, 0x9}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, r9, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40044}, 0x4008000) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000780)={{0x4, 0x7}, 0x100, './file0\x00'}) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000008c0)={0x1fd, 0x0, &(0x7f0000ffd000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000940)=0x0) ioctl$BLKTRACESETUP(r12, 0xc0401273, &(0x7f0000000980)={'\x00', 0x1, 0x5, 0x0, 0x2, 0x100000001, r13}) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) ptrace$setregs(0xf, r14, 0xea, &(0x7f0000000a00)="903c2335370ccea956615865fc5fc9b27c131f61ccfc4429fc648ad1a5b546b4b1eeca4321b02aea3bd6b60ee27e7cbc04fc7f2660f45a9b595cbe9e77745ef339134fd3f310e2b0b5eaa283a3e3dffaf57b5ac51753230028316e40786f5087dd63df94ac7d8628ed6bfbe2c01ba74ac7c94b5e83ec868e87a2928e2941ab8c30b8124aaa4883fe103c5b547c401e") ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000ac0)={0x1, 0x0, @ioapic={0xfec00000, 0xfffffffc, 0x4d, 0xfff, 0x0, [{0x7, 0x2, 0x1, '\x00', 0xc}, {0x0, 0x5, 0x5, '\x00', 0x5}, {0x3, 0xf3, 0x6, '\x00', 0x2}, {0x5, 0xa, 0x1, '\x00', 0xeb}, {0xa6, 0x0, 0x80, '\x00', 0x9}, {0xa, 0x3, 0x9, '\x00', 0xc}, {0x0, 0x8, 0x76, '\x00', 0x2}, {0x6, 0x0, 0x9, '\x00', 0x7f}, {0xf, 0x40, 0x6, '\x00', 0x2}, {0x9, 0x7, 0x9, '\x00', 0x9}, {0x11, 0x2, 0xb, '\x00', 0x9}, {0x4, 0x8, 0x9, '\x00', 0x3}, {0xf8, 0x7f, 0x6, '\x00', 0x4}, {0x2, 0x0, 0x2, '\x00', 0x4b}, {0x4, 0x1, 0x6}, {0x9, 0x2, 0x3, '\x00', 0x7}, {0x8, 0xa0, 0x8, '\x00', 0x5}, {0x5, 0x5, 0x1}, {0x9, 0xb, 0x8, '\x00', 0x9}, {0x7f, 0x1, 0x5, '\x00', 0x9}, {0xf4, 0xe7, 0xa8, '\x00', 0x1}, {0x97, 0xf5, 0x5, '\x00', 0x1}, {0x8, 0x0, 0x4, '\x00', 0x2}, {0x12, 0xfb, 0x0, '\x00', 0x9}]}}) openat$uinput(0xffffff9c, &(0x7f0000000d00), 0x2, 0x0) 12m40.23744604s ago: executing program 0 (id=275): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x56fa9599}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeda7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r4, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/32, 0x30}], 0x1}, 0x7}], 0x1, 0x40000182, 0x0) close(r5) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x20004814) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x9, 0x200000000000403, 0x70dd0436, 0x0, 0x8], 0xd000, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m39.71066322s ago: executing program 4 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x80000000, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 12m39.659583751s ago: executing program 1 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000004000000000e000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000160000008500000083000000bf0900000000000055090100000000008900000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m39.378972453s ago: executing program 1 (id=279): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1c, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x40800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x5) r4 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020600) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x13, 0x7, 0x55}, {@loopback, 0x4e27, 0x2000, 0x80000, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0xa2c65) getpgrp(0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12m39.118523798s ago: executing program 4 (id=280): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0086401, &(0x7f0000000180)={0xac, &(0x7f00000000c0)=""/172}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0x124}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0xfffffffa, 0x80000003, 0xb, 0x1fd, 0x1}) 12m39.117931798s ago: executing program 2 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32=0x0, @ANYBLOB="14000200ff02000000000000000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 12m37.091819135s ago: executing program 2 (id=283): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x401, 0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x3000000, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) 12m36.802731149s ago: executing program 4 (id=284): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0x11, 0x148, 0x14c, 0x0, 0x21c, 0x2a8, 0x2a8, 0x21c, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast2, 0xff, 0xffffffff, 'tunl0\x00', 'dvmrp1\x00', {0xff}, {}, 0x11, 0x2, 0x6}, 0x0, 0xe4, 0x14c, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e24, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e24, 0x4e21, 0x4e21, 0x4e21, 0x4e1e], [0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0xf, 0x1, 0x1, 0x1, 0x1, 0xfd, 0x1]}}, @inet=@rpfilter={{0x24}, {0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xfffd, 0x7, 0x0, '\x00', 'syz0\x00', {0x75}}}}, {{@ip={@multicast1, @broadcast, 0xa802, 0xff, 'wlan1\x00', 'veth0_to_team\x00', {}, {}, 0x2, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x3, 0x6, 0x6, 0x3], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x5, 0x1, 0x3], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x30c) 12m36.727150202s ago: executing program 0 (id=285): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@allocspi={0x13c, 0x16, 0x1, 0x70bd28, 0x25dfdbff, {{{@in6=@loopback, @in6=@private1, 0x6, 0x800, 0x4e22, 0x2, 0xa, 0x20, 0x20, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xda1, 0x81, 0x3, 0x1, 0x3, 0x6, 0x7c51, 0x6aa2}, {0x101, 0x80, 0x8000, 0x7fffffffffffffff}, {0xf99, 0x0, 0x9c}, 0x70bd2d, 0x3500, 0x2, 0x4, 0xf8, 0x4}, 0xffff, 0x400}, [@algo_auth={0x48, 0x1, {{'sha1_mb\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x90}, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x4, 0x5, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}, @private1, 0x7, 0x40, 0x10001, 0x3}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x200, 0x70bd2b, 0x7, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044800}, 0x64040) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x70, 0x8310000, 0x3ff, 0xff, 0x3, 0xa54, 0x0, 0x0, 0x10, 0x20000000}}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xcf}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xdbd}}]}, 0x30}}, 0x48040) r8 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000"], 0x0) syz_usb_disconnect(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffe0, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc000000020601020000000000000000000000030c00078005000700290000000900020073797a32000000000c000180080001407f00000105001500010000020500030004000000050007002f0000000800124000124a23a26500000108001740ffffff1e08004a082adaca6ccc6979600800000000000000ff50ffff480007800800134000000d930c00018008000140ac1414bb0500150080000000060005404e220000060004404e2300000800094000000092537f15d78075efea215403"], 0xbc}}, 0x10) 12m36.231084298s ago: executing program 2 (id=286): syz_open_dev$ndb(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x40800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020600) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getpgrp(0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) 12m35.862703912s ago: executing program 4 (id=287): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000903030700ff7f0800ffff61b9d1a500081101ff01000000000000000000000b40"], 0x3e) 12m21.8191139s ago: executing program 32 (id=279): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1c, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x40800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x5) r4 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020600) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x13, 0x7, 0x55}, {@loopback, 0x4e27, 0x2000, 0x80000, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0xa2c65) getpgrp(0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0x4112, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12m21.307663761s ago: executing program 33 (id=285): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@allocspi={0x13c, 0x16, 0x1, 0x70bd28, 0x25dfdbff, {{{@in6=@loopback, @in6=@private1, 0x6, 0x800, 0x4e22, 0x2, 0xa, 0x20, 0x20, 0x2}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xda1, 0x81, 0x3, 0x1, 0x3, 0x6, 0x7c51, 0x6aa2}, {0x101, 0x80, 0x8000, 0x7fffffffffffffff}, {0xf99, 0x0, 0x9c}, 0x70bd2d, 0x3500, 0x2, 0x4, 0xf8, 0x4}, 0xffff, 0x400}, [@algo_auth={0x48, 0x1, {{'sha1_mb\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x90}, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x1008}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x4, 0x5, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}, @private1, 0x7, 0x40, 0x10001, 0x3}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x200, 0x70bd2b, 0x7, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044800}, 0x64040) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x70, 0x8310000, 0x3ff, 0xff, 0x3, 0xa54, 0x0, 0x0, 0x10, 0x20000000}}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xcf}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x22}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xdbd}}]}, 0x30}}, 0x48040) r8 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000"], 0x0) syz_usb_disconnect(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffe0, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc000000020601020000000000000000000000030c00078005000700290000000900020073797a32000000000c000180080001407f00000105001500010000020500030004000000050007002f0000000800124000124a23a26500000108001740ffffff1e08004a082adaca6ccc6979600800000000000000ff50ffff480007800800134000000d930c00018008000140ac1414bb0500150080000000060005404e220000060004404e2300000800094000000092537f15d78075efea215403"], 0xbc}}, 0x10) 12m20.722532801s ago: executing program 34 (id=286): syz_open_dev$ndb(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x40800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020600) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getpgrp(0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) 12m20.294260807s ago: executing program 35 (id=287): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000903030700ff7f0800ffff61b9d1a500081101ff01000000000000000000000b40"], 0x3e) 51.350419817s ago: executing program 6 (id=4426): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000400", 0x58}], 0x1) 51.249942203s ago: executing program 6 (id=4428): syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x2}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast, {[@generic={0x88, 0x2}]}}, @timestamp_reply={0x11}}}}}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) 49.405889476s ago: executing program 6 (id=4441): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 49.343301842s ago: executing program 8 (id=4443): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) 49.328349217s ago: executing program 5 (id=4444): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003f8004002280080003004700000008003e00", @ANYRES32, @ANYBLOB="770b4c04eb17e28d7ccfeb01b856d9d467de58b60b08ed94863392d3b6734e78901923994fe01247a459708eaffa2e29d660105367460c3ed83012f730fbfaff451fed7ddb264be147fab13847ebb0a8ee327f85e0938c939bf6d4378bedc48e6bef399b5dc50b"], 0x2c}, 0x1, 0x0, 0x0, 0x10004956}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x481, 0x0, 0xf}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) sendmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0xa5f288b4872b4003, 0x5, 0x5, "b54ce52e39046868bcf2f75089c86b302cd6188b57b2b59c4df079e389d719af2c5dd08cf01d928739441c819e839bd0f1eef252951384596a4994a31c9e91", 0x23}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[{0x48, 0x103, 0x2, "d3782934a409ddcde44388227926ce131ef1b3716cddc573e249efae40200a34f44961f4834935744ba6f5b0f96571c11914cfd27e0cfe1ea1"}, {0x88, 0x108, 0x4, "3d57e8255e88918052b18f57fa65f09bae9328dccdf188c34aa8d8e1cb32aab2bc2b1fb07826581ac8d20e368cf346cdf79ad7a9a05f1751732b11790dc2b8357f6d0fe2b5fa78fe3d7eb7dc57e61ff0dbf65012357240c7cfb1911bc9c0d2baa8309ccd6e45233e809751977e9025c87a946010ba347c62615df3c1"}], 0xd0}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00"], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, 0x0, 0x0) r9 = openat$tun(0xffffff9c, &(0x7f0000000140), 0x4102, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f00000002c0)) 48.953075145s ago: executing program 6 (id=4445): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000280703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3300202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc303fffde1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 48.952587894s ago: executing program 8 (id=4446): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000900)=0xffffff9c, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x5, 0x9, 0x0, 0xe9}, {0x5, 0xc0, 0x7, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/2, 0x2}}, 0x120) write$UHID_INPUT(r4, &(0x7f0000003840)={0xc, {"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", 0x1000}}, 0x4) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ad3d29cfa98ad744df250900000008000300", @ANYRES32=r9, @ANYBLOB="0800090001ac0f00"], 0x24}}, 0x0) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000002180)="92", 0x1}, {&(0x7f0000000080)='#', 0x1}, {&(0x7f0000002240)="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"/3521, 0xfe93}, {&(0x7f0000003240)='w', 0x1}, {&(0x7f0000000140)='^', 0x1}, {&(0x7f00000002c0)="dd", 0x1}, {&(0x7f0000000000)="14", 0x1}], 0x7, 0x6) write$FUSE_ATTR(r0, &(0x7f00000004c0)={0x78, 0xfffffffffffffffe, 0x0, {0x8, 0x4, 0x0, {0x1, 0x2, 0x4, 0x5, 0x6, 0xffffffffffffffc0, 0xfffffffe, 0x4b, 0x80000001, 0x6000, 0x200, 0x0, 0x0, 0x3, 0x3}}}, 0x78) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c0000180037801300030071747228"], 0x2c}}, 0x0) 48.659661654s ago: executing program 3 (id=4447): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x43c, 0xe4, 0xe4, 0xfeffffff, 0xe4, 0xe4, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x8, 0x4}}, @common=@inet=@socket2={{0x24}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}}]}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {0x0, 0x27a}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x498) 48.648531034s ago: executing program 6 (id=4448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x2a, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1"}, 0x4e) r4 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f00000001c0)='GPL\x00'}, 0x94) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="080000000000000026bd700000000000fe800000000000000000000000000033ac141411000000000000000000000000012a00004e230003020000003a000000fb265212759427653e5a73a4c297efe8233e6587bacb0540aeb5bc3a091ab03aee85e826d2c122827bd2c02b15a8772d56a6a541227a6c777b1a54b3031de89d5e2383d7383f745635d1adf579c5d93e8eaa61b958f5f5bfd8c75eceb7040383dea6e3111a6dd2c481dd8fa5633d2b640557bb229dae1fc24c5fa352de2262fb446d71fbb2f06f7cb34e461703e4abb3c23024793e553de018a8d172c7dc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe10, 0x10, &(0x7f0000000040), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x42) 48.421059997s ago: executing program 3 (id=4449): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32=0x0, @ANYBLOB="14000200ff0200ffffffc300000000000000001114000300ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 48.06744202s ago: executing program 5 (id=4450): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r3, 0x201, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008814) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 48.036914625s ago: executing program 3 (id=4452): connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x18, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) r0 = openat$audio1(0xffffff9c, &(0x7f0000000040), 0x428b40, 0x0) (async, rerun: 64) r1 = fcntl$getown(0xffffffffffffffff, 0x9) (rerun: 64) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x2, 0x2, 0x48, 0xffffffc0, r1}) (async) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xe895, 0x8a02) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x10040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", ""]}, 0x14}}, 0x20000891) (async) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x74, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x830}, 0x80) bind$packet(r2, &(0x7f0000002500)={0x11, 0x15, r6, 0x1, 0xe5, 0x6, @random="aa92c7f22e4c"}, 0x14) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002580), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x70, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002700), r2) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000028c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002880)={&(0x7f0000002740)={0x12c, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff801}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf44}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xef}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ab800000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdfff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1fe0}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x4c, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x61e9e62c107641f5) (async) r9 = openat$fuse(0xffffff9c, &(0x7f0000002a40), 0x2, 0x0) r10 = socket$unix(0x1, 0x6, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x38, 0x17, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc01c586a, &(0x7f0000002c80)={r9, &(0x7f0000002b80)='(+\x00', 0x200, &(0x7f0000002bc0)={@align=0x6, {0xf075, 0x9, 0x9, 0x1}}, 0xe4c9, &(0x7f0000002c00), &(0x7f0000002c40)=0x6}) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000002cc0)={0x80000001, {{0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x30fb57d9}}, 0x1, 0x7, [{{0xa, 0x4e24, 0x0, @loopback, 0x9}}, {{0xa, 0x4e22, 0x8, @loopback, 0x5}}, {{0xa, 0x4e20, 0x8, @mcast2, 0x739}}, {{0xa, 0x4e22, 0x7, @private2, 0x8}}, {{0xa, 0x4e20, 0x99, @remote, 0x8}}, {{0xa, 0x4e20, 0xfffff801, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}}, {{0xa, 0x4e24, 0xff, @ipv4={'\x00', '\xff\xff', @local}, 0xc}}]}, 0x40c) (async) r12 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DVB_DEMUX_DMX_REQBUFS(r2, 0xc0086f3c, &(0x7f0000003100)={0x6}) (async, rerun: 64) fstatfs(r12, &(0x7f0000003140)=""/95) (async, rerun: 64) bind$xdp(r11, &(0x7f00000031c0)={0x2c, 0x4, r6, 0x37, r2}, 0x10) sendfile(r10, 0xffffffffffffffff, &(0x7f0000003240)=0x4, 0xfffffff9) 47.640352031s ago: executing program 8 (id=4453): r0 = socket$inet6(0xa, 0x3, 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x880) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000000c0), 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @empty, 0x2000001}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5003f, 0x40410}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}, 0x1, 0x4000, 0x0, 0x440d0}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 47.530071651s ago: executing program 5 (id=4454): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0x2, @vbi={0x2, 0x6, 0x6, 0x32315559, [0x1, 0xfffff801], [0x2, 0x5], 0x1}}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x67) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x32, 0x9, 0x6, 0x6, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x8, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4081}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000180)={r9, 0x9}, 0xc) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008ff4b0000340000000000019078ac1e0001ac1414aa8617000000030611848a83989c24887c92520e2763c50300080090780007000d"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0xe0000012}) socket$nl_netfilter(0x10, 0x3, 0xc) 46.236741363s ago: executing program 3 (id=4455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 41.038218299s ago: executing program 7 (id=4456): syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22"], 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x4, 0x0) write$tun(r0, &(0x7f00000000c0)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, ')', "b865d5", 0x8808, "867bb19feb"}}}}}}, 0x1b) syz_extract_tcp_res(&(0x7f0000000040), 0x95e9, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x1808020, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000400)={0x50, 0x0, 0x80000000000, {0x7, 0x29, 0x3, 0x800100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r9, 0x6, 0x21, &(0x7f0000000400), 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$kcm(0x10, 0x2, 0x0) 41.037904181s ago: executing program 3 (id=4457): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file0', [{0x20, '/!'}, {0x20, '*@]'}, {0x20, '\xa0\xb3\x85\xe1up.stat\x00{\tcq\x9f\xaet\xe5nE(\xeb\xbd\xda0\xfb\xba\x0ed!Rh\xc0r\xc5\x13F\xc3\xe2\x1f\x17\xe2\x9d\xab\a\xe2\xba\xac\x1c\xc6\xf5\x84\xa4]\x93\x01\x1b\xfdE\x119\xc7\xdf4\xa56)SO\xa3yd{\xe8\xc0'}], 0xa, "b52433a163b4ab1b04000000000000000000000002002000000000"}, 0x7b) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081001100000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 37.998211626s ago: executing program 3 (id=4458): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x28, r1, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xd, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) unshare(0x60600) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8}) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x10000, 0x3, 0x1}, 0x18, 0x1) landlock_restrict_self(r7, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 37.907219059s ago: executing program 8 (id=4459): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x0, 0x74}, 0x8) sendto$inet6(r1, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "fa441c9b"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 37.309953343s ago: executing program 7 (id=4460): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80100001900010025bd7000ffdbdf25fe88000000000000000000000000030000000000000000000008000000df8de7ce76441bca0000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000100001000000000000000000000000000018500000000000000000000000000000005000000000000000a000000000000000500000000000000000000000000000000000000000000000008000000000000000000000000000003000000000000000100010104010500fc010000000000000000000000000001000000003300000000000000ac1e0101000000000000000000000000ff340000000000000000000000000000442000007f000001000000000000000000000000000020003c00000002000000ac1414aa0000000000000000000000000235000000000000000000000000000000000000e0000002000000000000000000000000000000006c00000000000000ff010000000000000000000000000001000000000000000004000000000000000000000020010000000000000000000000000001000004d26c0000000a000000ff0200000000000000000000000000010000000004030b"], 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 35.037732761s ago: executing program 6 (id=4461): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) open(&(0x7f0000000300)='.\x00', 0x0, 0x2) read$FUSE(r3, &(0x7f0000001fc0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r6 = fsopen(&(0x7f0000000040)='jfs\x00', 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, 0x0, &(0x7f0000000300)) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='sou\x1d\xee\xb3', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r7, @ANYBLOB="ef4e2d518b7340d40243422c719723d5d416cdb1fc64ee5236c86d339f7df80e66f30bda", @ANYBLOB="355c883587677de8897baeeb82a0aacd9d8505eeb518fbf84fcd0700854d300d850e000000000000000000000af66d14cb4382c898f574830def212a2bdc2b70692d4a193f6b8ad5866ed4e5353218ef9f8eceb9c39aac310525ab40c1cb74992082bba919383d622b349a32ca43d9d5a2d1561cb31ac38a25af6199ee3410171a7f6c7ff72799c2b8be4aec3b9a69e49fea0dcef0ec7f9b"], 0x14}, 0x1, 0x0, 0x0, 0x20008850}, 0x404c011) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010014000000000000000600000008000302", @ANYRES32=r10, @ANYRES8=r2], 0x28}}, 0x0) userfaultfd(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 34.639661855s ago: executing program 7 (id=4462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb000008000e4006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 33.88475844s ago: executing program 5 (id=4463): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb000008000c3006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 33.884454152s ago: executing program 7 (id=4464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) (async) openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0) (async) 32.869205584s ago: executing program 7 (id=4465): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x32}, 0x0, [0x3d2f, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0xffff, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xeffffffd, 0xfffbfffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x6, 0x4, 0x0, 0x0, 0x42, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x401, 0x0, 0x8000000000000000, 0x1ff, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x6, 0xfffffffd, 0xfffffffd, 0x32, 0x0, 0x80000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x657f, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x101, 0x8, 0x4, 0x3c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x8076]}) 32.131181024s ago: executing program 8 (id=4466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x110, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYRES8=r3, @ANYRES64, @ANYBLOB="6622820dee791044d677ebc191d49a8b46ce76cefe41209115cabee095b834c5f9b3f9e2c3a249615f6a58f20d6706b836915616af53f468ac61f8aaf4772832f97eb76093226d91ac6739d410883851ecb5565a34e8df84e91901dfc190a476ba8f336f3b741b2a92603a", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESOCT=0x0, @ANYBLOB="621a8261eb75359573af6275f9e69fb4c07a3031f769c7eb49780447a84f689140aa91b17c23aac75c54f25ed0a983c8061f320ae78af536408e22bf696d4e125783e620e3f4388a88064a10631d97c29a5d1514f0"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) r5 = socket(0x15, 0x5, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000083, 0x0, 0x8000000000000001}]}) 31.668289987s ago: executing program 5 (id=4467): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030c00000027bd700000000000020009001000000001d700000000000003000600000000000200000000000000050000000000000002000100000000000000031800000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) 30.501377348s ago: executing program 7 (id=4468): openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x181200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7fff) sendto$inet6(r1, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) read(r1, &(0x7f0000000240)=""/193, 0xc1) shutdown(r1, 0x1) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x4, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, r2, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}}}}}}, 0x0) 30.501032002s ago: executing program 5 (id=4469): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="05002dbd"], 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="11326d384a805032", 0x8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x8a, 0x4, 0x0, 0x9, 0x4, 0x3, 0x3, 0x6, 0x6, 0x1, 0x0, 0x0, 0x4, 0x8, 0xbf, 0x5, 0x5, 0x3, '\x00', 0x2d, 0x5}) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000010080)=""/182, 0xb6}], 0x2}, 0x2120) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}]) 21.424431689s ago: executing program 8 (id=4470): r0 = fsopen(&(0x7f0000000100)='ncpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x2, &(0x7f0000000300)=[{0x6, 0x5, 0x7, 0x7ffc0001}, {0x4, 0x47, 0x4}]}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x781a01, 0x0) read$dsp(r3, 0x0, 0x4c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000002c0)=0x1) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_destroy(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1c3142, 0x80) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000740)={0x18, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYBLOB="71b11320ad3220109d6b7e742360da88dd21099f2742a4d2ee04c3268bc724497669ec476478203c094281ff4cbe601ff05fc28f1f5059f339f81a2f0da53c216e1fbd8530f3cb952ccb38d50b67f42e76f0023f8c39c50ae02f19147f09ef0962de310b6a1367d434c02a35631af3a33ab102dc0e7a5f6d6c4a17dbd0a11c94f3e1571accdaf9e781b2794fafe92091aefdbd7c828506bdc98cbf9b4c9fa6fc7ea4a4e1057afc14c0162442949ad8509c688f5a7e51f755deb27cfe5a4c697f2faa46d01a04edbe960f934cf7ae8cd6404cd59c1aa38518ab4027ae2753d780507ab5a99644b8139ec82e4cc44d6911a548bbb3522b"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f00000001c0)={0x4, 0x3, 0x7dff, 0x6, "a09fc910bb060bdc0d40cfcd10bf99f7a0f281ca7cbeb8216bef5c543cf861aa"}) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESOCT], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) ioctl$TIOCL_SELLOADLUT(r8, 0x541c, &(0x7f00000000c0)={0x5, 0x10001, 0xa28, 0x400, 0xda20}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000000000)={0x6, 'ipvlan0\x00', {0x2}, 0x800}) r10 = syz_open_dev$midi(&(0x7f0000000200), 0x2, 0x442c01) writev(r10, &(0x7f0000000140)=[{&(0x7f0000001240)="720e08733a245d", 0x7}], 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00', {0x1}, 0x2}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x180) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r11, r8, 0x0, 0x7fffffff) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) 0s ago: executing program 36 (id=4458): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x28, r1, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xd, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) unshare(0x60600) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8}) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x10000, 0x3, 0x1}, 0x18, 0x1) landlock_restrict_self(r7, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) kernel console output (not intermixed with test programs): truncated [ 769.320430][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.333972][T18936] loop5: p1 size 150995456 extends beyond EOD, truncated [ 769.351348][ T5730] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 769.380172][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.427490][ T5730] usb 6-1: config 0 descriptor?? [ 769.445518][ T6598] udevd[6598]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 769.599195][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3987'. [ 769.671162][ T5730] usbhid 6-1:0.0: can't add hid device: -71 [ 769.691224][ T5730] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 769.729884][ T5730] usb 6-1: USB disconnect, device number 19 [ 769.825900][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3988'. [ 769.859009][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3988'. [ 770.186021][ T5730] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 770.367381][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 770.393745][ T5730] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 770.413046][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.443911][ T5730] usb 6-1: config 0 descriptor?? [ 770.493028][ T46] usb 9-1: new full-speed USB device number 124 using dummy_hcd [ 770.655418][ T46] usb 9-1: unable to get BOS descriptor or descriptor too short [ 770.664256][ T46] usb 9-1: not running at top speed; connect to a high speed hub [ 770.680052][ T46] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.690587][ T46] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 770.704417][ T46] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 770.714562][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.718391][ T5673] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 770.722595][ T46] usb 9-1: Product: syz [ 770.744981][ T46] usb 9-1: Manufacturer: syz [ 770.753859][ T46] usb 9-1: SerialNumber: syz [ 770.902991][ T5673] usb 4-1: Using ep0 maxpacket: 32 [ 770.909082][ T5673] usb 4-1: too many configurations: 42, using maximum allowed: 8 [ 770.918115][ T5673] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 770.927423][ T5673] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 770.936191][ T5673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 770.945313][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 770.956172][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 770.966026][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 770.975900][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 770.985985][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 771.007250][ T5673] usb 4-1: config index 1 descriptor too short (expected 29220, got 36) [ 771.013477][ T46] usb 9-1: 0:2 : does not exist [ 771.022086][ T5673] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 771.031606][ T5673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 771.041790][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 771.053052][T15724] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 771.054658][ T5719] gspca_stk1135: reg_w 0x18 err -71 [ 771.061172][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 771.078301][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.079011][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 771.088836][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 771.105015][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 771.116535][ T46] usb 9-1: USB disconnect, device number 124 [ 771.126757][ T5719] gspca_stk1135: Sensor write failed [ 771.132216][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 771.142557][ T5673] usb 4-1: config index 2 descriptor too short (expected 29220, got 36) [ 771.152191][ T5673] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 771.153130][ T5719] gspca_stk1135: Sensor write failed [ 771.167072][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 771.171360][ T5673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 771.181696][ T6598] udevd[6598]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 771.193843][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 771.205849][ T5719] gspca_stk1135: Sensor read failed [ 771.214786][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 771.218204][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 771.232047][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.237702][ T5719] gspca_stk1135: Sensor read failed [ 771.248892][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 771.255573][ T5719] gspca_stk1135: Detected sensor type unknown (0x0) [ 771.264502][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 771.276309][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 771.286852][ T5719] gspca_stk1135: Sensor read failed [ 771.286935][T15724] usb 7-1: Using ep0 maxpacket: 16 [ 771.292107][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 771.292121][ T5719] gspca_stk1135: Sensor read failed [ 771.292145][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 771.318388][ T5719] gspca_stk1135: Sensor write failed [ 771.320141][ T5673] usb 4-1: config index 3 descriptor too short (expected 29220, got 36) [ 771.325755][ T5719] gspca_stk1135: serial bus timeout: status=0x00 [ 771.339373][ T5719] gspca_stk1135: Sensor write failed [ 771.340144][ T5673] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 771.344920][ T5719] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 771.353640][T15724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.353663][T15724] usb 7-1: config 0 has no interfaces? [ 771.354578][ T5673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 771.390101][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 771.390310][T15724] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 771.396295][ T5719] usb 8-1: USB disconnect, device number 113 [ 771.416529][T15724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.424979][T15724] usb 7-1: Product: syz [ 771.429316][T15724] usb 7-1: Manufacturer: syz [ 771.437751][T15724] usb 7-1: SerialNumber: syz [ 771.442514][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 771.454378][T15724] usb 7-1: config 0 descriptor?? [ 771.461687][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.472832][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 771.484343][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 771.499174][ T5673] usb 4-1: config index 4 descriptor too short (expected 29220, got 36) [ 771.533478][ T5673] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 771.542284][ T5673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 771.552429][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 771.562549][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 771.601684][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.623331][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 771.650366][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 771.676619][ T5673] usb 4-1: config index 5 descriptor too short (expected 29220, got 36) [ 771.696303][ T5673] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 771.718090][ T5673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 771.743799][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 771.772547][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 771.780725][T18967] loop2: detected capacity change from 0 to 7 [ 771.798142][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.812044][T18967] loop2: [ 771.816125][T18967] loop2: partition table partially beyond EOD, truncated [ 771.851089][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 771.864648][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 771.887080][ T5673] usb 4-1: config index 6 descriptor too short (expected 29220, got 36) [ 771.899385][ T5673] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 771.909776][ T5673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 771.919488][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 771.931421][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 771.942612][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 771.955057][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3999'. [ 771.968654][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 772.007739][ T5730] usbhid 6-1:0.0: can't add hid device: -71 [ 772.020597][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 772.040540][T18961] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 772.044096][ T5730] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 772.072736][ T5673] usb 4-1: config index 7 descriptor too short (expected 29220, got 36) [ 772.087439][T18961] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3995'. [ 772.094960][ T5673] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 772.117668][ T5730] usb 6-1: USB disconnect, device number 20 [ 772.138254][ T5673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 772.157056][T18972] netlink: 'syz.7.4000': attribute type 1 has an invalid length. [ 772.159208][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 772.176344][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 772.190668][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 772.261457][ T5673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 772.262989][T18978] ip6gretap1: entered promiscuous mode [ 772.277271][T18978] ip6gretap1: entered allmulticast mode [ 772.291546][T18978] bond2: (slave ip6gretap1): making interface the new active one [ 772.317893][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 772.349059][T18978] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 772.366074][ T5673] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 772.376194][T18978] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 772.386496][ T5673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.395080][T18978] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 772.414459][ T5673] usb 4-1: config 0 descriptor?? [ 772.590489][T18985] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4005'. [ 772.635944][ T5673] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 772.688581][ T5673] usb 4-1: USB disconnect, device number 20 [ 772.726664][ T5673] usblp0: removed [ 772.842888][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4007'. [ 773.203093][ T5673] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 773.283207][T15724] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 773.366415][ T5673] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 773.380824][ T5673] usb 4-1: config 5 has no interface number 0 [ 773.395718][ T5673] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 773.423740][ T5673] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 773.443399][T15724] usb 8-1: Using ep0 maxpacket: 16 [ 773.448762][ T5673] usb 4-1: config 5 interface 123 has no altsetting 0 [ 773.461897][T15724] usb 8-1: unable to get BOS descriptor or descriptor too short [ 773.482158][ T5673] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 773.491550][T15724] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 773.502162][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.511438][T15724] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 773.523818][ T5673] usb 4-1: Product: syz [ 773.529808][ T5673] usb 4-1: Manufacturer: syz [ 773.534936][ T5673] usb 4-1: SerialNumber: syz [ 773.541757][T15724] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 773.555624][T15724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.565841][T15724] usb 8-1: Product: syz [ 773.581019][T15724] usb 8-1: Manufacturer: syz [ 773.586442][T15724] usb 8-1: SerialNumber: syz [ 773.592726][ T5624] usb 7-1: USB disconnect, device number 121 [ 773.800571][ T5673] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 773.817857][T18999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.848943][T18999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.859519][ T5673] usb 4-1: USB disconnect, device number 21 [ 773.893012][T15724] cdc_ncm 8-1:1.0: bind() failure [ 773.945647][T15724] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 773.971706][T15724] cdc_ncm 8-1:1.1: bind() failure [ 773.997649][T15724] usb 8-1: USB disconnect, device number 114 [ 774.135748][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4017'. [ 774.166334][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4018'. [ 774.221212][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4018'. [ 774.265215][T19032] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002 [ 774.495555][T19039] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 774.506593][ T5624] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 774.649066][T19046] loop8: detected capacity change from 0 to 8 [ 774.665106][T19046] Dev loop8: unable to read RDB block 8 [ 774.679587][T19046] loop8: unable to read partition table [ 774.693805][T19046] loop8: partition table beyond EOD, truncated [ 774.724593][ T5624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 774.737778][T19046] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 774.760522][ T5624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 774.786261][ T5624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 774.830576][ T5624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 774.878141][ T5624] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 774.897667][ T5624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.919877][ T5624] usb 7-1: Product: syz [ 774.932947][ T5624] usb 7-1: Manufacturer: syz [ 774.941186][T19054] loop2: detected capacity change from 0 to 7 [ 774.953162][ T5719] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 774.969196][ T5624] usb 7-1: SerialNumber: syz [ 774.989542][T19054] loop2: [ 775.002935][ T5624] usb 7-1: config 0 descriptor?? [ 775.009257][T19054] loop2: partition table partially beyond EOD, truncated [ 775.145303][ T5719] usb 6-1: unable to get BOS descriptor or descriptor too short [ 775.187547][ T5719] usb 6-1: not running at top speed; connect to a high speed hub [ 775.218575][ T5719] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.236709][ T5624] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 775.253900][ T5719] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 775.289201][ T5719] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 775.304087][ T5719] usb 6-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 775.313635][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.322918][ T5719] usb 6-1: Product: syz [ 775.327532][ T5719] usb 6-1: Manufacturer: syz [ 775.372355][ T5719] usb 6-1: SerialNumber: syz [ 775.387624][T19061] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002 [ 775.519742][T19029] x_tables: duplicate underflow at hook 2 [ 775.610673][T19049] netlink: 'syz.5.4026': attribute type 3 has an invalid length. [ 775.648198][T19049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.673734][T19049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.712593][T19068] __nla_validate_parse: 1 callbacks suppressed [ 775.712617][T19068] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4033'. [ 775.896987][ T5719] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 775.945354][ T5719] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 776.106362][T19080] netlink: 'syz.5.4036': attribute type 1 has an invalid length. [ 776.121440][T19079] loop2: detected capacity change from 0 to 7 [ 776.151270][ T5719] usb 6-1: USB disconnect, device number 21 [ 776.160972][T19079] Dev loop2: unable to read RDB block 7 [ 776.180879][T19079] loop2: unable to read partition table [ 776.204914][T19079] loop2: partition table beyond EOD, truncated [ 776.227670][T19079] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 776.328488][ T6601] udevd[6601]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.136034][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4046'. [ 777.154012][T15724] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 777.214242][T19106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4045'. [ 777.326237][T15724] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.346661][T15724] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.361928][T15724] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 777.375066][T15724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 777.386448][T15724] usb 6-1: SerialNumber: syz [ 777.472952][ T5624] usb 7-1: USB disconnect, device number 122 [ 777.597539][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4050'. [ 777.618541][T15724] usb 6-1: 0:2 : does not exist [ 777.631046][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4050'. [ 777.709281][T15724] usb 6-1: USB disconnect, device number 22 [ 777.783443][ T5719] usb 8-1: new high-speed USB device number 115 using dummy_hcd [ 777.816391][T10533] udevd[10533]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.819611][T19125] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4052'. [ 777.881341][T19129] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 777.953874][ T5719] usb 8-1: Using ep0 maxpacket: 32 [ 777.969760][ T5719] usb 8-1: too many configurations: 63, using maximum allowed: 8 [ 778.001945][ T5719] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 778.027949][ T5719] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 778.054757][ T5719] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 778.080542][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 778.119058][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 778.149312][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.162040][T19136] bond1: option mode: unable to set because the bond device has slaves [ 778.170665][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 778.183247][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4055'. [ 778.192990][ T5719] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 778.207055][T19136] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4055'. [ 778.221115][ T5719] usb 8-1: config index 1 descriptor too short (expected 29220, got 36) [ 778.250843][ T5719] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 778.289527][ T5719] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 778.322572][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 778.349074][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 778.386929][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.417038][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 778.446353][ T5719] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 778.484384][ T5719] usb 8-1: config index 2 descriptor too short (expected 29220, got 36) [ 778.503312][ T5719] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 778.532317][ T5719] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 778.542278][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 778.552445][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 778.562190][ T5624] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 778.572060][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.588929][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 778.611673][ T5719] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 778.658139][ T5719] usb 8-1: config index 3 descriptor too short (expected 29220, got 36) [ 778.685970][ T5719] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 778.721926][ T5719] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 778.760622][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 778.797861][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 778.831145][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.861099][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 778.876032][ T5719] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 778.916184][ T5719] usb 8-1: config index 4 descriptor too short (expected 29220, got 36) [ 778.949189][ T5719] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 778.970215][ T5719] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 778.991778][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 779.026744][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 779.055776][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 779.077609][T19156] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4063'. [ 779.079771][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 779.098288][ T5719] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 779.133856][T19158] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 779.142460][T19156] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4063'. [ 779.150764][ T5719] usb 8-1: config index 5 descriptor too short (expected 29220, got 36) [ 779.171206][ T5719] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 779.208833][ T5719] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 779.234460][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 779.255596][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 779.272020][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 779.289560][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 779.322732][ T5719] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 779.362620][ T5719] usb 8-1: config index 6 descriptor too short (expected 29220, got 36) [ 779.389396][ T5719] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 779.408861][ T5719] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 779.429021][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 779.439410][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 779.450511][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 779.461508][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 779.471836][ T46] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 779.498231][ T5719] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 779.530925][ T5719] usb 8-1: config index 7 descriptor too short (expected 29220, got 36) [ 779.555254][ T5719] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 779.577497][ T5719] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 779.598317][T19180] veth1_to_team: entered promiscuous mode [ 779.606975][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 779.629319][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 779.652881][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 779.653676][T19180] gretap0: entered promiscuous mode [ 779.664762][ T5719] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 779.687508][T19180] hsr1: entered promiscuous mode [ 779.693548][ T46] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 779.704416][ T5719] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 779.716045][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.739906][ T46] usb 4-1: Product: syz [ 779.746213][ T5719] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 779.766055][ T46] usb 4-1: Manufacturer: syz [ 779.775687][ T46] usb 4-1: SerialNumber: syz [ 779.794008][ T5719] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 779.807149][ T46] usb 4-1: config 0 descriptor?? [ 779.827323][ T5719] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.842503][ T46] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 779.872151][ T5719] usb 8-1: config 0 descriptor?? [ 780.113039][ T5719] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 115 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 780.223933][ T5719] usb 8-1: USB disconnect, device number 115 [ 780.264211][ T5719] usblp0: removed [ 780.652933][ T5695] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 780.673064][ T5719] usb 8-1: new full-speed USB device number 116 using dummy_hcd [ 780.832942][ T5695] usb 6-1: Using ep0 maxpacket: 16 [ 780.849964][ T5719] usb 8-1: config 5 has an invalid interface number: 123 but max is 0 [ 780.858482][ T5695] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 780.872942][ T5719] usb 8-1: config 5 has no interface number 0 [ 780.879068][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.892523][ T5719] usb 8-1: config 5 interface 123 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 780.910882][ T5695] usb 6-1: Product: syz [ 780.915253][ T5695] usb 6-1: Manufacturer: syz [ 780.919879][ T5695] usb 6-1: SerialNumber: syz [ 780.924942][ T5719] usb 8-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 780.940378][ T5695] usb 6-1: config 0 descriptor?? [ 780.945639][ T5719] usb 8-1: config 5 interface 123 has no altsetting 0 [ 780.955845][ T5695] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 780.966665][ T5719] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 780.982895][ T5719] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.991861][ T5719] usb 8-1: Product: syz [ 781.000393][ T5719] usb 8-1: Manufacturer: syz [ 781.005181][ T5719] usb 8-1: SerialNumber: syz [ 781.011194][T19197] __nla_validate_parse: 5 callbacks suppressed [ 781.011209][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4078'. [ 781.013003][ T5624] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 781.193050][ T5624] usb 7-1: Using ep0 maxpacket: 16 [ 781.203682][ T5624] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.224408][T19206] loop5: detected capacity change from 0 to 7 [ 781.225250][ T5624] usb 7-1: config 0 has no interfaces? [ 781.238537][T19206] Dev loop5: unable to read RDB block 7 [ 781.249769][T19206] loop5: AHDI p1 p2 [ 781.258694][ T5624] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 781.260729][T19206] loop5: partition table partially beyond EOD, truncated [ 781.271019][ T5695] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 781.284492][ T5719] ni6501 8-1:5.123: driver 'ni6501' failed to auto-configure device. [ 781.293648][ T5624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.296250][T19206] loop5: p1 size 150995456 extends beyond EOD, [ 781.304719][ T5695] visor 6-1:0.0: probe with driver visor failed with error -71 [ 781.311911][T19206] truncated [ 781.322104][ T5624] usb 7-1: Product: syz [ 781.327094][ T5719] usb 8-1: USB disconnect, device number 116 [ 781.333621][ T5624] usb 7-1: Manufacturer: syz [ 781.338582][ T5624] usb 7-1: SerialNumber: syz [ 781.360828][ T5695] usb 6-1: USB disconnect, device number 23 [ 781.404178][ T5624] usb 7-1: config 0 descriptor?? [ 781.456027][T19209] netlink: 'syz.5.4082': attribute type 27 has an invalid length. [ 781.474498][ T8236] udevd[8236]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 781.607324][T19213] bond1: option mode: unable to set because the bond device has slaves [ 781.635280][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4084'. [ 781.667657][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4084'. [ 781.762230][T19220] xt_TCPMSS: Only works on TCP SYN packets [ 781.836798][T19222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4088'. [ 781.853804][ T46] gspca_ov534_9: reg_r err -71 [ 781.906759][T19224] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 781.944476][ T5719] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 781.991992][T19227] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.4090'. [ 782.001670][T19227] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 782.051084][T19193] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 782.060598][T19193] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4075'. [ 782.103860][ T5719] usb 9-1: Using ep0 maxpacket: 16 [ 782.113722][ T5719] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 782.122140][ T5719] usb 9-1: config 0 has no interface number 0 [ 782.128459][ T46] gspca_ov534_9: Unknown sensor 0000 [ 782.128538][ T46] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 782.146676][ T5719] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 782.159328][ T5719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.170018][ T46] usb 4-1: USB disconnect, device number 22 [ 782.180280][ T5719] usb 9-1: Product: syz [ 782.192184][ T5719] usb 9-1: Manufacturer: syz [ 782.205041][ T5719] usb 9-1: SerialNumber: syz [ 782.223760][ T5719] usb 9-1: config 0 descriptor?? [ 782.234827][ T5719] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 782.384811][T19239] loop2: detected capacity change from 0 to 7 [ 782.398601][T19239] loop2: [ 782.412538][T19239] loop2: partition table partially beyond EOD, truncated [ 782.501391][T19244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4097'. [ 782.513644][T19244] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4097'. [ 782.529978][ T5719] gspca_spca1528: reg_w err -71 [ 782.542922][ T809] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 782.545225][T19244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4097'. [ 782.566138][ T5719] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 782.585049][ T5719] usb 9-1: USB disconnect, device number 125 [ 782.628930][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4099'. [ 782.643652][T19248] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 782.718383][ T809] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 782.739549][ T809] usb 6-1: config 0 has no interface number 0 [ 782.765038][ T809] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 782.800024][ T809] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 782.815940][T19253] loop2: detected capacity change from 0 to 7 [ 782.817963][ T809] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 782.837690][T19253] Dev loop2: unable to read RDB block 7 [ 782.842330][ T809] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 782.853167][T19253] loop2: unable to read partition table [ 782.854597][ T809] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 782.872440][ T809] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 782.872506][ T809] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 782.872529][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.875857][T19253] loop2: partition table beyond EOD, truncated [ 782.875895][T19253] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 782.910366][ T809] usb 6-1: config 0 descriptor?? [ 782.911164][T19235] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 782.911296][T19235] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 782.938026][ T809] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 782.943290][T19257] trusted_key: encrypted_key: master key parameter 'defau}t' is invalid [ 783.187204][ T5695] usb 6-1: USB disconnect, device number 24 [ 783.212355][ T5695] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 783.318451][ T5719] usb 7-1: USB disconnect, device number 124 [ 790.162885][T16336] Bluetooth: hci1: command 0x0406 tx timeout [ 806.831072][T19263] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 806.854197][T19269] netlink: 'syz.5.4106': attribute type 4 has an invalid length. [ 806.885880][T19269] netlink: 'syz.5.4106': attribute type 4 has an invalid length. [ 806.928371][T19276] __nla_validate_parse: 1 callbacks suppressed [ 806.928388][T19276] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4109'. [ 806.969668][T19276] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4109'. [ 807.042582][T19280] syzkaller1: entered promiscuous mode [ 807.051962][T19280] syzkaller1: entered allmulticast mode [ 807.083033][ T5624] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 807.192329][T19278] xt_CT: No such helper "snmp" [ 807.244934][ T5624] usb 8-1: config index 0 descriptor too short (expected 65183, got 72) [ 807.260809][ T5624] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 807.296193][ T5624] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.324817][ T5624] usb 8-1: Product: syz [ 807.337000][ T5624] usb 8-1: Manufacturer: syz [ 807.349808][ T5624] usb 8-1: SerialNumber: syz [ 807.384793][ T5624] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 807.418297][ T5719] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 807.699455][T19271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.736102][T19271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.784238][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4107'. [ 807.798885][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4107'. [ 807.869841][ T5624] usb 8-1: USB disconnect, device number 117 [ 808.241283][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4113'. [ 808.389651][T19303] xt_TCPMSS: Only works on TCP SYN packets [ 808.531115][T19297] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4113'. [ 808.562178][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.568871][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.575141][ T5719] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 808.575305][ T5719] ath9k_htc: Failed to initialize the device [ 808.627901][ T5624] usb 8-1: ath9k_htc: USB layer deinitialized [ 808.642560][T19307] loop8: detected capacity change from 0 to 8 [ 808.662486][T19305] netlink: 428 bytes leftover after parsing attributes in process `syz.6.4115'. [ 808.681529][T19307] Dev loop8: unable to read RDB block 8 [ 808.716947][T19307] loop8: unable to read partition table [ 808.722718][T19305] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4115'. [ 808.735762][T19307] loop8: partition table beyond EOD, truncated [ 808.766393][T19307] loop_reread_partitions: partition scan of loop8 (被x^> ?) failed (rc=-5) [ 808.851910][T19297] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.4113'. [ 808.964219][T19314] netlink: 'syz.5.4118': attribute type 8 has an invalid length. [ 808.992919][ T5695] usb 7-1: new low-speed USB device number 125 using dummy_hcd [ 809.000559][ T5624] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 809.138886][T19320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4119'. [ 809.143052][ T5624] usb 8-1: device descriptor read/64, error -71 [ 809.174720][ T5695] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 809.212954][ T5695] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 809.270542][ T5695] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 809.351451][ T5695] usb 7-1: config 0 interface 0 has no altsetting 0 [ 809.397533][ T5695] usb 7-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 809.433397][ T5624] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 809.455710][ T5695] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.536510][ T5695] usb 7-1: config 0 descriptor?? [ 809.555882][T19305] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 809.593202][ T5624] usb 8-1: device descriptor read/64, error -71 [ 809.614853][T19335] netlink: 'syz.5.4125': attribute type 4 has an invalid length. [ 809.648624][T19335] netlink: 'syz.5.4125': attribute type 4 has an invalid length. [ 809.733303][ T5624] usb usb8-port1: attempt power cycle [ 809.878360][ T29] audit: type=1326 audit(1779649472.008:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.5.4126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9301c code=0x7ffc0000 [ 809.960846][ T29] audit: type=1326 audit(1779649472.038:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.5.4126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9301c code=0x7ffc0000 [ 809.992074][ T29] audit: type=1326 audit(1779649472.038:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.5.4126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9301c code=0x7ffc0000 [ 810.043986][ T5695] hid (null): unknown global tag 0xe [ 810.070797][ T5695] hid (null): unknown global tag 0xe [ 810.093909][ T5695] uclogic 0003:5543:0004.0082: unknown global tag 0xe [ 810.110890][ T5695] uclogic 0003:5543:0004.0082: item 0 1 1 14 parsing failed [ 810.131324][ T5695] uclogic 0003:5543:0004.0082: parse failed [ 810.139792][ T29] audit: type=1326 audit(1779649472.038:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.5.4126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9301c code=0x7ffc0000 [ 810.189232][ T5695] uclogic 0003:5543:0004.0082: probe with driver uclogic failed with error -22 [ 810.192827][ T29] audit: type=1326 audit(1779649472.038:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.5.4126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f9301c code=0x7ffc0000 [ 810.243998][ T5624] usb usb8-port1: Cannot enable. Maybe the USB cable is bad? [ 810.273796][ T5695] usb 7-1: USB disconnect, device number 125 [ 810.300225][ T29] audit: type=1326 audit(1779649472.048:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.5.4126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9301c code=0x7ffc0000 [ 810.325247][T15724] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 810.349467][ T29] audit: type=1326 audit(1779649472.048:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.5.4126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f9301c code=0x7ffc0000 [ 810.434349][ T5624] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 810.464811][ T5624] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 810.477038][ T5624] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 810.507201][ T5624] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 810.525619][T15724] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 810.538231][T15724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.547436][ T5624] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.568399][T15724] usb 6-1: config 0 descriptor?? [ 810.586112][T15724] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 810.627780][ T5624] usb 8-1: config 0 descriptor?? [ 810.650721][ T29] audit: type=1326 audit(1779649472.778:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.5.4126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9301c code=0x7ffc0000 [ 810.708115][ T29] audit: type=1326 audit(1779649472.828:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.5.4126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9301c code=0x7ffc0000 [ 810.829973][ T29] audit: type=1326 audit(1779649472.958:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.5.4126" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f9301c code=0x7ffc0000 [ 810.888240][ T5624] usbhid 8-1:0.0: can't add hid device: -71 [ 810.905559][ T5624] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 810.943906][ T5624] usb 8-1: USB disconnect, device number 121 [ 811.429403][T15724] gspca_cpia1: usb_control_msg 01, error -71 [ 811.435716][T15724] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 811.462219][T15724] usb 6-1: USB disconnect, device number 25 [ 811.516693][T19359] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 811.626147][ T5719] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 811.637120][T19364] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 811.765230][ T809] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 811.792866][ T5719] usb 7-1: Using ep0 maxpacket: 32 [ 811.799375][ T5719] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.810234][ T5719] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 811.819291][ T5719] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.835215][ T5719] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 811.844319][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.852328][ T5719] usb 7-1: Product: syz [ 811.856574][ T5719] usb 7-1: Manufacturer: syz [ 811.861173][ T5719] usb 7-1: SerialNumber: syz [ 811.871743][ T5719] cdc_ncm 7-1:1.0: skipping garbage [ 811.877091][ T5719] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 811.883972][ T5719] cdc_ncm 7-1:1.0: bind() failure [ 811.892896][ T5673] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 811.944641][ T809] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 811.955738][ T809] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 811.965625][ T809] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 811.975104][ T809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.986934][T19360] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 811.997537][ T809] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.054790][ T5673] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 812.078378][ T5673] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 812.097515][ T5673] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 812.111820][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.121315][ T5673] usb 4-1: Product: syz [ 812.126621][ T5673] usb 4-1: Manufacturer: syz [ 812.139740][ T5673] usb 4-1: SerialNumber: syz [ 812.164635][ T5673] usb 4-1: config 0 descriptor?? [ 812.184052][ T5673] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 812.278560][T19374] fuse: Bad value for 'fd' [ 812.463121][ T5695] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 812.502025][T19375] binder: 19369:19375 ioctl c018620c 800002c0 returned -22 [ 812.634710][ T5695] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 812.649207][ T5695] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 812.659203][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.667499][ T5695] usb 6-1: Product: syz [ 812.671913][ T5695] usb 6-1: Manufacturer: syz [ 812.677577][ T5695] usb 6-1: SerialNumber: syz [ 812.699533][ T5695] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 812.727181][ T5719] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 812.960608][T19372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.980337][T15724] usb 7-1: USB disconnect, device number 126 [ 812.983564][T19372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.104558][T19372] __nla_validate_parse: 4 callbacks suppressed [ 813.104573][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4137'. [ 813.174177][T19372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4137'. [ 813.198316][ T809] usb 6-1: USB disconnect, device number 26 [ 813.358636][T19385] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4140'. [ 813.460304][ T5673] usb 4-1: USB disconnect, device number 23 [ 813.753297][ T5624] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 813.833884][ T5719] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 813.844397][ T5719] ath9k_htc: Failed to initialize the device [ 813.856203][ T809] usb 6-1: ath9k_htc: USB layer deinitialized [ 813.913152][ T5624] usb 7-1: Using ep0 maxpacket: 32 [ 813.929059][ T5624] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 813.947785][ T5624] usb 7-1: config 0 has no interface number 0 [ 813.961686][ T5624] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 813.998613][ T5624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.023130][ T5624] usb 7-1: Product: syz [ 814.042259][ T5624] usb 7-1: Manufacturer: syz [ 814.060795][ T5624] usb 7-1: SerialNumber: syz [ 814.084928][ T5624] usb 7-1: config 0 descriptor?? [ 814.095812][ T5624] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 814.105039][ T5624] usb 7-1: selecting invalid altsetting 1 [ 814.110907][ T5624] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 814.123117][ T5624] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 814.134186][ T5624] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 814.145145][ T5624] usb 7-1: media controller created [ 814.168033][ T5624] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 814.203101][ T809] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 814.342968][ T809] usb 6-1: device descriptor read/64, error -71 [ 814.413140][ T5624] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 814.421480][ T5624] zl10353_read_register: readreg error (reg=127, ret==-32) [ 814.542482][ T5709] usb 9-1: USB disconnect, device number 126 [ 814.593892][ T809] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 814.704359][T19393] netlink: 'syz.3.4152': attribute type 6 has an invalid length. [ 814.754903][ T809] usb 6-1: device descriptor read/64, error -71 [ 814.840360][T19395] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4142'. [ 814.853050][T19395] netlink: 192 bytes leftover after parsing attributes in process `syz.8.4142'. [ 814.863542][ T809] usb usb6-port1: attempt power cycle [ 814.880776][T19395] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.4142'. [ 814.962832][T15724] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 815.122888][T15724] usb 4-1: Using ep0 maxpacket: 16 [ 815.135612][T15724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 815.145385][T15724] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 815.173360][T15724] usb 4-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 815.182585][T15724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.193894][T15724] usb 4-1: Product: syz [ 815.198598][T15724] usb 4-1: Manufacturer: syz [ 815.204449][T15724] usb 4-1: SerialNumber: syz [ 815.223088][ T809] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 815.274333][ T809] usb 6-1: device descriptor read/8, error -71 [ 815.393040][T19397] xt_TCPMSS: Only works on TCP SYN packets [ 815.467788][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4144'. [ 815.518829][T19388] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 815.538036][T15724] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 815.568774][T15724] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 815.585898][ T5624] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 815.606877][T15724] usb 4-1: 2:1 : sample bitwidth 240 in over sample bytes 1 [ 815.770638][ T5624] usb 7-1: USB disconnect, device number 127 [ 815.798023][T15724] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 815.883563][T15724] usb 4-1: USB disconnect, device number 24 [ 816.031077][T19308] udevd[19308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.351137][T19419] loop5: detected capacity change from 0 to 7 [ 816.368552][T19421] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4151'. [ 816.368597][T19419] Dev loop5: unable to read RDB block 7 [ 816.383636][T19419] loop5: AHDI p1 p2 [ 816.398300][T19419] loop5: partition table partially beyond EOD, truncated [ 816.406945][T19419] loop5: p1 size 150995456 extends beyond EOD, truncated [ 816.646483][T19425] bridge6: entered promiscuous mode [ 816.664727][T19425] bridge6: entered allmulticast mode [ 817.088853][T19439] binder: 19431:19439 ioctl c018620c 800002c0 returned -22 [ 817.378213][T19445] loop5: detected capacity change from 0 to 7 [ 817.407780][T19445] Dev loop5: unable to read RDB block 7 [ 817.427220][T19445] loop5: AHDI p1 p2 [ 817.443415][T19445] loop5: partition table partially beyond EOD, truncated [ 817.471299][T19445] loop5: p1 size 150995456 extends beyond EOD, truncated [ 817.594208][T19296] udevd[19296]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 817.851107][T19448] IPVS: Scheduler module ip_vs_ not found [ 817.888731][T19453] IPVS: Scheduler module ip_vs_ not found [ 818.064332][ T5719] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 818.134494][T19462] loop8: detected capacity change from 0 to 8 [ 818.140932][T19460] netlink: 'syz.6.4162': attribute type 6 has an invalid length. [ 818.171222][T19462] Dev loop8: unable to read RDB block 8 [ 818.189448][T19462] loop8: unable to read partition table [ 818.209809][T19462] loop8: partition table beyond EOD, truncated [ 818.223526][ T5719] usb 4-1: device descriptor read/64, error -71 [ 818.237614][T19462] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 818.404479][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4165'. [ 818.413702][T15724] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 818.440490][T19468] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4166'. [ 818.472895][ T5719] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 818.573740][T15724] usb 7-1: Using ep0 maxpacket: 16 [ 818.589720][T15724] usb 7-1: unable to get BOS descriptor or descriptor too short [ 818.612002][T15724] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 818.622852][ T5719] usb 4-1: device descriptor read/64, error -71 [ 818.653898][T15724] usb 7-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 818.681798][T15724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.698600][T15724] usb 7-1: Product: syz [ 818.704701][T15724] usb 7-1: Manufacturer: syz [ 818.716843][T15724] usb 7-1: SerialNumber: syz [ 818.755120][ T5719] usb usb4-port1: attempt power cycle [ 818.911910][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4172'. [ 818.933042][T19478] bridge3: entered promiscuous mode [ 818.950821][T19478] bridge3: entered allmulticast mode [ 819.016652][T15724] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 819.038037][T15724] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 819.059934][T15724] usb 7-1: 2:1 : sample bitwidth 240 in over sample bytes 1 [ 819.132961][ T5719] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 819.174432][ T5719] usb 4-1: device descriptor read/8, error -71 [ 819.296050][T15724] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 819.341139][T15724] usb 7-1: USB disconnect, device number 2 [ 819.400373][T19308] udevd[19308]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 819.440859][ T5719] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 819.494364][ T5719] usb 4-1: device descriptor read/8, error -71 [ 819.623690][ T5719] usb usb4-port1: unable to enumerate USB device [ 819.676522][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4175'. [ 819.687258][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4175'. [ 819.894338][T19499] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20000 [ 820.032953][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4181'. [ 820.153385][ T5719] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 820.196576][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4184'. [ 820.307406][T19517] loop5: detected capacity change from 0 to 7 [ 820.319988][T19517] Dev loop5: unable to read RDB block 7 [ 820.326350][ T5719] usb 7-1: Using ep0 maxpacket: 32 [ 820.335628][T19517] loop5: AHDI p1 p2 [ 820.339927][T19517] loop5: partition table partially beyond EOD, truncated [ 820.340858][ T5719] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 820.356333][ T5719] usb 7-1: config 0 has no interface number 0 [ 820.358058][T19517] loop5: p1 size 150995456 extends beyond EOD, [ 820.363546][ T5719] usb 7-1: config 0 interface 12 has no altsetting 0 [ 820.376527][T19517] truncated [ 820.386359][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 820.386373][ T29] audit: type=1326 audit(1779649482.518:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.8.4185" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 820.421680][ T5719] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 820.430914][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.441533][ T5719] usb 7-1: Product: syz [ 820.446439][ T29] audit: type=1326 audit(1779649482.518:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.8.4185" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 820.481834][ T5719] usb 7-1: Manufacturer: syz [ 820.494569][ T5719] usb 7-1: SerialNumber: syz [ 820.515979][T19296] udevd[19296]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 820.529369][ T5719] usb 7-1: config 0 descriptor?? [ 820.537560][ T29] audit: type=1326 audit(1779649482.518:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.8.4185" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 820.569614][ T29] audit: type=1326 audit(1779649482.518:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.8.4185" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 820.594893][ T29] audit: type=1326 audit(1779649482.548:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.8.4185" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 820.619811][ T29] audit: type=1326 audit(1779649482.548:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.8.4185" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 820.662051][ T29] audit: type=1326 audit(1779649482.548:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.8.4185" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 820.743744][ T29] audit: type=1326 audit(1779649482.548:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.8.4185" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 820.768845][ T29] audit: type=1326 audit(1779649482.548:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.8.4185" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 820.838457][ T29] audit: type=1326 audit(1779649482.548:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19512 comm="syz.8.4185" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 820.876649][T19528] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 821.180123][T19537] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 821.302260][T19541] loop8: detected capacity change from 0 to 8 [ 821.310949][T19541] Dev loop8: unable to read RDB block 8 [ 821.316966][T19541] loop8: unable to read partition table [ 821.324010][T19541] loop8: partition table beyond EOD, truncated [ 821.331079][T19541] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 821.372871][ T5709] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 821.438927][T19545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4198'. [ 821.546370][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short [ 821.557627][ T5709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 821.567967][ T5709] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 821.592121][ T5709] usb 4-1: config 1 interface 0 has no altsetting 1 [ 821.602161][ T5709] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 821.622556][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.638767][ T5709] usb 4-1: Product: syz [ 821.647622][ T5709] usb 4-1: Manufacturer: syz [ 821.652989][ T5673] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 821.662928][ T5709] usb 4-1: SerialNumber: syz [ 821.685172][ T5709] smsusb:smsusb_probe: board id=8, interface number 0 [ 821.822917][ T5673] usb 9-1: Using ep0 maxpacket: 32 [ 821.833484][ T5673] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 821.852679][ T5673] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 821.876738][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 821.885913][ T5673] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 821.899236][ T5673] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 821.918376][ T5673] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 821.932397][ T5673] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 821.950763][ T5673] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 822.021336][ T5673] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.101706][ T5673] usb 9-1: config 0 descriptor?? [ 822.268481][ T5709] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 822.279969][ T5709] smsusb 4-1:1.0: probe with driver smsusb failed with error -71 [ 822.330494][ T5673] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 127 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 822.342289][ T5709] usb 4-1: USB disconnect, device number 29 [ 822.371387][ T5673] usb 9-1: USB disconnect, device number 127 [ 822.433878][ T5673] usblp0: removed [ 822.823111][ T809] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 822.850473][T19572] netlink: 'syz.7.4205': attribute type 4 has an invalid length. [ 822.875253][ T5673] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 822.891674][T19572] netlink: 'syz.7.4205': attribute type 4 has an invalid length. [ 822.932454][ T5719] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 822.941018][ T5719] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 822.961406][ T5719] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 822.982332][ T5719] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 822.993269][ T809] usb 6-1: Using ep0 maxpacket: 8 [ 823.013771][ T809] usb 6-1: unable to get BOS descriptor or descriptor too short [ 823.021950][ T5719] usb 7-1: USB disconnect, device number 3 [ 823.034372][ T809] usb 6-1: config 3 has an invalid interface number: 20 but max is 0 [ 823.046758][ T809] usb 6-1: config 3 has no interface number 0 [ 823.053026][ T5673] usb 9-1: Using ep0 maxpacket: 8 [ 823.071936][ T5673] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 823.082691][ T809] usb 6-1: config 3 interface 20 has no altsetting 0 [ 823.089670][ T5673] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 823.108059][T19577] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 823.123533][ T5673] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 823.134153][T19577] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 823.151986][ T5673] usb 9-1: config 250 has no interface number 0 [ 823.156531][T19579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4208'. [ 823.158405][ T5673] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 823.178139][ T809] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=b6.be [ 823.187855][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.200134][ T809] usb 6-1: Product: syz [ 823.206055][ T5673] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 823.217288][ T809] usb 6-1: Manufacturer: syz [ 823.222008][ T809] usb 6-1: SerialNumber: syz [ 823.231130][ T5673] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 823.248474][T19577] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 823.261675][ T5673] usb 9-1: config 250 interface 228 has no altsetting 0 [ 823.272678][ T5673] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 823.283416][ T5673] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 823.291977][ T5673] usb 9-1: Product: syz [ 823.296810][ T5673] usb 9-1: SerialNumber: syz [ 823.350185][ T5673] hub 9-1:250.228: bad descriptor, ignoring hub [ 823.357405][ T5673] hub 9-1:250.228: probe with driver hub failed with error -5 [ 823.402877][ T5719] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 823.466007][T19568] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4204'. [ 823.532420][ T809] ljca 6-1:3.20: bulk endpoints not found [ 823.565003][ T809] usb 6-1: USB disconnect, device number 31 [ 823.573992][ T5719] usb 7-1: Using ep0 maxpacket: 32 [ 823.588447][ T5719] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 823.610032][ T5719] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 823.634824][ T5719] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 823.662345][ T5719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 823.679720][ T5719] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 823.700349][ T5719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 823.722868][ T5719] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 823.740019][ T5719] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 823.769648][ T5719] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 823.792951][ T5719] usb 7-1: New USB device strings: Mfr=0, Product=23, SerialNumber=0 [ 823.814021][ T5719] usb 7-1: Product: syz [ 823.838582][ T5673] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 823.839191][ T5719] usb 7-1: config 0 descriptor?? [ 823.905693][T19583] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4209'. [ 824.337267][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4213'. [ 824.466374][T19543] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 824.537053][T19601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4215'. [ 824.662978][T19543] usb 9-1: device descriptor read/64, error -71 [ 824.699528][T19609] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 824.832703][ T809] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 824.845066][ T809] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 824.855790][ T809] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz0] on syz0 [ 824.876996][T19617] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4221'. [ 824.914157][T15724] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 824.933362][T19543] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 825.082930][T19543] usb 9-1: device descriptor read/64, error -71 [ 825.094576][T15724] usb 6-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 825.103948][T15724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.120591][T15724] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 825.323341][T19543] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 825.524759][T15724] gspca_sn9c20x: Write register 1001 failed -71 [ 825.541802][T15724] gspca_sn9c20x: Device initialization failed [ 825.551024][T15724] gspca_sn9c20x 6-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 825.569272][T15724] usb 6-1: USB disconnect, device number 32 [ 826.078002][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 826.121294][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4229'. [ 826.357744][T19650] @0: renamed from veth1_to_hsr (while UP) [ 826.594315][T19207] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 826.607329][T19207] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 826.635457][T19207] hid-generic 0000:0000:0000.0084: hidraw0: HID v0.00 Device [syz0] on syz0 [ 826.716219][T19665] kvm: user requested TSC rate below hardware speed [ 826.852967][ T809] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 826.993016][ T809] usb 6-1: device descriptor read/64, error -71 [ 827.242929][ T809] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 827.378640][T19673] loop5: detected capacity change from 0 to 7 [ 827.384973][ T809] usb 6-1: device descriptor read/64, error -71 [ 827.396984][T19673] Dev loop5: unable to read RDB block 7 [ 827.402644][T19673] loop5: AHDI p1 p2 [ 827.422581][T19673] loop5: partition table partially beyond EOD, truncated [ 827.435962][T19673] loop5: p1 size 150995456 extends beyond EOD, truncated [ 827.503144][ T809] usb usb6-port1: attempt power cycle [ 827.530618][T19675] loop2: detected capacity change from 0 to 7 [ 827.543314][T19273] udevd[19273]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 827.566073][T19675] Dev loop2: unable to read RDB block 7 [ 827.581444][T19675] loop2: unable to read partition table [ 827.599521][T19675] loop2: partition table beyond EOD, truncated [ 827.615621][T19675] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 827.736082][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4243'. [ 827.842900][ T809] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 827.873901][ T809] usb 6-1: device descriptor read/8, error -71 [ 828.115064][ T809] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 828.153595][ T809] usb 6-1: device descriptor read/8, error -71 [ 828.279047][ T809] usb usb6-port1: unable to enumerate USB device [ 828.375231][ T809] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 828.391673][ T809] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 828.417351][ T809] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz0] on syz0 [ 828.926051][T19707] vivid-004: ================= START STATUS ================= [ 828.933871][T19707] vivid-004: Radio HW Seek Mode: Bounded [ 828.940277][T19707] vivid-004: Radio Programmable HW Seek: false [ 828.946584][T19707] vivid-004: RDS Rx I/O Mode: Block I/O [ 828.952188][T19707] vivid-004: Generate RBDS Instead of RDS: false [ 828.960479][T19707] vivid-004: RDS Reception: true [ 828.965520][T19707] vivid-004: RDS Program Type: 0 inactive [ 828.971273][T19707] vivid-004: RDS PS Name: inactive [ 828.976866][T19707] vivid-004: RDS Radio Text: inactive [ 828.982367][T19707] vivid-004: RDS Traffic Announcement: false inactive [ 828.989242][T19707] vivid-004: RDS Traffic Program: false inactive [ 828.995642][T19707] vivid-004: RDS Music: false inactive [ 829.001198][T19707] vivid-004: ================== END STATUS ================== [ 829.242238][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 829.251358][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 829.292907][ T809] usb 8-1: new high-speed USB device number 123 using dummy_hcd [ 829.453868][ T809] usb 8-1: Using ep0 maxpacket: 32 [ 829.476949][ T809] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 829.506825][ T809] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 829.533429][ T809] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 829.545190][ T809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 829.555380][ T809] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 829.566260][ T809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 829.584633][ T809] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 829.606050][ T809] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 829.638207][ T809] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 829.649398][ T809] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=0 [ 829.658324][ T809] usb 8-1: Product: syz [ 829.671743][ T809] usb 8-1: config 0 descriptor?? [ 829.848477][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4258'. [ 829.858104][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4258'. [ 829.947429][T19727] netlink: 'syz.5.4259': attribute type 4 has an invalid length. [ 829.975597][T19727] netlink: 'syz.5.4259': attribute type 4 has an invalid length. [ 830.169022][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4261'. [ 830.395681][T19735] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4263'. [ 830.396473][T19543] usb 9-1: device descriptor read/8, error -110 [ 830.405833][T19735] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4263'. [ 830.421807][T19735] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4263'. [ 830.545047][ T5695] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 830.555082][ T5695] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 830.567406][ T5695] hid-generic 0000:0000:0000.0086: hidraw0: HID v0.00 Device [syz0] on syz0 [ 830.652891][T19543] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 830.693666][T19543] usb 9-1: device descriptor read/8, error -32 [ 830.806159][ T5709] usb 9-1: USB disconnect, device number 2 [ 830.817345][ T5719] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 830.846570][ T809] usblp 8-1:0.0: usblp2: USB Bidirectional printer dev 123 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 830.846813][ T5709] usblp0: removed [ 830.886620][ T5719] usb 7-1: USB disconnect, device number 4 [ 830.910362][ T809] usb 8-1: USB disconnect, device number 123 [ 830.919160][ T5719] usblp1: removed [ 830.965214][T19752] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4269'. [ 831.002079][ T809] usblp2: removed [ 831.333233][ T809] usb 8-1: new full-speed USB device number 124 using dummy_hcd [ 831.455065][T19770] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 831.496472][ T809] usb 8-1: config 5 has an invalid interface number: 123 but max is 0 [ 831.516369][ T809] usb 8-1: config 5 has no interface number 0 [ 831.530571][ T809] usb 8-1: config 5 interface 123 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 831.559063][ T809] usb 8-1: config 5 interface 123 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 831.581983][ T809] usb 8-1: config 5 interface 123 has no altsetting 0 [ 831.594396][ T809] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 831.604125][ T809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.624748][ T809] usb 8-1: Product: syz [ 831.632424][ T809] usb 8-1: Manufacturer: syz [ 831.654711][ T809] usb 8-1: SerialNumber: syz [ 831.722075][ T5719] IPVS: starting estimator thread 0... [ 831.812941][T19780] IPVS: using max 30 ests per chain, 72000 per kthread [ 831.890269][ T809] ni6501 8-1:5.123: driver 'ni6501' failed to auto-configure device. [ 831.914065][ T809] usb 8-1: USB disconnect, device number 124 [ 831.946702][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4280'. [ 832.217859][T19793] netlink: 'syz.8.4282': attribute type 4 has an invalid length. [ 832.241667][T19793] netlink: 'syz.8.4282': attribute type 4 has an invalid length. [ 832.253451][T15724] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 832.567813][ T809] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 832.591803][ T809] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 832.621867][ T809] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz0] on syz0 [ 833.217426][ T5673] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 833.250031][ T5673] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 833.282249][ T5673] hid-generic 0000:0000:0000.0088: hidraw1: HID v0.00 Device [syz0] on syz0 [ 833.857122][T19839] loop2: detected capacity change from 0 to 7 [ 833.872980][ T5673] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 833.882444][T19839] Dev loop2: unable to read RDB block 7 [ 833.890632][T19839] loop2: unable to read partition table [ 833.898781][T15724] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 833.908697][T19839] loop2: partition table beyond EOD, truncated [ 833.947063][T19839] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 834.034411][ T5673] usb 7-1: Using ep0 maxpacket: 16 [ 834.066550][ T5673] usb 7-1: unable to get BOS descriptor or descriptor too short [ 834.088998][T15724] usb 6-1: unable to get BOS descriptor or descriptor too short [ 834.109812][ T5673] usb 7-1: config 7 has an invalid interface number: 106 but max is 3 [ 834.119560][T15724] usb 6-1: not running at top speed; connect to a high speed hub [ 834.134408][ T5673] usb 7-1: config 7 has an invalid interface number: 182 but max is 3 [ 834.150400][T15724] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.166482][ T5673] usb 7-1: config 7 has an invalid interface number: 148 but max is 3 [ 834.176484][T15724] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 834.189229][ T5673] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 834.218364][ T5673] usb 7-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 834.231005][T15724] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 834.252826][T15724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.260890][ T5673] usb 7-1: config 7 has no interface number 0 [ 834.275512][ T5673] usb 7-1: config 7 has no interface number 1 [ 834.284777][T15724] usb 6-1: Product: syz [ 834.298048][T15724] usb 6-1: Manufacturer: syz [ 834.304116][ T5673] usb 7-1: config 7 has no interface number 2 [ 834.313814][T15724] usb 6-1: SerialNumber: syz [ 834.320040][ T5673] usb 7-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 834.354080][ T5673] usb 7-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 834.366666][ T5673] usb 7-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 834.378809][ T5673] usb 7-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 834.390023][ T5673] usb 7-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 834.412259][T19846] __nla_validate_parse: 5 callbacks suppressed [ 834.412278][T19846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4301'. [ 834.428039][ T5673] usb 7-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 834.440417][ T5673] usb 7-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 834.451697][ T5673] usb 7-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 834.482930][ T5673] usb 7-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 834.505175][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 834.516468][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 834.564626][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 834.581208][T15724] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 834.592560][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 834.604001][ T809] usb 8-1: new high-speed USB device number 125 using dummy_hcd [ 834.615960][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 834.628283][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 834.639280][T15724] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 834.648395][T15724] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 834.658538][T15724] usb 6-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 834.666104][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 834.677420][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 834.688439][T15724] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 834.697573][T15724] usb 6-1: 3:0: cannot get min/max values for control 4 (id 3) [ 834.705281][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 834.716869][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 834.728747][T15724] usb 6-1: 3:0: cannot get min/max values for control 5 (id 3) [ 834.738119][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 834.749839][T15724] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 834.759192][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 834.773136][ T809] usb 8-1: Using ep0 maxpacket: 8 [ 834.779862][T15724] usb 6-1: 3:0: cannot get min/max values for control 8 (id 3) [ 834.795062][ T809] usb 8-1: config 0 has an invalid interface number: 122 but max is 0 [ 834.803374][ T809] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.814072][T19853] loop2: detected capacity change from 0 to 7 [ 834.819313][ T5673] usb 7-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 834.832691][T19853] loop2: [ 834.835558][ T809] usb 8-1: config 0 has no interface number 0 [ 834.839817][T19853] loop2: partition table partially beyond EOD, [ 834.845009][ T809] usb 8-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 834.853090][T19853] truncated [ 834.863485][T15724] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 834.873893][ T5673] usb 7-1: config 7 interface 106 has no altsetting 0 [ 834.880692][ T5673] usb 7-1: config 7 interface 182 has no altsetting 0 [ 834.892979][T15724] usb 6-1: 3:0: cannot get min/max values for control 5 (id 3) [ 834.900621][ T5673] usb 7-1: config 7 interface 148 has no altsetting 0 [ 834.907511][ T809] usb 8-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 834.931545][ T809] usb 8-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 834.952226][ T5673] usb 7-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 834.968129][ T809] usb 8-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 834.980752][ T5673] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.994387][ T5730] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 835.001836][ T5730] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 835.009614][ T5673] usb 7-1: Product: syz [ 835.017538][T15724] usb 6-1: USB disconnect, device number 37 [ 835.035005][ T809] usb 8-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 835.048888][ T5673] usb 7-1: Manufacturer: syz [ 835.057616][ T5673] usb 7-1: SerialNumber: syz [ 835.068320][ T5730] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz0] on syz0 [ 835.071401][T19296] udevd[19296]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.079512][ T809] usb 8-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 835.167614][ T809] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 835.182425][ T809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.220949][ T809] usb 8-1: Product: syz [ 835.234054][ T809] usb 8-1: Manufacturer: syz [ 835.244319][ T809] usb 8-1: SerialNumber: syz [ 835.268999][ T809] usb 8-1: config 0 descriptor?? [ 835.288787][T19843] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 835.298880][T19843] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 835.351068][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4307'. [ 835.351346][T19834] syzkaller1: entered promiscuous mode [ 835.374853][T19834] syzkaller1: entered allmulticast mode [ 835.394554][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 835.394571][ T29] audit: type=1800 audit(1779649497.518:938): pid=19862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4306" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 835.547321][ T809] usb 8-1: NFC: intf ffff88802a982000 id ffffffff8f3e4ae0 [ 835.606136][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4308'. [ 835.623177][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4308'. [ 835.682036][ T809] nfcmrvl 8-1:0.122: NFC: registered with nci successfully [ 835.709599][ T809] usb 8-1: USB disconnect, device number 125 [ 835.733734][ T809] usb 8-1: NFC: intf ffff88802a982000 [ 836.259858][ T5673] usb 7-1: USB disconnect, device number 6 [ 836.325250][T19886] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4313'. [ 836.812156][ T5709] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 836.833195][ T5709] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 836.870571][ T5709] hid-generic 0000:0000:0000.008A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 837.051830][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4320'. [ 837.133110][T19912] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 837.516677][T19895] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4315'. [ 837.543621][ T5709] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 837.572867][T15724] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 837.713064][ T5709] usb 8-1: Using ep0 maxpacket: 16 [ 837.729767][T19923] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4326'. [ 837.729843][ T5709] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.749296][ T5709] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.756630][T15724] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 837.761279][ T5709] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 837.777292][ T5709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.787739][T15724] usb 7-1: config 0 has no interface number 0 [ 837.788502][ T5709] usb 8-1: Product: syz [ 837.798470][ T5709] usb 8-1: Manufacturer: syz [ 837.803575][ T5709] usb 8-1: SerialNumber: syz [ 837.813449][T15724] usb 7-1: config 0 interface 41 has no altsetting 0 [ 837.839372][T15724] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 837.853006][T15724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.863950][T15724] usb 7-1: Product: syz [ 837.869468][ T5709] usb 8-1: 0:2 : does not exist [ 837.870046][T15724] usb 7-1: Manufacturer: syz [ 837.885949][T15724] usb 7-1: SerialNumber: syz [ 837.919818][T15724] usb 7-1: config 0 descriptor?? [ 838.010853][T19925] loop2: detected capacity change from 0 to 7 [ 838.051327][T19925] Dev loop2: unable to read RDB block 7 [ 838.087740][T19925] loop2: unable to read partition table [ 838.105710][T19925] loop2: partition table beyond EOD, truncated [ 838.117876][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4329'. [ 838.131442][T19925] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 838.143906][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4329'. [ 838.262910][ T809] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 838.401761][ T5709] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 838.432962][ T809] usb 9-1: Using ep0 maxpacket: 8 [ 838.458076][ T809] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.499137][ T809] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 838.529590][ T809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.575022][ T809] usb 9-1: config 0 descriptor?? [ 838.597739][ T809] iowarrior 9-1:0.0: no interrupt-in endpoint found [ 838.647847][ T5709] usb 8-1: USB disconnect, device number 126 [ 838.662989][T15723] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 838.745010][T19296] udevd[19296]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 838.801640][ T809] usb 9-1: USB disconnect, device number 4 [ 838.823036][T15723] usb 6-1: Using ep0 maxpacket: 16 [ 838.830613][T15723] usb 6-1: unable to get BOS descriptor or descriptor too short [ 838.842413][T15723] usb 6-1: config 7 has an invalid interface number: 106 but max is 3 [ 838.857359][T15723] usb 6-1: config 7 has an invalid interface number: 182 but max is 3 [ 838.869214][T15723] usb 6-1: config 7 has an invalid interface number: 148 but max is 3 [ 838.877914][T15723] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 838.889076][T15723] usb 6-1: config 7 has 3 interfaces, different from the descriptor's value: 4 [ 838.899379][T15723] usb 6-1: config 7 has no interface number 0 [ 838.905628][T15723] usb 6-1: config 7 has no interface number 1 [ 838.912104][T15723] usb 6-1: config 7 has no interface number 2 [ 838.918803][T15723] usb 6-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 838.932965][T15723] usb 6-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 838.945279][T15723] usb 6-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 838.956537][T15723] usb 6-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 838.959744][ T5719] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 839.001113][T15723] usb 6-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 839.037309][T15723] usb 6-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 839.050119][T15723] usb 6-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 839.064421][T15723] usb 6-1: config 7 interface 182 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 839.081117][T15723] usb 6-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 839.095511][T15723] usb 6-1: config 7 interface 148 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 839.107041][T15723] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 839.118680][T15723] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 839.130682][T15723] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 839.148954][T15723] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 839.160560][T15723] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 839.173434][T15723] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 839.186320][T15723] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 839.197486][ T5719] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 839.209048][T15723] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 839.213418][ T5719] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 839.221204][T15723] usb 6-1: config 7 interface 148 altsetting 5 has an endpoint descriptor with address 0x52, changing to 0x2 [ 839.259177][T15723] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 839.288066][ T5719] usb 4-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 839.320876][ T5719] usb 4-1: config 0 interface 0 has no altsetting 0 [ 839.371820][ T5719] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 839.374592][T15723] usb 6-1: config 7 interface 148 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 839.403610][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.435057][ T5719] usb 4-1: config 0 descriptor?? [ 839.440198][T15723] usb 6-1: config 7 interface 148 altsetting 5 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 839.472120][T19939] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 839.485602][T15723] usb 6-1: config 7 interface 106 has no altsetting 0 [ 839.499705][T19207] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 839.507909][T15723] usb 6-1: config 7 interface 182 has no altsetting 0 [ 839.508005][T19207] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 839.537525][T19207] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 839.549158][T15723] usb 6-1: config 7 interface 148 has no altsetting 0 [ 839.581159][T15723] usb 6-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 839.590783][T15723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.603023][ T5709] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 839.620754][T15723] usb 6-1: Product: syz [ 839.625493][T15723] usb 6-1: Manufacturer: syz [ 839.630553][T15723] usb 6-1: SerialNumber: syz [ 839.765423][ T5709] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.778693][ T5709] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 839.796536][ T5709] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.810251][ T5709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 839.824101][ T5709] usb 8-1: SerialNumber: syz [ 839.891467][T19936] syzkaller1: entered promiscuous mode [ 839.898881][ T5719] petalynx 0003:18B1:0037.008C: unknown main item tag 0x0 [ 839.899646][T19936] syzkaller1: entered allmulticast mode [ 839.912554][ T5719] petalynx 0003:18B1:0037.008C: unknown main item tag 0x0 [ 839.930039][ T5719] petalynx 0003:18B1:0037.008C: unknown main item tag 0x0 [ 839.946049][ T5719] petalynx 0003:18B1:0037.008C: unknown main item tag 0x0 [ 839.977785][ T5719] petalynx 0003:18B1:0037.008C: unknown main item tag 0x0 [ 839.993900][ T5719] petalynx 0003:18B1:0037.008C: unknown main item tag 0x0 [ 840.035438][ T5719] petalynx 0003:18B1:0037.008C: hidraw1: USB HID v0.01 Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 840.052906][ T5709] cdc_ether 8-1:1.0: skipping garbage [ 840.069917][ T5709] cdc_ether 8-1:1.0: GUID doesn't match [ 840.113585][ T5709] usb 8-1: USB disconnect, device number 127 [ 840.123127][ T5719] usb 4-1: USB disconnect, device number 30 [ 840.265576][T19953] fido_id[19953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 840.452314][T15724] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 840.501916][T15724] usb 7-1: USB disconnect, device number 7 [ 840.546789][T19957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4338'. [ 840.614123][T15723] usb 6-1: USB disconnect, device number 38 [ 840.725858][T19961] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4339'. [ 841.285435][T19975] IPVS: length: 141 != 24 [ 841.323372][T19975] sctp: [Deprecated]: syz.6.4344 (pid 19975) Use of int in maxseg socket option. [ 841.323372][T19975] Use struct sctp_assoc_value instead [ 841.614520][T19987] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 841.631201][ T5719] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 841.641560][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4349'. [ 842.010810][T20002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4352'. [ 842.056800][T20002] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 842.222883][T15724] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 842.387795][T15724] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 842.413416][T15724] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 842.442917][T15724] usb 6-1: Product: syz [ 842.451560][T15724] usb 6-1: Manufacturer: syz [ 842.462616][T15724] usb 6-1: SerialNumber: syz [ 842.502076][T15724] usb 6-1: config 0 descriptor?? [ 842.579266][T20008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4355'. [ 842.729094][T15724] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 842.927257][T15724] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 842.936636][T15724] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 842.955026][T15724] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 843.261921][T15724] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 843.276765][T15724] usb 6-1: USB disconnect, device number 39 [ 843.800913][T20018] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4358'. [ 844.215195][T20028] loop2: detected capacity change from 0 to 7 [ 844.228796][T20028] loop2: [ 844.236017][T20028] loop2: partition table partially beyond EOD, truncated [ 844.490927][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4364'. [ 844.557341][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4364'. [ 844.596241][T20035] fuse: Bad value for 'user_id' [ 844.638201][T20035] fuse: Bad value for 'user_id' [ 844.759878][ T5719] hid_parser_main: 34 callbacks suppressed [ 844.759901][ T5719] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 844.818758][ T5719] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 844.861038][ T5719] hid-generic 0000:0000:0000.008E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 844.906279][T20047] netlink: 'syz.6.4368': attribute type 1 has an invalid length. [ 844.969704][T20047] ALSA: mixer_oss: invalid OSS volume 'SPEA9Ksˠ+I2KER' [ 845.132960][T15724] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 845.295335][T15724] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 845.319697][T15724] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 845.345522][T15724] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 845.385576][T15724] usb 6-1: config 0 interface 0 has no altsetting 0 [ 845.398161][T15724] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 845.409122][T15724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.450392][T15724] usb 6-1: config 0 descriptor?? [ 845.457027][T20044] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 845.879998][T15724] hid (null): unknown global tag 0xe [ 845.893853][T15724] hid (null): unknown global tag 0xe [ 845.935861][T15724] uclogic 0003:5543:0004.008F: unknown global tag 0xe [ 845.955881][T15724] uclogic 0003:5543:0004.008F: item 0 1 1 14 parsing failed [ 845.972025][T15724] uclogic 0003:5543:0004.008F: parse failed [ 845.985104][T15724] uclogic 0003:5543:0004.008F: probe with driver uclogic failed with error -22 [ 846.006179][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4380'. [ 846.167281][ T5730] usb 6-1: USB disconnect, device number 40 [ 846.336515][T20072] loop5: detected capacity change from 0 to 7 [ 846.358700][T20072] Dev loop5: unable to read RDB block 7 [ 846.371463][T20072] loop5: AHDI p1 p2 [ 846.378847][T20072] loop5: partition table partially beyond EOD, truncated [ 846.396674][T20072] loop5: p1 size 150995456 extends beyond EOD, truncated [ 846.499711][T19296] udevd[19296]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 846.800210][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4379'. [ 846.853269][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4379'. [ 846.899275][T15724] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 846.914899][T15724] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 846.954127][T15724] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz0] on syz0 [ 846.972988][ T5730] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 847.099393][T20096] FAULT_INJECTION: forcing a failure. [ 847.099393][T20096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.125485][T20096] CPU: 1 UID: 0 PID: 20096 Comm: syz.5.4383 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.125517][T20096] Tainted: [L]=SOFTLOCKUP [ 847.125524][T20096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 847.125535][T20096] Call Trace: [ 847.125543][T20096] [ 847.125551][T20096] dump_stack_lvl+0xe8/0x150 [ 847.125574][T20096] should_fail_ex+0x412/0x560 [ 847.125598][T20096] _copy_from_user+0x2d/0xb0 [ 847.125622][T20096] get_compat_msghdr+0xb3/0x4c0 [ 847.125640][T20096] ? _parse_integer_limit+0x1ae/0x1f0 [ 847.125659][T20096] ? __pfx_get_compat_msghdr+0x10/0x10 [ 847.125675][T20096] ? kstrtoull+0x12f/0x1d0 [ 847.125699][T20096] ___sys_sendmsg+0x201/0x360 [ 847.125725][T20096] ? __lock_acquire+0x6b5/0x2cf0 [ 847.125749][T20096] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.125777][T20096] ? get_pid_task+0x20/0x1f0 [ 847.125801][T20096] ? get_pid_task+0x20/0x1f0 [ 847.125821][T20096] ? get_pid_task+0x20/0x1f0 [ 847.125867][T20096] ? __fget_files+0x2a/0x420 [ 847.125889][T20096] ? __fget_files+0x3a0/0x420 [ 847.125920][T20096] __sys_sendmsg+0x183/0x260 [ 847.125949][T20096] ? __pfx___sys_sendmsg+0x10/0x10 [ 847.125994][T20096] __do_fast_syscall_32+0x229/0x6e0 [ 847.126014][T20096] ? do_fast_syscall_32+0x33/0x70 [ 847.126032][T20096] ? lockdep_hardirqs_on+0x7a/0x110 [ 847.126047][T20096] ? asm_int80_emulation+0x1a/0x20 [ 847.126064][T20096] ? do_int80_emulation+0x286/0x530 [ 847.126079][T20096] ? trace_irq_disable+0x3b/0x140 [ 847.126117][T20096] do_fast_syscall_32+0x33/0x70 [ 847.126138][T20096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 847.126162][T20096] RIP: 0023:0xf7f9301c [ 847.126180][T20096] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 847.126196][T20096] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 847.126217][T20096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 847.126231][T20096] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 847.126243][T20096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 847.126254][T20096] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 847.126266][T20096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 847.126292][T20096] [ 847.403490][ T5730] usb 7-1: Using ep0 maxpacket: 8 [ 847.446650][ T5730] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.564162][ T5730] usb 7-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 847.588930][T20100] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4385'. [ 847.606598][ T5730] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.648933][ T5730] usb 7-1: config 0 descriptor?? [ 847.781802][T20097] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4384'. [ 848.184150][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4390'. [ 848.472897][ T5730] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 848.548207][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4402'. [ 848.578844][T20123] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 848.592244][T20125] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4394'. [ 848.643634][ T5730] usb 8-1: Using ep0 maxpacket: 32 [ 848.666757][ T5730] usb 8-1: unable to get BOS descriptor or descriptor too short [ 848.681786][ T5730] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 848.694541][T19207] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 848.718459][ T5730] usb 8-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 848.741471][T20127] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 848.750719][ T5730] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.768555][ T5730] usb 8-1: Product: syz [ 848.786274][ T5730] usb 8-1: Manufacturer: syz [ 848.799359][ T5730] usb 8-1: SerialNumber: syz [ 848.865724][T19207] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 848.894110][T19207] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 848.924234][T19207] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 848.941324][ T5719] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 848.963595][ T5719] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 848.975434][T19207] usb 4-1: config 0 interface 0 has no altsetting 0 [ 848.993507][ T5719] hid-generic 0000:0000:0000.0091: hidraw0: HID v0.00 Device [syz0] on syz0 [ 849.003847][T19207] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 849.027399][T19207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.068120][T19207] usb 4-1: config 0 descriptor?? [ 849.085448][T20119] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 849.110858][ T5730] usb 8-1: unit 255 not found! [ 849.330417][ T5730] usb 8-1: USB disconnect, device number 2 [ 849.533506][T19273] udevd[19273]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.600799][T19207] hid (null): unknown global tag 0xe [ 849.607268][T19207] hid (null): unknown global tag 0xe [ 849.621189][T19207] uclogic 0003:5543:0004.0092: unknown global tag 0xe [ 849.638157][T19207] uclogic 0003:5543:0004.0092: item 0 1 1 14 parsing failed [ 849.650007][T19207] uclogic 0003:5543:0004.0092: parse failed [ 849.656933][T19207] uclogic 0003:5543:0004.0092: probe with driver uclogic failed with error -22 [ 849.794847][ T5730] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 849.889250][T19207] usb 4-1: USB disconnect, device number 31 [ 849.954829][ T5730] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 849.980269][ T5730] usb 8-1: config 1 has no interface number 0 [ 849.992099][ T5730] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 850.009770][ T5730] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 850.022205][ T5730] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 850.037539][ T5730] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 850.050009][ T5730] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 850.065337][ T5730] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.074934][ T5730] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.084254][ T5730] usb 8-1: Product: syz [ 850.092993][ T5730] usb 8-1: Manufacturer: syz [ 850.103060][ T5730] usb 8-1: SerialNumber: syz [ 850.120140][T20135] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 850.267379][T20143] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4400'. [ 850.276946][T20143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4400'. [ 850.331324][T20135] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 850.367975][T20134] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 850.599718][T19207] usb 7-1: USB disconnect, device number 8 [ 850.750914][T20134] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 850.812077][ T5730] cdc_ncm 8-1:1.1: bind() failure [ 850.872247][T20157] loop8: detected capacity change from 0 to 8 [ 850.886388][T20157] Dev loop8: unable to read RDB block 8 [ 850.899249][T20157] loop8: unable to read partition table [ 850.920353][T20157] loop8: partition table beyond EOD, truncated [ 850.955117][T20157] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 850.961605][T20160] loop5: detected capacity change from 0 to 7 [ 850.987381][T20160] Dev loop5: unable to read RDB block 7 [ 850.995380][T20160] loop5: AHDI p1 p2 [ 850.999436][T20160] loop5: partition table partially beyond EOD, truncated [ 851.001798][ T5730] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 851.008636][T20160] loop5: p1 size 150995456 extends beyond EOD, truncated [ 851.017809][T15723] usb 8-1: USB disconnect, device number 3 [ 851.060147][ T5730] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 851.083970][ T5730] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz0] on syz0 [ 851.157186][T19296] udevd[19296]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 851.287122][ T5622] Bluetooth: hci3: Unable to find connection with handle 0x00c8 [ 851.357076][T20172] __nla_validate_parse: 4 callbacks suppressed [ 851.357094][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4415'. [ 851.444659][T20178] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 851.575544][T20182] loop2: detected capacity change from 0 to 7 [ 851.596885][T20182] loop2: [ 851.606537][T20182] loop2: partition table partially beyond EOD, truncated [ 851.934266][T20186] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003 [ 851.994628][T20191] loop5: detected capacity change from 0 to 7 [ 852.010720][T20191] Dev loop5: unable to read RDB block 7 [ 852.024172][T20176] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4414'. [ 852.033269][T20191] loop5: unable to read partition table [ 852.039687][T20191] loop5: partition table beyond EOD, truncated [ 852.053090][T20191] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 852.100157][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4421'. [ 852.157745][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4421'. [ 852.198632][T20191] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 852.403320][T20200] bond1: option mode: unable to set because the bond device has slaves [ 852.448377][T20200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4424'. [ 852.475555][ T5719] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 852.498607][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4424'. [ 852.537074][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4427'. [ 852.666049][T20211] xt_TCPMSS: Only works on TCP SYN packets [ 852.674847][ T5719] usb 9-1: Using ep0 maxpacket: 32 [ 852.701012][ T5719] usb 9-1: unable to get BOS descriptor or descriptor too short [ 852.724547][ T5719] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 852.747872][ T5719] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 852.778575][ T5719] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 852.778661][T15723] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 852.800884][ T5719] usb 9-1: config 128 has no interface number 0 [ 852.809723][T15723] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 852.816998][ T5719] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 852.828719][T15723] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz0] on syz0 [ 852.839492][ T5719] usb 9-1: config 128 interface 127 has no altsetting 0 [ 852.873563][ T5719] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 852.901929][ T5719] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.919348][T15724] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 852.920829][ T5719] usb 9-1: Product: syz [ 852.943311][ T5719] usb 9-1: Manufacturer: syz [ 852.957791][ T5719] usb 9-1: SerialNumber: syz [ 853.102952][T15724] usb 7-1: Using ep0 maxpacket: 16 [ 853.114555][T15724] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 853.132830][T15724] usb 7-1: config 1 has no interface number 0 [ 853.138994][T15724] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 853.164662][T15724] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 853.183205][T15724] usb 7-1: config 1 interface 105 has no altsetting 0 [ 853.196142][T15724] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 853.209295][T15724] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 853.225727][T15724] usb 7-1: Product: syz [ 853.235064][T15724] usb 7-1: Manufacturer: syz [ 853.245655][T15724] usb 7-1: SerialNumber: syz [ 853.281316][T20197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.325947][T20197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.348387][T20209] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 853.385575][T20209] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 853.473356][T20233] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 853.624835][T15724] aqc111 7-1:1.105: probe with driver aqc111 failed with error -71 [ 853.681395][T15724] usb 7-1: USB disconnect, device number 9 [ 853.755860][T20235] loop5: detected capacity change from 0 to 7 [ 853.776741][T20235] Dev loop5: unable to read RDB block 7 [ 853.799351][T20235] loop5: AHDI p1 p2 [ 853.809175][T20235] loop5: partition table partially beyond EOD, truncated [ 853.825669][T20235] loop5: p1 size 150995456 extends beyond EOD, truncated [ 854.048307][T19273] udevd[19273]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 854.257384][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4438'. [ 854.277257][T20243] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 854.496025][T20245] loop2: detected capacity change from 0 to 7 [ 854.565091][T20245] loop2: [ 854.584762][T20245] loop2: partition table partially beyond EOD, truncated [ 854.609651][ T5719] usb 9-1: USB disconnect, device number 5 [ 854.728074][T19296] udevd[19296]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.838464][T20257] netlink: 'syz.5.4444': attribute type 62 has an invalid length. [ 854.967229][T20255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4444'. [ 855.129788][ T5730] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 855.162192][ T5730] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 855.214178][ T5730] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz0] on syz0 [ 855.260805][T20265] xt_TCPMSS: Only works on TCP SYN packets [ 856.142956][T15723] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 856.343460][T15723] usb 8-1: Using ep0 maxpacket: 32 [ 856.472381][T15723] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 856.946264][T15723] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 857.440843][T15723] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 857.512457][T15723] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 857.589713][T15723] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 857.996079][T15723] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.087093][T15723] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.171144][T15723] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 858.195199][T20291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4455'. [ 858.282331][T15723] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 858.298607][T20291] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4455'. [ 858.343498][T15723] usb 8-1: New USB device strings: Mfr=0, Product=65, SerialNumber=0 [ 858.365180][T20291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4455'. [ 858.601860][T15723] usb 8-1: Product: syz [ 858.619659][T15723] usb 8-1: config 0 descriptor?? [ 862.735846][T15723] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 863.642862][T15723] usb 8-1: USB disconnect, device number 4 [ 863.815314][T15723] usblp0: removed [ 864.393842][T20298] loop8: detected capacity change from 0 to 8 [ 864.529802][T20298] Dev loop8: unable to read RDB block 8 [ 864.548254][T20298] loop8: unable to read partition table [ 864.603134][T20298] loop8: partition table beyond EOD, truncated [ 865.220456][T20298] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 869.484450][ T809] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 869.692963][T20315] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4462'. [ 869.770366][ T809] usb 9-1: Using ep0 maxpacket: 16 [ 869.805872][ T809] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 869.836154][T15723] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 869.847393][ T809] usb 9-1: config 0 has no interface number 0 [ 869.917002][ T809] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.027655][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.040065][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.127916][ T809] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.281146][T15723] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 870.357177][ T809] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 870.413149][T15723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 870.424654][ T809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.556685][ T809] usb 9-1: config 0 descriptor?? [ 870.611709][T20321] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4463'. [ 870.621146][T15723] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 870.711938][T15723] usb 4-1: string descriptor 0 read error: -71 [ 871.317768][T15723] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 871.338986][ T809] usb 9-1: can't set config #0, error -71 [ 871.460170][ T809] usb 9-1: USB disconnect, device number 6 [ 871.492597][T15723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.074095][T15723] usb 4-1: config 0 descriptor?? [ 872.138917][T15723] usb 4-1: can't set config #0, error -71 [ 872.254551][T15723] usb 4-1: USB disconnect, device number 32 [ 929.052492][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4469'. [ 934.226981][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.043853][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 984.652781][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 984.659761][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20303/1:b..l [ 984.668301][ C0] rcu: (detected by 0, t=10503 jiffies, g=160705, q=424593 ncpus=2) [ 984.676377][ C0] task:syz.3.4458 state:R running task stack:25288 pid:20303 tgid:20302 ppid:16338 task_flags:0x40054c flags:0x08080003 [ 984.690935][ C0] Call Trace: [ 984.694213][ C0] [ 984.697154][ C0] __schedule+0x1821/0x5740 [ 984.701702][ C0] ? __pfx___schedule+0x10/0x10 [ 984.706572][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 984.711587][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 984.716952][ C0] preempt_schedule_common+0x82/0xd0 [ 984.722257][ C0] ? nl80211_netlink_notify+0x46b/0x840 [ 984.727813][ C0] preempt_schedule_thunk+0x16/0x30 [ 984.733014][ C0] __local_bh_enable_ip+0xe1/0x130 [ 984.738134][ C0] nl80211_netlink_notify+0x46b/0x840 [ 984.743522][ C0] ? nl80211_netlink_notify+0x74/0x840 [ 984.748996][ C0] notifier_call_chain+0x1ad/0x3d0 [ 984.754108][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 984.759844][ C0] netlink_release+0x123b/0x1ad0 [ 984.764812][ C0] ? netlink_release+0x101/0x1ad0 [ 984.769847][ C0] ? __pfx_netlink_release+0x10/0x10 [ 984.775124][ C0] ? down_write+0x16d/0x200 [ 984.779638][ C0] ? __pfx_down_write+0x10/0x10 [ 984.784510][ C0] sock_close+0xc3/0x240 [ 984.788758][ C0] ? __pfx_sock_close+0x10/0x10 [ 984.793601][ C0] __fput+0x44f/0xa60 [ 984.797604][ C0] task_work_run+0x1d9/0x270 [ 984.802215][ C0] ? __pfx_task_work_run+0x10/0x10 [ 984.807343][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 984.812447][ C0] do_exit+0x70f/0x22c0 [ 984.816605][ C0] ? __pfx_do_exit+0x10/0x10 [ 984.821214][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 984.826266][ C0] do_group_exit+0x21b/0x2d0 [ 984.830867][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 984.836063][ C0] get_signal+0x1284/0x1330 [ 984.840604][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 984.846170][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 984.852339][ C0] ? __pfx___sys_recvmmsg+0x10/0x10 [ 984.857538][ C0] exit_to_user_mode_loop+0x8c/0x4d0 [ 984.862830][ C0] ? rcu_is_watching+0x15/0xb0 [ 984.867599][ C0] ? do_fast_syscall_32+0x33/0x70 [ 984.872617][ C0] __do_fast_syscall_32+0x446/0x6e0 [ 984.877800][ C0] ? do_fast_syscall_32+0x33/0x70 [ 984.882831][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 984.888032][ C0] ? asm_int80_emulation+0x1a/0x20 [ 984.893134][ C0] ? do_int80_emulation+0x286/0x530 [ 984.898337][ C0] ? trace_irq_disable+0x3b/0x140 [ 984.903386][ C0] do_fast_syscall_32+0x33/0x70 [ 984.908241][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 984.914559][ C0] RIP: 0023:0xf7f6901c [ 984.918630][ C0] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 984.927045][ C0] RAX: 0000000000010106 RBX: 0000000000000007 RCX: 00000000800000c0 [ 984.935005][ C0] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 984.942977][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 984.950950][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 984.958911][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 984.966895][ C0] [ 984.969900][ C0] rcu: rcu_preempt kthread starved for 754 jiffies! g160705 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 984.980994][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 984.990966][ C0] rcu: RCU grace-period kthread stack dump: [ 984.996844][ C0] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 985.010344][ C0] Call Trace: [ 985.013612][ C0] [ 985.016550][ C0] __schedule+0x1821/0x5740 [ 985.021076][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 985.026053][ C0] ? __pfx___schedule+0x10/0x10 [ 985.030921][ C0] ? schedule+0x90/0x360 [ 985.035161][ C0] schedule+0x164/0x360 [ 985.039335][ C0] schedule_timeout+0x158/0x2c0 [ 985.044205][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 985.049586][ C0] ? __pfx_process_timeout+0x10/0x10 [ 985.054867][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 985.060691][ C0] ? prepare_to_swait_event+0x340/0x370 [ 985.066262][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 985.071130][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 985.077294][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 985.082580][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 985.087781][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 985.093606][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 985.098202][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 985.103386][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 985.109211][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 985.114165][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 985.119199][ C0] kthread+0x389/0x470 [ 985.123269][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 985.128479][ C0] ? __pfx_kthread+0x10/0x10 [ 985.133088][ C0] ret_from_fork+0x514/0xb70 [ 985.137688][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 985.142786][ C0] ? __switch_to+0xc79/0x1410 [ 985.147477][ C0] ? __pfx_kthread+0x10/0x10 [ 985.152079][ C0] ret_from_fork_asm+0x1a/0x30 [ 985.156855][ C0] [ 985.159857][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 985.166171][ C0] Sending NMI from CPU 0 to CPUs 1: [ 985.171383][ C1] NMI backtrace for cpu 1 [ 985.171401][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 985.171424][ C1] Tainted: [L]=SOFTLOCKUP [ 985.171430][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 985.171441][ C1] RIP: 0010:unwind_next_frame+0xdf2/0x2550 [ 985.171467][ C1] Code: 00 fc ff df 48 8b 4c 24 20 0f b6 04 01 84 c0 0f 85 2c 12 00 00 41 83 3e 00 0f 95 c0 49 39 df 0f 96 c1 20 c1 49 39 dc 0f 97 c0 <20> c8 3c 01 75 18 48 8d 43 08 4c 39 f8 0f 97 c1 4c 39 e0 0f 96 c0 [ 985.171482][ C1] RSP: 0018:ffffc90000a07e38 EFLAGS: 00000216 [ 985.171498][ C1] RAX: 0000000000000001 RBX: ffffc90000a08818 RCX: 1ffff92000140f01 [ 985.171511][ C1] RDX: ffffffff9151288c RSI: 0000000000000002 RDI: ffffffff8c28b780 [ 985.171523][ C1] RBP: 1ffff92000140fe2 R08: 0000000000000001 R09: ffffffff8e95cca0 [ 985.171535][ C1] R10: ffffc90000a07f58 R11: ffffffff81b0e040 R12: ffffc90000a09000 [ 985.171548][ C1] R13: 1ffff92000140fe3 R14: ffffc90000a07f08 R15: ffffc90000a01000 [ 985.171561][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 985.171574][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 985.171586][ C1] CR2: 00005620fff9a088 CR3: 0000000065084000 CR4: 00000000003526f0 [ 985.171602][ C1] Call Trace: [ 985.171609][ C1] [ 985.171619][ C1] ? unwind_next_frame+0xa6/0x2550 [ 985.171639][ C1] ? nft_do_chain+0x48d/0x1ae0 [ 985.171661][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 985.171684][ C1] arch_stack_walk+0x11b/0x150 [ 985.171706][ C1] ? nft_do_chain+0x48d/0x1ae0 [ 985.171727][ C1] stack_trace_save+0xa9/0x100 [ 985.171752][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 985.171776][ C1] ? stack_trace_save+0xa9/0x100 [ 985.171803][ C1] kasan_save_track+0x3e/0x80 [ 985.171824][ C1] ? kasan_save_track+0x3e/0x80 [ 985.171844][ C1] ? kasan_save_free_info+0x46/0x50 [ 985.171862][ C1] ? __kasan_slab_free+0x5c/0x80 [ 985.171883][ C1] ? kfree+0x1c5/0x640 [ 985.171902][ C1] ? skb_release_data+0x828/0xa60 [ 985.171932][ C1] ? __kfree_skb+0x5d/0x210 [ 985.171955][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 985.171972][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 985.171990][ C1] ? nft_do_chain+0x48d/0x1ae0 [ 985.172028][ C1] kasan_save_free_info+0x46/0x50 [ 985.172046][ C1] __kasan_slab_free+0x5c/0x80 [ 985.172069][ C1] kfree+0x1c5/0x640 [ 985.172088][ C1] ? skb_release_data+0x828/0xa60 [ 985.172114][ C1] skb_release_data+0x828/0xa60 [ 985.172143][ C1] __kfree_skb+0x5d/0x210 [ 985.172167][ C1] nft_synproxy_eval_v4+0x352/0x4e0 [ 985.172188][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 985.172207][ C1] ? nf_ip_checksum+0x13c/0x510 [ 985.172229][ C1] nft_synproxy_do_eval+0x305/0x580 [ 985.172250][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 985.172275][ C1] nft_do_chain+0x48d/0x1ae0 [ 985.172297][ C1] ? ip_vs_service_find+0x317/0x3c0 [ 985.172324][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 985.172352][ C1] ? nf_nat_inet_fn+0x95b/0xbf0 [ 985.172378][ C1] nft_do_chain_inet+0x360/0x4b0 [ 985.172399][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 985.172421][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 985.172447][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 985.172467][ C1] nf_hook_slow+0xc5/0x220 [ 985.172485][ C1] NF_HOOK+0x21f/0x3c0 [ 985.172508][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 985.172531][ C1] ? NF_HOOK+0x9e/0x3c0 [ 985.172553][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 985.172573][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 985.172598][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 985.172624][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 985.172648][ C1] NF_HOOK+0x336/0x3c0 [ 985.172670][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 985.172693][ C1] ? NF_HOOK+0x9e/0x3c0 [ 985.172714][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 985.172737][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 985.172766][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 985.172787][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 985.172809][ C1] ? process_backlog+0x3eb/0x1950 [ 985.172831][ C1] process_backlog+0xaa3/0x1950 [ 985.172860][ C1] __napi_poll+0xae/0x340 [ 985.172879][ C1] ? skb_defer_free_flush+0x233/0x260 [ 985.172901][ C1] net_rx_action+0x627/0xf70 [ 985.172927][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 985.172957][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 985.172991][ C1] handle_softirqs+0x22a/0x840 [ 985.173010][ C1] ? __irq_exit_rcu+0xca/0x220 [ 985.173030][ C1] __irq_exit_rcu+0xca/0x220 [ 985.173046][ C1] irq_exit_rcu+0x9/0x30 [ 985.173062][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 985.173086][ C1] [ 985.173092][ C1] [ 985.173099][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 985.173117][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 985.173143][ C1] Code: 6b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 01 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 985.173156][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 985.173170][ C1] RAX: 00000000012eaee3 RBX: ffffffff819a858a RCX: 0000000080000001 [ 985.173182][ C1] RDX: 0000000000000001 RSI: ffffffff8dfad387 RDI: ffffffff8c28b7e0 [ 985.173193][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 985.173206][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 985.173217][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 985.173230][ C1] ? do_idle+0x36a/0x5f0 [ 985.173253][ C1] default_idle+0x9/0x20 [ 985.173270][ C1] default_idle_call+0x72/0xb0 [ 985.173288][ C1] do_idle+0x36a/0x5f0 [ 985.173305][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 985.173325][ C1] ? __pfx_do_idle+0x10/0x10 [ 985.173347][ C1] cpu_startup_entry+0x43/0x60 [ 985.173366][ C1] start_secondary+0x101/0x110 [ 985.173381][ C1] common_startup_64+0x13e/0x147 [ 985.173410][ C1]