last executing test programs: 7m36.116802235s ago: executing program 0 (id=7): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x48, 0x7}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @mcast2}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r7) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendto$inet6(r2, 0x0, 0x0, 0x4000080, 0x0, 0x0) r11 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x197d80) ioctl$HIDIOCGRDESC(r11, 0x90044802, 0x0) 7m34.837329213s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0xffffffff, 0x4, 0x0, 0x0, 0x10}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52a650910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2308edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x1b0, 0x0, 0x3, [{{0x4, 0x3, 0x8000000000000000, 0x9, 0x5, 0x80000000, {0x6, 0xd71f, 0x800, 0x9, 0x5, 0x6, 0x1, 0x5, 0x5, 0x6000, 0x5, 0x0, r2, 0x69, 0xffff}}, {0x2, 0x0, 0x6, 0x2, ',(\'!]-'}}, {{0x3, 0x1, 0x4, 0x8000, 0xab70, 0x3, {0x5, 0x2ae, 0x1, 0x4, 0xffffffffffffffff, 0x8, 0x4c000000, 0x75, 0x5fb, 0x4000, 0xcec, 0x0, r2, 0x4, 0x2}}, {0x5, 0x2, 0x63, 0x3, 'k\xde=\xab\xb1\xe51\xa9N\xaa\x0f\v\x90*N\xae6\x06/\x87\x8c\xc4\xb5\x9c>\xdet2\x15\xf6\xa5\xb6\xd1\x03\xb3\xc6\x16\xeb\xc6\x9f\xda9I\xdb\xd4\x89\xf8\x98?\x9f\xecG;\xb5\x03J\x8aEm\xb6D4\x81\xfcf\x12\xf2(\x0e\x9d4\'\x9a\x93\xdc\xdf\x03Lq\x93\x96g\xc9\xee\xf4\xfd\x84{Z\x87\xd8,\xc2\xeaM~\x12O\xc1'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000001380)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb0"], 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/15, 0x13}], 0x1d) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x8010, r4, 0x8d204000) 7m31.001468645s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000c00)="0c1e11e2a186a82350cfb1a219c2953714423a9df9933389c617f23b5cf5eb67840874321df04c4defe72f7263e3ed90419f934be52b97c6f0f4211959f33f3a9bdf6fb01c8dd0d7749752256fca02dc2d6aca2b56d6bed2d97d6cd25e633d9396160907d1c30a7b51fcd1d0db9fbfcc9dd0ab9a8b4eaa773cdc56984773e5959a60215657301766323d41630f8220b40ff7f0e07f3fb026f0be6a52be30a401d2e2d01d9ffee9fd6feb4388af2df5863415a0ba5ed26564b12d3708b4baf4616a539219d24ac666d12e7cd0cd3da4164da7ec9388187f4f44fc6f9f4a1530d7f835db9e7da3147ba43b597957cbfc30b42c8d7e62cb95008427a9ba0f50e4cff2a88e98d3b6dbf04073173da811311f8c422298be56d03d54e92c8eb568ae08a31cd0267a0cc20496325411a7b7802ac368ebb03d1960ec964046ab79fa8b8caa20957aab66043739dd8331842c5892b01f212874733d7b2ca4eb974aed0527c3e930c1805c36687fa790d294d4e6de8a3ba23ee036aef3ba26cf6427fb8d4dde6bda584e66701a5d1d4c7b522e9ff58443df05f5b4e82c00329c9d5fc44100d3085df20759db895ab4b4ff1f346be36d880899edf5970c8055c85d2e1ba7970396d442e6a328996fd1c82ec885f5bed2f67f474a342ee7b8e9b18e87326d82a4024a21d1d30a1810a1100a056fdb760d243bcb29c97f3bd9f9c3a7b5c2703b8191ff231d7e1086c37c1c9379e788ec51f6e5ba4904d225749be048d0743ab2bceb02424a68f2be9ab00fc7b72c74fafbdef0c39fee996efa88c510e4178dcd9e1d51cec80da1e10fe88965b0714156e0fe1457f07f6c3cb6ffec43f2032465b1c101c2af1c978d4bde470459df241969fd862955b3e6fc8072e3edc77f3b6be6fe6dbf2e2c849edbe9983248148ccfed72b7bf84e62c610f7f36a66f91683bd5f4f4fc93c68b5dc353580c6761a16e6b9d34b4c9c62bb507c78712625dc702f97690da5cf771e9095226a3fceee84467af315f91911b6476c66910a2ae1b901ef34cd778629a6125f94cc110a7e67d7994e3c96181f9fad67af4cf3baa71ad58de42daca12c7ef261c8172d5ab48a550224c5ef683e2c1b4fa84d04d6d49f33fe40fb705106ba354f06bae85748b8759a87f8a5acab836bb0a4f59dce8036c30d67c6d67b36a3eaa54021ddbe04842fa2b9cb3995e0e2608b8a298b6944134fe6f97e80ecb6fadb0cd3c94542422b1a8d359c0198059ec77776dfc6d08e7c8363a24013617b77d2fd5848ba448aaffd4d1aeabd98f181bde2295122dd3a136f082ec6326891d653f93b0bbd2c824185af61d6870d041b801afeaa2f96c8865589b5fb410ff2eab5d979a1be7493b513d9bb470110aeb2b0fd8b64e9f8a3cc7b0410780c502ac7881c342bc3e42a39fd3fef9428c618e9a94c296ab8651a8ba85d786ea223c0a54af8a7a1403a68dde3661772fd0621f4745ee7ab08e7c424c3c256532011e1c51937c294d56432c1be9bf2b5aeb34f7238d057ff3e0f3f72f8aa3c9505e64e2c8d8cc1554c9b85e10906ba2a637e7ee43376dfbb7df4c1cc9d4fa4eb932a9e4d1a2254b1c7f3e80922ae32ae1ece1f1e34990150c098fd6df9caa16a4290b3ef49c863e2428e102e2a626fec3f0d086b206f5e568a33216481c269f77b87a702803688746836e29823504dadde293c5d3652cd7a2bef62ed5da5cb9cc84075e8c9748b344821e86f162dec5b468f7fcaf1d4184619b23b52150ab5be39d96a8c615a80afe632c59293967018c66f264bbf8b769b14ea67d7994c7fa8c0818be52eeeccefd0d28c01358b98b4fb14df2111c369ddc72cba88655c73cd327414b289a6b92769e76c0aafb6e84f6c31c829317fc8dcbfb71d34b0f3697a4bd86961d1dd9c78f9bc77070c36e6d2ad2585fb843cc9b50fe3b66b7eed3466cb8fed71560b8e0d16328f26cec2058443c146b98cc26f59989c832c076399b2ff1588445d4b53f9b8194172f871c34706ee142faffecdf1b0d2c4d33b9229365765a0e30070812c149eb751074b8da39d5c6a079e0a6003ddbc4a328f2cdece9a9514175a1a1c12bc7e1a8d6a9341dd34ddef3d5030445204c6ae6bc2c86e0fccc20742b85a1cc29aa452289f3ff563472b6b187e8aaba38d2046349ac26ca27158458a34fa8733b7a73bfd770b2306a5d4ad1bf01d88fc86a968d18aeb76e9c4ee0f84fa9b6528526ae1de52209374ede126c5a0050b93201da3e70eb03ee4af96f95045659b9cb0d9f11a749097823054b212adfb3854ee14381f64749598f67dcac0f43bde19ff68c1a9d18650217ced8461c03da696e4da6742e92515259635966fe15f6744bdcb6e41b7fa2948764e97c124b53a81f8f78c4a1d3516c92d551a91ac61441a9d36b3cde9f5bc8cb4c659e469d03c0f20d65b5490ac2720ce3b998429e2bc2807c5c57cd0c1caed9ca9a358a06b6aecabb9dc04580bfd846df8cd3905b42296e024f4d8ce22a4ad0cc52d27b206a0a705cc08e3fb092760faee2deb4ef70f03ea7fb86984e8603acbbdb58bdd0264b3232a8499934297fb572bbd76808b51c11e6f187eff7746cd6934b8f16902e18eea9dbd06d917decd5e486d882030b4f1c5e5b0378d7ed8f553d5d2b8dbcc00b08718b18a56f4496803bc49e0f17aeb19276a256d9b0d3990add59eec946e19a536a9f126f6455392a581a00e188965107e50e506f9d17481675e5ec7efba2c26fbdb001f4511647510dfa0799eb13e343e7ffe9870f407c3eeb3509ece7616440e439222bb1e5c881ca237affff7dd4231affd2a1696207ae214e52656994c44c49ae1cce07a74ca0324fe00a3f4552305fd2cd4861b53047282186d27c3b5d369a508206af768fc02bdb83da83322c545bd1d102f88acb4bd64f5bbe5af0aecb034a2479663b6facfefc51f95f91511313db7ff2cd51fdcc946690db6d4dd6687ccdadb376d77039f6087615b85d58c234cc65c36ce7b25e8b960ec12cbd432121c1a4af9ea114a5d995017a362ffb867b306288589faff3ca0c83a0e7a7761c2803ba05911e6fe8ead6a9987f9866c001878535789ca4173cc574013142c852e2237e3c738b6141850be943d8b56ed00ece574bfeca3a4c9d2e25e64d7061c48769f631d168d0e41b98444daac9005bccfed73b91b4fd975910407ed968eb22ca8f2e64f2bcbc6a07874c685bdddfa1022eca9c719c2eb089ae612c5de865e1a92374a09acd480698d13c4ce7bde431a2d72e21627742dc26c92220dd442539b9111bdbc56a97ae046e91f9ea1d702b275a18309515153a47338657b00d5b0db1d42000b2a698dc5867f6ec1d97bcd8b8c95990dec0a83d8bc9849680c3cdb483c20b1655e2f66141694afd321dfceb1da85af336a14ed0803252d1a082612e2fc4ca97b2d75422aea1758c5503b85c0db0f3b27afef503337aed3ac69786109cd2f416b36571889e1547770c815f26ade59b562902e09f9eb198a503e3bddf5b2674c790944a75103b3d3c95ff03d766de42a6046a73ae3e0a618a2f441c6bfbde6d3b91cade56b15af2c8142b6fd1301affcb7b3ad23150f405480a1e4c9c5104221cb3b8ed3bab90474c3f402b4de092ab83e1160c333ba2be24ae4cfdc96bc502e0072af90c00a0c8219eb16840388cb2843ecd19b8fd57d4fa8daf69bad9442920d7e2b54789283ec59d023dbbdf7e1d81b5e3edc0fdde3a72277bcd56283ad008076d81d3190ea308c9ac17298654c504a0212dccb09d28a5ede0e9ff354121c02fa64e4cccd12bb162f2957509aeb798e9afa4e8883f7de2da2c6c352abb646a8aea37eb0ba98fa5981e5abadc019561fd65c4fd1facd7743550a280e8529539f83ea8ba34a02bcfd5ff6a3910beaecc664087158294dc25e30b1b2cdb21e4d4c573535e84e7a2e02396041ef28014e6d835e11a1c265b230add7e52f4af577256dd7c573d3a37ddfd79ee5b6aa95020e6ed058a6ad07795bda105b2b6d7c47cecb2fb28cb80f068edafa7cac74200939504c2521d401fa2898ad332cf66f1a540fa3721404abf30d86d506ce8a4e19abc05933ff5ea549bae03e3e7de531fb74ffee986923a2b21300cac702e575c3280494aa89d3b2f804ceee5d03aa1308b6e38d0323b429612c25e0b105a4e71b7d544e096805229dbbfbeff464a29af6a3e818bfc507e2b9a79960424fe834c422b3228c2b590400f6866d3de7de717ea43f4c7056669a90991313cc0284246ccdb460e28ec8771cc52372d9afedb5561a4bb6236b7f72032289c6829dccfd35ed2ba7787d872226978a9a6a0f0e796c74b49be7f30649e68a569042c3890068075377d1b09d6e03ac1ba594981df70e1b5316316c6a80d0c94c0796c91f87dc8e7606039322c0b1fac0a1aa3a9357e925e735a73ad0f0934cdf95b044ccf326de0132c88154592ca4e250aa2700bc19453aa413ecf3d3794dcd950c47989d701ce5b312428515ed96e2dd517353038635d79564a49665dcd32b42f1e5ded266e5887f1cd8a0f3d24c12c18e555836f49998b8c6abebe18c7ddfd79dfc567ab644d2c4289db8af0521547ed2d5fce8c53b0ac0641d158980abb7f8f593243ebb80c71c177a28e0f97e97a317201490375732a92dafa1739d4bee7ad3748b6733e1048a3eb7634dafa5e95d292e441395d4909a683316818ba88d26482a28648942c0f46dd2c07d8d3b948e9ec7fcdcafebf1df2b1bb34a5b53a2bf4690830abd7213d47e5aba3cdf017b0ec548e75cd433c3abee520d50d2eb5b1290d23bd1b56c73f8e769a093313114c4b50b3a342884b5c6b69c24d238f433c80754cc12ca8825835ac0f47d3f435e28c069b3d06c4b3c984fda518b94b8816f89d5a35c4cd681fcc738b6809e65706e6fe854e92666890a83117493f15921198018a361e2c4e2dca82541359c6cbc1e45832e41ffa6237b2d4c306ac205fc2b71b84bb010d9dfa55a37d01d9e4f8a150cafa62ce5af1dca4fcb939a1d2f6f58b8cc07301d9ba54c0122d24f3f992be2ef761f720b2c09b44f369a1cf539162b9d0153083649071cc5b13717780205bb1e26aba708c89f315ad47d6116a05f508122fc59aa645cd46de392c00f7ed68c5f2455d914f928474ffddcbd5f68d7fd9c92362d39ffdb3c19657423e85d85b521af4ba8467a085bfbfdb3871d87d167883e0ba24b7c0c877743fa288e44a9c860254bca2e1d9e66efc541c5368b5ae4f1dff1906ed241302b62ab1376655a3b9a1d2d8c72240c3927a82949dd7e0b30a33ceb7bb727a9418be77a9148e3a9db4090c4bca71d6906c9ac08ba736a01c855ee20ae5ed56945cdb2622df1a4e34daec4cbc1f5e87f3449e0adace0b9827bfaeb820d027e2e2a92e0cf65e62fe0fdbe0102fbc9a6446be7fd145ecd1f60c9df35f0d5c6edf0224207e5af4e59b7e8f199fa284331196b39eb3ab7b3300b0b4e32556727dfe4a6bb73c566dfbe53767095c323b0dd0d8a841f67300bfdf9aa00ea8b99ca197356fea33b7c6338b5f12be0a5dc01ca9a436f3ff6ffdc6583dddf4a03d4fb077e763ebc6b30c2b206702f751aab9e4d5b27932a8e458c2103e068e320093c41e21cb199f210d6b18a103dd92cc5c4328e2f8238b37dfed187fb0dc5eee2e8f62cf3a2c83b6a8ae232c03bed7103f06cfe5fddb0b9a3958cbba1300ca38f34dca0c3c7be29380dd192d22219be8ce99b7da9201f3e06d683146d13422118a877d5467d00713c126127f2644fc4a8739", 0x1000, 0x2404c800, &(0x7f0000001c00)={0x2, 0x0, @multicast1, 0x2}, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x74800, 0x60) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xd4}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000440)={{0x0, 0x3, 0x4, 0x0, 0x6}, 0x8000000000000001, 0x1}) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "6986"}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) getdents(r4, &(0x7f0000000340)=""/151, 0x20000) 7m29.987082014s ago: executing program 0 (id=20): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m29.554293917s ago: executing program 0 (id=22): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 7m28.411761169s ago: executing program 0 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x16}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 7m28.122276977s ago: executing program 32 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x16}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r3 = dup(r2) ioctl$FIONREAD(r3, 0x541b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 5.669369371s ago: executing program 3 (id=2759): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="8f966bd94d169820f6", 0x9}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.500139517s ago: executing program 3 (id=2763): socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) exit(0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c81, 0x7000000) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9401070b00000083"], 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800000108000200ac1e00010c000280050001"], 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) syz_emit_ethernet(0x7a, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa808100100086dd6040000000403a00fe8000000000000000000000000000bbff020000000000000000000000000001024000fffc010000000000000000000000000000fc0200000000000000000000000000003a00000000000000f4c638bed6f068cc"], 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603012bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 3.085631796s ago: executing program 2 (id=2783): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.04667857s ago: executing program 2 (id=2784): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.913262849s ago: executing program 4 (id=2786): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e0, 0x0, 0x420, 0x330, 0x0, 0x0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0xfffa, @empty, @mcast2, @private2={0xfc, 0x2, '\x00', 0x8}, [0x0, 0x0, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000], [0xff], 'bridge0\x00', 'erspan0\x00', {0xff}, {}, 0x67}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0x2c731f28b040cc3c], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private=0xa010100, 0x5, 0x3d, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x4, 0x3, {0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}}}, 0x32) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000280)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x3a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xc15, &(0x7f0000000080), 0x0, 0x2, 0x1, 0x8, 0x28, 0x10}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000140)=""/215) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x1) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYRESHEX, @ANYRES8=r2, @ANYRES32=r2, @ANYRESHEX=r6, @ANYRES64=r1, @ANYRESHEX=r6, @ANYRES16=0x0], &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$sequencer(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32], 0x10) 2.91276564s ago: executing program 2 (id=2787): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe11}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb095873048", 0x44}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.413636863s ago: executing program 3 (id=2790): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2", 0x3a}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.305761508s ago: executing program 3 (id=2791): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r8, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffc88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe8000000000000000000000000000bb4e2100004e200000", @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x4}}, @TCA_SKBEDIT_PARMS={0x5, 0x2, {0x0, 0x8, 0xffffffffffffffff, 0x6, 0x77}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000580)=@getsadinfo={0x580, 0x23, 0x200, 0x70bd2b, 0x25dfdbff, 0x0, [@sa={0xe4, 0x6, {{@in=@local, @in6=@loopback, 0x4e24, 0x4, 0x4e23, 0x0, 0x2, 0x40, 0x20, 0x0, r6, r9}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, @in6=@empty, {0x7, 0x401, 0x100, 0x1, 0xfffffffffffffffb, 0x9, 0x1, 0x5}, {0x8, 0x8, 0x4, 0x4a}, {0x0, 0xc3d, 0x101}, 0x70bd26, 0x3502, 0x2, 0x4, 0x0, 0x4}}, @algo_crypt={0x110, 0x2, {{'ecb(des3_ede)\x00'}, 0x640, "9b62474c29e37e458ecda6bc2ade4c5c26c1fd026ecb28413d24b752a018ddaf4b34a2c8d89026e920cd9c94c0dfb9ff3917a2733a7735b2739af9862eb60ac92251faaacd6cac7f4a46b1f5dc0a5e9c78586ec413c5fc2843657a19103cb076c0355f2586817bcb43bcd8fdb0277feeb796de162633730cd5aafa91abcbb42ac40bdcd058fc4b35afbc85c5fa96ddaedaaf1038b1d147c06d3a526a5a17576705dc649384be9779eb0ef03a3bf9e2aac9326efde7a3b643891298f45888a7e6697a5d74d9b864ec"}}, @algo_auth_trunc={0x60, 0x14, {{'sha384-avx\x00'}, 0xa0, 0x0, "f8b80015395cec3c52f2657d31e85cc8be5e4ee3"}}, @sec_ctx={0x44, 0x8, {0x40, 0x8, 0x0, 0x8, 0x38, "64d9e61c2534367307ceed2819d667f0a582de3d96c89db6316f0743311e2248b2dec0f3e37cc31cb9b4d938c7e88fec1ac36c0d71b158ce"}}, @algo_aead={0xea, 0x12, {{'aegis128l-aesni\x00'}, 0x4f0, 0x40, "a46f6df93fb62d81dcfa1c29769d5b50f71ec3739286eb7e69ed81ee99b768ff1f50edb6446b6aaef3360c2ef7d33607773a08744fe4472e9fd947d8de417f46876f5d9a4f79c73cf3113dbfd93e2f3034192c66aba8f7d8c29efb703eb7df6675457672188ba0d4e683c83ee6e6c9f2e6176a47b961155d08d9c4817230f0c3ef11a803a63aee65610a760acd9646f6845f27d213908313562e7ff870dc"}}, @tfcpad={0x8, 0x16, 0x9}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x3, 0x4e24, 0x6, 0x0, 0xa0, 0x0, 0x87, r11, r15}, {0x6, 0x3888, 0x6, 0x4, 0x155d813f, 0x1, 0x5, 0x1000}, {0x7, 0x8, 0x60f2, 0x5000000000}, 0x3, 0x0, 0x2, 0x1, 0x2}}, @policy_type={0xa, 0x10, {0x1}}, @tfcpad={0x8, 0x16, 0x40}, @algo_aead={0x11e, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x690, 0x180, "87b8144b1fec4ca8876b81843087f25da90fce59974d49d28256ac104da86f5381c09ead793f65e80528563789624905f3c6744af3a7d146d90c030d89fe8034d61c3ba344dee4822448b1b7a2be5e2611162b9179642d07d94598dd35d5d5cd913182849f1bad274cc8caac1e0d350bdb1ec7f35993d41605b04156ea8314c78de0894bf4ff3551cd5329f49a2330f1d3929a5ac8e5e644ddc5b7eb796eb7c8c8f0ce2428b32b7312b97a12394addc312904766125c1aca927868f4ae1714a2c90e2ae03754d0a4db5b1e13dd46ef98bf6e"}}]}, 0x580}, 0x1, 0x0, 0x0, 0x48001}, 0x40804) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x8001, 0xa000, 0x4, 0xffffffffffffffff, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xdddd1000, 0x8, 0xd, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x1, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7a, 0x9, 0x4, 0x3, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe, 0x9}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0xb, 0x4, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x58000, 0x4, 0x5, 0x7, 0xff, 0xb, 0xfc, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0x9, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x9}, {0xb000, 0x30}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1000, 0xb000, [0x6840000000000002, 0x3, 0x91, 0xff]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x517a20f7, 0x6}) close_range(r16, 0xffffffffffffffff, 0x0) 2.305116126s ago: executing program 5 (id=2792): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.160568737s ago: executing program 5 (id=2793): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2", 0x3a}, {&(0x7f00000000c0)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.076154044s ago: executing program 5 (id=2794): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.025999662s ago: executing program 3 (id=2795): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket(0x10, 0x803, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) lseek(r2, 0x8000000000000000, 0x1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0xa0, 0x1405, 0x4, 0x70bd29, 0x25dfdbfd, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8010}, 0x10) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) timer_delete(r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00'}) write$tun(r3, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x2b, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad"}}, 0x39) syz_usb_connect(0x3, 0x1b, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x63, 0x60, 0xdd, 0x20, 0xbda, 0x8153, 0x6f0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x78, 0x5, 0x10, 0x60}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="050f0500aa"]}) pread64(r0, &(0x7f00000002c0)=""/174, 0xae, 0xe0) 1.970184303s ago: executing program 5 (id=2796): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.861629582s ago: executing program 5 (id=2797): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.859331999s ago: executing program 2 (id=2798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) lseek(r3, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x2, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.735830407s ago: executing program 5 (id=2800): socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) exit(0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c81, 0x7000000) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9401070b00000083"], 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800000108000200ac1e00010c000280050001"], 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) syz_emit_ethernet(0x7a, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa808100100086dd6040000000403a00fe8000000000000000000000000000bbff020000000000000000000000000001024000fffc010000000000000000000000000000fc0200000000000000000000000000003a00000000000000f4c638bed6f068cc"], 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603012bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 1.582054783s ago: executing program 1 (id=2801): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2", 0x3a}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.489208129s ago: executing program 1 (id=2802): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}]}]}, 0x30}}, 0x0) syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x400, 0x1, 0xffffffff}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x100000000000020a, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x239, 0x470bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xfffffffffffffdb0, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x1}}}]}, 0x24}}, 0x4840) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r6, 0xfffffff7}, &(0x7f0000000100)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r7, 0x1, 0x1) getdents(r7, 0x0, 0x48) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.255514439s ago: executing program 4 (id=2803): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.07336051s ago: executing program 4 (id=2804): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2", 0x3a}, {&(0x7f00000000c0)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.040618793s ago: executing program 4 (id=2805): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f0", 0x4a}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 939.905381ms ago: executing program 4 (id=2806): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 852.175366ms ago: executing program 2 (id=2807): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 749.270289ms ago: executing program 4 (id=2808): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{0x0}], 0x1, 0xed, 0x207fff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_usb_connect(0x4, 0x317, &(0x7f0000001600)={{0x12, 0x1, 0x110, 0x6b, 0xd2, 0x78, 0xff, 0x17a8, 0x5, 0x8b9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x305, 0x1, 0x4b, 0x1, 0xb0, 0xb, "", [{{0x9, 0x4, 0x72, 0x2, 0x7, 0xc2, 0xf, 0xbf, 0x9, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "06f414fa885d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0xfa}, [@mdlm={0x15, 0x24, 0x12, 0xe228}, @mdlm_detail={0x24, 0x24, 0x13, 0x7f, "63832544b5992729c2c21e14138e14d2545f2904857f9925c82a39c66ef2f284"}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x8, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xe, 0x3, 0x9c, 0x6, 0xd2}, @mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}]}, @generic={0xd, 0x22, "dc18ffa56b88c91cf826bf"}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x9, 0x0, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x9, 0xdb, 0x1, [@generic={0x2f, 0x5, "e02d445a237f7e38d12a55d30b777b3e32b3b9122286b587f66d616520d33917272bf2b1b18aa485f6a33640c7"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x75, 0x23, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xceb4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x7f, 0x0, [@generic={0x99, 0x4, "bfc726695c3a35b0a914b9b91a695a36f352343aac85c7bea9a43db9c81f4a275d0a4be00dd66887c9d3baa5866910786d010b00057a7db0143fbd1d075a8bc9159a40cd5568ecaccaaea14420addc45cfaeb006a11388abd9d84e5d9c127688ffd3aa47edec6af3c344ffd12b654bee5fe77fd336d56cccb1fb2575dc0114994a0efd69ce5ec0e26cf59e8f357c40f1df22d5e70d1ea8"}, @generic={0x7d, 0x7, "4a1e14eaceb5f692d68d95b953f20a4793a92a54c2045455450c18cff69e544e7397ded88a1ed7c7902f7cbb5e8d93faf0a25b01a4281e19699ef38a607b5752c9e4c8f1ec8da0c58296914c1aeef1ca1b6081714d90621c808239b044ef2900beb4d2a2e5054a78ebce4f7161b437e51e3bb125b22c7eb250b77c"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x4, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7d, 0x8001}, @generic={0x39, 0x22, "fae95515649ed2d625428b910973775dfc23b93e4e5d5450df8e2ef7a672792b752e6a5c7463e513298db741b78a4a9d74d102f10f74f1"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x1, 0xff, 0xa, [@generic={0x6a, 0xd, "79ca462f6f6175a303cf504955387551b1b2e8fafda8f045e66fb05fc9680ddfcf3d9d4016678067b1abb9ff050bea53fb39965fbd50c4add37de35ad2d37cc0793fe772c5b42f049c2b03b4ccb834471cf09fe594005b28fd68382f5877596c52d0aba2cb67cac3"}, @generic={0x25, 0xe, "d9eeb140fbeb72e3ae1f58ed32fc9737f0e728e75ee23c6b68923ec50fa7069db6c44b"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0x8d, 0x6}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0xb2, 0x25, 0x7, 0x40, 0x96}, 0xa6, &(0x7f00000019c0)={0x5, 0xf, 0xa6, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xae, 0x81, 0x1, 0x100, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "34e85c8f6f181c451c2b7a643255ac3e"}, @ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x6, 0x0, 0xfffc, [0xffff0f, 0x3fc0, 0x3fc0, 0xffc000]}, @generic={0x2e, 0x10, 0xb, "5cedcff9a96681ac319d477488d63e7157d0ef22976b3e7ab043ab2e57f5330448a63953b7a4b6161356d2"}, @ssp_cap={0x24, 0x10, 0xa, 0x96, 0x6, 0x10000, 0x780f, 0x8, [0xc0, 0x0, 0xff3f3f, 0xc0, 0x6f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "657292ed87d0b33653ec67e4f197bec1"}]}, 0x5, [{0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0xca3e3a43493e1508}}, {0x21, &(0x7f0000001ac0)=@string={0x21, 0x3, "91934ed6cfe4cbd1be2cad26b5a8b95f817f8d0e1af255325cc324dceec7d7"}}, {0xf4, &(0x7f0000001b00)=@string={0xf4, 0x3, "4527be8a1cb45db394ce43ce3cf66e86a1f3718f99958960e49d3186cce9249c78cf00abffa08409f98f6984121f9b6287f681445f6600313b6196cbf74d06a98a9f4740cb3240c63efcf54b1af16b301045d49068617fdd042fe04847595ba9ffbc7cee5543578a4b176f7ed00f5d0f979339c6a1592282e36d4131c911915495875740e44f81253768fcf1d8071ad8224dbb70ece71a9f6fdfb71dba17c5959cbba9f69631ab4c60b70863c4dde2092d6194b70576c10278abff5bd9a641d9e5095fb98e43fd09e21d17f1d938402de9ff9f6ed799fb9d6187a2445ccfc5bcd0bbc6aaf7f9099c2f92b26124fbde1a43ab"}}, {0x6c, &(0x7f0000001c00)=@string={0x6c, 0x3, "48e9c11f966279087fb005073d085caf7fd5b377150b4b6565324c843ce8598cb47b4273e708a667d1d781340efdaf73451952d25170bda5dfd9914c74cedcb9b8f1551fd99c2f64b78d015ab4990ca4b20b9cd6149d7857808bfca0d123fce81816db708ee0fb8cf653"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x414}}]}) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) 748.261328ms ago: executing program 2 (id=2809): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8050, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r8 = semget(0x1, 0x1, 0x39c) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000140)) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}, @IFLA_LINK={0xfffffffffffffcf8, 0x5, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) semctl$IPC_RMID(r8, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 555.391034ms ago: executing program 3 (id=2810): getpgrp(0x0) (async) getpgrp(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x2000051b) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x17ef, 0x61ae, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0xe, 0x1, {0x22, 0x329}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x40, 0x5, 0xc, 0x6, 0xff, 0x1}, 0x57, &(0x7f0000000180)={0x5, 0xf, 0x57, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x1, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0xa9, 0x1, 0x60, 0x93}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x5, 0xff00, 0x5, [0xf0, 0xc030, 0x0, 0xff000f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x1, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x99, 0xcb, 0x1, 0xfff, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x11, 0x3, 0x6, 0xaf1f, 0x8}]}, 0x3, [{0x54, &(0x7f0000000200)=@string={0x54, 0x3, "71fc4b46b783c4251ce8d8900f2cccf7e070917a26f499f0d9f38bca01c664f896d851c19778435c88ce6df160257b17067b833cd2a2ecb79def78644cc690843f91a4f07a27c8e1dbebffb5cbebfb636a03"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1022}}, {0x83, &(0x7f00000002c0)=@string={0x83, 0x3, "e41ebb9fc4bf367447c9803b00a8904b6eee7064e831df3ce1d748e456ae5219fa839431270bfd9b82cd173255de470f32e4e8f620e4d932c0d1ca039bcf8c86f9d841c0d845d106dfb3ab867983bcff3323087d198c1009792952525dcc9b8c909e8d5015340a999b13f5578a805862b02deb257627d25f506cbac24cbf72d52e"}}]}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f00000003c0)=[{0x1e, 0x0, 0x0, 0x0}, {0x6, 0xc211, 0x0, 0x0}], 0x2}) (async) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f00000003c0)=[{0x1e, 0x0, 0x0, 0x0}, {0x6, 0xc211, 0x0, 0x0}], 0x2}) 314.109209ms ago: executing program 1 (id=2811): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 141.522751ms ago: executing program 1 (id=2812): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2", 0x3a}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 88.397018ms ago: executing program 1 (id=2813): socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f0", 0x4a}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 1 (id=2814): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000040)='\x00', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) (fail_nth: 6) kernel console output (not intermixed with test programs): ][ T1222] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.959649][ T1222] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.970704][ T1222] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 467.973070][ T10] usb 2-1: string descriptor 0 read error: -71 [ 467.979892][ T1222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 467.987719][ T10] hub 2-1:32.0: bad descriptor, ignoring hub [ 467.999733][ T1222] usb 6-1: SerialNumber: syz [ 468.006707][ T10] hub 2-1:32.0: probe with driver hub failed with error -5 [ 468.040953][ T1609] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 468.056579][ T1609] error writing reg: 0xff, val: 0x00 [ 468.100220][ T10] usb 2-1: USB disconnect, device number 13 [ 468.116141][ T1609] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 468.276538][ T24] usb 4-1: USB disconnect, device number 16 [ 468.398866][ T1222] usb 6-1: cannot find UAC_HEADER [ 468.485541][ T1222] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 468.502840][ T1222] usb 6-1: USB disconnect, device number 115 [ 468.541688][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.867332][ T24] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 469.007018][T12719] FAULT_INJECTION: forcing a failure. [ 469.007018][T12719] name failslab, interval 1, probability 0, space 0, times 0 [ 469.046844][T12719] CPU: 1 UID: 0 PID: 12719 Comm: syz.5.2534 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.046874][T12719] Tainted: [L]=SOFTLOCKUP [ 469.046881][T12719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.046893][T12719] Call Trace: [ 469.046901][T12719] [ 469.046909][T12719] dump_stack_lvl+0xe8/0x150 [ 469.046939][T12719] should_fail_ex+0x412/0x560 [ 469.046968][T12719] should_failslab+0xa8/0x100 [ 469.046995][T12719] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 469.047019][T12719] ? __alloc_skb+0x186/0x7d0 [ 469.047039][T12719] ? __alloc_skb+0x1d0/0x7d0 [ 469.047058][T12719] ? __local_bh_enable_ip+0xd0/0x130 [ 469.047081][T12719] __alloc_skb+0x1d0/0x7d0 [ 469.047102][T12719] ? netlink_ack_tlv_len+0x6c/0x210 [ 469.047128][T12719] netlink_ack+0x146/0xa50 [ 469.047147][T12719] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.047166][T12719] ? ref_tracker_free+0x693/0x840 [ 469.047196][T12719] ? __pfx_ref_tracker_free+0x10/0x10 [ 469.047216][T12719] ? __asan_memcpy+0x40/0x70 [ 469.047234][T12719] ? __skb_clone+0x63/0x7a0 [ 469.047264][T12719] netlink_rcv_skb+0x2b6/0x4b0 [ 469.047288][T12719] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 469.047311][T12719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.047345][T12719] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.047367][T12719] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.047395][T12719] netlink_unicast+0x75c/0x8e0 [ 469.047425][T12719] netlink_sendmsg+0x813/0xb40 [ 469.047457][T12719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.047483][T12719] ? aa_sock_msg_perm+0xf1/0x1b0 [ 469.047507][T12719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.047533][T12719] ____sys_sendmsg+0x972/0x9f0 [ 469.047557][T12719] ? __might_fault+0xaf/0x130 [ 469.047584][T12719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.047615][T12719] ? import_iovec+0x73/0xa0 [ 469.047643][T12719] ___sys_sendmsg+0x2a5/0x360 [ 469.047663][T12719] ? __lock_acquire+0x6b5/0x2cf0 [ 469.047686][T12719] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.047741][T12719] ? __fget_files+0x2a/0x420 [ 469.047761][T12719] ? __fget_files+0x3a0/0x420 [ 469.047790][T12719] __x64_sys_sendmsg+0x1bd/0x2a0 [ 469.047816][T12719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.047848][T12719] ? __pfx_ksys_write+0x10/0x10 [ 469.047880][T12719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.047899][T12719] do_syscall_64+0x15f/0xf80 [ 469.047923][T12719] ? trace_irq_disable+0x3b/0x140 [ 469.047947][T12719] ? clear_bhb_loop+0x40/0x90 [ 469.047969][T12719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.047987][T12719] RIP: 0033:0x7fe43779cdd9 [ 469.048004][T12719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.048019][T12719] RSP: 002b:00007fe4386c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.048038][T12719] RAX: ffffffffffffffda RBX: 00007fe437a15fa0 RCX: 00007fe43779cdd9 [ 469.048051][T12719] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 469.048063][T12719] RBP: 00007fe4386c8090 R08: 0000000000000000 R09: 0000000000000000 [ 469.048073][T12719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.048084][T12719] R13: 00007fe437a16038 R14: 00007fe437a15fa0 R15: 00007fe437b3fa48 [ 469.048112][T12719] [ 469.107444][ T1609] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 469.300500][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.609429][ T1609] usb 2-1: unable to get BOS descriptor or descriptor too short [ 469.630734][ T1609] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 469.656038][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.660757][ T1609] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 469.683255][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 469.696826][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 469.703033][ T1609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.708668][ T24] usb 3-1: SerialNumber: syz [ 469.736207][ T1609] usb 2-1: Product: syz [ 469.756761][ T1609] usb 2-1: Manufacturer: syz [ 469.775373][ T1609] usb 2-1: SerialNumber: syz [ 470.119021][T12713] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 470.198993][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 470.238672][ T24] usb 3-1: cannot find UAC_HEADER [ 470.267763][ T1609] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 470.270026][T12738] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2540'. [ 470.328499][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 470.348941][ T10] usb 5-1: device descriptor read/64, error -71 [ 470.356742][ T24] usb 3-1: USB disconnect, device number 120 [ 470.402474][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.477350][ T5687] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 470.539740][T12713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.557748][T12713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.597368][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 470.639588][ T5687] usb 6-1: Using ep0 maxpacket: 8 [ 470.651285][ T5687] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 470.678638][ T5687] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.698439][ T5687] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 470.717793][ T5687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.738398][ T10] usb 5-1: device descriptor read/64, error -71 [ 470.857192][ T10] usb usb5-port1: attempt power cycle [ 470.972785][ T5687] usb 6-1: string descriptor 0 read error: -71 [ 471.005147][ T5687] hub 6-1:32.0: bad descriptor, ignoring hub [ 471.057349][ T5687] hub 6-1:32.0: probe with driver hub failed with error -5 [ 471.198559][ T5687] usb 6-1: USB disconnect, device number 116 [ 471.238044][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 471.308069][ T10] usb 5-1: device descriptor read/8, error -71 [ 471.312519][T12747] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2543'. [ 471.417545][ T5686] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 471.587387][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 471.595076][ T5686] usb 3-1: Using ep0 maxpacket: 32 [ 471.642341][ T5686] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 471.653124][ T1609] usb 2-1: USB disconnect, device number 14 [ 471.669568][ T10] usb 5-1: device descriptor read/8, error -71 [ 471.696831][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.740095][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 471.751975][ T5686] usb 3-1: config 0 descriptor?? [ 471.795947][ T5686] gspca_main: sunplus-2.14.0 probing 041e:400b [ 471.821877][ T10] usb usb5-port1: unable to enumerate USB device [ 471.861734][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2547'. [ 471.930361][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.956976][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.978682][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 471.988700][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 472.006456][ T24] usb 4-1: SerialNumber: syz [ 472.127391][ T1609] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 472.267302][ T1609] usb 2-1: device descriptor read/64, error -71 [ 472.417369][ T807] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 472.518191][ T1609] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 472.577346][ T807] usb 6-1: Using ep0 maxpacket: 8 [ 472.587978][ T807] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 472.618098][ T807] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.653819][ T807] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 472.687334][ T1609] usb 2-1: device descriptor read/64, error -71 [ 472.689085][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.723803][T12745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.775940][T12745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.847868][ T1609] usb usb2-port1: attempt power cycle [ 472.927549][ T5686] gspca_sunplus: reg_w_riv err -110 [ 472.940159][ T5686] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 473.005543][ T807] usb 6-1: string descriptor 0 read error: -71 [ 473.042084][ T807] hub 6-1:32.0: bad descriptor, ignoring hub [ 473.084552][ T807] hub 6-1:32.0: probe with driver hub failed with error -5 [ 473.200178][ T1609] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 473.240228][ T1609] usb 2-1: device descriptor read/8, error -71 [ 473.310287][ T807] usb 6-1: USB disconnect, device number 117 [ 473.436727][ T24] usb 4-1: cannot find UAC_HEADER [ 473.507393][ T1609] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 473.558098][ T1609] usb 2-1: device descriptor read/8, error -71 [ 473.561780][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 473.591779][ T24] usb 4-1: USB disconnect, device number 17 [ 473.637526][ T5716] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 473.655161][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.720009][ T1609] usb usb2-port1: unable to enumerate USB device [ 473.807296][ T5716] usb 5-1: device descriptor read/64, error -71 [ 474.059039][ T5716] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 474.207353][ T5716] usb 5-1: device descriptor read/64, error -71 [ 474.327715][ T5716] usb usb5-port1: attempt power cycle [ 474.389413][ T5686] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 474.420687][ T1609] usb 3-1: USB disconnect, device number 121 [ 474.573147][ T5686] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 474.592482][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.610322][ T5686] usb 4-1: Product: syz [ 474.627499][ T5686] usb 4-1: Manufacturer: syz [ 474.637342][ T5686] usb 4-1: SerialNumber: syz [ 474.653902][ T5686] usb 4-1: config 0 descriptor?? [ 474.670128][ T5686] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 018 [ 474.717807][ T5716] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 474.758016][ T5716] usb 5-1: device descriptor read/8, error -71 [ 474.867383][ T1609] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 474.881242][T12775] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2554'. [ 474.997337][ T5716] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 475.041591][ T5716] usb 5-1: device descriptor read/8, error -71 [ 475.053803][ T1609] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.074753][ T1609] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.088467][ T5686] (null): failure reading functionality [ 475.097746][ T1609] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 475.107888][ T1609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 475.118154][ T5686] i2c i2c-1: failure reading functionality [ 475.128120][ T1609] usb 3-1: SerialNumber: syz [ 475.133481][ T5686] i2c i2c-1: connected i2c-tiny-usb device [ 475.177442][ T5687] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 475.185356][ T5716] usb usb5-port1: unable to enumerate USB device [ 475.287395][ T1222] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 475.352216][ T5687] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 475.378450][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.399205][ T5687] usb 2-1: Product: syz [ 475.413214][ T5687] usb 2-1: Manufacturer: syz [ 475.420039][ T5687] usb 2-1: SerialNumber: syz [ 475.431090][ T5687] usb 2-1: config 0 descriptor?? [ 475.447730][ T1222] usb 6-1: Using ep0 maxpacket: 32 [ 475.457875][ T5687] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 019 [ 475.468278][ T1222] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 475.468307][ T1222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.477539][ T1222] usb 6-1: config 0 descriptor?? [ 475.512158][ T1222] gspca_main: sunplus-2.14.0 probing 041e:400b [ 475.646519][T12780] xt_hashlimit: size too large, truncated to 1048576 [ 475.859202][ T5687] (null): failure reading functionality [ 476.023169][ T1609] usb 3-1: cannot find UAC_HEADER [ 476.056529][T12773] xt_hashlimit: size too large, truncated to 1048576 [ 476.141678][ T1609] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 476.178128][ T1609] usb 3-1: USB disconnect, device number 122 [ 476.267852][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.444105][ T24] usb 4-1: USB disconnect, device number 18 [ 476.617838][ T1222] gspca_sunplus: reg_w_riv err -110 [ 476.644533][ T1222] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 476.760188][ T5687] i2c i2c-2: failure reading functionality [ 476.785834][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 476.801468][ T5687] i2c i2c-2: connected i2c-tiny-usb device [ 476.811944][ T1609] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 476.844173][ T5687] usb 2-1: USB disconnect, device number 19 [ 477.001995][ T1609] usb 5-1: Using ep0 maxpacket: 8 [ 477.023281][ T1609] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 477.055643][ T1609] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.088095][ T1609] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 477.136286][ T1609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.380520][ T1609] usb 5-1: string descriptor 0 read error: -71 [ 477.410390][ T1609] hub 5-1:32.0: bad descriptor, ignoring hub [ 477.438977][ T1609] hub 5-1:32.0: probe with driver hub failed with error -5 [ 477.550972][ T1222] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 477.652454][ T1609] usb 5-1: USB disconnect, device number 17 [ 477.709052][ T1222] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.720901][ T1222] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.732958][ T1222] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 477.746885][ T1222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 477.764500][ T1222] usb 4-1: SerialNumber: syz [ 478.193998][ T10] usb 6-1: USB disconnect, device number 118 [ 478.218766][ T1609] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 478.392153][ T1609] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 478.411782][ T1609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.440173][ T1609] usb 3-1: Product: syz [ 478.448333][ T1609] usb 3-1: Manufacturer: syz [ 478.453311][ T1609] usb 3-1: SerialNumber: syz [ 478.463707][ T1609] usb 3-1: config 0 descriptor?? [ 478.484606][ T1609] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 123 [ 478.497519][ T5687] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 478.657937][ T5687] usb 5-1: Using ep0 maxpacket: 8 [ 478.672266][ T5687] usb 5-1: config 255 has an invalid interface number: 106 but max is 0 [ 478.687295][ T5687] usb 5-1: config 255 has no interface number 0 [ 478.703969][ T5687] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 478.725534][ T5687] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 478.738170][ T5687] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0xA has invalid maxpacket 951, setting to 64 [ 478.750055][ T5687] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 478.761838][ T5687] usb 5-1: config 255 interface 106 has no altsetting 0 [ 478.774087][ T5687] usb 5-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 478.787356][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.801371][ T5687] usb 5-1: Product: syz [ 478.811161][ T1222] usb 4-1: cannot find UAC_HEADER [ 478.812293][ T5687] usb 5-1: Manufacturer: syz [ 478.822772][ T5687] usb 5-1: SerialNumber: syz [ 478.830249][T12824] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 478.885570][ T1609] (null): failure reading functionality [ 478.895754][ T1609] i2c i2c-1: failure reading functionality [ 478.908335][ T1222] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 478.930803][ T1609] i2c i2c-1: connected i2c-tiny-usb device [ 478.934323][ T1222] usb 4-1: USB disconnect, device number 19 [ 478.980767][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.063010][ T5687] sierra 5-1:255.106: Sierra USB modem converter detected [ 479.109346][ T5687] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 479.153468][ T5687] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 479.185683][ T5687] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 479.214873][ T5687] usb 5-1: USB disconnect, device number 18 [ 479.233534][ T5687] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 479.285207][ T5687] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 479.293344][ T5687] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 479.315148][ T5687] sierra 5-1:255.106: device disconnected [ 479.317315][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 479.347970][ T1222] usb 3-1: USB disconnect, device number 123 [ 479.469595][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 479.479597][ T24] usb 2-1: config 162 has an invalid interface number: 135 but max is 2 [ 479.488625][ T24] usb 2-1: config 162 has an invalid interface number: 4 but max is 2 [ 479.496875][ T24] usb 2-1: config 162 contains an unexpected descriptor of type 0x1, skipping [ 479.509300][ T24] usb 2-1: config 162 has an invalid interface number: 231 but max is 2 [ 479.518092][ T24] usb 2-1: config 162 has no interface number 0 [ 479.524614][ T24] usb 2-1: config 162 has no interface number 1 [ 479.531878][ T24] usb 2-1: config 162 has no interface number 2 [ 479.538398][ T24] usb 2-1: config 162 interface 135 altsetting 206 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 479.550536][ T24] usb 2-1: config 162 interface 135 altsetting 206 endpoint 0x5 has invalid maxpacket 10508, setting to 64 [ 479.569190][ T24] usb 2-1: config 162 interface 135 altsetting 206 bulk endpoint 0x9 has invalid maxpacket 8 [ 479.580598][ T24] usb 2-1: config 162 interface 135 altsetting 206 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 479.593299][ T24] usb 2-1: config 162 interface 135 altsetting 206 endpoint 0xB has invalid maxpacket 58294, setting to 1024 [ 479.605440][ T24] usb 2-1: config 162 interface 135 altsetting 206 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 479.617142][ T24] usb 2-1: config 162 interface 135 altsetting 206 has a duplicate endpoint with address 0xB, skipping [ 479.633613][ T24] usb 2-1: config 162 interface 135 altsetting 206 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 479.645265][ T24] usb 2-1: config 162 interface 135 altsetting 206 has a duplicate endpoint with address 0xD, skipping [ 479.656556][ T24] usb 2-1: config 162 interface 135 altsetting 206 has a duplicate endpoint with address 0x9, skipping [ 479.677611][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 479.688892][ T24] usb 2-1: config 162 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 479.699854][ T5686] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 479.709000][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 479.746503][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 479.770445][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 479.784999][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 479.798723][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 479.816396][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 479.837975][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 479.851768][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 479.863157][ T24] usb 2-1: config 162 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 479.874486][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 479.891415][ T5686] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 479.903242][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.919377][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 479.921016][ T5686] usb 4-1: Product: syz [ 479.955199][ T5686] usb 4-1: Manufacturer: syz [ 479.957050][ T24] usb 2-1: config 162 interface 4 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 479.972184][ T5686] usb 4-1: SerialNumber: syz [ 479.978773][ T5686] usb 4-1: config 0 descriptor?? [ 479.992259][ T5686] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 020 [ 479.999372][ T24] usb 2-1: config 162 interface 231 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 480.030808][ T24] usb 2-1: config 162 interface 231 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 480.084820][ T24] usb 2-1: config 162 interface 231 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 480.113161][ T24] usb 2-1: config 162 interface 135 has no altsetting 0 [ 480.120498][ T24] usb 2-1: config 162 interface 231 has no altsetting 0 [ 480.395115][ T5686] (null): failure reading functionality [ 480.410933][ T1609] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 480.467344][ T807] usb 6-1: new full-speed USB device number 119 using dummy_hcd [ 480.588033][ T1609] usb 5-1: Using ep0 maxpacket: 8 [ 480.595648][ T1609] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 480.610205][ T1609] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.621898][ T1609] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 480.631152][T12856] xt_hashlimit: size too large, truncated to 1048576 [ 480.635563][ T1609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.649098][ T807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65534, setting to 64 [ 480.673667][ T807] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 480.689010][ T807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.707571][ T807] usb 6-1: Product: syz [ 480.717352][ T807] usb 6-1: Manufacturer: syz [ 480.723759][ T807] usb 6-1: SerialNumber: syz [ 480.738677][ T807] usb 6-1: config 0 descriptor?? [ 480.742534][ T10] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 480.752604][T12849] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 480.768796][ T807] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 480.786369][ T807] uvcvideo 6-1:0.0: No valid video chain found. [ 480.859441][ T1609] usb 5-1: string descriptor 0 read error: -71 [ 480.883777][ T1609] hub 5-1:32.0: bad descriptor, ignoring hub [ 480.890212][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 480.898934][ T10] usb 3-1: device descriptor read/64, error -71 [ 480.906055][ T1609] hub 5-1:32.0: probe with driver hub failed with error -5 [ 481.029862][ T5686] i2c i2c-1: failure reading functionality [ 481.047063][ T5686] i2c i2c-1: connected i2c-tiny-usb device [ 481.048785][ T807] usb 6-1: USB disconnect, device number 119 [ 481.055315][ T1609] usb 5-1: USB disconnect, device number 19 [ 481.091860][ T5686] usb 4-1: USB disconnect, device number 20 [ 481.138820][ T10] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 481.289669][ T10] usb 3-1: device descriptor read/64, error -71 [ 481.399216][ T10] usb usb3-port1: attempt power cycle [ 481.673819][T12865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2583'. [ 481.747484][ T5686] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 481.761098][ T10] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 481.811133][ T10] usb 3-1: device descriptor read/8, error -71 [ 481.949140][ T5686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.967685][ T5686] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.970276][ T24] usb 2-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=14.7a [ 481.990226][ T807] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 481.991938][ T5686] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.017331][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.024047][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.032169][ T5686] usb 5-1: SerialNumber: syz [ 482.046543][ T24] usb 2-1: Product: ߭⳦柬紒㉨⪓장勅渔伉퇼鲓ᅰꮸ⠓ݐߠ⯙ᚗ䳹䧥젟ཅᮗ╶闊ꁆ篪畼䱊䅫偡ᝦ鼔ﴵ狅㪞৛揖ᣥ₉ࣺ玚ꗵี蓶謁䙹⹕㯷ᚈ榤꺏뿱僌䦾㻵侶蘏奓暯뀉꟤봣ﱙ娑犞本曎漐鷐紌ᚓ鵥ሿ峲쮨纙㏰촂鄄洖권ᴨⶳ匧洘ᕘ욌迠Α婩嶟 [ 482.088855][ T10] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 482.093000][ T24] usb 2-1: can't set config #162, error -71 [ 482.119444][ T10] usb 3-1: device descriptor read/8, error -71 [ 482.125888][ T24] usb 2-1: USB disconnect, device number 20 [ 482.171282][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.184179][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.204519][ T807] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 482.224781][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.248271][ T807] usb 4-1: config 0 descriptor?? [ 482.248635][ T10] usb usb3-port1: unable to enumerate USB device [ 482.357747][ T5724] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 482.517472][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 482.533568][ T5724] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 482.544883][ T5724] usb 6-1: can't read configurations, error -61 [ 482.669379][ T807] elan 0003:04F3:0755.0019: unknown main item tag 0x0 [ 482.686024][ T807] elan 0003:04F3:0755.0019: unknown main item tag 0x0 [ 482.693608][ T5724] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 482.705787][ T807] elan 0003:04F3:0755.0019: unknown main item tag 0x0 [ 482.724514][ T807] elan 0003:04F3:0755.0019: unknown main item tag 0x0 [ 482.734606][ T807] elan 0003:04F3:0755.0019: unknown main item tag 0x0 [ 482.751420][ T807] elan 0003:04F3:0755.0019: failed to start in urb: -90 [ 482.790225][ T807] elan 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 482.871572][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 482.886457][ T5724] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 482.889491][ T5686] usb 5-1: cannot find UAC_HEADER [ 482.919008][ T5724] usb 6-1: can't read configurations, error -61 [ 482.944059][ T5724] usb usb6-port1: attempt power cycle [ 482.993292][ T807] usb 4-1: USB disconnect, device number 21 [ 483.046453][ T5686] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 483.081668][ T5686] usb 5-1: USB disconnect, device number 20 [ 483.099608][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.297351][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 483.317404][ T5724] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 483.338076][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 483.345755][ T5724] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 483.353650][ T5724] usb 6-1: can't read configurations, error -61 [ 483.457517][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 483.471864][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.493439][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 483.495055][ T5724] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 483.512520][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 483.540395][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 483.544792][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 483.566248][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.590924][ T5724] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 483.611994][ T5724] usb 6-1: can't read configurations, error -61 [ 483.627179][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 483.633468][ T5724] usb usb6-port1: unable to enumerate USB device [ 483.649215][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 483.649241][ T10] usb 2-1: Manufacturer: syz [ 483.653093][ T10] usb 2-1: config 0 descriptor?? [ 483.747561][ T5686] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 483.917335][ T5686] usb 5-1: Using ep0 maxpacket: 32 [ 483.923303][ T807] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 483.930821][ T5686] usb 5-1: config 123 interface 0 has no altsetting 0 [ 483.945407][ T5686] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 483.956338][ T5716] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 483.964369][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.976890][ T10] rc_core: IR keymap rc-hauppauge not found [ 483.985732][ T10] Registered IR keymap rc-empty [ 483.991327][ T5686] usb 5-1: Product: syz [ 483.995686][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.002881][ T5686] usb 5-1: Manufacturer: syz [ 484.007853][ T5686] usb 5-1: SerialNumber: syz [ 484.037408][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.058439][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 484.071613][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 484.089115][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.109056][ T807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.117377][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.119551][ T807] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.141495][ T807] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 484.150829][ T807] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 484.158909][ T807] usb 3-1: Manufacturer: syz [ 484.167499][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 484.172884][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.175727][ T807] usb 3-1: config 0 descriptor?? [ 484.187488][ T5716] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 484.192119][ T807] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 484.201109][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.217401][ T5716] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.230889][ T5686] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 484.238899][ T5716] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 484.249163][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.258746][ T5686] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 484.269031][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.277753][ T5686] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 484.286355][ T5686] usb 5-1: media controller created [ 484.291809][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.323652][ T5686] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.332273][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.357746][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.387372][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.417362][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 484.428668][ T5686] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 484.435064][ T5686] error writing reg: 0xff, val: 0x00 [ 484.440201][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 484.457950][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 484.489753][ T5686] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 484.509964][ T10] usb 2-1: USB disconnect, device number 21 [ 484.531298][ T5716] usb 4-1: string descriptor 0 read error: -71 [ 484.552866][ T5716] hub 4-1:32.0: bad descriptor, ignoring hub [ 484.559302][ T5716] hub 4-1:32.0: probe with driver hub failed with error -5 [ 484.679309][ T5716] usb 4-1: USB disconnect, device number 22 [ 484.693843][ T5686] usb 5-1: USB disconnect, device number 21 [ 485.127565][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 485.287922][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 485.311317][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 485.317336][ T807] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 485.329555][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.348638][ T10] usb 2-1: Product: syz [ 485.361577][ T10] usb 2-1: Manufacturer: syz [ 485.372599][ T10] usb 2-1: SerialNumber: syz [ 485.413210][ T10] usb 2-1: config 0 descriptor?? [ 485.467341][ T5686] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 485.475774][T12911] loop5: detected capacity change from 0 to 6751 [ 485.484076][ T807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.502591][ T807] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 485.518682][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.538605][ T807] usb 6-1: config 0 descriptor?? [ 485.583172][T12912] loop5: detected capacity change from 6751 to 11447 [ 485.650431][ T10] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 485.661123][ T5624] buffer_io_error: 10 callbacks suppressed [ 485.661142][ T5624] Buffer I/O error on dev loop5, logical block 1430, async page read [ 485.735188][ T5624] Buffer I/O error on dev loop5, logical block 1430, async page read [ 485.743538][ T5686] usb 4-1: Using ep0 maxpacket: 32 [ 485.760417][ T807] usbhid 6-1:0.0: can't add hid device: -71 [ 485.760515][ T5686] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 485.796430][ T807] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 485.825559][ T807] usb 6-1: USB disconnect, device number 124 [ 485.840087][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.889304][ T5686] usb 4-1: config 0 descriptor?? [ 485.938007][ T5686] gspca_main: sunplus-2.14.0 probing 041e:400b [ 485.989424][T12911] could not allocate digest TFM handle sha224-asm [ 486.287577][ T807] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 486.479189][ T807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 486.509459][ T807] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 486.530848][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.555909][ T807] usb 6-1: config 0 descriptor?? [ 486.691014][ T1222] usb 3-1: USB disconnect, device number 2 [ 486.768823][ T5716] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 486.785202][T12905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.806074][T12905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.967542][ T5716] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.978018][ T5716] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.995218][ T5716] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 487.004892][ T807] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 487.010631][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 487.023202][ T807] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 487.024515][ T5716] usb 5-1: SerialNumber: syz [ 487.036304][ T807] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 487.045015][ T807] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 487.054547][ T807] logitech-djreceiver 0003:046D:C71F.001A: unknown main item tag 0x0 [ 487.064967][ T1222] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 487.067700][ T5686] gspca_sunplus: reg_w_riv err -110 [ 487.078017][ T5686] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 487.095052][ T807] logitech-djreceiver 0003:046D:C71F.001A: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 487.209605][ T1222] usb 3-1: device descriptor read/64, error -71 [ 487.426056][ T5686] usb 6-1: USB disconnect, device number 125 [ 487.457305][ T1222] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 487.483727][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 487.498506][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 487.509077][ T5716] usb 5-1: cannot find UAC_HEADER [ 487.515591][ T10] usb 2-1: media controller created [ 487.575419][ T5716] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 487.591425][ T5716] usb 5-1: USB disconnect, device number 22 [ 487.607346][ T1222] usb 3-1: device descriptor read/64, error -71 [ 487.612468][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.681884][ T10] usb read operation failed. (-71) [ 487.693684][ T10] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 487.706654][ T10] usb 2-1: USB disconnect, device number 22 [ 487.748187][ T1222] usb usb3-port1: attempt power cycle [ 488.087372][ T1222] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 488.128126][ T1222] usb 3-1: device descriptor read/8, error -71 [ 488.261579][ T5686] usb 4-1: USB disconnect, device number 23 [ 488.280353][ T10] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 488.387756][ T1222] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 488.419222][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 488.437584][ T1222] usb 3-1: device descriptor read/8, error -71 [ 488.485241][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 488.525486][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.560415][ T10] usb 6-1: Product: syz [ 488.565930][ T10] usb 6-1: Manufacturer: syz [ 488.567883][ T1222] usb usb3-port1: unable to enumerate USB device [ 488.577459][ T10] usb 6-1: SerialNumber: syz [ 488.609423][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 488.619271][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.628715][ T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 488.647583][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.656921][ T5686] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 488.672618][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 488.706831][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 488.735689][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.763161][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 488.777270][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 488.805777][ T24] usb 5-1: Manufacturer: syz [ 488.810526][ T5724] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 488.823151][ T24] usb 5-1: config 0 descriptor?? [ 488.847376][ T807] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 489.007473][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 489.012614][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 489.032793][ T807] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 489.045033][ T5724] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 489.054460][ T5724] usb 2-1: can't read configurations, error -61 [ 489.060817][ T807] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.071634][ T807] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 489.080776][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.167716][ T24] rc_core: IR keymap rc-hauppauge not found [ 489.177272][ T24] Registered IR keymap rc-empty [ 489.185553][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.207504][ T5724] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 489.217368][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.238910][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 489.260903][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input30 [ 489.277187][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.298718][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.308384][ T807] usb 4-1: string descriptor 0 read error: -71 [ 489.323815][ T807] hub 4-1:32.0: bad descriptor, ignoring hub [ 489.330077][ T807] hub 4-1:32.0: probe with driver hub failed with error -5 [ 489.337814][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.358925][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.377344][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 489.393584][ T5724] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 489.401800][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.423353][ T5724] usb 2-1: can't read configurations, error -61 [ 489.439470][ T5724] usb usb2-port1: attempt power cycle [ 489.447541][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.488163][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.496360][ T807] usb 4-1: USB disconnect, device number 24 [ 489.517340][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.557851][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.597382][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.620915][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 489.637290][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 489.661243][ T24] usb 5-1: USB disconnect, device number 23 [ 489.807318][ T5724] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 489.838155][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 489.866372][ T5724] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 489.885564][ T5724] usb 2-1: can't read configurations, error -61 [ 490.008875][ T5686] usb 6-1: Service connection timeout for: 256 [ 490.035670][ T5686] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 490.043561][ T5724] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 490.061371][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 490.076479][ T5724] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 490.101993][ T5724] usb 2-1: can't read configurations, error -61 [ 490.110098][ T5686] ath9k_htc: Failed to initialize the device [ 490.124282][ T5724] usb usb2-port1: unable to enumerate USB device [ 490.154522][ T5686] usb 6-1: ath9k_htc: USB layer deinitialized [ 490.397293][ T5724] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 490.547337][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 490.568954][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.587298][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.607972][ T5724] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 490.618739][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.643099][ T5724] usb 5-1: config 0 descriptor?? [ 490.707347][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 490.715759][ T24] usb 4-1: config 255 has an invalid interface number: 106 but max is 0 [ 490.737314][ T24] usb 4-1: config 255 has no interface number 0 [ 490.743663][ T24] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 490.767315][ T24] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 490.778726][ T24] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0xA has invalid maxpacket 951, setting to 64 [ 490.789974][ T24] usb 4-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 490.801336][ T24] usb 4-1: config 255 interface 106 has no altsetting 0 [ 490.810977][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 490.820287][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.828421][ T24] usb 4-1: Product: syz [ 490.832608][ T24] usb 4-1: Manufacturer: syz [ 490.837753][ T24] usb 4-1: SerialNumber: syz [ 490.865716][ T5724] usbhid 5-1:0.0: can't add hid device: -71 [ 490.875351][ T5724] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 490.897387][ T5716] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 490.899483][ T5724] usb 5-1: USB disconnect, device number 24 [ 490.974016][ T10] usb 6-1: USB disconnect, device number 126 [ 491.059373][ T24] sierra 4-1:255.106: Sierra USB modem converter detected [ 491.068906][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.096001][ T5716] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.113066][ T5716] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 491.120222][ T24] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 491.129616][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 491.129642][ T5716] usb 3-1: SerialNumber: syz [ 491.150677][ T24] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 491.161874][ T24] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 491.176274][ T24] usb 4-1: USB disconnect, device number 25 [ 491.195948][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 491.207662][ T24] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 491.219316][ T24] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 491.231248][ T24] sierra 4-1:255.106: device disconnected [ 491.357475][ T5724] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 491.467302][ T10] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 491.530172][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.552042][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.577371][ T5724] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 491.589586][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.609926][ T5724] usb 5-1: config 0 descriptor?? [ 491.627340][ T10] usb 6-1: device descriptor read/64, error -71 [ 491.681235][ T5716] usb 3-1: cannot find UAC_HEADER [ 491.743931][ T5716] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 491.759544][ T807] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 491.763295][ T5716] usb 3-1: USB disconnect, device number 7 [ 491.803154][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.877441][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 491.931550][ T807] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 491.949931][ T807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 491.960032][ T807] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 491.969905][ T807] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 491.978196][ T807] usb 2-1: Product: syz [ 491.982394][ T807] usb 2-1: Manufacturer: syz [ 491.987017][ T807] usb 2-1: SerialNumber: syz [ 491.994623][ T807] usb 2-1: config 0 descriptor?? [ 492.000512][T12966] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 492.012007][ T807] usb 2-1: selecting invalid altsetting 0 [ 492.028781][ T10] usb 6-1: device descriptor read/64, error -71 [ 492.078876][ T5724] steelseries 0003:1038:12B6.001B: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 492.139428][ T10] usb usb6-port1: attempt power cycle [ 492.158056][ T1609] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 492.220218][T12966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.229326][T12966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.241152][T12966] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 492.278565][ T5724] steelseries 0003:1038:12B6.001B: hid_hw_raw_request() failed with -71 [ 492.291721][T12966] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 492.309424][ T1609] usb 4-1: device descriptor read/64, error -71 [ 492.311765][ T5724] usb 5-1: USB disconnect, device number 25 [ 492.330858][T12966] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 492.482029][ T5686] usb 2-1: USB disconnect, device number 27 [ 492.488461][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 492.520907][ T10] usb 6-1: device descriptor read/8, error -71 [ 492.569255][ T1609] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 492.677306][ T5716] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 492.729172][ T1609] usb 4-1: device descriptor read/64, error -71 [ 492.767477][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 492.787725][ T10] usb 6-1: device descriptor read/8, error -71 [ 492.837359][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 492.842694][ T1609] usb usb4-port1: attempt power cycle [ 492.849626][ T5716] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 492.861462][ T5716] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.871397][ T5716] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 492.881997][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.899434][ T10] usb usb6-port1: unable to enumerate USB device [ 493.125549][ T5716] usb 3-1: string descriptor 0 read error: -71 [ 493.141740][ T5716] hub 3-1:32.0: bad descriptor, ignoring hub [ 493.148109][ T5716] hub 3-1:32.0: probe with driver hub failed with error -5 [ 493.197715][ T1609] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 493.254041][ T1609] usb 4-1: device descriptor read/8, error -71 [ 493.288314][ T5716] usb 3-1: USB disconnect, device number 8 [ 493.556566][ T1609] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 493.618009][ T1609] usb 4-1: device descriptor read/8, error -71 [ 493.737919][ T1609] usb usb4-port1: unable to enumerate USB device [ 494.037449][ T1609] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 494.120530][T13004] FAULT_INJECTION: forcing a failure. [ 494.120530][T13004] name failslab, interval 1, probability 0, space 0, times 0 [ 494.134177][T13004] CPU: 0 UID: 0 PID: 13004 Comm: syz.5.2628 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.134195][T13004] Tainted: [L]=SOFTLOCKUP [ 494.134199][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 494.134206][T13004] Call Trace: [ 494.134212][T13004] [ 494.134217][T13004] dump_stack_lvl+0xe8/0x150 [ 494.134234][T13004] should_fail_ex+0x412/0x560 [ 494.134259][T13004] should_failslab+0xa8/0x100 [ 494.134275][T13004] ? skb_clone+0x212/0x3a0 [ 494.134290][T13004] kmem_cache_alloc_noprof+0x87/0x650 [ 494.134303][T13004] ? dev_queue_xmit_nit+0x2d/0xad0 [ 494.134320][T13004] skb_clone+0x212/0x3a0 [ 494.134333][T13004] ? dev_queue_xmit_nit+0x268/0xad0 [ 494.134347][T13004] dev_queue_xmit_nit+0x29a/0xad0 [ 494.134360][T13004] ? dev_queue_xmit_nit+0x2d/0xad0 [ 494.134377][T13004] dev_hard_start_xmit+0x1c1/0x830 [ 494.134399][T13004] __dev_queue_xmit+0x14d9/0x3950 [ 494.134414][T13004] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 494.134432][T13004] ? __dev_queue_xmit+0x2b6/0x3950 [ 494.134453][T13004] ? __pfx___dev_queue_xmit+0x10/0x10 [ 494.134473][T13004] ? __copy_skb_header+0xa3/0x4a0 [ 494.134487][T13004] ? __asan_memcpy+0x40/0x70 [ 494.134498][T13004] ? __skb_clone+0x63/0x7a0 [ 494.134515][T13004] ? __skb_clone+0x483/0x7a0 [ 494.134532][T13004] ? skb_clone+0x246/0x3a0 [ 494.134547][T13004] __netlink_deliver_tap+0x5ad/0x850 [ 494.134567][T13004] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.134581][T13004] netlink_deliver_tap+0x19c/0x1b0 [ 494.134595][T13004] netlink_unicast+0x730/0x8e0 [ 494.134613][T13004] netlink_sendmsg+0x813/0xb40 [ 494.134630][T13004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.134646][T13004] ? aa_sock_msg_perm+0xf1/0x1b0 [ 494.134660][T13004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.134676][T13004] ____sys_sendmsg+0x972/0x9f0 [ 494.134690][T13004] ? __might_fault+0xaf/0x130 [ 494.134705][T13004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.134724][T13004] ? import_iovec+0x73/0xa0 [ 494.134740][T13004] ___sys_sendmsg+0x2a5/0x360 [ 494.134753][T13004] ? __lock_acquire+0x6b5/0x2cf0 [ 494.134767][T13004] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.134801][T13004] ? __fget_files+0x2a/0x420 [ 494.134813][T13004] ? __fget_files+0x3a0/0x420 [ 494.134830][T13004] __x64_sys_sendmsg+0x1bd/0x2a0 [ 494.134845][T13004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.134864][T13004] ? rcu_is_watching+0x15/0xb0 [ 494.134880][T13004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.134891][T13004] do_syscall_64+0x15f/0xf80 [ 494.134906][T13004] ? trace_irq_disable+0x3b/0x140 [ 494.134921][T13004] ? clear_bhb_loop+0x40/0x90 [ 494.134934][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.134944][T13004] RIP: 0033:0x7fe43779cdd9 [ 494.134954][T13004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.134963][T13004] RSP: 002b:00007fe4386c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.134975][T13004] RAX: ffffffffffffffda RBX: 00007fe437a15fa0 RCX: 00007fe43779cdd9 [ 494.134982][T13004] RDX: 0000000020040040 RSI: 0000200000000200 RDI: 0000000000000006 [ 494.134989][T13004] RBP: 00007fe4386c8090 R08: 0000000000000000 R09: 0000000000000000 [ 494.134996][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.135001][T13004] R13: 00007fe437a16038 R14: 00007fe437a15fa0 R15: 00007fe437b3fa48 [ 494.135017][T13004] [ 494.136330][T13004] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2628'. [ 494.177422][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 494.178648][ T807] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 494.187360][ T1609] usb 2-1: Using ep0 maxpacket: 8 [ 494.347271][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 494.351693][ T1609] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 494.357644][ T807] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 494.358658][ T1609] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.364384][ T807] usb 3-1: can't read configurations, error -61 [ 494.432328][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.551371][ T1609] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 494.562149][ T1609] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.573931][ T1609] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.586996][ T1609] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 494.596175][ T1609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.627105][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.648574][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 494.662382][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 494.682855][ T10] usb 5-1: SerialNumber: syz [ 494.717783][ T807] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 494.845715][ T1609] usb 2-1: GET_CAPABILITIES returned 0 [ 494.851290][ T1609] usbtmc 2-1:16.0: can't read capabilities [ 494.877289][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 494.885624][ T807] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 494.905725][ T807] usb 3-1: can't read configurations, error -61 [ 494.918949][ T807] usb usb3-port1: attempt power cycle [ 494.937296][ T5716] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 495.097398][ T5716] usb 6-1: Using ep0 maxpacket: 32 [ 495.109859][ T5716] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 495.127140][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.190003][ T5716] usb 6-1: config 0 descriptor?? [ 495.214015][ T5716] gspca_main: sunplus-2.14.0 probing 041e:400b [ 495.267408][ T807] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 495.296381][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 495.305320][ T807] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 495.321815][ T807] usb 3-1: can't read configurations, error -61 [ 495.457470][ T807] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 495.486834][T13017] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned d0 [ 495.504764][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 495.507430][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.523448][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.527570][ T807] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 495.545903][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.554820][ T807] usb 3-1: can't read configurations, error -61 [ 495.576527][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.587952][ T807] usb usb3-port1: unable to enumerate USB device [ 495.616040][ T10] usb 5-1: cannot find UAC_HEADER [ 495.664001][T13021] FAULT_INJECTION: forcing a failure. [ 495.664001][T13021] name failslab, interval 1, probability 0, space 0, times 0 [ 495.714895][ T1609] usb 2-1: USB disconnect, device number 28 [ 495.721177][T13017] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 495.732477][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 495.761456][ T10] usb 5-1: USB disconnect, device number 26 [ 495.763367][T13021] CPU: 1 UID: 0 PID: 13021 Comm: syz.3.2634 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.763392][T13021] Tainted: [L]=SOFTLOCKUP [ 495.763399][T13021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.763410][T13021] Call Trace: [ 495.763418][T13021] [ 495.763425][T13021] dump_stack_lvl+0xe8/0x150 [ 495.763450][T13021] should_fail_ex+0x412/0x560 [ 495.763478][T13021] should_failslab+0xa8/0x100 [ 495.763503][T13021] __kmalloc_noprof+0xe8/0x760 [ 495.763526][T13021] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 495.763551][T13021] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 495.763578][T13021] genl_family_rcv_msg_doit+0xd9/0x330 [ 495.763602][T13021] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 495.763627][T13021] ? apparmor_capable+0x126/0x170 [ 495.763654][T13021] ? bpf_lsm_capable+0x9/0x20 [ 495.763671][T13021] ? security_capable+0x7e/0x2c0 [ 495.763697][T13021] genl_rcv_msg+0x61c/0x7a0 [ 495.763718][T13021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.763735][T13021] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 495.763755][T13021] ? __pfx_nl80211_set_key+0x10/0x10 [ 495.763775][T13021] ? __pfx_nl80211_post_doit+0x10/0x10 [ 495.763796][T13021] ? __pfx_ref_tracker_free+0x10/0x10 [ 495.763817][T13021] ? __asan_memcpy+0x40/0x70 [ 495.763836][T13021] ? __skb_clone+0x63/0x7a0 [ 495.763865][T13021] netlink_rcv_skb+0x232/0x4b0 [ 495.763888][T13021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 495.763908][T13021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.763943][T13021] ? down_read+0x270/0x2e0 [ 495.763958][T13021] ? genl_rcv+0xd/0x40 [ 495.763977][T13021] genl_rcv+0x28/0x40 [ 495.763992][T13021] netlink_unicast+0x75c/0x8e0 [ 495.764021][T13021] netlink_sendmsg+0x813/0xb40 [ 495.764052][T13021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.764077][T13021] ? aa_sock_msg_perm+0xf1/0x1b0 [ 495.764107][T13021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.764132][T13021] ____sys_sendmsg+0x972/0x9f0 [ 495.764154][T13021] ? __might_fault+0xaf/0x130 [ 495.764181][T13021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.764212][T13021] ? import_iovec+0x73/0xa0 [ 495.764239][T13021] ___sys_sendmsg+0x2a5/0x360 [ 495.764260][T13021] ? __lock_acquire+0x6b5/0x2cf0 [ 495.764282][T13021] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.764336][T13021] ? __fget_files+0x2a/0x420 [ 495.764354][T13021] ? __fget_files+0x3a0/0x420 [ 495.764382][T13021] __x64_sys_sendmsg+0x1bd/0x2a0 [ 495.764408][T13021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.764439][T13021] ? __pfx_ksys_write+0x10/0x10 [ 495.764469][T13021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.764488][T13021] do_syscall_64+0x15f/0xf80 [ 495.764509][T13021] ? trace_irq_disable+0x3b/0x140 [ 495.764532][T13021] ? clear_bhb_loop+0x40/0x90 [ 495.764553][T13021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.764569][T13021] RIP: 0033:0x7fee7759cdd9 [ 495.764586][T13021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.764601][T13021] RSP: 002b:00007fee78422028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.764619][T13021] RAX: ffffffffffffffda RBX: 00007fee77815fa0 RCX: 00007fee7759cdd9 [ 495.764632][T13021] RDX: 0000000000000090 RSI: 0000200000000680 RDI: 0000000000000004 [ 495.764643][T13021] RBP: 00007fee78422090 R08: 0000000000000000 R09: 0000000000000000 [ 495.764653][T13021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.764664][T13021] R13: 00007fee77816038 R14: 00007fee77815fa0 R15: 00007fee7793fa48 [ 495.764696][T13021] [ 496.186464][ T5716] gspca_sunplus: reg_r err -110 [ 496.192951][ T5716] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 496.279206][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.607319][ T1609] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 496.675636][T13006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.697083][T13006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.763265][ T1609] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 496.800396][ T1609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.849436][ T1609] usb 4-1: Product: syz [ 496.871615][ T1609] usb 4-1: Manufacturer: syz [ 496.885875][ T1609] usb 4-1: SerialNumber: syz [ 496.923860][ T1609] usb 4-1: config 0 descriptor?? [ 496.945340][ T1609] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 030 [ 497.168779][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 497.309448][ T10] usb 2-1: device descriptor read/64, error -71 [ 497.342262][ T1609] (null): failure reading functionality [ 497.507342][ T5716] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 497.567358][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 497.637332][ T807] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 497.661188][ T5716] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 497.672181][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.690341][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.702940][ T10] usb 2-1: device descriptor read/64, error -71 [ 497.714891][ T5716] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 497.731778][ T5716] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 497.741302][ T5716] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 497.754337][ T5716] usb 3-1: Manufacturer: syz [ 497.766263][ T5716] usb 3-1: config 0 descriptor?? [ 497.785287][T13048] xt_hashlimit: size too large, truncated to 1048576 [ 497.792692][ T807] usb 5-1: Using ep0 maxpacket: 16 [ 497.803237][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.820448][ T10] usb usb2-port1: attempt power cycle [ 497.827642][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.856584][ T807] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 497.892307][ T807] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 497.905448][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.932149][ T807] usb 5-1: config 0 descriptor?? [ 498.018578][ T5686] usb 6-1: USB disconnect, device number 5 [ 498.029877][ T5716] usbhid 3-1:0.0: can't add hid device: -71 [ 498.087111][ T5716] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 498.139792][ T5716] usb 3-1: USB disconnect, device number 13 [ 498.187342][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 498.228276][ T10] usb 2-1: device descriptor read/8, error -71 [ 498.289552][ T1609] i2c i2c-1: failure reading functionality [ 498.304813][ T1609] i2c i2c-1: connected i2c-tiny-usb device [ 498.320571][ T1609] usb 4-1: USB disconnect, device number 30 [ 498.360492][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 498.478284][ T5724] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 498.488988][T13062] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2650'. [ 498.498384][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 498.519989][ T10] usb 2-1: device descriptor read/8, error -71 [ 498.627587][ T10] usb usb2-port1: unable to enumerate USB device [ 498.640428][ T5724] usb 6-1: unable to get BOS descriptor or descriptor too short [ 498.650244][ T5724] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 498.673716][ T5724] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 498.683142][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.694591][ T5724] usb 6-1: Product: syz [ 498.698969][ T5724] usb 6-1: Manufacturer: syz [ 498.705626][ T5724] usb 6-1: SerialNumber: syz [ 498.987012][T13056] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 499.057389][ T1222] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 499.137375][ T5724] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 499.224261][ T1222] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 499.249307][ T1222] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 499.249338][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.249357][ T1222] usb 3-1: Product: syz [ 499.249372][ T1222] usb 3-1: Manufacturer: syz [ 499.249410][ T1222] usb 3-1: SerialNumber: syz [ 499.411815][T13056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.428176][T13056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.068250][T13093] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 500.105703][T13095] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2661'. [ 500.115346][T13093] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 500.300200][ T807] usbhid 5-1:0.0: can't add hid device: -71 [ 500.322339][ T807] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 500.363190][ T807] usb 5-1: USB disconnect, device number 27 [ 500.679716][ T5724] usb 6-1: USB disconnect, device number 6 [ 500.794446][T13103] syzkaller0: entered promiscuous mode [ 500.801113][T13103] syzkaller0: entered allmulticast mode [ 501.007696][ T5716] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 501.182663][ T5716] usb 5-1: Using ep0 maxpacket: 16 [ 501.210759][ T5716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.222685][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.245913][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 501.267385][ T5716] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 501.277516][ T5716] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.313152][ T5716] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 501.322414][ T5716] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 501.332512][ T5716] usb 5-1: Manufacturer: syz [ 501.370599][ T5716] usb 5-1: config 0 descriptor?? [ 501.379726][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.386342][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.664098][ T5724] usb 3-1: USB disconnect, device number 14 [ 501.677352][ T5716] rc_core: IR keymap rc-hauppauge not found [ 501.693823][ T5716] Registered IR keymap rc-empty [ 501.699145][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.729655][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.750278][ T5716] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 501.783142][ T5716] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 501.833346][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.860401][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.891437][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.924624][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.949022][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.974217][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.007558][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.037872][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.063735][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.093367][ T5716] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 502.108593][ T5724] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 502.127115][ T5716] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 502.136567][ T5716] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 502.149677][ T5716] usb 5-1: USB disconnect, device number 28 [ 502.280521][ T5724] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.290960][ T5724] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.301756][ T5724] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 502.311779][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 502.320089][ T5724] usb 3-1: SerialNumber: syz [ 502.579245][ T5724] usb 3-1: cannot find UAC_HEADER [ 502.649777][T13124] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2673'. [ 502.682844][ T5724] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 502.705153][ T5724] usb 3-1: USB disconnect, device number 15 [ 502.746860][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.467497][ T5716] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 503.619147][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 503.629954][ T5716] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 503.639702][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.648095][ T5716] usb 3-1: Product: syz [ 503.662462][ T5716] usb 3-1: Manufacturer: syz [ 503.668545][ T5716] usb 3-1: SerialNumber: syz [ 503.692956][ T5716] usb 3-1: config 0 descriptor?? [ 503.906117][ T5716] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 504.246599][T13142] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.2681'. [ 504.287306][ T5724] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 504.297522][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 504.347346][ T1609] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 504.450627][ T5724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.452666][ T10] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 504.461506][ T5724] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.471206][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.482417][ T5724] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 504.488614][ T10] usb 2-1: Product: syz [ 504.499703][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 504.501708][ T10] usb 2-1: Manufacturer: syz [ 504.510001][ T5724] usb 4-1: SerialNumber: syz [ 504.514073][ T1609] usb 5-1: Using ep0 maxpacket: 8 [ 504.528716][ T10] usb 2-1: SerialNumber: syz [ 504.535031][ T1609] usb 5-1: config 255 has an invalid interface number: 106 but max is 0 [ 504.544271][ T1609] usb 5-1: config 255 has no interface number 0 [ 504.551811][ T10] usb 2-1: config 0 descriptor?? [ 504.557011][ T1609] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 504.557383][ T1222] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 504.571961][ T10] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 033 [ 504.584214][ T1609] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 504.595674][ T1609] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0xA has invalid maxpacket 951, setting to 64 [ 504.607192][ T1609] usb 5-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 504.618607][ T1609] usb 5-1: config 255 interface 106 has no altsetting 0 [ 504.628227][ T1609] usb 5-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 504.637363][ T1609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.645379][ T1609] usb 5-1: Product: syz [ 504.649712][ T1609] usb 5-1: Manufacturer: syz [ 504.654361][ T1609] usb 5-1: SerialNumber: syz [ 504.739182][ T1222] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.749668][ T1222] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.764032][ T1222] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 504.773440][ T5724] usb 4-1: cannot find UAC_HEADER [ 504.784442][ T1222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 504.794644][ T1222] usb 6-1: SerialNumber: syz [ 504.833522][ T5724] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 504.846273][ T5724] usb 4-1: USB disconnect, device number 31 [ 504.869222][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.892806][ T1609] sierra 5-1:255.106: Sierra USB modem converter detected [ 504.929036][ T1609] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 504.943066][ T1609] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 504.956172][ T1609] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 504.978436][ T1609] usb 5-1: USB disconnect, device number 29 [ 504.986231][ T10] (null): failure reading functionality [ 505.034342][ T1609] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 505.052800][ T1609] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 505.066010][ T1609] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 505.076443][ T1609] sierra 5-1:255.106: device disconnected [ 505.175805][ T10] i2c i2c-1: failure reading functionality [ 505.186506][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 505.196112][ T10] usb 2-1: USB disconnect, device number 33 [ 505.364283][ T1222] usb 6-1: cannot find UAC_HEADER [ 505.409524][ T1222] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 505.421164][ T1222] usb 6-1: USB disconnect, device number 7 [ 505.454565][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.597187][T13156] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2686'. [ 505.729885][ T5716] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 505.737347][ T807] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 505.748174][ T5716] dvbdev: DVB: registering new adapter (Terratec H7) [ 505.755063][ T5716] usb 3-1: media controller created [ 505.909612][ T807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.932684][ T5724] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 505.950299][ T807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.964519][ T5716] usb read operation failed. (-71) [ 505.981326][T13166] syzkaller0: entered promiscuous mode [ 505.991898][ T5716] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 505.993172][ T807] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 506.006134][T13166] syzkaller0: entered allmulticast mode [ 506.027952][ T5716] usb 3-1: USB disconnect, device number 16 [ 506.046080][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 506.081195][ T807] usb 4-1: SerialNumber: syz [ 506.125666][ T5724] usb 5-1: unable to get BOS descriptor or descriptor too short [ 506.151660][ T5724] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 506.181966][ T5724] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 506.209055][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.220161][ T5724] usb 5-1: Product: syz [ 506.224417][ T5724] usb 5-1: Manufacturer: syz [ 506.250078][ T5724] usb 5-1: SerialNumber: syz [ 506.374142][ T807] usb 4-1: cannot find UAC_HEADER [ 506.498084][ T807] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 506.547883][ T807] usb 4-1: USB disconnect, device number 32 [ 506.592227][T13160] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 506.617724][ T1222] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 506.636860][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.768703][ T5724] usb 5-1: reset high-speed USB device number 30 using dummy_hcd [ 506.801500][T13177] FAULT_INJECTION: forcing a failure. [ 506.801500][T13177] name failslab, interval 1, probability 0, space 0, times 0 [ 506.812040][ T1222] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.814745][T13177] CPU: 0 UID: 0 PID: 13177 Comm: syz.2.2695 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.814772][T13177] Tainted: [L]=SOFTLOCKUP [ 506.814779][T13177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.814790][T13177] Call Trace: [ 506.814797][T13177] [ 506.814805][T13177] dump_stack_lvl+0xe8/0x150 [ 506.814830][T13177] should_fail_ex+0x412/0x560 [ 506.814857][T13177] should_failslab+0xa8/0x100 [ 506.814883][T13177] __kmalloc_noprof+0xe8/0x760 [ 506.814906][T13177] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 506.814935][T13177] tomoyo_realpath_from_path+0xe3/0x5d0 [ 506.814960][T13177] ? tomoyo_domain+0xd7/0x130 [ 506.814988][T13177] ? tomoyo_path_number_perm+0x219/0x630 [ 506.815008][T13177] tomoyo_path_number_perm+0x246/0x630 [ 506.815029][T13177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 506.815048][T13177] ? __lock_acquire+0x6b5/0x2cf0 [ 506.815081][T13177] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 506.815123][T13177] ? __fget_files+0x2a/0x420 [ 506.815145][T13177] ? __fget_files+0x2a/0x420 [ 506.815164][T13177] ? __fget_files+0x3a0/0x420 [ 506.815182][T13177] ? __fget_files+0x2a/0x420 [ 506.815205][T13177] security_file_ioctl+0xc3/0x2a0 [ 506.815225][T13177] __se_sys_ioctl+0x47/0x170 [ 506.815249][T13177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.815268][T13177] do_syscall_64+0x15f/0xf80 [ 506.815290][T13177] ? trace_irq_disable+0x3b/0x140 [ 506.815314][T13177] ? clear_bhb_loop+0x40/0x90 [ 506.815335][T13177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.815352][T13177] RIP: 0033:0x7ff0b539cdd9 [ 506.815368][T13177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.815383][T13177] RSP: 002b:00007ff0b61ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.815401][T13177] RAX: ffffffffffffffda RBX: 00007ff0b5615fa0 RCX: 00007ff0b539cdd9 [ 506.815414][T13177] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 506.815425][T13177] RBP: 00007ff0b61ae090 R08: 0000000000000000 R09: 0000000000000000 [ 506.815435][T13177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.815445][T13177] R13: 00007ff0b5616038 R14: 00007ff0b5615fa0 R15: 00007ff0b573fa48 [ 506.815473][T13177] [ 506.815481][T13177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.839731][ T1222] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.052595][T13160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.080125][ T1222] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 507.089524][ T1222] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 507.091866][T13160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.097994][ T1222] usb 6-1: Manufacturer: syz [ 507.146198][ T1222] usb 6-1: config 0 descriptor?? [ 507.169931][ T1222] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 509.239059][T13194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2702'. [ 509.274932][ T5633] Bluetooth: hci3: ACL packet too small [ 509.383521][ T807] usb 6-1: USB disconnect, device number 8 [ 509.521833][ T10] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 509.527332][ T1222] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 509.537791][ T5716] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 509.630886][T13212] syzkaller0: entered promiscuous mode [ 509.636372][T13212] syzkaller0: entered allmulticast mode [ 509.699559][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 509.702008][ T1222] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 509.707660][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 509.725675][ T1222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.726790][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.733942][ T1222] usb 4-1: Product: syz [ 509.744484][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 509.758615][ T5716] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 509.768703][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.776995][ T1222] usb 4-1: Manufacturer: syz [ 509.777088][ T5716] usb 3-1: Product: syz [ 509.782421][ T1222] usb 4-1: SerialNumber: syz [ 509.787041][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.799127][ T5716] usb 3-1: Manufacturer: syz [ 509.803812][ T5716] usb 3-1: SerialNumber: syz [ 509.823854][ T10] usb 2-1: config 0 descriptor?? [ 509.834641][ T5716] usb 3-1: config 0 descriptor?? [ 509.857374][ T5724] usb 5-1: device descriptor read/64, error -71 [ 510.061779][ T5716] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 510.102720][ T5724] usb 5-1: reset high-speed USB device number 30 using dummy_hcd [ 510.228118][ T1222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 510.240772][ T1222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 510.268518][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 510.275385][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 510.296174][ T10] usb 2-1: USB disconnect, device number 34 [ 510.309667][ T5724] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.323091][ T5724] usb 5-1: device firmware changed [ 510.350521][ T5724] usb 5-1: USB disconnect, device number 30 [ 511.348213][T13199] netlink: 'syz.3.2704': attribute type 1 has an invalid length. [ 511.836685][ T1222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 511.857864][ T1222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 511.888141][ T1222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 511.917340][ T1222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 511.932761][ T1222] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 511.940879][ T5716] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 511.964833][ T5716] dvbdev: DVB: registering new adapter (Terratec H7) [ 511.966525][ T1222] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 511.972030][ T5716] usb 3-1: media controller created [ 512.011784][ T1222] usb 4-1: USB disconnect, device number 33 [ 512.150849][ T5716] usb read operation failed. (-71) [ 512.161792][ T5716] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 512.174719][ T5716] usb 3-1: USB disconnect, device number 17 [ 512.322861][T13218] syzkaller0: entered promiscuous mode [ 512.331443][T13218] syzkaller0: entered allmulticast mode [ 513.239001][ T1609] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 513.407295][ T1609] usb 3-1: Using ep0 maxpacket: 8 [ 513.414536][ T1609] usb 3-1: config 255 has an invalid interface number: 106 but max is 0 [ 513.423577][ T1609] usb 3-1: config 255 has no interface number 0 [ 513.430186][ T1609] usb 3-1: config 255 interface 106 altsetting 15 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 513.442632][ T1609] usb 3-1: config 255 interface 106 altsetting 15 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 513.454752][ T1609] usb 3-1: config 255 interface 106 altsetting 15 endpoint 0xA has invalid maxpacket 951, setting to 64 [ 513.466005][ T1609] usb 3-1: config 255 interface 106 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 513.493879][ T1609] usb 3-1: config 255 interface 106 has no altsetting 0 [ 513.504131][ T1609] usb 3-1: New USB device found, idVendor=1199, idProduct=0218, bcdDevice=9a.82 [ 513.513316][ T1609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.521390][ T1609] usb 3-1: Product: syz [ 513.525581][ T1609] usb 3-1: Manufacturer: syz [ 513.530264][ T1609] usb 3-1: SerialNumber: syz [ 513.761014][ T1609] sierra 3-1:255.106: Sierra USB modem converter detected [ 513.784071][ T1609] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 513.796927][ T1609] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 513.810911][ T1609] usb 3-1: Sierra USB modem converter now attached to ttyUSB2 [ 513.827967][ T1609] usb 3-1: USB disconnect, device number 18 [ 513.852482][ T1609] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 513.874755][ T1609] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 513.889513][ T1609] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 513.898923][ T1609] sierra 3-1:255.106: device disconnected [ 514.698000][ T5714] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 514.862344][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.919009][ T5714] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 514.945848][ T5714] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 514.971523][ T5714] usb 3-1: Manufacturer: syz [ 514.991610][ T5714] usb 3-1: config 0 descriptor?? [ 515.023497][ T5714] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 515.031448][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 515.031464][ T29] audit: type=1326 audit(1778555514.276:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13253 comm="syz.5.2725" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe43779cdd9 code=0x0 [ 515.147428][ T1222] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 515.149865][T13257] kvm: Disabled LAPIC found during irq injection [ 515.189461][ T1609] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 515.308029][ T1222] usb 4-1: Using ep0 maxpacket: 32 [ 515.321946][ T1222] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 515.340846][ T1222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.355076][ T1222] usb 4-1: config 0 descriptor?? [ 515.357742][ T5716] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 515.390282][ T1222] gspca_main: sunplus-2.14.0 probing 041e:400b [ 515.392136][ T1609] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 515.414053][T13262] netlink: 16158 bytes leftover after parsing attributes in process `syz.1.2728'. [ 515.424271][ T1609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.438227][ T1609] usb 5-1: Product: syz [ 515.445436][ T1609] usb 5-1: Manufacturer: syz [ 515.455489][ T1609] usb 5-1: SerialNumber: syz [ 515.477923][ T1609] usb 5-1: config 0 descriptor?? [ 515.488092][ T1609] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 031 [ 515.528780][ T5716] usb 6-1: Using ep0 maxpacket: 8 [ 515.536749][ T5716] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 515.565811][ T5716] usb 6-1: config 0 has no interface number 0 [ 515.581989][ T5716] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 515.600910][ T5716] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 515.612895][ T5716] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 515.624479][ T5716] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 515.647034][ T5716] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 515.656675][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.669162][ T5716] usb 6-1: config 0 descriptor?? [ 515.700964][ T5716] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 515.816752][T13272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2731'. [ 516.134644][ T1609] (null): failure reading functionality [ 516.155939][ T1609] i2c i2c-1: failure reading functionality [ 516.176663][ T1609] i2c i2c-1: connected i2c-tiny-usb device [ 516.203133][ T1609] usb 5-1: USB disconnect, device number 31 [ 516.267085][T13250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.294930][T13250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.517605][ T1222] gspca_sunplus: reg_w_riv err -110 [ 516.526087][ T1222] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 516.892627][T13282] syzkaller0: entered promiscuous mode [ 516.921292][T13282] syzkaller0: entered allmulticast mode [ 517.197738][ T5716] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 517.397348][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 517.412284][ T5716] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 517.423123][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.445479][ T5716] usb 5-1: config 0 descriptor?? [ 517.499889][ T807] usb 3-1: USB disconnect, device number 19 [ 517.515480][ T5716] gspca_main: sunplus-2.14.0 probing 041e:400b [ 518.032338][ T5724] usb 6-1: USB disconnect, device number 9 [ 518.044555][ T5724] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 518.308974][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.325309][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.408803][ T5724] usb 4-1: USB disconnect, device number 34 [ 518.615727][ T5716] gspca_sunplus: reg_w_riv err -110 [ 518.621273][ T5716] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 519.698719][ T5716] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 519.869153][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 519.903915][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 519.947798][ T5716] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 519.956927][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.973767][ T5716] usb 4-1: Product: syz [ 519.978168][ T5716] usb 4-1: Manufacturer: syz [ 519.982808][ T5716] usb 4-1: SerialNumber: syz [ 520.005066][ T5716] usb 4-1: config 0 descriptor?? [ 520.244365][ T807] usb 4-1: USB disconnect, device number 35 [ 520.426389][ T5724] usb 5-1: USB disconnect, device number 32 [ 520.617938][ T5716] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 520.778219][ T5716] usb 6-1: Using ep0 maxpacket: 8 [ 520.787373][ T1222] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 520.790401][ T5716] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 520.811456][ T5716] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.828409][ T5716] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 520.845540][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.887387][ T5724] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 520.987313][ T1222] usb 3-1: Using ep0 maxpacket: 8 [ 520.994885][ T1222] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 521.007625][ T1222] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.020186][ T1222] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 521.031797][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.047366][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 521.073902][ T5716] usb 6-1: string descriptor 0 read error: -71 [ 521.084120][ T5724] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 521.094970][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.096308][ T5716] hub 6-1:32.0: bad descriptor, ignoring hub [ 521.108526][ T5724] usb 5-1: Product: syz [ 521.117124][ T5724] usb 5-1: Manufacturer: syz [ 521.120024][ T5716] hub 6-1:32.0: probe with driver hub failed with error -5 [ 521.139933][ T5724] usb 5-1: SerialNumber: syz [ 521.175912][ T5724] usb 5-1: config 0 descriptor?? [ 521.197629][ T5714] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 521.259060][ T5716] usb 6-1: USB disconnect, device number 10 [ 521.263707][ T1222] usb 3-1: string descriptor 0 read error: -71 [ 521.285587][ T1222] hub 3-1:32.0: bad descriptor, ignoring hub [ 521.299079][ T1222] hub 3-1:32.0: probe with driver hub failed with error -5 [ 521.371980][ T5714] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 521.401902][ T5724] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 521.409965][ T5714] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 521.432949][ T5714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.448360][ T1222] usb 3-1: USB disconnect, device number 20 [ 521.463037][ T5714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 521.505087][ T5714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 521.539230][ T5714] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.550400][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.565851][ T5714] usb 4-1: Product: syz [ 521.574556][ T5714] usb 4-1: Manufacturer: syz [ 521.591070][ T5714] cdc_wdm 4-1:1.0: skipping garbage [ 521.598127][ T5714] cdc_wdm 4-1:1.0: skipping garbage [ 521.610722][ T5714] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 521.616734][ T5714] cdc_wdm 4-1:1.0: Unknown control protocol [ 521.895840][T13323] syzkaller0: entered promiscuous mode [ 521.915778][T13323] syzkaller0: entered allmulticast mode [ 521.927042][T13327] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 522.201239][ T1609] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 522.379409][ T1609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.389711][ T1609] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 522.405958][ T1609] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 522.415246][ T1609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.423324][ T1609] usb 3-1: Product: syz [ 522.427700][ T1609] usb 3-1: Manufacturer: syz [ 522.432329][ T1609] usb 3-1: SerialNumber: syz [ 522.452675][ T1609] usb 3-1: config 0 descriptor?? [ 522.461069][ T1609] usb 3-1: ucan: probing device on interface #0 [ 522.469866][ T1609] usb 3-1: ucan: invalid EP count (0) [ 522.475322][ T1609] usb 3-1: ucan: probe failed; try to update the device firmware [ 522.685867][ T1609] usb 3-1: USB disconnect, device number 21 [ 523.240485][ T5724] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 523.262641][ T5724] dvbdev: DVB: registering new adapter (Terratec H7) [ 523.270210][ T5724] usb 5-1: media controller created [ 523.431689][ T5724] usb read operation failed. (-71) [ 523.464798][ T5724] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 523.482433][ T5724] usb 5-1: USB disconnect, device number 33 [ 524.049689][ T1609] usb 4-1: USB disconnect, device number 36 [ 524.337397][ T5724] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 524.510676][ T5724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.531222][ T5724] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.550311][ T5724] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 524.561408][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 524.583569][ T5724] usb 5-1: SerialNumber: syz [ 524.684643][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2763'. [ 524.957340][ T5716] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 525.050470][ T5724] usb 5-1: cannot find UAC_HEADER [ 525.072850][T13367] FAULT_INJECTION: forcing a failure. [ 525.072850][T13367] name failslab, interval 1, probability 0, space 0, times 0 [ 525.087339][T13367] CPU: 0 UID: 0 PID: 13367 Comm: syz.5.2769 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.087368][T13367] Tainted: [L]=SOFTLOCKUP [ 525.087375][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 525.087386][T13367] Call Trace: [ 525.087394][T13367] [ 525.087403][T13367] dump_stack_lvl+0xe8/0x150 [ 525.087428][T13367] should_fail_ex+0x412/0x560 [ 525.087456][T13367] should_failslab+0xa8/0x100 [ 525.087483][T13367] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 525.087509][T13367] ? __alloc_skb+0x1d0/0x7d0 [ 525.087528][T13367] ? __local_bh_enable_ip+0xd0/0x130 [ 525.087550][T13367] __alloc_skb+0x1d0/0x7d0 [ 525.087575][T13367] sctp_packet_transmit+0x290/0x2ac0 [ 525.087608][T13367] ? sctp_outq_flush+0xc0c/0x31b0 [ 525.087630][T13367] ? sctp_outq_flush+0xc0c/0x31b0 [ 525.087656][T13367] ? sctp_outq_flush+0xc0c/0x31b0 [ 525.087677][T13367] ? sctp_outq_flush+0xc0c/0x31b0 [ 525.087698][T13367] sctp_outq_flush+0xee8/0x31b0 [ 525.087718][T13367] ? sctp_outq_flush+0xc0c/0x31b0 [ 525.087754][T13367] ? __pfx_sctp_outq_flush+0x10/0x10 [ 525.087778][T13367] ? sctp_transport_reset_hb_timer+0x11e/0x170 [ 525.087804][T13367] ? sctp_do_8_2_transport_strike+0x5c2/0x8d0 [ 525.087827][T13367] ? sctp_outq_uncork+0x4d/0xa0 [ 525.087851][T13367] sctp_do_sm+0x54c7/0x5cf0 [ 525.087875][T13367] ? arch_stack_walk+0xfb/0x150 [ 525.087934][T13367] ? __pfx_sctp_do_sm+0x10/0x10 [ 525.087954][T13367] ? stack_trace_save+0xa9/0x100 [ 525.087978][T13367] ? __pfx_stack_trace_save+0x10/0x10 [ 525.088047][T13367] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 525.088072][T13367] sctp_apply_peer_addr_params+0xdf/0x1880 [ 525.088107][T13367] sctp_setsockopt_peer_addr_params+0x678/0x940 [ 525.088137][T13367] sctp_setsockopt+0x752/0x12c0 [ 525.088155][T13367] ? sock_common_setsockopt+0x36/0xc0 [ 525.088174][T13367] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 525.088200][T13367] do_sock_setsockopt+0x17c/0x1b0 [ 525.088227][T13367] __x64_sys_setsockopt+0x13d/0x1b0 [ 525.088252][T13367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.088272][T13367] do_syscall_64+0x15f/0xf80 [ 525.088294][T13367] ? trace_irq_disable+0x3b/0x140 [ 525.088319][T13367] ? clear_bhb_loop+0x40/0x90 [ 525.088341][T13367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.088359][T13367] RIP: 0033:0x7fe43779cdd9 [ 525.088376][T13367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.088392][T13367] RSP: 002b:00007fe4386a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 525.088411][T13367] RAX: ffffffffffffffda RBX: 00007fe437a16090 RCX: 00007fe43779cdd9 [ 525.088424][T13367] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 525.088435][T13367] RBP: 00007fe4386a7090 R08: 000000000000009c R09: 0000000000000000 [ 525.088446][T13367] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 525.088458][T13367] R13: 00007fe437a16128 R14: 00007fe437a16090 R15: 00007fe437b3fa48 [ 525.088487][T13367] [ 525.099896][ T5724] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 525.137328][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 525.144078][ T5724] usb 5-1: USB disconnect, device number 34 [ 525.210126][ T5716] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 525.225818][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.232909][ T5716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.451320][ T5716] usb 3-1: config 0 has no interface number 0 [ 525.457499][ T5716] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 525.468538][ T5716] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 525.480216][ T5716] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 525.491587][ T5716] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 525.503683][ T5716] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 525.515385][ T5716] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 525.525345][ T5716] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 525.538082][ T5716] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 525.547932][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.556824][ T5716] usb 3-1: Product: syz [ 525.561445][ T5716] usb 3-1: Manufacturer: syz [ 525.566089][ T5716] usb 3-1: SerialNumber: syz [ 525.575683][ T5716] usb 3-1: config 0 descriptor?? [ 525.581609][T13357] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 525.591072][ T5716] usb 3-1: expecting 3 got 2 endpoints! Bailing out. [ 525.827293][ T5714] usb 3-1: USB disconnect, device number 22 [ 525.840281][ T5724] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 525.910236][T13379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2775'. [ 525.963037][T13381] FAULT_INJECTION: forcing a failure. [ 525.963037][T13381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.011373][T13381] CPU: 0 UID: 0 PID: 13381 Comm: syz.5.2776 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.011402][T13381] Tainted: [L]=SOFTLOCKUP [ 526.011409][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 526.011420][T13381] Call Trace: [ 526.011428][T13381] [ 526.011437][T13381] dump_stack_lvl+0xe8/0x150 [ 526.011464][T13381] should_fail_ex+0x412/0x560 [ 526.011493][T13381] _copy_from_user+0x2d/0xb0 [ 526.011518][T13381] dev_ethtool+0x249/0x1ae0 [ 526.011543][T13381] ? kasan_quarantine_put+0xbb/0x1f0 [ 526.011569][T13381] ? __pfx_dev_ethtool+0x10/0x10 [ 526.011585][T13381] ? dev_load+0x21/0x1f0 [ 526.011620][T13381] ? dev_load+0x21/0x1f0 [ 526.011642][T13381] dev_ioctl+0x392/0x1150 [ 526.011665][T13381] sock_do_ioctl+0x23e/0x320 [ 526.011686][T13381] ? __pfx_sock_do_ioctl+0x10/0x10 [ 526.011703][T13381] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 526.011743][T13381] sock_ioctl+0x5c6/0x7f0 [ 526.011764][T13381] ? __pfx_sock_ioctl+0x10/0x10 [ 526.011781][T13381] ? __fget_files+0x2a/0x420 [ 526.011807][T13381] ? __fget_files+0x3a0/0x420 [ 526.011826][T13381] ? __fget_files+0x2a/0x420 [ 526.011850][T13381] ? bpf_lsm_file_ioctl+0x9/0x20 [ 526.011874][T13381] ? __pfx_sock_ioctl+0x10/0x10 [ 526.011892][T13381] __se_sys_ioctl+0xfc/0x170 [ 526.011917][T13381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.011937][T13381] do_syscall_64+0x15f/0xf80 [ 526.011959][T13381] ? trace_irq_disable+0x3b/0x140 [ 526.011985][T13381] ? clear_bhb_loop+0x40/0x90 [ 526.012007][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.012024][T13381] RIP: 0033:0x7fe43779cdd9 [ 526.012041][T13381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.012056][T13381] RSP: 002b:00007fe4386c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.012075][T13381] RAX: ffffffffffffffda RBX: 00007fe437a15fa0 RCX: 00007fe43779cdd9 [ 526.012088][T13381] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 526.012100][T13381] RBP: 00007fe4386c8090 R08: 0000000000000000 R09: 0000000000000000 [ 526.012111][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.012122][T13381] R13: 00007fe437a16038 R14: 00007fe437a15fa0 R15: 00007fe437b3fa48 [ 526.012151][T13381] [ 526.020139][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 526.042442][T13383] netlink: 620 bytes leftover after parsing attributes in process `syz.4.2777'. [ 526.079926][ T5724] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 526.421904][ T5724] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 526.469556][ T5724] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=54.41 [ 526.490866][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.514701][ T5724] usb 2-1: Product: syz [ 526.529918][ T5724] usb 2-1: Manufacturer: syz [ 526.540249][ T5724] usb 2-1: SerialNumber: syz [ 526.717343][ T1222] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 526.770293][ T5724] usb 2-1: USB disconnect, device number 35 [ 526.884213][ T1222] usb 6-1: Using ep0 maxpacket: 32 [ 526.905798][ T1222] usb 6-1: unable to get BOS descriptor or descriptor too short [ 526.928551][ T1222] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.938287][ T1222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.946314][ T1222] usb 6-1: Product: syz [ 526.951218][ T1222] usb 6-1: Manufacturer: syz [ 526.955855][ T1222] usb 6-1: SerialNumber: syz [ 526.983859][ T1222] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 527.183774][T13387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2779'. [ 527.197021][ T1222] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 527.220075][ T1222] usb 6-1: 3:0: failed to get current value for ch 0 (-22) [ 527.234522][ T1222] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 527.242204][ T1222] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 527.253461][ T1222] usb 6-1: [3] FU [Mic Playback Volume] ch = 1, val = 0/1/1 [ 527.266738][ T1222] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 527.282713][ T1222] usb 6-1: 3:0: cannot get min/max values for control 4 (id 3) [ 527.320611][ T1222] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 527.345710][T13413] netlink: 620 bytes leftover after parsing attributes in process `syz.1.2788'. [ 527.360876][ T1222] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 527.378446][ T807] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 527.404500][ T1222] usb 6-1: USB disconnect, device number 11 [ 527.446124][ T5754] udevd[5754]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.547307][ T807] usb 5-1: Using ep0 maxpacket: 16 [ 527.553895][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.564271][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.575266][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 527.584955][ T807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 527.595273][ T807] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.610624][ T807] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 527.619845][ T807] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 527.628589][ T807] usb 5-1: Manufacturer: syz [ 527.635882][ T807] usb 5-1: config 0 descriptor?? [ 527.977196][ T807] rc_core: IR keymap rc-hauppauge not found [ 527.983839][ T807] Registered IR keymap rc-empty [ 527.994323][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.028507][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.079150][ T807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 528.113324][ T807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 528.155127][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.187484][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.217467][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.277681][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.328841][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.348597][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.367838][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.393694][T13442] netlink: 620 bytes leftover after parsing attributes in process `syz.1.2799'. [ 528.404249][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.427690][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.438124][ T1222] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 528.447375][ T807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 528.482005][ T807] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 528.500670][ T807] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 528.527625][ T807] usb 5-1: USB disconnect, device number 35 [ 528.588360][ T1222] usb 4-1: Using ep0 maxpacket: 32 [ 528.596340][ T1222] usb 4-1: config 120 has no interfaces? [ 528.606605][ T1222] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 528.606673][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2802'. [ 528.619705][ T1222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.634734][ T1222] usb 4-1: Product: syz [ 528.640500][ T1222] usb 4-1: Manufacturer: syz [ 528.645343][ T1222] usb 4-1: SerialNumber: syz [ 528.661332][ T1222] r8152-cfgselector 4-1: Unknown version 0x0000 [ 528.698723][ T5724] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 528.855161][ T5724] usb 6-1: device descriptor read/64, error -71 [ 528.886489][ T1222] r8152-cfgselector 4-1: USB disconnect, device number 37 [ 529.099973][ T5724] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 529.247719][ T5724] usb 6-1: device descriptor read/64, error -71 [ 529.371945][ T5724] usb usb6-port1: attempt power cycle [ 529.525416][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2809'. [ 529.637458][ T5716] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 529.708364][T13448] syz.1.2802 (13448): drop_caches: 2 [ 529.727409][ T5724] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 529.760176][ T5724] usb 6-1: device descriptor read/8, error -71 [ 529.790948][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 529.799947][ T5716] usb 5-1: config 123 interface 0 has no altsetting 0 [ 529.813547][ T5716] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 529.817319][ T1222] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 529.822836][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.849648][ T5716] usb 5-1: Product: syz [ 529.859986][ T5716] usb 5-1: Manufacturer: syz [ 529.869276][ T5716] usb 5-1: SerialNumber: syz [ 529.988565][ T1222] usb 4-1: Using ep0 maxpacket: 32 [ 529.997055][ T1222] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.006435][ T1222] usb 4-1: config 0 has no interface number 0 [ 530.013921][ T5724] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 530.045516][ T1222] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 530.063694][ T1222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.074934][ T5724] usb 6-1: device descriptor read/8, error -71 [ 530.090990][ T5716] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 530.094281][ T1222] usb 4-1: Product: syz [ 530.115259][ T1222] usb 4-1: Manufacturer: syz [ 530.126040][ T5716] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 530.140127][T13477] FAULT_INJECTION: forcing a failure. [ 530.140127][T13477] name failslab, interval 1, probability 0, space 0, times 0 [ 530.153549][ T5716] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 530.153602][ T5716] usb 5-1: media controller created [ 530.166311][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.168092][ T1222] usb 4-1: SerialNumber: syz [ 530.188939][ T1222] usb 4-1: config 0 descriptor?? [ 530.199034][ T1222] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 530.210359][ T5724] usb usb6-port1: unable to enumerate USB device [ 530.219509][ T1222] usb 4-1: selecting invalid altsetting 1 [ 530.226990][T13477] CPU: 1 UID: 0 PID: 13477 Comm: syz.1.2814 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.227016][T13477] Tainted: [L]=SOFTLOCKUP [ 530.227024][T13477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.227034][T13477] Call Trace: [ 530.227042][T13477] [ 530.227049][T13477] dump_stack_lvl+0xe8/0x150 [ 530.227074][T13477] should_fail_ex+0x412/0x560 [ 530.227102][T13477] should_failslab+0xa8/0x100 [ 530.227128][T13477] __kmalloc_noprof+0xe8/0x760 [ 530.227151][T13477] ? ___neigh_create+0x6d5/0x2250 [ 530.227174][T13477] ___neigh_create+0x6d5/0x2250 [ 530.227200][T13477] ? __ipv6_neigh_lookup_noref+0x531/0x710 [ 530.227228][T13477] ? __local_bh_enable_ip+0xe1/0x130 [ 530.227255][T13477] ip6_finish_output2+0x729/0x13e0 [ 530.227287][T13477] ? ip6_output+0x126/0x550 [ 530.227311][T13477] ip6_output+0x340/0x550 [ 530.227337][T13477] ? ip6_mr_output+0x1f3/0x11c0 [ 530.227358][T13477] ip6_mr_output+0x549/0x11c0 [ 530.227392][T13477] ? ip6_mr_output+0x1f3/0x11c0 [ 530.227411][T13477] ? __pfx_ip6_mr_output+0x10/0x10 [ 530.227433][T13477] ? __ip6_local_out+0x15c/0x940 [ 530.227460][T13477] ? __ip6_local_out+0x8f8/0x940 [ 530.227482][T13477] ? __ip6_local_out+0x15c/0x940 [ 530.227517][T13477] ? __pfx___ip6_local_out+0x10/0x10 [ 530.227548][T13477] ? __asan_memcpy+0x40/0x70 [ 530.227571][T13477] ? ip6_local_out+0x16e/0x190 [ 530.227593][T13477] ? ip6_send_skb+0x10f/0x390 [ 530.227618][T13477] ip6_send_skb+0x1d5/0x390 [ 530.227644][T13477] rawv6_push_pending_frames+0x65e/0x810 [ 530.227676][T13477] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 530.227704][T13477] ? __pfx_raw6_getfrag+0x10/0x10 [ 530.227733][T13477] rawv6_sendmsg+0x1387/0x18e0 [ 530.227768][T13477] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 530.227806][T13477] ? aa_sk_perm+0x6d5/0x900 [ 530.227836][T13477] ? __pfx_aa_sk_perm+0x10/0x10 [ 530.227859][T13477] ? __fget_files+0x3a0/0x420 [ 530.227878][T13477] ? sock_rps_record_flow+0x19/0x350 [ 530.227896][T13477] ? __pfx_inet_sendmsg+0x10/0x10 [ 530.227914][T13477] ? inet_sendmsg+0x2f4/0x370 [ 530.227929][T13477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.227951][T13477] ? __pfx_inet_sendmsg+0x10/0x10 [ 530.227969][T13477] __sys_sendto+0x5de/0x710 [ 530.227994][T13477] ? __pfx___sys_sendto+0x10/0x10 [ 530.228013][T13477] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 530.228050][T13477] ? __fget_files+0x3a0/0x420 [ 530.228081][T13477] ? ksys_write+0x242/0x270 [ 530.228105][T13477] ? __pfx_ksys_write+0x10/0x10 [ 530.228134][T13477] __x64_sys_sendto+0xde/0x100 [ 530.228156][T13477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.228175][T13477] do_syscall_64+0x15f/0xf80 [ 530.228199][T13477] ? clear_bhb_loop+0x40/0x90 [ 530.228220][T13477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.228237][T13477] RIP: 0033:0x7f714479cdd9 [ 530.228254][T13477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.228268][T13477] RSP: 002b:00007f71455bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 530.228287][T13477] RAX: ffffffffffffffda RBX: 00007f7144a15fa0 RCX: 00007f714479cdd9 [ 530.228299][T13477] RDX: 0000000000000018 RSI: 0000200000000300 RDI: 0000000000000003 [ 530.228310][T13477] RBP: 00007f71455bd090 R08: 0000000000000000 R09: fffffffffffffdfd [ 530.228321][T13477] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 530.228332][T13477] R13: 00007f7144a16038 R14: 00007f7144a15fa0 R15: 00007f7144b3fa48 [ 530.228361][T13477] [ 530.567447][ T1222] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 530.752371][T13468] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 530.764303][T13468] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 530.772740][T13468] CPU: 1 UID: 0 PID: 13468 Comm: syz.3.2810 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.783691][T13468] Tainted: [L]=SOFTLOCKUP [ 530.788020][T13468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.798084][T13468] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 530.803465][T13468] Code: e0 93 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d d0 58 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 46 c4 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 530.823068][T13468] RSP: 0018:ffffc90005b77420 EFLAGS: 00010206 [ 530.829137][T13468] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a449303 [ 530.837115][T13468] RDX: 0000000000000000 RSI: ffffffff8e219b45 RDI: 00000000000000c0 [ 530.845090][T13468] RBP: ffffc90005b775d8 R08: ffffc90005b77547 R09: 0000000000000000 [ 530.853064][T13468] R10: ffffc90005b77520 R11: fffff52000b6eea9 R12: 0000000000000068 [ 530.861037][T13468] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000b6ee9c [ 530.869013][T13468] FS: 00007fee784016c0(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000 [ 530.877944][T13468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.884528][T13468] CR2: 00007f4455ff5ff8 CR3: 0000000054c40000 CR4: 00000000003526f0 [ 530.892498][T13468] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 530.900460][T13468] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 530.908426][T13468] Call Trace: [ 530.911703][T13468] [ 530.914623][T13468] ? __mutex_lock+0x319/0x1550 [ 530.919386][T13468] ? __mutex_trylock_common+0x158/0x260 [ 530.924930][T13468] ? dvb_usbv2_generic_write+0x26/0x60 [ 530.930384][T13468] ? __pfx___mutex_lock+0x10/0x10 [ 530.935412][T13468] ? __pfx___mutex_lock+0x10/0x10 [ 530.940451][T13468] ? __mutex_lock+0x319/0x1550 [ 530.945208][T13468] dvb_usbv2_generic_write+0x26/0x60 [ 530.950486][T13468] mxl111sf_ctrl_msg+0x160/0x2f0 [ 530.955418][T13468] mxl111sf_write_reg+0xa9/0x1b0 [ 530.960358][T13468] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 530.965899][T13468] ? ww_mutex_trylock+0x7ea/0x900 [ 530.970917][T13468] mxl111sf_i2c_xfer+0x496/0x5100 [ 530.975931][T13468] ? unwind_next_frame+0xa6/0x2550 [ 530.981043][T13468] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 530.986500][T13468] ? is_bpf_text_address+0x292/0x2b0 [ 530.991779][T13468] ? is_bpf_text_address+0x26/0x2b0 [ 530.996988][T13468] ? kernel_text_address+0xa5/0xe0 [ 531.002104][T13468] ? __kernel_text_address+0xd/0x30 [ 531.007297][T13468] ? unwind_get_return_address+0x4d/0x90 [ 531.012925][T13468] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 531.019163][T13468] ? arch_stack_walk+0xfb/0x150 [ 531.024009][T13468] ? stack_trace_save+0xa9/0x100 [ 531.028931][T13468] ? __pfx_stack_trace_save+0x10/0x10 [ 531.034291][T13468] ? stack_depot_save_flags+0x33/0x810 [ 531.039734][T13468] ? __pfx_stack_trace_save+0x10/0x10 [ 531.045184][T13468] ? look_up_lock_class+0x57/0x110 [ 531.050286][T13468] ? register_lock_class+0x31/0x2e0 [ 531.055468][T13468] ? __lock_acquire+0x6b5/0x2cf0 [ 531.060396][T13468] __i2c_transfer+0x79a/0x1f70 [ 531.065151][T13468] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 531.070943][T13468] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 531.076734][T13468] ? i2c_transfer+0xc8/0x2d0 [ 531.081310][T13468] i2c_transfer+0x1cc/0x2d0 [ 531.085798][T13468] i2cdev_ioctl_rdwr+0x460/0x740 [ 531.090722][T13468] i2cdev_ioctl+0x6a5/0x880 [ 531.095206][T13468] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 531.100209][T13468] ? __fget_files+0x3a0/0x420 [ 531.104906][T13468] ? __fget_files+0x2a/0x420 [ 531.109485][T13468] ? bpf_lsm_file_ioctl+0x9/0x20 [ 531.114421][T13468] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 531.119430][T13468] __se_sys_ioctl+0xfc/0x170 [ 531.124009][T13468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.130058][T13468] do_syscall_64+0x15f/0xf80 [ 531.134639][T13468] ? trace_irq_disable+0x3b/0x140 [ 531.139656][T13468] ? clear_bhb_loop+0x40/0x90 [ 531.144323][T13468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.150200][T13468] RIP: 0033:0x7fee7759cdd9 [ 531.154600][T13468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.174187][T13468] RSP: 002b:00007fee78401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.182589][T13468] RAX: ffffffffffffffda RBX: 00007fee77816090 RCX: 00007fee7759cdd9 [ 531.190556][T13468] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000004 [ 531.198517][T13468] RBP: 00007fee77632d69 R08: 0000000000000000 R09: 0000000000000000 [ 531.206482][T13468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.214435][T13468] R13: 00007fee77816128 R14: 00007fee77816090 R15: 00007fee7793fa48 [ 531.222399][T13468] [ 531.225425][T13468] Modules linked in: [ 531.230272][T13468] ---[ end trace 0000000000000000 ]--- [ 531.238564][ T1222] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 531.249027][ T1222] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 531.257821][ T1222] usb 4-1: media controller created [ 531.260588][T13468] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 531.269781][ T1222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.285985][T13468] Code: e0 93 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d d0 58 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 46 c4 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 531.306710][T13468] RSP: 0018:ffffc90005b77420 EFLAGS: 00010206 [ 531.312869][T13468] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a449303 [ 531.321085][T13468] RDX: 0000000000000000 RSI: ffffffff8e219b45 RDI: 00000000000000c0 [ 531.329315][T13468] RBP: ffffc90005b775d8 R08: ffffc90005b77547 R09: 0000000000000000 [ 531.337613][T13468] R10: ffffc90005b77520 R11: fffff52000b6eea9 R12: 0000000000000068 [ 531.345714][T13468] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000b6ee9c [ 531.353965][T13468] FS: 00007fee784016c0(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000 [ 531.363234][T13468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.369913][T13468] CR2: 00007f4455ff5ff8 CR3: 0000000054c40000 CR4: 00000000003526f0 [ 531.377971][T13468] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 531.385977][T13468] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 531.394423][T13468] Kernel panic - not syncing: Fatal exception [ 531.400821][T13468] Kernel Offset: disabled [ 531.405125][T13468] Rebooting in 86400 seconds..