last executing test programs: 14.748718479s ago: executing program 0 (id=2921): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0xc0001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000440)={0x0}) (async) close(r2) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="8110b00000130a009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r3) (async, rerun: 32) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000003c0)) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) getpid() (async) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 13.648522152s ago: executing program 0 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x70}}, 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x800) close_range(r0, r1, 0x0) 7.603561141s ago: executing program 1 (id=2943): syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x20059c4, 0x1, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000340)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x280, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x10, r6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380), 0x3, r4, 0xcccccccc}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8, r7, r7], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x20059c4, 0x1, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000340)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x280, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x10, r6, 0x0) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380), 0x3, r4, 0xcccccccc}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r9, 0x6609) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r4], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8, r7, r7], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) (async) 7.166280743s ago: executing program 1 (id=2945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80400) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="e3a0e9796cfd1647e299f4e376fdba128280be72219d205e81f4a7f71c1926a2e1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b36006007b4fe035bbb095873048ec471be46528eae2643ab1296ad1e04853cc2b5b679935c6373fe9c4000be9f5241cceb34bb8869e981d7626cbd0d5b7b40722a1e049d9cd94e771559e23d24f6c8fbab8952c60c4efa1681047b70299d03073f4716d0f535805d8fcaae7e831cbeb59b56c707c9c4495584cbbf198e4b254efd9440c4565088064b55dccdc6329261f6b4f9e9b3343423dc79faa8f49827f6b06a0257032593a221df10c36bf89b65552dccf90d205c2e49b1eb3ec3ccfef9ba190fc1f54dd2ed4d12b8001786c98ed1a67da7b545f7cc7f2548ccaf4dd68a1050c4fae45a5d1f78291ec032a66e9c2d51a9f57b13d7d3b8bebcc5e0d328dd118d910ebc83678460539e590f6d45260e93efdad2af2b0364255e0ec6157c410795739692675940d66cc18bb851d7b620c0dcb84a44d34ca7bcea0ec633b8713ffbef46d10979deefe9941083846fee2b0666bb0142afb8b2f5ec9a4b05518fb0e40c1a15bc4008e6fd228b6e418e87df00dbdfe1b8d7527bdd598c1d48fff2325c1e17a0e987101a32326190d07bb53997295b97a463add6479a60ab5fab0377a34e298c22dc349342cd911274ad5e4864280004f8e31853cadc2ffdb10786e5382c7f978d5b2ebc6218bf55b72b8128962", 0x211}, {&(0x7f0000000480)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158dab05f9f37e094750e60465cc7c24a854ea51fc24580c40dffc8a355e38aa7f19ce94e116cea269988452ab369df6f891abff9f24c0a00a0f4e86ac7017ebea935728bc6103d6bd5ee3ed5ab3b88f5fcc6d9e0fd7bba62b0cfc3f8b938dc6f9195c1f695088d745523e40464dd6f0f0fb8150d6b452d0be3b952a7c2c520bc6ebe018a6a7f32292d22f575", 0xbd}], 0x2, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20040800) socket$kcm(0xa, 0x1, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000080)}, 0x141) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8b34a63150a0a97610cbfdd3d20657fdfaadd8e224acf1dd25bdf5f1d50913bb9d2baca9defe20eaa173d42cf05c6da0b646f9e55b310159e5c3d22a165fe2200471908b3987c2d02453d2f8006a3e450560d47ff0f7222a730879e7dd4607f97f2183c3fb42fb4e99835b84ef4e2b4b80de4238c14f65f0c3b875", 0x7b) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x11, r5, 0x0) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.824609185s ago: executing program 1 (id=2946): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_emit_ethernet(0x7e, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x28, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x10, "9606053d0006ff00800000b61af9"}]}, @lsrr={0x83, 0xf, 0x1b, [@dev, @loopback, @multicast2]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}}}, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) (async, rerun: 64) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x2, 0x1, {0x2, 0x2, 0x3ff, 0x0, 0x8000}, 0x6}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x40}}, 0x0) (rerun: 32) 6.617715455s ago: executing program 1 (id=2947): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async, rerun: 32) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (rerun: 32) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000053c0)=@deltfilter={0x24, 0x2d, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffe0, 0x4}, {0xf, 0xfff3}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) (rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async, rerun: 64) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) (rerun: 64) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r9, &(0x7f0000000280)=ANY=[], 0xff2e) 6.437285482s ago: executing program 3 (id=2949): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x100000000, 0x200, 0x0, 0xa, 0x0, 0x0, 0x6, 0x9}, 0x0, &(0x7f0000000100)={0x8, 0x2000}, 0x0, 0x0) r1 = eventfd2(0x5, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000680)={0x0, 0x2, 0x86e, 0x0, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x800008a) move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000340)=[&(0x7f0000000000/0x1000)=nil, &(0x7f0000002000/0x800000)=nil, &(0x7f00003af000/0x1000)=nil, &(0x7f00005e0000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000380)=[0x7f, 0x2, 0x3], &(0x7f00000003c0)=[0x0], 0x2) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$unlink(0x9, r5, r5) keyctl$describe(0x6, r5, &(0x7f00000002c0)=""/100, 0x64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={r9, @in6={{0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x47b35e2e, 0x4, 0xffffffc0, 0x1, 0x2}, &(0x7f0000000200)=0x98) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x6000) 6.283955607s ago: executing program 2 (id=2950): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000001029500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc, &(0x7f000000cf3d)=""/195}, 0x23) 6.187616467s ago: executing program 3 (id=2952): unshare(0x22020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f000092e000/0x3000)=nil, 0x3000, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x21, @empty, 0x4c23, 0x2, 'lc\x00', 0x7, 0xb, 0x4002b}, 0x2c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x4805) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x9, @empty, 0xffffffff}, {0xa, 0xce2c, 0x8, @mcast2, 0x200}, r3, 0x3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4002, 0x0, @empty, 0xbff}, @ib={0x1b, 0xffff, 0x1, {"9b04461285dc18ea7bdd58f6f80a9cb7"}, 0x5, 0x57, 0x3d7}}}, 0x118) getdents(0xffffffffffffffff, 0x0, 0x3b) r4 = io_uring_setup(0x3859, &(0x7f0000000300)={0x0, 0x51d0, 0x800, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af0102030109022400010000100009046e"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) unshare(0x40200) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) 6.072264649s ago: executing program 2 (id=2953): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xc65f, 0x2) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000240)={r0, 0x1000, {0x1000000, 0x0, 0x0, 0x8003, 0x3, 0x0, 0x0, 0x1e, 0xd, "e8bb61f322a498b50def587ad6a207c395b06ab4a20800000000000000160a3c30eaea1f729c00000000000000000000e0ff00000000000000000011e1fd00", "d1ef3d2e353818e2f37b9d9f41b9556388f1243feadceaf1146bbff1060000007275f37a81cd7137097abbd64160e7879aa2721667fba274fa95e73b00", "3b4c99ce572b235c5c5a64470abdf105d36e030000005b7741a200", [0x40000000009, 0x200]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xa, 0xf, 0x9, "47966badd28eefb6065d52eabf4d90a1c9b7e3a1bcb8b6849f6d346d783b3d18fef89bf95805e6eb1b80b50c9a0a2d1c3985ad5e8f204faca4e1f649e4d898cf", "571bb32d81c6bf267c7905973386dab79b502f048c611468dea86dd771bf9b20717efd43009c94ae46baeb79fcccd707b7ba88cee2680b3c18c295c2615d9ec9", "34fe4fbc0d6e5d269d239d135145add8c634476a0a380f4686111de890ca62fe", [0xfffffffffffffff9]}) (async) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="000000050426ed60000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) (async) landlock_create_ruleset(0x0, 0x0, 0x1) (async) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000040)={0x0, 0x0, '\x00', {0x0, @reserved}}) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "951d94aa2b4483f229ff388f945161ce43"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) connect$l2tp(r5, &(0x7f0000000080)={0x2, 0x0, @empty, 0x1}, 0x10) 6.071872401s ago: executing program 1 (id=2954): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, &(0x7f0000000040)=0x3f) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c1, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd]}}}}]}, 0x88}}, 0x20000000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r4, 0x400, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xe7, 0x80000000, 0x2, 0x48, r0, 0x1, '\x00', r3, r4, 0x5, 0x0, 0x2, 0x7}, 0x50) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r7, &(0x7f0000000300)=@other={'trylock', ' ', 'io'}, 0xb) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000240)={0x0, 0x1700, "5898e5d59d025637295715abbab514dd1842c04d83c1aee4", {0x3, 0x7f}, 0x10000}) syz_usb_control_io$hid(r5, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x8, 0x8002) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x869}], 0x5, 0x2120, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000000100)={0x0, 0x3}) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r8, 0xc10c5541, &(0x7f0000000240)={0xf3, 0x6, 0x1}) syz_usb_control_io(r5, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="4017810000001528c0ec34c2c749b5b48b8ab88ca12a2737b2b0f71d0938a439cca3946ff28ed7bf24736bc9dfeb8ccf16d434db42fc268346d89ba7bf0ff341095472f99e5d532c572187d58be51c0ddea890e92c1708ad6bfc7666025e1a1683d8768507a30160909baa8be3069b19ab5ff50298a23b98fa040a7e921ad6a75f3dad25a5d27e479b88c081", @ANYRES32=r9, @ANYRESOCT=r5, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0xfdce, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.459331812s ago: executing program 4 (id=2956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x50}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x25}, 0x94) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x1c, r2, 0x1, 0x3, 0x6, @local}, 0x14) (async) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) (async) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f00000021c0)=ANY=[@ANYRES16=r3], 0x45) r5 = open(&(0x7f00000022c0)='./file0\x00', 0x44400, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x4, 0x0, 0x0, 0x7ffc1002}]}) (async, rerun: 64) pipe2$watch_queue(0x0, 0x80) (async, rerun: 64) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) (async, rerun: 64) r8 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) (rerun: 64) shmctl$IPC_RMID(r8, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async, rerun: 64) r9 = io_uring_setup(0x7625, &(0x7f0000002340)={0x0, 0x1e2a, 0x8, 0x1, 0x28b, 0x0, r5}) io_uring_register$IORING_REGISTER_FILES(r9, 0x20, &(0x7f0000000000), 0x0) (async, rerun: 32) flock(r5, 0x2) (async, rerun: 32) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async, rerun: 64) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) (rerun: 64) read$FUSE(r10, &(0x7f0000000180)={0x2020}, 0x2020) 4.875480728s ago: executing program 2 (id=2957): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x51, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x72, 0x3b, 0xca, 0x8, 0x1199, 0x27, 0xf3b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x9, 0x0, 0x0, 0x6, "", [{{0x9, 0x4, 0x1b, 0x9, 0x5, 0x74, 0x13, 0x3a, 0x0, [], [{{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x60, 0xf7, 0x9}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x7, 0xb1}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xff, 0x80, 0x7f}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x29, 0x7e, 0x4}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x6, 0x19, 0xa}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0x37}], 0x1, 0x0, 0x0, 0x240009d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0x2) (async) socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001300)={0x0, "094c7587edc58aa324cec9681a5cd958"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000540)={r8, 0xbec, 0x7fffffff, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000540)={r8, 0xbec, 0x7fffffff, 0x1}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a0, 0xffffffff, 0xe8, 0x1b8, 0x1b8, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1ff}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x8001, 0x1, 0x3, 0xe9f9, 0x0, 0xffff, 0x7, 0x4, 0x7fff, 0x9, 0xfe7, 0x2, 0x9, 0x3, 0x0, 0xf07], 0xc}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0xff, 0xa320}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x100}]}) (async) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x100}]}) close_range(r11, 0xffffffffffffffff, 0x0) 4.150960563s ago: executing program 4 (id=2958): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000340), &(0x7f0000000040)=0x68) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f0000000500)={0xa, 0x4e25, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}}], 0x1, 0x20000040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2000804}, 0xc0400cd) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000540)=0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x60) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309000008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16=r4], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) 3.411983269s ago: executing program 2 (id=2959): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0xc0085666, &(0x7f0000000080)={0x2, 0x4}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r3, 0xc0305615, &(0x7f0000000000)={0x0, {0xee, 0xfffffcbb}}) socket(0x1000000010, 0x80002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$FE_GET_FRONTEND(0xffffffffffffffff, 0x80246f4d, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0x0) 3.115753522s ago: executing program 4 (id=2960): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xa0}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000800)="4bf3c9bb494da1db798aac3f7492147929f1d3329be6df336185da526c01215ba1bf2448e2ef6587da8352c2cb683fc34ad855b8baa313d55108aa6b5cc37bdcc49f3b7ddac6f5fc0fa9efe071a45c38"}, {&(0x7f0000000340)="35b544968dc9bd2b0bbe4ea82f1fe317010c7f8c9934c286d378be516b8f"}], 0x3, &(0x7f0000000380)=[@op={0x12, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000632) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_mptcp(0x2, 0x1, 0x106) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.939856479s ago: executing program 1 (id=2961): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) (async) r1 = socket(0x1e, 0x1, 0x0) shutdown(r1, 0x2) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) 2.909644534s ago: executing program 3 (id=2962): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000000089500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc, &(0x7f000000cf3d)=""/195}, 0x23) 2.776355051s ago: executing program 3 (id=2963): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x29a10f4c, 0xb, 0x2, 0x8, 0x3, 0x0, 0x0, 0x4}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)={0x26, 0x3, 0x0, {0x2, 0x5, 0x0, '.]@[]'}}, 0x26) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.655942093s ago: executing program 4 (id=2964): r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000080)={0x4, 0x2, 0xfffffffd, 0x1000002, 0x1000007}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b0009320000000000000009000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.554549761s ago: executing program 4 (id=2965): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffff", 0x9) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x4008880) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b000000018000100000000000000000002000000000000090000000006001500040000008c0016808800088084000180"], 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) landlock_restrict_self(r6, 0x0) kcmp(r4, r5, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYRES32=0x41424344, @ANYRES32=r4, @ANYBLOB="ba45ea801c55a9b4"], 0x0) 2.172501057s ago: executing program 0 (id=2926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3ff, 0x6, 0x4, 0x80000000, 0x1, 0x21af, 0x1, 0x0, 0x7, 0xbdcf, 0x6, 0x3, 0x9, 0x101, 0x0, 0x4], 0xd000, 0x440}) (async) r3 = socket$netlink(0x10, 0x3, 0x9) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000000380)={0x3, 0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/66, 0x42}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f00000000c0)=""/32, 0x20}], &(0x7f0000000200)=[0x6, 0xbfa, 0x8, 0x6, 0x5c0a, 0xffffffffffffffff, 0xd296e78]}, 0x20) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = memfd_secret(0x80000) fcntl$setlease(r6, 0x400, 0x0) (async) close(r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 2.059644784s ago: executing program 3 (id=2966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f08000280", 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getattr(r6, &(0x7f00000001c0)={0x38}, 0x38, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) ioctl$sock_FIOGETOWN(r4, 0x40305839, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000008, 0x110, r3, 0x7df99000) syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x498, 0x3400, 0x1, 0x163}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.035586545s ago: executing program 4 (id=2967): r0 = socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xe, 0x1, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0x20, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0xfdef) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f00000004c0)={&(0x7f00000003c0)=[r4, 0x0], 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffcd0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r5, 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x40, 0x8f, 0x7ffcffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(r7, 0x0, 0x0, 0xd4, 0x4) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x1, 0x2, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x4]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r9, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c64d2, &(0x7f0000000180)={r8, 0x80000}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003fc0)=@newtfilter={0x1574, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r10, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1544, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x28c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_LIST={0x1d4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xbb30}, {0x8, 0xffff3fb8, 0x6, 0x3, 0x7, 0x1, 0x1}}}, @TCF_EM_IPT={0x138, 0x3, 0x0, 0x0, {{0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xe5, 0x5, "6690e9d6646390e1a7829f10205c929012e8302a30a0ca06fa8b79333adb33e6b4b64a38ae28929362ee95fa583f4841096db052704c2c000b0ad802c487638f7a8535de60b9bffb6f6a38f31d3fd7b5e69b4fbf5a23c4814eb92480b582687d1f14b41f10ec15bed454a1826526ece806f15fc933089e0ee8437c5d0ec3aa4912c94ed8439ad8b427e825f83df9e856a727a3ef35b3d32501457d7f9ca439f3bd515de3a4975288fecea726027c56da8137bcb6a1b9ac41f8d8b3a04f74ea907f4ee74bc4e8fb383c28842766c77f227d5c83fb2438e16a8457c4248da02a7074"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x590b, 0x2, 0x8}, {0x1000, 0x8, 0x1, "139a1c1499e512c6"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x6}, {0xffffffffffffffff, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0xfffd}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x7}, {{0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xdda}, {0x6, 0x7, 0x2, "bc8ec03d818844"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x800}, {0x5b, 0x9, 0x8, 0x5, 0x7, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0xff, 0x2}, {0x8, 0x8, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x3}, {0xffffffffffffffff, 0x5, 0x4}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0xfffc, 0x4, 0xf}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x10a, 0x3}, {0x1000, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x800, 0x2}, {0x2dbe, 0x2, 0x1}}}]}}, @TCF_EM_IPT={0x40, 0x1, 0x0, 0x0, {{0x8001, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "598885f195d476a4c9"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6a}]}, @TCA_CGROUP_EMATCHES={0xdc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0xd0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x5a, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xc5, 0x1}, {0x2, 0x6}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="ad08", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="05010992d01c88c563e9"]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x200, 0x3, 0xb6}, {0x4, 0x8, 0x6, 0x9}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x800, 0x8, 0x1}, {0xffffffffffffffff, 0x4}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfffa, 0x1, 0x8}, {0x4, 0x0, 0xf800, 0x3, 0x4, 0x2, 0x2}}}, @TCF_EM_IPT={0x38, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x1, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}]}]}, @TCA_CGROUP_POLICE={0x558, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0xa25f, 0x8, 0x0, {0x4, 0x1, 0x4, 0x5, 0x3, 0x8}, {0x1, 0x2, 0xfff, 0x401, 0x5, 0x40000}, 0x7, 0x5, 0x7fff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x1, 0x4, 0x4, {0x1, 0x2, 0x6, 0x4, 0xfb, 0xbf8}, {0x9, 0x2, 0x7, 0x1, 0x101, 0x800}, 0x8f, 0xfffff800, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8079}, @TCA_POLICE_RATE64={0xc, 0x8, 0x78d}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4a2a, 0xfff, 0x1, 0x55ed, 0x700, 0xd, 0x98, 0x6, 0x9, 0x400, 0x3, 0x3c1, 0x1, 0x4, 0x7, 0x5, 0x13b231df, 0x3, 0x5, 0x2, 0x3, 0x1, 0x8, 0x4, 0x8, 0x401, 0x3, 0x1000, 0x3, 0xa, 0xfffffff7, 0x6, 0xf41, 0xeea4, 0x7, 0x5, 0x2, 0x10, 0x8, 0xfffffff7, 0x42e7, 0x4, 0x1f, 0xfff, 0xb, 0xb1, 0x7, 0x401, 0x2, 0x0, 0x3, 0xacb, 0x4, 0x81, 0xd, 0x80000000, 0x9, 0xe, 0x4, 0x24, 0x9, 0x80000001, 0x9, 0x4, 0x2, 0x3, 0xba, 0xfffffff9, 0x6, 0x7, 0x5104, 0x5, 0xb, 0x2, 0xf, 0x0, 0x0, 0x7, 0x46, 0x40, 0xc, 0x2, 0x7, 0x4, 0x3, 0x7, 0x2add, 0x9, 0xbf7, 0xfffffffd, 0x2, 0x8, 0x44265c61, 0x9, 0xc9, 0x200, 0x80000000, 0x5, 0x4, 0x5, 0x4, 0x3, 0x80000000, 0x3, 0x401, 0x8000, 0x1, 0x1, 0xbc, 0x5, 0x2, 0x800, 0x281e, 0x0, 0xa, 0xf1, 0x7, 0x2, 0x400, 0x6, 0x2, 0x2, 0x98, 0x6, 0xae1, 0x80000000, 0x7, 0x8, 0x1ff, 0x11df, 0x5, 0x1000, 0x116, 0x8, 0x3eae, 0x3, 0x2, 0x7, 0x3e601135, 0xd5, 0xab8, 0x5, 0x8080000, 0x4, 0x36, 0xe5a2, 0x437, 0x5, 0x7, 0x2, 0x3cf, 0x9, 0x7fffffff, 0x1, 0x5, 0x8, 0x4, 0x48ab, 0x55e1, 0x7, 0xa, 0x3, 0x7, 0x8, 0xb, 0x0, 0xffff460b, 0x6, 0x9, 0x1, 0xfffffff7, 0x7f, 0x0, 0x42b, 0x6, 0x7, 0xd, 0x1, 0x1, 0x0, 0x7ff, 0x306, 0x0, 0xffff, 0x4, 0x31f, 0x8, 0x6, 0x2, 0x5, 0x7a7f, 0x9c, 0x401, 0x2068, 0x1, 0x5, 0x9, 0x7, 0x2d7, 0x8, 0x8, 0x7, 0x3, 0x5, 0x2, 0x7, 0x108e, 0x47, 0x0, 0x2a, 0x0, 0xa60, 0xb8, 0x2a, 0x2, 0x4, 0x6, 0x9, 0x897, 0x9, 0x95, 0xcf5, 0x7, 0x4, 0x2, 0xac34, 0x0, 0x3, 0xfffffffd, 0x0, 0x6, 0xa7bf, 0xffff, 0xfffffff7, 0x8e06, 0x6, 0xa, 0xec52, 0x1, 0x7ff, 0x0, 0x7, 0x7, 0x73c, 0x1, 0x0, 0x4a, 0x3, 0xb, 0xf, 0x1, 0x2, 0xf5, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x0, 0x1200, 0x6, {0x3, 0x2, 0x0, 0x7, 0x7, 0x8}, {0x80, 0x0, 0x6, 0xa9e, 0x6, 0xffffffa8}, 0xb, 0x1ff}}, @TCA_POLICE_RATE={0x0, 0x2, [0x7, 0x1, 0x7fff, 0x3, 0x10, 0x2b0, 0x80000000, 0x80000000, 0x1, 0x0, 0xa00000, 0x9, 0x2, 0x0, 0x8, 0x8, 0x8001, 0xfffffffb, 0x5, 0xa, 0x401, 0x81, 0x1, 0x1, 0x6, 0xfffffff9, 0x40, 0x5, 0x77d1, 0x200, 0x7f, 0x401, 0x1, 0x800, 0x1ff, 0x31b, 0x8, 0xb, 0x4, 0x6, 0x5, 0x3, 0x1, 0xfffffffa, 0x86e, 0x1, 0xa36c, 0x2, 0x1, 0x8, 0x9, 0x1, 0x5, 0x3, 0x1, 0x9, 0x4, 0x5, 0x3, 0x8, 0x8, 0x0, 0x98, 0x4, 0x9, 0x3, 0x2, 0x5, 0x80, 0xd, 0x1, 0x4, 0x6, 0xc465, 0x7fffffff, 0x0, 0xfffffff5, 0xee1d, 0x88, 0x3, 0x4, 0x0, 0x62, 0x6, 0x8000, 0x9, 0x3, 0x0, 0xf, 0x2, 0xf, 0x0, 0x1, 0x9, 0x2e0, 0xd72, 0x4, 0x200, 0xf, 0x0, 0x10000, 0x8, 0x40, 0x3, 0x3, 0x1, 0x1, 0x9, 0x9f, 0x80, 0xfffffffc, 0x7fffffff, 0x3, 0x7, 0x0, 0xd3b, 0x42cb, 0x3a34, 0x0, 0x8000, 0x2, 0x5, 0x0, 0x7, 0x8, 0x8000, 0x8, 0x5, 0x7, 0x7fffffff, 0x72e4, 0x4, 0xb1, 0x1, 0xd, 0xf, 0xf, 0x7f, 0x885e, 0x3ff, 0x1ff, 0x7, 0x3, 0x9, 0x800000, 0x7, 0x2a2, 0x9, 0x2, 0x8, 0x2, 0x1, 0x6, 0x2, 0x8, 0x9, 0x0, 0x0, 0x4, 0xfffffff8, 0x800, 0x8, 0x3, 0x8, 0x2, 0xa, 0x40, 0x0, 0x3, 0x4, 0xfffffbff, 0x7, 0x3, 0x7, 0x8001, 0x1, 0x1, 0x8001, 0x5, 0x1, 0x7, 0x4000000, 0xe, 0x45be835a, 0x0, 0x4, 0x4, 0x3ff, 0x6, 0x4, 0x7ff, 0xfffffc00, 0x0, 0x72b, 0x3ff, 0x8, 0x9, 0xfff, 0x209f, 0x6, 0x40, 0x37a, 0x4, 0xffffffcd, 0x10001, 0x800000, 0xd4, 0xfff, 0x42, 0x2, 0x80000000, 0x80000000, 0x10001, 0x8, 0x6, 0x1, 0x5, 0x3, 0x0, 0x5c, 0x8, 0x1, 0x81800000, 0xa, 0x4, 0x8000, 0xfffffff0, 0xd8d, 0x1, 0x56c, 0x0, 0x1f, 0x3, 0x8001, 0xac7, 0x8, 0x5, 0xfff, 0x1, 0x5, 0x2, 0x1, 0x1, 0x1, 0x2, 0x7, 0x1, 0x169, 0x9, 0x5, 0x9, 0xc, 0x7, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x600, 0xe, 0x5049d79a, {0x8, 0x0, 0x1, 0x1950, 0x9, 0x3}, {0x9, 0x1, 0x8, 0xc, 0x6, 0x7}, 0x7, 0x6, 0xfffffffb}}]}, @TCA_CGROUP_POLICE={0xc70, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x79ac, 0xc0, 0x2, 0x3, 0xd, 0x8, 0x1d8, 0xfffffe01, 0x0, 0x1, 0xaa3, 0x7ff, 0x10, 0x7fffffff, 0xb, 0xa, 0x9, 0x2, 0x1e, 0x9, 0x7ff, 0x45, 0x7ff, 0x0, 0x4000008, 0x4, 0x0, 0x8, 0xc, 0x6, 0x0, 0x6, 0x9, 0x9, 0x6, 0xff, 0x3, 0x4, 0xb9c4, 0x401, 0x0, 0x0, 0x7, 0x6, 0x3, 0x2, 0xf0bc, 0x4, 0x80000001, 0x8, 0x24f, 0x4, 0x8, 0xec8, 0x8, 0x8000, 0x100, 0xbf9, 0x8000, 0x4, 0x100, 0x0, 0x5, 0x8, 0x9, 0x3, 0x523, 0x6, 0x2, 0x8, 0xb08, 0xa09571, 0x71a4, 0x665, 0x9, 0x6, 0x4, 0xa, 0x1, 0x4, 0xfffeffff, 0xfffff800, 0x1000, 0x13, 0x7, 0x8, 0xffff, 0xfff, 0x81, 0x7, 0x1, 0x1, 0x1, 0xa, 0x4, 0x8000, 0x6, 0x5, 0x2, 0x6, 0x7, 0x7fffffff, 0x7f, 0x1, 0x5, 0x290, 0x0, 0xffffff53, 0x3, 0x4, 0x5, 0x4, 0x9, 0x3, 0x10, 0xfa77, 0x1, 0x3, 0x8d42, 0x5, 0x200, 0x2, 0xffffffff, 0x68a7, 0x0, 0x3000, 0x5, 0x7, 0x401, 0x9d9d, 0x7, 0x7fff, 0xf, 0xfffffe01, 0x4e5e, 0x8, 0xf1d4, 0x4c07, 0x9, 0x4, 0x458000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x6, 0x200000, 0xf, 0x1, 0xff, 0x8001, 0xa76000, 0x7, 0x3, 0x7, 0x8, 0x5, 0x3, 0x0, 0x8, 0x80000, 0x7, 0x7, 0x394, 0x3, 0xffff439f, 0x2b, 0x81, 0x1, 0x0, 0x1, 0x6, 0x6, 0x2, 0x7fff, 0x2, 0x1ff, 0x9, 0x4, 0x8, 0x7, 0x1, 0x5, 0x40, 0x8, 0x8, 0x6, 0x5, 0x83, 0x8000, 0x401, 0x917, 0x10000, 0x0, 0x3, 0x4, 0x6, 0x1, 0x2, 0x7ff, 0x80000000, 0x6, 0xff, 0x10, 0x1, 0x5, 0x8, 0x2, 0x5, 0x4, 0x0, 0x3, 0x4, 0x8, 0x8001, 0x7, 0xfc3, 0x4, 0x9, 0x3859, 0x1, 0x5, 0x0, 0x80000001, 0x5, 0x3, 0x7046dfee, 0x7fffffff, 0xc90, 0x6, 0xe, 0x10000, 0x4, 0x0, 0x4ede, 0x5, 0x9, 0x7, 0x9, 0x1, 0x0, 0x4, 0x8, 0x5, 0x5780f034, 0x1, 0x3, 0xa, 0x800, 0x4, 0xfff, 0x3, 0xfffffffa, 0x905e]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1000000f, 0x8, 0x39, 0xfffffff3, {0x9, 0x2, 0x1000, 0x0, 0x831d, 0x200}, {0x3, 0x1, 0x5, 0x7, 0xf041, 0x80000001}, 0x9, 0xffffffd6, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0xc, 0x10001, 0x401, 0xee9, 0x7daf, 0x8, 0x4, 0x3, 0xfffffff8, 0x6de4, 0x200, 0x1, 0xd, 0x10000, 0x9, 0x7, 0x9, 0xfff, 0x53, 0x4, 0x8, 0x80, 0xffff, 0x9, 0x0, 0x10, 0x4, 0x7a4, 0x6, 0x105, 0x2150aa4a, 0x3, 0x6, 0x0, 0x4, 0x6e, 0x80000001, 0x8, 0x1, 0x9, 0x1000, 0x2, 0xff, 0x2, 0x102, 0x3, 0x8d, 0x7, 0x5, 0x5, 0x100, 0xffffffff, 0x10000, 0xf, 0x3, 0x8, 0x0, 0x1, 0x9, 0x9, 0x1, 0x0, 0x80000001, 0x2, 0x0, 0x9, 0x6, 0x8, 0x8, 0x98f8, 0x200, 0x3, 0x6, 0x2, 0xffff5b2d, 0x6, 0x6, 0x0, 0x7fffffff, 0x1, 0x5, 0x1ff, 0x1f1, 0x8, 0x7, 0x8, 0x3, 0xe98, 0x2, 0x2, 0x9d, 0x40, 0x7, 0x9, 0x7, 0x3, 0x2, 0x80000001, 0x4, 0x1ff, 0x9, 0x3, 0x9, 0x8, 0x6, 0x1, 0x0, 0x800, 0x8000, 0x0, 0x80, 0x0, 0x9, 0x1, 0x8, 0xfffffffd, 0x77, 0xffff62de, 0x7f, 0x7, 0x0, 0x80, 0x14000, 0x1, 0x9, 0x7, 0x0, 0xac4e, 0xffffffff, 0x7, 0xfffffff8, 0x0, 0x0, 0x7, 0x6, 0x40000, 0x1, 0xd, 0x2, 0x80000000, 0xffff, 0x8, 0x4, 0x69, 0xfffffff7, 0x2, 0x6, 0x9, 0x0, 0x80, 0x9, 0x2c95645e, 0x81, 0x9, 0x7, 0x6, 0x1000, 0x2, 0xe1, 0x2cc6, 0x9, 0x7, 0x8, 0x7, 0x3ff, 0x673df0d2, 0x0, 0x80, 0xfffffff3, 0x8, 0x0, 0x100000f, 0x7f, 0x7, 0x6, 0x9128, 0x10000, 0x80000000, 0x7, 0x7, 0x7fffffff, 0x931, 0x6, 0x2, 0x8, 0x10, 0x4, 0x5, 0x4, 0x3, 0x9, 0x8, 0x0, 0x81, 0x5, 0x7, 0x1, 0x6, 0x9, 0x80000003, 0x7, 0xffff670e, 0x1, 0x7ff, 0x4, 0x8, 0x18b7, 0x200, 0x3, 0x1ff6, 0x1ff, 0x0, 0x1, 0x1d, 0x7, 0x4, 0x80, 0xfffffff6, 0x101, 0x9, 0xd86, 0x101, 0x9, 0x4, 0x0, 0x81, 0x2, 0x6, 0x800, 0xd65, 0x8, 0x5, 0x9, 0x4, 0xff, 0x30ba, 0xfffff36f, 0xc, 0x6, 0xd4, 0x4, 0xa, 0x8, 0xffffff81, 0xe0000, 0x10, 0x1ff, 0x64a, 0xc, 0x5, 0xfffffffd, 0x0, 0xfffffffb, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4be9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x91ca, 0x40, 0x9, 0xf, 0x2, 0x5, 0x8, 0x8000, 0xb914, 0x9, 0x7, 0x1, 0x1ae, 0x4, 0x3, 0x4, 0xa4b, 0xffffb685, 0x4, 0x6, 0x8001, 0x6, 0x7ff, 0x0, 0x0, 0x5, 0x4, 0x7, 0x6, 0x0, 0x845, 0x2, 0x1, 0x8, 0x800, 0x0, 0x0, 0x1700000, 0xde, 0x4, 0x7f, 0x90e0, 0x8, 0x9, 0xeb, 0x78c, 0x8000, 0x796d, 0x5, 0x6, 0xf0, 0x46de88e, 0x3, 0x40f, 0xe, 0x9, 0x9, 0x2, 0x1000, 0x2, 0x2, 0x6, 0x19c5, 0x7, 0x9205, 0x8001, 0x4, 0x6, 0x8, 0x8, 0x6, 0xb, 0x7fff, 0x65, 0x1, 0x268, 0x2, 0x6, 0x4, 0x9, 0x51b1, 0x1, 0x100, 0x2e8aa349, 0x4, 0x8, 0x1, 0x5, 0x6, 0x2, 0x95, 0x8000, 0x2, 0xa4, 0x1, 0x1, 0x4, 0xd, 0x400000, 0x0, 0xffff, 0x720, 0x8, 0x1, 0xa5, 0x9, 0x5, 0x7, 0x2, 0x3, 0x7ff, 0xa4, 0x6, 0x6, 0x986a, 0x5, 0xe4e, 0x1, 0x10, 0x5, 0x5, 0x2, 0x6, 0x3, 0x8, 0x80000000, 0x1ff, 0x8, 0x1000, 0x48f, 0x5, 0x5aa4b4c, 0x5, 0xe414, 0xaaa, 0xa, 0x4, 0x3, 0x3, 0x3, 0xfffffffe, 0x1, 0xea9b, 0x5, 0x1, 0x7, 0x1e10, 0x7, 0x80000000, 0x3af, 0xbed0, 0x7, 0xdc5, 0x8001, 0x2, 0x7, 0x7, 0x7, 0x0, 0xb, 0x1f7, 0x3c1e83b9, 0x9, 0x7f0, 0x5, 0x3ff, 0x9, 0x4, 0xd, 0x1, 0x7f, 0x6, 0x2, 0x7, 0x8, 0x2b5, 0x4, 0x3, 0x8, 0x80, 0x0, 0xa, 0xd9, 0x35, 0x8, 0x4, 0x1e, 0x1ff, 0x8, 0xf633, 0x532, 0xfffffff6, 0x1, 0x8, 0x3, 0x1, 0x0, 0x8, 0x5, 0xada, 0x80, 0x9, 0x3, 0x5, 0x5, 0x3646, 0x0, 0x3c000000, 0x451fa2c7, 0x7ff, 0x9, 0x4, 0x2, 0x20000000, 0x7, 0x2, 0xe15, 0xd, 0x878, 0x0, 0x5, 0x46a, 0x9, 0x4, 0xa0, 0x99, 0x80, 0x0, 0x6a4c, 0x744e, 0x3, 0x4, 0x101, 0x5, 0xd, 0x80000000, 0x6, 0x7, 0xfffffff9, 0x6, 0x0, 0x1, 0x6, 0x6, 0x0, 0x8fc1, 0x3, 0xe, 0x8, 0x7ff, 0xfffffffc, 0x7d7, 0x8001, 0x3, 0x0, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}]}}]}, 0x1574}}, 0x2000c800) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 906.72039ms ago: executing program 2 (id=2968): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff6d8d1b089ca786dd602e5cea00403c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c910"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="bfd01a6a6390b3e812eaf2a9fde33da30a04c662f3fe5b0d", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x288}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807b69f57202e694041d85a70a98ed38e10b116d2249a8746d54c19d053605f35cb085edc1b1df8f487d1e1835a9037d94fdb5777403217fb9cd018ee14185b10e413a1095995d75f8c23e88f9e6026228f9516745e87f63b7cc0f59573b3fd06bd33f1879451a9d20e0832", 0xc1}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto(r0, &(0x7f0000000300)="9c332b423112b761102f340f56ab71bc7254758cc62d7f679f27e310d161c4bed77129fc1529c0390b71b417c8d967044816f0d55ef2658398bc4e3d8e15df06453ddded747e79ddcd5246bf0590ab1a127279225b851fb1d138ad39948be2f8c3a3bb77230bb6de8ac90876bd201e2a7e9ce51d448c1e4b8aaacfae7c761c7d3f5571e9fda4c45b96e839c7af3351f58e0137f4df97f7dc869b83cf73ca2d4f5d2160e8de477ae7b1ae7f2a683ef78d5692", 0xb2, 0x4808, 0x0, 0x0) 659.607098ms ago: executing program 2 (id=2969): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = creat(&(0x7f0000000740)='./file0\x00', 0xd931d3864d39dd3e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4018000012800b0001006970766c616e000004000293611a19d27c06395814008e9bff800a0002000011000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040844}, 0x24) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000001200)=ANY=[@ANYRES16=r2, @ANYRES8=r2, @ANYRES64=r2], 0x0) socket(0x400000000010, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000780)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x4}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) fcntl$lock(r4, 0x7, &(0x7f00000006c0)={0x2, 0x1, 0x5, 0x1a63}) fcntl$notify(r1, 0x402, 0x2) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000040)={0xfffffffd, "6ced7587ab264cc24403b31deef744373971a799fe18c24ded9ea29f2a109482", 0x1, 0x20, 0x9, 0x5, 0x2, 0x2, 0x40, 0xfffffff7}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0xc0802, 0x0) r7 = socket$inet6(0xa, 0x6, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x618, 0x3c0, 0xffffff80, 0x178, 0x3c0, 0x178, 0x548, 0x22b, 0x258, 0x548, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x0, 0x0, 0xf8}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x2, 0xfe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfc}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x8a}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffffff00], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x120, 0x188, 0x0, {}, [@common=@ah={{0x30}}, @common=@hbh={{0x48}, {0x8, 0x2, 0x1, [0x9, 0x1, 0x9, 0xf, 0x7, 0xba36, 0x7, 0x9, 0x1ff, 0x4, 0x9, 0xc4ff, 0x800, 0x5, 0x10, 0xfe01], 0xd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) 349.587436ms ago: executing program 0 (id=2970): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x102, 0x20003) unshare(0x26020480) ioctl$FE_GET_EVENT(r0, 0x80286f4e, 0x0) 264.633423ms ago: executing program 3 (id=2971): unshare(0x22020400) r0 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) unshare(0x40200) r1 = semget(0x1, 0x4, 0x39c) semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000000c0)={{0xffff, 0x1, 0x8, 0x7fffffff, 0x6}, &(0x7f0000000240)=[{}]}) semop(r1, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 151.81047ms ago: executing program 0 (id=2972): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a000000000000ffffffffffffffaf9500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc, &(0x7f000000cf3d)=""/195}, 0x23) 0s ago: executing program 0 (id=2973): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000014c0)={'syztnl0\x00', &(0x7f00000013c0)={'erspan0\x00', 0x0, 0x40, 0x7, 0x3, 0x10, {{0x33, 0x4, 0x0, 0x3c, 0xcc, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x1b, 0x9f, [@remote, @rand_addr=0x64010101, @multicast2, @multicast2, @local, @loopback]}, @cipso={0x86, 0x15, 0x3, [{0x2, 0xf, "139589712a41628281593acf1c"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x25, 0x1, 0x5, [{@empty, 0x6}, {@private=0xa010101, 0x2}, {@multicast1, 0xff}, {@local, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@broadcast, 0xffffffff}, {@remote, 0x1000}]}, @lsrr={0x83, 0x1f, 0xd4, [@broadcast, @multicast2, @local, @local, @multicast2, @rand_addr=0x7ff, @local]}, @lsrr={0x83, 0x27, 0x82, [@private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @local, @multicast2, @local, @multicast1]}]}}}}}) sendmmsg(0xffffffffffffffff, &(0x7f0000005d00)=[{{&(0x7f0000000a80)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001900)="6ef5d14a378d94123d4ac2f56afd2cf0bbd5bacbeec0a42f2fa10d8708b9ef2cbd036080098d34471cb2c404e933c506496f235fbb9927b2da898e6353c57c912b6426eab284d5bc170a94796c91c0c5538e4b5b37b0ac94de4c04bc3fd5bfcdf8b783708a0edcaf8eef7d984a8d6fa933b94df4da48d73f07e487174c86f7fcf7c2665ada6e78a33cf8890cabf7b2df88684d75d738aa986ba2ef31c540c1aadfd13249241e28a850fabe146f6975c9d86dfdd3616dd239760ab4007ea091b868ec2bcf31ca4e24cd4f7db701469cb604a772db0840e272e8a62ba8a7047706707774b1bacf215cbebcfb90020fa0c40f817dc4089fdc2b1c33624bd07b44a01d9ff9c3886f831d288990ff982ce3713834b290211dcd2cd57ca30f22ca70768767a70473f0bc412cfd1262cda98a33ef6ffba8c014434634d93f7aef307be0ee26206f838d4ddc3bde68c248d2f0f00dd2dd56f7de76c152c5450d46e6b6a523a86320d205a596fbd9df85e9ea29b0fbb0a7d4fa3f49b571eb34a361f59610ab3121d71bce220a6fddb980a4e3898091866c6715f47079b676bf525961a8810c25737431774acda8c60c5fc502a8c0e157de59bd2b522e4128eb4d61023f3b3b6b53f4c202c2c7c733dd912771b30c6e8e580a9dc15c8aa3e0938fa2cdbf86abf154e2db952e6c81e0ee03ec0d3d2c9099010b2453fe7983e7f8cf196731b0f6a08aff7cd336cdd1ee0f2cb3467cfd2386d761866e063c7aa6e8d358657890b5eccdf576dc0ff845603c6421c833ec4c2d2ff624ee145e84f32c593fc0e72d1fdae8ff1662174a654efcd88cf50373baca43e545d89a4474f5c8d48c6fc65ee5de1c15e48cf1b30c15bbb00a72d7717bde7452e07635d5370861e83fd916e6b45c30b1622e87666835f01dd627fbe080ce91dc714381fc93fd410d452175b4e5b8701fecebb088834af02be31a26fb105880aa24dd0c281aac824c3584cfa17765c768679adae11dbfc036dad1ab73f488602e3c9942c9ab4e4a29181f6daaced5e93378166499832ced3e8754ac47eff8672b1b862e9a0f7011b443adb81dfdc2e226294cfb4f7342fc68388e300a1ef473eb6d4f0cacd785ef8dcc45ffe5ea4f55092cd592d48bf75ee919f51c7d3827c7d535584ff89e7009e46998cfa463c0dfeac5454ad21b7f832e69e084f7af9d9ff19ff28e337ec79acd54d1952013b48dcc54c8f5c3cd04f461016fe1ff93986e3e33b1b8c630af25dd7a7ae85ed923e2e7429cb861d24a6b2f91c90c0556af04f1c5a575bb3fa7b0df4e5107e907a13e146abe1fbddbfbc08adf35118286c30e68fd62ac034ec95736129ac04aa4747852afc9740702fa326c375e35ca511f3ac1a8b1504bcc5262222b71e257a516607bfd5fa4b1a765ceee0ca1a0ff313a3dfe27e98f1b0f427f47a02fd6b86c626c98a36553d6601bd0d6b6ec6e9974db1ca0517b7a3d775e8f5e6a78ca6b7671e836ee2f16d4e0b41717ff80516d744259f3ca885f36b51e8700b7d97cc76e8c0aa36b64c5d0d98d73f5f2a6c55f3d65cb033ec4beceba134e9d969b907b97399d1cc4d5c05f228df44d13d1ceb8a6eb15143a5b046f69b6d84dc67a0097eb608de41a42aafd276d1446a6ad66348c091906d656fb3c54fea4aaef78f72ce03eaf1a53ddf0da0a3b803dd451c5c2b44a8683ec050294b2a4d04cfaa694f760a3d8f3f4ee16b819097961a9e90b3c2818c659c9e49eab1064e271454e45e92682d09df02f17b881bc6f38492651622637f3d1bf7e5c37afe8721410825686b7a25929e9d8721365006e6362c72be611ec0c9176af8e6e83e367055b868ee6ff3c44833a2b5d98fd38956a2f16ecbff4d6a025cf30f9c2232ade2f366d2a20425d75d2092f21e362a35d0f5563206bbfd5b8262999fed441ea42b7a3aac4c222208bf45039133210b77b872cc6a6af700b250a6bd18297e5111ac09312b6b807fcf441e9cd2f8f66c8a0f143e3f738beb336c33d693b496e30517ddf7551caf56bf3df4b212817bcd82d0e8a7470a6c97f304e0de2116ea1a408d40e6a72d8774117db4be1c8cf98a705d2bcdba6278fcee20ba5acb546683ee7f3dc9148e55f0a0008f5824671f67b93733b52549c982b73964265ea5660329cbe8a51105803644b5d90de3b38326f7352492104dd49c60a578c96dcc0dcbc3780fd2311cf5a893fbc5beab69168b5509f649050df0539fdec358a7729ea5f5bc0db116d91d554529d8473e2a027f119ead1d76d5c5b7f5c9dbb994a3125e2eafd3f2c1c8dce2c6e5b8c7d6f5ff011c1f9a31144389e3ec0dc70cb778b91a015e600f6321c215841133a82a5624cfc281a40e57f2afb61f0beca4903e5aeeec957cbbfaa65c5c956a128023a14d6e2264324a4d58f2fc06f31a30af0e32a0b75c3a91bf008df669bf424ce4133fb95f21ca5dc2319c38d5651374f51328671f4cc4cbd7292881cb3fc4e4faadcb47c848da142c6d4ee7911d65ff1be9b709a2683ec327f34db4746c773323ff492e06f70104f14c4a38ae738629272eedc03bc6df8de18658122bafe45a24ef5c9551de06a095f39e820e208a0f996c7f54b2796edaa797762d6d7ee1c4c43f9e65a98a5e72c7393c8c926111be1ab91889a05296d275d24feb4a845762eacaf3294454dc56a122d7adabde40a1aecf34358171c7f31f74374e3c2fb08cd6374c4260a44fdecb626f3c17e11433445c88c2a2c5f876b05c2887133faedec2c65880bfd1ebbeb2b6a3b7ef0803a26d77bff1999c9eee867f8b0bbb5c06bb73d019aa692a18a4fca6013047107c5a66527451656852e5c952a15b8cf3f1e67dfb8fa266338af43f53146bee0f0668a98180d06fa6403f20dbb40e1585df887087b739ea8b0f75dd948b40b9654a984a1e1989bb57ddb82288b06ba66331a2b620b95e2d578489f05a734632e5fabfae9b733b049fa72b3eebf44e829d88be76b8c4289be62e9414711a3d56c1a5306a3a32b821822f6f78577f81426b6f05719de01fcec4f4b7105a6eb080c34db52ee896b69144370d63a6db7b99618cfc1ac54a993f77cacd011fd7d72d0f78680f74dd41fe7e5556a7e8b7b455e028526d46dbaa615fe36f4c86041e40eef93371e524872093c4bd779f996a9d97cfda986c78dc1123ddb322106367198258be243cfa1af8d9398bc6cebb95518ac8a6b08b2236d30976bae87908c06769989214c8da6c37d2ef75aa8bbfb9c5f08f3a19f6ffb334a1e08d9823d7cb013fb68e86a3386e96152cbe765b9af50ffba22ebb89c778ab75b5afe9cec185c0c9d836b5de87c8aae2136bb328ec4e7607cae56d79d33b83eea3c3988dc3856bf88ca4a82db27690cab9568762259e99ce04c93fb36849af329720bbc2902e04d89496345f5e1bd69e52d63d786c9a50751d72a47b8df89497f4ccf10228e9ac237126688a19fd02ae427264873d35460ec44c979dda76cc4ce12c9fe4754a1577ae331b75d07c0d082269419c615ea2a841d40e650e68dc0cea75e05f3d3548ee496e99cca1fa5de926ed27696eaf96ca0f3ef5707f5abf38a7f4ee25fac37675be0d03395dd50cdb80371700f01c0006386b587d499a3e2381a22c4e339eb1d992fca1c9f8894fd38076fd132f831717eb3a6e905da198beca2954879be2158c5608812fdb2ce10e6b8ef28b2a4e79c2b046223580edfc25e642bec784ca5d7c607476fe5a32d1c41dd4af5c9be90b4b710d3c5f579d01904096fb02a2eef3e4664ee7593d13a18ceab9a96c3e4681367b4ac6edbd8b636b184330b0be9f705b34cc0e17a692883bc323b8f540bb8724d1e7df3cb2b5e3313256e37eb48406eb4f3e76da55fc08fbbc69841f65c7b5848d2fd0fb959f30f1bf42b3b05cf221f05d70cc952bafbd130a5e1cbbdac6a6c5ea5433e455e16218b6280cff409baf1f220ea3d2b26dd9149f5feda5ea50b3aed81b43dee3bf34e03adcbd1b2f310af939ba508d047a3e02d10931c5b8d12671b43b691aa619bd1d86b287607a39057fd61f6758ab467ac23a80e8001cfd6cee330683a366be3657b943f80b5b81a81254d50efca1c8c0ebab80de6e715abadca67a6b76a19ee4c241a5f87717ad18c1c9f7b064bdfdb22e5eb6e28607b2ea960311d8aec1e899673cc4886ae20f00596d31295eb6687d86c6cb6c1d0f24974b409245e1532a712c0f5ba18c7abca413d97a0591b34370ac97b9c9191d5e520bb47ee1df14053e901c682c243d6a904a2ab18f3f077c2d93d7fccb104abd773f6301fc4a9dc047b1d00b5045a576ea27fc42de5de1688fb48b1aaf3a34969a735bb9ac8e598ebaba412f3452f00fd861d1e391245ae0b767598c692e79c1d95cdd481f5ef5d0772878b1686f0af1bf7fe05e080b14f3f2d40abe1bf600110314becb8fd6b36a7f22c728b6e2d393632afb364fd1887389b68ec054e8275b87e07dbd424896dfec528dd7df11fd23245dc95844640fe16265394ec9280a3eb503fc28980e0646ac7c47a34e8e682d4f30ae8431a3cba2f704e63f5fa2a95bd1c09f8f76aa4cb29e53c98592f0d75ca107bfb780902434fe9f00bea84d6575f8251105c96d3eb4d3b13382cc7bf81132b85aabc82ef2c5821959b5d46a6abea11b94e1af3cba7ae745e718ad79bfbb08ac0b712992dd160c0ad598f0a0f12c9bcc1fcb8f9103d499b21b7e9963ce3b81d9a1c293f28a527a7713c53eaa1aa5845581b2df36b39be276aa0d3cc6109bb236dda9ed4b0eb2f37176957d3335a1b799c414426dec870ca8fc07ad6c81bf20252362ae42448c8f0e72a4ce914387324b364f052390bd63c4834beb74293254c19ace4a56b2c4e2cd5bbf9d87e323a4d8892272ea7dbd0ef927c0bf33510fae8b13538143548118e70d3fb35b7bc50b72473237a861f20aa058de3aab24517e3695ae8c18630d9e39e4a7f4144b923957822b2e223f08f73044f925cfea8e37b21cd17a876ae0d322782618d42ed2b735da234a9a078c2cbeddd210b6697b081e4cbe3065a527f1be114335bcae56f6593e41527ccd5e421b6687157b5da5407546156d32d47481317bd487a6b21037465893a1b7f7b8f286ef4fe96c14baffbf1700e1d6a2e12fca63752d777397db2548c9e47b1b4664c38cd6db12aa2fd9a3eca26223c66c3b97c3ab41e1f32c227beecfe0f7d0ff36c03db707cea11bf9142ed76350045814bd40fc6a6535f28f3209ba2d302729fd5b7eb42e987992938536913d87de608119a743c6bf5454245d56a33a44adc3a3d00fb42296feeeeff6a88713c01bebb89970adb661f6ac31ebe3e7e722e85f502c01b3b9f1376fe002afd68f2e13917e308f0e112ffe9f8233eaa4ef80de176d2ad5b6a480f16e1355ca0bd7163cfe8102fe2d84ca123b3ba7adb3688d18338bbb33b4441d094f5eb600bee176a1bbfd42ca1ec47ae145ca617b1f829be7b825c4c438408fb7e4d881e220b2947d89c25c4cb3aa542ac5c68490b64d9c418a3706d310eeed328c33e6a6626cc18117513a5c8d77cc4f45ebe97f7c336608602e57165d1f101d7505d44e82c27b5a4b665a957c51126435617ac6fe0e16fbf6cececa8db28b00f8396cdbe7052be32aab63e0fbf7544a313c679978ff1a0eeb198d1154a0486e748947cff4f57ec12cd21674de55662e212a2635bdaaa47d7fb03bd55c11df945b6ddcba3e3ea9f7db1cbbdb9f3b9d14ec48793512b10ceb229a95f13e41723f9d2aa5877bf83401e6fe7a6a9912105", 0x1000}], 0x1, &(0x7f0000002900)=[{0xc8, 0x112, 0x66c7, "061c14629cbcb8ab66d706337c88faf3296e0d13ee1107f98fc324bffdeaef92907d732f596ed8ccaeaadeadd0c7f626f2aa2a52cbaca20aa48a03e6d7a13cf22d41342d12be2c43338485a08cd8d3428d56227f8df2a2fd332b7c171f8d5619fbb220eecaf17ea99a19a2badf3c12054bb5e77e03aca244cd2559a7ed875dd63e4888ba8d4b1081bb12233f7f53612ec2d7226c052107257ee383acc1e917413d5290a0bacc5864a82dd386336a37490e07817b0ecc66e0"}, {0x1010, 0x114, 0x6, "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"}, {0xa0, 0x3c, 0x7ff, "f46cd86e8b96e30a24ee3dad67a73d005f3ff6f66811bfd63cc1e2e2d6b6dc1660e794f510eb069c2b572fcd43f421bf804cbf137bc2599cc703ecd1056496f352e40ca07e34bf6d9e0dda769709cb366d70b8a20c6ff18a0cafe7d87404a736edcc213306893101e0e3439a3597e3a7c74304caa85b03cc3c9b75b708bdd6eb4bc0a79bbfd15758c35a88e7"}, {0x88, 0x10c, 0x6, "f59fbdf73fce7e536dc93e8c4bfcfca3ce3a23ce65eea53ca19b828d04b526d422faf028a3ff555d8e9ed2ea320ace01c5491d21d4dc6c44e4960aebd9267d16e0bfa3a2ee5aff1c41f16b32773f7e34af780716954695ccb2c91e97bbcc4d1da86289b2c098cecea3affa3c8236e57082"}, {0x20, 0x103, 0x9, "0e216150581cbe636c08500ca5cc25ea"}, {0x20, 0x0, 0x357b3835, "c48a50deab475ff52ed44f92941caf"}, {0x98, 0x6, 0x4, "afa41316ce5948809db5ee792d84ab3349e15a0fa12a64d76d0664d023c821fa2eb3473d13a311acef8447e30df536f87b6d32037d07ecce018746bca6ae3fc872c6d2c006accff059a094163cf1e9b55c11ed305665ee83758375e33a09a21a42f3b69b09330bdf773c51263776d155b123d1b87d0f2b0d4c30c690c95aaa8a3b0ce3"}], 0x12d8}}, {{&(0x7f0000000b40)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x4, 0x3, 0x1}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="da03001fb21de649d55c75f41513d2aa4f613e9cbd1ed6372e10d5c324e663548878e045b0c0a94e3644504a26e0c8893a878b235c8291fe3883ba7ff52781f97e78dc95acc822618547d44f0c08a83499fcf60b26c71c94c504a2c3c621ee284cd1845172e9e0b1", 0x68}, {&(0x7f0000000c40)="00695bced51824a7608a04dc04692354", 0x10}], 0x2, &(0x7f0000003c00)=[{0x68, 0x116, 0x65, "c2fe53ace17c49a0586eb12b99772b69b35890db90d8d55483dbfec42cf41bb967c3d6a72682f3676e47b88af3b7f85ed2f6002d127dc58328185915efe6bbb56044522fd8f58bc95c06f51f4143caba17110b"}, {0x50, 0x117, 0x7, "6b833e195671a7d58f2a1c356402c1f864a3899a09d915f23451c390ab025b669b7850ea39fdc163443dfdfef148551c3ca763fb47df471ea0ab14aa5cbd92"}, {0xf0, 0x10c, 0x1, "6b683783e89f1ba96b7836bc7d9e2047beea00933af1c827cbeb4cd816b1f3cf1726db65486c60f12f28f7ce8b8e3f8ea51b68a498a6c5b927367bb3d1e7833f81688fe7bd7b3aed5755bdfbad57b063606026504b3c6e46b379e8dec46951e95f657b5389dff9e26d7ed3c29ab5882e2fda290ff161d0ad8ef9c2fcd92d917f5102d82f0e48a58603bce3cb9b43ad8a5316308f41e63e3af40b01e4a2f0b15a60d2785e11d48321e939bd4d1354b71fb132789bcf67e51403d066e602652f6351e3a706dca91e2d9bd9a407dae72b4b736425d77e45b5af00acbca6e8505144"}, {0x108, 0x1, 0x0, "6015464af12ad40657a87b8362ff686dafe37b5b1c7d650e062fb5777d74bc84381ca487b635761174b9adceef377936c500b2b54c159d471df60a302d7876825c0987351acdd317468d822fb6364da51d0ce25d388ef0e3b726c26fdef4cafdfaa09a353c0bb761ae40a867c97132a79fe3dc76e1eaebec8482d3dd3ba7c96df8de054562d0613bfb271bab417f2a41cde0cb43ea212a26e650d70df595b231bd881ec856dd51d5544b18effa2e1e13bd4d276a19c6affa77bb941eeba75e487f8b8a44f021a7df0bc6c3d793e574ac3711f9f4d001bf09a029c769df107db729f7c2923d04b7d4bea6ca089d39e7029d7baf0069"}, {0x20, 0x108, 0x7, "d2a2bcd3fbce17c783a19377f0"}, {0x90, 0x103, 0x2, "f3310d4cc8bdc72cb9807fbb724996c2338234533cf5e201b2d6dbaac47917e051ab75777aa63293c0143f9e15a5e99ed92ef2205170cba5c861bb5acaeb7957cad1088ee29f6b5d9a49edfd5400fee4a39b3f75b9bdb25b0771dda99ea716a774efe496e0c31034e968641c81fcbea0d4eb7fbf749c05079316460f8f"}, {0x1010, 0x29, 0x4, "71a82110596e0bd28f3c93cb7ef79dc71dcc2de58e70a107d746e0bc11c652dc5184db0f6ba5d7cd7926d54bc2f803649e20462743f5dc2d4f86233294a5bdb90163486ed2c7812300dbe919928b98176e0a40b3022453128f079004cdef708fa0f6cbce38be5c8bbd35e371edc5a0acf0b90eb745ac84552eea40e1b367fb128373ab014d07fd3ef0b06bcddcb4add2cbfc1f668120a1ace7a5db8910fc5b227ddb57ddb691efc48b457783f4bc2f55333f7dba28ef66e945281290f3d3d1a91f9a287701a4bc154e5e21798411449ed3ca492c6858707e63f2aacaf4ec36316fe0408e813155dc8db9e8a89264cffa8a6bae6816d2ce125ce8f2e18aefa1147b89ef1fcd44aac6e8913dc924724ab2ea16c52ef3b7a79ac273f4ba8eedd591911ac6ce7fc4acacbf39f521657990c30ef923bfebe287c2b965ab581fa033aa2e0c19252c8957ac8f8b814b4e40e63ce44331283a15b1a24e27c139f09f812dc9a0c7c9d1ca7b3163645bdc1cbce99fadb4b419f6a2d8223ab7ac9e060cb1480b39399a418a9da5fd0ef606a58afbe0872fabbcfb41d7fefefa5195944594be5082251729145ea564bc6382531999950a8078d28db7fb0e776df156e666b8dc6306e23a8d24bd7eb0c9c9a508e46d0b96d4d4dbbc21e339087f6b6e4142d97058534a049eb1ee33b2e627fd07e9ce38e445bbea52fb48352e392f5f23389762bb9fab4d7ebcbb6ceb8ada1233fbbb46dcdc4449eab8be0191b99acbacc3dea84c3303c282f4b58c3d5db369734b9f309902f7706d26db5420ae1d8b012889c5ad775d4041e8a12896a4e56accbba53a3d455329b5259fd1a3cb2dc5e0cadd58e406538b9746e741dfe2f240308e679efaf785563972d2537844216ca36f993a2389c320bece70514910036f960971506952607d8f1eb8ed2c21408bac6343fc43d09e7d837d65d8dae713e3202c5c02c99136283c7d26edadf5c03071c4a83a8cd64fb191e942b8445adfde1b8713a99671bd28e61179ec68f1ab7c0d03f7f17f41d521e2b95fd4ea734c4823ef15a46d78bacb253f5ed6d88e6f38fa620c4c133c23727b42bfd47ba6bd231b528ecaa23859d33de5a50194fe1bcee604a4dae0055346eda6cd0c5fb3321fddf062b173955f6c1bf372197ee727a856aa7d0f10d99179a1c203690d0957b0f0d12314305ce074120ffafd1089866f596dcf21c32d65206e5fec8763e09552382b7cc76eaa3447423fe0a9b5d49c802d0620f8b8c0c5041be61f918c6d6586e63333a8344748ae03469029b7f4682210c9b39f5c83778d06e7ca4779ae6d8fcb93a0283f75f9d9923520b3ff9c210483a15a26a2915a07f2b7af8a5108d1dded5b6355ef40ef4553690c7d70f1f8e5ebcccf1ee2cf0bfeb284b777fa5ef7500708e37f202afed163bab85ece3b08e18eb7ae6526938fe3e083e5c3933c11c35194f717cd8c0fb029765136416cfca389d42ff1d08572e7f8fb6356ca5ea324b354103baeb5e11067d1e0d68ccb217461b661ba05bd9afe1e0a2625ffa6e52e9225e26154ccc4e374eaf831a23c687ae98734dfb3dbaa5e30ce7ce688eb9bba6a14b4acfe08764fd92c617d40fdac411616d3c8fa726db73bf7cb1d07683e10cbcd37b9fbb031322bf73b4040aaf967af6ff8e12091888996a46e27ce9d5f34ddb504f1e4afad2cb2a5b96e12a6734d5aa8eb852e9300911f7a77ff96f1dc5292ea3f541d28e7937ac50a27ce7375744d879687dfb261ae13c4bb568e73608eee5c1c3970434c9b1d6a71e3983be9a3b44b042750bfa7824ec8929345e21f280deaba77f65cbbcb61067092b8536d8387f9cf83ed1c3da09a6c2e9591204b172a9d7dc6638eae59f871e7cc4775dbb027ab458f7c84d6c3cac7a5cb49d9134463765acf33c089bf3e7ce1ffb46fdedf919f72f59d773e402634be73d75f6084cd7752d6180dafe743d6d011e4a4ba82be0fef95b2514e64f6a739c030731c893279c8465e5ade88abae1049052e1095ba48dc48938c2ad3f52e604849985ae938d384293d00069a9991a17eb0550cb8a2add6c81e49d01b8c9f2d1c4fa7f9ac78d670592f63da42d0ff242cd433710a59b3e2f815e32d037a9956979434f95ba88130cace276164f4a3ee734bf6967158a2fc79bde8d05382e7b1ea9105cab5365473439d49983ab76e7c913067e6a2ca68115d095164ae821091c29b8a315bdeeb4fbec4dd62910aa7e99f87890636e4fabb60956e8c60deb0e9e12a3fc6e2b90b2b66ba7b553a7d8325730652baa1fc11dc8162c2a46942243f743bc5322f7488b63f81ac2868b7786b00dfd403ea59fd69235c8bf4a7e2a62c9a6f88c86dd6cf4a9e4a9362b635d77dc68c52e87e3f9434ce04f859fc93d1d310f0ea5da2ba9daa311558709ebeed600285b21343716cb23805e75e366915772a694c0f77cd565ad4d09599aa48ed1c6e19fbe910c24c9f6bcb9c1b153a9b1d2b9413433dd7906ddea9461658fab5da97428d9ca8cba162505c56b1f80862cbbd10aa2b73265c94e0296a1483f93b56c4910553245e22d9a2d79ddab7b42f6e13820cb9798c0abc2e85f0e5df738d375f3510ff7ee274722e71268b7555c6fd7812e718f59301342ca3e209a9cb4f94811c14e27a2dbd337b2561fda3020f176a56257ac88cb689d3de1e8d056fb2b7f8c7a848b928430ca45bbf4dc2d4e60efc202aec2e87d7c3ccb10ae5ed19c97274104b39f0191c5ec72320562d7ddaa2c79fa0964bf59a63678e8db7977874d0877fcecaee412c9348a9549897d37c603862e536e0bbc343ca45b4cfa10d39265cce23cece86bdeb0c261ff98f5281ae4ce236851b898b93fec5a925c6c44ae5225aa5a8fe86b4d8006ad31a0b875afe232f9d77d47b4fcba05162f14a8aaae07b121d63cd21fd25b32afa85a1222657a66c8bb1ccfbce7b0805b1e0aab6d85b4246f417122d6f02d212b2f45f79ca25cc932e6ba8ff133f4155d28a7f194439496ea85970988f7bf11474358c917d3a2587e7ca19cea101d0c4bd9cb5127fa147d13dc845309d14922442cd101501745283f80426a57701d082be505869be8595852761d0294237583a3e6bc39d02ab9db3d62ef2fc44821842785bd4b0a24ea9195a42935dd11bc62932f6fabbb8e80c4db2fd3e77f86b15f5d1bc4f0f3e7d3f0c66cf90dd24e7a056395cb1483ad496e49791a59dd05c369f89d52f67cf473a9ecab4c4afbd5a97f61ea5b997985bd50db747629b30e5ed59db71d8f8e85d84d543e0e8412e87d088af995b6002d54ac8229431247bd2f549c3a4cd8e3f9471a1559b74189b3947a520c71a46d304f0558931eea39a4eab18280bee155362675a30d7364962649b9806cb93e2e4014af3991c80cd2c6fa45b29f82ec7e841cb2bda0c283ba843d86e9f7450e4809323548bb7554fedcc99830921419e4d60aa628377e69b17a572f60d33a61e6736987d9d1cf4d25d6edb3b44e836123184c7b296515cb02fbfa77a3f1c5ee4c70da4cf9422ce4ae7a5f9e5b73866ad72b1afb5956b2581839cc7d4439390351d3a9e6af8945767a1f198aa3b26767bbaaee4e21d87abc1fc977f57f6b652090996e7da3516a95f1324e824aeb61e2d6820dba3d7a6898f2e798f41f17245545820c0690c239cac85f8cc855751a695875ea46e96f11bee1087f9154253f64f3c8c76a726712500ab99fff1cbe68b652bf55e95fe87b7a37b9bb87e3234934913769204d10553861402b5fe8a51553ec260146756673e7df2e09a9fe1ca1b551f8eae57dca707f7b7b0488a4f4a2b2940c3d9176b9de4c452bfdf4c77699a0cc419f4d8ce2b77fada59fb45818d4dea58b0a540d60eb4834d4f825070d07ab34d570baf7cb01ffdb100846516f52fdd850fdfe197d9536c5e79ca3cb2c84d6722c435a8b9bb109d83541e85259bfd4fbbb2c0c5cbc9bd999efa2cd715fec479265862bb111083ef4314d9f8b2ca67f458b2b0411cc9737b7bda4e1b1aa971d715756d8da0161e81fb436e60fe418283d2982d26399c01c193254f06e20999e0691e433b003b8eeb4a462783ea71bac697762b405beb21e25a438f1d97847e23c0000316dc6023e88969f494f00a2d7ca6974cd5e5ba46810ee58a6597e5b257130d2837fb878bba50e8295e44af585ae9903003f251c0a230fe5669526990ff2d3019624859407e12fed80758667eed6e2c7324b00575d95e76f10211156f31eca2a43e5d56dbe1f3f2abab489f9862f51982e6bba5ecc7418a6e23da67d9af70a8636a98ec294039f7fdd45ef4669ac7cc27b820a0572843f64b2cb9cbba6486532f5ee2bf9c1b087a3570bf4b11f5feee0af90c6dc0b2afeb8f191510ae2f01fd814463eb135b2075bf05538056e489c52b02f9c698a11dc318b2f38f77a0bd700226bb9103a3b22ccf8a2c5885548f4e0060c2abfd8a83ca9d1d3a3d7bc45d7e516056044b340743673ed4b5b2e7439ba4dabd65ef516118abe507355f869c670158f98266cc7adb6ae1b63e7a39b6b77cbf2816769b424afd6cb13bfe94e66038577417516c3c2fef224fddcfbcf48bc517ea00fdbc19cb7d0a3cebb0926400304529038b8adb14747b54665332920109fba59cd4cec28d918c7663f4b7f1a3705f8ec39ca3788915bd6e059019724ac0ce087db17bff1844753df9002bb4bca5f6e3979a32813e3bcdb906b613142b94066c9643ea6a8bcaa5413aff5f4d099d87aa2c6b72b33350a60e44ee333ee1df191db65871d4ebb172cea1e778a9be6ee4be09641bf53c483d4ef0de32527e35ceef782aa29dde03e589f0d2acacf2091271469a409f5dc34fe7a131d3760dbf6e2aca80c60e555e81e7458dc75cb02945f1dbe6ea95d078aa2789b9321eca8d3bf4fa43f9f2c9e14ceb501fe458f9f37cfbb602c1e169cee8de6c01960b11a0934396faabafcc4d86a7ce0190bdf8a2a2780de886260d606d156967572ab0d616ff70849a6f66790c6106be6740ba380582315624b6ebebd63ccebede4821a762b04e66cca2cff36727fe04be4a8cad092849fbc479d7209cdcbce76e5728e055fb5970f9a873414ce22938a2b5b869f25c477836dc15371245d99df578cff0592c96f3acfc21572b0de8f45edca14b780546f79169d2bf1066353caf44d0768e851532a811416902080854648582dc178d8c94331cd24ec3319be6d09ab7eb167f31f9492c2f76d85f96d033d1f85123593d25a13bce5bb2013d29168d88b3220c897c04adad826c399e2977a221f048ccf89df526c2530ea570a4ae33585ab527f841858c7e87082559305f145d72f7988eca01ee160a213c59b5452c61d25f08675f4a9fd2f367a375ef04be2c09cf98663dfe75da48304adc3f751fbc79601cf9cc986fb4589d113a63a43e80791c7a01baa2fc92f24345f6baf94a0fa397092506158ff6e25c888c4f4b6f886d0a5887e34c0d1def95b3365bcaa3bfb30f8e30163ac46ea2ad763a908e98e82f7e1cc83a6c3612dfc5319e0267a99c6f54f5b7c2f7a9ae47fc096660f06be9c75a251f47b4e74d0e2309be1c69901a8848aed176febee67890fd31fa33da383e9542eba3ac7d7dd5851d4dca0e15b0116fdab2aefa8ced402954e9b6d2d5fb6c712c70a47241f6ead05c18d17cf5d7efe0c1f79a3bd32aa7ddfe771c51a03c6bcbfbc239e0e24fce6fa9572da76cd4cb9cc21954d9574d97f267ca2112f655a6c33aef52f41a187c1af05ca70ecf4b68fecadc602fc85626"}, {0xd0, 0x111, 0x80000000, "ae013d9c360a12d16eb5df14bcb274ad696e49189911468777f1ecb21ba5f2ac2c23ef64f8c6f0e379fc459e6d7add2152b38729519b729d9b85dcc43641e455cc26b044de7b3418d9b03f4adfcd8294dc3c297907c4355d4cf356a6989df07b3ccfca4b23b9f0d5b7184c3fc2b39619f028289af04c4161d122f90ce59027075314f5f9bd699a267203ca926a2c3697a0cdd5a8e36e11aca6b0602817b6d14318cc4bfda65e9098faa34b89f1865e18b6b3aaf9f3d9b17d57fed1"}], 0x1440}}, {{&(0x7f0000000cc0)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000d40)="53eafcf40c651059272d05798bfe9fbef825d9e7ba90a8b300993091e1ae9aa977b24db7f400a29d84b5b919d44a30bf9434f668d186f11c64cca42519f4f0c9c85f6d59a4472d8845c1903a71e5cb27d7ad4b7c769c7f796b55f2c78cb3d9c44cba83043c4cff1657086eb6f5a1a6061537d3b7dc972cfbb8742ddbe7bd57ff3de1300d7cc5817e4e5619df", 0x8c}, {&(0x7f0000000e00)="295bc5e18725916e2e6cbefe7f2fa75c96edb0bda3060b32b226d3af083c453f8556974a96e3270d17be4e27a80c0591d6099a15a662ccc1b6a370f7fa29be5a3249ae3266a2ceb2ad9ad981707855431fb41dce78c9edc61448", 0x5a}, {&(0x7f0000000e80)="8004e46aa6af11ce13ff03c2ce02b2f51b0d7187199e4ee354e99c85b2eb0a721922ef462295d6a0a089e2e5df447bcf88a0afb12dd2d788e2467de8dd5483e663b6a9071ba323f22935f78d6ee1ce8a95c9221fa0552c90a3a5b098f96343c076ba315c94c421a63a8796fbf7ef19bde1deba97c499c69f56cee9176bd22014da8208808886a9d6f957647b31476516c5c4ed0e04df1333e6a4ed532f39dfef7356d0907454ffebbc7e021db55868ea4d8e366ee50e3a8ff193da87c77e", 0xbe}, {&(0x7f0000000f40)="21940eb293a26ad029fb97aaedc49382398bddf3d0756ce996ae376859c0c44491e1550d4a7e6a73887c06951fa40fd3d9fea5121731c742dff72bb45f0fdfbd6babe9b7520e4ab598b7113802f7e2769950232d5a452bbf3b289db31a4413c73d077d6caac5563669df96431c8630e51cec81b14ecc6d406e5e8bc84e5627753800d7c9e3a41ba0af927a8f3be51ce1070233f9a1023ca8dde0f18048924be1949a119d0dab5747b0c89e7172498b787f46844691b92d0c4ae1be29fd69a4bc819cb2bc9e818130fe81eab19c6301c2752c7f33d53e9dd79bf5e831ea613960f5848143fa47e5bad8c0521fd35ef8e3641f98f0e1ae", 0xf6}, {&(0x7f0000001040)="0748df4593dad019b60e1c318bb02b710c46ddba459138d0e6e0c93597dfb6cf3f529f19a3ba34293fa015c6885103159267ac9635a8829c901e373d58fb2ff407ca5caefe7d672d025a6af39e5658b00d64e9b2de3e861a02999975f51455e74adee5e70a3428b51ea6bb77f02852cd52e6ebdac250185814101782502722f82082063a16afee3f4f3630e3b46f3bf21cf9644abfce7db958b5f5985c6d0867c3da819cfa6520c572a8e20b70153caca0aef4323eae58531cb4b0ebf00040e4367b897be462ad68c6681a1c3159b7ee2fc102a4ccf1446b33c985932664c7ade75e3e3582c7b76c7c", 0xe9}, {&(0x7f0000001140)="c768d3cf2863c9ff75f702821424d76f8bea8b6a70bab66394d5b214c0b45d1188e82cc9e5ff38f80275b98bb07ba7e3d0e17f15897819fdce1f1340506e67730c91371b4a71990430697e2137437f29fa6ff5f169c1", 0x56}], 0x6, &(0x7f0000001240)=[{0x10, 0x10a, 0x9}, {0x78, 0x116, 0x8000, "a58290ea3338d4e2ee37d4601b28b42d3ce0c63d507ff5cba97b8d6db393127730e3dabf0105bb40ac9f07e1f9ae215b96edc4b09ffeb5a1ab4aea88ede4614d62abf64e331ed05873297c3929a2100703e21106bf78fbdc797f71fe70e99f0228362f50644a53c9"}, {0x58, 0x84, 0x0, "26691f7a79970fabc97f9aea77b7e68a72c81679f80f58cc422a4543fdad2aafc7135928769a235164cfb99f76e925937045b4c0a9ac5c4a578c9c94b13183c6d3"}, {0x18, 0x1, 0xd, "45163f94320d87"}, {0x78, 0x119, 0x40, "01e000ff3a147dfe919540c08344a511e32c2c037c5bfb3e905e03a37b3ec70fb447b6438895ff84690e1eeb1ce621db5cfd807bf101b6a06a65c3abb919f356ae01f679158f288070a546fbf2eac41b97957da21e0e6f64afb6ad53a9d80081e6ef5168"}], 0x170}}, {{&(0x7f0000001500)=@ll={0x11, 0x16, r1, 0x1, 0x5, 0x6, @random="88c80b50cb74"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001580)}], 0x1}}, {{&(0x7f0000001600)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000001680)="6a075e741b5aba2f8ed4facd1089025e8be2cd9369580d22cc7ef9734e031d3f432cff984787ee301f7c0661a3fa83b668526d4b61749e93033c781b9e77a6d21122930688", 0x45}, {&(0x7f0000001700)="65abb8898b3466392cec21f0f7037a32afbbdf48ed26314b68a20adae1385f93189aafe9380dfd5bdee3800bbe276d27cceeaf07a185d63ef862c1fb146f9c8870096d7c539873fe3c2ac6287edda72459fdb19d4def279b9cf8dc372a2f17d7175f6e023c15acf17c5587c322ae3382577d00ecb5d5c2c5841010efddd37179fa0976da827eb65d4a3761cf37e67469309ae187b72d1be1a807c2412e7160eb5cadf8e4c68ccbbc7543c16851f9fb6e8ea34b867e9ab1f4bfa3772bb059c7b2dbb593fd59d32b9754da6b0e2bc8ae63088e56e1bd62f1b4b00137ef36db70f281", 0xe1}, {&(0x7f0000005040)="2c066d79a3e355b1b1d2cf3e860c350a09ff938b399e", 0x16}, {&(0x7f0000005080)="9d37da190054b015ee1504b5f8d03b2ca6f9b8f858fc41862e7f9c67b875804ef773623e5f59436776c8b2001660a5e4b00a79ee84ef764e1d1ddb9ead0acb074122a6bdd786673577b980528deb322655d11f0aca443d993afb28d9263569d2272eedc27b81b9541fc0baf9ad5a79ac4591cbfc8ecf65869fe437a445e969ee4ccef783970b2c9a7d3400341b54c6ecef5b555306175b8dd70e84d81c29a2e2aa0eef54fa4c7ca56f9d15ced2dcf8bffd44a91acab70009a90c7fa77a6e1a5d67374f0a7979204a080944071deb0bdca60f2b17d20be5af3ac267bb93b24edf19ba", 0xe2}, {&(0x7f0000005180)="fecdb91675faf188218a630551fc0f09481b66f87afa9aa1cf8b0066477f335f89d841e82f0e83f5aa18e9a28e28527fc4aa388e347f0b136deb96e7d6888df3260dca898d0b7e354cdfd85b1940e138d2a84785b60cdfffafa82cd2e029f6f4e69370d1d3862d0bf96b3fa5d425e235f225dedc49caa2e5937415393736cac254cf72ff742815fb162d6d4d59dea8a1c46edf866a285c04883bb10bd8aa65ab78087383fac31a2551a7905c749be5339eacb171bb2d63f61769358877cb5ec1836bf401d64bae9f44a77f8ace67ed0698996ccd0b390daa090628", 0xdb}, {&(0x7f0000005280)="0888cdf416b69a88d52e3d91c990ea8fcc0a652ef60ccd8d54170cc9df4d1f09348ead8e6466970d9f1d63e9345482ea1c1762b5fbd5f81e01b4c950fcc4f1ada908ed0ea832b4f03e5c092084fcd4d5227ee50772f3ddeeb2fa20", 0x5b}, {&(0x7f0000005300)="546adde57d1e7e63268959762298b4444ade17e3d4e36fbc3d3d0cb62482ba484e9bc0f14fffafb4ff5aef34b1617afc1067362cffef92045d0d253228db087780ee2637e50813f4e0ffc37320c01a0ef12f8fc603dbfef19cdbe18a7b6525e0b0983d02e52ce5a8396a3fbca96cebbb85c62e5521c626915e987024f059e8b30231726c9bd4246bf10dba4f283dbf07a78196a2ff1ca5f029b071e40917cfae7791e36ebfedb82c8705e76824b64cb9a2", 0xb1}, {&(0x7f00000053c0)="ee5393faee3fcebe972bde98886e27d737ffab2a0d02a9a9ddf9b83aa273104ce93b6673ea7029c8bf45934243d6e56893082599eac6f1dead884d406d0b776109f7b8b4b25c6aad776788bc4bde4e9c9f2f0f7c37e40c9d06fd0181dc6c3ce9cb2d5841cbe11c0cc501b16ec67fba15b18efae5b72fc52e4188880c445ea4080db5f72aaf99fcbfc0b2c7c27b44c6bf0540d8c112e003cf4b127e979fd26eeae21e964873ec13305eb7a7f0977f22b5d4ce648bfc1a112d6953c13f2092d110aa2cb19bb4196aef65d63fcce57bbb14e99298fa178ca46a", 0xd8}, {&(0x7f00000054c0)="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", 0xfe}], 0x9, &(0x7f0000005680)=[{0x20, 0x9, 0x746f07c0, "de4c6925cd3848c57063b8f5fac927"}, {0xc0, 0x103, 0x200, "8d93a0b3db8f9246eb925d9e2806f335262e2c55794edb8a84a5d93c9aa854627412bf21fed11a29b19ca334b15dcd66ec307e18853fee48f38d9e9b6bba2b5d35b96095b1308f01f4874e8298e81a9c920c4522d31cd97fe073ef20b276c04ae0b235da121f20ed949c5de325dea27d607833bec58a3d99093d4a2a25f1464eb9f5969017cc7eba86314f708acf6a9a08859a6d6d6801f979e53a62dcd6f46b9bbd62e2212c3f9f3e3d67821862"}, {0xd8, 0x113, 0x7, "728ac31485942942d08e3812bd3930e16e7ee991d50784904af1630ecd17a24d94fadbadfbdc3da9d60b0c0adfc42f465119eafe6a04ede17d802a66cab7cfe3e848830c1729fb60d30628337baf7677a792dbcd44855dfbc7f88205891a5b77c2a7a74631c0010bc2ca99bc85780bb46feb0b6bb64a168bf66761835f76c7589bf68615a6cd76e6a598b9908eea697b6826357b3adfdd80403f29046b7255f30970e92fe46f76d8a5f72cab4b5b6f0ced8238730923de18bbd87348ed944e27eeca"}, {0xa8, 0x1, 0x80, "ede7c9e6bb4c2afb2219472af07b6676ef1b311a77a48f3922a822932dd9ae65db4d11639905f819b4fdf797d7c9c86c4dcbb13928deb2ab52f2b79d6dd0228dadd9a409a68fc1e9862dfbb41db65009b4eacfd5110047beb49f7d40f744537bb239eb56a7a1252f92ed6db22f37c7a29631c30804f35fecc1bfafe0b6f379c6a99e924b3f1d50a2cbc469a43bd85817bf50582bb2eb"}, {0x70, 0x6, 0x8, "6b8f936a62abc2c8b609478197df552bf7b6b48c37781024dc8485fe7b7061acdfed25d43e4b8609866be06fc0a7c7e5002a468b3e093d818d6a14e0f20493fdb94186670f1236d8a59d07d24ca5f927e6f3b2c7bfd21b5e86532a"}, {0x110, 0xff, 0x3, "e2728fc9079195896de3ecdee17568812606565858d2a7c0a1abf578e3a27f9d0f8da9d6b4b467b601f687e4bbc000844c7cb86394b02c71e9e8e859e2670e1c4ebc5529b36bea5c325b5f26b717ef34cc8007383f2292443483cfc43a1c1e459bd0b258bd2518ae64ac54752c1f26b88378199a2eabd09450630742d56f2a8b1d55023960ad8908ed6dfa881c28555fc5b17ae59b52a2b7f91289f82ecf42bd88f2acb481440323e1ea87a9ff8a6e175d88ff718d14548b77a3857148d09e8aa27dfe065905b06546283090c835a8e15575826a5a7208a33b573d5da8bd2159828e9a7c546397e67b1fef757be82dae41d337e36768a08ed11d05db55de"}, {0xf8, 0x3a, 0x7ff, "e1605af64aa7a5afe9756fa04a2517574c674707abe3bc06e3d69897fcac2b1401e982548caf827f04827babe013015d6594d23df9738e6f5ad11e6c24745f7e371047ac9824deb1d7b64023528e5bc94847ef9dd23b5ec7a2207f6a130daaab72eaf55593c2d5d5f25a7b5052f25cc987a1868fb82bb19c2c1792c582995cbcb0d2f30f97093dc8a8f4f0fe1a5a2b7a1bd42d25cfe521af37a7e05070580703c773c803e0430547a64b32c23b47765d9cc0955531103d8c1aeddf3f448b53193ab63551d592ea8e3ebdb539bba3de0dd2cf221375c531f84046d4feaee1fb53178db6d4700c81a7"}, {0x40, 0x111, 0x6, "e8007fe4fd14bb90e11536439af9b66f7b36fc6005c8cf852e35962daf365556df60f2ecfd5877aed346b4"}, {0xe0, 0x10f, 0xfffffff8, "426fea649ee55a24a1894df8850d2843584699fccc8fecf6adfc9a66968e673d37d3d8ab7a966d7bdf47d5acbf7248a729bd581ff942b41ffaf3262ab4b9a023568d75f3a3507faba70fe20754e8e3ae4362871304a76900c0c8bf376c814516933a012be5c693f25b5fdb5a4db58ba0d2eb1d599c6629e777ca7394a4dcd6c7028fe6497c13b8a063704b70a0f4cbd2c9e0bb0eb58857274898afd394ee5b5b102560dcf2e7ecc79e6a3f42a911d996eef877733b77acdedc9976b5a7f4844c455df892f9ff2d5c4631208d58"}, {0x80, 0x10e, 0x4, "7b16567f747722696f5c8c2e6cb7b342a053bb1fe07d25919590052e0f8b0baf1990c75e829c4a295b0135cf2cc942bbbae8b2816005202f9f482b9d98a5711d3d8c0a2adccaa21204993604cc72e9c1d673688899bf7e70c7972d1e80512a80e2ea7f92fac417bfb0ef31693cdbff26"}], 0x678}}], 0x5, 0x20000000) socket$inet6(0xa, 0x2, 0x0) r2 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2d, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0x11, 0xaa, {0xaa, 0xf, "9d2737039119025b4108500a7dec9f75afc5fe888caa624f87ac7256fe8f09bf5350ab071a8d8bcd32764a7704dd518f5bbf0080f1d1f07d536cad508ab74ff8615e40d90ee3872aac4768d91eddb8cdf94f3d50ffffffff67952eaf3fdcadf2b02a75a60a32b342d71ef08e5601ddc6267e42c72f47f55028218ef967a7ae57458f221ac091594b80b8e3eb6937c73586e71c9047da78eb0b9504cd4b141e8a94f8000000000000"}}, &(0x7f0000000100)={0x0, 0x3, 0x15, @string={0x15, 0x3, "0dec82c78068c57809078b0f1d7cd6d321a7a5"}}, &(0x7f0000000440)={0x0, 0xf, 0x113, {0x5, 0xf, 0x113, 0x2, [@generic={0xe0, 0x10, 0x2, "0c2562f8510e2e660d5c1b8ab1bef33f1289313a43e431e58d964175428155a3be5d87e74b5f2c472e845f7696f05c7718ec2d613bb7a68c7538c180681132c9183caa93e2da02a8a40dfb5b41ce2062520f00bfff565e8d7fcbeffa28db905a08831aa11509813fa6c7730ea3bf1ebe2c8af0f4cc2af561d5642b908fb84df87de768a85ae9e4c059fe23165df3da61f452e89eb2f0f95979aad009e447b1336e8faa14aabc0af966e5c7120f7e588929c7ab0b7d18e1397d677e44a61ba9209986b50f20a196eb3496ec64b65dcb4259eb1a6fdf1a0f2da3d5294367"}, @generic={0x2e, 0x10, 0xb, "96203aa10343e9b9f92e286ffdfcb7f67b111de743646107fb9e0bf18101e19a19b9c8d3c8c4d2d2de91d8"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x4, 0x6, "f745aec0", "c6bcbfd6"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x60, 0xc, 0x0, 0x0, 0x83}}}, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)={0x0, 0x12, 0x34, "4c23d2b3b48804de33e57e2b737ba779300d2bf1eb96ad3b78cc7a25e45e54d5d477cef4ea66fb92802dab54f12eb7f0508ab43a"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x1be6ba8a48285bc8}}, &(0x7f00000006c0)={0x20, 0x0, 0x8, {0x8, 0x1, [0xf000]}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x46}, &(0x7f0000000780)={0x40, 0xb, 0x2, '&t'}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000880)={0x40, 0x19, 0x2, "54f4"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x1b}}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) kernel console output (not intermixed with test programs): 0a0 RDI: 0000000000000004 [ 707.199310][T17998] RBP: 00007fdb30ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 707.199316][T17998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.199322][T17998] R13: 00007fdb2fe16038 R14: 00007fdb2fe15fa0 R15: 00007fdb2ff3fa48 [ 707.199337][T17998] [ 707.483557][ T798] usb 1-1: Using ep0 maxpacket: 32 [ 707.483650][ T55] usb 40-1: device descriptor read/8, error -110 [ 707.497969][ T798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 707.498109][T17928] usb 2-1: config index 0 descriptor too short (expected 8192, got 71) [ 707.507840][ T798] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 707.523280][ T798] usb 1-1: config 1 has no interface number 0 [ 707.529545][T17928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.540093][T17928] usb 2-1: config 0 has no interfaces? [ 707.547495][ T798] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 707.548585][T17928] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 707.557376][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.567863][T17928] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 707.574797][ T798] usb 1-1: Product: syz [ 707.582785][T17928] usb 2-1: Product: syz [ 707.587377][ T798] usb 1-1: Manufacturer: syz [ 707.591169][T17928] usb 2-1: Manufacturer: syz [ 707.596309][ T798] usb 1-1: SerialNumber: syz [ 707.600796][T17928] usb 2-1: SerialNumber: syz [ 707.614519][T17928] usb 2-1: config 0 descriptor?? [ 707.831677][T17988] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 707.862130][T17928] usb 2-1: USB disconnect, device number 10 [ 707.884594][ T55] usb usb40-port1: attempt power cycle [ 707.896829][ T798] usb 1-1: USB disconnect, device number 32 [ 707.958337][ T8645] udevd[8645]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 708.444636][ T55] usb usb40-port1: unable to enumerate USB device [ 708.545660][ T798] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 708.703460][ T798] usb 4-1: Using ep0 maxpacket: 32 [ 708.725518][ T798] usb 4-1: config 2 has an invalid interface number: 13 but max is 0 [ 708.734234][ T798] usb 4-1: config 2 has no interface number 0 [ 708.741018][ T798] usb 4-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.771004][ T798] usb 4-1: config 2 interface 13 has no altsetting 0 [ 708.783894][ T55] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 708.793546][ T798] usb 4-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92 [ 708.808458][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.821379][ T798] usb 4-1: Product: syz [ 708.828228][ T798] usb 4-1: Manufacturer: syz [ 708.837117][ T798] usb 4-1: SerialNumber: syz [ 708.939651][ T55] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 708.990395][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.031372][ T55] usb 2-1: Product: syz [ 709.040609][ T55] usb 2-1: Manufacturer: syz [ 709.066327][ T798] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 709.073904][ T55] usb 2-1: SerialNumber: syz [ 709.089989][ T55] usb 2-1: config 0 descriptor?? [ 709.140196][ T798] usb 4-1: USB disconnect, device number 49 [ 709.352932][ T5895] usb 2-1: USB disconnect, device number 11 [ 709.969850][T18037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.981057][T18037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.264052][ T55] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 710.428423][ T55] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 710.441076][ T55] usb 1-1: config 0 interface 0 has no altsetting 0 [ 710.448566][ T55] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 710.458646][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.481522][ T55] usb 1-1: config 0 descriptor?? [ 710.488069][T18036] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 711.006432][ T55] usbhid 1-1:0.0: can't add hid device: -71 [ 711.013227][ T55] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 711.027908][ T55] usb 1-1: USB disconnect, device number 33 [ 711.205620][T18057] tipc: Enabling of bearer rejected, failed to enable media [ 711.913522][ T55] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 712.066707][ T55] usb 1-1: device descriptor read/64, error -71 [ 712.161197][T18078] syzkaller0: entered promiscuous mode [ 712.167115][T18078] syzkaller0: entered allmulticast mode [ 712.203843][T17928] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 712.362057][ T55] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 712.386291][T17928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 712.415511][T17928] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 712.442919][T17928] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 712.475870][T17928] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.504474][T17928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.513019][T17928] usb 2-1: Product: syz [ 712.517304][T17928] usb 2-1: Manufacturer: syz [ 712.522275][T17928] usb 2-1: SerialNumber: syz [ 712.527463][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 712.536479][ T55] usb 1-1: device descriptor read/64, error -71 [ 712.567277][T17928] cdc_mbim 2-1:1.0: skipping garbage [ 712.675204][ T55] usb usb1-port1: attempt power cycle [ 712.723495][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 712.752013][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.776329][ T9] usb 5-1: config 0 has no interfaces? [ 712.782445][T18081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 712.812229][T18081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 712.821132][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 712.841662][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.850905][ T9] usb 5-1: Product: syz [ 712.865802][ T9] usb 5-1: Manufacturer: syz [ 712.870639][ T9] usb 5-1: SerialNumber: syz [ 712.889470][ T9] usb 5-1: config 0 descriptor?? [ 713.052939][ T55] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 713.099596][ T55] usb 1-1: device descriptor read/8, error -71 [ 713.351725][ T55] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 713.384148][ T55] usb 1-1: device descriptor read/8, error -71 [ 713.449090][T18081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 713.457768][T18081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 713.466588][T17928] cdc_mbim 2-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 713.474729][T17928] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 713.502960][ T55] usb usb1-port1: unable to enumerate USB device [ 713.861047][T17928] cdc_mbim 2-1:1.0: setting tx_max = 60 [ 713.874454][T17928] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 713.883290][T17928] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 713.904432][T17928] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 713.929922][T17928] usb 2-1: USB disconnect, device number 12 [ 714.781548][T17928] usb 5-1: USB disconnect, device number 96 [ 717.055433][ T798] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 717.193514][ T798] usb 3-1: device descriptor read/64, error -71 [ 717.313946][T17928] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 717.441897][ T798] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 717.525313][T17928] usb 4-1: Using ep0 maxpacket: 16 [ 717.554653][T17928] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.573506][T17928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 717.573514][ T798] usb 3-1: device descriptor read/64, error -71 [ 717.613446][T17928] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 717.646020][T17928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.683926][ T798] usb usb3-port1: attempt power cycle [ 717.686839][T17928] usb 4-1: config 0 descriptor?? [ 717.957375][T17928] usbhid 4-1:0.0: can't add hid device: -71 [ 717.985336][T17928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 718.016328][T17928] usb 4-1: USB disconnect, device number 50 [ 718.043481][ T798] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 718.084762][ T798] usb 3-1: device descriptor read/8, error -71 [ 718.246357][T18156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.344050][ T798] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 718.413255][ T798] usb 3-1: device descriptor read/8, error -71 [ 718.540449][ T798] usb usb3-port1: unable to enumerate USB device [ 720.053470][ T5927] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 720.246988][ T5927] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 720.257039][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.265329][ T5927] usb 3-1: Product: syz [ 720.270182][ T5927] usb 3-1: Manufacturer: syz [ 720.280376][ T5927] usb 3-1: SerialNumber: syz [ 720.495495][T18159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.506824][T18159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.519813][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 720.519825][ T30] audit: type=1800 audit(1773408654.228:2409): pid=18159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2645" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 720.998509][T18159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.010631][T18159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.493510][ T5927] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 721.523783][ T5927] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 721.592993][ T5927] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 721.653984][ T5927] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 721.697856][ T5927] usb 3-1: USB disconnect, device number 82 [ 721.775210][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2648'. [ 721.792944][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2648'. [ 721.816061][T18170] netlink: 'syz.0.2648': attribute type 13 has an invalid length. [ 721.833759][T18170] netlink: 'syz.0.2648': attribute type 11 has an invalid length. [ 722.017396][ T55] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 722.053468][ T798] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 722.193591][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 722.204776][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 722.235864][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 722.321149][T18183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2652'. [ 722.346990][ T798] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 722.347820][T17928] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 722.373564][ T55] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 722.379581][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 722.383938][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 722.414197][ T55] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 722.428473][ T55] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 722.433617][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 722.439047][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.514684][ T798] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 722.528408][ T798] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 722.542089][ T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.554715][ T55] usb 2-1: config 0 descriptor?? [ 722.569611][T18172] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 722.581391][ T798] usb 4-1: config 0 descriptor?? [ 722.583435][T17928] usb 1-1: Using ep0 maxpacket: 32 [ 722.602714][T17928] usb 1-1: config 208 has no interfaces? [ 722.616793][T17928] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 722.645049][T17928] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 722.747684][T17928] usb 1-1: Product: syz [ 722.795065][T17928] usb 1-1: Manufacturer: syz [ 722.803531][T18172] xt_nat: multiple ranges no longer supported [ 722.818753][T18189] xt_nat: multiple ranges no longer supported [ 722.825823][T17928] usb 1-1: SerialNumber: syz [ 722.935146][ T5927] usb 2-1: USB disconnect, device number 13 [ 722.946773][ T5145] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 722.990695][T18194] gretap0: refused to change device tx_queue_len [ 723.002410][T18194] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 723.041169][ T798] usbhid 4-1:0.0: can't add hid device: -71 [ 723.048292][ T798] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 723.103911][ T798] usb 4-1: USB disconnect, device number 51 [ 723.650151][ T55] usb 1-1: USB disconnect, device number 38 [ 724.056400][T18217] bridge0: entered promiscuous mode [ 724.113487][ T798] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 724.133508][ T5927] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 724.263463][ T798] usb 2-1: Using ep0 maxpacket: 16 [ 724.384077][ T798] usb 2-1: config 1 has an invalid interface number: 228 but max is 0 [ 724.446889][ T798] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.530484][ T798] usb 2-1: config 1 has no interface number 0 [ 724.537555][ T5927] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 724.547437][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.556200][ T798] usb 2-1: config 1 interface 228 altsetting 239 bulk endpoint 0xD has invalid maxpacket 1024 [ 724.567851][ T5927] usb 3-1: Product: syz [ 724.572203][ T5927] usb 3-1: Manufacturer: syz [ 724.577292][ T798] usb 2-1: config 1 interface 228 has no altsetting 0 [ 724.585171][ T5927] usb 3-1: SerialNumber: syz [ 724.595139][ T5927] usb 3-1: config 0 descriptor?? [ 724.606065][ T5927] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 724.640913][ T798] usb 2-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 724.657232][ T798] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 724.673760][ T798] usb 2-1: Product: syz [ 724.682424][ T798] usb 2-1: Manufacturer: syz [ 724.703249][ T798] usb 2-1: SerialNumber: syz [ 724.722602][T18208] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 724.763499][ T5902] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 724.933515][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 724.948924][ T5902] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 724.952400][T18230] netlink: 'syz.4.2665': attribute type 15 has an invalid length. [ 724.967654][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.971892][T18230] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2665'. [ 724.989054][ T5902] usb 1-1: Product: syz [ 724.999878][ T5902] usb 1-1: Manufacturer: syz [ 725.013554][T18209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.022893][T18209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.097773][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 725.104859][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2665'. [ 725.107732][ T5902] usb 1-1: SerialNumber: syz [ 725.141214][ T55] usb 3-1: USB disconnect, device number 83 [ 725.643553][ T55] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 725.793477][ T55] usb 5-1: device descriptor read/64, error -71 [ 726.053506][ T55] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 726.169288][ T5902] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 726.183575][ T55] usb 5-1: device descriptor read/64, error -71 [ 726.316448][ T55] usb usb5-port1: attempt power cycle [ 726.345831][ T5902] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 726.369521][ T5902] usb 1-1: USB disconnect, device number 39 [ 726.392166][ T8656] udevd[8656]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.593473][ T5927] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 726.673467][ T55] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 726.704144][ T55] usb 5-1: device descriptor read/8, error -71 [ 726.745550][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 726.771207][ T5927] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.794297][ T5927] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.805714][ T5927] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 726.953467][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 726.960482][ T5927] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 727.033223][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.043460][ T55] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 727.072642][ T55] usb 5-1: device descriptor read/8, error -71 [ 727.077885][ T5927] usb 4-1: config 0 descriptor?? [ 727.193888][ T55] usb usb5-port1: unable to enumerate USB device [ 727.253506][T17928] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 727.433722][T17928] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 727.463449][T17928] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 727.505271][T17928] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 727.539186][T17928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.753319][T18249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.944946][T18249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.960628][T18249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.972621][T18249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.985005][ T30] audit: type=1400 audit(1773408661.648:2410): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=18250 comm="syz.2.2673" [ 728.024338][T17928] usb 3-1: string descriptor 0 read error: -71 [ 728.038972][ T10] usb 4-1: USB disconnect, device number 52 [ 728.050523][T17928] hub 3-1:32.0: bad descriptor, ignoring hub [ 728.063513][T17928] hub 3-1:32.0: probe with driver hub failed with error -5 [ 728.194499][T17928] usb 3-1: USB disconnect, device number 84 [ 728.323464][ T5927] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 728.489087][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 728.501295][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 728.556616][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 728.674837][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 728.700505][ T5927] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 728.713184][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.776084][ T5927] usb 1-1: config 0 descriptor?? [ 728.819847][T18272] tipc: Failed to remove unknown binding: 66,1,1/0:762302706/762302708 [ 729.043471][T17928] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 729.090432][ T798] usb 2-1: USB disconnect, device number 14 [ 729.133922][ T10] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 729.224160][T17928] usb 4-1: Using ep0 maxpacket: 32 [ 729.231986][T17928] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 729.242102][T17928] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 729.251978][T17928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 729.261614][T17928] usb 4-1: config 1 has no interface number 0 [ 729.269549][T17928] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 729.283485][ T55] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 729.292981][T17928] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 729.294281][ T5927] plantronics 0003:047F:FFFF.0038: item fetching failed at offset 13/15 [ 729.310242][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 729.323301][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.342676][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 729.355102][T17928] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 729.355163][ T5927] plantronics 0003:047F:FFFF.0038: parse failed [ 729.371457][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 729.372423][ T5927] plantronics 0003:047F:FFFF.0038: probe with driver plantronics failed with error -22 [ 729.398933][T17928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.438190][ T55] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 729.449829][T17928] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 729.463273][ T55] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 729.483461][ T55] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 729.493735][ T798] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 729.520910][ T55] usb 3-1: string descriptor 0 read error: -22 [ 729.532792][ T55] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 729.553449][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.582397][ T55] adutux 3-1:168.0: interrupt endpoints not found [ 729.633116][T17928] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 729.643485][ T798] usb 2-1: Using ep0 maxpacket: 8 [ 729.657346][ T798] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 729.677639][ T798] usb 2-1: config 179 has no interface number 0 [ 729.685806][ T798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 729.703580][ T798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 729.776651][T17928] usb 3-1: USB disconnect, device number 85 [ 729.802982][ T798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 729.820245][ T798] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 729.841790][ T798] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 729.863718][ T798] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 729.878748][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.902946][T18276] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 730.043132][ T798] usb 4-1: USB disconnect, device number 53 [ 730.051192][ T798] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 730.124995][ T5895] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input88 [ 730.473255][T18277] syzkaller1: entered promiscuous mode [ 730.509429][T18277] syzkaller1: entered allmulticast mode [ 730.786785][T17928] usb 1-1: USB disconnect, device number 40 [ 730.853677][ T55] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 731.023654][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 731.031579][ T55] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 731.042479][ T55] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 731.055071][ T55] usb 3-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 731.065230][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.073693][ T55] usb 3-1: Product: syz [ 731.078359][ T55] usb 3-1: Manufacturer: syz [ 731.083192][ T55] usb 3-1: SerialNumber: syz [ 731.283475][T17928] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 731.333031][T18281] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 731.347288][T18281] block device autoloading is deprecated and will be removed. [ 731.369143][T18290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.379873][T18290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.437586][T17928] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 731.447119][T17928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.458270][T17928] usb 1-1: Product: syz [ 731.462662][T17928] usb 1-1: Manufacturer: syz [ 731.467337][T17928] usb 1-1: SerialNumber: syz [ 731.476133][T17928] usb 1-1: config 0 descriptor?? [ 731.486728][T17928] ch341 1-1:0.0: ch341-uart converter detected [ 731.583056][ T10] usb 5-1: string descriptor 0 read error: -71 [ 731.589871][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.599298][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.611149][ T10] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 731.629190][ T10] usb 5-1: no configuration chosen from 1 choice [ 731.665089][ T10] usb 5-1: USB disconnect, device number 101 [ 731.689244][T17928] usb 1-1: failed to receive control message: -121 [ 731.699585][T17928] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 732.033722][T17928] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 732.307806][T17928] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 732.329351][T17928] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 732.380883][T17928] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 732.394899][T17928] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 732.416735][T17928] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 732.427837][T17928] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 732.472634][T17928] usb 4-1: string descriptor 0 read error: -22 [ 732.479487][T17928] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 732.489314][T17928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.519116][ T5895] usb 2-1: USB disconnect, device number 15 [ 732.519175][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 732.519219][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 732.520517][T17928] usb 4-1: rejected 3 configurations due to insufficient available bus power [ 732.555458][T17928] usb 4-1: no configuration chosen from 3 choices [ 733.163494][ T5895] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 733.315466][ T5895] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 733.448902][ T5895] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 733.465636][ T5895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 733.481033][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.498089][T18309] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 733.564418][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 733.575457][ T55] usb 3-1: USB disconnect, device number 86 [ 733.788645][ T5895] usb 2-1: USB disconnect, device number 16 [ 733.993569][ T5927] usb 1-1: USB disconnect, device number 41 [ 734.003613][ T5927] ch341 1-1:0.0: device disconnected [ 734.419497][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2698'. [ 734.489148][T18339] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 734.495808][T18339] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 734.519393][T18339] vhci_hcd vhci_hcd.0: Device attached [ 734.537313][T18342] vhci_hcd: connection closed [ 734.539047][ T147] vhci_hcd vhci_hcd.2: stop threads [ 734.563461][ T147] vhci_hcd vhci_hcd.2: release socket [ 734.572611][ T147] vhci_hcd vhci_hcd.2: disconnect device [ 734.585610][T18336] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 734.796668][ T55] usb 4-1: USB disconnect, device number 54 [ 734.952034][T18348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.994729][T18348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.253783][ T55] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 735.443493][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 735.451230][ T55] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 735.523537][T18363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2703'. [ 735.591406][ T55] usb 4-1: config 0 has no interface number 0 [ 735.603576][ T55] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 735.689038][ T55] usb 4-1: config 0 interface 89 has no altsetting 0 [ 735.711003][ T55] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 735.721177][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.731941][ T55] usb 4-1: Product: syz [ 735.737641][ T55] usb 4-1: Manufacturer: syz [ 735.746775][ T55] usb 4-1: SerialNumber: syz [ 735.760372][ T55] usb 4-1: config 0 descriptor?? [ 735.854335][ T55] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 735.864690][ T55] em28xx 4-1:0.89: Video interface 89 found: [ 736.563759][ T55] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 736.636126][ T55] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 736.645238][ T55] em28xx 4-1:0.89: board has no eeprom [ 736.703469][ T55] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 736.716658][ T55] em28xx 4-1:0.89: analog set to bulk mode. [ 736.731355][T17928] em28xx 4-1:0.89: Registering V4L2 extension [ 736.754649][ T55] usb 4-1: USB disconnect, device number 55 [ 736.778118][ T55] em28xx 4-1:0.89: Disconnecting em28xx [ 736.891453][T17928] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 736.899375][T17928] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 736.907133][T17928] em28xx 4-1:0.89: No AC97 audio processor [ 736.918957][T17928] usb 4-1: Decoder not found [ 736.925672][T17928] em28xx 4-1:0.89: failed to create media graph [ 736.937735][T17928] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 736.949157][T17928] em28xx 4-1:0.89: Registering snapshot button... [ 736.953731][ T5927] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 736.978119][T17928] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input89 [ 736.993207][T17928] em28xx 4-1:0.89: Remote control support is not available for this card. [ 737.006696][ T55] em28xx 4-1:0.89: Closing input extension [ 737.012833][ T55] em28xx 4-1:0.89: Deregistering snapshot button [ 737.038622][ T55] em28xx 4-1:0.89: Freeing device [ 737.127037][ T5927] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 737.155490][ T5927] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 737.180223][ T5927] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 737.202465][ T5927] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 737.213840][ T5927] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 737.224893][ T5927] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 737.240670][ T5927] usb 2-1: string descriptor 0 read error: -22 [ 737.254135][ T5927] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 737.263837][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.284804][ T5927] usb 2-1: rejected 3 configurations due to insufficient available bus power [ 737.294185][ T5927] usb 2-1: no configuration chosen from 3 choices [ 737.576174][T18403] SET target dimension over the limit! [ 737.733489][ T55] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 737.903529][ T798] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 737.983449][ T55] usb 4-1: device descriptor read/64, error -71 [ 738.053448][ T798] usb 3-1: Using ep0 maxpacket: 8 [ 738.063036][ T798] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 738.084060][ T798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.144159][ T798] usb 3-1: config 0 has no interface number 0 [ 738.150435][ T798] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 738.162482][ T798] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.188852][ T798] usb 3-1: config 0 interface 52 has no altsetting 0 [ 738.202751][ T798] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 738.222184][ T798] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 738.241067][ T798] usb 3-1: Manufacturer: syz [ 738.259542][ T798] usb 3-1: config 0 descriptor?? [ 738.278800][ T798] hub 3-1:0.52: bad descriptor, ignoring hub [ 738.283853][ T55] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 738.303400][ T798] hub 3-1:0.52: probe with driver hub failed with error -5 [ 738.443790][ T55] usb 4-1: device descriptor read/64, error -71 [ 738.511713][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2718'. [ 738.551110][ T798] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input90 [ 738.591594][ T55] usb usb4-port1: attempt power cycle [ 738.876333][ T10] usb 3-1: USB disconnect, device number 87 [ 738.953483][ T55] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 738.980187][T18418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.087893][ T55] usb 4-1: device descriptor read/8, error -71 [ 739.406368][ T55] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 739.434113][ T55] usb 4-1: device descriptor read/8, error -71 [ 739.551829][ T55] usb usb4-port1: unable to enumerate USB device [ 739.742618][ T5927] usb 2-1: USB disconnect, device number 17 [ 740.609526][T18440] syz.1.2725 (18440): drop_caches: 2 [ 741.236236][ T5888] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 741.355747][ T798] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 741.368464][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2738'. [ 741.405541][ T5888] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 741.423439][ T5888] usb 3-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 741.454988][ T5888] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 741.472399][ T5888] usb 3-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 741.484256][ T5888] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 741.495722][ T5888] usb 3-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 741.509096][ T5888] usb 3-1: string descriptor 0 read error: -22 [ 741.517176][ T5888] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 741.527541][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.536579][ T798] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 741.545123][ T5888] usb 3-1: rejected 3 configurations due to insufficient available bus power [ 741.568813][ T798] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 741.571418][ T5888] usb 3-1: no configuration chosen from 3 choices [ 741.603493][ T798] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 741.624070][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.635175][T18473] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 741.652180][ T798] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 741.683480][ T5927] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 741.747946][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 741.813977][T18493] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2740'. [ 741.835002][ T5927] usb 5-1: device descriptor read/64, error -71 [ 742.058541][ T30] audit: type=1326 audit(1773408675.748:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fb9c799 code=0x7ffc0000 [ 742.114096][ T5927] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 742.139936][T18493] vlan0: entered allmulticast mode [ 742.145305][T18493] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 742.289226][ T30] audit: type=1326 audit(1773408675.748:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fb9c799 code=0x7ffc0000 [ 742.290311][ T5888] usb 2-1: USB disconnect, device number 18 [ 742.312959][ T30] audit: type=1326 audit(1773408675.748:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fdb2fb9c799 code=0x7ffc0000 [ 742.343509][ T5927] usb 5-1: device descriptor read/64, error -71 [ 742.363966][T18503] program syz.3.2741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 742.384895][ T30] audit: type=1326 audit(1773408675.748:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fb9c799 code=0x7ffc0000 [ 742.420240][ T30] audit: type=1326 audit(1773408675.748:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb2fb9c799 code=0x7ffc0000 [ 742.467752][ T5927] usb usb5-port1: attempt power cycle [ 742.595087][ T30] audit: type=1326 audit(1773408675.748:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fb9c799 code=0x7ffc0000 [ 742.673592][ T30] audit: type=1326 audit(1773408675.748:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fb9c799 code=0x7ffc0000 [ 742.704238][ T30] audit: type=1326 audit(1773408675.748:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdb2fb9c799 code=0x7ffc0000 [ 742.935802][ T5927] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 742.988395][ T5927] usb 5-1: device descriptor read/8, error -71 [ 743.012418][ T30] audit: type=1326 audit(1773408675.748:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2fb9c799 code=0x7ffc0000 [ 743.065619][ T30] audit: type=1326 audit(1773408675.748:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18495 comm="syz.3.2741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb2fb9c799 code=0x7ffc0000 [ 743.274616][ T5927] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 743.333849][ T5927] usb 5-1: device descriptor read/8, error -71 [ 743.443856][ T5927] usb usb5-port1: unable to enumerate USB device [ 743.488537][ T5902] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 743.603677][ T5927] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 743.623452][ T5902] usb 2-1: device descriptor read/64, error -71 [ 743.763529][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 743.770949][ T5927] usb 4-1: config 250 has an invalid interface number: 8 but max is 0 [ 743.780558][ T5927] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 743.791768][ T5927] usb 4-1: config 250 has no interface number 0 [ 743.798225][ T5927] usb 4-1: config 250 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 743.812445][ T5927] usb 4-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9 [ 743.822139][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.863602][ T5902] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 743.939670][T17928] usb 3-1: USB disconnect, device number 88 [ 743.994344][ T5902] usb 2-1: device descriptor read/64, error -71 [ 744.036115][ T5927] usb 4-1: string descriptor 0 read error: -71 [ 744.047315][ T5927] uvcvideo 4-1:250.8: Found Unit with invalid ID 0 [ 744.054574][ T5927] uvcvideo 4-1:250.8: Found UVC 0.00 device (0ac8:3410) [ 744.062827][ T5927] uvcvideo 4-1:250.8: No valid video chain found. [ 744.071816][ T5927] usb 4-1: USB disconnect, device number 60 [ 744.104420][ T5902] usb usb2-port1: attempt power cycle [ 744.354024][T17928] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 744.369156][T18521] FAULT_INJECTION: forcing a failure. [ 744.369156][T18521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.384336][T18521] CPU: 0 UID: 0 PID: 18521 Comm: syz.0.2748 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.384364][T18521] Tainted: [L]=SOFTLOCKUP [ 744.384371][T18521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 744.384381][T18521] Call Trace: [ 744.384388][T18521] [ 744.384397][T18521] dump_stack_lvl+0xe8/0x150 [ 744.384426][T18521] should_fail_ex+0x412/0x560 [ 744.384453][T18521] _copy_to_user+0x31/0xb0 [ 744.384474][T18521] simple_read_from_buffer+0xe1/0x170 [ 744.384502][T18521] proc_fail_nth_read+0x1bb/0x230 [ 744.384527][T18521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.384552][T18521] ? rw_verify_area+0x2a6/0x4d0 [ 744.384570][T18521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.384596][T18521] vfs_read+0x20c/0xa70 [ 744.384612][T18521] ? fdget_pos+0x246/0x320 [ 744.384642][T18521] ? __pfx___mutex_lock+0x10/0x10 [ 744.384663][T18521] ? __pfx_vfs_read+0x10/0x10 [ 744.384683][T18521] ? __fget_files+0x2a/0x420 [ 744.384710][T18521] ? __fget_files+0x3a0/0x420 [ 744.384733][T18521] ? __fget_files+0x2a/0x420 [ 744.384765][T18521] ksys_read+0x150/0x270 [ 744.384787][T18521] ? __pfx_ksys_read+0x10/0x10 [ 744.384813][T18521] do_syscall_64+0x14d/0xf80 [ 744.384830][T18521] ? trace_irq_disable+0x3b/0x150 [ 744.384852][T18521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.384870][T18521] ? clear_bhb_loop+0x40/0x90 [ 744.384890][T18521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.384907][T18521] RIP: 0033:0x7f08b115cfce [ 744.384923][T18521] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 744.384937][T18521] RSP: 002b:00007f08b20c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 744.384954][T18521] RAX: ffffffffffffffda RBX: 00007f08b20c16c0 RCX: 00007f08b115cfce [ 744.384961][T18521] RDX: 000000000000000f RSI: 00007f08b20c10a0 RDI: 0000000000000004 [ 744.384968][T18521] RBP: 00007f08b20c1090 R08: 0000000000000000 R09: 0000000000000000 [ 744.384974][T18521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.384980][T18521] R13: 00007f08b1416038 R14: 00007f08b1415fa0 R15: 00007f08b153fa48 [ 744.384996][T18521] [ 744.443608][ T5902] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 744.556145][T17928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.618718][ T5902] usb 2-1: device descriptor read/8, error -71 [ 744.629096][T17928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.697656][T17928] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 744.713091][T17928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.732258][T17928] usb 3-1: config 0 descriptor?? [ 744.883607][ T5902] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 744.889239][T18528] syzkaller0: entered promiscuous mode [ 744.906264][T18529] usb usb8: usbfs: process 18529 (syz.3.2750) did not claim interface 0 before use [ 744.917856][ T5902] usb 2-1: device descriptor read/8, error -71 [ 744.918804][T18528] syzkaller0: entered allmulticast mode [ 744.924709][ T5927] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 744.972580][T17928] usbhid 3-1:0.0: can't add hid device: -71 [ 744.987653][T17928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 745.012945][T17928] usb 3-1: USB disconnect, device number 89 [ 745.044156][ T5902] usb usb2-port1: unable to enumerate USB device [ 745.114213][ T5927] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 745.133820][T18537] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2752'. [ 745.133855][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.156328][ T5927] usb 1-1: config 0 descriptor?? [ 745.180151][ T5927] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 745.463463][T17928] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 745.601104][ T5927] gp8psk: usb in 137 operation failed. [ 745.616057][ T5927] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 745.640273][ T5927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 745.674828][T17928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.683684][ T5927] usb 1-1: USB disconnect, device number 42 [ 745.686300][T17928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.736447][T17928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 745.763143][T17928] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 745.773563][T17928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.799079][T17928] usb 3-1: config 0 descriptor?? [ 746.227144][T17928] nti 0003:0757:0A00.0039: unknown main item tag 0x0 [ 746.234446][T17928] nti 0003:0757:0A00.0039: unknown main item tag 0x0 [ 746.253015][T17928] nti 0003:0757:0A00.0039: unknown main item tag 0x0 [ 746.261827][T17928] nti 0003:0757:0A00.0039: unknown main item tag 0x0 [ 746.269064][T17928] nti 0003:0757:0A00.0039: unknown main item tag 0x0 [ 746.290947][T17928] nti 0003:0757:0A00.0039: unknown main item tag 0x0 [ 746.300388][T17928] nti 0003:0757:0A00.0039: unknown main item tag 0x0 [ 746.307437][T17928] nti 0003:0757:0A00.0039: unknown main item tag 0x0 [ 746.356600][T17928] nti 0003:0757:0A00.0039: unknown main item tag 0x0 [ 746.365411][T17928] nti 0003:0757:0A00.0039: unknown main item tag 0x0 [ 746.426783][T17928] nti 0003:0757:0A00.0039: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.2-1/input0 [ 746.439443][T18537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.448930][T18537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.559771][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'. [ 746.703981][T18553] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 746.753897][ T5902] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 746.951536][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 747.004730][ T5902] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 747.014947][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.023820][ T5902] usb 1-1: Product: syz [ 747.028349][ T5902] usb 1-1: Manufacturer: syz [ 747.038463][ T5902] usb 1-1: SerialNumber: syz [ 747.069034][ T5902] usb 1-1: config 0 descriptor?? [ 747.247752][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.254566][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.402450][ T5902] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 747.500138][ T5888] usb 3-1: USB disconnect, device number 90 [ 747.669997][T18556] use of bytesused == 0 is deprecated and will be removed in the future, [ 747.709948][T18556] use the actual size instead. [ 748.466329][ T5902] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 749.318373][T17928] usb 1-1: USB disconnect, device number 43 [ 751.201027][T18572] netlink: 'syz.1.2759': attribute type 15 has an invalid length. [ 751.220016][T18572] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2759'. [ 751.440259][T18592] input: syz0 as /devices/virtual/input/input91 [ 751.463467][T17928] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 751.625372][T17928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.637021][ T55] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 751.643465][ T5902] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 751.723888][T17928] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 751.733175][T17928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.752237][T17928] usb 2-1: config 0 descriptor?? [ 751.853478][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 751.863769][ T5902] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.874999][ T5902] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.894234][ T5902] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 751.905283][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 751.917636][ T55] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.917713][ T5902] usb 1-1: SerialNumber: syz [ 751.935450][ T55] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.949564][ T5902] usb 1-1: 0:2 : does not exist [ 751.970927][ T55] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 752.003523][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 752.011568][ T55] usb 5-1: SerialNumber: syz [ 752.160038][ T5902] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 752.186102][T18597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.214904][T18597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.223031][ T5902] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 752.263847][ T5902] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 752.296019][T17928] usbhid 2-1:0.0: can't add hid device: -71 [ 752.313713][T17928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 752.322393][ T5902] usb 1-1: USB disconnect, device number 44 [ 752.324875][T17928] usb 2-1: USB disconnect, device number 23 [ 752.374661][ T55] usb 5-1: 0:2 : does not exist [ 752.477932][ T55] usb 5-1: USB disconnect, device number 106 [ 752.585537][ T8656] udevd[8656]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 752.863716][ T55] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 752.923682][ T5927] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 752.973499][T17928] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 753.023473][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 753.030486][ T55] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.041667][ T55] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.051876][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 753.059014][ T55] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 753.064097][ T5927] usb 3-1: device descriptor read/64, error -71 [ 753.068395][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.101632][ T55] usb 4-1: config 0 descriptor?? [ 753.123509][ T5902] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 753.145031][T17928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.155689][T17928] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 753.165192][T17928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.176583][T17928] usb 1-1: config 0 descriptor?? [ 753.195784][T17928] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 753.240049][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 753.240063][ T30] audit: type=1326 audit(1773408686.918:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 753.274598][ T30] audit: type=1326 audit(1773408686.918:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 753.337904][ T30] audit: type=1326 audit(1773408686.918:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 753.373136][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.383713][ T5927] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 753.397639][T18609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.402043][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 753.420433][ T30] audit: type=1326 audit(1773408686.928:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 753.422702][ T5902] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 753.445425][T18609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.478840][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.487805][ T5902] usb 5-1: Product: syz [ 753.489825][T18609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.495465][ T5902] usb 5-1: Manufacturer: syz [ 753.501707][ T30] audit: type=1326 audit(1773408686.928:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 753.506933][ T5902] usb 5-1: SerialNumber: syz [ 753.536800][ T5927] usb 3-1: device descriptor read/64, error -71 [ 753.537621][T18609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.588768][ T30] audit: type=1326 audit(1773408686.928:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 753.618721][ T5888] usb 1-1: USB disconnect, device number 45 [ 753.625698][ T5902] usb 5-1: config 0 descriptor?? [ 753.640506][ T5902] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 753.641150][ T30] audit: type=1326 audit(1773408686.928:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 753.653904][ T5927] usb usb3-port1: attempt power cycle [ 753.677058][ T30] audit: type=1326 audit(1773408686.928:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 753.704367][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 753.716358][ T5902] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 753.727662][ T5902] usb 5-1: media controller created [ 753.744185][ T30] audit: type=1326 audit(1773408686.928:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 753.869321][ T55] usbhid 4-1:0.0: can't add hid device: -71 [ 753.876520][ T55] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 753.919170][ T55] usb 4-1: USB disconnect, device number 61 [ 753.926738][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 753.978678][ T30] audit: type=1326 audit(1773408686.928:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18612 comm="syz.1.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 754.061895][ T5902] DVB: Unable to find symbol tda10046_attach() [ 754.068227][ T5927] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 754.076083][ T5902] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 754.085471][ T5902] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 754.104035][ T5927] usb 3-1: device descriptor read/8, error -71 [ 754.153727][ T798] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 754.303234][ T5902] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 754.320908][ T798] usb 1-1: Using ep0 maxpacket: 8 [ 754.341755][ T798] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 754.350155][ T5927] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 754.359861][ T5902] usb 5-1: USB disconnect, device number 107 [ 754.370798][ T798] usb 1-1: config 0 has no interface number 0 [ 754.379692][ T5927] usb 3-1: device descriptor read/8, error -71 [ 754.397180][ T798] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 754.414882][ T798] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 754.434782][ T798] usb 1-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 754.444945][ T798] usb 1-1: config 0 interface 1 has no altsetting 0 [ 754.453502][ T798] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 754.462764][ T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.486648][ T798] usb 1-1: config 0 descriptor?? [ 754.493711][ T5927] usb usb3-port1: unable to enumerate USB device [ 754.504571][ T798] hso 1-1:0.1: Failed to find BULK OUT ep [ 754.760097][T18629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.763823][T18629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.798472][ T55] usb 1-1: USB disconnect, device number 46 [ 755.003448][T17928] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 755.133678][T17928] usb 4-1: device descriptor read/64, error -71 [ 755.378587][T17928] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 755.524881][T17928] usb 4-1: device descriptor read/64, error -71 [ 755.633981][T17928] usb usb4-port1: attempt power cycle [ 755.922826][T18641] fuse: Bad value for 'user_id' [ 755.943534][T18641] fuse: Bad value for 'user_id' [ 755.983469][T17928] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 756.011944][T17928] usb 4-1: device descriptor read/8, error -71 [ 756.344732][T17928] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 756.374224][T17928] usb 4-1: device descriptor read/8, error -71 [ 756.483695][T17928] usb usb4-port1: unable to enumerate USB device [ 756.709978][T18652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2781'. [ 757.113508][ T5927] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 757.374433][ T5927] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 757.388799][ T5927] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 757.407319][ T5927] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 757.420458][ T5927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 757.452817][ T5927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 757.466763][ T5927] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 757.484430][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 757.492870][ T5927] usb 1-1: Product: syz [ 757.497682][ T5927] usb 1-1: Manufacturer: syz [ 757.522824][ T5927] cdc_wdm 1-1:1.0: skipping garbage [ 757.529333][ T5927] cdc_wdm 1-1:1.0: skipping garbage [ 757.536994][ T5927] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 757.543833][ T5927] cdc_wdm 1-1:1.0: Unknown control protocol [ 757.723603][ T55] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 757.730393][T18657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.753867][T18657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.764040][T18657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.790673][T18657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.877912][ T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.889369][ T55] usb 3-1: config 0 has no interfaces? [ 757.907699][ T55] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 757.927255][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.074389][ T55] usb 3-1: config 0 descriptor?? [ 758.198088][T18681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2786'. [ 758.214611][T18681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2786'. [ 758.260765][T18684] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 758.275715][T18684] batman_adv: batadv0: Adding interface: ip6gretap3 [ 758.282633][T18684] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.324346][T18684] batman_adv: batadv0: Interface activated: ip6gretap3 [ 758.877635][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2793'. [ 758.894018][T18697] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 758.905150][T18697] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 759.827396][ T5927] usb 1-1: USB disconnect, device number 47 [ 760.171379][T18719] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2801'. [ 760.181262][T18719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2801'. [ 760.243695][ T5927] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 760.384519][ T5927] usb 1-1: device descriptor read/64, error -71 [ 760.387486][ T55] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 760.546135][ T55] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 234, changing to 11 [ 760.557592][ T55] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 217, changing to 11 [ 760.569238][ T55] usb 4-1: config 1 interface 0 has no altsetting 0 [ 760.581557][ T55] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 760.592931][T18726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.600202][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.613986][ T55] usb 4-1: Product: ̳粢푑춶佹⇁ꑝⅢ륤鑪橝틔Ủ䗶䟅柲䑱갠䵵琮鹌酒롽ሒꀺ龜钨ᇺ宨륵컬듣⪖ꠣ鲷sᲑ㮅䨧搂抩죄Ž璽ܳ牚举闕ꁹ뗥ꣅ籾俦琢愴钸鈢 [ 760.636058][ T55] usb 4-1: Manufacturer: Ч [ 760.640863][T18726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 760.644221][ T55] usb 4-1: SerialNumber: syz [ 760.657116][ T5927] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 760.825771][ T5927] usb 1-1: device descriptor read/64, error -71 [ 760.879229][T17928] usb 3-1: USB disconnect, device number 95 [ 760.907883][T18731] FAULT_INJECTION: forcing a failure. [ 760.907883][T18731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.925327][T18731] CPU: 1 UID: 0 PID: 18731 Comm: syz.4.2804 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.925356][T18731] Tainted: [L]=SOFTLOCKUP [ 760.925363][T18731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 760.925374][T18731] Call Trace: [ 760.925382][T18731] [ 760.925392][T18731] dump_stack_lvl+0xe8/0x150 [ 760.925425][T18731] should_fail_ex+0x412/0x560 [ 760.925456][T18731] _copy_to_user+0x31/0xb0 [ 760.925478][T18731] simple_read_from_buffer+0xe1/0x170 [ 760.925509][T18731] proc_fail_nth_read+0x1bb/0x230 [ 760.925536][T18731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.925560][T18731] ? rw_verify_area+0x2a6/0x4d0 [ 760.925580][T18731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.925607][T18731] vfs_read+0x20c/0xa70 [ 760.925624][T18731] ? fdget_pos+0x246/0x320 [ 760.925661][T18731] ? __pfx___mutex_lock+0x10/0x10 [ 760.925685][T18731] ? __pfx_vfs_read+0x10/0x10 [ 760.925707][T18731] ? __fget_files+0x2a/0x420 [ 760.925764][T18731] ? __fget_files+0x3a0/0x420 [ 760.925789][T18731] ? __fget_files+0x2a/0x420 [ 760.925821][T18731] ksys_read+0x150/0x270 [ 760.925842][T18731] ? __pfx_ksys_read+0x10/0x10 [ 760.925875][T18731] ? handle_softirqs+0x73c/0x870 [ 760.925908][T18731] do_syscall_64+0x14d/0xf80 [ 760.925927][T18731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.925947][T18731] ? clear_bhb_loop+0x40/0x90 [ 760.925968][T18731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.925986][T18731] RIP: 0033:0x7f8b5ed5cfce [ 760.926003][T18731] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 760.926019][T18731] RSP: 002b:00007f8b5fd23fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 760.926039][T18731] RAX: ffffffffffffffda RBX: 00007f8b5fd246c0 RCX: 00007f8b5ed5cfce [ 760.926067][T18731] RDX: 000000000000000f RSI: 00007f8b5fd240a0 RDI: 0000000000000004 [ 760.926079][T18731] RBP: 00007f8b5fd24090 R08: 0000000000000000 R09: 0000000000000000 [ 760.926091][T18731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.926102][T18731] R13: 00007f8b5f016038 R14: 00007f8b5f015fa0 R15: 00007f8b5f13fa48 [ 760.926131][T18731] [ 761.185558][ T5927] usb usb1-port1: attempt power cycle [ 761.302082][T18739] netlink: 'syz.1.2807': attribute type 10 has an invalid length. [ 761.474123][T18739] 8021q: adding VLAN 0 to HW filter on device ` [ 761.486562][T18739] `: Device macvlan0 failed to change mtu [ 761.533526][ T5927] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 761.593752][ T5927] usb 1-1: device descriptor read/8, error -71 [ 761.747478][T18755] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2811'. [ 761.843693][ T5927] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 761.885280][ T5927] usb 1-1: device descriptor read/8, error -71 [ 761.993988][ T5927] usb usb1-port1: unable to enumerate USB device [ 762.105202][T17928] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 762.136343][T18768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.263670][T17928] usb 5-1: Using ep0 maxpacket: 32 [ 762.271517][T17928] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 762.285197][T17928] usb 5-1: config 0 has no interface number 0 [ 762.326576][T17928] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 762.376550][T17928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.440248][T17928] usb 5-1: Product: syz [ 762.476753][T17928] usb 5-1: Manufacturer: syz [ 762.501810][T17928] usb 5-1: SerialNumber: syz [ 762.522810][T17928] usb 5-1: config 0 descriptor?? [ 762.578892][T18788] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2817'. [ 762.589603][T18788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2817'. [ 762.615835][T18788] team0: Device gtp0 is of different type [ 762.938594][T17928] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 762.953857][T17928] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 763.182740][ T55] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input93 [ 763.268239][ T55] usb 4-1: USB disconnect, device number 66 [ 763.274871][ T5179] bcm5974 4-1:1.0: could not read from device [ 763.410762][ T8567] udevd[8567]: Error opening device "/dev/input/event4": No such file or directory [ 763.453715][ T8567] udevd[8567]: Unable to EVIOCGABS device "/dev/input/event4" [ 763.490896][ T8567] udevd[8567]: Unable to EVIOCGABS device "/dev/input/event4" [ 763.501970][ T8567] udevd[8567]: Unable to EVIOCGABS device "/dev/input/event4" [ 763.521207][ T8567] udevd[8567]: Unable to EVIOCGABS device "/dev/input/event4" [ 764.848817][T17928] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 764.860074][T17928] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 764.884957][T17928] usb 5-1: USB disconnect, device number 108 [ 765.087604][T18811] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 765.094347][T18811] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 765.103488][T18811] vhci_hcd vhci_hcd.0: Device attached [ 765.122540][T18811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2822'. [ 765.132295][T18811] netlink: 'syz.0.2822': attribute type 2 has an invalid length. [ 765.140518][T18811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2822'. [ 765.423600][ T55] usb 34-1: SetAddress Request (6) to port 0 [ 765.430078][ T55] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 765.837001][ T10] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 765.933587][ T5881] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 766.006431][ T10] usb 5-1: config 0 has an invalid interface number: 238 but max is 0 [ 766.015629][ T10] usb 5-1: config 0 has no interface number 0 [ 766.024218][ T10] usb 5-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 766.057794][ T10] usb 5-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 766.095037][ T5881] usb 3-1: too many configurations: 47, using maximum allowed: 8 [ 766.125103][ T10] usb 5-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 766.160574][ T10] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 766.172279][ T5881] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 766.193441][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.202020][ T10] usb 5-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 766.211168][ T5881] usb 3-1: Product: syz [ 766.220076][ T10] usb 5-1: Product: syz [ 766.224432][ T5881] usb 3-1: Manufacturer: syz [ 766.232861][ T10] usb 5-1: Manufacturer: syz [ 766.239157][ T5881] usb 3-1: SerialNumber: syz [ 766.250958][ T10] usb 5-1: SerialNumber: syz [ 766.331885][ T10] usb 5-1: config 0 descriptor?? [ 766.429451][ T10] ni6501 5-1:0.238: driver 'ni6501' failed to auto-configure device. [ 766.445409][ T5881] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 766.503805][ T5888] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 766.672339][T17293] usb 5-1: USB disconnect, device number 109 [ 766.721878][T18822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2826'. [ 767.871166][T18812] vhci_hcd: connection reset by peer [ 767.878741][T10829] vhci_hcd vhci_hcd.0: stop threads [ 767.886121][ T5888] usb 3-1: Service connection timeout for: 256 [ 767.892640][ T5888] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 767.916567][T10829] vhci_hcd vhci_hcd.0: release socket [ 767.924262][T10829] vhci_hcd vhci_hcd.0: disconnect device [ 767.961689][ T5888] ath9k_htc: Failed to initialize the device [ 767.978555][ T5888] usb 3-1: ath9k_htc: USB layer deinitialized [ 768.233845][T17928] usb 3-1: USB disconnect, device number 96 [ 768.613454][ T5927] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 768.753561][T17293] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 768.774760][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.793457][ T5927] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.805058][ T5927] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 768.832381][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.876469][ T5927] usb 2-1: config 0 descriptor?? [ 769.053481][T17293] usb 1-1: Using ep0 maxpacket: 16 [ 769.062195][T17293] usb 1-1: unable to get BOS descriptor or descriptor too short [ 769.072949][T17293] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 769.096102][T17293] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 769.107082][T17293] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 769.117773][T17293] usb 1-1: config 1 interface 0 has no altsetting 0 [ 769.129223][T17293] usb 1-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 769.139973][T17293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.152546][T17293] usb 1-1: Product: syz [ 769.157312][T17293] usb 1-1: Manufacturer: syz [ 769.166339][T17293] usb 1-1: SerialNumber: syz [ 769.181106][T18846] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 769.311582][T18860] x_tables: duplicate underflow at hook 3 [ 769.582190][T17293] usb 1-1: bad CDC descriptors [ 769.590330][T17293] usb 1-1: USB disconnect, device number 52 [ 769.796402][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 769.963641][ T798] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 770.114313][ T798] usb 5-1: Using ep0 maxpacket: 8 [ 770.122369][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 770.139175][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.161937][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 770.193205][ T798] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 770.203518][T17928] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 770.213094][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.223210][ T798] usb 5-1: Product: syz [ 770.231733][ T798] usb 5-1: Manufacturer: syz [ 770.236655][ T798] usb 5-1: SerialNumber: syz [ 770.256213][ T798] usb 5-1: config 0 descriptor?? [ 770.358093][T17928] usb 4-1: Using ep0 maxpacket: 32 [ 770.375072][T17928] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 770.390001][T17928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 770.407037][T17928] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 770.427839][T17928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.450289][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'. [ 770.453842][T17928] usb 4-1: config 0 descriptor?? [ 770.524394][ T55] usb 34-1: device descriptor read/8, error -110 [ 770.616091][T18897] usb usb8: usbfs: process 18897 (syz.0.2847) did not claim interface 0 before use [ 770.922902][T17928] corsair-cpro 0003:1B1C:0C10.003A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 770.936749][T18906] Invalid argument reading file caps for ./file0 [ 770.944419][ T55] usb usb34-port1: attempt power cycle [ 770.954191][ T5881] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 770.982454][T18906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2850'. [ 771.129210][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.142815][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.154372][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 771.174090][ T5881] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.186933][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.205295][ T5881] usb 3-1: config 0 descriptor?? [ 771.285704][T17928] corsair-cpro 0003:1B1C:0C10.003A: probe with driver corsair-cpro failed with error -71 [ 771.316605][T17928] usb 4-1: USB disconnect, device number 67 [ 771.376083][ T798] usb 2-1: USB disconnect, device number 24 [ 771.443496][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 771.501940][T18918] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2853'. [ 771.522571][T18919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 771.523197][ T55] usb usb34-port1: unable to enumerate USB device [ 771.617018][ T10] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 771.627722][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.641894][ T5881] plantronics 0003:047F:FFFF.003B: reserved main item tag 0xd [ 771.675129][ T10] usb 1-1: config 0 has no interface number 0 [ 771.681467][ T10] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 771.707707][ T5881] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 771.723070][ T10] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.777899][ T10] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 771.797474][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.822433][ T10] usb 1-1: Product: syz [ 771.833395][ T10] usb 1-1: Manufacturer: syz [ 771.838151][ T10] usb 1-1: SerialNumber: syz [ 771.866830][ T10] usb 1-1: config 0 descriptor?? [ 772.093722][T18909] syzkaller0: entered promiscuous mode [ 772.099250][T18909] syzkaller0: entered allmulticast mode [ 772.133479][ T10] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 772.168126][ T10] usb 1-1: USB disconnect, device number 53 [ 772.432389][T18938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.460417][T18938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.508236][T18936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.541855][T18936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.756828][ T798] usb 5-1: USB disconnect, device number 110 [ 773.282619][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 773.282639][ T30] audit: type=1400 audit(1773408706.988:2467): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=18941 comm="syz.0.2859" [ 773.316562][T18947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2859'. [ 773.326545][T18947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2859'. [ 773.423690][ T5927] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 773.653628][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 773.665934][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 773.681965][ T5927] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 773.691628][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.700183][ T5927] usb 2-1: Product: syz [ 773.705038][ T5927] usb 2-1: Manufacturer: syz [ 773.718684][ T5927] usb 2-1: SerialNumber: syz [ 773.734454][ T5927] usb 2-1: config 0 descriptor?? [ 773.772755][ T5927] hub 2-1:0.0: bad descriptor, ignoring hub [ 773.804849][ T5927] hub 2-1:0.0: probe with driver hub failed with error -5 [ 773.838033][ T5927] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 773.960532][ T5881] usb 3-1: USB disconnect, device number 97 [ 773.977111][T18942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.991712][T18959] trusted_key: encrypted_key: keyword 'ew' not recognized [ 774.017973][T18942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.091340][T18942] kvm: kvm [18940]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 774.129740][T18942] kvm: kvm [18940]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 774.303431][ T5881] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 774.504405][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 774.514450][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 774.537096][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.553572][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.565832][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 774.576778][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.611676][ T5881] usb 5-1: Product: syz [ 774.619637][ T5881] usb 5-1: Manufacturer: syz [ 774.626750][ T5881] usb 5-1: SerialNumber: syz [ 774.684896][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 774.694998][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 774.713723][ T10] usb 4-1: config 0 has no interface number 0 [ 774.752680][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 774.777398][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.794621][ T10] usb 4-1: Product: syz [ 774.803715][ T10] usb 4-1: Manufacturer: syz [ 774.808591][ T10] usb 4-1: SerialNumber: syz [ 774.837465][ T10] usb 4-1: config 0 descriptor?? [ 774.850380][T17293] usb 2-1: USB disconnect, device number 25 [ 774.892071][ T5881] usb 5-1: 0:2 : does not exist [ 774.919582][ T5881] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 775.014734][ T5881] usb 5-1: USB disconnect, device number 111 [ 775.083074][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 775.104795][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 775.139212][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 775.154800][ T8656] udevd[8656]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 775.167791][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 775.205388][ T10] usb 4-1: USB disconnect, device number 68 [ 775.229474][T18984] netlink: 'syz.3.2869': attribute type 13 has an invalid length. [ 775.246944][T18984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 775.864030][ T5927] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 775.923414][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 776.773814][ T10] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 776.774716][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 776.783579][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 776.853493][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.874375][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.905532][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.916580][ T5927] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 776.934876][ T5927] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 776.954320][ T5927] usb 5-1: Manufacturer: syz [ 776.964413][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.976054][ T5927] usb 5-1: config 0 descriptor?? [ 777.117071][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 777.173026][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.210719][ T10] usb 2-1: config 0 descriptor?? [ 777.412867][ T5927] hid_parser_main: 28 callbacks suppressed [ 777.412883][ T5927] cougar 0003:060B:700A.003C: unknown main item tag 0x0 [ 777.436435][ T5927] cougar 0003:060B:700A.003C: unknown main item tag 0x0 [ 777.445021][ T5927] cougar 0003:060B:700A.003C: unknown main item tag 0x0 [ 777.452276][ T5927] cougar 0003:060B:700A.003C: unknown main item tag 0x0 [ 777.462088][ T5927] cougar 0003:060B:700A.003C: unknown main item tag 0x0 [ 777.504832][ T5927] cougar 0003:060B:700A.003C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 777.623502][ T5881] usb 5-1: USB disconnect, device number 112 [ 777.685986][ T10] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.003D/input/input96 [ 777.838864][T19027] fido_id[19027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 777.856593][T19000] fuse: Unknown parameter 'smackfstransmute' [ 777.866798][T19000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.880193][ T10] uclogic 0003:28BD:0909.003D: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 777.897819][T19000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.959454][T19032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.971734][T19032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.230216][ T55] usb 2-1: USB disconnect, device number 26 [ 778.292328][ T5902] IPVS: starting estimator thread 0... [ 778.395208][T19042] IPVS: using max 38 ests per chain, 91200 per kthread [ 778.815283][T19053] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2887'. [ 778.986993][T19059] FAULT_INJECTION: forcing a failure. [ 778.986993][T19059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.003097][T19059] CPU: 0 UID: 0 PID: 19059 Comm: syz.0.2890 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.003128][T19059] Tainted: [L]=SOFTLOCKUP [ 779.003135][T19059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 779.003147][T19059] Call Trace: [ 779.003155][T19059] [ 779.003162][T19059] dump_stack_lvl+0xe8/0x150 [ 779.003193][T19059] should_fail_ex+0x412/0x560 [ 779.003224][T19059] _copy_from_user+0x2d/0xb0 [ 779.003245][T19059] sctp_getsockopt_delayed_ack+0xba/0x7b0 [ 779.003379][T19059] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 779.003401][T19059] ? __pfx_sctp_getsockopt_delayed_ack+0x10/0x10 [ 779.003424][T19059] ? sctp_getsockopt+0x12f/0xb90 [ 779.003444][T19059] ? __local_bh_enable_ip+0xd0/0x130 [ 779.003470][T19059] sctp_getsockopt+0x7ad/0xb90 [ 779.003484][T19059] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 779.003509][T19059] do_sock_getsockopt+0x2d3/0x3f0 [ 779.003528][T19059] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 779.003548][T19059] ? __fget_files+0x3a0/0x420 [ 779.003572][T19059] ? __fget_files+0x2a/0x420 [ 779.003602][T19059] __x64_sys_getsockopt+0x1a4/0x240 [ 779.003630][T19059] do_syscall_64+0x14d/0xf80 [ 779.003649][T19059] ? trace_irq_disable+0x3b/0x150 [ 779.003673][T19059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.003691][T19059] ? clear_bhb_loop+0x40/0x90 [ 779.003713][T19059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.003729][T19059] RIP: 0033:0x7f08b119c799 [ 779.003746][T19059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.003761][T19059] RSP: 002b:00007f08b20c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 779.003781][T19059] RAX: ffffffffffffffda RBX: 00007f08b1415fa0 RCX: 00007f08b119c799 [ 779.003794][T19059] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 779.003805][T19059] RBP: 00007f08b20c1090 R08: 0000200000000140 R09: 0000000000000000 [ 779.003817][T19059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.003828][T19059] R13: 00007f08b1416038 R14: 00007f08b1415fa0 R15: 00007f08b153fa48 [ 779.003853][T19059] [ 779.242547][T19061] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l2*$pOcɔr$G [ 779.317856][ T5881] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 779.327400][ T55] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 779.362115][T19061] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2889'. [ 779.534177][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 779.541793][ T55] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 779.550629][ T5881] usb 2-1: too many configurations: 181, using maximum allowed: 8 [ 779.562554][ T55] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 779.589568][ T55] usb 3-1: config 0 has no interface number 0 [ 779.622410][ T5881] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 779.631307][ T5881] usb 2-1: can't read configurations, error -61 [ 779.647930][ T55] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 779.679842][ T55] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 779.694568][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.724300][ T55] usb 3-1: config 0 descriptor?? [ 779.737400][T19053] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 779.799186][ T5881] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 779.963685][ T5902] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 779.993439][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 780.009858][ T5881] usb 2-1: too many configurations: 181, using maximum allowed: 8 [ 780.034976][ T5881] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 780.103280][T19071] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2891'. [ 780.114590][T19071] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2891'. [ 780.137253][ T5881] usb 2-1: can't read configurations, error -61 [ 780.168480][ T5881] usb usb2-port1: attempt power cycle [ 780.186152][ T55] usb 3-1: USB disconnect, device number 98 [ 780.195285][ T5902] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 780.253604][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.264971][ T5902] usb 5-1: config 0 has no interface number 0 [ 780.271528][ T5902] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 780.292667][ T5902] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 780.339885][ T5902] usb 5-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 780.354056][ T5902] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 780.363295][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.380597][T19075] netlink: 'syz.3.2894': attribute type 4 has an invalid length. [ 780.389904][ T5902] usb 5-1: config 0 descriptor?? [ 780.400060][T19075] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2894'. [ 780.411741][ T5902] HFC-S_USB 5-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 780.431807][T19075] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 780.533823][ T5881] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 780.554118][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 780.560025][ T5881] usb 2-1: too many configurations: 181, using maximum allowed: 8 [ 780.570373][ T5881] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 780.580173][ T5881] usb 2-1: can't read configurations, error -61 [ 780.618197][T19066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.634136][T19081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.644080][T19066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.644634][T19081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.694928][ T5902] usb 5-1: USB disconnect, device number 113 [ 780.756881][ T5881] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 780.774353][T19088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2897'. [ 780.791790][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 780.801358][ T5881] usb 2-1: too many configurations: 181, using maximum allowed: 8 [ 780.879760][ T5881] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 780.889085][ T5881] usb 2-1: can't read configurations, error -61 [ 780.900080][ T5881] usb usb2-port1: unable to enumerate USB device [ 780.908429][T19091] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2897'. [ 781.130072][T19094] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2898'. [ 781.523938][ T5902] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 781.581513][T19105] FAULT_INJECTION: forcing a failure. [ 781.581513][T19105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.595443][T19105] CPU: 0 UID: 0 PID: 19105 Comm: syz.0.2901 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.595472][T19105] Tainted: [L]=SOFTLOCKUP [ 781.595479][T19105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 781.595490][T19105] Call Trace: [ 781.595498][T19105] [ 781.595506][T19105] dump_stack_lvl+0xe8/0x150 [ 781.595537][T19105] should_fail_ex+0x412/0x560 [ 781.595567][T19105] _copy_to_user+0x31/0xb0 [ 781.595589][T19105] simple_read_from_buffer+0xe1/0x170 [ 781.595619][T19105] proc_fail_nth_read+0x1bb/0x230 [ 781.595648][T19105] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.595675][T19105] ? rw_verify_area+0x2a6/0x4d0 [ 781.595693][T19105] ? reacquire_held_locks+0x104/0x190 [ 781.595717][T19105] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.595743][T19105] vfs_read+0x20c/0xa70 [ 781.595770][T19105] ? fdget_pos+0x246/0x320 [ 781.595800][T19105] ? __pfx___mutex_lock+0x10/0x10 [ 781.595821][T19105] ? __pfx_vfs_read+0x10/0x10 [ 781.595839][T19105] ? __fget_files+0x2a/0x420 [ 781.595864][T19105] ? __fget_files+0x3a0/0x420 [ 781.595897][T19105] ? __fget_files+0x2a/0x420 [ 781.595927][T19105] ksys_read+0x150/0x270 [ 781.595947][T19105] ? __pfx_ksys_read+0x10/0x10 [ 781.595963][T19105] ? fput+0xa0/0xd0 [ 781.595993][T19105] do_syscall_64+0x14d/0xf80 [ 781.596012][T19105] ? trace_irq_disable+0x3b/0x150 [ 781.596036][T19105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.596053][T19105] ? clear_bhb_loop+0x40/0x90 [ 781.596073][T19105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.596090][T19105] RIP: 0033:0x7f08b115cfce [ 781.596108][T19105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 781.596121][T19105] RSP: 002b:00007f08b20c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 781.596138][T19105] RAX: ffffffffffffffda RBX: 00007f08b20c16c0 RCX: 00007f08b115cfce [ 781.596148][T19105] RDX: 000000000000000f RSI: 00007f08b20c10a0 RDI: 0000000000000004 [ 781.596160][T19105] RBP: 00007f08b20c1090 R08: 0000000000000000 R09: 0000000000000000 [ 781.596166][T19105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.596172][T19105] R13: 00007f08b1416038 R14: 00007f08b1415fa0 R15: 00007f08b153fa48 [ 781.596188][T19105] [ 781.837505][ T5902] usb 3-1: device descriptor read/64, error -71 [ 782.083640][ T5902] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 782.213598][ T5902] usb 3-1: device descriptor read/64, error -71 [ 782.271706][T19131] xfrm1: entered promiscuous mode [ 782.300065][T19131] dvmrp12: entered allmulticast mode [ 782.323742][ T5902] usb usb3-port1: attempt power cycle [ 782.351451][T19128] dvmrp12: left allmulticast mode [ 782.433415][ T5888] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 782.499262][T19142] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 782.519574][T19142] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 782.540350][T19142] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 782.613518][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 782.622350][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 782.637432][ T5888] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 782.648158][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 782.657728][ T5888] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 782.663684][ T5902] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 782.667463][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.684195][ T5888] usb 2-1: Product: syz [ 782.689463][ T5888] usb 2-1: Manufacturer: syz [ 782.697898][ T5888] usb 2-1: SerialNumber: syz [ 782.706323][ T5902] usb 3-1: device descriptor read/8, error -71 [ 782.713920][ T5888] usb 2-1: config 0 descriptor?? [ 782.943598][ T5902] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 782.974185][ T5902] usb 3-1: device descriptor read/8, error -71 [ 783.073641][ T55] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 783.084280][ T5902] usb usb3-port1: unable to enumerate USB device [ 783.135357][ T5888] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 783.233463][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 783.286851][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.299493][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.311895][ T55] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 783.322542][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.515438][ T55] usb 5-1: config 0 descriptor?? [ 783.539151][ T5888] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EREMOTEIO) [ 783.683437][T17928] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 783.744927][T19155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.754593][T19155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.766134][ T5902] usb 2-1: USB disconnect, device number 31 [ 783.866109][T17928] usb 4-1: Using ep0 maxpacket: 16 [ 783.884100][T17928] usb 4-1: config 0 has no interfaces? [ 783.895213][T17928] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 783.908888][T17928] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 783.921192][T17928] usb 4-1: Manufacturer: syz [ 783.935083][T17928] usb 4-1: config 0 descriptor?? [ 783.987191][T19155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.007043][T19155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.087106][ T55] razer 0003:1532:011B.003E: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.4-1/input0 [ 784.283011][T19155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.387601][T19155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.454075][ T55] usb 5-1: USB disconnect, device number 114 [ 784.531982][T19180] fido_id[19180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 784.629379][T19167] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 784.684253][T19194] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2925'. [ 784.877402][T19173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 785.134961][T13661] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 785.149493][T13661] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 785.158663][T13661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 785.167561][T13661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 785.178183][T13661] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.373729][ T5881] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 785.533915][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 785.548493][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.591088][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.603052][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 785.621035][ T5881] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 785.630783][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.653778][ T5881] usb 5-1: config 0 descriptor?? [ 785.861730][T19217] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 785.868383][T19217] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 785.883163][T19217] vhci_hcd vhci_hcd.0: Device attached [ 785.907796][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2924'. [ 785.917364][T19217] netlink: 'syz.1.2924': attribute type 2 has an invalid length. [ 785.925717][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2924'. [ 786.074882][ T128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.089233][ T55] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 786.097521][ T128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 786.144875][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 786.152710][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 786.182007][ T5881] usb 5-1: USB disconnect, device number 115 [ 786.200247][ T10] usb 36-1: SetAddress Request (2) to port 0 [ 786.208212][ T10] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 786.239771][ T128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.246689][ T55] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 786.262011][ T55] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.264743][ T128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 786.307000][T19201] chnl_net:caif_netlink_parms(): no params data found [ 786.315166][ T55] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 786.365796][ T55] usb 3-1: config 1 has no interface number 1 [ 786.399063][ T55] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 786.453539][ T55] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 786.471749][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.491160][ T55] usb 3-1: Product: syz [ 786.505139][ T55] usb 3-1: Manufacturer: syz [ 786.516734][ T55] usb 3-1: SerialNumber: syz [ 786.619428][ T128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.646920][ T128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 786.712822][T19201] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.720202][T19201] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.736552][T17928] usb 4-1: USB disconnect, device number 69 [ 786.746244][T19201] bridge_slave_0: entered allmulticast mode [ 786.795563][ T55] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 786.813711][ T55] usb 3-1: MIDIStreaming interface descriptor not found [ 786.838162][T19201] bridge_slave_0: entered promiscuous mode [ 787.026894][ T55] usb 3-1: USB disconnect, device number 103 [ 787.152318][ T128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.195141][ T128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 787.247533][ T5145] Bluetooth: hci5: command tx timeout [ 787.270492][T19201] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.331165][T19201] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.392745][T19201] bridge_slave_1: entered allmulticast mode [ 787.448696][T19201] bridge_slave_1: entered promiscuous mode [ 787.617078][T19253] program syz.4.2934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 787.680278][T19201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.702203][T19249] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2933'. [ 787.784319][T19201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.860310][T19218] vhci_hcd: connection reset by peer [ 787.878301][T10830] vhci_hcd vhci_hcd.1: stop threads [ 787.884085][T10830] vhci_hcd vhci_hcd.1: release socket [ 787.910545][T10830] vhci_hcd vhci_hcd.1: disconnect device [ 787.945632][T19201] team0: Port device team_slave_0 added [ 787.999023][T19201] team0: Port device team_slave_1 added [ 788.081563][ T128] ..1: left allmulticast mode [ 788.093621][ T128] hsr_slave_0: left allmulticast mode [ 788.102609][ T128] hsr_slave_1: left allmulticast mode [ 788.113045][ T128] ..1: left promiscuous mode [ 788.122147][ T128] bridge0: port 3(..1) entered disabled state [ 788.147176][ T128] bridge_slave_1: left allmulticast mode [ 788.153136][ T128] bridge_slave_1: left promiscuous mode [ 788.173924][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.186381][ T128] bridge_slave_0: left allmulticast mode [ 788.192330][ T128] bridge_slave_0: left promiscuous mode [ 788.213589][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.662503][ T128] bond2 (unregistering): (slave gretap1): Releasing active interface [ 788.673404][ T55] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 788.725127][ T128] bond3 (unregistering): (slave gretap2): Releasing active interface [ 788.825358][ T55] usb 3-1: config 13 has an invalid interface number: 100 but max is 1 [ 788.834712][ T55] usb 3-1: config 13 has no interface number 1 [ 788.857375][ T55] usb 3-1: config 13 interface 100 altsetting 250 endpoint 0xC has invalid maxpacket 264, setting to 8 [ 788.893507][ T55] usb 3-1: config 13 interface 100 altsetting 250 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 788.905025][ T55] usb 3-1: config 13 interface 100 has no altsetting 0 [ 788.918885][T19279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.943491][T19279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.975294][ T55] usb 3-1: string descriptor 0 read error: -71 [ 788.981887][ T55] usb 3-1: New USB device found, idVendor=0408, idProduct=ea05, bcdDevice=2c.a8 [ 789.201372][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.220948][ T55] usb 3-1: can't set config #13, error -71 [ 789.231578][ T55] usb 3-1: USB disconnect, device number 104 [ 789.287626][ T128] bond5 (unregistering): (slave gretap3): Releasing active interface [ 789.309750][ T128] dvmrp0 (unregistering): left allmulticast mode [ 789.323722][ T5145] Bluetooth: hci5: command tx timeout [ 789.677831][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.699332][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.721912][ T128] bond0 (unregistering): Released all slaves [ 789.898677][ T128] bond1 (unregistering): Released all slaves [ 789.914797][ T128] bond2 (unregistering): Released all slaves [ 789.936875][ T128] bond3 (unregistering): Released all slaves [ 790.159851][ T128] bond4 (unregistering): Released all slaves [ 790.177088][ T128] bond5 (unregistering): Released all slaves [ 790.253885][ T5902] usb 5-1: new low-speed USB device number 116 using dummy_hcd [ 790.278332][T19201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.306196][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.355247][T19201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.500480][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 790.536752][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.563210][ T5902] usb 5-1: too many endpoints for config 1 interface 0 altsetting 5: 65, using maximum allowed: 30 [ 790.583484][ T5902] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 790.585620][T19201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.644783][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.662429][ T5902] usb 5-1: config 1 interface 0 has no altsetting 0 [ 790.686823][T19201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.708790][ T5902] usb 5-1: string descriptor 0 read error: -22 [ 790.734083][ T128] tipc: Left network mode [ 790.783625][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 790.793241][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.857840][ T5902] usb 5-1: bad CDC descriptors [ 790.901489][T19201] hsr_slave_0: entered promiscuous mode [ 790.914568][T19201] hsr_slave_1: entered promiscuous mode [ 791.078964][ T5902] usb 5-1: USB disconnect, device number 116 [ 791.146097][ T30] audit: type=1326 audit(1773408724.858:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.1.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ae99c799 code=0x7ffc0000 [ 791.323776][ T10] usb 36-1: device descriptor read/8, error -110 [ 791.404715][ T5145] Bluetooth: hci5: command tx timeout [ 791.725333][ T10] usb usb36-port1: attempt power cycle [ 791.816314][ T128] hsr_slave_0: left promiscuous mode [ 791.838069][ T128] hsr_slave_1: left promiscuous mode [ 791.850199][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.872760][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.894418][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.901877][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.915225][ T128] veth1_macvtap: left promiscuous mode [ 792.103467][ T55] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 792.163643][ T5888] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 792.230619][ T128] team0 (unregistering): Port device team_slave_1 removed [ 792.253474][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 792.270685][ T55] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.298306][ T10] usb usb36-port1: unable to enumerate USB device [ 792.305544][ T5888] usb 2-1: device descriptor read/64, error -71 [ 792.317305][ T55] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.346569][ T55] usb 3-1: config 0 interface 0 has no altsetting 0 [ 792.354544][ T55] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 792.368111][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.385608][ T55] usb 3-1: config 0 descriptor?? [ 792.453513][ T5881] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 792.509075][T19341] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 792.563465][ T5888] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 792.637093][ T5881] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 792.672722][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.691364][ T5881] usb 4-1: config 0 has no interface number 0 [ 792.723499][ T5888] usb 2-1: device descriptor read/64, error -71 [ 792.774170][ T5881] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 792.795656][T19342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.807684][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.827491][ T5881] usb 4-1: Product: syz [ 792.834787][T19342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.837503][ T5888] usb usb2-port1: attempt power cycle [ 792.851717][ T5881] usb 4-1: Manufacturer: syz [ 792.873498][ T5881] usb 4-1: SerialNumber: syz [ 792.904019][ T5881] usb 4-1: config 0 descriptor?? [ 792.940451][ T55] usbhid 3-1:0.0: can't add hid device: -71 [ 792.973020][ T55] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 793.055189][ T55] usb 3-1: USB disconnect, device number 105 [ 793.144061][ T5881] cdc_subset 4-1:0.110: probe with driver cdc_subset failed with error -22 [ 793.226771][ T128] IPVS: stop unused estimator thread 0... [ 793.273494][ T5888] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 793.325627][ T5888] usb 2-1: device descriptor read/8, error -71 [ 793.486173][ T5145] Bluetooth: hci5: command tx timeout [ 793.566440][ T5888] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 793.653104][ T5888] usb 2-1: device descriptor read/8, error -71 [ 793.763856][ T5888] usb usb2-port1: unable to enumerate USB device [ 793.799413][T19201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 793.833269][T19201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 793.866125][T19201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 793.897595][T19201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 794.082073][T19201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.111292][T19201] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.126863][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.134172][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.168918][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.176085][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.290109][T19201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.407274][T19201] veth0_vlan: entered promiscuous mode [ 794.435578][T19201] veth1_vlan: entered promiscuous mode [ 794.509567][T19201] veth0_macvtap: entered promiscuous mode [ 794.534859][T19201] veth1_macvtap: entered promiscuous mode [ 794.568082][T19201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.605334][T19201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.691384][T10819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.758298][T10819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.807849][T10819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.826105][ T5902] usb 4-1: USB disconnect, device number 70 [ 794.864295][T10819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.038584][T19411] fuse: Bad value for 'fd' [ 795.294257][ T5881] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 795.310540][T10829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.334131][T10829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.503436][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 795.510698][ T5881] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 795.528755][ T5881] usb 2-1: config 0 has no interface number 0 [ 795.549807][ T5881] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 795.560510][ T5881] usb 2-1: config 0 interface 89 has no altsetting 0 [ 795.579151][T10822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.594471][T10822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.604648][ T5881] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 795.623957][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.636919][ T5881] usb 2-1: Product: syz [ 795.641124][ T5881] usb 2-1: Manufacturer: syz [ 795.648619][ T5881] usb 2-1: SerialNumber: syz [ 795.667169][ T5881] usb 2-1: config 0 descriptor?? [ 795.693151][ T5881] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 795.713835][T19421] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2965'. [ 795.723154][ T5881] em28xx 2-1:0.89: Video interface 89 found: [ 796.304744][ T5881] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 796.502189][ T30] audit: type=1326 audit(1773408730.198:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19441 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5ed9c799 code=0x7ffc0000 [ 796.576419][ T30] audit: type=1326 audit(1773408730.198:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19441 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8b5ed9c799 code=0x7ffc0000 [ 796.645736][ T30] audit: type=1326 audit(1773408730.198:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19441 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5ed9c799 code=0x7ffc0000 [ 796.685211][T19449] netlink: 2672 bytes leftover after parsing attributes in process `syz.4.2967'. [ 796.733778][T19449] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2967'. [ 796.798406][ T30] audit: type=1326 audit(1773408730.198:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19441 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f8b5ed9c799 code=0x7ffc0000 [ 796.841933][ T5881] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 796.886889][T19449] netlink: 2672 bytes leftover after parsing attributes in process `syz.4.2967'. [ 796.887976][ T5881] em28xx 2-1:0.89: board has no eeprom [ 796.905688][ T30] audit: type=1326 audit(1773408730.198:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19441 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5ed9c799 code=0x7ffc0000 [ 796.976177][T19449] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2967'. [ 797.013894][ T30] audit: type=1326 audit(1773408730.198:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19441 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b5ed9c799 code=0x7ffc0000 [ 797.212777][ T30] audit: type=1326 audit(1773408730.198:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19441 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5ed9c799 code=0x7ffc0000 [ 797.274026][ T5881] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 797.304125][ T5881] em28xx 2-1:0.89: analog set to bulk mode. [ 797.327252][ T5888] em28xx 2-1:0.89: Registering V4L2 extension [ 797.384634][ T30] audit: type=1326 audit(1773408730.198:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19441 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8b5ed9c799 code=0x7ffc0000 [ 797.392417][ T5881] usb 2-1: USB disconnect, device number 36 [ 797.463874][ T5888] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 797.488414][ T30] audit: type=1326 audit(1773408730.198:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19441 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5ed9c799 code=0x7ffc0000 [ 797.503470][ T5888] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 797.543560][ T5902] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 797.548775][ T5881] em28xx 2-1:0.89: Disconnecting em28xx [ 797.589584][ T5888] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 797.619339][ T30] audit: type=1326 audit(1773408730.198:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19441 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8b5ed9c799 code=0x7ffc0000 [ 797.628670][ T5888] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 797.708128][ T5888] em28xx 2-1:0.89: No AC97 audio processor [ 797.723527][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 797.731173][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.749725][ T5888] usb 2-1: Decoder not found [ 797.763483][ T5902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.791234][ T5902] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 797.815446][ T5888] em28xx 2-1:0.89: failed to create media graph [ 797.819291][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.867766][ T5902] usb 3-1: Product: syz [ 797.879815][ T5902] usb 3-1: Manufacturer: syz [ 797.900374][ T5888] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 797.900374][ T5902] usb 3-1: SerialNumber: syz [ 797.931453][ T5902] usb 3-1: config 0 descriptor?? [ 797.931726][ T5888] em28xx 2-1:0.89: Registering snapshot button... [ 797.942684][T19471] ================================================================== [ 797.952961][T19471] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 797.960457][T19471] Read of size 8 at addr ffff8880369d0748 by task v4l_id/19471 [ 797.969723][T19471] [ 797.972175][T19471] CPU: 1 UID: 0 PID: 19471 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 797.972198][T19471] Tainted: [L]=SOFTLOCKUP [ 797.972204][T19471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 797.972214][T19471] Call Trace: [ 797.972224][T19471] [ 797.972237][T19471] dump_stack_lvl+0xe8/0x150 [ 797.972262][T19471] print_report+0xba/0x230 [ 797.972295][T19471] ? v4l2_fh_open+0xac/0x420 [ 797.972312][T19471] kasan_report+0x117/0x150 [ 797.972331][T19471] ? v4l2_fh_open+0xac/0x420 [ 797.972356][T19471] v4l2_fh_open+0xac/0x420 [ 797.972373][T19471] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 797.972392][T19471] em28xx_v4l2_open+0x157/0x9a0 [ 797.972460][T19471] ? do_raw_spin_lock+0x12b/0x2f0 [ 797.972478][T19471] v4l2_open+0x1bf/0x3a0 [ 797.972529][T19471] chrdev_open+0x4cd/0x5e0 [ 797.972548][T19471] ? __pfx_chrdev_open+0x10/0x10 [ 797.972564][T19471] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 797.972582][T19471] ? __pfx_chrdev_open+0x10/0x10 [ 797.972597][T19471] do_dentry_open+0x785/0x14e0 [ 797.972621][T19471] vfs_open+0x3b/0x340 [ 797.972637][T19471] ? path_openat+0x2df0/0x3860 [ 797.972653][T19471] path_openat+0x2e08/0x3860 [ 797.972673][T19471] ? __pfx_stack_trace_save+0x10/0x10 [ 797.972688][T19471] ? stack_depot_save_flags+0x33/0x810 [ 797.972712][T19471] ? __pfx_path_openat+0x10/0x10 [ 797.972725][T19471] ? __x64_sys_openat+0x138/0x170 [ 797.972744][T19471] ? do_syscall_64+0x14d/0xf80 [ 797.972759][T19471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.972776][T19471] ? __lock_acquire+0x6b5/0x2cf0 [ 797.972795][T19471] do_file_open+0x23e/0x4a0 [ 797.972812][T19471] ? __pfx_do_file_open+0x10/0x10 [ 797.972833][T19471] ? _raw_spin_unlock+0x28/0x50 [ 797.972883][T19471] ? alloc_fd+0x64b/0x6c0 [ 797.972904][T19471] do_sys_openat2+0x113/0x200 [ 797.972924][T19471] ? __pfx_do_sys_openat2+0x10/0x10 [ 797.972943][T19471] ? exc_page_fault+0x6a/0xc0 [ 797.972985][T19471] ? do_user_addr_fault+0xc6f/0x1340 [ 797.973005][T19471] __x64_sys_openat+0x138/0x170 [ 797.973026][T19471] do_syscall_64+0x14d/0xf80 [ 797.973040][T19471] ? trace_irq_disable+0x3b/0x150 [ 797.973060][T19471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.973074][T19471] ? clear_bhb_loop+0x40/0x90 [ 797.973090][T19471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.973104][T19471] RIP: 0033:0x7f26094a7407 [ 797.973120][T19471] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 797.973133][T19471] RSP: 002b:00007ffdee7ef480 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 797.973149][T19471] RAX: ffffffffffffffda RBX: 00007f2609c0b880 RCX: 00007f26094a7407 [ 797.973160][T19471] RDX: 0000000000000000 RSI: 00007ffdee7eff1c RDI: ffffffffffffff9c [ 797.973170][T19471] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 797.973179][T19471] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 797.973188][T19471] R13: 00007ffdee7ef6d0 R14: 00007f2609d72000 R15: 00005623c85084d8 [ 797.973204][T19471] [ 797.973210][T19471] [ 798.281280][T19471] Allocated by task 5888: [ 798.285603][T19471] kasan_save_track+0x3e/0x80 [ 798.290302][T19471] __kasan_kmalloc+0x93/0xb0 [ 798.294986][T19471] __kmalloc_cache_noprof+0x31c/0x660 [ 798.300352][T19471] em28xx_v4l2_init+0x10b/0x2e70 [ 798.305439][T19471] em28xx_init_extension+0x120/0x1c0 [ 798.310801][T19471] process_scheduled_works+0xb02/0x1830 [ 798.316467][T19471] worker_thread+0xa50/0xfc0 [ 798.321427][T19471] kthread+0x388/0x470 [ 798.325554][T19471] ret_from_fork+0x51e/0xb90 [ 798.330331][T19471] ret_from_fork_asm+0x1a/0x30 [ 798.335265][T19471] [ 798.337589][T19471] Freed by task 5888: [ 798.341819][T19471] kasan_save_track+0x3e/0x80 [ 798.346673][T19471] kasan_save_free_info+0x46/0x50 [ 798.352144][T19471] __kasan_slab_free+0x5c/0x80 [ 798.357345][T19471] kfree+0x1c1/0x630 [ 798.361323][T19471] em28xx_v4l2_init+0x1683/0x2e70 [ 798.366623][T19471] em28xx_init_extension+0x120/0x1c0 [ 798.372892][T19471] process_scheduled_works+0xb02/0x1830 [ 798.378994][T19471] worker_thread+0xa50/0xfc0 [ 798.383674][T19471] kthread+0x388/0x470 [ 798.387823][T19471] ret_from_fork+0x51e/0xb90 [ 798.392849][T19471] ret_from_fork_asm+0x1a/0x30 [ 798.397775][T19471] [ 798.400106][T19471] The buggy address belongs to the object at ffff8880369d0000 [ 798.400106][T19471] which belongs to the cache kmalloc-8k of size 8192 [ 798.414856][T19471] The buggy address is located 1864 bytes inside of [ 798.414856][T19471] freed 8192-byte region [ffff8880369d0000, ffff8880369d2000) [ 798.429691][T19471] [ 798.432182][T19471] The buggy address belongs to the physical page: [ 798.438676][T19471] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x369d0 [ 798.447700][T19471] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 798.456368][T19471] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 798.464339][T19471] page_type: f5(slab) [ 798.468415][T19471] raw: 00fff00000000040 ffff88813fea6280 dead000000000122 0000000000000000 [ 798.477681][T19471] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 798.486345][T19471] head: 00fff00000000040 ffff88813fea6280 dead000000000122 0000000000000000 [ 798.495026][T19471] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 798.503866][T19471] head: 00fff00000000003 ffffea0000da7401 00000000ffffffff 00000000ffffffff [ 798.512531][T19471] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 798.521448][T19471] page dumped because: kasan: bad access detected [ 798.528233][T19471] page_owner tracks the page as allocated [ 798.534115][T19471] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 19449, tgid 19441 (syz.4.2967), ts 797051511391, free_ts 795174315801 [ 798.556267][T19471] post_alloc_hook+0x231/0x280 [ 798.561124][T19471] get_page_from_freelist+0x24dc/0x2580 [ 798.566939][T19471] __alloc_frozen_pages_noprof+0x18d/0x380 [ 798.572857][T19471] allocate_slab+0x77/0x660 [ 798.577813][T19471] refill_objects+0x331/0x3c0 [ 798.582765][T19471] __pcs_replace_empty_main+0x2f9/0x5e0 [ 798.588488][T19471] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 798.595248][T19471] __alloc_skb+0x2c1/0x7d0 [ 798.599665][T19471] netlink_ack+0x146/0xa50 [ 798.604281][T19471] netlink_rcv_skb+0x2b6/0x4b0 [ 798.609240][T19471] netlink_unicast+0x80f/0x9b0 [ 798.614019][T19471] netlink_sendmsg+0x813/0xb40 [ 798.619053][T19471] ____sys_sendmsg+0x972/0x9f0 [ 798.623832][T19471] ___sys_sendmsg+0x2a5/0x360 [ 798.628611][T19471] __sys_sendmmsg+0x27c/0x4e0 [ 798.633279][T19471] __x64_sys_sendmmsg+0xa0/0xc0 [ 798.638389][T19471] page last free pid 5194 tgid 5194 stack trace: [ 798.644899][T19471] __free_frozen_pages+0xc2b/0xdb0 [ 798.650207][T19471] __slab_free+0x263/0x2b0 [ 798.654882][T19471] qlist_free_all+0x97/0x100 [ 798.659637][T19471] kasan_quarantine_reduce+0x148/0x160 [ 798.665196][T19471] __kasan_slab_alloc+0x22/0x80 [ 798.670054][T19471] kmem_cache_alloc_noprof+0x2bc/0x650 [ 798.675510][T19471] do_getname+0x2e/0x250 [ 798.679759][T19471] vfs_fstatat+0x45/0x170 [ 798.684187][T19471] __x64_sys_newfstatat+0x151/0x200 [ 798.689477][T19471] do_syscall_64+0x14d/0xf80 [ 798.694073][T19471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.700222][T19471] [ 798.702888][T19471] Memory state around the buggy address: [ 798.708684][T19471] ffff8880369d0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 798.716821][T19471] ffff8880369d0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 798.725327][T19471] >ffff8880369d0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 798.733573][T19471] ^ [ 798.740497][T19471] ffff8880369d0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 798.748647][T19471] ffff8880369d0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 798.756875][T19471] ================================================================== [ 798.768038][ T5888] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input99 [ 798.856153][ T5888] em28xx 2-1:0.89: Remote control support is not available for this card. [ 798.873212][T19471] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 798.880556][T19471] CPU: 1 UID: 0 PID: 19471 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 798.891349][T19471] Tainted: [L]=SOFTLOCKUP [ 798.895689][T19471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 798.906033][T19471] Call Trace: [ 798.909303][T19471] [ 798.912333][T19471] vpanic+0x56c/0xa60 [ 798.916312][T19471] ? __pfx_vpanic+0x10/0x10 [ 798.920821][T19471] panic+0xc5/0xd0 [ 798.924549][T19471] ? __pfx_panic+0x10/0x10 [ 798.929166][T19471] ? preempt_schedule_thunk+0x16/0x30 [ 798.934913][T19471] ? preempt_schedule_thunk+0x16/0x30 [ 798.940284][T19471] ? v4l2_fh_open+0xac/0x420 [ 798.944986][T19471] check_panic_on_warn+0x89/0xb0 [ 798.949966][T19471] ? v4l2_fh_open+0xac/0x420 [ 798.954759][T19471] end_report+0x73/0x180 [ 798.958999][T19471] ? v4l2_fh_open+0xac/0x420 [ 798.963596][T19471] kasan_report+0x128/0x150 [ 798.968386][T19471] ? v4l2_fh_open+0xac/0x420 [ 798.973000][T19471] v4l2_fh_open+0xac/0x420 [ 798.977420][T19471] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 798.983673][T19471] em28xx_v4l2_open+0x157/0x9a0 [ 798.988713][T19471] ? do_raw_spin_lock+0x12b/0x2f0 [ 798.993750][T19471] v4l2_open+0x1bf/0x3a0 [ 798.998160][T19471] chrdev_open+0x4cd/0x5e0 [ 799.002680][T19471] ? __pfx_chrdev_open+0x10/0x10 [ 799.007712][T19471] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 799.014725][T19471] ? __pfx_chrdev_open+0x10/0x10 [ 799.019863][T19471] do_dentry_open+0x785/0x14e0 [ 799.024740][T19471] vfs_open+0x3b/0x340 [ 799.028836][T19471] ? path_openat+0x2df0/0x3860 [ 799.033610][T19471] path_openat+0x2e08/0x3860 [ 799.038373][T19471] ? __pfx_stack_trace_save+0x10/0x10 [ 799.043763][T19471] ? stack_depot_save_flags+0x33/0x810 [ 799.049353][T19471] ? __pfx_path_openat+0x10/0x10 [ 799.054326][T19471] ? __x64_sys_openat+0x138/0x170 [ 799.059528][T19471] ? do_syscall_64+0x14d/0xf80 [ 799.064300][T19471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.070549][T19471] ? __lock_acquire+0x6b5/0x2cf0 [ 799.075750][T19471] do_file_open+0x23e/0x4a0 [ 799.080891][T19471] ? __pfx_do_file_open+0x10/0x10 [ 799.086118][T19471] ? _raw_spin_unlock+0x28/0x50 [ 799.091086][T19471] ? alloc_fd+0x64b/0x6c0 [ 799.095597][T19471] do_sys_openat2+0x113/0x200 [ 799.100383][T19471] ? __pfx_do_sys_openat2+0x10/0x10 [ 799.106007][T19471] ? exc_page_fault+0x6a/0xc0 [ 799.110794][T19471] ? do_user_addr_fault+0xc6f/0x1340 [ 799.116469][T19471] __x64_sys_openat+0x138/0x170 [ 799.121592][T19471] do_syscall_64+0x14d/0xf80 [ 799.126300][T19471] ? trace_irq_disable+0x3b/0x150 [ 799.131347][T19471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.137554][T19471] ? clear_bhb_loop+0x40/0x90 [ 799.142253][T19471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.148357][T19471] RIP: 0033:0x7f26094a7407 [ 799.153006][T19471] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 799.172955][T19471] RSP: 002b:00007ffdee7ef480 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 799.181627][T19471] RAX: ffffffffffffffda RBX: 00007f2609c0b880 RCX: 00007f26094a7407 [ 799.189852][T19471] RDX: 0000000000000000 RSI: 00007ffdee7eff1c RDI: ffffffffffffff9c [ 799.197919][T19471] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 799.206329][T19471] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 799.214416][T19471] R13: 00007ffdee7ef6d0 R14: 00007f2609d72000 R15: 00005623c85084d8 [ 799.222750][T19471] [ 799.226179][T19471] Kernel Offset: disabled [ 799.230508][T19471] Rebooting in 86400 seconds..