last executing test programs: 7m41.777478971s ago: executing program 2 (id=3478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x390}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 7m41.535567639s ago: executing program 2 (id=3480): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x13, 0x0, &(0x7f0000000440)="cc9f4d42ef21760fc9ae7ef1558f46be00d0b5", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000010029bd7000ffdbdf1e00a31c2a", @ANYRES32=0x0, @ANYBLOB="0db2060020120100140003006e657464657673696d3000000000000014001680100001800c0004000100000000010000050027000b000000"], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000010000070900018073797a3100000000080005400000000e080003400000ffff"], 0x30}}, 0x41) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000480)=0xe, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4010084) socket$isdn(0x22, 0x3, 0x21) 7m41.407867832s ago: executing program 2 (id=3481): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) r4 = eventfd2(0x8, 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000540)) sendmmsg$unix(r2, &(0x7f0000007f00)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000004c0)="aa74fd6b312ab2c67ad62667b037cd7be57839e8ea7db4488bc321cce8917a7811900f02b104b7180086a9f1ad79064c53bbeaa24ee553a3705ecc117e14101699a619e41d96afe7c6a4e071db328bb0e51830f32960cadcf304d8d443cf4efbec64932eb4687d2d66c4102d9c33d7b650ffa8ecc8", 0x75}], 0x1, &(0x7f0000002940)=[@rights={{0x24, 0x1, 0x1, [r2, r1, r2, r1, r0]}}, @rights={{0x24, 0x1, 0x1, [r3, r0, r0, r1, r2]}}, @rights={{0x38, 0x1, 0x1, [r2, r1, r4, r2, r1, r2, r2, r0, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x28, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff]}}], 0x160, 0x840}}], 0x1, 0x0) 7m41.203762926s ago: executing program 2 (id=3483): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000340), 0xfffffffffffffffb, 0x101800) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000380)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x10000, 0xc, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0xdddd1000, 0x10, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x4000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x3, 0x40, 0xd, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x1, 0xd, 0x6, 0x3, 0xa, 0x1}, {0x100000, 0x4000, 0x3, 0x1, 0x3, 0x9, 0xd, 0x6, 0x1, 0x4, 0x5, 0x4b}, {0x60000, 0xffff1000, 0xe, 0x0, 0x6, 0x1, 0x21, 0xff, 0x4, 0x90, 0xfb, 0xfc}, {0x6000, 0xfec00000, 0x19, 0xff, 0x3, 0x34, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x8080000, 0x8080000, 0x3, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xffff1000, 0x9}, {0xfec00000, 0x4}, 0x40010000, 0x0, 0x8080000, 0x381, 0x3, 0x2000, 0xe6e70c00, [0x100000003, 0x4, 0x7, 0xc5]}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x8, 0xfff1}, {0xfff1, 0xc}, {0xb}}}, 0x24}}, 0x20000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000001) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0xfffffffffffffff9) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x0, 0x999}) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) 7m39.991084697s ago: executing program 2 (id=3489): r0 = socket(0x2, 0x1, 0x4) sendmsg$kcm(r0, &(0x7f0000001200)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x4, 0x2, 0x2}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000080)="3a3e9c3bfaff0ea5bfb54bfed1a1fe508c676e1a052e4f4783a75b981670e98083fbbe4a6928a97a29e306c6952795687ee320f5fddb66fe07460af3365711cc0d04afeb34dcfe1f43ec5e85cce1f8d93638995094d2dc2ce343bb6d2d9772e466e8a9c2a2cc6e3c7ff6b3073cf9f9b53489fa4604c29b3726afa7053f2b63188578c44eeb15cbdc69d601e35f7b1dce91a3d05405ddc4322cacdd33179e441f6825127b88f078eb743bdf9a63135fee705baf8a8d039d4a5e87d7d0cb2addbd2c1d31468eb0901026cbe33b73afc74f995dfb053f4fee4681091ffc0040ca355179", 0xe2}, {&(0x7f0000000180)="119c336facb2b48484ab1d8026e04c938893d69bb792a669b06c2c6842ed52272ec9869b24356df148cdb3a2d1a2fd", 0x2f}, {&(0x7f00000001c0)="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", 0x1000}], 0x3}, 0x40080) recvmmsg$unix(r0, &(0x7f0000007a80)=[{{&(0x7f0000001240), 0x6e, &(0x7f0000003540)=[{&(0x7f00000012c0)=""/212, 0xd4}, {&(0x7f00000013c0)=""/85, 0x55}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/244, 0xf4}], 0x5}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003640)=""/93, 0x5d}, {&(0x7f00000036c0)=""/27, 0x1b}, {&(0x7f0000003700)=""/131, 0x83}, {&(0x7f00000037c0)=""/194, 0xc2}, {&(0x7f00000038c0)=""/139, 0x8b}, {&(0x7f0000003980)=""/97, 0x61}], 0x6}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003b00)=""/161, 0xa1}, {&(0x7f0000003bc0)=""/79, 0x4f}], 0x2, &(0x7f0000003c80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003cc0), 0x6e, &(0x7f0000004d40)=[{&(0x7f0000003d40)=""/4096, 0x1000}], 0x1, &(0x7f0000004d80)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000004ec0), 0x6e, &(0x7f0000006180)=[{&(0x7f0000004f40)=""/35, 0x23}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/95, 0x5f}, {&(0x7f0000006000)=""/73, 0x49}, {&(0x7f0000006080)=""/203, 0xcb}], 0x5, &(0x7f0000006200)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000006300)=@abs, 0x6e, &(0x7f00000077c0)=[{&(0x7f0000006380)=""/71, 0x47}, {&(0x7f0000006400)=""/226, 0xe2}, {&(0x7f0000006500)=""/2, 0x2}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/14, 0xe}, {&(0x7f0000007580)=""/179, 0xb3}, {&(0x7f0000007640)=""/81, 0x51}, {&(0x7f00000076c0)=""/243, 0xf3}], 0x8, &(0x7f0000007840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{0x0, 0x0, &(0x7f00000079c0)=[{&(0x7f0000007900)=""/151, 0x97}], 0x1, &(0x7f0000007a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}], 0x7, 0x40014022, 0x0) ioctl$sock_TIOCINQ(r11, 0x541b, &(0x7f0000007c40)) r25 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007cc0), r8) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000007d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r23, &(0x7f0000007f40)={&(0x7f0000007c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000007f00)={&(0x7f0000007d40)={0x1b8, r25, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r26}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x25}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x42e0}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x170, 0x84, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x80000000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x80}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x101}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8000}, @NL80211_BAND_LC={0x8, 0x5, 0x401}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1a33749ac247"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x80000000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf}, @NL80211_BAND_LC={0x8, 0x5, 0xe}, @NL80211_BAND_LC={0x8, 0x5, 0xd}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x101}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="6b75b097c75c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x13, 0x1, @random="2e9496b29ef477c585d562cee7b4ff"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3cda996a}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="8d7e5b475364"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="4cc8365b091a"}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4084}, 0x80) mknodat$loop(r20, &(0x7f0000007f80)='./file0\x00', 0x200, 0x1) ioctl$KVM_SET_FPU(r23, 0x41a0ae8d, &(0x7f0000007fc0)={'\x00', 0x2, 0x3, 0x6, 0x0, 0x5, 0xfffb4000, 0x0, '\x00', 0x3ff}) connect(r9, &(0x7f0000008180)=@ethernet={0x306, @link_local}, 0x80) getpeername$netlink(r8, &(0x7f0000008200), &(0x7f0000008240)=0xc) execveat(r15, &(0x7f0000008280)='./file0\x00', &(0x7f0000008480)={[&(0x7f00000082c0)='\x00', &(0x7f0000008300)='\x02\x02\x02\x02\x02\x02', &(0x7f0000008340)=']$\x00', &(0x7f0000008380)=':\x02\x00', &(0x7f00000083c0)='[{{)f\x00', &(0x7f0000008400)='(\x00', &(0x7f0000008440)='!/\x00']}, &(0x7f00000085c0)={[&(0x7f00000084c0)='wlan0\x00', &(0x7f0000008500)='\x00', &(0x7f0000008540)='}@\']!,\xb5]\x00', &(0x7f0000008580)=')(#\xe8-\x00']}, 0x1000) r27 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000008600), 0x111040, 0x0) ioctl$TIOCVHANGUP(r27, 0x5437, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000008640)={0x77359400}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r18, &(0x7f0000008780)={&(0x7f0000008680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000008740)={&(0x7f00000086c0)={0x58, r25, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xa4, 0x4b}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r22}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r14}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000087c0)=0xbd) fsconfig$FSCONFIG_CMD_CREATE(r19, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000008800), r10) accept$inet6(r13, &(0x7f0000008840)={0xa, 0x0, 0x0, @remote}, &(0x7f0000008880)=0x1c) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000008980)={&(0x7f00000088c0), 0xc, &(0x7f0000008940)={&(0x7f0000008900)={0x40, 0x1409, 0x1590, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x88040}, 0x24004000) clock_gettime(0x0, &(0x7f0000008a00)={0x0, 0x0}) ppoll(&(0x7f00000089c0)=[{r17, 0xd052}, {r6, 0x8}, {r0, 0x6010}, {r2, 0x1230}, {r21, 0x8}, {r19, 0x6}, {r1, 0x4}, {r24, 0x6}], 0x8, &(0x7f0000008a40)={r28, r29+10000000}, &(0x7f0000008a80)={[0x8000]}, 0x8) r30 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r30, &(0x7f0000008bc0)={&(0x7f0000008ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008b80)={&(0x7f0000008b00)={0x48, r25, 0x100, 0x2, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r26}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7f, 0x5f}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r26}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}]}, 0x48}, 0x1, 0x0, 0x0, 0x34000000}, 0x31) ioctl$PIO_FONTRESET(r9, 0x4b6d, 0x0) r31 = syz_genetlink_get_family_id$gtp(&(0x7f0000008c40), r3) sendmsg$GTP_CMD_DELPDP(r16, &(0x7f0000008d00)={&(0x7f0000008c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x1c, r31, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48890) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000008d40)={'wg1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000008e80)={&(0x7f0000008d80), 0xc, &(0x7f0000008e40)={&(0x7f0000008dc0)={0x78, r25, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r26}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5a2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xb5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x79}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x15}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_MAX_SP={0x5}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) 7m38.663379009s ago: executing program 2 (id=3491): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) r1 = dup(r0) read$FUSE(r1, &(0x7f00000090c0)={0x2020}, 0x2020) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) 7m23.604250987s ago: executing program 32 (id=3491): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) r1 = dup(r0) read$FUSE(r1, &(0x7f00000090c0)={0x2020}, 0x2020) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000040)) 6m29.38161063s ago: executing program 0 (id=3769): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ppoll(&(0x7f0000000200)=[{r0, 0x9218}, {r0, 0x200}], 0x2, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000030, 0x0) 6m26.315135796s ago: executing program 0 (id=3779): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f0000000a00)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x98205e, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x200}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_tables_targets\x00') read$rfkill(r3, &(0x7f0000000440), 0x8) preadv(r3, &(0x7f0000000400)=[{&(0x7f00000014c0)=""/208, 0xd0}], 0x1, 0x4, 0xfffff25a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000001000)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730482a69054680403e2f6aaa04377dbe464aeca9c497af72d6020000009846703d307750f7c0b4c53605bb9be54c6b8cbe67f4cdb6d55eea12a3c3a690be5bc85652a776e6612c7aaf9a3498e4f912b862f0bedd47d29dd900a680adcbb334b7c0130e17d6cf5d07482dcfceb79310b6a1f4a1dc57771d95c41d3fb7434f40ed996c97f9422ff5b12701569bc241124f8fefc2c981bb92f60bc7d092895c52ce9c6d6211b94a362e915306c9d05efff36b3fb75bcfb917fe7390c1e271c9ceb798bd0fdf69a3d19b627f43f30692ad7d34996629b3f615680f76b4beb5c925cfe72a88c9ceb78aa572", 0x134}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000a40), 0x0, 0x80000}], 0x1, 0x404c8c0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket(0x11, 0x3, 0xd3) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0001002abd70009595df250a0000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x62, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x60200, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="899a2f5af3ff"], &(0x7f0000000580)='GPL\x00', 0x7, 0x7e, &(0x7f00000006c0)=""/126, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000007c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x1, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[r3, r3, r3, r3, r3], &(0x7f00000008c0)=[{0x0, 0x2, 0x5}, {0x20000001, 0x5, 0x9}, {0x3, 0x4, 0x7, 0xc}, {0x4, 0x3, 0x3, 0x4}], 0x10, 0x7ff}, 0x94) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f00000009c0)=r9) pwritev(r3, &(0x7f0000000b40)=[{&(0x7f0000003800)="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", 0xfa7}, {&(0x7f0000000a80)="e698f3a46e3b8ca64ebb1edc0abb6c74e215d86538485a40ea12edd3f3a1cf6130e7ae94c0fe4616a256b25a18fc1201713b92bf2c945792bcb76fbdc955c5cb5b3400000000000000064c1568974b", 0x4f}], 0x2, 0x2, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 6m25.999389857s ago: executing program 0 (id=3782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x400c001) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000048000), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x58, 0x0, 0x7, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x58}}, 0x11) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x40094}, 0x20000074) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000090a010100000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b"], 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 6m25.128837852s ago: executing program 0 (id=3783): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x6}]}) openat$kvm(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(r2, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000000c0)='fd', 0x0, 0xffffffffffffffff) r10 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffe, 0xfd, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f00000004c0)="259374c9703db0cfa2dd3b50ec27354968ae1d0917788d96bd880279a870255c1b638994c2392020f9df078c373c832c28f39ed3a7c073fda48672b918f8ddc248c76f8d087a4e5085fab4904b114ba1d022f7d538e427bd917637a89f6459121eadb106eb8533d7241f613767ff8815a042c9d15559fc47d5a0786ae97a7b6265c1eff2258c5b161b7aea66e7cb6c8b2cd7919993c0cdf26f03078e57787b8a46cb9c4d2989cdd373467b4856af2f9e8671a07eb5a6d76198ec4966a7df7d691bd8638868422702e1528f35292c5e3292a7f29cda7ec88095b5264bceb37303fe6a419ae19d7815591abfc266685f05cfa11e9936b2d4fe001e86156f", 0x0, 0xfffffffe, 0x30, 0x2, 0x0}) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=r8, @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0xa090}, 0x2000c800) 6m24.154371024s ago: executing program 0 (id=3788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x10, 0x1403, 0x1, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0xc800}, 0x40880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd4}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000004380)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 6m23.861506275s ago: executing program 0 (id=3789): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ppoll(&(0x7f0000000200)=[{r0, 0x9218}, {r0, 0x200}], 0x2, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000500, 0x0) 6m23.329834744s ago: executing program 33 (id=3789): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ppoll(&(0x7f0000000200)=[{r0, 0x9218}, {r0, 0x200}], 0x2, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000500, 0x0) 5m7.826361566s ago: executing program 3 (id=4093): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x90ff, 0xffffffbc, 0x10, 0x20}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) set_mempolicy(0x4, 0x0, 0xfffffffffffffffd) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x0, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000440), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x3, 0x2, 0x2}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x7fffffff, 0x3], 0x1, 0x8, 0x3}}, @common=@ipv6header={{0x28}, {0x1, 0x26}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x2, 0x6}, {0x3, 0x4, 0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) io_uring_enter(r3, 0x393c, 0xf8ce, 0x72, &(0x7f0000000240)={[0x100]}, 0x8) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fadbdf25010000001400020077673100000000000046b0000000000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fddbdf2501000004060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54214000200776730000000000000000000000000008f980e2a0c038ce2443e2cacc19eabd69ba127de03433efd50b94f689a7a8eda6985e269a9272a58673d557b9ffe07cdaa750ee7847af603c4f76eb64e66404cea78466fe89d94e6d2e0474aa1a328cca7f9864ea8f84b7d4479a549f709c73d16013487366e2a5a11646c9ebebe957bb13ef29a8b07172d2a538912724536983cecefeb2836d69ed39389a2ca96bf9f39ce486c155ede41fe464e562ac1af9883a2d0425a52f660c3c20a7804f2b0fdd1c60e0ffec107bb188670fcee2b4a55095c6ddb4855af87e5cda42155e3cdd8de74cd00655776a6fe8622e9dbab7ff4bd3433417084ccda032b30265a908745d7a05e90cb069d40d7e424951aba12fc2df75db112bfd7750bf7dd2cedba6e8db12022c30f486337812d05cb52a191093b1dede347a48e4c87405bd87287533d1df3b1913e45535e8f"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40c4) 5m7.321331429s ago: executing program 3 (id=4098): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 5m7.20362954s ago: executing program 3 (id=4100): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5309, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(0x3) 5m7.034022405s ago: executing program 3 (id=4102): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2000, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x8, 0x3, 0x0, {0x4fe5781c, 0x2ff, 0x9, 0x31b}}) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x35c, 0x0) 5m5.631755856s ago: executing program 3 (id=4112): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f000077e000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x8, &(0x7f000079e000/0x3000)=nil) preadv(r1, &(0x7f0000001200)=[{&(0x7f0000001640)=""/4097, 0x1001}], 0x1, 0x8, 0x6a76) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x20048080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)={0x34, r6, 0x301, 0x0, 0x0, {0x17}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) 5m2.918405512s ago: executing program 3 (id=4118): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) (async) r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x180}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x180}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x40}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x8, 0x9, 0x9, 0x6, 0xfa11, 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240, @ANYRESHEX=r2], 0x138}, 0x1, 0x0, 0x0, 0x841}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24f300ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c29b1ac1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f05111e9cedf5e0f21f1a8aeefa517ed1705ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de754596e9a07c7718adf0cbdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f862c1e7233c26f73ca24e5e441dd406e136df3a3996865e069f42e87939d653b2c76eb3002d554d24190d68e57a1a67cecf713bfca56b970022e5b08413ead8d96c38ed7dd4ed1b3dd4b80134c99", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528", 0x8}, {&(0x7f0000000380)="863df713b27092133340", 0xa}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799ccea", 0x60}, {&(0x7f0000001000)="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", 0x19c}], 0x4}}], 0x3, 0x4004) (async) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528", 0x8}, {&(0x7f0000000380)="863df713b27092133340", 0xa}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799ccea", 0x60}, {&(0x7f0000001000)="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", 0x19c}], 0x4}}], 0x3, 0x4004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m47.767464484s ago: executing program 34 (id=4118): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) (async) r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x180}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x180}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x40}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x8, 0x9, 0x9, 0x6, 0xfa11, 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240, @ANYRESHEX=r2], 0x138}, 0x1, 0x0, 0x0, 0x841}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24f300ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c29b1ac1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f05111e9cedf5e0f21f1a8aeefa517ed1705ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de754596e9a07c7718adf0cbdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f862c1e7233c26f73ca24e5e441dd406e136df3a3996865e069f42e87939d653b2c76eb3002d554d24190d68e57a1a67cecf713bfca56b970022e5b08413ead8d96c38ed7dd4ed1b3dd4b80134c99", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528", 0x8}, {&(0x7f0000000380)="863df713b27092133340", 0xa}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799ccea", 0x60}, {&(0x7f0000001000)="5e48212599327704ccc5ca940f85ce93d081835a8f8ce527ba414eeb2fac35952374361fa3fe455eae90ef6636e089eeae608c4bb2a0cae5f3d8ebe5294f272023815eacab65c0a92cd792cae6645dcef01758183b1dab679fc8bccc9b2a7c95efda137f6f80e4159ff6295a35f2516454afb609ce2bc852ece0d2234e63a4cfcceb2f628f6425b0b5dd6ba4c20e250c72f658b059079271c6f206a758e87784fd6256d1ee6cd55ea723631572ba4729109fa114f7240bb6776054d1fa9b5c3114debca30e4196223e3f6fcbf715c61e62f3702e1a43c72c114587e1eb727a458aba50fe0da0523b0f243482e33c7af73d072374f04ec75bd199e7357d8d37a60c4b225c0ebb8e8fde86484871015eb8ccda35183959fccdbe3cc8f9f018c70c405d1847d8666a34f86d1f996b42f9ce536100b8d6080f472d2a87a277a0c45baca157f0d578b6ca0e8627819d4d8e5226494474ff573c36caf000e9c52f206013851f2702c83224a7ac58fef0a2f337174f79900af0899ad371ebc5759d1f48b01c962be95456341e280de8aa4e5b46f2ac3256254cdec803cbfe59", 0x19c}], 0x4}}], 0x3, 0x4004) (async) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528", 0x8}, {&(0x7f0000000380)="863df713b27092133340", 0xa}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799ccea", 0x60}, {&(0x7f0000001000)="5e48212599327704ccc5ca940f85ce93d081835a8f8ce527ba414eeb2fac35952374361fa3fe455eae90ef6636e089eeae608c4bb2a0cae5f3d8ebe5294f272023815eacab65c0a92cd792cae6645dcef01758183b1dab679fc8bccc9b2a7c95efda137f6f80e4159ff6295a35f2516454afb609ce2bc852ece0d2234e63a4cfcceb2f628f6425b0b5dd6ba4c20e250c72f658b059079271c6f206a758e87784fd6256d1ee6cd55ea723631572ba4729109fa114f7240bb6776054d1fa9b5c3114debca30e4196223e3f6fcbf715c61e62f3702e1a43c72c114587e1eb727a458aba50fe0da0523b0f243482e33c7af73d072374f04ec75bd199e7357d8d37a60c4b225c0ebb8e8fde86484871015eb8ccda35183959fccdbe3cc8f9f018c70c405d1847d8666a34f86d1f996b42f9ce536100b8d6080f472d2a87a277a0c45baca157f0d578b6ca0e8627819d4d8e5226494474ff573c36caf000e9c52f206013851f2702c83224a7ac58fef0a2f337174f79900af0899ad371ebc5759d1f48b01c962be95456341e280de8aa4e5b46f2ac3256254cdec803cbfe59", 0x19c}], 0x4}}], 0x3, 0x4004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11.216260593s ago: executing program 1 (id=5295): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x9}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x3, 0x8, 0x81, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x101, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x6, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x3, 0x808, 0x2, 0x9, 0x1, 0x4, 0x2, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0xffffffff, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x29a, 0x5, 0x0, 0xfffffffa, 0x4, 0x2, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000000, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0x8001, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x10001, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x2003], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x8001, 0x2, 0x7, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x1, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x9b77, 0x9, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x4, 0x1000, 0x7f, 0x5, 0x3fa8, 0x0, 0x0, 0x9, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x7, 0x800, 0xa80a, 0x65f413f9, 0x2, 0x8, 0x8a8, 0x2, 0x40, 0x3, 0x2, 0x84, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0x1, 0x7, 0xe, 0x2, 0xe, 0xf, 0x173, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) 10.903454398s ago: executing program 1 (id=5296): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xe}, 0x8) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) r8 = syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb829785b7fc71", 0xa2, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="014b7669e25e3028d356cfc640adb7f2d0c40bab814675cd9079f5b298389652da8a706d2a568cd46a89d23f9cfb08ce303fe26e1512e06cac54b2f3e1d86a91f92047849549c49fb7cba18737184dc50489e461155a45a0be2d4bb22f7f9f077a9bf476a238a1414465b8fd8cd074a8c6a9d7f4824d102c23c6e85a90b8d32f23421b8c4cdb314a206dc2bccad0cac2d0de059b3bc770ac6991e9d271da969af9888535b788a917df41ef3ffe7b0fd6d616c766bc4e57c9699724ffaaf6284f8656dd8943899bfdb1d0f3f93a213163854af58f130b345b40bc96f97d6a5448f04317cf4f3e6ff0cbe624c922645e8deb2302c95e9ff1d6739c40a28dbeacaff57bceb250334cf85388da7bef29cd236e52372dbb38556bdcf2ffefde403b8ddbb467fe1ffda45a607dc2987e8fdf8b6c18037b4321cd9dc3377a7a24a8337adfb00a232aff31e18e9f6136c86dacaf835a06bcb956e514415e338b20c0d5d67117e4294bf9c3d96312f2e9d8aa9d154980c0c6adc136df45eb0b5510c4a6cfd2ad65e2cc07fdc641ca70c30463538fba95f1c57190f5a6ea155185f62448dc5a1b8875268a6aa6d5fd8e5bae55a2fbfaeec5060b0238fa0ddee4d4c116ba14faf4e15724d98671b3fc733e1be4fbc9211a721041c7f14ffe645b8715467b6227de4fd74e347d09a0990e87d79245a30fdd7e3e73a0037d298b11caffd5e61ae65057d7ae147bb427d638b02fb2bf641629d6108b23d12e9029dd3c333d3cc50989e1e10a565f53cc135fab79d20b06de5c68a82f9644a67330c4b41e845cae815bcdbb3e69ae3fc137c67ca3d846ecf7d72c28c652fbb37913565ea8f3f5adfbfac3e91be97eb96b10247439d7b3a69a7cc36570c1c7535359c58b226ffd78a0baeeeb1d3a95a168182ba8511993d70fb51c7af5ac74a91af4be529c6ff54cb0021a860f352fac728b9c889d44ea4d653f7d9dd06b2b29d421b0beda4e5d1d96ee64673fad447d5fc6db71a536bf80bdd2e963a43405a9379c5704f6ef141f0b3da6beec731112bcc0202558e0094c402d7a8b9ebee1e69b896b80616d2d3f2b951236c61db7e3be19cb10460eacbc30aeb6142506dee44c4bd5e3a6580145baf4b21a9a272182ff8422185e65a1c20ffe18f4ec3fb29f0f620cdc15ce1bfb4af62cb8e69e860f8d97fae6187c1147d184252c5a303f22db02da543b4f883b68c5897c5b134b4e3c548f4687751664ff33287f2171555aab6bff02b475658e5a027be263151b27d116f2441a02fa6a90a335310cead758d8e2924f51849472871ad9467a268d02497b2a87bf481e78a6b6bfd4dcf54a700aa517bc49731a5c644a69c89793458e3bc70a88687864a79e57b51229768c89686b1cec364b06912e23b4b56ba2fa4774a7605b67497eceb4fc03174ee119fc270e45174aa0bc6367c8a3a0160964b6e429e51ad50469282df19c1e38ff17c4c2a3ee8d260023a6b11205daedac7792e1bf8af0c7a22123602d04f4e18c761fe75b0b385edac7c9a05ed66629694853381eeae36f5b712bd8c9359f58ea1bb09b9e62f9bbfe96f798295bd441d6e566f814b20906fbb49e653ed515a02d41db771a90c384c43a1fede01433d680c4226d0a1679d5c07b43eac3abaa79a8bc8f5895ca10c877b07cc55e5f749bbb2a99909f5f362797718b4ab442a09975da06159fdad27ab5f619736a9fdabd5baeb5812f195194fc19b5d828afd98a5ee699e801522cf866f004618c42d24cbe17f4a294146d05c92315474b9ea961df4b153b33fafcca5d962fd0cf83134d7e8d8b88c496e35b35ed22a3e566730c413238d794e8c068332200169259dbcb7d7d778b9d1493c3e581e1789a75a90ff356af2e38c481dfdbc12d6106ecf168f39e32e007806418672608f71aea74250a4fe4dda49e4b519d9a9dc0ebfffbbd10cedac967afa80868bbc7a64f3d81da1fba31b2cdf7596207406f931858703dc2b0415f9a32ee282586491e06d501728920d4857ae72c48f1bcc63a167b9149ffb74927527ce28cd9bf8100ea8abaa5dadd069b6bf39b86afd2d950d4319eb3e4c4165aa5e561479019f64d9beac14b13b559208132cec6f98b73b8540b13eea586b7afda456d2ef2d081a897bd4fbd2417f0d735e365f29a3cab2f209119d0efe2949165bab944e8d63de58fa35f0898ee9831a081e0577691526c0caefe0652cf6e00e21d5038cddbc057cca482515707e6e2a78a4bdfca77b0052c50e14b0a3acb578f932ccb5ea9762a641e3bd281efc640261ecb04d5cb8ed19bbb007e89c1340dc2be7450bbc5c88f5d0938fbd5d5907eb7f4d6a92b0e6dd9ab292b2e51b29bf13dbebefb842aa09c980c3afcb3e2979c6bd291c8f0ee26a8f46cff6abbdc58f36f5e5687ba1c958f6fb6d37c65af53e8894c38e123d157ab5cbecb908a41d51a4d74f9963a4e381826e9d2ccf5c03b30eb68692681af06d761cec0420f35236437fa078f423d753763ff84bbaa34de4d79ea0de4de6f96df080c580ae8bda88f366b0afc6325876072c02b8faaf5f7346b37346e3b0249a7856a61bab74d6fc74bf115dd712b6a7a1ce6385cedebb870520e15b729d23c4c9a9ff141694ca97af614901503dfbffba3d6b1c1972075fe518b5d89618e7a46ad786cb9600d778ad7097a01f2f76e73380fc741b1c299c8f58227a872bbdb5ae838d4b5784c602d934bb8bc2a0d86084f55391e8401e0d4b5be9d9abdb18ba78989742d9ae6c29f1dcfeaf8eef8e6419269920aba9fb9fd92bbaff32257dd808e6b74e34a4079bb973254a09dea77a6e8de99eb4bbcf3a212a7d701d7aae150719627947c361fd663da908faccbce0cad62414962e4bb9e4b6343f94b08778cb2f5488473f45c31c95c76e7a3606f806ac2b133e7ee581382d2f2bacf3d765b9111731053c1509d1acd7fc4873150e49146b57570106ef0f91ab70f68e5e4be862fd4dde3a49a92b5c03d0887aa7ad40ae95d15595a23de5d5b062a51ae0fdf8dbca6a1a32cb1dbb90ad0465f9f730ae90d8004a7f83f180bb861f09344647b213616191120c27be646bbf5833313a8ff6b8a2cbd5e2e07b8de2b8233da12b35831a144584f587067e289fc4434dbf0c6c45cf61c6027e8bde9d3c0c47cc981fc92e71bcbeead7cbb060c6ab8eae63a8ac76649b8dabe30b06ddb80ae0ac423d0130ceb9de7ad3061d1a35b2b7846795dab92da7613d28ba8f4a2807dd273c279accdfd26bbd72afca2ebfd15e097e6438671ae33c6dce57d013d9ab8fb0bcc3f35533c74bc08a6887c682d0807569d4563dd68d08ff13b0583f300748e08b1b35288c5ab9475a6eb01a9f94cde1c47bd0aea7f12c2f1137dc3a51c781d8a83e163f345d301e95a4a68576a50d90e82a0b84b51979b611d13ed790b49a946f9754bc8385217c08b092095d21bfdbf806159930304c9901589fbfee5c7c07fad47f1adf47867d8251c48f32e62f3d6b68a0af23964ce4eaafbc56beb8abf7a8968327dbc0494eafff237eac6b833f00290c3d398de64b7a3fee3ae7e269444cf725f7ddf961908517c6929068d351314780a3190ec7ebb63effe6b600cb71fd002d2d82dc039b3f05a93ed91796414062b0bb6889ddfb869e5ac950e54f2612652b76abbeeac827418d1a2db8530a2f4aad8209ef8685f1a4e5f7d40d7ea58c7336cf8599ff065541596139fcc429bb514f59beba96632c0092efaf402c36ace3c068e5d746ef3bb6ff3aa487de79ef4459296db332b156c2c3c2227a8c7349f9313c99f12e7387bea92b2013c998ed83f2ac03948c108b9a5c12ffdb7ffbc46b0363776a89f5c45d5c704869042948a97a406064e9c453681237345dc72d2637331ab966615aa07b5cb0ccb8afec96396e93725b544acf5b753287e0b1cae1138a6dde4b8a1e09deabad832b2393d443bfd8b3a3ec521c030a7ec5de09fe96c451a4e8ae045ee234578fbaf94e8a8e5945fc9f58de82170d92e53b10e43e51099122782774a5c7470f1174ef83b2cebedb9012395acdd32e2f35150e649537208b7c3be86a599c0ecf1bba9b81e64b673c6466f6d717b0e48b817917240041562e2f2c2a781902f62f52b0fd499aaae54aeb5c224505470bcad8e634488b4de2a99cf0b983cd29de895692b2ffe647903717c992e04233effde932790454b412bc8f06bcdbd67f3bb4eba7cdbd3477a509ab54a3899b2d9097ae37ca31ac575ed8beada0837f6909ed98dc31eeaf5721cbe834231c732bdf52ed75674d1f73faf5f22893d75cfb6164c26447ccb9d0f6bcba9e2ae48b66a99e99f9ff232") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000011c0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_generic(r5, &(0x7f00000028c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000015c0)={0x12c4, 0x1e, 0x400, 0x70bd28, 0x25dfdbfb, {0xf}, [@nested={0x4, 0x12e}, @generic="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", @generic="1d550bdaa8e72eafe6291b2dfebc83fb57c251bad314a9cf570642f5382c5bf8e650ebb75255f73bb31ea81f17008ed6e8e3a3f2737c5de492ed49a2ccf6a6f4193d790bd6f67610eeccf1a7e40b3872107fca40bbea1e0021f20c83d48bd444f160e57534c19b4fa2a667ea9889bd88ab125a45e9e36894c353c49d267a1e76420625d2361ffe", @nested={0xbf, 0x3b, 0x0, 0x1, [@typed={0x6, 0x9a, 0x0, 0x0, @str=')\x00'}, @typed={0x8, 0x1d, 0x0, 0x0, @pid=r8}, @generic="f40b72021ed77df534e8dff6feac10c4957969f86be3a92cafdfa6250f100e94888aa9651d46ec604b426be3fd9fb64253280b63d35f97769355debd718bf5d2a9757c997459baa7b53a209b7358dd140715f5a3c4f977383eb33c6c66b1d6f36217978c5a1fe4aa3efde30f06034aeed1f2781c442f57c7bceae30a164813a627f7ea2443234e75e326b264aa763fe0b85c578d6b1243268b9334ff41fc14eeed61d621ffc5f002e5e132"]}, @nested={0xe9, 0x6e, 0x0, 0x1, [@generic="d07dd1d7c6c789ab39d31da1dd0586b2c3fc7617425394fc658a3b91d0fcba262adb3a8cee6ac47c12d0f995a05e82bcdc1b2d4ba150c6dadeedbfec7ed39a84a5298e70f37285255ebdba3b140b589bec086db6e691e400"/101, @nested={0x4, 0xc4}, @nested={0x4, 0x14a}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x2}, @generic="3cee8c9c04f49c2c55435a3f003ea5954b65915c8f38deb04d14b4db673118cc58f94e021d868ec673f4df80de08b7ac44a29e1dbeee9b998908cdea5c15262c64cfebd53c0fef1e4a8f92ff0c70f4163b58f18c60f8c95f7cf6081d93bc23fb736952b897437af6", @typed={0x8, 0x10e, 0x0, 0x0, @uid=r9}]}, @typed={0x14, 0x117, 0x0, 0x0, @ipv6=@loopback}, @nested={0x8, 0xb2, 0x0, 0x1, [@nested={0x4, 0x32}]}, @generic="d6955d5c331c9c131a3337f8ac0ab66ad8fc00e3dfbf30", @generic="ff493c5d30bc24ecaaf606d8801139ea44c6ce412d4c3705f4902b39361df57a5b79299b835b0225d923737b9a7b71535cc50c93e44a44a00bb49da1a5cb8cd01930faff"]}, 0x12c4}, 0x1, 0x0, 0x0, 0x4810}, 0x4) 9.199176307s ago: executing program 5 (id=5302): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x6, 0x2, 0xfffffffd) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x300, 0x3, 0xfffffffffffffffd, 0x0, 0x1000081, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc1, 0xa0010000000000, 0x3db4, 0x7fffffff, 0x400}, 0x0, 0x0) 8.139286704s ago: executing program 1 (id=5306): syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="10000000000000"], 0x10}], 0x1}, 0x40040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902"], 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x2) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x6, 0xc052) write$UHID_DESTROY(r4, &(0x7f0000000040), 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800"]) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) socket$nl_netfilter(0x10, 0x3, 0xc) 7.886830662s ago: executing program 5 (id=5308): socket$inet6_sctp(0xa, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c1f00001d00010000000005000000000a0010000100000000000000"], 0x1c}}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00fa00", @ANYRES16=r4, @ANYBLOB="01df22bd700003000000890000000a000300", @ANYRES32=r6, @ANYBLOB="10001d800c00008006000500f0000000"], 0x2c}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @loopback, 0x4}, 0x1c, 0x0}}], 0x1, 0x40008c1) openat(0xffffffffffffff9c, 0x0, 0x10182, 0x2c4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b37, &(0x7f0000000100)={'wlan1\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = syz_io_uring_setup(0x1be3, &(0x7f0000000140)={0x0, 0xab89, 0x1, 0x2, 0xd3}, &(0x7f0000000280), &(0x7f00000002c0)) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7496, 0x800, 0x3, 0x20002f9, 0x0, r8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet(0x2, 0x80001, 0x84) 7.465988542s ago: executing program 6 (id=5310): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0ae310117ff3a89d93cd97752ac33e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24f300ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c29b1ac1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f05111e9cedf5e0f21f1a8aeefa517ed1705ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de754596e9a07c7718adf0cbdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f862c1e7233c26f73ca24e5e441dd406e136df3a3996865e069f42e87939d653b2c76eb3002d554d24190d68e57a1a67cecf713bfca56b970022e5b08413ead8d96c38ed7dd4ed1b3dd4b80134c99", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528", 0x8}, {&(0x7f0000000380)="863df713b27092133340", 0xa}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799ccea", 0x60}, {&(0x7f0000001000)="5e48212599327704ccc5ca940f85ce93d081835a8f8ce527ba414eeb2fac35952374361fa3fe455eae90ef6636e089eeae608c4bb2a0cae5f3d8ebe5294f272023815eacab65c0a92cd792cae6645dcef01758183b1dab679fc8bccc9b2a7c95efda137f6f80e4159ff6295a35f2516454afb609ce2bc852ece0d2234e63a4cfcceb2f628f6425b0b5dd6ba4c20e250c72f658b059079271c6f206a758e87784fd6256d1ee6cd55ea723631572ba4729109fa114f7240bb6776054d1fa9b5c3114debca30e4196223e3f6fcbf715c61e62f3702e1a43c72c114587e1eb727a458aba50fe0da0523b0f243482e33c7af73d072374f04ec75bd199e7357d8d37a60c4b225c0ebb8e8fde86484871015eb8ccda35183959fccdbe3cc8f9f018c70c405d1847d8666a34f86d1f996b42f9ce536100b8d6080f472d2a87a277a0c45baca157f0d578b6ca0e8627819d4d8e5226494474ff573c36caf000e9c52f206013851f2702c83224a7ac58fef0a2f337174f79900af0899ad371ebc5759d1f48b01c962be95456341e280de8aa4e5b46f2ac3256254cdec803cbfe59", 0x19c}], 0x4}}], 0x3, 0x4004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 6.964962568s ago: executing program 4 (id=5312): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x40201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f00000002c0)=[@increfs, @dead_binder_done, @free_buffer], 0x0, 0x0, 0x0}) (async, rerun: 32) dup3(r4, r3, 0x0) (rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x0, 0x0, 0x0}) (async) ppoll(&(0x7f0000000540), 0x2, 0x0, 0x0, 0x23) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89, 0x0, &(0x7f00000005c0)={@ptr={0x70742a85, 0x1000, 0x0, 0x0, 0xfffffffffffffffd, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0xb}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="0f070fefaa4e000f320f01c9ba400066ed0f320f06646f0f09dace", 0x1b}], 0x1, 0xe8, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r7, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161281, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) (async) r9 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000001c0)={0xd, @win={{0x7, 0x7, 0x5, 0xfffffffa}, 0x3, 0x6, 0x0, 0x7, 0x0, 0x3a}}) (async, rerun: 64) pselect6(0x40, &(0x7f0000000540)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x500000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 6.761984205s ago: executing program 4 (id=5314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3b94, &(0x7f0000000180)={0x48}) 6.404132395s ago: executing program 4 (id=5315): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902120001049570810904006641f392ff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f00000001c0)='\xe3\xc3\t\x1d6\xc5\xdc\x00\xe5\x143\xa0i`\x83\xc7\xa1\x1f\x8e\xab\x14}\x98-\xc3\x88\xb1\x15(\x88YH/\xa6\x865\xb3\xc7\xd65\x02\x1b\xcen\x86};\x1d%\xb6\xd6\xb2\xeel6') openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xfffffffffffffe01, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x800, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r0 = socket$inet6(0xa, 0x4, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xbf64, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff8}, 0x1c) syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x105140) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x9, 0x2000, 0x0, 0x0}, {0x157, 0x0, 0x0, 0x0}], 0x2}) 5.934784893s ago: executing program 5 (id=5316): r0 = inotify_init() r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x34d}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fsetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', &(0x7f0000000180)='+^*.{[[,^&}\x00', 0xc, 0x3) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471"], 0x0) 5.311487326s ago: executing program 7 (id=5317): r0 = socket(0x22, 0x2, 0xfffffffa) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x20, @private=0xa010102}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="0f", 0x1}], 0x1}}], 0x1, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r2}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000001800000008000000600000000000000", @ANYRES64=r1, @ANYBLOB="0200008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r4], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, &(0x7f0000000280)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000440)="b00f07ff509d554958c9dfbed7960b1172f661d9ed0d301b03e507d78634f204dc92fa555583d62ca453c82de536c0b2c12c4d1f50f18cee1a3aea505a42564d3afdc72d0319527758f4c3ecd200"/92, &(0x7f0000000680)=""/151}, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2e00000018000000", @ANYRES32, @ANYRES8=r3, @ANYRES64, @ANYBLOB, @ANYBLOB="fd6d2248ab7d58785059ee6aee401c6eb07df26c655b7bf694fcb3aa95bee0e99b4a84904d9279364960be6ecbd2e540f5c3cd5f6fb52c7dff1bfa57039e957797ccaf2a579efedfc9fe598399599c055c5e413130dc394274ddf795675fb33dee82e43542a30bca3ad53b7c7b612b396f6152e901b92f50da260eeba7dace0e552a6b05a46c95f6453b45ad63b6f79efae386083e8aefc5299aea4b5219a04ac802b5255d219f036f62b20e84df7489b067fd08693ebd8290078a111eaf88e2e161de8f5aab508f3e3b10d45fd3"], 0x20) 5.076380211s ago: executing program 1 (id=5318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.334060995s ago: executing program 6 (id=5319): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) fcntl$setstatus(r0, 0x4, 0x106800) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, &(0x7f0000000100)="0500", 0x2) write$char_usb(r3, &(0x7f0000000340)="f4bc7f", 0x3) syz_usb_disconnect(r1) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) r5 = gettid() process_vm_readv(r5, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/209}], 0x2, &(0x7f0000000040)=[{0xffffffffffffffff, 0xa}, {&(0x7f0000000140)=""/88, 0xbc}], 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x80000001, 0x200000) landlock_restrict_self(r4, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, 0x0) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x400, 0x60a2fc09a0a8fb65) readv(r9, &(0x7f0000000400)=[{&(0x7f0000004900)=""/4083, 0xff3}], 0x1) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000200)={0x8, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x110) 4.33339947s ago: executing program 7 (id=5320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000440)=[{0x0}, {&(0x7f00000002c0)=""/129, 0x81}], 0x2) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000010080001000100"], 0x1c}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c011}, 0x30000000) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) (async) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x7f, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f906, 0x0, '\x00', @ptr=0x4}}) close(0x4) (async) socket$l2tp(0x2, 0x2, 0x73) 4.00681192s ago: executing program 5 (id=5321): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029"], 0x30}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x10, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x8001) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140), 0x300) r3 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x23, 0x34, {0x34, 0x22, "57fbb743f2860adc3071dbda8accb1e08e76039c2aabbef9225db36a04c6f6791b78f1191c4f2013006c4938708a4fe7d73f"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1029}}}, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)={0x20, 0x14, 0xcc, "b7afd80a3e1ece56109b0950a9c95937e9c12cccae30b98c103f40ac8196c6e7e30a5ffa07276b8ef878f2f95ff7518ef0d34b6691b3e12b5592a1ccefb07582199998c412563ed3711e473ed4d5ab240f803e44474ad314501fbda9285d33927522b99521fac103bf26bf1ec907ee2e3c637d8006b5b0bf6fbde40d5662909e3a4e6eedecc0adcf7e8ccf8c39e6adfc90e3ce249ae4d05c4c67f0b36b1e015a2a6ef9a1c40a79af9343714c696f766e7be68113461377faa4aa0d6b5cac9614207a0d118d23f9c2e4caefd1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000380)={0xc0, 0xa1, 0x4}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "21af26cf1d78f4121a55aad2dac48549e767cb33e53a4565f8a6bcaf2399991ee93d2058f94f0807d6416bcf161091"}}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, {0x9, 0x21, 0xff}, {{{0x9, 0x5, 0x81, 0x3, 0x220, 0x0, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x4, 0x6, 0x5}}]}}}]}}]}}, 0x0) 3.54727902s ago: executing program 6 (id=5322): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYBLOB="010027bd7000000000000c000000200001801400020076657468315f746f5f62617461647600080003000200000014000380100003"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x804) mmap(&(0x7f000047f000/0x3000)=nil, 0x3000, 0xb635773f05ebbeef, 0x30, 0xffffffffffffffff, 0x1000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100037042dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8304040000000000300012800b0001006772657461700000200002800400120006000200070000000500130000872a6ea6a97f02452b0000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x1006, 0x4, 0x8, 0x7ffbffff}]}) sysinfo(&(0x7f0000000f80)=""/4096) r3 = dup(0xffffffffffffffff) bind$inet(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x2}) 3.347761253s ago: executing program 6 (id=5323): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f0000000000)=@framed={{}, [@map_idx={0x18, 0x9}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bind$alg(r1, &(0x7f0000000780)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x14000}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000800)={0x28, 0x12, 0x1, 0x100000, 0x25dfdbfe, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}, @typed={0x6, 0x35, 0x0, 0x0, @binary="a417"}]}]}, 0x28}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x80000) splice(r5, 0x0, r0, 0x0, 0x9, 0x1200000000000000) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0xa0000) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x1000) pipe(&(0x7f0000000040)) (async) socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f0000000000)=@framed={{}, [@map_idx={0x18, 0x9}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) (async) bind$alg(r1, &(0x7f0000000780)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2042, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x14000}) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000800)={0x28, 0x12, 0x1, 0x100000, 0x25dfdbfe, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}, @typed={0x6, 0x35, 0x0, 0x0, @binary="a417"}]}]}, 0x28}], 0x1}, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) splice(r5, 0x0, r0, 0x0, 0x9, 0x1200000000000000) (async) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0xa0000) (async) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x1000) (async) 3.12724219s ago: executing program 4 (id=5324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01b8040000000000480012800b0001006772657461700000380002800400120008001400fbffffff05000a000100000008000700ac14143605001600010000000500160001000000060011004e23000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x78}}, 0x0) flock(r0, 0xf) 3.106025716s ago: executing program 4 (id=5325): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={r4, 0xa, 0xffffffffffff8067, 0x2d}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1704b45adbde", @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfc, 0x1, 0x0, @loopback, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x2}}}}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000140)={0x0, 0x20, [0x10, 0x79, 0x31c, 0xc, 0x4, 0xa, 0x3ff, 0x4]}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) shutdown(r7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x82, &(0x7f0000000200), 0x8) setsockopt$sock_timeval(r6, 0x1, 0x57, &(0x7f0000000040)={0x77359400}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 3.098105089s ago: executing program 6 (id=5326): ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0x404, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x4, 0x4, 0x1}], 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}], 0x4d}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.904541011s ago: executing program 6 (id=5327): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0xdc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x160, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.69499457s ago: executing program 1 (id=5328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) r5 = dup3(r4, r3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r8 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r8, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r7, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x7, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r9 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0xffffffff], [0x800004, 0x100001, 0x8000], [0x91, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000]], '\x00', [{0xfffffffc, 0xfffffffe}, {}, {}, {0x9, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x370}], '\x00', 0x301}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r11, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000300)="8fa87887fda2460f2332b9390b0000b8f41d0000ba000000000f30410f01c4f30f09c4c2c0f2640b0dc744240000400000c744240200000000c7442406000000000f0114240f20d835200000000f22d8c483791d3da447000005b9a5030000b8f9000000ba000000000f30", 0x6b}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.517672105s ago: executing program 1 (id=5329): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0ae310117ff3a89d93cd97752ac33e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528", 0x8}, {&(0x7f0000000380)="863df713b27092133340", 0xa}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a96ffc62c34db799ccea", 0x60}, {&(0x7f0000001000)="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", 0x19c}], 0x4}}], 0x3, 0x4004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 1.583831098s ago: executing program 5 (id=5330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3ff, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0xfffffffffffffffd, 0x7, 0xefffffffffffffff, 0x2000000000000, 0x0, 0x2000000, 0xfffffffffffffffe, 0x1c, 0x0, 0xffffffffffffffff, 0x7], 0x0, 0x41901}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x80, 0xd, 0x25, '\x00', 0x7fff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x2, 0x5a, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x1, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}, @hid_hid={0x9, 0x21, 0x7, 0x5a, 0x1, {0x22, 0xd46}}], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x1, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1e, 0xf814}]}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x8, &(0x7f0000001880)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0xb}]}, 0x1, [{0x0, 0x0}]}) 1.20410657s ago: executing program 7 (id=5331): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2711, @host}, 0xfffffddb) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x400, 0x5, 0x0, 0x8, 0x4}, &(0x7f0000000100)=0x14) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x48001, 0x0, 0x9, 0x0, 0x81, 0xfa11, 0xffffffff}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000001fc0)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/116, 0x74}], 0x1, &(0x7f0000000340)=""/36, 0x24}, 0x3c}, {{&(0x7f0000001d40)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/10, 0xa}, {&(0x7f00000005c0)}, {&(0x7f0000002140)=""/220, 0xdc}, {&(0x7f0000000700)=""/236, 0xec}, {&(0x7f0000000400)=""/31, 0x1f}, {&(0x7f0000000840)=""/68, 0x44}, {&(0x7f00000008c0)=""/4, 0x4}, {&(0x7f0000000900)=""/102, 0x66}], 0x9, &(0x7f0000000a40)=""/179, 0xb3}, 0x1}, {{&(0x7f0000000b00)=@xdp, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/93, 0x5d}, {&(0x7f0000001c00)=""/72, 0x48}, {&(0x7f0000001c80)=""/33, 0x21}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000002080)=""/163, 0xa3}, {&(0x7f0000001e00)=""/141, 0x8d}], 0x7, &(0x7f0000001f40)=""/120, 0x78}, 0x3}], 0x3, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x81, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) 294.31965ms ago: executing program 7 (id=5332): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="2b00008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x806}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@rand_addr=0x64010100, @multicast2=0xe0000300, 0x0, "02e698451697efe40b11ee1db06e9264f7d866b1970548fc3c7b00", 0x8000, 0x6, 0x1, 0x7fff}, 0x3c) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539e01177d3d458dd4992861ac00000000000000dabe00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 203.967417ms ago: executing program 7 (id=5333): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604, 0x0, 0x0, 0xfffffffd}, 0xfffffffffffffef4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {}, [@RTA_OIF={0x4}]}, 0x24}}, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) 103.412215ms ago: executing program 7 (id=5334): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2085396d0102030109021b00010001000b0904c80201030102030905fbff"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x6, 0x7ff00003}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x1004000, &(0x7f00000008c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,max_read=0x0000000000000002,max_read=0xfffffffffffffffa,default_permissions,rootcontext=system_u,fowner<', @ANYRESDEC, @ANYBLOB=',obj_type=#/,,fsuuid=\x00e21e3e8-8aca-kD5c-70dc-93a9851b,subj_type=&[.,euid>', @ANYRESDEC=r7, @ANYBLOB=',smackfsdef=/dev/dri/card#\x00,uid=', @ANYRESDEC, @ANYBLOB="2cf9ab0a1018b32e06cbf4f4db5ac201"]) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000680)={r5, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8, 0x0, 0x80]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000400)={&(0x7f0000000240), 0x10, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000004a020000ae0b000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0220008001000000020000e000004000ec445f35e300c275"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 90.234537ms ago: executing program 5 (id=5335): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90ace5d6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x101201, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x100001, 0x80001) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000000)={0x4, r7}) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x2e8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0xfffffffffffffffe, 0x5, 0x5, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r3, 0x0, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}, {{0x5, 0x1, 0xe, 0x9, 0x9, 0x2, {0x2, 0x5, 0xe9, 0x2000005, 0x83, 0x4, 0x101, 0x8, 0x4, 0xc000, 0x1, r2, r3, 0x6, 0xd}}, {0x3, 0xbc37, 0xbc, 0x6, ':]\xfa\x9b\xa5<\x99\xe9u3^\"\xea\xa90?J\xd4\xd0i\xafm\xf5\x9d\x93\xae\xe5\x87@\xc1\xad\v\t\xfa\xff\x00\x00\x00\x00\x00\x00\x00\xda\xff\xaf\x86&\xa9(%&\x84R~\x157=#;\xb1#W\x10+w\x10\x7f\xa7\xe4\xc6\xdd_\xebm\xfbf\xde\t\x951UX\xe6\xbaJ\xee\x9d\x19vx\xa8\xb7a\reOz\x9f\xed\xf0\n\xe0\xe4\x01\xcf\xd4\x7f\vy\xde\xeb\x84\xae\x0e\xb5\xbc\xd5\x00\xbc\xd8\xd9\xfd\xcf\xa8j\b1\xf6\xa3|\x87\xfd\x93z f\xcby\x82\xe0\r\x1c\xebe\xea\xb7\x9b\xc4\xcd3\xca\xc8\xb0\xa0\xf9\n\x80_\xb5\xcb\xbb\x98V\xeelJ]\x1dv\x9a*\x1c\xa9\x1a\xbd\b\xe60\x92\xb2\xa0\xa1=\xa5\x87U\x8e\x19'}}, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x101, {0x0, 0x8000, 0x4, 0x3, 0x2, 0x8, 0xffffffff, 0x1ff, 0x200, 0x8000, 0x7, r2, r3, 0x3, 0x4}}, {0x9, 0x8, 0x1a, 0x275d, '\xb4 y_\x8e\xdff\xdc\x00\xf9N\xff\x01\x00\x00\x00\x00\x00\x00G\xdb\x7f\x91\r\x16\x84'}}]}, 0x0, 0x0, 0x0}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000040)={0x2f, 0x6, 0x0, {0x6, 0x4, 0x6, 0x0, '%\'\'@-\x00'}}, 0x2f) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 0s ago: executing program 4 (id=5336): mkdirat(0xffffffffffffff9c, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) readv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}], 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = openat$pfkey(0xffffff9c, &(0x7f00000000c0), 0xda280, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) kernel console output (not intermixed with test programs): 341][ T3345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.642344][ T3345] usb 6-1: config 0 descriptor?? [ 1399.988473][ T3345] usb 6-1: USB disconnect, device number 65 [ 1400.637693][T29159] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1402.187543][ T3345] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1402.359919][ T3345] usb 6-1: config index 0 descriptor too short (expected 149, got 148) [ 1402.369303][ T3345] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.387560][ T3345] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1402.454748][ T3345] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1402.471488][ T3345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1402.480268][ T3345] usb 6-1: SerialNumber: syz [ 1402.506210][ T3345] usb 6-1: 0:2 : does not exist [ 1402.520414][T20784] macvlan0: entered promiscuous mode [ 1402.526103][T20784] macvlan0: entered allmulticast mode [ 1402.560614][T20784] bond3: (slave macvlan0): Opening slave failed [ 1402.800059][T31537] usb 6-1: USB disconnect, device number 66 [ 1402.845699][T20851] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4906'. [ 1403.400341][T16282] hid-generic 0000:0000:0003.0085: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1403.647737][T16282] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1403.810439][T16282] usb 7-1: config 0 has no interfaces? [ 1403.816428][T16282] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1403.840334][T16282] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.923493][T16282] usb 7-1: config 0 descriptor?? [ 1404.331026][ T6308] usb 7-1: USB disconnect, device number 47 [ 1404.464120][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4913'. [ 1404.478010][T20918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4913'. [ 1404.633979][T20923] FAULT_INJECTION: forcing a failure. [ 1404.633979][T20923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.649451][T20920] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4912'. [ 1404.663896][T20923] CPU: 1 UID: 0 PID: 20923 Comm: syz.1.4914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1404.663927][T20923] Tainted: [L]=SOFTLOCKUP [ 1404.663933][T20923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1404.663940][T20923] Call Trace: [ 1404.663945][T20923] [ 1404.663951][T20923] dump_stack_lvl+0xe8/0x150 [ 1404.663969][T20923] should_fail_ex+0x414/0x560 [ 1404.663983][T20923] _copy_from_user+0x2d/0xb0 [ 1404.664000][T20923] ip_tunnel_parm_from_user+0xa2/0x380 [ 1404.664016][T20923] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 1404.664032][T20923] ? rcu_is_watching+0x15/0xb0 [ 1404.664045][T20923] ? trace_contention_end+0x39/0x100 [ 1404.664060][T20923] ip_tunnel_siocdevprivate+0x99/0x180 [ 1404.664074][T20923] ? do_vfs_ioctl+0xbe8/0x1430 [ 1404.664084][T20923] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 1404.664102][T20923] ? netdev_name_node_lookup+0xdf/0x120 [ 1404.664118][T20923] dev_ifsioc+0xb57/0xf00 [ 1404.664134][T20923] dev_ioctl+0x84c/0x1150 [ 1404.664147][T20923] sock_ioctl+0x719/0x790 [ 1404.664163][T20923] ? __pfx_sock_ioctl+0x10/0x10 [ 1404.664177][T20923] ? __fget_files+0x3a0/0x420 [ 1404.664188][T20923] ? __fget_files+0x2a/0x420 [ 1404.664210][T20923] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1404.664222][T20923] ? __pfx_sock_ioctl+0x10/0x10 [ 1404.664234][T20923] __se_sys_ioctl+0xfc/0x170 [ 1404.664251][T20923] do_syscall_64+0xec/0xf80 [ 1404.664264][T20923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.664274][T20923] ? trace_irq_disable+0x37/0x100 [ 1404.664287][T20923] ? clear_bhb_loop+0x60/0xb0 [ 1404.664298][T20923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.664308][T20923] RIP: 0033:0x7f94ccd8f749 [ 1404.664318][T20923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1404.664328][T20923] RSP: 002b:00007f94cdd0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1404.664340][T20923] RAX: ffffffffffffffda RBX: 00007f94ccfe5fa0 RCX: 00007f94ccd8f749 [ 1404.664348][T20923] RDX: 00002000000002c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1404.664355][T20923] RBP: 00007f94cdd0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.664364][T20923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.664370][T20923] R13: 00007f94ccfe6038 R14: 00007f94ccfe5fa0 R15: 00007f94cd10fa28 [ 1404.664386][T20923] [ 1405.363358][T20932] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4915'. [ 1405.447732][T29159] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1405.598225][T29159] usb 6-1: Using ep0 maxpacket: 16 [ 1405.610991][T29159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.663940][T29159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.684576][T20949] vivid-004: disconnect [ 1405.696781][T29159] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1405.722491][T20948] vivid-004: reconnect [ 1405.737839][T29159] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1405.755378][T29159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.796659][T29159] usb 6-1: config 0 descriptor?? [ 1405.861177][T20952] : renamed from bond_slave_0 [ 1406.248675][T29159] input: HID 0955:7214 Haptics as /devices/virtual/input/input119 [ 1406.444547][T29159] shield 0003:0955:7214.0086: Registered Thunderstrike controller [ 1406.472744][T29159] shield 0003:0955:7214.0086: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1406.561853][T16282] shield 0003:0955:7214.0086: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1406.586686][T29159] usb 6-1: USB disconnect, device number 67 [ 1406.597760][T16282] shield 0003:0955:7214.0086: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1406.664497][T16282] shield 0003:0955:7214.0086: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1406.715476][T16282] shield 0003:0955:7214.0086: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1406.831943][T20990] netlink: 'syz.6.4922': attribute type 275 has an invalid length. [ 1406.844981][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4922'. [ 1406.855179][T20990] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4922'. [ 1407.058895][T21006] FAULT_INJECTION: forcing a failure. [ 1407.058895][T21006] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.123244][T21006] CPU: 1 UID: 0 PID: 21006 Comm: syz.5.4925 Tainted: G L syzkaller #0 PREEMPT(full) [ 1407.123273][T21006] Tainted: [L]=SOFTLOCKUP [ 1407.123280][T21006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1407.123290][T21006] Call Trace: [ 1407.123296][T21006] [ 1407.123304][T21006] dump_stack_lvl+0xe8/0x150 [ 1407.123345][T21006] should_fail_ex+0x414/0x560 [ 1407.123375][T21006] should_failslab+0xa8/0x100 [ 1407.123396][T21006] __kvmalloc_node_noprof+0x175/0x920 [ 1407.123418][T21006] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1407.123448][T21006] alloc_netdev_mqs+0xa6/0x11b0 [ 1407.123469][T21006] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 1407.123496][T21006] __ip_tunnel_create+0x339/0x550 [ 1407.123523][T21006] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1407.123545][T21006] ? bpf_lsm_capable+0x9/0x20 [ 1407.123565][T21006] ? security_capable+0x7e/0x2e0 [ 1407.123597][T21006] ip_tunnel_ctl+0x4dd/0xc30 [ 1407.123619][T21006] ipgre_tunnel_ctl+0x2ef/0x5c0 [ 1407.123635][T21006] ip_tunnel_siocdevprivate+0xf5/0x180 [ 1407.123650][T21006] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 1407.123669][T21006] ? netdev_name_node_lookup+0xdf/0x120 [ 1407.123685][T21006] dev_ifsioc+0xb57/0xf00 [ 1407.123701][T21006] dev_ioctl+0x84c/0x1150 [ 1407.123714][T21006] sock_ioctl+0x719/0x790 [ 1407.123729][T21006] ? __pfx_sock_ioctl+0x10/0x10 [ 1407.123743][T21006] ? __fget_files+0x3a0/0x420 [ 1407.123755][T21006] ? __fget_files+0x2a/0x420 [ 1407.123768][T21006] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1407.123779][T21006] ? __pfx_sock_ioctl+0x10/0x10 [ 1407.123792][T21006] __se_sys_ioctl+0xfc/0x170 [ 1407.123808][T21006] do_syscall_64+0xec/0xf80 [ 1407.123820][T21006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.123829][T21006] ? trace_irq_disable+0x37/0x100 [ 1407.123842][T21006] ? clear_bhb_loop+0x60/0xb0 [ 1407.123854][T21006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.123863][T21006] RIP: 0033:0x7f325478f749 [ 1407.123874][T21006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1407.123884][T21006] RSP: 002b:00007f3255585038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1407.123896][T21006] RAX: ffffffffffffffda RBX: 00007f32549e5fa0 RCX: 00007f325478f749 [ 1407.123903][T21006] RDX: 00002000000002c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1407.123910][T21006] RBP: 00007f3255585090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.123916][T21006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.123922][T21006] R13: 00007f32549e6038 R14: 00007f32549e5fa0 R15: 00007f3254b0fa28 [ 1407.123938][T21006] [ 1407.459342][ T3345] hid_parser_main: 74 callbacks suppressed [ 1407.459364][ T3345] hid-generic 0000:0000:0003.0087: unknown main item tag 0x4 [ 1407.481893][ T3345] hid-generic 0000:0000:0003.0087: unknown main item tag 0x4 [ 1407.490390][ T3345] hid-generic 0000:0000:0003.0087: unknown main item tag 0x0 [ 1407.501859][ T3345] hid-generic 0000:0000:0003.0087: unknown main item tag 0x0 [ 1407.509467][ T3345] hid-generic 0000:0000:0003.0087: unknown main item tag 0x0 [ 1407.517093][ T3345] hid-generic 0000:0000:0003.0087: unknown main item tag 0x0 [ 1407.524977][ T3345] hid-generic 0000:0000:0003.0087: unknown main item tag 0x0 [ 1407.532893][ T3345] hid-generic 0000:0000:0003.0087: unknown main item tag 0x0 [ 1407.541225][ T3345] hid-generic 0000:0000:0003.0087: unknown main item tag 0x0 [ 1407.548913][ T3345] hid-generic 0000:0000:0003.0087: unknown main item tag 0x0 [ 1407.561084][ T3345] hid-generic 0000:0000:0003.0087: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1407.644937][ T30] audit: type=1326 audit(1768606402.401:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.5.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325478f749 code=0x7ffc0000 [ 1407.668710][ T30] audit: type=1326 audit(1768606402.431:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.5.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325478f749 code=0x7ffc0000 [ 1407.694075][ T30] audit: type=1326 audit(1768606402.431:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.5.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325478f749 code=0x7ffc0000 [ 1407.719147][ T3345] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1407.730839][ T30] audit: type=1326 audit(1768606402.431:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.5.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325478f749 code=0x7ffc0000 [ 1407.771211][ T30] audit: type=1326 audit(1768606402.451:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.5.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f325478f749 code=0x7ffc0000 [ 1407.796453][ T30] audit: type=1326 audit(1768606402.451:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.5.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325478f749 code=0x7ffc0000 [ 1407.819596][ T30] audit: type=1326 audit(1768606402.451:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.5.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325478f749 code=0x7ffc0000 [ 1407.863046][ T30] audit: type=1326 audit(1768606402.451:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.5.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325478f749 code=0x7ffc0000 [ 1407.887945][ T30] audit: type=1326 audit(1768606402.451:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.5.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f325478f749 code=0x7ffc0000 [ 1407.913739][ T30] audit: type=1326 audit(1768606402.451:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.5.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325478f749 code=0x7ffc0000 [ 1407.920053][ T3345] usb 5-1: config 0 has no interfaces? [ 1407.945270][ T3345] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1407.955886][ T3345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.981759][ T3345] usb 5-1: config 0 descriptor?? [ 1408.377915][ T3345] usb 5-1: USB disconnect, device number 53 [ 1408.646332][T21053] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4931'. [ 1408.969234][T21058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4932'. [ 1409.029691][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4932'. [ 1410.189783][T21078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4936'. [ 1410.394487][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4938'. [ 1410.847757][T16282] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1411.017581][T16282] usb 5-1: Using ep0 maxpacket: 16 [ 1411.031058][T16282] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1411.035427][T21106] blktrace: Concurrent blktraces are not allowed on sg0 [ 1411.048329][T16282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.056418][T16282] usb 5-1: Product: syz [ 1411.077529][T16282] usb 5-1: Manufacturer: syz [ 1411.082230][T16282] usb 5-1: SerialNumber: syz [ 1411.096027][T16282] usb 5-1: config 0 descriptor?? [ 1411.113705][T16282] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1411.311030][T21099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.320656][T21099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.337746][T21099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.351739][T21099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.364442][T21099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1411.385079][T21099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.398457][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1411.414253][T21099] macvtap1: entered promiscuous mode [ 1411.421171][T21099] batadv0: entered promiscuous mode [ 1411.426691][T21099] macvtap1: entered allmulticast mode [ 1411.445445][T21099] batadv0: entered allmulticast mode [ 1411.477019][T21099] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1411.570212][T21121] batadv0: left allmulticast mode [ 1411.575532][T21121] batadv0: left promiscuous mode [ 1411.613896][T16282] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 1411.631268][T16282] visor 5-1:0.0: probe with driver visor failed with error -71 [ 1411.672702][T16282] usb 5-1: USB disconnect, device number 54 [ 1411.732404][ T6308] hid-generic 0000:0000:0003.0088: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1412.058223][T29159] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1412.219957][T29159] usb 7-1: config 0 has no interfaces? [ 1412.225673][T29159] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1412.255060][T21149] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4946'. [ 1412.257231][T29159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.311614][T29159] usb 7-1: config 0 descriptor?? [ 1412.467049][T21156] bridge0: port 1(macvtap1) entered blocking state [ 1412.488307][T21156] bridge0: port 1(macvtap1) entered disabled state [ 1412.679716][T16282] usb 7-1: USB disconnect, device number 48 [ 1412.711012][T21156] macvtap1: entered allmulticast mode [ 1412.718481][T21156] bridge0: entered allmulticast mode [ 1412.818683][ T5911] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1412.864241][T21156] macvtap1: left allmulticast mode [ 1412.871541][T21156] bridge0: left allmulticast mode [ 1412.988262][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 1412.998916][ T5911] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1413.011881][ T5911] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.051904][T21187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1413.055518][ T5911] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1413.188882][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.337517][ T6308] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1413.447795][T21171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.461198][T21171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.489974][ T6308] usb 5-1: device descriptor read/64, error -71 [ 1413.644032][T21217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1413.663452][ T5911] usb 6-1: string descriptor 0 read error: -71 [ 1413.767925][ T6308] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1413.808142][T21222] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4954'. [ 1413.826425][ T5911] hub 6-1:32.0: bad descriptor, ignoring hub [ 1413.840157][ T5911] hub 6-1:32.0: probe with driver hub failed with error -5 [ 1413.923850][ T5911] usb 6-1: USB disconnect, device number 68 [ 1413.947639][ T6308] usb 5-1: device descriptor read/64, error -71 [ 1414.057954][ T6308] usb usb5-port1: attempt power cycle [ 1414.527493][ T6308] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1414.667295][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1414.752200][ T6308] usb 5-1: device descriptor read/8, error -71 [ 1415.007249][ T6308] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1415.047264][ T6308] usb 5-1: device descriptor read/8, error -71 [ 1415.167604][ T6308] usb usb5-port1: unable to enumerate USB device [ 1415.597844][T16282] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1415.759557][T16282] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1415.775568][T16282] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.820730][T16282] usb 7-1: config 0 descriptor?? [ 1416.092305][T16282] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1416.303935][T16282] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1416.347741][T16282] [drm] Initialized udl on minor 2 [ 1416.504809][T16282] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1416.819156][ T5896] hid_parser_main: 74 callbacks suppressed [ 1416.819176][ T5896] hid-generic 0000:0000:0003.0089: unknown main item tag 0x4 [ 1416.836256][T16282] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1416.875655][T29159] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1416.886139][T16282] usb 7-1: USB disconnect, device number 49 [ 1416.892755][ T5896] hid-generic 0000:0000:0003.0089: unknown main item tag 0x4 [ 1416.901859][T29159] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1416.920817][ T5896] hid-generic 0000:0000:0003.0089: unknown main item tag 0x0 [ 1416.957600][ T5896] hid-generic 0000:0000:0003.0089: unknown main item tag 0x0 [ 1416.966760][ T5896] hid-generic 0000:0000:0003.0089: unknown main item tag 0x0 [ 1416.995728][ T5896] hid-generic 0000:0000:0003.0089: unknown main item tag 0x0 [ 1417.006530][ T5896] hid-generic 0000:0000:0003.0089: unknown main item tag 0x0 [ 1417.022595][ T5896] hid-generic 0000:0000:0003.0089: unknown main item tag 0x0 [ 1417.033251][ T5896] hid-generic 0000:0000:0003.0089: unknown main item tag 0x0 [ 1417.043610][ T5896] hid-generic 0000:0000:0003.0089: unknown main item tag 0x0 [ 1417.054939][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4963'. [ 1417.064125][ T5896] hid-generic 0000:0000:0003.0089: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1417.142185][T21302] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 1417.186660][T21311] loop9: detected capacity change from 0 to 7 [ 1417.205395][T21311] Dev loop9: unable to read RDB block 7 [ 1417.225209][T21311] loop9: unable to read partition table [ 1417.262195][T21311] loop9: partition table beyond EOD, truncated [ 1417.280504][T21311] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1417.417345][T12198] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1417.597794][T12198] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 1418.082129][T12198] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1418.113695][T12198] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 1418.127216][T12198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.176391][T12198] usb 2-1: Product: syz [ 1418.181109][T12198] usb 2-1: Manufacturer: syz [ 1418.188250][T12198] usb 2-1: SerialNumber: syz [ 1418.216756][T12198] usb 2-1: config 0 descriptor?? [ 1418.338706][T12198] viperboard 2-1:0.0: version 0.00 found at bus 002 address 033 [ 1418.372295][T12198] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1418.386210][T12198] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1418.432520][T12198] usb 2-1: USB disconnect, device number 33 [ 1419.242139][T21411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1419.342457][ T6308] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1419.507045][T21425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4973'. [ 1419.569585][ T6308] usb 6-1: Using ep0 maxpacket: 8 [ 1419.608672][ T6308] usb 6-1: config index 0 descriptor too short (expected 30482, got 18) [ 1419.621902][ T6308] usb 6-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 1419.674368][ T6308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 1419.689405][ T6308] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 1419.732251][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.888009][ T6308] usb 6-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 1419.899354][ T5896] IPVS: starting estimator thread 0... [ 1419.906457][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.934676][ T6308] usb 6-1: Product: syz [ 1419.942822][ T6308] usb 6-1: Manufacturer: syz [ 1419.958040][ T6308] usb 6-1: config 0 descriptor?? [ 1419.986180][ T6308] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1419.997489][T21438] IPVS: using max 51 ests per chain, 122400 per kthread [ 1420.008802][ T6308] usb 6-1: Detected FT2232C/D [ 1420.304591][ T6308] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1420.315081][ T6308] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1420.337959][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1420.378595][ T6308] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1420.433442][ T6308] usb 6-1: USB disconnect, device number 69 [ 1420.472720][ T6308] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1420.618723][ T6308] ftdi_sio 6-1:0.0: device disconnected [ 1421.181102][T21483] delete_channel: no stack [ 1422.402340][T29159] hid_parser_main: 32 callbacks suppressed [ 1422.402356][T29159] hid-generic 0000:0000:0003.008A: unknown main item tag 0x4 [ 1422.418709][T29159] hid-generic 0000:0000:0003.008A: unknown main item tag 0x4 [ 1422.447888][ T5896] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1422.455917][T29159] hid-generic 0000:0000:0003.008A: unknown main item tag 0x0 [ 1422.480535][T29159] hid-generic 0000:0000:0003.008A: unknown main item tag 0x0 [ 1422.501829][T29159] hid-generic 0000:0000:0003.008A: unknown main item tag 0x0 [ 1422.528190][T29159] hid-generic 0000:0000:0003.008A: unknown main item tag 0x0 [ 1422.552986][T29159] hid-generic 0000:0000:0003.008A: unknown main item tag 0x0 [ 1422.570022][T29159] hid-generic 0000:0000:0003.008A: unknown main item tag 0x0 [ 1422.590042][T29159] hid-generic 0000:0000:0003.008A: unknown main item tag 0x0 [ 1422.606771][T29159] hid-generic 0000:0000:0003.008A: unknown main item tag 0x0 [ 1422.622254][ T5896] usb 7-1: config index 0 descriptor too short (expected 8192, got 18) [ 1422.633218][ T5896] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.665060][ T5896] usb 7-1: config 0 has no interfaces? [ 1422.671119][T16282] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1422.685919][T29159] hid-generic 0000:0000:0003.008A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1422.710782][ T5896] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1422.729247][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.789481][ T5896] usb 7-1: Product: syz [ 1422.793680][ T5896] usb 7-1: Manufacturer: syz [ 1422.818064][ T5896] usb 7-1: SerialNumber: syz [ 1422.833291][T16282] usb 2-1: config 0 has no interfaces? [ 1422.842259][T16282] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1422.850703][T21543] misc userio: No port type given on /dev/userio [ 1422.859278][ T5896] usb 7-1: config 0 descriptor?? [ 1422.899095][T16282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.918685][T16282] usb 2-1: config 0 descriptor?? [ 1423.061326][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.068079][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.200792][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4984'. [ 1423.216447][T21505] netlink: 'syz.6.4984': attribute type 14 has an invalid length. [ 1423.247898][T16282] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1423.265620][T21526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1423.296434][T29159] usb 2-1: USB disconnect, device number 34 [ 1423.351927][T21505] vxlan0: entered promiscuous mode [ 1423.388805][ T1958] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.409120][T16282] usb 6-1: not running at top speed; connect to a high speed hub [ 1423.420405][ T1958] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.422056][T16282] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1423.440698][T16282] usb 6-1: can't read configurations, error -61 [ 1423.450524][ T1958] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.473521][ T1958] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.578374][T16282] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1423.739428][T16282] usb 6-1: not running at top speed; connect to a high speed hub [ 1423.751073][T16282] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1423.759823][T16282] usb 6-1: can't read configurations, error -61 [ 1423.768046][T16282] usb usb6-port1: attempt power cycle [ 1423.895237][T21583] ipt_ECN: cannot use operation on non-tcp rule [ 1424.046492][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4995'. [ 1424.057556][T21585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4995'. [ 1424.107983][T16282] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1424.207784][T21585] netlink: 'syz.1.4995': attribute type 15 has an invalid length. [ 1424.233473][ T7271] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1424.313775][T16282] usb 6-1: not running at top speed; connect to a high speed hub [ 1424.325534][ T7271] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1424.336296][T16282] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1424.350117][T16282] usb 6-1: can't read configurations, error -61 [ 1424.358535][ T7271] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1424.369239][ T7271] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1424.497945][T16282] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1424.535766][T16282] usb 6-1: not running at top speed; connect to a high speed hub [ 1424.562666][T16282] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1424.572477][T16282] usb 6-1: can't read configurations, error -61 [ 1424.580261][T16282] usb usb6-port1: unable to enumerate USB device [ 1424.651645][T21607] misc userio: No port type given on /dev/userio [ 1424.838062][T16282] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1424.870451][T21613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5001'. [ 1425.000168][T16282] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1425.009063][T16282] usb 5-1: config 0 has no interface number 0 [ 1425.015405][T16282] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1425.029033][T16282] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1425.041817][T16282] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1425.054893][T16282] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1425.064674][T16282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.092907][T16282] usb 5-1: config 0 descriptor?? [ 1425.122507][T21601] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1425.146125][ T5896] usb 7-1: USB disconnect, device number 50 [ 1425.243627][T16282] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input120 [ 1426.296512][ T6308] hid-generic 0000:0000:0003.008B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1426.461025][ T6308] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1426.715695][T21653] loop9: detected capacity change from 0 to 7 [ 1426.722983][T21653] Dev loop9: unable to read RDB block 7 [ 1426.728955][T21653] loop9: unable to read partition table [ 1426.734809][T21653] loop9: partition table beyond EOD, truncated [ 1426.745210][T21653] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1426.889487][ T6308] usb 6-1: config 0 has no interfaces? [ 1426.895176][ T6308] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1426.928532][ T6308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.956811][ T6308] usb 6-1: config 0 descriptor?? [ 1427.056820][T21661] syzkaller0: entered promiscuous mode [ 1427.064385][T21661] syzkaller0: entered allmulticast mode [ 1427.328576][T21644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1427.344758][ T6308] usb 6-1: USB disconnect, device number 74 [ 1427.880273][ T5911] usb 5-1: USB disconnect, device number 59 [ 1428.527757][ T5896] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1428.568252][ T5911] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1428.667901][ T5896] usb 6-1: device descriptor read/64, error -71 [ 1428.749972][ T5911] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1428.795883][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.856043][ T5911] usb 5-1: config 0 descriptor?? [ 1428.876744][ T5911] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1428.938740][ T5896] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1429.089862][ T5896] usb 6-1: device descriptor read/64, error -71 [ 1429.209381][ T5896] usb usb6-port1: attempt power cycle [ 1429.399997][ T5911] gp8psk: usb in 137 operation failed. [ 1429.405552][ T5911] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1429.437616][ T5911] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1429.456990][ T5911] usb 5-1: USB disconnect, device number 60 [ 1429.558138][ T5896] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1429.578574][ T5896] usb 6-1: device descriptor read/8, error -71 [ 1429.817839][ T5896] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1429.841828][ T5896] usb 6-1: device descriptor read/8, error -71 [ 1429.968741][ T5896] usb usb6-port1: unable to enumerate USB device [ 1430.215869][ T5911] hid_parser_main: 74 callbacks suppressed [ 1430.215891][ T5911] hid-generic 0000:0000:0003.008C: unknown main item tag 0x4 [ 1430.237545][ T5911] hid-generic 0000:0000:0003.008C: unknown main item tag 0x4 [ 1430.245427][ T5911] hid-generic 0000:0000:0003.008C: unknown main item tag 0x0 [ 1430.253581][ T5911] hid-generic 0000:0000:0003.008C: unknown main item tag 0x0 [ 1430.264062][ T5911] hid-generic 0000:0000:0003.008C: unknown main item tag 0x0 [ 1430.283054][ T5911] hid-generic 0000:0000:0003.008C: unknown main item tag 0x0 [ 1430.291372][ T5911] hid-generic 0000:0000:0003.008C: unknown main item tag 0x0 [ 1430.299466][ T5911] hid-generic 0000:0000:0003.008C: unknown main item tag 0x0 [ 1430.307848][ T5911] hid-generic 0000:0000:0003.008C: unknown main item tag 0x0 [ 1430.315418][ T5911] hid-generic 0000:0000:0003.008C: unknown main item tag 0x0 [ 1430.370918][ T5911] hid-generic 0000:0000:0003.008C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1430.458074][ T5896] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1430.549103][T21852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5028'. [ 1430.607736][T21852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5028'. [ 1430.621726][ T5896] usb 2-1: config 0 has no interfaces? [ 1430.629487][ T5896] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1430.653037][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.678270][ T5896] usb 2-1: config 0 descriptor?? [ 1431.008665][T21830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1431.026358][T16282] usb 2-1: USB disconnect, device number 35 [ 1431.378347][T21902] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5033'. [ 1434.195742][T21936] input: syz1 as /devices/virtual/input/input121 [ 1434.437899][T16282] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1434.600385][T16282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.619825][T16282] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1434.651622][T16282] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1434.670018][T16282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.685088][T16282] usb 2-1: config 0 descriptor?? [ 1434.979958][ T5896] hid-generic 0000:0000:0003.008D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1435.323520][T16282] usbhid 2-1:0.0: can't add hid device: -71 [ 1435.332072][T16282] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1435.359249][T16282] usb 2-1: USB disconnect, device number 36 [ 1435.628639][T22001] Invalid logical block size (112) [ 1435.902252][T12198] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1436.069507][T12198] usb 6-1: config 0 has no interfaces? [ 1436.079056][T12198] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1436.143393][T12198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 1436.157013][T12198] usb 6-1: SerialNumber: syz [ 1436.175158][T12198] usb 6-1: config 0 descriptor?? [ 1436.390471][T22001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5047'. [ 1436.400123][T22001] 8021q: VLANs not supported on caif0 [ 1436.407014][T29159] usb 6-1: USB disconnect, device number 79 [ 1436.552240][T22029] netlink: zone id is out of range [ 1436.693673][T22038] tipc: Failed to remove unknown binding: 66,0,0/11578026:2138913624/2138913625 [ 1436.704272][T22038] tipc: Failed to remove unknown binding: 66,0,0/11578026:2138913624/2138913625 [ 1436.839375][T22045] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5055'. [ 1436.857902][T22045] syzkaller1: entered promiscuous mode [ 1436.863489][T22045] syzkaller1: entered allmulticast mode [ 1437.040772][T22055] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1437.309220][T12198] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1437.558420][T12198] usb 7-1: config 0 has no interfaces? [ 1437.575593][T12198] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1437.596743][T12198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.609135][T12198] usb 7-1: Product: syz [ 1437.613336][T12198] usb 7-1: Manufacturer: syz [ 1437.638964][T12198] usb 7-1: SerialNumber: syz [ 1437.669409][T12198] usb 7-1: config 0 descriptor?? [ 1437.902749][T22055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.924969][T22055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.945619][T12198] usb 7-1: USB disconnect, device number 51 [ 1438.209644][T22092] vlan0: entered allmulticast mode [ 1438.214787][T22092] bond0: entered allmulticast mode [ 1438.227765][T22092] dummy0: entered allmulticast mode [ 1438.302521][T22092] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5060'. [ 1439.212152][T22110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5063'. [ 1439.253848][T22110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5063'. [ 1439.254411][T22092] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1439.326690][T22092] dummy0: left allmulticast mode [ 1439.335048][T22092] bond0 (unregistering): Released all slaves [ 1439.465328][T22101] bond5: Removing last ns target with arp_interval on [ 1439.887720][T29159] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1440.027801][T29159] usb 6-1: device descriptor read/64, error -71 [ 1440.277897][T29159] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 1440.419059][T29159] usb 6-1: device descriptor read/64, error -71 [ 1440.527977][T29159] usb usb6-port1: attempt power cycle [ 1440.764864][ T6308] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1440.868291][T29159] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1440.889055][T29159] usb 6-1: device descriptor read/8, error -71 [ 1440.937622][ T6308] usb 2-1: Using ep0 maxpacket: 16 [ 1440.945434][ T6308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.957209][ T6308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.968014][ T6308] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1440.996874][ T6308] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1441.008025][ T6308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.025208][ T6308] usb 2-1: config 0 descriptor?? [ 1441.137831][T29159] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1441.158772][T29159] usb 6-1: device descriptor read/8, error -71 [ 1441.278653][T29159] usb usb6-port1: unable to enumerate USB device [ 1441.429247][T21867] Set syz1 is full, maxelem 65536 reached [ 1441.473482][ T6308] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.008E/input/input122 [ 1441.501445][ T6308] microsoft 0003:045E:07DA.008E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1441.689971][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.704234][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.723240][T22188] xt_cgroup: path and classid specified [ 1441.729993][T22188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1441.740870][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.749720][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.000825][T29159] usb 2-1: USB disconnect, device number 37 [ 1442.157901][T12198] hid_parser_main: 74 callbacks suppressed [ 1442.157922][T12198] hid-generic 0000:0000:0003.008F: unknown main item tag 0x4 [ 1442.184289][T12198] hid-generic 0000:0000:0003.008F: unknown main item tag 0x4 [ 1442.193528][T12198] hid-generic 0000:0000:0003.008F: unknown main item tag 0x0 [ 1442.202131][T12198] hid-generic 0000:0000:0003.008F: unknown main item tag 0x0 [ 1442.218907][T12198] hid-generic 0000:0000:0003.008F: unknown main item tag 0x0 [ 1442.226354][T12198] hid-generic 0000:0000:0003.008F: unknown main item tag 0x0 [ 1442.326665][T12198] hid-generic 0000:0000:0003.008F: unknown main item tag 0x0 [ 1442.334869][T12198] hid-generic 0000:0000:0003.008F: unknown main item tag 0x0 [ 1442.342694][T12198] hid-generic 0000:0000:0003.008F: unknown main item tag 0x0 [ 1442.373295][T12198] hid-generic 0000:0000:0003.008F: unknown main item tag 0x0 [ 1442.393861][T12198] hid-generic 0000:0000:0003.008F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1442.415298][T29159] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1442.598611][T29159] usb 7-1: config 0 has no interfaces? [ 1442.604151][T29159] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1442.683221][T29159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.696903][T29159] usb 7-1: config 0 descriptor?? [ 1443.064364][T22236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1443.175300][T12198] usb 7-1: USB disconnect, device number 52 [ 1443.187936][T29159] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1443.384724][T22285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1443.405094][T22316] bond2: (slave ip6gretap2): making interface the new active one [ 1443.445133][T22316] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1443.910310][T22336] loop5: detected capacity change from 0 to 7 [ 1444.083817][T22336] Dev loop5: unable to read RDB block 7 [ 1444.147732][T22336] loop5: unable to read partition table [ 1444.163504][T22336] loop5: partition table beyond EOD, truncated [ 1444.173858][T22336] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1444.334345][T22343] input: syz1 as /devices/virtual/input/input123 [ 1444.599551][ T5198] Dev loop5: unable to read RDB block 7 [ 1444.607205][ T5198] loop5: unable to read partition table [ 1444.622168][ T5198] loop5: partition table beyond EOD, truncated [ 1445.775994][T22370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.823925][T22370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.046290][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5090'. [ 1446.068170][ T6308] hid-generic 0000:0000:0003.0090: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1446.081449][T22400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5090'. [ 1446.274946][T16282] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1446.432463][T16282] usb 5-1: config 0 has no interfaces? [ 1446.438253][T31537] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1446.457841][T16282] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1446.486136][T16282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.518629][T16282] usb 5-1: config 0 descriptor?? [ 1446.655967][T31537] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1446.674194][T31537] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1446.682772][T31537] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1446.693337][T31537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.715030][T31537] usb 7-1: config 0 descriptor?? [ 1446.732641][T22405] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1446.855816][T22393] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5089'. [ 1446.886176][T22393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1446.908556][ T5896] usb 5-1: USB disconnect, device number 61 [ 1447.188763][T31537] hid_parser_main: 74 callbacks suppressed [ 1447.188787][T31537] konepure 0003:1E7D:2DBE.0091: unknown main item tag 0x7 [ 1447.250327][T31537] konepure 0003:1E7D:2DBE.0091: item fetching failed at offset 1/2 [ 1447.278783][T31537] konepure 0003:1E7D:2DBE.0091: parse failed [ 1447.297928][T31537] konepure 0003:1E7D:2DBE.0091: probe with driver konepure failed with error -22 [ 1447.442047][ T6308] usb 7-1: USB disconnect, device number 53 [ 1449.280509][T29159] hid-generic 0000:0000:0003.0092: unknown main item tag 0x4 [ 1449.289293][T29159] hid-generic 0000:0000:0003.0092: unknown main item tag 0x4 [ 1449.316666][T29159] hid-generic 0000:0000:0003.0092: unknown main item tag 0x0 [ 1449.330268][T29159] hid-generic 0000:0000:0003.0092: unknown main item tag 0x0 [ 1449.357879][T29159] hid-generic 0000:0000:0003.0092: unknown main item tag 0x0 [ 1449.369451][T29159] hid-generic 0000:0000:0003.0092: unknown main item tag 0x0 [ 1449.378804][T29159] hid-generic 0000:0000:0003.0092: unknown main item tag 0x0 [ 1449.386537][T29159] hid-generic 0000:0000:0003.0092: unknown main item tag 0x0 [ 1449.395773][T29159] hid-generic 0000:0000:0003.0092: unknown main item tag 0x0 [ 1449.411938][T29159] hid-generic 0000:0000:0003.0092: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1449.478455][T22527] program syz.5.5106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1449.538062][ T5896] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1449.700911][ T5896] usb 7-1: config 0 has no interfaces? [ 1449.706507][ T5896] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1449.717074][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.728324][ T6308] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1449.753921][ T5896] usb 7-1: config 0 descriptor?? [ 1449.877506][ T6308] usb 5-1: device descriptor read/64, error -71 [ 1449.939679][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.075770][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.125389][T22516] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5104'. [ 1450.142973][T22516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1450.155606][ T6308] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1450.191115][T12198] usb 7-1: USB disconnect, device number 54 [ 1450.219777][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.307073][ T6308] usb 5-1: device descriptor read/64, error -71 [ 1450.330544][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.364673][T22557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5109'. [ 1450.415542][T22558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1450.426760][T22558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1450.428721][ T6308] usb usb5-port1: attempt power cycle [ 1450.441102][T22558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1450.451133][T22558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1450.460067][T22558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1450.514299][T22557] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1450.682139][ T36] bridge_slave_1: left allmulticast mode [ 1450.689119][ T36] bridge_slave_1: left promiscuous mode [ 1450.694913][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.705010][ T36] bridge_slave_0: left allmulticast mode [ 1450.711070][ T36] bridge_slave_0: left promiscuous mode [ 1450.716931][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.830146][ T6308] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1450.860904][ T6308] usb 5-1: device descriptor read/8, error -71 [ 1451.127723][ T6308] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1451.172597][ T6308] usb 5-1: device descriptor read/8, error -71 [ 1451.184591][ T36] team0: Port device geneve0 removed [ 1451.291854][ T6308] usb usb5-port1: unable to enumerate USB device [ 1451.561158][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.572142][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.582653][ T36] bond0 (unregistering): Released all slaves [ 1452.141856][ T36] bond1 (unregistering): Released all slaves [ 1452.176172][ T36] bond2 (unregistering): Released all slaves [ 1452.214087][ T36] bond3 (unregistering): Released all slaves [ 1452.502144][T24613] Bluetooth: hci1: command tx timeout [ 1452.804967][T22565] chnl_net:caif_netlink_parms(): no params data found [ 1453.241301][T22565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.261857][T22565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.272508][T22565] bridge_slave_0: entered allmulticast mode [ 1453.289643][T22565] bridge_slave_0: entered promiscuous mode [ 1453.334762][T22565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.350377][T22565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.362075][T22565] bridge_slave_1: entered allmulticast mode [ 1453.371197][T22565] bridge_slave_1: entered promiscuous mode [ 1453.429254][ T5896] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1453.478548][T29159] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1453.534099][T22565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.570796][T22565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.589769][ T5896] usb 7-1: config index 0 descriptor too short (expected 45, got 18) [ 1453.607828][ T5896] usb 7-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1453.627704][ T5896] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1453.635553][ T5896] usb 7-1: config index 1 descriptor too short (expected 45, got 18) [ 1453.644460][ T5896] usb 7-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1453.659577][ T5896] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1453.680623][T29159] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1453.690593][T29159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1453.702864][ T5896] usb 7-1: config index 2 descriptor too short (expected 45, got 18) [ 1453.718599][T29159] usb 2-1: Product: syz [ 1453.727724][ T5896] usb 7-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1453.743201][T29159] usb 2-1: Manufacturer: syz [ 1453.754199][T29159] usb 2-1: SerialNumber: syz [ 1453.771001][T29159] usb 2-1: config 0 descriptor?? [ 1453.776210][ T5896] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1453.800511][T29159] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1453.816430][ T5896] usb 7-1: config index 3 descriptor too short (expected 45, got 18) [ 1453.828371][T29159] dvb-usb: bulk message failed: -22 (2/0) [ 1453.859260][ T5896] usb 7-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1453.875274][T29159] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1453.880262][T22565] team0: Port device team_slave_0 added [ 1453.899539][ T5896] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1453.906702][T29159] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1453.927974][T29159] usb 2-1: media controller created [ 1453.928442][ T36] tipc: Left network mode [ 1453.941940][T22565] team0: Port device team_slave_1 added [ 1453.961744][ T5896] usb 7-1: config index 4 descriptor too short (expected 45, got 18) [ 1453.994124][ T5896] usb 7-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1454.008981][T29159] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1454.038118][ T5896] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1454.050199][ T5896] usb 7-1: config index 5 descriptor too short (expected 45, got 18) [ 1454.062761][T29159] dvb-usb: bulk message failed: -22 (1/0) [ 1454.074722][ T5896] usb 7-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1454.075334][T22876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5118'. [ 1454.109032][ T5896] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1454.118716][ T5896] usb 7-1: config index 6 descriptor too short (expected 45, got 18) [ 1454.129410][ T5896] usb 7-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1454.144357][T29159] DVB: Unable to find symbol mt352_attach() [ 1454.167818][T29159] dvb-usb: bulk message failed: -22 (5/0) [ 1454.176166][T29159] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1454.194947][ T5896] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1454.204125][T29159] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1454.217782][ T5896] usb 7-1: config index 7 descriptor too short (expected 45, got 18) [ 1454.235717][ T5896] usb 7-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1454.278137][ T5896] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1454.288925][ T5896] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1454.301160][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.319208][ T5896] usb 7-1: Product: syz [ 1454.326017][ T5896] usb 7-1: Manufacturer: syz [ 1454.337509][T22565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.338878][ T5896] usb 7-1: SerialNumber: syz [ 1454.344583][T22565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.395302][T22565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.407560][T29159] rc_core: IR keymap rc-dvico-mce not found [ 1454.415603][T29159] Registered IR keymap rc-empty [ 1454.443129][T22565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.450629][T29159] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1454.461850][T22565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.464507][T29159] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input124 [ 1454.490791][T22565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.622383][T24613] Bluetooth: hci1: command tx timeout [ 1454.651707][T22778] netlink: 232 bytes leftover after parsing attributes in process `syz.6.5115'. [ 1454.674928][T29159] dvb-usb: schedule remote query interval to 100 msecs. [ 1454.685770][T22778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.698622][T22778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.726620][T29159] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1454.817661][T29159] usb 2-1: USB disconnect, device number 40 [ 1454.861179][T31537] dvb-usb: bulk message failed: -22 (1/0) [ 1454.923610][T22565] hsr_slave_0: entered promiscuous mode [ 1454.955358][T22565] hsr_slave_1: entered promiscuous mode [ 1454.962042][T29159] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1454.979765][T22565] debugfs: 'hsr0' already exists in 'hsr' [ 1454.991828][T22565] Cannot create hsr debugfs directory [ 1455.047799][ T36] hsr_slave_0: left promiscuous mode [ 1455.101596][ T36] hsr_slave_1: left promiscuous mode [ 1455.128077][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.150048][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.174873][ T36] batman_adv: batadv0: Removing interface: macvtap1 [ 1455.204598][ T36] batman_adv: batadv0: Interface deactivated: dummy0 [ 1455.237381][ T36] batman_adv: batadv0: Removing interface: dummy0 [ 1455.315713][ T6308] hid_parser_main: 33 callbacks suppressed [ 1455.315735][ T6308] hid-generic 0000:0000:0003.0093: unknown main item tag 0x4 [ 1455.400565][ T6308] hid-generic 0000:0000:0003.0093: unknown main item tag 0x4 [ 1455.443314][ T6308] hid-generic 0000:0000:0003.0093: unknown main item tag 0x0 [ 1455.476748][ T6308] hid-generic 0000:0000:0003.0093: unknown main item tag 0x0 [ 1455.522452][ T6308] hid-generic 0000:0000:0003.0093: unknown main item tag 0x0 [ 1455.557185][ T6308] hid-generic 0000:0000:0003.0093: unknown main item tag 0x0 [ 1455.567322][ T6308] hid-generic 0000:0000:0003.0093: unknown main item tag 0x0 [ 1455.574884][ T6308] hid-generic 0000:0000:0003.0093: unknown main item tag 0x0 [ 1455.578006][T29159] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1455.607311][ T6308] hid-generic 0000:0000:0003.0093: unknown main item tag 0x0 [ 1455.638237][ T6308] hid-generic 0000:0000:0003.0093: unknown main item tag 0x0 [ 1455.653357][ T6308] hid-generic 0000:0000:0003.0093: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1455.667585][ T6307] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1455.802507][T29159] usb 5-1: config 0 has no interfaces? [ 1455.828102][T29159] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1455.845230][T29159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.899071][T29159] usb 5-1: config 0 descriptor?? [ 1456.054901][ T5896] rtl8150 7-1:1.0: couldn't find required endpoints [ 1456.120643][ T30] kauditd_printk_skb: 1272 callbacks suppressed [ 1456.120660][ T30] audit: type=1326 audit(1768606450.881:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22998 comm="syz.6.5122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf38b8f749 code=0x0 [ 1456.158918][ T5896] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1456.174343][ T5896] usb 7-1: USB disconnect, device number 55 [ 1456.404520][T22972] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5120'. [ 1456.500079][T22972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1456.568993][T16282] usb 5-1: USB disconnect, device number 66 [ 1456.678066][T24613] Bluetooth: hci1: command tx timeout [ 1457.079534][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1457.218143][ T5896] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1457.274439][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1457.377961][ T5896] usb 7-1: Using ep0 maxpacket: 16 [ 1457.385701][ T5896] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1457.394622][ T5896] usb 7-1: config 0 has no interface number 0 [ 1457.410346][ T5896] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1457.439279][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.448007][ T5896] usb 7-1: Product: syz [ 1457.452199][ T5896] usb 7-1: Manufacturer: syz [ 1457.468716][ T5896] usb 7-1: SerialNumber: syz [ 1457.496440][ T5896] usb 7-1: config 0 descriptor?? [ 1457.511186][ T5896] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1458.331912][ T5896] gspca_spca1528: reg_w err -71 [ 1458.348340][ T5896] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1458.372691][ T5896] usb 7-1: USB disconnect, device number 56 [ 1458.726716][ T6307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1458.737268][T24613] Bluetooth: hci1: command tx timeout [ 1458.752752][ T6307] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1458.770074][ T6307] usb 2-1: can't read configurations, error -71 [ 1459.194118][ T6307] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1459.324182][ T36] IPVS: stop unused estimator thread 0... [ 1459.338452][ T6307] usb 2-1: device descriptor read/64, error -71 [ 1459.474910][ T6307] usb usb2-port1: attempt power cycle [ 1459.694477][ T30] audit: type=1326 audit(1768606454.451:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23112 comm="syz.6.5128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf38b8f749 code=0x0 [ 1459.718569][T23160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1459.753668][T23160] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1459.828495][ T6307] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1459.868486][ T6307] usb 2-1: device descriptor read/8, error -71 [ 1460.139381][ T6307] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1460.218255][ T6307] usb 2-1: device descriptor read/8, error -71 [ 1460.349334][ T6307] usb usb2-port1: unable to enumerate USB device [ 1460.440180][T22565] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1460.475858][T22565] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1460.783668][T22565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1460.859497][T22565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1461.003476][T16282] hid_parser_main: 32 callbacks suppressed [ 1461.003491][T16282] hid-generic 0000:0000:0003.0094: unknown main item tag 0x4 [ 1461.069462][T16282] hid-generic 0000:0000:0003.0094: unknown main item tag 0x4 [ 1461.079806][T16282] hid-generic 0000:0000:0003.0094: unknown main item tag 0x0 [ 1461.091069][T16282] hid-generic 0000:0000:0003.0094: unknown main item tag 0x0 [ 1461.109801][T16282] hid-generic 0000:0000:0003.0094: unknown main item tag 0x0 [ 1461.120935][T16282] hid-generic 0000:0000:0003.0094: unknown main item tag 0x0 [ 1461.133094][T16282] hid-generic 0000:0000:0003.0094: unknown main item tag 0x0 [ 1461.145019][T16282] hid-generic 0000:0000:0003.0094: unknown main item tag 0x0 [ 1461.158704][T16282] hid-generic 0000:0000:0003.0094: unknown main item tag 0x0 [ 1461.170659][T16282] hid-generic 0000:0000:0003.0094: unknown main item tag 0x0 [ 1461.185652][T16282] hid-generic 0000:0000:0003.0094: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1461.268086][T12198] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1461.374249][T22565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.402666][T22565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.422738][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.429940][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.441727][T12198] usb 7-1: config 0 has no interfaces? [ 1461.453991][T12198] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1461.477194][T20436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.484346][T20436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.527189][T12198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.545840][T12198] usb 7-1: config 0 descriptor?? [ 1461.644166][T22565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1461.820274][T22565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.904713][T23222] openvswitch: netlink: Flow key attr not present in new flow. [ 1461.930216][T12198] usb 7-1: USB disconnect, device number 57 [ 1462.041116][T22565] veth0_vlan: entered promiscuous mode [ 1462.104498][T22565] veth1_vlan: entered promiscuous mode [ 1462.176247][T22565] veth0_macvtap: entered promiscuous mode [ 1462.204276][T22565] veth1_macvtap: entered promiscuous mode [ 1462.273827][T22565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.554973][T12198] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1462.640327][T22565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1462.704576][T22152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.739602][T22152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.761892][T22152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.777413][T12198] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.791642][T12198] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1462.828476][T22152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.868532][T12198] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1462.894187][T12198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1462.922495][T12198] usb 5-1: SerialNumber: syz [ 1462.989145][ T5952] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1463.055344][ T7104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.093329][ T7104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.148120][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 1463.164347][ T5952] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1463.207393][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.230538][ T5952] usb 7-1: Product: syz [ 1463.236262][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.284288][ T5952] usb 7-1: Manufacturer: syz [ 1463.299092][T12198] usb 5-1: 0:2 : does not exist [ 1463.304873][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.315138][ T5952] usb 7-1: SerialNumber: syz [ 1463.341517][ T5952] usb 7-1: config 0 descriptor?? [ 1463.359376][T12198] usb 5-1: USB disconnect, device number 67 [ 1463.515997][ T7195] udevd[7195]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1463.862067][T23326] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5140'. [ 1463.894990][ T5952] airspy 7-1:0.0: Board ID: 00 [ 1463.917651][ T5952] airspy 7-1:0.0: Firmware version: [ 1464.427725][T16282] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1464.628510][T16282] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1464.638058][T16282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.647859][T16282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.660414][T16282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.729332][T16282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.739492][T16282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.751346][T16282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.769247][T16282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.786222][T16282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.821421][T16282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.835093][T23367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1464.882722][T16282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.898310][T16282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.913597][T16282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.928546][T16282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.940918][T16282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.954501][T16282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.963402][T16282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.972943][T16282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1465.005260][T16282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1465.015412][ T5952] airspy 7-1:0.0: Registered as swradio24 [ 1465.022986][ T5952] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1465.122763][T16282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1465.156558][T16282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1465.216253][ T5952] usb 7-1: USB disconnect, device number 58 [ 1465.257910][T16282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1465.284455][T16282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1465.303378][T16282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1465.333358][T16282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1465.345101][T23398] 8021q: VLANs not supported on ip6gre0 [ 1465.353698][T16282] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1465.370845][T16282] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1465.410466][T16282] usb 2-1: Product: syz [ 1465.428344][T16282] usb 2-1: Manufacturer: syz [ 1465.435647][T16282] usb 2-1: SerialNumber: syz [ 1465.452175][T16282] usb 2-1: config 0 descriptor?? [ 1465.475974][T16282] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1465.784282][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 1465.796716][T16282] usb 2-1: USB disconnect, device number 45 [ 1465.814678][T16282] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1466.192920][T31537] hid_parser_main: 32 callbacks suppressed [ 1466.192943][T31537] hid-generic 0000:0000:0003.0095: unknown main item tag 0x4 [ 1466.240166][T31537] hid-generic 0000:0000:0003.0095: unknown main item tag 0x4 [ 1466.292241][T31537] hid-generic 0000:0000:0003.0095: unknown main item tag 0x0 [ 1466.344460][T31537] hid-generic 0000:0000:0003.0095: unknown main item tag 0x0 [ 1466.378609][T31537] hid-generic 0000:0000:0003.0095: unknown main item tag 0x0 [ 1466.386092][T31537] hid-generic 0000:0000:0003.0095: unknown main item tag 0x0 [ 1466.427726][T16282] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1466.509210][T31537] hid-generic 0000:0000:0003.0095: unknown main item tag 0x0 [ 1466.541780][T23443] tipc: Enabled bearer , priority 0 [ 1466.559099][T31537] hid-generic 0000:0000:0003.0095: unknown main item tag 0x0 [ 1466.566519][T31537] hid-generic 0000:0000:0003.0095: unknown main item tag 0x0 [ 1466.637491][T31537] hid-generic 0000:0000:0003.0095: unknown main item tag 0x0 [ 1466.649114][T16282] usb 7-1: config 0 has no interfaces? [ 1466.670064][T16282] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1466.684840][T31537] hid-generic 0000:0000:0003.0095: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1466.702760][T23442] tipc: Disabling bearer [ 1466.708937][T16282] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.728810][T16282] usb 7-1: config 0 descriptor?? [ 1467.095529][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5155'. [ 1467.123464][T23469] openvswitch: netlink: IP tunnel dst address not specified [ 1467.164976][T23429] openvswitch: netlink: Flow key attr not present in new flow. [ 1467.177531][T12198] usb 7-1: USB disconnect, device number 59 [ 1467.370840][T23496] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5157'. [ 1467.458179][ T6307] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1467.757438][ T6307] usb 5-1: Using ep0 maxpacket: 16 [ 1467.783989][ T6307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1467.869744][ T6307] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1467.904356][ T6307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.912987][ T6307] usb 5-1: Product: syz [ 1467.917772][ T6307] usb 5-1: Manufacturer: syz [ 1467.935574][ T6307] usb 5-1: SerialNumber: syz [ 1467.961770][ T6307] usb 5-1: config 0 descriptor?? [ 1467.979111][ T6307] hub 5-1:0.0: bad descriptor, ignoring hub [ 1467.986682][ T6307] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1468.006583][ T6307] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1468.436573][ T6307] usb 5-1: USB disconnect, device number 68 [ 1468.554767][T11707] udevd[11707]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1469.148518][ T6307] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1469.307573][ T6307] usb 2-1: Using ep0 maxpacket: 32 [ 1469.319817][ T6307] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1469.331554][ T6307] usb 2-1: config 0 has no interface number 0 [ 1469.339567][ T6307] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1469.352916][ T6307] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1469.362658][ T6307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.371269][ T6307] usb 2-1: Product: syz [ 1469.375563][ T6307] usb 2-1: Manufacturer: syz [ 1469.431406][ T6307] usb 2-1: SerialNumber: syz [ 1469.488434][ T6307] usb 2-1: config 0 descriptor?? [ 1469.526018][ T6307] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1469.606419][ T6307] em28xx 2-1:0.132: Video interface 132 found: [ 1469.692904][T12198] hid-generic 0000:0000:0003.0096: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1469.780000][T23601] netlink: 'syz.7.5169': attribute type 12 has an invalid length. [ 1469.798455][T23601] netlink: 'syz.7.5169': attribute type 29 has an invalid length. [ 1469.806602][T23601] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5169'. [ 1469.817290][ T3345] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1469.818419][T23601] netlink: 23 bytes leftover after parsing attributes in process `syz.7.5169'. [ 1469.914936][ T6307] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1469.967736][T31537] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1469.988689][ T3345] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1470.008252][ T3345] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1470.021630][ T3345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1470.030384][ T3345] usb 7-1: Product: syz [ 1470.034595][ T3345] usb 7-1: Manufacturer: syz [ 1470.039547][ T3345] usb 7-1: SerialNumber: syz [ 1470.120189][T31537] usb 6-1: config 0 has no interfaces? [ 1470.125735][T31537] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1470.135814][T31537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.147555][T12198] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1470.154750][T31537] usb 6-1: config 0 descriptor?? [ 1470.259802][ T3345] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1470.326974][ T6307] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1470.343601][T12198] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.354950][ T6307] em28xx 2-1:0.132: board has no eeprom [ 1470.363163][T12198] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1470.376148][T12198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.387986][T12198] usb 5-1: config 0 descriptor?? [ 1470.400556][T12198] pwc: Askey VC010 type 2 USB webcam detected. [ 1470.457317][ T6307] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1470.466217][ T6307] em28xx 2-1:0.132: analog set to bulk mode. [ 1470.473427][ T5952] em28xx 2-1:0.132: Registering V4L2 extension [ 1470.493269][T23592] openvswitch: netlink: Flow key attr not present in new flow. [ 1470.537046][ T6307] usb 6-1: USB disconnect, device number 84 [ 1470.539988][T31537] usb 7-1: USB disconnect, device number 60 [ 1470.589787][T31537] usblp0: removed [ 1470.596147][T12198] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1470.665635][T12198] pwc: recv_control_msg error -71 req 02 val 2700 [ 1470.678903][T12198] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1470.685825][T12198] pwc: recv_control_msg error -71 req 04 val 1000 [ 1470.694059][T12198] pwc: recv_control_msg error -71 req 04 val 1300 [ 1470.701463][T12198] pwc: recv_control_msg error -71 req 04 val 1400 [ 1470.708567][T12198] pwc: recv_control_msg error -71 req 02 val 2000 [ 1470.715656][T12198] pwc: recv_control_msg error -71 req 02 val 2100 [ 1470.723391][T12198] pwc: recv_control_msg error -71 req 04 val 1500 [ 1470.730879][T12198] pwc: recv_control_msg error -71 req 02 val 2500 [ 1470.738182][T12198] pwc: recv_control_msg error -71 req 02 val 2400 [ 1470.744953][T12198] pwc: recv_control_msg error -71 req 02 val 2600 [ 1470.752531][T12198] pwc: recv_control_msg error -71 req 02 val 2900 [ 1470.759374][T12198] pwc: recv_control_msg error -71 req 02 val 2800 [ 1470.766327][T12198] pwc: recv_control_msg error -71 req 04 val 1100 [ 1470.776098][T12198] pwc: recv_control_msg error -71 req 04 val 1200 [ 1470.799938][T12198] pwc: Registered as video103. [ 1470.829259][T12198] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input125 [ 1470.855934][T12198] usb 5-1: USB disconnect, device number 69 [ 1470.956266][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5172'. [ 1471.009935][T23667] xt_CT: No such helper "snmp_trap" [ 1471.215612][T23684] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 1471.617897][ T5952] em28xx 2-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 1471.770136][ T5952] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1471.779251][T12198] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1471.802462][ T5952] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1471.824020][ T5952] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1471.893634][ T5952] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1471.916264][ T5952] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1471.937526][T12198] usb 7-1: Using ep0 maxpacket: 16 [ 1471.944850][T12198] usb 7-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1471.954481][T12198] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.967454][ T5952] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1471.988393][T12198] usb 7-1: config 0 descriptor?? [ 1472.003931][ T5952] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1472.005128][T29159] usb 2-1: USB disconnect, device number 46 [ 1472.053477][T29159] em28xx 2-1:0.132: Disconnecting em28xx [ 1472.153369][ T5952] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1472.162536][ T5952] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1472.170244][ T5952] em28xx 2-1:0.132: No AC97 audio processor [ 1472.227408][ T5952] usb 2-1: Decoder not found [ 1472.233419][ T5952] em28xx 2-1:0.132: failed to create media graph [ 1472.240913][ T5952] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1472.280873][T24613] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 1472.314044][ T5952] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1472.465832][T12198] cherry 0003:046A:0027.0097: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.6-1/input0 [ 1472.483619][T29159] em28xx 2-1:0.132: Closing input extension [ 1472.529020][T29159] em28xx 2-1:0.132: Freeing device [ 1472.642110][T31537] usb 7-1: USB disconnect, device number 61 [ 1473.236140][T23748] netlink: 'syz.7.5178': attribute type 1 has an invalid length. [ 1473.250414][T23748] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5178'. [ 1473.695588][T12198] hid_parser_main: 74 callbacks suppressed [ 1473.695603][T12198] hid-generic 0000:0000:0003.0098: unknown main item tag 0x4 [ 1473.720144][T12198] hid-generic 0000:0000:0003.0098: unknown main item tag 0x4 [ 1473.728467][T12198] hid-generic 0000:0000:0003.0098: unknown main item tag 0x0 [ 1473.736423][T12198] hid-generic 0000:0000:0003.0098: unknown main item tag 0x0 [ 1473.738510][T23775] program syz.1.5185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1473.767027][T12198] hid-generic 0000:0000:0003.0098: unknown main item tag 0x0 [ 1473.777613][T12198] hid-generic 0000:0000:0003.0098: unknown main item tag 0x0 [ 1473.785232][T12198] hid-generic 0000:0000:0003.0098: unknown main item tag 0x0 [ 1473.858095][T12198] hid-generic 0000:0000:0003.0098: unknown main item tag 0x0 [ 1473.877942][T12198] hid-generic 0000:0000:0003.0098: unknown main item tag 0x0 [ 1473.896464][T12198] hid-generic 0000:0000:0003.0098: unknown main item tag 0x0 [ 1473.918037][T12198] hid-generic 0000:0000:0003.0098: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1473.928733][ T5896] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1474.090833][ T5896] usb 7-1: config 0 has no interfaces? [ 1474.132789][ T5896] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1474.157751][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.169779][ T5896] usb 7-1: config 0 descriptor?? [ 1474.486234][T23769] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1474.498179][ T5896] usb 7-1: USB disconnect, device number 62 [ 1474.705797][T23807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5187'. [ 1474.793674][T23805] xt_CT: No such helper "snmp_trap" [ 1475.830495][ T30] audit: type=1326 audit(1768606470.591:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23820 comm="syz.4.5190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1475.903674][ T30] audit: type=1326 audit(1768606470.591:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23820 comm="syz.4.5190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1475.962771][ T30] audit: type=1326 audit(1768606470.611:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23820 comm="syz.4.5190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1476.238780][T23841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5195'. [ 1476.258332][T23841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.313707][T31537] hid-generic 0006:0004:0009.0099: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1476.422938][T23841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.661691][T31537] hid-generic 0000:0000:0003.009A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1477.243645][T23904] blktrace: Concurrent blktraces are not allowed on sg0 [ 1477.253909][T23905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5200'. [ 1477.276637][T23900] xt_CT: No such helper "snmp_trap" [ 1478.037554][T24613] Bluetooth: hci5: unexpected event 0x09 length: 6 > 3 [ 1478.170030][T23915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5204'. [ 1478.253687][T23917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5204'. [ 1478.277491][ T6308] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1478.288518][T23917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5204'. [ 1478.303759][T23915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5204'. [ 1478.511111][ T6308] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1478.524011][ T6308] usb 5-1: config 0 has no interface number 0 [ 1478.545426][ T6308] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1478.547328][T31537] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1478.588940][ T6308] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 1478.620801][ T6308] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1478.647587][ T6308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.669681][ T6308] usb 5-1: config 0 descriptor?? [ 1478.758173][T23909] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1478.807719][T31537] usb 2-1: device descriptor read/64, error -71 [ 1478.864343][ T6308] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1478.997763][ T5896] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1479.047856][T31537] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1479.167980][ T5896] usb 7-1: Using ep0 maxpacket: 16 [ 1479.177812][T31537] usb 2-1: device descriptor read/64, error -71 [ 1479.185401][ T5896] usb 7-1: config 132 has an invalid interface number: 4 but max is 0 [ 1479.195198][ T5896] usb 7-1: config 132 has no interface number 0 [ 1479.205802][ T5896] usb 7-1: config 132 interface 4 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 1479.220896][ T5896] usb 7-1: config 132 interface 4 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 431 [ 1479.232834][ T5896] usb 7-1: config 132 interface 4 altsetting 0 endpoint 0xF has an invalid bInterval 241, changing to 11 [ 1479.249926][ T5896] usb 7-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 1479.266248][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.277158][ T5896] usb 7-1: Product: syz [ 1479.282505][ T5896] usb 7-1: Manufacturer: syz [ 1479.290861][T31537] usb usb2-port1: attempt power cycle [ 1479.299709][ T5896] usb 7-1: SerialNumber: syz [ 1479.326258][T23935] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1479.339196][T23935] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1479.648209][T31537] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1479.680497][T31537] usb 2-1: device descriptor read/8, error -71 [ 1479.791690][T23935] input: syz0 as /devices/virtual/input/input126 [ 1479.938197][T31537] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1479.958683][T31537] usb 2-1: device descriptor read/8, error -71 [ 1480.067942][T31537] usb usb2-port1: unable to enumerate USB device [ 1480.117286][ T5882] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1480.255156][T31537] usb 5-1: USB disconnect, device number 70 [ 1480.269730][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.314311][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.329594][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1480.343505][ T5882] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1480.353514][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.370493][ T5882] usb 6-1: config 0 descriptor?? [ 1480.804941][ T5882] plantronics 0003:047F:FFFF.009B: reserved main item tag 0xd [ 1480.839356][ T5882] plantronics 0003:047F:FFFF.009B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1481.079839][T31537] usb 6-1: USB disconnect, device number 85 [ 1481.643549][T31537] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1481.869652][T31537] usb 2-1: Using ep0 maxpacket: 32 [ 1481.880053][T31537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 1481.920938][T31537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 1481.999802][ T5896] usb 7-1: USB disconnect, device number 63 [ 1482.020191][T31537] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1482.055790][T31537] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.081796][T31537] usb 2-1: Product: syz [ 1482.129791][T31537] usb 2-1: Manufacturer: syz [ 1482.138749][T31537] usb 2-1: SerialNumber: syz [ 1482.177514][T31537] usb 2-1: config 0 descriptor?? [ 1482.186606][T24038] fuse: Unknown parameter '00000000000000000000' [ 1482.285062][T31537] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1482.421385][ T6050] usb 2-1: Failed to submit usb control message: -71 [ 1482.429844][ T5952] usb 2-1: USB disconnect, device number 51 [ 1482.445873][ T6050] usb 2-1: unable to send the bmi data to the device: -71 [ 1482.459707][ T6050] usb 2-1: unable to get target info from device [ 1482.466340][ T6050] usb 2-1: could not get target info (-71) [ 1482.473893][ T6050] usb 2-1: could not probe fw (-71) [ 1483.579671][T23980] syz.4.5210 (23980): drop_caches: 1 [ 1483.677091][T23983] syz.4.5210 (23983): drop_caches: 1 [ 1483.714760][ T5952] hid_parser_main: 79 callbacks suppressed [ 1483.714774][ T5952] hid-generic 0000:0000:0003.009C: unknown main item tag 0x4 [ 1483.736636][ T5952] hid-generic 0000:0000:0003.009C: unknown main item tag 0x4 [ 1483.756459][ T5952] hid-generic 0000:0000:0003.009C: unknown main item tag 0x0 [ 1483.784149][ T5952] hid-generic 0000:0000:0003.009C: unknown main item tag 0x0 [ 1483.806230][ T5952] hid-generic 0000:0000:0003.009C: unknown main item tag 0x0 [ 1483.851253][ T5952] hid-generic 0000:0000:0003.009C: unknown main item tag 0x0 [ 1483.869738][ T5952] hid-generic 0000:0000:0003.009C: unknown main item tag 0x0 [ 1483.891103][ T5952] hid-generic 0000:0000:0003.009C: unknown main item tag 0x0 [ 1483.911243][ T5952] hid-generic 0000:0000:0003.009C: unknown main item tag 0x0 [ 1483.919213][ T5952] hid-generic 0000:0000:0003.009C: unknown main item tag 0x0 [ 1483.930534][ T5952] hid-generic 0000:0000:0003.009C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1483.987855][T31537] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1484.147845][ T5896] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1484.160266][T31537] usb 7-1: config 0 has no interfaces? [ 1484.165866][T31537] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1484.176347][T31537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.189339][T31537] usb 7-1: config 0 descriptor?? [ 1484.307512][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 1484.339511][ T5896] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 50, changing to 9 [ 1484.355277][ T5896] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1484.381770][ T5896] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.40 [ 1484.422769][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.441384][ T5896] usb 6-1: Product: 㻠 [ 1484.451554][ T5896] usb 6-1: Manufacturer: □はᑮ‘뺊꘱⤳츹쑣⽂積誦㺣Ꮛ薛⨶⟷컈匯跧፪貚⢃伢儐넱뗪ሕ㼄坄ǥ⣗膫簛晃ᳳ﷝Ņ嗫椆䟻龓ﺦ즯ᰧ∨였䆤챢诓ꑥ쵈㵱풕靳ᑲ꣎ป톹⠨ᶂ憓ꑲኤ紁ﭹ鮓 [ 1484.503351][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.510067][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.518356][ T5896] usb 6-1: SerialNumber: syz [ 1484.534780][T24085] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1484.585687][ T5952] usb 7-1: USB disconnect, device number 64 [ 1484.987862][T31537] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1485.150555][T31537] usb 2-1: config 3 has an invalid interface number: 168 but max is 0 [ 1485.160680][T31537] usb 2-1: config 3 has no interface number 0 [ 1485.168436][T31537] usb 2-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1485.182629][T31537] usb 2-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 1485.199612][T31537] usb 2-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1485.211467][T31537] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1485.222039][T31537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.244233][T24118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1485.291351][ T5896] usbhid 6-1:1.0: can't add hid device: -71 [ 1485.305813][ T5896] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1485.348180][ T5896] usb 6-1: USB disconnect, device number 86 [ 1485.459578][T24118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.485472][T24118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.877861][ T5952] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1486.006410][T31537] usb 2-1: string descriptor 0 read error: -71 [ 1486.027982][T31537] keyspan 2-1:3.168: Keyspan 2 port adapter converter detected [ 1486.040921][T31537] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 1 [ 1486.059011][ T5952] usb 5-1: config 0 has an invalid interface number: 44 but max is 1 [ 1486.067796][ T5952] usb 5-1: config 0 has an invalid interface number: 92 but max is 1 [ 1486.070313][T31537] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 84 [ 1486.076186][ T5952] usb 5-1: config 0 has no interface number 0 [ 1486.076208][ T5952] usb 5-1: config 0 has no interface number 1 [ 1486.076277][ T5952] usb 5-1: config 0 interface 44 has no altsetting 0 [ 1486.076296][ T5952] usb 5-1: config 0 interface 92 has no altsetting 0 [ 1486.082211][ T5952] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01ab, bcdDevice=85.24 [ 1486.093692][T31537] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 2 [ 1486.097854][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.152651][T31537] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1486.173475][T31537] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 88 [ 1486.193649][T31537] keyspan 2-1:3.168: found no endpoint descriptor for endpoint 6 [ 1486.197843][ T6307] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1486.212866][T31537] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1486.254198][T31537] usb 2-1: USB disconnect, device number 52 [ 1486.286148][ T5952] usb 5-1: Product: syz [ 1486.298418][ T5952] usb 5-1: Manufacturer: syz [ 1486.303064][ T5952] usb 5-1: SerialNumber: syz [ 1486.310947][ T5952] usb 5-1: config 0 descriptor?? [ 1486.316041][ T5952] usb 5-1: Interface #92 referenced by multiple IADs [ 1486.334347][T31537] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1486.373725][T31537] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1486.385299][T31537] keyspan 2-1:3.168: device disconnected [ 1486.427410][ T6307] usb 6-1: Using ep0 maxpacket: 8 [ 1486.453881][ T6307] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1486.469990][ T6307] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1486.480794][ T6307] usb 6-1: string descriptor 0 read error: -22 [ 1486.491852][ T6307] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1486.505274][ T6307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.566628][ T6307] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1486.587099][ T6307] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1486.598671][ T6307] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1486.605912][ T6307] usb 6-1: media controller created [ 1486.660766][ T6307] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1486.722451][ T5952] ftdi_sio 5-1:0.44: FTDI USB Serial Device converter detected [ 1486.774289][ T5952] ftdi_sio ttyUSB0: unknown device type: 0x8524 [ 1486.778281][ T5882] hid-generic 0000:0000:0003.009D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1486.833783][ T5952] ftdi_sio 5-1:0.92: FTDI USB Serial Device converter detected [ 1486.868833][ T5952] ftdi_sio ttyUSB1: unknown device type: 0x8524 [ 1486.911836][ T5952] usb 5-1: USB disconnect, device number 71 [ 1486.941366][ T5952] ftdi_sio 5-1:0.44: device disconnected [ 1486.984656][ T5952] ftdi_sio 5-1:0.92: device disconnected [ 1487.116229][T24286] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5238'. [ 1487.238655][T24299] netlink: 1036 bytes leftover after parsing attributes in process `syz.6.5242'. [ 1487.478019][T31537] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1487.654444][T31537] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1487.777496][ T6307] zl10353_read_register: readreg error (reg=127, ret==0) [ 1487.786966][T31537] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1487.883678][T31537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1487.921753][T31537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 1487.951778][T31537] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1488.003671][T31537] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1488.016055][T31537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.025829][T31537] usb 5-1: Product: syz [ 1488.031973][T31537] usb 5-1: Manufacturer: syz [ 1488.036731][T31537] usb 5-1: SerialNumber: syz [ 1488.045426][T31537] usb 5-1: config 0 descriptor?? [ 1488.052624][T24294] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1488.070327][T31537] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input128 [ 1488.401582][T24332] loop9: detected capacity change from 0 to 7 [ 1488.424258][T24332] buffer_io_error: 32 callbacks suppressed [ 1488.424271][T24332] Buffer I/O error on dev loop9, logical block 0, async page read [ 1488.476933][T24332] Buffer I/O error on dev loop9, logical block 0, async page read [ 1488.523212][T24332] Buffer I/O error on dev loop9, logical block 0, async page read [ 1488.558643][T24332] Buffer I/O error on dev loop9, logical block 0, async page read [ 1488.593496][T24332] Buffer I/O error on dev loop9, logical block 0, async page read [ 1488.608157][T24332] Buffer I/O error on dev loop9, logical block 0, async page read [ 1488.681102][T24332] Buffer I/O error on dev loop9, logical block 0, async page read [ 1488.705218][T24332] ldm_validate_partition_table(): Disk read failed. [ 1488.727660][T24332] Buffer I/O error on dev loop9, logical block 0, async page read [ 1488.749683][T24332] Buffer I/O error on dev loop9, logical block 0, async page read [ 1488.774807][T24332] Buffer I/O error on dev loop9, logical block 0, async page read [ 1488.799038][T24332] Dev loop9: unable to read RDB block 0 [ 1488.814116][T24332] loop9: unable to read partition table [ 1488.821587][T24332] loop9: partition table beyond EOD, truncated [ 1488.829475][T24332] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1488.829475][T24332] ) failed (rc=-5) [ 1489.035465][T31537] usb 6-1: USB disconnect, device number 87 [ 1490.470663][ T5882] usb 5-1: USB disconnect, device number 72 [ 1490.968702][T24378] delete_channel: no stack [ 1491.263553][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5251'. [ 1491.280842][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5251'. [ 1491.936004][T24424] loop4: detected capacity change from 0 to 1 [ 1491.949298][T24424] Dev loop4: unable to read RDB block 1 [ 1491.954895][T24424] loop4: unable to read partition table [ 1492.028013][T24426] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1492.036914][T24426] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1492.046135][T24426] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1492.087966][T24424] loop4: partition table beyond EOD, truncated [ 1492.111185][T24424] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1492.541347][ T5952] hid_parser_main: 74 callbacks suppressed [ 1492.541371][ T5952] hid-generic 0000:0000:0003.009E: unknown main item tag 0x4 [ 1492.582450][ T5952] hid-generic 0000:0000:0003.009E: unknown main item tag 0x4 [ 1492.620883][ T5952] hid-generic 0000:0000:0003.009E: unknown main item tag 0x0 [ 1492.679305][ T5952] hid-generic 0000:0000:0003.009E: unknown main item tag 0x0 [ 1492.802843][ T5952] hid-generic 0000:0000:0003.009E: unknown main item tag 0x0 [ 1492.814997][ T5952] hid-generic 0000:0000:0003.009E: unknown main item tag 0x0 [ 1492.837188][ T5952] hid-generic 0000:0000:0003.009E: unknown main item tag 0x0 [ 1492.889459][ T5952] hid-generic 0000:0000:0003.009E: unknown main item tag 0x0 [ 1492.896884][ T5952] hid-generic 0000:0000:0003.009E: unknown main item tag 0x0 [ 1492.947551][ T5952] hid-generic 0000:0000:0003.009E: unknown main item tag 0x0 [ 1492.963373][ T5952] hid-generic 0000:0000:0003.009E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1494.383879][T24464] kvm: pic: level sensitive irq not supported [ 1494.384222][T24464] kvm: pic: non byte read [ 1494.408113][T24464] kvm: pic: non byte read [ 1494.415110][T24464] kvm: pic: non byte read [ 1494.418993][T31537] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1494.590208][T31537] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.616338][T31537] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1494.653284][T31537] usb 5-1: New USB device found, idVendor=227d, idProduct=0709, bcdDevice= 0.40 [ 1494.682897][T31537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.695665][T31537] usb 5-1: Product: syz [ 1494.706209][T31537] usb 5-1: Manufacturer: 蘊則㇚ퟥ얏賴栆䄏ﴽᡙ忶忛樇먂郿᝗ᣛ톯 [ 1494.745026][T31537] usb 5-1: SerialNumber: syz [ 1494.897229][T12198] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1494.983792][T31537] usbhid 5-1:1.0: can't add hid device: -71 [ 1495.007710][T31537] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1495.036833][T31537] usb 5-1: USB disconnect, device number 73 [ 1495.050669][T12198] usb 7-1: Using ep0 maxpacket: 16 [ 1495.059776][T12198] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1495.144208][T12198] usb 7-1: config 1 has an invalid interface number: 244 but max is 1 [ 1495.251123][T12198] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.270547][T12198] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1495.294442][T12198] usb 7-1: config 1 has no interface number 2 [ 1495.325540][T12198] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.487279][T12198] usb 7-1: config 1 interface 244 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1495.514159][T12198] usb 7-1: config 1 interface 244 has no altsetting 0 [ 1495.523422][T12198] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1495.553134][T12198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.571651][T12198] usb 7-1: Product: syz [ 1495.588267][T24518] xt_connbytes: Forcing CT accounting to be enabled [ 1495.629390][T12198] usb 7-1: Manufacturer: syz [ 1495.640263][T24520] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5270'. [ 1495.654712][T12198] usb 7-1: SerialNumber: syz [ 1495.943551][T24492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.969331][T24492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.023914][T12198] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1496.049585][T12198] cdc_ncm 7-1:1.0: bind() failure [ 1496.104441][T12198] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1496.125131][T12198] cdc_ncm 7-1:1.1: bind() failure [ 1496.188029][T12198] cdc_mbim 7-1:1.244: probe with driver cdc_mbim failed with error -71 [ 1496.218149][T12198] usb 7-1: USB disconnect, device number 65 [ 1496.347641][ T5952] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1496.517805][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 1496.569741][ T5952] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1496.608116][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.631729][ T5952] usb 2-1: Product: syz [ 1496.636701][ T5952] usb 2-1: Manufacturer: syz [ 1496.642393][ T5952] usb 2-1: SerialNumber: syz [ 1496.654146][ T5952] usb 2-1: config 0 descriptor?? [ 1496.882928][ T5952] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1496.891491][T12198] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1497.069988][T12198] usb 7-1: config 201 has an invalid interface number: 249 but max is 0 [ 1497.117698][T12198] usb 7-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.132844][T12198] usb 7-1: config 201 has no interface number 0 [ 1497.142620][T12198] usb 7-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 1497.156290][T12198] usb 7-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0x52, changing to 0x2 [ 1497.177045][T12198] usb 7-1: config 201 interface 249 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1497.189282][T12198] usb 7-1: config 201 interface 249 altsetting 4 endpoint 0x2 has invalid maxpacket 241, setting to 64 [ 1497.202458][T12198] usb 7-1: config 201 interface 249 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1497.217021][T12198] usb 7-1: config 201 interface 249 has no altsetting 0 [ 1497.241448][T12198] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1497.250851][T12198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.280624][T12198] usb 7-1: Product: syz [ 1497.285208][T12198] usb 7-1: Manufacturer: syz [ 1497.291290][T12198] usb 7-1: SerialNumber: syz [ 1497.305294][T24562] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1497.367294][ T6307] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1497.528073][T12198] ath6kl: Failed to submit usb control message: -71 [ 1497.534999][T12198] ath6kl: unable to send the bmi data to the device: -71 [ 1497.543069][T12198] ath6kl: Unable to send get target info: -71 [ 1497.562084][ T6307] usb 5-1: Using ep0 maxpacket: 16 [ 1497.570233][T12198] ath6kl: Failed to init ath6kl core: -71 [ 1497.577980][ T6307] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1497.588042][T12198] ath6kl_usb 7-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 1497.596843][ T6307] usb 5-1: config 0 has no interface number 0 [ 1497.614569][ T6307] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1497.630809][T12198] usb 7-1: USB disconnect, device number 66 [ 1497.643880][ T6307] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1497.665589][ T6307] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1497.682766][ T6307] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1497.692863][ T6307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.703312][ T5952] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1497.721307][ T5952] usb 2-1: USB disconnect, device number 53 [ 1497.727395][ T6307] usb 5-1: Product: syz [ 1497.739507][ T6307] usb 5-1: Manufacturer: syz [ 1497.752112][ T6307] usb 5-1: SerialNumber: syz [ 1497.765067][ T6307] usb 5-1: config 0 descriptor?? [ 1497.776455][ T6307] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1497.861738][ T6307] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -12 [ 1497.876382][ T7675] udevd[7675]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1497.976141][ T5952] usb 5-1: USB disconnect, device number 74 [ 1498.115058][T12198] hid_parser_main: 32 callbacks suppressed [ 1498.115074][T12198] hid-generic 0000:0000:0003.009F: unknown main item tag 0x4 [ 1498.135448][T12198] hid-generic 0000:0000:0003.009F: unknown main item tag 0x4 [ 1498.167600][T12198] hid-generic 0000:0000:0003.009F: unknown main item tag 0x0 [ 1498.175056][T12198] hid-generic 0000:0000:0003.009F: unknown main item tag 0x0 [ 1498.210426][T12198] hid-generic 0000:0000:0003.009F: unknown main item tag 0x0 [ 1498.220481][T12198] hid-generic 0000:0000:0003.009F: unknown main item tag 0x0 [ 1498.237602][T12198] hid-generic 0000:0000:0003.009F: unknown main item tag 0x0 [ 1498.245100][T12198] hid-generic 0000:0000:0003.009F: unknown main item tag 0x0 [ 1498.253638][T12198] hid-generic 0000:0000:0003.009F: unknown main item tag 0x0 [ 1498.262969][T12198] hid-generic 0000:0000:0003.009F: unknown main item tag 0x0 [ 1498.274746][T12198] hid-generic 0000:0000:0003.009F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1498.418422][T31537] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1498.590802][T31537] usb 7-1: config 0 has no interfaces? [ 1498.596572][T31537] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1498.624794][T31537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.726275][T31537] usb 7-1: config 0 descriptor?? [ 1498.990629][T24658] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5284'. [ 1499.300367][ T5952] usb 7-1: USB disconnect, device number 67 [ 1500.056482][T24689] kvm: pic: non byte write [ 1500.368118][ T5952] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1500.537477][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 1500.560583][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.673410][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1500.684490][ T5952] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 1500.695027][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.718607][ T5952] usb 7-1: config 0 descriptor?? [ 1500.938943][ T5952] usbhid 7-1:0.0: can't add hid device: -71 [ 1500.944980][ T5952] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1500.995939][ T5952] usb 7-1: USB disconnect, device number 68 [ 1501.413762][T24718] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5290'. [ 1501.679566][T24725] netlink: 'syz.7.5291': attribute type 4 has an invalid length. [ 1502.022198][ T30] audit: type=1326 audit(1768606496.741:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1502.114241][ T30] audit: type=1326 audit(1768606496.741:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1502.196595][ T30] audit: type=1326 audit(1768606496.741:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1502.347846][T31537] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1502.373437][ T30] audit: type=1326 audit(1768606496.741:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1502.398347][ T30] audit: type=1326 audit(1768606496.741:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1502.422556][ T30] audit: type=1326 audit(1768606496.751:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1502.467747][ T30] audit: type=1326 audit(1768606496.751:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1502.527759][T31537] usb 5-1: Using ep0 maxpacket: 8 [ 1502.537715][T31537] usb 5-1: config 4 has an invalid interface number: 244 but max is 0 [ 1502.577736][T31537] usb 5-1: config 4 has no interface number 0 [ 1502.583877][T31537] usb 5-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 1502.605357][ T30] audit: type=1326 audit(1768606496.751:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1502.670437][T31537] usb 5-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1502.718633][ T30] audit: type=1326 audit(1768606496.751:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1502.748627][T31537] usb 5-1: config 4 interface 244 has no altsetting 0 [ 1502.787716][T31537] usb 5-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 1502.788348][T24771] input: syz0 as /devices/virtual/input/input129 [ 1502.830781][T31537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.844093][ T30] audit: type=1326 audit(1768606496.751:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.4.5293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae258f749 code=0x7ffc0000 [ 1502.873781][T31537] usb 5-1: Product: syz [ 1502.900516][T31537] usb 5-1: Manufacturer: syz [ 1502.905163][T31537] usb 5-1: SerialNumber: syz [ 1503.056833][T24783] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5297'. [ 1503.185269][T24745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.240612][T24745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.338368][T31537] ipheth 5-1:4.244: Unable to find endpoints [ 1503.374890][T31537] usb 5-1: USB disconnect, device number 75 [ 1503.776327][T24785] syz.1.5296 (24785): drop_caches: 2 [ 1504.380997][T24785] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5296'. [ 1505.222769][T24829] [U] [ 1505.225526][T24829] [U] [ 1505.228261][T24829] [U] [ 1505.230937][T24829] [U] [ 1505.405251][T24829] [U] [ 1505.826864][ T6308] hid_parser_main: 32 callbacks suppressed [ 1505.826879][ T6308] hid-generic 0003:0004:0000.00A0: unknown main item tag 0x0 [ 1505.864168][ T6308] hid-generic 0003:0004:0000.00A0: unknown main item tag 0x0 [ 1505.887439][ T6308] hid-generic 0003:0004:0000.00A0: unknown main item tag 0x0 [ 1505.914916][ T6308] hid-generic 0003:0004:0000.00A0: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1506.077329][ T6308] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1506.260192][ T6308] usb 2-1: Using ep0 maxpacket: 16 [ 1506.279386][ T6308] usb 2-1: config 0 has no interfaces? [ 1506.285203][ T6308] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1506.295288][ T6308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.388140][ T6308] usb 2-1: config 0 descriptor?? [ 1506.536144][T24878] binder_alloc: binder_alloc_mmap_handler: 24876 200000ffd000-200001000000 already mapped failed -16 [ 1506.550698][T24878] binder_alloc: binder_alloc_mmap_handler: 24876 200000ffd000-200001000000 already mapped failed -16 [ 1506.557744][T24879] binder: BINDER_SET_CONTEXT_MGR already set [ 1506.564506][T24878] binder_alloc: binder_alloc_mmap_handler: 24876 200000ffd000-200001000000 already mapped failed -16 [ 1506.681967][T24882] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5310'. [ 1506.762224][T24879] binder: 24876:24879 ioctl 4018620d 200000004a80 returned -16 [ 1506.778544][T24878] binder_alloc: binder_alloc_mmap_handler: 24876 200000ffd000-200001000000 already mapped failed -16 [ 1506.811844][T24879] binder: BINDER_SET_CONTEXT_MGR already set [ 1506.848700][T24879] binder: 24876:24879 ioctl 4018620d 200000004a80 returned -16 [ 1507.397557][T24904] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5313'. [ 1507.423397][T24900] xt_CT: No such helper "snmp_trap" [ 1507.887212][ T5952] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1508.080325][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 1508.124586][ T5952] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1508.153235][ T5952] usb 5-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 1508.173343][ T5952] usb 5-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 1508.236330][ T5952] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1508.261715][ T5952] usb 5-1: string descriptor 0 read error: -22 [ 1508.286632][ T5952] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1508.324281][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.386327][ T5952] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1508.426536][ T5952] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1508.466816][ T5952] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1508.497836][ T5952] usb 5-1: media controller created [ 1508.562224][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1508.570921][ T6308] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1508.736487][ T6307] usb 2-1: USB disconnect, device number 54 [ 1508.756889][ T6308] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1508.769193][ T6308] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.825225][ T6308] usb 6-1: config 0 has no interface number 0 [ 1508.853714][ T6308] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1508.901751][ T6308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.928957][ T6308] usb 6-1: Product: syz [ 1508.943636][ T6308] usb 6-1: Manufacturer: syz [ 1508.956938][ T6308] usb 6-1: SerialNumber: syz [ 1508.981685][ T6308] usb 6-1: config 0 descriptor?? [ 1509.000662][ T6308] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1509.205112][T31537] usb 6-1: USB disconnect, device number 88 [ 1509.207501][ T6307] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1509.378083][ T6307] usb 2-1: Using ep0 maxpacket: 16 [ 1509.385276][ T6307] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.397634][ T6307] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.408485][ T6307] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1509.415159][ T6307] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1509.425253][ T6307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.439885][ T6307] usb 2-1: config 0 descriptor?? [ 1509.697681][ T5952] zl10353_read_register: readreg error (reg=127, ret==0) [ 1510.157420][ T5952] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1510.240721][ T6307] cougar 0003:060B:500A.00A1: unexpected long global item [ 1510.252625][ T6307] cougar 0003:060B:500A.00A1: parse failed [ 1510.260455][ T6307] cougar 0003:060B:500A.00A1: probe with driver cougar failed with error -22 [ 1510.323378][ T5952] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1510.353692][ T5952] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1510.379318][ T5952] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1510.388117][ T5952] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1510.399157][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.404166][T24979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5322'. [ 1510.408500][ T5952] usb 6-1: Product: syz [ 1510.422069][ T5952] usb 6-1: Manufacturer: syz [ 1510.426678][ T5952] usb 6-1: SerialNumber: syz [ 1510.439382][ T6307] usb 2-1: USB disconnect, device number 55 [ 1510.494764][T24969] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1510.535153][T24969] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1510.679379][ T5882] usb 5-1: USB disconnect, device number 76 [ 1510.894417][T25020] netlink: 'syz.4.5325': attribute type 27 has an invalid length. [ 1510.917726][T25020] gretap2: left allmulticast mode [ 1510.928746][T25020] macvtap1: left promiscuous mode [ 1510.945080][T25020] macvtap1: left allmulticast mode [ 1511.115575][T25020] bridge0: left promiscuous mode [ 1511.131413][T25020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.153033][T25020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.165755][T25020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1511.327746][ T5882] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1511.329391][ T6308] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1511.372731][T25039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1511.487738][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 1511.496060][ T5882] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1511.532488][T25041] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5329'. [ 1511.578122][ T5882] usb 5-1: config 0 has no interface number 0 [ 1511.578663][ T6308] usb 7-1: Using ep0 maxpacket: 32 [ 1511.597955][ T6308] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.611055][T24969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.620690][T24969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.634522][ T6308] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.648112][ T5882] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1511.659305][T24969] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5321'. [ 1511.670218][ T6308] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1511.681547][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.690571][ T5882] usb 5-1: Product: syz [ 1511.691268][ T6308] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1511.703410][ T5882] usb 5-1: Manufacturer: syz [ 1511.703431][ T5882] usb 5-1: SerialNumber: syz [ 1511.712377][ T5882] usb 5-1: config 0 descriptor?? [ 1511.721140][ T6308] usb 7-1: Product: syz [ 1511.726510][ T5952] (unnamed net_device) (uninitialized): Assigned a random MAC address: a6:a0:b4:20:53:99 [ 1511.785452][ T5952] rtl8150 6-1:1.0: eth13: rtl8150 is detected [ 1511.793608][ T6308] usb 7-1: Manufacturer: syz [ 1511.793699][ T5882] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1511.819821][ T5952] usb 6-1: USB disconnect, device number 89 [ 1511.831784][ T6308] hub 7-1:4.0: USB hub found [ 1512.042458][ T6308] hub 7-1:4.0: 2 ports detected [ 1512.310083][ T5882] gspca_spca1528: reg_w err -110 [ 1512.348167][ T5882] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 1512.417295][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1512.649475][ T5882] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1512.810528][ T5882] usb 6-1: not running at top speed; connect to a high speed hub [ 1512.823824][ T5882] usb 6-1: config 14 has an invalid interface number: 21 but max is 0 [ 1512.834797][ T5882] usb 6-1: config 14 has no interface number 0 [ 1512.842019][ T5882] usb 6-1: config 14 interface 21 has no altsetting 0 [ 1512.858489][ T5882] usb 6-1: string descriptor 0 read error: -22 [ 1512.872379][ T5882] usb 6-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 1512.893889][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.935121][ T5882] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1512.952447][ T5882] usb 6-1: MIDIStreaming interface descriptor not found [ 1513.126832][ T5882] usb 6-1: USB disconnect, device number 90 [ 1513.491801][ T5952] usb 7-1: USB disconnect, device number 69 [ 1513.591377][T25123] loop9: detected capacity change from 0 to 7 [ 1513.604733][T25123] Dev loop9: unable to read RDB block 7 [ 1513.612291][T25123] loop9: unable to read partition table [ 1513.620395][T25123] loop9: partition table beyond EOD, truncated [ 1513.626573][T25123] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1513.684543][T25128] netlink: 'syz.7.5333': attribute type 4 has an invalid length. [ 1513.846614][ T5882] usb 5-1: USB disconnect, device number 77 [ 1513.993780][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] SMP KASAN PTI [ 1514.005699][ C1] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 1514.014096][ C1] CPU: 1 UID: 0 PID: 25150 Comm: syz.4.5336 Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.025008][ C1] Tainted: [L]=SOFTLOCKUP [ 1514.029323][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1514.039380][ C1] RIP: 0010:skb_segment+0x2ace/0x3f90 [ 1514.044754][ C1] Code: 00 00 00 8b 6c 24 58 81 7c 24 14 ff ff 00 00 0f 85 12 e1 ff ff e8 12 8b 8e f8 48 8b 44 24 20 48 8d 58 70 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 14 09 00 00 8b 1b e9 17 e1 ff ff e8 e9 [ 1514.064433][ C1] RSP: 0018:ffffc90000a071d0 EFLAGS: 00010202 [ 1514.070489][ C1] RAX: 000000000000000e RBX: 0000000000000070 RCX: ffff888025678000 [ 1514.078525][ C1] RDX: 0000000000000100 RSI: ffff8880a31b956e RDI: 000000000000ffff [ 1514.086480][ C1] RBP: 0000000000000003 R08: ffff888025678000 R09: 0000000000000002 [ 1514.094440][ C1] R10: 000000000000a888 R11: 0000000000000100 R12: ffff8880a31b9560 [ 1514.102396][ C1] R13: 00000000fffffff8 R14: 0000000000000000 R15: dffffc0000000000 [ 1514.110345][ C1] FS: 00007faae336b6c0(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000 [ 1514.119251][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1514.125815][ C1] CR2: 00007faae336af98 CR3: 00000000764de000 CR4: 00000000003526f0 [ 1514.133768][ C1] Call Trace: [ 1514.137032][ C1] [ 1514.139864][ C1] tcp_gso_segment+0x423/0x1a40 [ 1514.144699][ C1] ? __pfx_tcp_wfree+0x10/0x10 [ 1514.149541][ C1] ipv6_gso_segment+0xb78/0x21a0 [ 1514.154462][ C1] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 1514.159813][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1514.164988][ C1] ? __pfx_skb_network_protocol+0x10/0x10 [ 1514.170690][ C1] ? enqueue_to_backlog+0x455/0xe80 [ 1514.175887][ C1] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 1514.181240][ C1] skb_mac_gso_segment+0x31f/0x640 [ 1514.186334][ C1] ? skb_mac_gso_segment+0x17e/0x640 [ 1514.191782][ C1] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 1514.197484][ C1] __skb_gso_segment+0x376/0x540 [ 1514.202414][ C1] validate_xmit_skb+0xa13/0x1440 [ 1514.207508][ C1] ? __siphash_unaligned+0x263/0x3b0 [ 1514.212781][ C1] validate_xmit_skb_list+0x84/0x120 [ 1514.218046][ C1] sch_direct_xmit+0xd3/0x4b0 [ 1514.222718][ C1] ? __pfx_skb_get_hash_perturb+0x10/0x10 [ 1514.228432][ C1] ? hhf_dequeue+0x817/0x9a0 [ 1514.233099][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1514.238461][ C1] __qdisc_run+0xa88/0x1510 [ 1514.242956][ C1] qdisc_run+0xc7/0x300 [ 1514.247127][ C1] __dev_queue_xmit+0x187e/0x3100 [ 1514.252169][ C1] ? __dev_queue_xmit+0x280/0x3100 [ 1514.257287][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1514.262647][ C1] ? ip6_output+0x340/0x550 [ 1514.267137][ C1] ? lock_acquire+0x107/0x340 [ 1514.271800][ C1] ? ip6_output+0x340/0x550 [ 1514.276280][ C1] ? ip6_finish_output2+0xcc0/0x1360 [ 1514.281544][ C1] ? __asan_memcpy+0x40/0x70 [ 1514.286199][ C1] ? ip6_finish_output2+0xe7e/0x1360 [ 1514.291468][ C1] ? ip6_output+0x126/0x550 [ 1514.295950][ C1] ip6_output+0x340/0x550 [ 1514.300347][ C1] ip6_xmit+0x11b5/0x1970 [ 1514.304655][ C1] ? ip6_xmit+0x291/0x1970 [ 1514.309058][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 1514.313800][ C1] ? inet6_csk_xmit+0x1d4/0x780 [ 1514.318624][ C1] ? lock_acquire+0x107/0x340 [ 1514.323301][ C1] ? inet6_csk_xmit+0x1d4/0x780 [ 1514.328135][ C1] inet6_csk_xmit+0x4db/0x780 [ 1514.332790][ C1] ? inet6_csk_xmit+0x1d4/0x780 [ 1514.337618][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1514.342798][ C1] ? tcp_established_options+0x471/0x9b0 [ 1514.348409][ C1] ? csum_ipv6_magic+0x1ea/0x2f0 [ 1514.353339][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1514.358516][ C1] __tcp_transmit_skb+0x2092/0x3aa0 [ 1514.363691][ C1] ? __sys_recvfrom+0x1f6/0x340 [ 1514.368526][ C1] ? __x64_sys_recvfrom+0xde/0x100 [ 1514.373619][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1514.379142][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 1514.384585][ C1] tcp_write_xmit+0x16e8/0x6980 [ 1514.389422][ C1] __tcp_push_pending_frames+0x97/0x380 [ 1514.394960][ C1] tcp_rcv_established+0xfe6/0x2580 [ 1514.400137][ C1] ? lock_acquire+0x107/0x340 [ 1514.404814][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1514.410429][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 1514.415085][ C1] ? ip6_dst_check+0x5e3/0x7e0 [ 1514.419830][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 1514.424945][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1514.429603][ C1] tcp_v6_rcv+0x2247/0x2ae0 [ 1514.434129][ C1] ? raw6_local_deliver+0x15d/0xad0 [ 1514.439325][ C1] ? lock_acquire+0x107/0x340 [ 1514.444004][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1514.448829][ C1] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 1514.453573][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1514.458750][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1514.463576][ C1] ip6_protocol_deliver_rcu+0xcb0/0x15c0 [ 1514.469194][ C1] ip6_input_finish+0x191/0x370 [ 1514.474026][ C1] NF_HOOK+0x30c/0x3a0 [ 1514.478077][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 1514.483431][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1514.487564][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1514.492142][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 1514.497508][ C1] ip6_input+0x16a/0x270 [ 1514.501744][ C1] ? ip6_input+0x23/0x270 [ 1514.506085][ C1] NF_HOOK+0x30c/0x3a0 [ 1514.510143][ C1] ? skb_orphan+0xaf/0xd0 [ 1514.514539][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1514.519711][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1514.523844][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1514.528410][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1514.533682][ C1] __netif_receive_skb+0xd3/0x380 [ 1514.538693][ C1] ? process_backlog+0x247/0x1340 [ 1514.543693][ C1] process_backlog+0x54f/0x1340 [ 1514.548530][ C1] __napi_poll+0xae/0x320 [ 1514.552839][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1514.558188][ C1] net_rx_action+0x64a/0xe00 [ 1514.562766][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1514.567939][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1514.573117][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1514.578379][ C1] handle_softirqs+0x22b/0x7c0 [ 1514.583121][ C1] ? do_softirq+0x76/0xd0 [ 1514.587430][ C1] ? sk_wait_data+0x1fe/0x4a0 [ 1514.592183][ C1] do_softirq+0x76/0xd0 [ 1514.596313][ C1] [ 1514.599224][ C1] [ 1514.602135][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1514.607291][ C1] sk_wait_data+0x1fe/0x4a0 [ 1514.611787][ C1] ? __pfx_sk_wait_data+0x10/0x10 [ 1514.616791][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 1514.622404][ C1] ? __tcp_send_ack+0x21a/0x4f0 [ 1514.627323][ C1] tcp_recvmsg_locked+0xd4b/0x3630 [ 1514.632431][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1514.637346][ C1] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1514.642903][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1514.647836][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1514.652767][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1514.657787][ C1] ? lock_sock_nested+0x6a/0x100 [ 1514.662731][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1514.668219][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1514.673550][ C1] tcp_recvmsg+0x1ff/0x7d0 [ 1514.677966][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1514.683119][ C1] ? aa_sk_perm+0x15f/0x920 [ 1514.687611][ C1] ? aa_sk_perm+0x7ee/0x920 [ 1514.692108][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1514.697037][ C1] inet6_recvmsg+0x138/0x6b0 [ 1514.701642][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 1514.706469][ C1] ? __pfx_inet6_recvmsg+0x10/0x10 [ 1514.711567][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1514.716853][ C1] ? security_socket_recvmsg+0x7e/0x2e0 [ 1514.722380][ C1] sock_recvmsg+0x105/0x270 [ 1514.726882][ C1] __sys_recvfrom+0x1f6/0x340 [ 1514.731538][ C1] ? __pfx___sys_recvfrom+0x10/0x10 [ 1514.736718][ C1] ? exc_page_fault+0x71/0xd0 [ 1514.741371][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 1514.746636][ C1] __x64_sys_recvfrom+0xde/0x100 [ 1514.751585][ C1] do_syscall_64+0xec/0xf80 [ 1514.756072][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.762125][ C1] ? trace_irq_disable+0x37/0x100 [ 1514.767131][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1514.771795][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.777665][ C1] RIP: 0033:0x7faae258f749 [ 1514.782066][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1514.801647][ C1] RSP: 002b:00007faae336b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1514.810079][ C1] RAX: ffffffffffffffda RBX: 00007faae27e6090 RCX: 00007faae258f749 [ 1514.818028][ C1] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000003 [ 1514.826071][ C1] RBP: 00007faae2613f91 R08: 0000000000000000 R09: fffffffffffffd25 [ 1514.834130][ C1] R10: 00000000c9100120 R11: 0000000000000246 R12: 0000000000000000 [ 1514.842089][ C1] R13: 00007faae27e6128 R14: 00007faae27e6090 R15: 00007faae290fa28 [ 1514.850055][ C1] [ 1514.853062][ C1] Modules linked in: [ 1514.856991][ C1] ---[ end trace 0000000000000000 ]--- [ 1514.862438][ C1] RIP: 0010:skb_segment+0x2ace/0x3f90 [ 1514.867806][ C1] Code: 00 00 00 8b 6c 24 58 81 7c 24 14 ff ff 00 00 0f 85 12 e1 ff ff e8 12 8b 8e f8 48 8b 44 24 20 48 8d 58 70 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 14 09 00 00 8b 1b e9 17 e1 ff ff e8 e9 [ 1514.887507][ C1] RSP: 0018:ffffc90000a071d0 EFLAGS: 00010202 [ 1514.893564][ C1] RAX: 000000000000000e RBX: 0000000000000070 RCX: ffff888025678000 [ 1514.901539][ C1] RDX: 0000000000000100 RSI: ffff8880a31b956e RDI: 000000000000ffff [ 1514.909499][ C1] RBP: 0000000000000003 R08: ffff888025678000 R09: 0000000000000002 [ 1514.917462][ C1] R10: 000000000000a888 R11: 0000000000000100 R12: ffff8880a31b9560 [ 1514.925419][ C1] R13: 00000000fffffff8 R14: 0000000000000000 R15: dffffc0000000000 [ 1514.933383][ C1] FS: 00007faae336b6c0(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000 [ 1514.942329][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1514.948902][ C1] CR2: 00007faae336af98 CR3: 00000000764de000 CR4: 00000000003526f0 [ 1514.956856][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1514.964430][ C1] Kernel Offset: disabled [ 1514.968734][ C1] Rebooting in 86400 seconds..