last executing test programs: 17m16.455013264s ago: executing program 2 (id=3566): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef, 0x3}, {0x8000, 0x0, 0xffe}, 0x1, 0x100, 0x5, 0xd618, 0x0, 0x4, 0x4, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\xcd\x7f!8\x86\xe8\xc3(i\xfc\"H\x0eA\\bg\x99\x98\x0e\fu\x02\bO', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r5, &(0x7f0000000000), 0x0, 0x0, 0x8) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r7 = dup2(r4, r3) read$ptp(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 17m14.63295784s ago: executing program 2 (id=3571): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x800, 0xfffffffb, 0x1be}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 17m12.322516581s ago: executing program 2 (id=3577): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000c2ffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 17m11.429861886s ago: executing program 2 (id=3580): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000240)=@x86={0x0, 0xe, 0x3, 0x0, 0x1, 0x4, 0xee, 0x5e, 0x3, 0x4, 0x2, 0x0, 0x0, 0x72, 0x7, 0x7, 0x4, 0x5, 0x5, '\x00', 0x5, 0x7}) r5 = socket(0x1d, 0x2, 0x6) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x112) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x6a, 0x3, 0x24000000, 0x61) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r9, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) 17m10.366818568s ago: executing program 2 (id=3585): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = socket(0x2a, 0x2, 0x100000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x290, 0xd0, 0xd0, 0x1a0, 0xd0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x5, 0x6}, {0xffffffffffffffff, 0x3, 0x5}}}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}, 0x18, 0x25, 0x162b}}}, {{@ipv6={@local, @private0, [0xffffff00, 0x0, 0x0, 0xff], [0xff], 'veth1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast, 0x2e}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00', {}, {}, 0x27}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x0, 0x200) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="252f040cc800fa"], 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580), &(0x7f0000001680), &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x40440c0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9c, 0x4) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) 17m10.071644397s ago: executing program 2 (id=3588): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r3, &(0x7f0000000500)=""/42, 0x2a, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8a0c2, 0x0, 0x15}, 0x18) symlinkat(&(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r6 = memfd_secret(0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = syz_pidfd_open(r7, 0x0) pidfd_getfd(r8, r8, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000380)='(\x00', 0x0, r0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x1e, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000400)={{0x3, 0x3, 0x1000, 0x3, 0x55c9}, 0x6, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x5, 0x7, 0x6, 0x1ff}) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffb, 0x0, 0xffffffff}, 0x10) recvmmsg(r9, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1}, 0x2174eda4}], 0x1, 0x40012001, &(0x7f0000000580)={0x77359400}) 17m9.173398224s ago: executing program 32 (id=3588): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r3, &(0x7f0000000500)=""/42, 0x2a, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8a0c2, 0x0, 0x15}, 0x18) symlinkat(&(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r6 = memfd_secret(0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = syz_pidfd_open(r7, 0x0) pidfd_getfd(r8, r8, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000380)='(\x00', 0x0, r0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x1e, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000400)={{0x3, 0x3, 0x1000, 0x3, 0x55c9}, 0x6, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x5, 0x7, 0x6, 0x1ff}) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffb, 0x0, 0xffffffff}, 0x10) recvmmsg(r9, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1}, 0x2174eda4}], 0x1, 0x40012001, &(0x7f0000000580)={0x77359400}) 10.010599761s ago: executing program 5 (id=8257): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000000c0)=@ax25={{0x3, @null, 0x5}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, 0x0, 0x1}) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) unshare(0x22020400) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) r12 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r12, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000180000000000000030000009500000000000000e0d8cdcef5afb3157fe4a03caf4d343d16f84e3a7be05024329f10ac3358dc33076993d4b38b5b35be623a38e604012c79f8876f366735110b5965653624cda5127b4117b34d58c8c09ea64d11476a4514e80b2ca78ac1e4168695b6a6e8c8651bbde81f94ce5024623c069f2f4429b51925db6b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 7.658025067s ago: executing program 5 (id=8267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x8, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xfff1, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008051}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x110e2b6a, 0x2}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="120100003a370520810705000904e602015bbd9700090582020002000000000000000000000000000000000000af7ff5395d6219a815a818c8724b8ef9602d60f7742182b621"], 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.366818439s ago: executing program 0 (id=8272): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x220102, 0x19c) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000140)={{@hyper, 0xe60}, {@my=0x0}, 0x400, "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"}, 0x418, 0x25b9}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000006a004d"], 0x18}}, 0x20004000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff9402000000000000400000000000f2ffffff000000000000000000002c8f380001"], 0x78) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000018300)='./file1\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x20) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, r2, &(0x7f00000000c0)="70d8", 0x2, 0x600, 0x0, 0x1}]) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 6.361985116s ago: executing program 0 (id=8273): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @empty}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x3a, 0xfa, 0x4, 0x20, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x40, 0x5, 0x7}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'sit0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x20, 0x80, 0x8, 0x1031, {{0x3f, 0x4, 0x3, 0x7, 0xfc, 0x67, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, {[@ssrr={0x89, 0xf, 0xeb, [@multicast1, @loopback, @remote]}, @cipso={0x86, 0x58, 0x3, [{0x7, 0xd, "a56f3cc2e9eaca53f2e218"}, {0x6, 0xf, "30568d3fe4559410e51fa40335"}, {0x2, 0xc, "b4b5257823ed8c8976dd"}, {0x2, 0xf, "05bdcc60166d650eb0f876fdd5"}, {0x2, 0x6, "80753d7c"}, {0x5, 0x4, "2fcd"}, {0x5, 0x11, "1330297fd4941c2cf3ab399d1181fa"}]}, @timestamp_addr={0x44, 0x54, 0x17, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0x5f}, {@empty, 0x6}, {@private=0xa010101}, {@multicast1, 0x9}, {@loopback, 0x74fd}, {@loopback, 0x9340}, {@multicast1, 0x4}, {@loopback, 0x18}, {@local, 0xe}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xe3, 0x0, 0x4, [0x5]}, @timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010100, 0x401}]}, @timestamp_addr={0x44, 0xc, 0x83, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x47d6}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x194, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$TCFLSH(r0, 0x540b, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000880), 0xd4da, 0x40000) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000008c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000001d00)={{'\x00', 0x3}, {0x100000000}, 0x2, 0x0, 0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)="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", 0x1af, 0x0, &(0x7f0000000b80)={0x2, 0x10a0, {0x0, 0xc, 0x93, "afc67b6eef1ef8847c07f38f9e1718ddee98e3d2f7af101c70f201564d966672bba10642be49bbf83d58d0c469b4b4a3aa31f42da10aabf64d3d75dbf008c8a547ce195c71ef0b8214906980986e7cafa7591a39a2fc68f702688a029a15bb4ec9320f0eab85a79414f030ae5d7e9a6d880aad4657a0f06a927beeeb5d37b497e4bd5ec243039a5c57951040dbf4eb3c0007b7", 0x1000, "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"}, 0xc5, "28f2b884b19fc2384be200776d3be4ad0c1177475771bcc8ad049cfac5f767fbc218dec2fcefeae6a6856fbfb06e95fd26358c5acd48fbbc0992d3dd9206e566aad11bf931c9b2063669fb647e27ad440a4f8c717446e82e808b3b015df5325d4003777f1d9aeaf0f4b94292db4af439be400d172c14299a77effc294c745ea9fdb5314643ff55fa546a9dfc85cf7a106d0a951b86952bdd0b723f905922bd8659ae87b2f919a342089b53404aa2b3b841a70ca430d45c6f854ddce16525dc5df5b8a3ab05"}, 0x1171}) pwrite64(r0, &(0x7f0000001d80)="f2b5f1e59e2b1d1a709a47d474ee75c49c407c139d0d48e9168331d7b67da13c1a321bc9fbb14fb2b0eff6c11937c6f12c4179c50834b450523b65198d2ac2d7c21fd0ff4ff37b46ef523e20edf0ee7d7b76764f695af86ebe5a2efe1a6b2410ab3e16b2a524a1fff3f53ce0b584ccb7d1b07507b4939a07e002c3122d2dcfad75d757da2bff00a110a693cc63eb53d5ca0811b81689bea71bd1e33b023cef9309188c21309e46e6ab4bd89a288bfd2457a1faa66ac5ffad394514c5cd12fec8aaa17d2daf905ed29f9ed026681cbacfb88f77d6f244cd2f", 0xd8, 0x9) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001ec0), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001f80)={'sit0\x00', &(0x7f0000001f00)={'sit0\x00', r3, 0x7800, 0x80, 0x5, 0x0, {{0x16, 0x4, 0x2, 0x34, 0x58, 0x67, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@noop, @ssrr={0x89, 0xb, 0xf5, [@rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xdc, [@empty, @dev={0xac, 0x14, 0x14, 0x34}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @generic={0x88, 0x8, "0e09fdd25ba6"}, @ssrr={0x89, 0x13, 0xa0, [@multicast2, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002380)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002340)={&(0x7f0000001fc0)={0x364, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "a344d0973c1e234c3eb35c69d3a97c1dac071b0c388edba5d13750927540cde10c6de19334641c6f0acea028c5beb745f3f8a02e5b097aed384b84101d0007489860e6414f692ad3516bacb8cba8326938b1abe8db88111b85ed6b1b0a8908bd892459e3fbc8ee6581093f0d23a7ccb378a899c59baef76296953b9b034f4e1561c51f4501eb1ddb724ebbe283cfdbe917170936841f663025221aa1d7fcff9e0d852f3fc4c5012d7ebedf049beff13127d1631ea6d8a53f6e9efc454db13fc103728e0f155e913392d780edbcf18dfb8f9733"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x17, 0x4, "5f77909aa4d1f2dc170638ec56ad4bdc75ca2a"}, @ETHTOOL_A_BITSET_VALUE={0xf0, 0x4, "80faad027e2f4da8b1271722b298350ceb54983f844caada2c6c3554378e4189271d59c73937d633402b57822746548f7793d238af5b593d98d1c05c0a054253e9791cb517712dabfcf634279dc3310af0f5c514d65d91b9c3224110c6dab6e6145679e4efc29b80adb21b79e2a8fcc00dd4755bd4ceebaf5b896c610b031f50d59b61ed7ff19fc7aef704a73bcf67673aa1ea2bcd30fd1874db828d1f9e1d860cca7d21309557b5bead17d16df33cff87fdc364272ae52e8b00dbb804f4ca6801f0f9d173e14c566803120e3dcd6bb5cefa91bc0206e608a35f63395af2d373ab64014d9c356f780649b30d"}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "83c9a4a8471744be80a216736faf95dae7dab642f1c6ea14bd9a9cbae84fe0867e27fc562c555d7d36c54e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff66}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/#,@.\x83\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']\xc8[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x40000}, 0x20008084) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000023c0)={0x0, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000002400)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x9b}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0xee01, &(0x7f0000002440)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000002480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002500)="e679b80c80ac002290650fae5680bbfdf816b7bf27269586200a233357d53e2b921a31ad34bfd3afdb147bdc8c88d606beffa7d0baf151eb7debda100539e7efbc128060dc75f68d18ec8c0f4da4920e9acd6a8130a61d6f98160cfa42549e0b94ebabb2dc5e21ca51a78d30d51c04ff19933c1cb34a0558c8d513b2daa45c895b001e3cf1b4b70df9e7e0bb0d39c67f83f47f4f8b257e445d2ced80572b5c86c7aa7b27072d2795eaba04885412f403efb8be43a8561d43ea523e2fcb976499a7fad0c32a06523b3fa7f00737ddea6e242fbb886b8133661232a4046968e354a3ff0421fe", 0xe5}, {&(0x7f0000002600)="438c6a34dbab737a777d97", 0xb}, {&(0x7f0000002640)="1f29b04f9692c9098eecd3e4ab95a6cf8c7a43cd5631e942b51bde43934f12da5fba0179d138c03a7ac8350bcc7548167b4c392a46b5a2fd954a8484469b5628c767b5d0352e928c5f6b0a07c7f96ab3f5d24bd7db09fa10691eb602a818a4", 0x5f}], 0x3, &(0x7f0000002700)=[{0x28, 0x0, 0x80, "e1f179dd8e5858b85fb9285ceeead954d317b5"}, {0xe0, 0x117, 0x6, "e0eecebe314b160a28bc74104ef64e3ca346ea16d1761a20c60c8b0cc0b771f2cd7c765f75345f904790aee5cd1334b5c580d8723304359fe78c602fbe3b5fee9544895e94139a6ed38bc849fe045b84dacd1f212b756859241f6139b44403f25a06f9c42727078424dafc5f1ec27036a31b6b0064129ac87cf038adb6901f1a5254aa22d45df9eb9b5d1dd5456866cac27ba4dec64a0dcfb4e8ba82c3cfd54722f716e92a4251414c180a5b63dc75db53252493353f29f5c0a82dac12f0f28c4dee7a4eb32a08ff02df430b"}], 0x108}, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r8 = syz_clone3(0xfffffffffffffffe, 0x0) timer_create(0x0, &(0x7f0000002880)={0x0, 0x11, 0x0, @tid=r8}, &(0x7f00000028c0)=0x0) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) timer_settime(r9, 0x0, &(0x7f0000002940)={{0x0, 0x989680}, {r10, r11+10000000}}, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000029c0), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x14, r12, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x8000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002ac0), 0xfde6a7232cca8ab, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002b00)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x0, 0xfffa, 0x3037, 0x10, 0x0, 0x6, 0x1}, &(0x7f0000002bc0)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000002c00)={r13, @in={{0x2, 0x4e23, @remote}}, 0x3, 0x6}, 0x90) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002dc0)={{{@in=@rand_addr=0x64010102, @in6=@loopback, 0x4e21, 0x6, 0x4e24, 0x0, 0x0, 0x20, 0x20, 0x8}, {0x9820, 0xff, 0x6, 0x80000000, 0x1ea7f8c2, 0x94bc, 0x2, 0x3ff}, {0x3, 0x6, 0xe4f, 0x4}, 0x200, 0x6e6bb0, 0x0, 0x1, 0x2, 0x1}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x3, 0x39, 0x2, 0x6, 0x40}}, 0xe8) 6.32460545s ago: executing program 0 (id=8274): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) (async) r1 = epoll_create1(0x0) (async) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) (async) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)={0x2}) (async) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000004c0)="5579a7ca38aaef10dac4b17577136b101f9541ac9e2c4a899e7248fb481df1acaf3dba8270a6dfbd2304b738471c3876e4c5179928151b16e113a537367e9f1e27a38ccbda9ed12f4d4c9b62f5cbf1c56969ab0ce12d8f10e7b6e06a2092", 0x5e, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r5, r4}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 6.242800783s ago: executing program 0 (id=8275): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) process_madvise(0xffffffffffffffff, &(0x7f00000003c0)=[{0xffffffffffffffff}], 0x22, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r4, 0xac9}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) readv(r2, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1) read(r2, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) 6.045372114s ago: executing program 3 (id=8276): r0 = semget(0x3, 0x0, 0x2) semop(r0, &(0x7f0000000000), 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0xc, 0x5efb, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x0, 0x2, 0x2, 0x4}, {0x0, 0x2, 0xa, 0x2}], 0x10, 0x81}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x5, 0x3, 0x43, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x10, 0x7800, 0x8000, 0x200}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x2, @val=@netfilter={0xa, 0x1, 0x80, 0x1}}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)=0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000740)={{0x3, r3, r5, r6, r8, 0x100, 0x1ff}, 0x2, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x7f}) socketpair(0x23, 0x4, 0x2, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$alg(r9, 0x0, 0x0, 0x80800) sendmsg$NFT_BATCH(r10, &(0x7f0000000980)={&(0x7f0000000800), 0xc, &(0x7f0000000940)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d36a3f6}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xfc}, 0x1, 0x0, 0x0, 0x40041}, 0x4) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000a40)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000ac0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000a00), r12, 0x0, 0x1, 0x4}}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r10) r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r13, 0x4008af12, &(0x7f0000000b80)={0x2, 0xe0000000}) r14 = creat(&(0x7f0000000bc0)='./file0\x00', 0x11) r15 = semget(0x3, 0x0, 0x3) semctl$SEM_INFO(r15, 0x4, 0x13, &(0x7f0000000c00)=""/164) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) connect$qrtr(r14, &(0x7f0000000cc0)={0x2a, 0x3}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r9, 0x89f7, &(0x7f0000000d80)={'sit0\x00', &(0x7f0000000d00)={@multicast1, 0x1, 0x0, 0x40, 0x0, [{@loopback}, {@dev}, {@local}, {@empty}]}}) bind$alg(r9, &(0x7f0000000dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000000e40)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000f40)=0xe8) ioctl$BLKTRACESETUP(r14, 0xc0481273, &(0x7f0000000f80)={'\x00', 0x200, 0x7, 0x9, 0x6, 0x7ff, 0xffffffffffffffff}) r18 = fcntl$getown(r9, 0x9) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001000)={{0x3, r3, r4, r16, r7, 0x2, 0x1}, 0x0, 0x0, 0x4, 0xef23, 0x0, 0xd2a3, 0xa, 0x48, 0x7, 0x4, r17, r18}) 5.876562203s ago: executing program 3 (id=8277): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getpeername(r0, &(0x7f0000000500)=@ax25={{0x3, @default}, [@remote, @default, @remote, @netrom, @default, @rose, @rose, @bcast]}, &(0x7f0000000580)=0x80) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) setreuid(0xee00, 0x0) r3 = inotify_init() chdir(&(0x7f0000000340)='./file2\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) listxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000480)=""/85, 0x55) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) syz_emit_ethernet(0x154, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081004e0086dd60e66bf7011a21fffe880000000000000000000000000101fc0200000000000000000000000000012f0c010700000000fc00000000000000000000000000000100000000000000000000fffffffffffffe80000000000000000000000000000efc020000000000000000000000000000ff010000000000000000000000000001fc0000000000000000000000000000000800007f000000003200a630660000004e204e220431907830b6405d0e4f207020c54c48a46e6bc62e449ba053bfa9163772f1deafc6950d0c852c729af704512f28aedcfdf2dd0f046bbe00da9144afd095b6cb"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x1000, 0xe, 0x3, 0x2000000, 0xb770, 0x3000000}}) 4.482487538s ago: executing program 1 (id=8278): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/166, 0xfffffffffffffd17}, {&(0x7f00000004c0)=""/68, 0x44}], 0x4, &(0x7f0000003a40)=""/243, 0xf3}, 0x4c8f}, {{&(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)=""/97, 0x57}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000800)=""/66, 0x42}, {&(0x7f0000000880)=""/8, 0x8}, {&(0x7f0000000940)=""/98, 0x62}, {&(0x7f0000008980)=""/4106, 0x100a}], 0x2, &(0x7f0000000a40)=""/212, 0xd4}, 0x10001}, {{&(0x7f0000000b40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/90, 0x5a}, {&(0x7f0000000c40)=""/110, 0x6e}], 0x2, &(0x7f0000000d00)=""/224, 0xe0}, 0x4}, {{&(0x7f0000000e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000000e80)=""/155, 0x9b}, {&(0x7f0000000f40)=""/16, 0x10}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/107, 0x6b}, {&(0x7f0000005ac0)=""/210, 0xd2}, {&(0x7f0000005bc0)=""/77, 0x4d}], 0x6, &(0x7f0000005cc0)=""/144, 0x90}, 0xfff}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000005d80)=""/216, 0xd8}], 0x1, &(0x7f0000005e80)=""/97, 0x61}, 0x5d71}, {{&(0x7f0000005f00)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000006000)=[{&(0x7f0000005f80)=""/128, 0x80}], 0x1}, 0xa}, {{&(0x7f0000006040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000007380)=[{&(0x7f00000060c0)=""/235, 0xeb}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/205, 0xcd}, {&(0x7f00000072c0)=""/182, 0xb6}], 0x4, &(0x7f00000073c0)=""/9, 0x9}, 0x3}, {{&(0x7f0000007400)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000008580)=[{&(0x7f0000007480)=""/191, 0xbf}, {&(0x7f0000007580)=""/4096, 0x1000}], 0x2, &(0x7f00000085c0)=""/28, 0x1c}, 0x7f}], 0x8, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x29, 0x5, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES64=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES16=r2], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x40) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003b40)=ANY=[@ANYBLOB="040100001a000100feffffff00010000ac1414aa000000000000000000000000e00000010000000000000000000000000001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x54}, 0x40) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={r10, r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x89e1, &(0x7f0000000340)={r10}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r12, 0x0, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) 4.442723089s ago: executing program 3 (id=8279): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x440, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x822b00, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) poll(&(0x7f0000001140), 0x0, 0x6) ioctl$FBIOBLANK(r2, 0x4611, 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) socket(0x29, 0x2, 0x400) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r3, 0x0, 0x0, 0x1) pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@rc={0x1f, @any, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.433755147s ago: executing program 5 (id=8280): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x180, 0x8000063, 0xffffffffffffff9c, 0x0) r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x8000}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020a000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000100"/28], 0x50) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = timerfd_create(0x0, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000300)={{r4}, 0x6, 0x2, 0x8001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000180)={0xf58, 0x2, "b67b86970df456a7f0d08ac396961fce92ff4c361239612fdb691308f0e952330a2724a8dde054d9deaa0cf71c8ab6719f8f6a769e9bb7eafdbeefd3a92a4f95af517775142bbdce23bdb75195bb74de276bcf9a7b6a2bb26facca839d8f27d797da242c0fd06007c804a61c5778cba5baeba7a886c339ccde3e2bc1a1dadf1aaef8bd5d8d5323f97be4a411b5a756e32faac0293963bbcb600895216d047cfe5a8e776702f9742e14582d36fea466b5c02b497db907d31afbec1529340c476906ef9713a0b9b775853ac4c2561527f941dfcfac211fd8ad28cdb3e5735353538d2858166bb1bc00edc3190a15f6d50e82fd6508a5d6fe7629aa6af1a9d5c3c8"}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r4}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card3/oss_mixer\x00', 0x2040, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x18) 4.318140659s ago: executing program 3 (id=8282): semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000340)=r4, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet(0x10, 0x80000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$snddsp(r7, &(0x7f0000000640)=""/32, 0x20) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r9, 0x4008ae48, &(0x7f0000000540)=0xeeee8000) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x4040004) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) 3.566372728s ago: executing program 1 (id=8284): socket(0xa, 0x3, 0x3a) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async, rerun: 32) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) (async, rerun: 32) fcntl$setflags(r0, 0x2, 0x0) (rerun: 32) r3 = syz_open_dev$media(&(0x7f0000000040), 0xe, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000480)={r6, 0x88f, 0x9, 0x3241, 0x7, 0x6, 0xff, 0xe54, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x9, 0x2, 0xffff, 0x18da, 0xb9d3}}, &(0x7f0000000380)=0xb0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) set_mempolicy(0x4005, 0x0, 0x8) mbind(&(0x7f0000a0c000/0x1000)=nil, 0x1000, 0x4003, 0x0, 0x5, 0x2) 3.277927043s ago: executing program 1 (id=8285): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000040000000004000000000000000000000004010500"], 0x1bc}}, 0x0) 3.114770012s ago: executing program 0 (id=8286): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2d, 0xc0c00) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x2000000, 0x0, 0x101b}) 3.110810735s ago: executing program 0 (id=8287): r0 = eventfd2(0x6c, 0x801) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x8, 0x1, 0x4, r0, 0x4}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = semget$private(0x0, 0x1, 0x100) semtimedop(r2, &(0x7f0000000040)=[{0x47feae82526a9e00, 0x1, 0x1000}, {0x1, 0xf7, 0x800}, {0x2, 0x2, 0x800}, {0x0, 0x6}, {0x0, 0x100, 0x400}], 0x5, &(0x7f0000000080)={0x77359400}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x6, 0x3, 0x2}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x3, 0x7, "1d1ab0b74beb72"}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000200)={0x6, {{0xa, 0x4e23, 0x3, @empty, 0x3}}}, 0x88) r5 = semget$private(0x0, 0x0, 0x22) semctl$SEM_INFO(r5, 0x0, 0x13, &(0x7f00000002c0)=""/136) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0x38}}, 0x20000000) bind(r1, &(0x7f00000004c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000540)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}, 0xc) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x424, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x3c0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x44}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffbff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x76}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x975}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x331c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7c2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff800}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa45}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x110, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaa8a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff55d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x128, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x57}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe8f5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x744}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_FLAGS={0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x44c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000b40)={0x10, 0x0, "a1a9887df17ebf2f4495ca311bd24d99"}) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000000b80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x68f, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0xdc, 0xd, 0xc3, 0xff, 0x19d2, 0x1091, 0x7ece, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67d, 0x2, 0x1, 0x6, 0x80, 0x3, [{{0x9, 0x4, 0xc2, 0x7, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xc, 0x8, 0x400, 0xa, 0x6, 0xeb, [@generic={0x35, 0x3, "b90309d0beebf32b8bf35679388254e32fe7bd9662c9b9ea3028cf568438363fb890a5bdfb6dabac0443b5752afaca61d2d86a"}, @generic={0xba, 0x30, "455ba0eda8818b16230984e5f13dadd48338e1a38ae5ab723662690a1ee6c6ff8d971e64c6bdb24e50cd19c1d9a4f71a00f084d6cf053eb3a3dd6d860d5df9aa25a7e4fae92ef3ce39a8fb6d3bcab1383c2410e5f4ab60f4dde0d5e4e78f0d4f650c8db50bc33d64c259e1019233a57b12f6904fec81f73ef7e1a3a9e0f0d26793aa478410829118fc24da21b24ce7d07ba54726154c25994d482804f10379026cb6b6dec65ba46736df8bab3be7e3d240533a5645809d5d"}]}}]}}, {{0x9, 0x4, 0xd9, 0xf, 0xe, 0x1b, 0xa8, 0x70, 0x4, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4e, 0x3, 0x0, 0x6, "b2ea11", 'J'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x100, 0x1, "b51270c9e595bac2a3"}]}], [{{0x9, 0x5, 0x1, 0x10, 0xa1ef4fa75d467110, 0x2, 0xa0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xb, 0x5}]}}, {{0x9, 0x5, 0x80, 0x4, 0x711e9d7692633477, 0x6, 0x3, 0x40, [@generic={0xa0, 0x6, "5b5b60cc292a0ef2d1f22bc138440828d7a2ad6d4d7e72329962afe96b84f9a0998b2c27d16f9197d84012b52b55dfb278b9c7ef9fc3093e31736c16675a21ea6a4d1e4e6b061abde5eb6dd3d1d04b2da553dbdc52c95e323e04cb6e419e153ad6f90a590b4b1779d6f686f53c76286a3a39fc2496818013a959f7d9e653c634c9dff23358973e0e9665680a94e194471279ca81d97ddc523512b5afb40e"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x75, 0x7, 0x7f}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x7, 0xf7, 0x7}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x0, 0x6, 0x8, [@generic={0xe0, 0x23, "fea259e30f65429a1b7f99ce2fd043ad667a479229b8a51036b8e9748795d641997b5264677e63b66f32b5271f28d60d1f988a207b95387cd22941a9f98e87ade6f592a0d8002d4e176818765c3802c04e35ad5cbb6c274b9bf731103693a40fa7e60e82cedc54c38df04c658095f7de80dafb2b73dec1c05a06088755734c445bec480c66fd265acf6e43fe80a00f5dced1f6ac5b03f4c4742bc4affb1873d3bdb4b164acbd308c8c57364c111a6411958c9fe4c41988cdcd18536ff277a2f5e0171bff7a88e840c5d894eefb441e70b939d54b2869401f5b8692e2be0a"}, @generic={0x9c, 0x3, "58c23d126a898a2aa118cea850fb346feec2f434e5f0338156334847d1720d8006fb6efc6b81c181b81709475a20ff18e5073b4391a83c742e48a6be7191db93bc9e355b0b85984e65c525196ce667a62743f3098f7333c9cf02e1215c0165ca4a26ee44440e3f36a838c91c2f75ab917822023a25b257a1945e211b5fd86aae3d19765d3075195f6a46bc14338df50075b773765bd15f202f82"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x2, 0xbb, 0x8, [@generic={0x7e, 0x4, "c618e9e03248fd94fa28bec7ae99077bc3dffc3458fa99d4624cf15e1cee98ebfc3def7e53c354ca985db2dcf105ad9c808e3242379fbee7b5300dfe62ec926c8937ffa588661b7476061cabe53b9d9bcddec56b77ecc67970cb916d683e3f9cf35c1a281e1ea5dbd1c6e0607e7de3357adab3e2e2a6584be043bd73"}, @generic={0x5c, 0xa, "af0c53614c0c834537ce403831a836f7d7121105deb782e2610ddd12ef95e09985027c56be69539ba38fda36bd06b9edbce34276fedff7a7da22003edaee2b94a29c0855839a4ffad869ad889010bf74d160d1b70aefa003c20f"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x7, 0x8, 0x4}}, {{0x9, 0x5, 0x6, 0xc, 0x0, 0x7, 0x1, 0x4, [@generic={0x1d, 0x21, "289f3765aebd1cd55718a38a25a560196a592b7238171a0bc9befe"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x65, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x2}, @generic={0xb3, 0x11, "997d5dbe631a79bb7694548ffeb376ad8f2aacd3a272ff4141ee126b7f273e0955bfccc8896a7409429b9b2f80d0518ab1091282dd57d4ce6af3afd8149c9ce37502e8b7c40227e9286503f7b6f601ee3543ff57c0f567d8334445cab2e3f5b949fa891c4daff4d0dde5690570b5c51d2ef5e141339caaef799dd244c938107178962ef24b1c75ce7022f96394267dee2b1397f48566f7802892b4d36b804c74f101e4a6a607dae208d9719292e5f47ae2"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x8, 0x6, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x6, 0x8001}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0xf, 0x5, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd8, 0x4}, @generic={0xde, 0x4, "d0bb0b67c1ed3890c94efc6e9c0676f37346c575b9751b1ac7ab7cc26ba6e4cd42734546b429b0e0729ea552fb7aa4732c9591514ef71ac3f9822b3153448706e1e2c421885216d3fb41e47622cc21ad6bcf5b3c9865dca04cae5434ac39d95910e620d85b3b00a0ef6aee8520190894887d164f226559b5227a92f4651ad83bb3bfe4603396a803f37d576a8db3b9419ffc70f568e9f8cbe20c83ce9d0aece614e3a79e64fbe64d45b7536cae0e439145b8f1e1d4ecb5317104be4e6ade379215020aaf76b06045903d6a7cccdf5768ab75ecf550f76c112f9dbdde"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x8, 0x80, 0x6}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x5, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x9, 0x15}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xfe, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x401}]}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x300, 0x6, 0xf, 0x7, 0xff, 0x33}, 0x1d, &(0x7f0000001300)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0x0, 0x1}, @generic={0x6, 0x10, 0x1, 'A:-'}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5, 0xc3, 0x7f, 0x0, 0x4}]}, 0x2, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x2027}}, {0x3d, &(0x7f0000001380)=@string={0x3d, 0x3, "6baf86d28611509308b33d9e124a3796a5efa3f6456d6d2e02f498e685dadbe8766377321b70d8c45c33c6920f04e72a8bb18d007ad5f3b67f199f"}}]}) syz_open_dev$hidraw(&(0x7f0000001400), 0x40, 0x24000) close_range(r8, r8, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000001440)={@local, @loopback, @dev={0xac, 0x14, 0x14, 0x28}}, 0xc) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000001480)={0x48}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000001500)={0x0, 0x0, r7}) socketpair(0x1, 0x1, 0xe4, &(0x7f0000001540)) 2.954858316s ago: executing program 1 (id=8288): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_cmd={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0xffffffff}}) 2.729942811s ago: executing program 5 (id=8289): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01000000009000000c0000000c00000202000000c5e230241c005e318c216afa000d31f04092ee740000"], 0x0, 0x26, 0x0, 0x7, 0xfffffffe}, 0x28) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) (async, rerun: 64) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) (async, rerun: 64) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000340)={0x2f, @empty, 0x4e22, 0x1, 'wrr\x00', 0x4, 0x9, 0x5d}, 0x2c) (async) r7 = msgget$private(0x0, 0x534) msgsnd(r7, 0x0, 0x8, 0x800) syz_usb_control_io(r6, 0x0, 0x0) (async, rerun: 32) cachestat(r0, &(0x7f00000003c0)={0x100000000, 0x100}, &(0x7f0000000400), 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000900)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="2031a5d1f6b8020be9f3e11c10908a85118462329bdec488da2bfce1287395de4f16d164ee9239d4051b84861cf150d2b5e0867df74f6b21dadee1e8f084f82ba0b8cecf676c680caed620973b65c229"], 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x9d, 0x7, "006df416", "e5f28ea0"}}, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x16, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x0, 0xc, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0029000002010a002400128009000100626fff4570001a28338fc7f30f0f08330000140002800800140000000000050000000000000020c6d35fa3592a0372681b8be4182aa5e98dcc1a758ecb261df93ba51ee93a9c49"], 0x44}}, 0x0) (async) socketpair(0x1a, 0xa, 0x70d, &(0x7f0000000100)={0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f00000000c0), r8, &(0x7f0000000180)=0x17ea, 0x8001, 0xd) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x80000001, 0x5}) 2.562829737s ago: executing program 1 (id=8290): r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000400001800c000100626974776973650030000280080003400000000408000140000000140800024000000012080005800400010004000480080001006eee7e000900010073797a30"], 0x114}}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (rerun: 32) 2.375893376s ago: executing program 5 (id=8291): unshare(0x2c020400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018310000", @ANYRES32, @ANYBLOB="0000000001000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.319867955s ago: executing program 5 (id=8292): r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) r2 = epoll_create(0x7) r3 = syz_io_uring_complete(0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000140)={0x10}) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000002180)={0x1ae8, 0xd, 0xa, 0x600, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a68, 0x3, 0x0, 0x1, [{0x48c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x12, 0x6, 0x1, 0x0, "3a5640f7a4a18b2fc6898edc39cb"}, @NFTA_SET_ELEM_KEY_END={0x140, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000000}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "bf5111f038e66856bb5d4e7378afb9be4c72a4f5ba381175a54a99581c003724cb4e8e569e5e7471808f542085fe6f82a2f0bc36a5b5e2b50cb42f38c7aca93c0cb2c253aba8591cc5b158ab9cad75423ec7e10f6330b6d91c7fc7a0f57abaa44ec0bc7bafd897d2e787ad56e9e8ed5ddaf4e4f92363a76d30483caa2fcbcaaeb15a5133390f9624e95c682df3db9420d0fc77ba871cfb7783a6e4cd11fa9641d9e2220a0c36bf26227aa49f58243c3e59c682d9094fed0d3cd14d1e"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x13c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}, {0xf8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xe8, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RANGE_TO_DATA={0xd4, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "40abd198a8e8f7c25e645b4cd243a02c1eecfb6ea75267a08241e99e6444c4704351d7e7a5b2d1a0f3445e9232e218f41c271426e20e812050df8415aacd5a8c38051416e7fdc78f946a43eb6b3aeae9bbc25573b25748eb70e516a78913be94e87436ed35b51e68d6e344afaecd317933cc226c02c7134f31f407f65229835ca15f2a3e3d17b69769bf23ca56b54c501292aea80b531885da74b6a62549b3fa6e742d3ac08fe4bf13eaf2d27d202279a7411e403f96c9921799bde14a2b56c695e3ed6ec482d4b8af9b7fef"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x49, 0x6, 0x1, 0x0, "c7a6681250bb500e7db8e618890ad4e6c8034dc79826dcf54a465183f3e0b3a467f1f2baf0b611c975018474750a9c297af9a948cf38b2a116b16c8347b36213269d349f7f"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x48, 0x1, "2370d8d168e7e67b25e0e3bc996324b6a734090db41b290a87ae095dd533c1ab539e127d4421a26eea578ffd10f6d2e784d370598869c7e33b0ae6d1effb1f374c4b55f1"}, @NFTA_DATA_VALUE={0x53, 0x1, "21086ef5ec0144fe7ca70df24db99ecd4dde2d9e897f1d40e9b9cbd1852257a346cf83a73534d948302ab5639bce4167ab720fae387a9cdb43296405bb839a99465d85d4911f37484794f6f4b25ade"}, @NFTA_DATA_VALUE={0x6b, 0x1, "4b85a0e9bcb9cc8bc0f32ccaa7a9df7206c92a1c8c8eb490e0743b0e60c01fc0e990b226fcbf44c1766845c72e29706360f8f45a37e43d7161039061e08ced071db8e192f6c944a26c57b846af231156de9e749a72c3698c967edddf1987a3eccea9406103a3cf"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x1488, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10a8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x13, 0x1, "5a9bc26259227534391970c10cafd9"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xa4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa0, 0x1, "b2df966010e59c0c574f1876d9644ed7d3b804cf02114160221802d094e79522dc2961733e9b9bf1b8b2eaa9e157d36a0a91fefe35dce56651b4900bd1b96c6a7e65bb61d81cca16c79ab72d9a00283e01c616fba48dd60fc07bfde4fed01129aca745a67454265220d3c3082e962b47d72325217578e2ad9af9728d1b244c3bc683d4f6e0471993554e1fa1ef45c1101989a1a5c3b63492b255df82"}]}, @NFTA_SET_ELEM_USERDATA={0x74, 0x6, 0x1, 0x0, "421ec73ea8603f7be3ada76dd06402fed591db029c62cc70a9ace9f41597a67d87a794700e910c27e2a87af4de5905de3aaba128f2cc31b2c2489d20a8c9a18164cf696228e07a039d7456212c7fde999a306ec36d6e2a61b5f311c11d1a8e151123b057089544fc83f9a425e7164010"}, @NFTA_SET_ELEM_DATA={0x1a8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8e, 0x1, "8c7d54ec8e5f5f5f9bd515d585d7fede287b7019f5cf102157aa79e8d491a76881c9e4e7cd644d65ec136b94c961786cc13878e9adf5961cb4e04caf1646c3cd740b4a332d43f9613ea7ef3cf112c2f8c8f16abd32d0095bd2772043de19c00c3085ce3605d3136eaeae2a9034ca1b8ecb20d38038e4fa941aacaf1b0cd8a0970eaa2caa3decf427c6f8"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10000003}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "ea2c8c3daee1be9d522540e00a82a93748516a6413fc00de3b5e481c2f0a125e3bd9795cfc8a9038a2a844d17700c19b6a520e5c7052e93fe3e7c99c2c70305d98de242009324c9923606f9c80e1210ec76caaf220264b4897d5fefbc22b92790fb6e4d178681c87c747a698ffbe39f93237b5d5387f8aea572b2d0973180f4abdda32290b306525f0ab12a548c44e022f543ac261bff20d85f9581aa41bcb30706ba54c8a290becc07194763b17cc343baff8d4ff62ba9b058488f94a858fe11101c4abe2476648a7d9c8d6107043a5e279cb378673ea4cc1dbce92"}]}, @NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x7c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_XOR={0x58, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "89627718cfc1322418cad522b839a089eaaf48d07a5b824e2cc29a727251e4571157a951143f3bd58bb228fd9aa9c1dc53874748d8868f88202f53af26ae98ff268acd0dfbf39dbe10dd7a3790f934"}]}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x14c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "0d5cd59aa1ce52f069a7288adcb1f47b9eabce08adba10c34aee5cd7cec767590b59c7ccfe18e08c93"}, @NFTA_DATA_VALUE={0x2c, 0x1, "5cd983c086e947281cff73ad1c10966c56672f2389765e73bdc2a6a7a80e9c224dc65c141dd25a36"}, @NFTA_DATA_VALUE={0xb9, 0x1, "eeb5c7b180cf773e0ab62d3ae3d8d23b1aace4765b61898a0bb7a27d644392ebd1054e9fd0737834f6f9749a6b5c46a696a4b92b6fcf6b07f9efdb97def69805aeee162d3f36e1704d16b8721b43191b0c8111352380dc9e0a5fe4ff1d37205125623bb8e2fac4e43ac1f11c931b17683776d58aca7e8247427cb9d8817ef05fab56c1d65db64e581f1996986f46cddbd9071a3219d0eaf668d448dbc8922627d91699e8f4983b9eb51fe3520cb43eb0ddc9678bc7"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x1ae8}, 0x1, 0x0, 0x0, 0x481c}, 0x4004845) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r8}) syz_open_procfs(0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 998.751157ms ago: executing program 4 (id=8294): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000000e0a010200000000000000000a004f83b3b9824eca319512cd16736f00000900010073797a31000000000900020073797a314818e4f7cae51b4111007c0000000000000000000100000aab984659bbbeb5e8bddb56fb7e68184ccf4771"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x8040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) read$FUSE(r5, &(0x7f0000001fc0)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r4, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e00001800028004001200050016000a"], 0x48}}, 0x0) 957.238453ms ago: executing program 1 (id=8295): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x418c00, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$sndmidi(&(0x7f00000011c0), 0x400, 0x440000) syz_usb_connect(0x0, 0x36, &(0x7f00000013c0)=ANY=[], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2003, &(0x7f0000001380)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x0, @mcast2, 0x12}, r2}}, 0x30) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000001340)={0x8000, 0xc4, 0x2e}, 0x18) fsopen(&(0x7f0000000300)='rpc_pipefs\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000001300)={0x0, 0x40, 0xb4, '\x00', &(0x7f00000000c0)=0x5}) write$UHID_INPUT(r5, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) 807.960787ms ago: executing program 4 (id=8296): prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@local, @private, 0x0}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r3}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "1ae8cb72dfbb04c377e8684a9bda8ed7e09c988bef76ff58b458c9077aa8b3e99a62cacd8a603c7de249677cb98a2dfdf7b38d24d5430434c993e0e6f76d2154"}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x4004010) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x25c, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x133f, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc6}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e33}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe05}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x519}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x128d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x382e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x47}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x251d}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x4800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$PTP_PIN_SETFUNC(r6, 0x40603d07, &(0x7f00000008c0)={'\x00', 0x4, 0x1, 0x1ff}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000940)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000980)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000e80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a80)={0x3a4, r7, 0x202, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfff, 0x79}}}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@preq={0x82, 0x3b, {{0x1, 0x0, 0x1}, 0x7, 0x73, 0x7, @device_b, 0x1839, @void, 0x2, 0x0, 0x3, [{{0x1}, @device_b, 0x98b}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{0x1}, @device_a, 0x507b}]}}, @channel_switch={0x25, 0x3, {0x1, 0x7c, 0x80}}, @channel_switch={0x25, 0x3, {0x1, 0xac, 0x81}}, @ibss={0x6, 0x2, 0x5}, @measure_req={0x26, 0xaf, {0x4, 0xd, 0x7, "6741789cac8ef8943ac7d88e0c20b13d398d68e2a8e59810ec9980d863aa2ccc03db01bbffa94150050585a0b8479a5607afd8dd59dfc0abb229c8cac55b8806c4259be5866bbac0231d686f0682f88fd9eb8020c7acc11794e3c68e915bc6abe23996b8e9e9ce8fe369131271fc38202c80ae287669eb83bda3d896e0889222a9e7be586c9c45b5d31751fb5c04a2916986c4ecb76e90668879f95cf89f965fdeff6f68ab1e92c422ccfc00"}}]}, @NL80211_ATTR_IE={0x4b, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @peer_mgmt={0x75, 0x8, {0x0, 0x2, @val=0x40, @val=0x18, @void}}, @chsw_timing={0x68, 0x4, {0x9, 0x9d8}}, @rann={0x7e, 0x15, {{0x0, 0x22}, 0x47, 0xfd, @device_a, 0x80, 0xd2, 0x10000}}, @dsss={0x3, 0x1, 0xd}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0x40}}]}, @NL80211_ATTR_IE={0x52, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xa, 0x4}}, @supported_rates, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0xb, @device_a, 0xb, @value=@device_b, 0xfffffffc, 0x3, @device_b, 0xfffffff8}}, @mesh_chsw={0x76, 0x6, {0x1, 0xb, 0x3, 0xb6a}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x3, 0x0, @device_b, 0x0, 0x1, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @dsss={0x3, 0x1, 0xa5}]}, @NL80211_ATTR_IE={0x1bf, 0x2a, [@mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xb4}, @measure_req={0x26, 0xf8, {0x7, 0x8, 0x7, "4afd1962c4356981a744979d1b9f1688a597b0a2117f544ff8545b002a924fbd5c1bb5e2ae15e97fe953069866bc9cef63119240c7a72745d66840c57f30bf55deec61a0c3713227d5e43c7d4f88d1346c757edf3adacaedca889493de992f4741c96bef3e0c2e7ede003a6aec81abc0f759bfa1e4c0c7c959751533f985004f7796620f44aa8b7a92d9441d66317eafdef0dd86766d00009f46eca5169755a83b4459ed10cce26536a35eb780ad94cc2be393a5ce533458bbf59bc7f2c84e50315b250925f74b112729ca00b3e47e6eb4979ef6a8e3de841511cb53cbe1d633cc2a210b29b551856c83a24f77fd8fe38d07d05125"}}, @perr={0x84, 0xb4, {0x43, 0xa, [{{}, @broadcast, 0x6d7, @void, 0x31}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x1}, {{0x0, 0x1}, @device_b, 0x4953, @value, 0x34}, {{}, @device_a, 0x3, @void, 0x8}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x40}, {{0x0, 0x1}, @broadcast, 0x200, @value=@device_b, 0x1e}, {{0x0, 0x1}, @broadcast, 0xc, @value=@device_b, 0x28}, {{0x0, 0x1}, @broadcast, 0xfffffffd, @value, 0x7}, {{0x0, 0x1}, @device_b, 0x8, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x6}]}}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x400c001}, 0x1) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000ec0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, r10, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1d, 0x0, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4c014) r11 = add_key$fscrypt_v1(&(0x7f0000001040), &(0x7f0000001080)={'fscrypt:', @desc2}, &(0x7f00000010c0)={0x0, "26ec5b09ec4df1e02981c7eafcbf3045a90372a9624e34f4d3c518e2f70036231a7ea57519958c3b477699f93741e0330a6864a44bca1fe4e2369df1197d6ad2", 0x23}, 0x48, 0xfffffffffffffffd) r12 = add_key$user(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, &(0x7f00000011c0)="23b5b19c3d20909016d56655ce5f39af2c76d7", 0x13, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000001200)={r11, r12}, &(0x7f0000001240)=""/201, 0xc9, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000001340)) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r10, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 718.516959ms ago: executing program 4 (id=8297): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000140)=0xffefffdc, 0x0, 0x4) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x100, 0x0) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x1, 0x2, 0x1, {0x4, 0x1, 0xfffffffffffffff8, 0x8, 0x400003, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, 0x0, 0x0, 0x7, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='>', @ANYRES16=r2], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0xe6, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRESDEC=r6, @ANYBLOB="20000100", @ANYRES32=r9, @ANYBLOB="00000002e000030000000000000000000ffe000008"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000080)={0x7ff, 0x6, 0xfffffff7}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) 358.456261ms ago: executing program 3 (id=8298): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2d, 0xc0c00) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x2000000, 0x101b}) 271.015707ms ago: executing program 3 (id=8299): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100160dd9920e9050900db7b01020301090212000100001000e1587eb35bb63acf00"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x20) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x30, 0x0, 0xb, 0x401, 0x0, 0x0, {0xa}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xa, 0x1, '-{]\\%\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x800) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000003c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$uac1(0x2, 0xe9, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x1, 0xc0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5f35, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x1, 0x1, 0x10}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x4, 0xb, "2008e5"}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x1, 0x1, "ed38a4"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x4, 0x3, "61a675b8"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x1, 0x3, [0xa, 0x3, 0x9], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x2, 0x1, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0xb4, 0x9, "d9"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x8, 0x1}, @as_header={0x7, 0x24, 0x1, 0xa, 0xf7, 0x1002}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x2, 0x2, 0xf8, "f578e8", 'j'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0x7, 0x8, "", 'Y'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf1, 0x5, 0x1, {0x7, 0x25, 0x1, 0x1, 0x3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xff, 0x3, 0x0, 0x0, "11b2f9", "d0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x6, 0x9, {0x7, 0x25, 0x1, 0x80, 0x5, 0xce2a}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x8, 0x0, 0x4, 0x50, 0x22}, 0x7c, &(0x7f0000000180)={0x5, 0xf, 0x7c, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x34, 0x2, 0x2, 0xf00, 0x8, [0xc0, 0xff000f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0x10, 0x9, 0x5}, @generic={0x25, 0x10, 0x0, "cce44684b9c2669abd8625230f83d47d4575f39a28691870a937890b5b4ff19349af"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x7fffffb, 0xf, 0x4, [0x3f00]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x9, 0xf, 0x5, [0xff003f, 0xff0030, 0xcf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6007cdf68324dc88, 0x1, 0xb, 0x9, 0x8}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}, {0xe4, &(0x7f0000000240)=@string={0xe4, 0x3, "4393d5acfe31b88643188926f147fcb5cde2ee036641902ccd43ba792c9c157190c39120a6593ae6dd80710493126a7fa8dc8167c91a814a8bef49ae740ba2140a87f03b23b467e4bc580c94ddde25adea19516df2135a8783ccad6d0bcb764a69358add6893066848279a420157507eb6b2fd3d4a5cae4d0c65103a060ce50c9960652220eba8f9b91a609ef3eaa85a7f96a011f938c263b4e84fd7655dc96bc889a940e203cd199aa5718a6ddd659ad0142645e281d7150860e3f7a547f4fe05506134367564e010547a8f727aaff9a8aeea97c2ec4ef62676e1149bb47f1c5690"}}, {0x3d, &(0x7f0000000340)=@string={0x3d, 0x3, "7525a6497fcbd51cd11ef68d12ebe2fa9942cd986356c0feb9bb1c20954fc46fb5127002145bb23b9b8fd4a11288c10bfe5fb45e91fe34c78a0504"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}, {0x10, &(0x7f0000000440)=@string={0x10, 0x3, "6d267023c972911e1453e758a722"}}]}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2d, 0xc0c00) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x101b}) 218.659922ms ago: executing program 4 (id=8300): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0x707b, 0x0, 0x0, 0x288, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1785, 0x300, 0x13, 0x0, 0xfffffef7) 134.084917ms ago: executing program 4 (id=8301): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3b}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) 0s ago: executing program 4 (id=8302): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002000004087000000000000000001090224000100000000090400000103b50000092120180001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000580)={0x40, 0xe, 0xe6, {0xe6, 0xe, "2e393bfc0acd05c6d06320a4e2839075ad7ecb0629ad83a4ab6901adb10ebae08a5ff484d69f565236d47a08bad8050aa8a80149597892a4222cd2d21fe6b20c356b2c697b48fbb2a3c034e8ef244779114cc774ba1fb6c5256bc38ca4b7873d654e097c780edc50e249cf3b2f363284bb843ea1a729746d4badc387c14de20e59cc6adb96229ecf53108f8a4b9fc0c731578b249b9880dbf023165b3887ac6bcf9d8473b2f383e42c89baaed4daa5c1707d7805945f9b649dfe71b4c83bf9dc41e63831af8fe4ed55f109f1711109c1c55a0c8afa49edefd07e7e5dcb8f0da5b8197557"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403e70b"], &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x18, 0x60, 0xc, 0x4, "9954c354", "82943499"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0xff, 0x3, 0x75, 0x6, 0x75}}}, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x20, 0x5}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x40}, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0xfc00}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000940)={0x40, 0xb, 0x2, "8951"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @multicast}, 0x0, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x1}}) r1 = inotify_init1(0x800) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000000)={0x0, [0x5, 0x3, 0x1], [{0x4000040, 0xffffffff, 0x0, 0x1}, {0x39, 0x35}, {0x0, 0xc}, {0xfffffbff}, {}, {0x80, 0xffffffff}, {}, {0x6}, {0x0, 0x2}, {}, {0x400, 0xfffffffc}, {0x0, 0x4}], 0x10}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x3, 0xb}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) eventfd(0x48030) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xb1, 0xc000, 0xb, 0x20082f9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 81][ T5888] usb 2-1: USB disconnect, device number 38 [ 1845.545662][T28139] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1845.695561][T28139] usb 5-1: Using ep0 maxpacket: 32 [ 1845.704530][T28139] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.723981][T28139] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.786945][T28139] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1845.820176][T28139] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1845.842479][T28139] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1845.863652][T28139] usb 5-1: Product: syz [ 1845.873664][T28139] usb 5-1: Manufacturer: syz [ 1845.885010][T28139] usb 5-1: SerialNumber: syz [ 1845.917923][T28139] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input171 [ 1846.154259][T29701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.163474][T29701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1846.190847][T29701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.266135][T29701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1846.300204][T28139] usb 5-1: USB disconnect, device number 93 [ 1846.321845][T28139] appletouch 5-1:1.0: input: appletouch disconnected [ 1846.779325][T29741] Cannot find add_set index 1 as target [ 1846.979228][ T875] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1847.053620][ T875] usb 1-1: USB disconnect, device number 47 [ 1847.696855][T29772] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1847.735561][ T5954] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1847.895485][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 1847.911173][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1847.944997][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1847.971480][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1848.005524][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1848.022086][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1848.033246][ T5954] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1848.056721][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.086576][ T5954] usb 2-1: config 0 descriptor?? [ 1848.137202][T29752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1848.354143][ C1] Bluetooth: hci0: Unexpected continuation: 1 bytes [ 1848.363423][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.379926][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.386954][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.393838][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.395817][T29795] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7888'. [ 1848.408573][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.416451][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.423272][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.430289][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.437233][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.444103][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.451594][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.458874][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.466091][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.473001][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.480003][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.487093][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.493910][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.500826][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.507777][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.514644][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.521633][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.528666][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.535569][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.542446][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.549473][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.556564][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.563622][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.570622][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1848.577479][T14067] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1849.282559][T29814] syzkaller0: entered promiscuous mode [ 1849.290367][T29814] syzkaller0: entered allmulticast mode [ 1849.300822][T29814] sctp: [Deprecated]: syz.3.7892 (pid 29814) Use of int in max_burst socket option. [ 1849.300822][T29814] Use struct sctp_assoc_value instead [ 1849.435905][ T5954] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1849.585574][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 1849.593103][ T5954] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1849.615733][ T5954] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1849.633025][ T5954] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1849.666082][ T5954] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1849.686463][ T5954] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1849.706530][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.817700][T29842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1849.825004][T29842] IPv6: NLM_F_CREATE should be set when creating new route [ 1849.832299][T29840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1849.935162][ T5954] usb 5-1: GET_CAPABILITIES returned 0 [ 1849.941013][ T5954] usbtmc 5-1:16.0: can't read capabilities [ 1849.999790][ T5888] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1850.139363][ T5954] usb 5-1: USB disconnect, device number 94 [ 1850.145694][ T5888] usb 1-1: device descriptor read/64, error -71 [ 1850.155903][T28142] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1850.227435][ T5835] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1850.335550][T28142] usb 6-1: device descriptor read/64, error -71 [ 1850.351448][T29807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7891'. [ 1850.405573][ T5888] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1850.513049][ T875] usb 2-1: USB disconnect, device number 39 [ 1850.819973][T28142] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1850.837593][ T5888] usb 1-1: device descriptor read/64, error -71 [ 1850.957373][T28142] usb 6-1: device descriptor read/64, error -71 [ 1850.965931][ T5888] usb usb1-port1: attempt power cycle [ 1851.053142][T29881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.062085][T29881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.069784][T28142] usb usb6-port1: attempt power cycle [ 1851.077377][T29881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.086620][T29881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.325549][ T5888] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1851.346354][ T5888] usb 1-1: device descriptor read/8, error -71 [ 1851.415545][T28142] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1851.436180][T28142] usb 6-1: device descriptor read/8, error -71 [ 1851.595659][ T5888] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1851.616760][ T5888] usb 1-1: device descriptor read/8, error -71 [ 1851.675618][T28142] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1851.685342][T29899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.696917][T28142] usb 6-1: device descriptor read/8, error -71 [ 1851.697052][T29899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.736057][ T5888] usb usb1-port1: unable to enumerate USB device [ 1851.816160][T28142] usb usb6-port1: unable to enumerate USB device [ 1852.686884][T29996] CUSE: unknown device info "€" [ 1852.692046][T29996] CUSE: unknown device info "Ö" [ 1852.698462][T29996] CUSE: unknown device info "" [ 1852.716102][T29996] CUSE: unknown device info "€" [ 1852.724614][T29996] CUSE: unknown device info "ðÿÿÿ" [ 1852.737817][T29996] CUSE: unknown device info "" [ 1852.756963][T29996] CUSE: unknown device info "" [ 1852.771697][T29996] CUSE: unknown device info "" [ 1852.786020][T29996] CUSE: zero length info key specified [ 1853.196266][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.202713][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.640990][T30031] Cannot find add_set index 1 as target [ 1853.809852][T30039] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7912'. [ 1854.245487][ T875] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1854.316201][T28142] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1854.395521][ T875] usb 2-1: Using ep0 maxpacket: 8 [ 1854.406273][ T875] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1854.415024][ T875] usb 2-1: config 0 has no interface number 0 [ 1854.421900][ T875] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1854.434886][ T875] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1854.491933][ T875] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1854.506129][ T875] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1854.520181][ T875] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1854.530456][ T875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.575710][T28142] usb 5-1: Using ep0 maxpacket: 32 [ 1854.580489][ T875] usb 2-1: config 0 descriptor?? [ 1854.613159][ T875] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1854.790151][T28142] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 1854.801107][T28142] usb 5-1: config 0 has no interface number 0 [ 1854.815237][T28142] usb 5-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1854.831480][T28142] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1854.925838][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 1854.931936][ T875] usb 2-1: USB disconnect, device number 40 [ 1854.966413][T28142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.975726][T28142] usb 5-1: Product: syz [ 1854.979905][T28142] usb 5-1: Manufacturer: syz [ 1854.984497][T28142] usb 5-1: SerialNumber: syz [ 1855.013009][T28142] usb 5-1: config 0 descriptor?? [ 1855.028619][T30050] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1855.251270][T30050] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1855.360228][T28142] net1080 5-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 56:d3:f2:ff:4f:9a [ 1855.871395][T30105] kAFS: unable to lookup cell '' [ 1856.065528][T17583] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1856.130401][T30122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1856.235560][T17583] usb 1-1: Using ep0 maxpacket: 32 [ 1856.346974][T17583] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1856.362948][T17583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.380030][T17583] usb 1-1: Product: syz [ 1856.394708][T17583] usb 1-1: Manufacturer: syz [ 1856.408393][T17583] usb 1-1: SerialNumber: syz [ 1856.432654][T17583] usb 1-1: config 0 descriptor?? [ 1856.455347][T17583] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1856.474364][T17583] dvb-usb: bulk message failed: -22 (2/0) [ 1856.492254][T17583] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1856.502714][T17583] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1856.511450][T17583] usb 1-1: media controller created [ 1856.570565][T17583] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1856.615031][T17583] usb 1-1: selecting invalid altsetting 7 [ 1856.643324][T17583] cxusb: set interface failed [ 1856.650100][T17583] dvb-usb: bulk message failed: -22 (1/0) [ 1856.658450][T30097] dvb-usb: bulk message failed: -22 (3/0) [ 1856.724054][T17583] DVB: Unable to find symbol lgdt330x_attach() [ 1856.733508][T17583] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1856.763046][ T875] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1856.855526][ T5888] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 1856.985886][T17583] rc_core: IR keymap rc-dvico-portable not found [ 1856.993625][T17583] Registered IR keymap rc-empty [ 1857.001251][T17583] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1857.014947][ T5888] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1857.030947][ T5888] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1857.054441][T17583] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input172 [ 1857.072885][ T5888] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12335, setting to 64 [ 1857.088440][T17583] dvb-usb: schedule remote query interval to 100 msecs. [ 1857.096951][ T5888] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1857.108523][T17583] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1857.121965][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.153373][T17583] usb 1-1: USB disconnect, device number 52 [ 1857.195213][T30131] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1857.230043][T30131] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1857.273849][ T5888] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1857.354452][T17583] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1857.481378][ T5888] usb 6-1: USB disconnect, device number 114 [ 1857.691690][T28142] usb 5-1: USB disconnect, device number 95 [ 1857.713546][T28142] net1080 5-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 1859.992344][T30248] ALSA: mixer_oss: invalid index -1404626105 [ 1860.495528][ T5888] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 1860.622430][T30278] syz.3.7937 (30278): drop_caches: 2 [ 1860.715501][ T5888] usb 2-1: Invalid ep0 maxpacket: 32 [ 1860.868789][ T5888] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 1861.055934][ T5888] usb 2-1: Invalid ep0 maxpacket: 32 [ 1861.389976][T30294] Cannot find add_set index 1 as target [ 1861.425945][ T5888] usb usb2-port1: attempt power cycle [ 1861.876383][ T5888] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1861.908206][ T5888] usb 2-1: Invalid ep0 maxpacket: 32 [ 1862.051182][ T5888] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1862.126153][ T5888] usb 2-1: Invalid ep0 maxpacket: 32 [ 1862.132008][ T5888] usb usb2-port1: unable to enumerate USB device [ 1862.423182][T30309] veth0: mtu less than device minimum [ 1862.624702][T30317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.638099][T30317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.675571][ T5954] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1862.840281][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 1862.858439][T30330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.872220][T30330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.956332][ T5954] usb 5-1: config 0 has an invalid interface number: 24 but max is 0 [ 1862.964466][ T5954] usb 5-1: config 0 has no interface number 0 [ 1862.975683][ T5954] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.005013][ T5954] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.019509][ T5954] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1863.022433][T30330] program syz.3.7949 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1863.031751][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.078750][ T30] audit: type=1326 audit(1762437899.835:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30333 comm="syz.5.7950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ea98f6c9 code=0x0 [ 1863.100664][ C1] vkms_vblank_simulate: vblank timer overrun [ 1863.124492][ T5954] usb 5-1: config 0 descriptor?? [ 1863.278938][T30343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7950'. [ 1863.406735][T30349] FAULT_INJECTION: forcing a failure. [ 1863.406735][T30349] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.456366][T30349] CPU: 1 UID: 0 PID: 30349 Comm: syz.1.7952 Not tainted syzkaller #0 PREEMPT(full) [ 1863.456393][T30349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1863.456404][T30349] Call Trace: [ 1863.456411][T30349] [ 1863.456420][T30349] dump_stack_lvl+0x189/0x250 [ 1863.456448][T30349] ? __pfx____ratelimit+0x10/0x10 [ 1863.456468][T30349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1863.456488][T30349] ? __pfx__printk+0x10/0x10 [ 1863.456510][T30349] ? __pfx___might_resched+0x10/0x10 [ 1863.456533][T30349] should_fail_ex+0x414/0x560 [ 1863.456562][T30349] should_failslab+0xa8/0x100 [ 1863.456581][T30349] __kmalloc_noprof+0xcb/0x7f0 [ 1863.456603][T30349] ? kfree+0x4d/0x6d0 [ 1863.456619][T30349] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1863.456650][T30349] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1863.456676][T30349] ? tomoyo_domain+0xd9/0x130 [ 1863.456705][T30349] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1863.456726][T30349] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1863.456750][T30349] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1863.456808][T30349] ? __fget_files+0x2a/0x420 [ 1863.456829][T30349] ? __fget_files+0x3a0/0x420 [ 1863.456845][T30349] ? __fget_files+0x2a/0x420 [ 1863.456864][T30349] security_file_ioctl+0xcb/0x2d0 [ 1863.456887][T30349] __se_sys_ioctl+0x47/0x170 [ 1863.456912][T30349] do_syscall_64+0xfa/0xfa0 [ 1863.456932][T30349] ? lockdep_hardirqs_on+0x9c/0x150 [ 1863.456954][T30349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.456969][T30349] ? clear_bhb_loop+0x60/0xb0 [ 1863.456990][T30349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.457005][T30349] RIP: 0033:0x7fb6a918f6c9 [ 1863.457022][T30349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1863.457037][T30349] RSP: 002b:00007fb6aa0ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1863.457058][T30349] RAX: ffffffffffffffda RBX: 00007fb6a93e5fa0 RCX: 00007fb6a918f6c9 [ 1863.457071][T30349] RDX: 0000200000000300 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1863.457090][T30349] RBP: 00007fb6aa0ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.457101][T30349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.457111][T30349] R13: 00007fb6a93e6038 R14: 00007fb6a93e5fa0 R15: 00007fb6a950fa28 [ 1863.457142][T30349] [ 1863.457587][T30349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1863.707431][ T5954] hid (null): invalid report_size 29797 [ 1863.714512][ T5954] hid (null): bogus close delimiter [ 1863.819527][ T5954] usb 5-1: USB disconnect, device number 96 [ 1865.976880][T30435] FAULT_INJECTION: forcing a failure. [ 1865.976880][T30435] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.026382][T30435] CPU: 1 UID: 0 PID: 30435 Comm: syz.3.7965 Not tainted syzkaller #0 PREEMPT(full) [ 1866.026409][T30435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1866.026424][T30435] Call Trace: [ 1866.026432][T30435] [ 1866.026440][T30435] dump_stack_lvl+0x189/0x250 [ 1866.026468][T30435] ? __pfx____ratelimit+0x10/0x10 [ 1866.026496][T30435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1866.026519][T30435] ? __pfx__printk+0x10/0x10 [ 1866.026543][T30435] ? __pfx___might_resched+0x10/0x10 [ 1866.026560][T30435] ? fs_reclaim_acquire+0x7d/0x100 [ 1866.026589][T30435] should_fail_ex+0x414/0x560 [ 1866.026620][T30435] should_failslab+0xa8/0x100 [ 1866.026639][T30435] __kmalloc_noprof+0xcb/0x7f0 [ 1866.026662][T30435] ? tomoyo_encode+0x28b/0x550 [ 1866.026693][T30435] tomoyo_encode+0x28b/0x550 [ 1866.026724][T30435] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1866.026759][T30435] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1866.026781][T30435] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1866.026806][T30435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1866.026867][T30435] ? __fget_files+0x2a/0x420 [ 1866.026890][T30435] ? __fget_files+0x3a0/0x420 [ 1866.026906][T30435] ? __fget_files+0x2a/0x420 [ 1866.026926][T30435] security_file_ioctl+0xcb/0x2d0 [ 1866.026950][T30435] __se_sys_ioctl+0x47/0x170 [ 1866.026974][T30435] do_syscall_64+0xfa/0xfa0 [ 1866.026995][T30435] ? lockdep_hardirqs_on+0x9c/0x150 [ 1866.027017][T30435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.027035][T30435] ? clear_bhb_loop+0x60/0xb0 [ 1866.027057][T30435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.027073][T30435] RIP: 0033:0x7f688ed8f6c9 [ 1866.027089][T30435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1866.027104][T30435] RSP: 002b:00007f688fb56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1866.027122][T30435] RAX: ffffffffffffffda RBX: 00007f688efe5fa0 RCX: 00007f688ed8f6c9 [ 1866.027136][T30435] RDX: 0000200000000300 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1866.027147][T30435] RBP: 00007f688fb56090 R08: 0000000000000000 R09: 0000000000000000 [ 1866.027159][T30435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.027169][T30435] R13: 00007f688efe6038 R14: 00007f688efe5fa0 R15: 00007f688f10fa28 [ 1866.027200][T30435] [ 1866.027291][T30435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1866.698289][T30459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7971'. [ 1867.506395][T30482] Cannot find add_set index 1 as target [ 1867.842725][T30499] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7979'. [ 1868.085533][ T5888] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1868.292232][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1868.453766][ T5888] usb 2-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1868.465781][ T5888] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1868.490531][ T5888] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1868.499856][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.509544][ T5888] usb 2-1: Product: syz [ 1868.513991][ T5888] usb 2-1: Manufacturer: syz [ 1868.520770][ T5888] usb 2-1: SerialNumber: syz [ 1868.730296][ T5888] usb 2-1: config 0 descriptor?? [ 1868.784429][T30556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7983'. [ 1869.019491][T30572] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7987'. [ 1869.153170][T30580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.170360][T30580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.171766][T30581] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1869.612722][T30580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7987'. [ 1869.805518][ T5888] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1869.959526][ T5888] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1869.970030][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.979293][ T5888] usb 5-1: Product: syz [ 1869.984031][ T5888] usb 5-1: Manufacturer: syz [ 1869.990772][ T5888] usb 5-1: SerialNumber: syz [ 1870.000334][ T5888] usb 5-1: config 0 descriptor?? [ 1870.009375][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1870.556364][T30606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7993'. [ 1870.573822][T18276] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1870.585970][T18276] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1870.597026][ T875] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1870.773352][T17583] usb 2-1: USB disconnect, device number 45 [ 1870.790007][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1870.875959][ T875] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1871.036155][ T875] usb 1-1: Using ep0 maxpacket: 16 [ 1871.046527][ T875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1871.058848][ T875] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1871.068309][ T875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.077115][ T875] usb 1-1: Product: syz [ 1871.081362][ T875] usb 1-1: Manufacturer: syz [ 1871.089105][ T875] usb 1-1: SerialNumber: syz [ 1871.098372][ T875] usb 1-1: config 0 descriptor?? [ 1871.106674][ T875] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1871.115175][ T875] usb 1-1: Detected FT232R [ 1871.175687][T17583] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1871.195822][ T10] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1871.305790][ T875] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1871.328183][ T875] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1871.338780][ T875] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1871.349568][T17583] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.363476][ T875] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1871.372725][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1871.378453][T17583] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1871.396934][ T875] usb 1-1: USB disconnect, device number 53 [ 1871.403480][T17583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.411915][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1871.424869][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.434416][ T875] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1871.452479][ T10] usb 6-1: config 0 descriptor?? [ 1871.459613][T17583] usb 2-1: config 0 descriptor?? [ 1871.471302][ T875] ftdi_sio 1-1:0.0: device disconnected [ 1871.480962][T17583] pwc: Askey VC010 type 2 USB webcam detected. [ 1871.595977][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1871.669206][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1871.776703][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1871.792309][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1871.800209][ T10] usb 6-1: media controller created [ 1871.882627][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1871.916862][ T5888] gspca_sunplus: reg_r err -71 [ 1871.923262][ T5888] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1871.939803][ T5888] usb 5-1: USB disconnect, device number 97 [ 1871.973701][T17583] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1871.984279][T17583] pwc: recv_control_msg error -32 req 02 val 2700 [ 1872.012349][T17583] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1872.022810][T17583] pwc: recv_control_msg error -32 req 04 val 1000 [ 1872.044976][T17583] pwc: recv_control_msg error -32 req 04 val 1300 [ 1872.060477][T17583] pwc: recv_control_msg error -32 req 04 val 1400 [ 1872.125638][T30684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.135374][T30684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.253694][T30689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.262802][T30689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.324895][T30689] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1872.358016][ T5888] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1872.515564][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 1872.523696][ T5888] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1872.533035][ T5888] usb 5-1: config 0 has no interface number 0 [ 1872.539214][ T5888] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1872.551421][ T5888] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1872.563444][ T5888] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1872.574671][ T5888] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1872.590849][ T5888] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1872.600037][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.608091][ T5888] usb 5-1: Product: syz [ 1872.612711][ T5888] usb 5-1: Manufacturer: syz [ 1872.617363][ T5888] usb 5-1: SerialNumber: syz [ 1872.625373][ T5888] usb 5-1: config 0 descriptor?? [ 1872.795539][ T10] stb0899_attach: Driver disabled by Kconfig [ 1872.801798][ T10] az6027: no front-end attached [ 1872.801798][ T10] [ 1872.809688][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1872.818839][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input175 [ 1872.836701][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1872.846093][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1872.855141][ T5888] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1873.047108][ C0] iowarrior 5-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 1873.056616][ T5888] usb 5-1: USB disconnect, device number 98 [ 1873.877534][T17583] pwc: recv_control_msg error -71 req 02 val 2100 [ 1873.895089][T17583] pwc: recv_control_msg error -71 req 04 val 1500 [ 1873.906107][T17583] pwc: recv_control_msg error -71 req 02 val 2500 [ 1873.925563][T17583] pwc: recv_control_msg error -71 req 02 val 2400 [ 1873.932423][T17583] pwc: recv_control_msg error -71 req 02 val 2600 [ 1873.948216][T17583] pwc: recv_control_msg error -71 req 02 val 2900 [ 1873.967735][T17583] pwc: recv_control_msg error -71 req 02 val 2800 [ 1873.975809][T28139] usb 6-1: USB disconnect, device number 115 [ 1873.977003][T17583] pwc: recv_control_msg error -71 req 04 val 1100 [ 1874.000068][T17583] pwc: recv_control_msg error -71 req 04 val 1200 [ 1874.028195][T17583] pwc: Registered as video103. [ 1874.046386][T17583] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input176 [ 1874.100723][T17583] usb 2-1: USB disconnect, device number 46 [ 1874.122197][T28139] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1874.498185][T17583] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1874.657815][T17583] usb 2-1: Using ep0 maxpacket: 16 [ 1874.723601][T17583] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1874.731930][T17583] usb 2-1: config 0 has no interface number 0 [ 1874.740846][T17583] usb 2-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1874.784638][T17583] usb 2-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1874.795450][T17583] usb 2-1: config 0 interface 8 has no altsetting 0 [ 1874.802606][T17583] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1874.812183][T17583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.859142][T17583] usb 2-1: config 0 descriptor?? [ 1874.955824][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1875.372662][T30815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.429773][T30815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.645912][T17583] uclogic 0003:5543:0522.008C: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input8 [ 1875.700359][T30828] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x000000000000000d' [ 1875.755696][ T5954] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1875.998255][ T5954] usb 6-1: Using ep0 maxpacket: 16 [ 1876.037110][ T5954] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.048459][ T5954] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.061676][ T5954] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1876.078495][ T5954] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1876.118606][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.151231][ T5954] usb 6-1: config 0 descriptor?? [ 1876.923822][ T5954] hid_parser_main: 144 callbacks suppressed [ 1876.923839][ T5954] apple 0003:05AC:0247.008D: unknown main item tag 0x0 [ 1876.938734][ T5954] apple 0003:05AC:0247.008D: unknown main item tag 0x0 [ 1876.949166][ T5954] apple 0003:05AC:0247.008D: unknown main item tag 0x0 [ 1876.956636][ T5954] apple 0003:05AC:0247.008D: unknown main item tag 0x0 [ 1876.963641][ T5954] apple 0003:05AC:0247.008D: unknown main item tag 0x0 [ 1876.972036][ T5954] apple 0003:05AC:0247.008D: unknown main item tag 0x0 [ 1876.980271][ T5954] apple 0003:05AC:0247.008D: unknown main item tag 0x0 [ 1876.988588][ T5954] apple 0003:05AC:0247.008D: unknown main item tag 0x0 [ 1876.997648][ T5954] apple 0003:05AC:0247.008D: unknown main item tag 0x0 [ 1877.005876][ T5954] apple 0003:05AC:0247.008D: unknown main item tag 0x0 [ 1877.042525][ T5954] apple 0003:05AC:0247.008D: unexpected long global item [ 1877.056722][ T5954] apple 0003:05AC:0247.008D: parse failed [ 1877.064676][ T5954] apple 0003:05AC:0247.008D: probe with driver apple failed with error -22 [ 1877.103328][ T5954] usb 6-1: USB disconnect, device number 116 [ 1877.330562][T30849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8016'. [ 1877.342695][T30849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8016'. [ 1877.360333][T30849] ip6gretap0: entered allmulticast mode [ 1877.425028][T30858] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 1877.910718][ T5888] usb 2-1: USB disconnect, device number 47 [ 1878.338863][T30922] FAULT_INJECTION: forcing a failure. [ 1878.338863][T30922] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.351714][T30922] CPU: 0 UID: 0 PID: 30922 Comm: syz.4.8024 Not tainted syzkaller #0 PREEMPT(full) [ 1878.351739][T30922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1878.351750][T30922] Call Trace: [ 1878.351760][T30922] [ 1878.351769][T30922] dump_stack_lvl+0x189/0x250 [ 1878.351795][T30922] ? __pfx____ratelimit+0x10/0x10 [ 1878.351809][T30922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1878.351821][T30922] ? __pfx__printk+0x10/0x10 [ 1878.351835][T30922] ? __pfx___might_resched+0x10/0x10 [ 1878.351849][T30922] should_fail_ex+0x414/0x560 [ 1878.351866][T30922] should_failslab+0xa8/0x100 [ 1878.351878][T30922] __kmalloc_noprof+0xcb/0x7f0 [ 1878.351891][T30922] ? kfree+0x4d/0x6d0 [ 1878.351901][T30922] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1878.351919][T30922] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1878.351934][T30922] ? tomoyo_domain+0xd9/0x130 [ 1878.351946][T30922] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1878.351958][T30922] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1878.351972][T30922] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1878.352004][T30922] ? __fget_files+0x2a/0x420 [ 1878.352016][T30922] ? __fget_files+0x3a0/0x420 [ 1878.352025][T30922] ? __fget_files+0x2a/0x420 [ 1878.352039][T30922] security_file_ioctl+0xcb/0x2d0 [ 1878.352053][T30922] __se_sys_ioctl+0x47/0x170 [ 1878.352067][T30922] do_syscall_64+0xfa/0xfa0 [ 1878.352079][T30922] ? lockdep_hardirqs_on+0x9c/0x150 [ 1878.352092][T30922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.352102][T30922] ? clear_bhb_loop+0x60/0xb0 [ 1878.352114][T30922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.352124][T30922] RIP: 0033:0x7f135cf8f6c9 [ 1878.352134][T30922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1878.352143][T30922] RSP: 002b:00007f135de82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1878.352155][T30922] RAX: ffffffffffffffda RBX: 00007f135d1e5fa0 RCX: 00007f135cf8f6c9 [ 1878.352163][T30922] RDX: 0000200000000200 RSI: 00000000c040564a RDI: 0000000000000003 [ 1878.352169][T30922] RBP: 00007f135de82090 R08: 0000000000000000 R09: 0000000000000000 [ 1878.352176][T30922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1878.352181][T30922] R13: 00007f135d1e6038 R14: 00007f135d1e5fa0 R15: 00007f135d30fa28 [ 1878.352198][T30922] [ 1878.352203][T30922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1878.446906][T28142] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1878.451039][T17583] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1878.531946][ C0] vkms_vblank_simulate: vblank timer overrun [ 1878.605561][T28142] usb 1-1: Using ep0 maxpacket: 8 [ 1878.630050][T28142] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1878.639482][T28142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.654408][T28142] usb 1-1: Product: syz [ 1878.659819][T28142] usb 1-1: Manufacturer: syz [ 1878.664531][T28142] usb 1-1: SerialNumber: syz [ 1878.676105][T28142] usb 1-1: config 0 descriptor?? [ 1878.736501][T17583] usb 6-1: device descriptor read/64, error -71 [ 1878.875513][ T5888] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1878.888028][T28142] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1878.985584][T17583] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1879.025569][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 1879.033022][ T5888] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 1879.044728][ T5888] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1879.071281][ T5888] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1879.081672][ T5888] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40 [ 1879.091643][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.100169][ T5888] usb 5-1: Product: syz [ 1879.104553][ T5888] usb 5-1: Manufacturer: à¡¡ [ 1879.111772][ T5888] usb 5-1: SerialNumber: syz [ 1879.187364][T17583] usb 6-1: device descriptor read/64, error -71 [ 1879.306250][T17583] usb usb6-port1: attempt power cycle [ 1879.655600][T17583] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1879.681838][T17583] usb 6-1: device descriptor read/8, error -71 [ 1879.732256][T30944] SET target dimension over the limit! [ 1879.849254][T30924] netlink: 165 bytes leftover after parsing attributes in process `syz.4.8025'. [ 1880.021134][T17583] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1880.086333][T17583] usb 6-1: device descriptor read/8, error -71 [ 1880.132056][ T5888] usbhid 5-1:1.0: can't add hid device: -71 [ 1880.143154][ T5888] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1880.170748][ T5888] usb 5-1: USB disconnect, device number 99 [ 1880.246044][T17583] usb usb6-port1: unable to enumerate USB device [ 1880.863192][T28142] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1880.892688][T28142] usb 1-1: USB disconnect, device number 54 [ 1881.179962][T17583] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1881.226860][ T5888] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1881.227446][T31017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.244777][T31017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.293628][T31023] FAULT_INJECTION: forcing a failure. [ 1881.293628][T31023] name failslab, interval 1, probability 0, space 0, times 0 [ 1881.310336][T31023] CPU: 0 UID: 0 PID: 31023 Comm: syz.1.8035 Not tainted syzkaller #0 PREEMPT(full) [ 1881.310360][T31023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1881.310370][T31023] Call Trace: [ 1881.310379][T31023] [ 1881.310387][T31023] dump_stack_lvl+0x189/0x250 [ 1881.310413][T31023] ? __pfx____ratelimit+0x10/0x10 [ 1881.310435][T31023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1881.310458][T31023] ? __pfx__printk+0x10/0x10 [ 1881.310483][T31023] ? __pfx___might_resched+0x10/0x10 [ 1881.310500][T31023] ? fs_reclaim_acquire+0x7d/0x100 [ 1881.310530][T31023] should_fail_ex+0x414/0x560 [ 1881.310566][T31023] should_failslab+0xa8/0x100 [ 1881.310586][T31023] __kmalloc_noprof+0xcb/0x7f0 [ 1881.310608][T31023] ? tomoyo_encode+0x28b/0x550 [ 1881.310638][T31023] tomoyo_encode+0x28b/0x550 [ 1881.310668][T31023] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1881.310704][T31023] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1881.310726][T31023] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1881.310751][T31023] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1881.310819][T31023] ? __fget_files+0x2a/0x420 [ 1881.310841][T31023] ? __fget_files+0x3a0/0x420 [ 1881.310856][T31023] ? __fget_files+0x2a/0x420 [ 1881.310877][T31023] security_file_ioctl+0xcb/0x2d0 [ 1881.310901][T31023] __se_sys_ioctl+0x47/0x170 [ 1881.310924][T31023] do_syscall_64+0xfa/0xfa0 [ 1881.310951][T31023] ? lockdep_hardirqs_on+0x9c/0x150 [ 1881.310974][T31023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.310991][T31023] ? clear_bhb_loop+0x60/0xb0 [ 1881.311009][T31023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.311025][T31023] RIP: 0033:0x7fb6a918f6c9 [ 1881.311039][T31023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1881.311051][T31023] RSP: 002b:00007fb6aa0ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1881.311067][T31023] RAX: ffffffffffffffda RBX: 00007fb6a93e5fa0 RCX: 00007fb6a918f6c9 [ 1881.311078][T31023] RDX: 0000200000000200 RSI: 00000000c040564a RDI: 0000000000000003 [ 1881.311088][T31023] RBP: 00007fb6aa0ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1881.311097][T31023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1881.311107][T31023] R13: 00007fb6a93e6038 R14: 00007fb6a93e5fa0 R15: 00007fb6a950fa28 [ 1881.311139][T31023] [ 1881.311158][T31023] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1881.565556][T17583] usb 6-1: Using ep0 maxpacket: 32 [ 1881.570764][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 1881.581329][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1881.592831][T17583] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1881.601311][T17583] usb 6-1: config 0 has no interface number 0 [ 1881.607479][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024 [ 1881.638915][T17583] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1881.658486][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1881.667829][T17583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.677952][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.689709][T17583] usb 6-1: Product: syz [ 1881.698309][T17583] usb 6-1: Manufacturer: syz [ 1881.702926][T17583] usb 6-1: SerialNumber: syz [ 1881.726539][ T5888] usb 5-1: config 0 descriptor?? [ 1881.735219][T17583] usb 6-1: config 0 descriptor?? [ 1881.751568][T30991] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1881.792445][ T5888] hub 5-1:0.0: USB hub found [ 1881.981347][ T5888] hub 5-1:0.0: 1 port detected [ 1882.130075][T17583] radio-si470x 6-1:0.35: this is not a si470x device. [ 1882.705926][T17583] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1882.735492][ T5888] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1882.887080][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1882.899420][ T5888] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1882.909057][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.917324][ T5888] usb 1-1: Product: syz [ 1882.921613][ T5888] usb 1-1: Manufacturer: syz [ 1882.926425][ T5888] usb 1-1: SerialNumber: syz [ 1882.933628][ T5888] usb 1-1: config 0 descriptor?? [ 1883.597520][ T10] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1883.955828][ T5954] usb 5-1: USB disconnect, device number 100 [ 1884.083592][ T5954] usb 6-1: USB disconnect, device number 121 [ 1884.276422][T31120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1884.555679][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1884.753997][T31135] FAULT_INJECTION: forcing a failure. [ 1884.753997][T31135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.896415][T31135] CPU: 1 UID: 0 PID: 31135 Comm: syz.3.8047 Not tainted syzkaller #0 PREEMPT(full) [ 1884.896447][T31135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1884.896458][T31135] Call Trace: [ 1884.896465][T31135] [ 1884.896474][T31135] dump_stack_lvl+0x189/0x250 [ 1884.896492][T31135] ? __pfx____ratelimit+0x10/0x10 [ 1884.896513][T31135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1884.896536][T31135] ? __pfx__printk+0x10/0x10 [ 1884.896554][T31135] ? __might_fault+0xb0/0x130 [ 1884.896588][T31135] should_fail_ex+0x414/0x560 [ 1884.896608][T31135] _copy_from_user+0x2d/0xb0 [ 1884.896621][T31135] video_usercopy+0x346/0x1450 [ 1884.896639][T31135] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 1884.896655][T31135] ? __pfx_video_usercopy+0x10/0x10 [ 1884.896689][T31135] ? __fget_files+0x3a0/0x420 [ 1884.896710][T31135] v4l2_ioctl+0x18d/0x1e0 [ 1884.896730][T31135] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1884.896746][T31135] __se_sys_ioctl+0xfc/0x170 [ 1884.896760][T31135] do_syscall_64+0xfa/0xfa0 [ 1884.896773][T31135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.896783][T31135] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1884.896792][T31135] ? clear_bhb_loop+0x60/0xb0 [ 1884.896807][T31135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.896824][T31135] RIP: 0033:0x7f688ed8f6c9 [ 1884.896841][T31135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.896855][T31135] RSP: 002b:00007f688fb56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1884.896875][T31135] RAX: ffffffffffffffda RBX: 00007f688efe5fa0 RCX: 00007f688ed8f6c9 [ 1884.896888][T31135] RDX: 0000200000000200 RSI: 00000000c040564a RDI: 0000000000000003 [ 1884.896897][T31135] RBP: 00007f688fb56090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.896903][T31135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.896909][T31135] R13: 00007f688efe6038 R14: 00007f688efe5fa0 R15: 00007f688f10fa28 [ 1884.896925][T31135] [ 1885.155588][ T10] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1885.251600][T31161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.261934][T31161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1885.335524][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1885.355064][ T10] usb 5-1: config 0 has no interfaces? [ 1885.369980][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1885.380462][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1885.390501][ T10] usb 5-1: Manufacturer: syz [ 1885.434583][ T10] usb 5-1: config 0 descriptor?? [ 1885.529910][ T5888] usb 1-1: USB disconnect, device number 55 [ 1885.635126][T11714] udevd[11714]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1885.975543][ T5888] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1886.175465][ T5888] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1886.191070][ T5888] usb 1-1: config 0 has no interface number 0 [ 1886.217119][T31218] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8056'. [ 1886.266091][ T5888] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1886.467995][ T5888] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1886.499232][ T5888] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1886.596403][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.618067][ T5888] usb 1-1: config 0 descriptor?? [ 1886.969531][T31226] binder: BINDER_SET_CONTEXT_MGR already set [ 1886.977289][T31226] binder: 31222:31226 ioctl 4018620d 200000000040 returned -16 [ 1887.146890][ T5888] uclogic 0003:28BD:0905.008E: Interface probing failed: -22 [ 1887.396970][ T5888] uclogic 0003:28BD:0905.008E: interface is invalid, ignoring [ 1887.410905][ T5954] usb 5-1: USB disconnect, device number 101 [ 1887.476252][ T5888] usb 1-1: USB disconnect, device number 56 [ 1887.644030][T31246] FAULT_INJECTION: forcing a failure. [ 1887.644030][T31246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1887.691863][T31246] CPU: 0 UID: 0 PID: 31246 Comm: syz.4.8058 Not tainted syzkaller #0 PREEMPT(full) [ 1887.691889][T31246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1887.691900][T31246] Call Trace: [ 1887.691908][T31246] [ 1887.691915][T31246] dump_stack_lvl+0x189/0x250 [ 1887.691944][T31246] ? __pfx____ratelimit+0x10/0x10 [ 1887.691967][T31246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1887.691989][T31246] ? __pfx__printk+0x10/0x10 [ 1887.692020][T31246] should_fail_ex+0x414/0x560 [ 1887.692050][T31246] _copy_to_user+0x31/0xb0 [ 1887.692073][T31246] video_usercopy+0xe32/0x1450 [ 1887.692099][T31246] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 1887.692119][T31246] ? __pfx_video_usercopy+0x10/0x10 [ 1887.692150][T31246] ? __fget_files+0x3a0/0x420 [ 1887.692170][T31246] v4l2_ioctl+0x18d/0x1e0 [ 1887.692189][T31246] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1887.692204][T31246] __se_sys_ioctl+0xfc/0x170 [ 1887.692226][T31246] do_syscall_64+0xfa/0xfa0 [ 1887.692248][T31246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.692264][T31246] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1887.692282][T31246] ? clear_bhb_loop+0x60/0xb0 [ 1887.692302][T31246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.692318][T31246] RIP: 0033:0x7f135cf8f6c9 [ 1887.692334][T31246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1887.692349][T31246] RSP: 002b:00007f135de82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1887.692369][T31246] RAX: ffffffffffffffda RBX: 00007f135d1e5fa0 RCX: 00007f135cf8f6c9 [ 1887.692402][T31246] RDX: 0000200000000200 RSI: 00000000c040564a RDI: 0000000000000003 [ 1887.692413][T31246] RBP: 00007f135de82090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.692425][T31246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1887.692436][T31246] R13: 00007f135d1e6038 R14: 00007f135d1e5fa0 R15: 00007f135d30fa28 [ 1887.692466][T31246] [ 1887.883591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1887.942248][T31249] fuse: Unknown parameter 'fowner<00000000000000060928' [ 1888.176874][T31253] sctp: [Deprecated]: syz.0.8060 (pid 31253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1888.176874][T31253] Use struct sctp_sack_info instead [ 1888.204202][T31254] futex_wake_op: syz.5.8061 tries to shift op by 32; fix this program [ 1888.535887][ T5954] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1888.545293][ T5888] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1888.655630][T31270] vlan0: entered promiscuous mode [ 1888.661965][T31270] vlan0: entered allmulticast mode [ 1888.667713][T31270] hsr_slave_1: entered allmulticast mode [ 1888.685662][ T5954] usb 6-1: Using ep0 maxpacket: 32 [ 1888.692154][ T5954] usb 6-1: config 5 has an invalid interface number: 34 but max is 0 [ 1888.702712][T31270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8063'. [ 1888.712507][ T5954] usb 6-1: config 5 has no interface number 0 [ 1888.715672][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 1888.718896][ T5954] usb 6-1: config 5 interface 34 has no altsetting 0 [ 1888.726598][ T5888] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1888.741431][T31276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8064'. [ 1888.741448][ T5954] usb 6-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=95.76 [ 1888.765589][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.767326][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.782257][ T5954] usb 6-1: Product: syz [ 1888.795748][ T5954] usb 6-1: Manufacturer: syz [ 1888.800361][ T5954] usb 6-1: SerialNumber: syz [ 1888.842360][ T5888] usb 5-1: config 0 descriptor?? [ 1888.994801][T31276] bridge0: port 4(team0) entered disabled state [ 1889.003234][T31276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8064'. [ 1889.047352][ T5954] usb 6-1: bad CDC descriptors [ 1889.054351][ T5888] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1889.064529][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1889.077779][ T5954] ums-datafab 6-1:5.34: USB Mass Storage device detected [ 1889.088552][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1889.095821][ T5888] usb 5-1: media controller created [ 1889.153637][ T5954] ums-datafab 6-1:5.34: This device (07c4,a001,9576 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1889.153637][ T5954] Please send a copy of this message to and [ 1889.174771][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1889.359859][T31315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.381844][T31315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.393605][ T5888] DVB: Unable to find symbol dib7000p_attach() [ 1889.424452][ T5954] usb 6-1: USB disconnect, device number 122 [ 1889.430773][ T5888] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1889.595616][T31330] Cannot find add_set index 1 as target [ 1889.617102][ T5888] rc_core: IR keymap rc-dib0700-rc5 not found [ 1889.624149][ T5888] Registered IR keymap rc-empty [ 1889.630112][ T5888] dvb-usb: could not initialize remote control. [ 1889.641113][ T5888] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1889.667539][ T5888] usb 5-1: USB disconnect, device number 102 [ 1889.917778][ T5888] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1890.343069][T31360] binder: BINDER_SET_CONTEXT_MGR already set [ 1890.349313][T31360] binder: 31356:31360 ioctl 4018620d 200000000040 returned -16 [ 1890.695562][ T5954] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1890.798294][T31368] FAULT_INJECTION: forcing a failure. [ 1890.798294][T31368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1890.825547][T31368] CPU: 0 UID: 0 PID: 31368 Comm: syz.5.8073 Not tainted syzkaller #0 PREEMPT(full) [ 1890.825571][T31368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1890.825582][T31368] Call Trace: [ 1890.825589][T31368] [ 1890.825596][T31368] dump_stack_lvl+0x189/0x250 [ 1890.825623][T31368] ? __pfx____ratelimit+0x10/0x10 [ 1890.825646][T31368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1890.825660][T31368] ? __pfx__printk+0x10/0x10 [ 1890.825678][T31368] should_fail_ex+0x414/0x560 [ 1890.825703][T31368] _copy_to_user+0x31/0xb0 [ 1890.825726][T31368] simple_read_from_buffer+0xe1/0x170 [ 1890.825753][T31368] proc_fail_nth_read+0x1b3/0x220 [ 1890.825777][T31368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1890.825799][T31368] ? rw_verify_area+0x2a6/0x4d0 [ 1890.825819][T31368] ? __lock_acquire+0xab9/0xd20 [ 1890.825834][T31368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1890.825857][T31368] vfs_read+0x200/0xa30 [ 1890.825880][T31368] ? fdget_pos+0x247/0x320 [ 1890.825898][T31368] ? __pfx___mutex_lock+0x10/0x10 [ 1890.825913][T31368] ? __pfx_vfs_read+0x10/0x10 [ 1890.825928][T31368] ? __fget_files+0x2a/0x420 [ 1890.825940][T31368] ? __fget_files+0x3a0/0x420 [ 1890.825948][T31368] ? __fget_files+0x2a/0x420 [ 1890.825962][T31368] ksys_read+0x145/0x250 [ 1890.825976][T31368] ? __pfx_ksys_read+0x10/0x10 [ 1890.825990][T31368] ? do_syscall_64+0xbe/0xfa0 [ 1890.826005][T31368] do_syscall_64+0xfa/0xfa0 [ 1890.826016][T31368] ? lockdep_hardirqs_on+0x9c/0x150 [ 1890.826028][T31368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.826038][T31368] ? clear_bhb_loop+0x60/0xb0 [ 1890.826050][T31368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.826059][T31368] RIP: 0033:0x7f97ea98e0dc [ 1890.826070][T31368] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1890.826079][T31368] RSP: 002b:00007f97e8bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1890.826091][T31368] RAX: ffffffffffffffda RBX: 00007f97eabe5fa0 RCX: 00007f97ea98e0dc [ 1890.826098][T31368] RDX: 000000000000000f RSI: 00007f97e8bf60a0 RDI: 0000000000000004 [ 1890.826104][T31368] RBP: 00007f97e8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1890.826110][T31368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.826116][T31368] R13: 00007f97eabe6038 R14: 00007f97eabe5fa0 R15: 00007f97ead0fa28 [ 1890.826133][T31368] [ 1890.847280][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1891.288254][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1891.299345][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1891.315217][ T5954] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1891.325350][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.359935][ T5954] usb 2-1: Product: syz [ 1891.369558][ T5954] usb 2-1: Manufacturer: syz [ 1891.404006][T31380] tipc: Started in network mode [ 1891.409006][T31380] tipc: Node identity ac1414aa, cluster identity 4711 [ 1891.471038][T31380] tipc: Enabled bearer , priority 10 [ 1891.523617][ T5954] usb 2-1: SerialNumber: syz [ 1891.540985][ T5954] usb 2-1: config 0 descriptor?? [ 1891.565526][ T5888] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1891.600589][T31380] tipc: Enabled bearer , priority 0 [ 1891.945511][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 1892.131445][ T5888] usb 1-1: config 0 has an invalid interface number: 80 but max is 0 [ 1892.254022][ T5888] usb 1-1: config 0 has no interface number 0 [ 1892.305622][ T5888] usb 1-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=91.1b [ 1892.317520][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.348614][ T5888] usb 1-1: Product: syz [ 1892.369618][ T5888] usb 1-1: Manufacturer: syz [ 1892.389630][ T5888] usb 1-1: SerialNumber: syz [ 1892.430448][ T5888] usb 1-1: config 0 descriptor?? [ 1892.469168][ T5888] gspca_main: finepix-2.14.0 probing 04cb:0109 [ 1892.605534][ T10] tipc: Node number set to 2886997162 [ 1892.782316][ T5888] usb 1-1: USB disconnect, device number 57 [ 1892.884844][T31401] xt_CONNSECMARK: invalid mode: 0 [ 1892.918886][T31401] random: crng reseeded on system resumption [ 1893.008936][T31405] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1893.718640][T31416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1894.009410][T31422] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8080'. [ 1894.080844][T31428] ptrace attach of ""[31429] was attempted by "./syz-executor exec"[31428] [ 1894.205822][ T5888] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1894.387185][ T5888] usb 1-1: config index 0 descriptor too short (expected 8028, got 92) [ 1894.399466][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.415876][ T5888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1894.471590][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1894.481058][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.490371][ T5888] usb 1-1: Product: syz [ 1894.494679][ T5888] usb 1-1: Manufacturer: syz [ 1894.499807][ T5888] usb 1-1: SerialNumber: syz [ 1894.515999][T28142] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1894.675612][T28142] usb 6-1: Using ep0 maxpacket: 8 [ 1894.683861][T28142] usb 6-1: config 5 has an invalid interface number: 35 but max is 1 [ 1894.692728][T28142] usb 6-1: config 5 has an invalid interface number: 4 but max is 1 [ 1894.730593][T31423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1894.739210][T28142] usb 6-1: config 5 has an invalid interface number: 4 but max is 1 [ 1894.748503][T31423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1894.775905][T28142] usb 6-1: config 5 has no interface number 0 [ 1894.850801][T28142] usb 6-1: config 5 has no interface number 1 [ 1894.930385][T28142] usb 6-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1894.998876][T28142] usb 6-1: config 5 interface 4 altsetting 9 endpoint 0x5 has an invalid bInterval 64, changing to 10 [ 1895.098577][T28142] usb 6-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1895.112517][T28142] usb 6-1: config 5 interface 35 has no altsetting 0 [ 1895.141248][T28142] usb 6-1: config 5 interface 4 has no altsetting 0 [ 1895.158342][T28142] usb 6-1: config 5 interface 4 has no altsetting 1 [ 1895.186242][T28142] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 1895.195692][T28142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.203848][T28142] usb 6-1: Product: syz [ 1895.232792][T28142] usb 6-1: Manufacturer: syz [ 1895.242950][T28142] usb 6-1: SerialNumber: syz [ 1895.386317][ T5888] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 1895.413796][ T5888] cdc_ncm 1-1:1.0: bind() failure [ 1895.440784][ T5888] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1895.465589][ T5888] cdc_ncm 1-1:1.1: bind() failure [ 1895.482395][T28142] ttusbir 6-1:5.35: cannot find expected altsetting [ 1895.500100][ T5888] usb 1-1: USB disconnect, device number 58 [ 1895.547838][T28142] ttusbir 6-1:5.4: cannot find expected altsetting [ 1895.595787][T28142] usb 6-1: USB disconnect, device number 123 [ 1896.386776][ T5888] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1896.460537][T31491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.469414][T31491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.525550][ T5888] usb 1-1: device descriptor read/64, error -71 [ 1896.765564][ T5888] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1896.895520][ T5888] usb 1-1: device descriptor read/64, error -71 [ 1897.005836][ T5888] usb usb1-port1: attempt power cycle [ 1897.365545][ T5888] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1897.406348][ T5888] usb 1-1: device descriptor read/8, error -71 [ 1897.645615][ T5888] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1897.676183][ T5888] usb 1-1: device descriptor read/8, error -71 [ 1897.785775][ T5888] usb usb1-port1: unable to enumerate USB device [ 1898.451519][T31516] fuse: Bad value for 'rootmode' [ 1899.136999][ T5888] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 1899.283195][T31536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8101'. [ 1899.293771][T31536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8101'. [ 1899.295713][ T5888] usb 6-1: device descriptor read/64, error -71 [ 1899.325144][T31536] ip6gretap0: entered allmulticast mode [ 1899.443656][T31544] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8100'. [ 1899.655668][ T5888] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 1899.815678][ T5888] usb 6-1: device descriptor read/64, error -71 [ 1899.938007][ T5888] usb usb6-port1: attempt power cycle [ 1900.157951][T31548] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1900.246076][T31551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8103'. [ 1900.258711][T31552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8103'. [ 1900.295572][ T5888] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 1900.336263][ T5888] usb 6-1: device descriptor read/8, error -71 [ 1900.503238][T31568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1900.516207][T31568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1900.585606][ T5888] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1900.617087][ T5888] usb 6-1: device descriptor read/8, error -71 [ 1900.726771][ T5888] usb usb6-port1: unable to enumerate USB device [ 1900.995482][ T5888] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1901.155572][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 1901.191684][ T5888] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1901.202973][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.275170][ T5888] usb 1-1: Product: syz [ 1901.284555][ T5888] usb 1-1: Manufacturer: syz [ 1901.294142][ T5888] usb 1-1: SerialNumber: syz [ 1901.316762][ T5888] usb 1-1: config 0 descriptor?? [ 1901.339993][ T5888] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1901.974487][ T5954] iguanair 2-1:0.0: failed to get version [ 1901.984150][ C1] iguanair 2-1:0.0: failed to resubmit urb: -1 [ 1901.990626][ T5954] iguanair 2-1:0.0: probe with driver iguanair failed with error -110 [ 1902.003071][ T5954] usb 2-1: USB disconnect, device number 48 [ 1902.475597][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1903.124328][T31672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8117'. [ 1903.175728][ T5888] gspca_stk1135: reg_w 0xd err -110 [ 1903.182057][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 1903.188550][ T5888] gspca_stk1135: Sensor write failed [ 1903.193910][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 1903.202903][ T5888] gspca_stk1135: Sensor write failed [ 1903.210412][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 1903.217740][ T5888] gspca_stk1135: Sensor read failed [ 1903.223148][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 1903.229872][ T5888] gspca_stk1135: Sensor read failed [ 1903.235152][ T5888] gspca_stk1135: Detected sensor type unknown (0x0) [ 1903.242784][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 1903.249493][ T5888] gspca_stk1135: Sensor read failed [ 1903.254858][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 1903.261381][ T5888] gspca_stk1135: Sensor read failed [ 1903.266981][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 1903.273397][ T5888] gspca_stk1135: Sensor write failed [ 1903.278861][ T5888] gspca_stk1135: serial bus timeout: status=0x00 [ 1903.285276][ T5888] gspca_stk1135: Sensor write failed [ 1903.291729][ T5888] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 1903.301609][T31401] Unrecognized hibernate image header format! [ 1903.312599][T31401] PM: hibernation: Image mismatch: architecture specific data [ 1903.463981][T31680] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1903.998020][ T5954] usb 1-1: USB disconnect, device number 63 [ 1904.055499][ T5888] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1904.248016][ T5888] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1904.301773][T31718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.341333][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.373971][ T5888] usb 6-1: config 0 descriptor?? [ 1904.382441][T31718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.471823][T31718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.491513][T31725] Cannot find add_set index 1 as target [ 1904.574125][T31718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1905.100059][T31693] fuse: Bad value for 'group_id' [ 1905.109133][T31693] fuse: Bad value for 'group_id' [ 1905.382475][T31739] netlink: 'syz.4.8126': attribute type 13 has an invalid length. [ 1905.677483][T31742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1905.688683][T31742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1905.722773][T31742] dummy0: entered promiscuous mode [ 1905.739957][T31742] vlan0: entered promiscuous mode [ 1906.535507][T17583] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1906.694211][T17583] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.731973][T17583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1906.751945][T31777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8132'. [ 1906.761531][T17583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1906.773655][T31777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8132'. [ 1906.785984][T17583] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1906.804020][T17583] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1906.814045][T17583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.842000][T17583] usb 2-1: config 0 descriptor?? [ 1906.898619][T31780] hub 9-0:1.0: USB hub found [ 1906.905966][T31780] hub 9-0:1.0: 1 port detected [ 1907.124102][T31765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.133852][T31765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.144400][T17583] usb 2-1: USB disconnect, device number 49 [ 1907.334767][ T5888] usb 6-1: Cannot set autoneg [ 1907.370256][ T5888] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1907.445112][ T5888] usb 6-1: USB disconnect, device number 2 [ 1908.006492][T31820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.024295][T31820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.077668][T28142] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1908.138560][T31829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8138'. [ 1908.255579][T28142] usb 5-1: Using ep0 maxpacket: 32 [ 1908.262189][T28142] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 1908.273931][T28142] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1908.282405][T28142] usb 5-1: can't read configurations, error -61 [ 1908.415592][T28142] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1908.445530][ T5888] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1908.798300][T31838] Cannot find add_set index 1 as target [ 1908.848663][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 1908.865667][T28142] usb 5-1: Using ep0 maxpacket: 32 [ 1908.871760][T28142] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 1908.882350][T28142] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1908.890505][T28142] usb 5-1: can't read configurations, error -61 [ 1908.913165][T28142] usb usb5-port1: attempt power cycle [ 1909.011026][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1909.038102][ T5888] usb 1-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1909.049446][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.161941][ T5888] usb 1-1: config 0 descriptor?? [ 1909.264177][T28142] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1909.306317][T28142] usb 5-1: Using ep0 maxpacket: 32 [ 1909.312306][T28142] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 1909.322989][T28142] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1909.330891][T28142] usb 5-1: can't read configurations, error -61 [ 1909.435663][T17583] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1909.465744][T28142] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1909.489280][T28142] usb 5-1: Using ep0 maxpacket: 32 [ 1909.495024][T28142] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 1909.513489][T28142] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1909.521331][T28142] usb 5-1: can't read configurations, error -61 [ 1909.529570][T31858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1909.544901][T31858] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1909.558966][ T30] audit: type=1800 audit(1762437946.325:3176): pid=31858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8144" name="nullb0" dev="devtmpfs" ino=3754 res=0 errno=0 [ 1909.581433][T28142] usb usb5-port1: unable to enumerate USB device [ 1909.586752][ T5888] aquacomputer_d5next 0003:0C70:F003.008F: item fetching failed at offset 4/5 [ 1909.608832][ T5888] aquacomputer_d5next 0003:0C70:F003.008F: probe with driver aquacomputer_d5next failed with error -22 [ 1909.627345][T17583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1909.640559][T17583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1909.650818][T17583] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1909.664362][T17583] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1909.673510][T17583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.683859][T17583] usb 2-1: config 0 descriptor?? [ 1909.786032][T31831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.797576][T31831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.808779][ T5888] usb 1-1: USB disconnect, device number 64 [ 1909.867795][T31880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.879765][T31880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.903402][T17583] hid_parser_main: 827 callbacks suppressed [ 1909.903423][T17583] plantronics 0003:047F:FFFF.0090: unknown main item tag 0x0 [ 1909.927155][T17583] plantronics 0003:047F:FFFF.0090: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1910.099530][ T5888] usb 2-1: USB disconnect, device number 50 [ 1910.351503][T31912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8147'. [ 1910.433575][T31918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8149'. [ 1910.508127][T17583] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1910.738331][T17583] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1911.043059][T17583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.093799][T17583] usb 6-1: config 0 descriptor?? [ 1911.144489][T17583] usb 6-1: selecting invalid altsetting 3 [ 1911.185465][T17583] comedi comedi5: could not set alternate setting 3 in high speed [ 1911.226479][T17583] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1911.254286][T17583] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1911.327803][T31940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8151'. [ 1911.370130][T31940] team1: entered promiscuous mode [ 1911.376545][T31940] team1: entered allmulticast mode [ 1911.537367][ T30] audit: type=1326 audit(1762437948.305:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31906 comm="syz.5.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ea98f6c9 code=0x7ffc0000 [ 1911.589027][T31984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1911.641486][T31984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1911.685490][ T30] audit: type=1326 audit(1762437948.345:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31906 comm="syz.5.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ea98f6c9 code=0x7ffc0000 [ 1911.767212][ T30] audit: type=1326 audit(1762437948.355:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31906 comm="syz.5.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f97ea98f6c9 code=0x7ffc0000 [ 1911.809467][ T5954] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1911.956500][ T30] audit: type=1326 audit(1762437948.355:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31906 comm="syz.5.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ea98f6c9 code=0x7ffc0000 [ 1911.978951][ C0] vkms_vblank_simulate: vblank timer overrun [ 1911.988129][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 1912.027333][ T30] audit: type=1326 audit(1762437948.355:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31906 comm="syz.5.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97ea98df10 code=0x7ffc0000 [ 1912.049773][ C0] vkms_vblank_simulate: vblank timer overrun [ 1912.056745][ T30] audit: type=1326 audit(1762437948.355:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31906 comm="syz.5.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97ea98f2cb code=0x7ffc0000 [ 1912.079067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1912.097787][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1912.117143][ T30] audit: type=1326 audit(1762437948.355:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31906 comm="syz.5.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97ea98f2cb code=0x7ffc0000 [ 1912.140906][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1912.141744][ T30] audit: type=1326 audit(1762437948.525:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31906 comm="syz.5.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ea98f6c9 code=0x7ffc0000 [ 1912.151466][T28142] usb 6-1: USB disconnect, device number 3 [ 1912.173805][ T30] audit: type=1326 audit(1762437948.525:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31906 comm="syz.5.8146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ea98f6c9 code=0x7ffc0000 [ 1912.182205][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1912.264324][ T5954] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1912.281938][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.290485][ T5954] usb 2-1: Product: syz [ 1912.295269][ T5954] usb 2-1: Manufacturer: syz [ 1912.306878][ T5954] usb 2-1: SerialNumber: syz [ 1912.317142][ T5954] usb 2-1: config 0 descriptor?? [ 1912.329621][T31985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1912.361023][ T5954] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 1912.367396][ T5954] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 1912.374049][ T5954] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 1912.380527][ T5954] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 1912.388055][ T5954] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 1912.576508][T31985] netlink: 'syz.1.8152': attribute type 5 has an invalid length. [ 1912.598254][T31985] ip6erspan0: entered promiscuous mode [ 1914.485963][T17583] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1914.520653][ T5954] usb 2-1: USB disconnect, device number 51 [ 1914.528638][ T5954] mcba_usb 2-1:0.0 can0: device disconnected [ 1914.637491][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.645145][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.650388][T17583] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1914.675454][T17583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.683511][T17583] usb 5-1: Product: syz [ 1914.695598][T28139] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1914.730122][T17583] usb 5-1: Manufacturer: syz [ 1914.745027][T17583] usb 5-1: SerialNumber: syz [ 1914.765908][T17583] usb 5-1: config 0 descriptor?? [ 1914.856730][T32100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8160'. [ 1914.867599][T28139] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1914.885503][T28139] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1914.924419][T28139] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1914.960099][T28139] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1914.979789][T28139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.008373][T28139] usb 6-1: Product: syz [ 1915.018894][T28139] usb 6-1: Manufacturer: syz [ 1915.035480][T28139] usb 6-1: SerialNumber: syz [ 1915.056174][T28139] usb 6-1: config 0 descriptor?? [ 1915.072070][T32074] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1915.085977][T32074] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1915.103186][T28139] usb 6-1: ucan: probing device on interface #0 [ 1915.211434][T17583] airspy 5-1:0.0: Board ID: 00 [ 1915.221471][T17583] airspy 5-1:0.0: Firmware version: [ 1915.365547][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1915.535518][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1915.558970][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1915.575564][ T10] usb 2-1: config 0 has no interface number 0 [ 1915.589469][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1915.605452][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.643494][ T10] usb 2-1: Product: syz [ 1915.648308][ T10] usb 2-1: Manufacturer: syz [ 1915.652936][ T10] usb 2-1: SerialNumber: syz [ 1915.672512][T17583] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 1915.704396][ T10] usb 2-1: config 0 descriptor?? [ 1915.710910][T17583] airspy 5-1:0.0: Registered as swradio24 [ 1915.727359][T17583] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1915.728856][T28139] ucan 6-1:0.0: probe with driver ucan failed with error -22 [ 1915.740688][ T10] smsc95xx v2.0.0 [ 1915.782151][T17583] usb 5-1: USB disconnect, device number 107 [ 1915.920136][T32143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.957308][T32074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.972610][T32074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.984091][T32143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.001698][T28139] usb 6-1: USB disconnect, device number 4 [ 1916.071710][T32157] Cannot find add_set index 1 as target [ 1916.132451][T32143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.143225][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1916.180824][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1916.196035][T32143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.911921][T32168] ipip0: entered promiscuous mode [ 1916.917383][T32168] ipip0: entered allmulticast mode [ 1918.056996][T32182] IPVS: Error connecting to the multicast addr [ 1918.186558][T32188] vlan0: entered promiscuous mode [ 1918.194943][T32188] team0: entered promiscuous mode [ 1918.354382][T32197] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1918.360939][T32197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1918.398174][T32197] vhci_hcd vhci_hcd.0: Device attached [ 1918.416612][T32197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.436118][T32197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1918.472275][T32197] netdevsim netdevsim3: Direct firmware load for x failed with error -2 [ 1918.483909][T32197] netdevsim netdevsim3: Falling back to sysfs fallback for: x [ 1918.529014][T32203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8168'. [ 1918.587615][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1918.600065][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1918.681995][T28139] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1918.692634][T32217] Cannot find add_set index 1 as target [ 1918.766342][ T10] usb 2-1: USB disconnect, device number 52 [ 1918.945606][ T875] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1919.251947][ T875] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1919.282864][ T875] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1919.347426][ T875] usb 5-1: config 150 has no interface number 0 [ 1919.407688][ T875] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1919.516810][ T875] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1919.545579][ T5954] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1919.553363][ T875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.565456][ T875] usb 5-1: Product: syz [ 1919.578228][ T875] usb 5-1: Manufacturer: syz [ 1919.623375][ T875] usb 5-1: SerialNumber: syz [ 1919.695639][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 1919.702943][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1919.714865][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1919.738824][ T5954] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1919.751508][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.767441][ T5954] usb 2-1: Product: syz [ 1919.778601][ T5954] usb 2-1: Manufacturer: syz [ 1919.791170][ T5954] usb 2-1: SerialNumber: syz [ 1919.823475][ T5954] usb 2-1: config 0 descriptor?? [ 1919.844871][ T5954] usb 2-1: no audio or video endpoints found [ 1919.947743][ T875] xr_serial 5-1:150.204: skipping garbage [ 1919.964430][ T875] xr_serial 5-1:150.204: xr_serial converter detected [ 1920.048477][ T875] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1920.053243][ T5954] usb 2-1: USB disconnect, device number 53 [ 1920.064298][ T875] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1920.132268][ T875] usb 5-1: USB disconnect, device number 108 [ 1920.150003][ T875] xr_serial 5-1:150.204: device disconnected [ 1920.421023][T32199] vhci_hcd: connection reset by peer [ 1920.446831][T12136] vhci_hcd: stop threads [ 1920.451111][T12136] vhci_hcd: release socket [ 1920.461354][T12136] vhci_hcd: disconnect device [ 1920.684595][T32291] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 1922.015551][ T875] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1922.052263][T32311] Cannot find add_set index 1 as target [ 1922.321089][T32323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8188'. [ 1922.496971][ T875] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1922.510341][ T875] usb 2-1: not running at top speed; connect to a high speed hub [ 1922.525593][ T875] usb 2-1: config 16 has an invalid interface number: 103 but max is 0 [ 1922.625322][ T875] usb 2-1: config 16 has no interface number 0 [ 1922.640693][ T875] usb 2-1: config 16 interface 103 has no altsetting 0 [ 1922.828641][ T875] usb 2-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=e3.b9 [ 1922.849677][ T875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.863545][ T875] usb 2-1: Product: syz [ 1922.872562][ T875] usb 2-1: Manufacturer: syz [ 1922.881941][ T875] usb 2-1: SerialNumber: syz [ 1922.915699][ T5832] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1923.165561][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 1923.217308][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.248387][ T5832] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1923.264334][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.311675][ T5832] usb 6-1: Product: syz [ 1923.325079][ T5832] usb 6-1: Manufacturer: syz [ 1923.342070][ T5832] usb 6-1: SerialNumber: syz [ 1923.385015][ T5832] usb 6-1: config 0 descriptor?? [ 1923.414323][ T5832] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1923.615889][T32330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.649425][T32330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.691163][ T5832] gspca_sunplus: reg_r err -32 [ 1923.755749][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1923.815777][T28139] vhci_hcd: vhci_device speed not set [ 1923.931246][ T10] usb 1-1: too many configurations: 234, using maximum allowed: 8 [ 1923.941249][ T10] usb 1-1: config index 0 descriptor too short (expected 65470, got 45) [ 1923.952377][ T10] usb 1-1: config index 1 descriptor too short (expected 65470, got 45) [ 1923.967585][ T10] usb 1-1: config index 2 descriptor too short (expected 65470, got 45) [ 1923.978202][ T10] usb 1-1: config index 3 descriptor too short (expected 65470, got 45) [ 1923.988875][ T10] usb 1-1: config index 4 descriptor too short (expected 65470, got 45) [ 1923.999716][ T10] usb 1-1: config index 5 descriptor too short (expected 65470, got 45) [ 1924.010156][ T10] usb 1-1: config index 6 descriptor too short (expected 65470, got 45) [ 1924.020613][ T10] usb 1-1: config index 7 descriptor too short (expected 65470, got 45) [ 1924.032360][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1924.045631][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.054047][ T10] usb 1-1: Product: syz [ 1924.059192][ T10] usb 1-1: Manufacturer: syz [ 1924.063841][ T10] usb 1-1: SerialNumber: syz [ 1924.295218][T32373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1924.307489][T32373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.382914][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1924.418678][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1924.435057][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1924.471013][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1924.486607][ T875] usb 2-1: USB disconnect, device number 54 [ 1924.535555][ T10] usb 1-1: USB disconnect, device number 65 [ 1924.587041][ T5895] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1924.685633][ T5832] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1924.748519][ T5895] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1924.757761][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.776466][ T5895] usb 5-1: config 0 descriptor?? [ 1924.786221][ T5895] cp210x 5-1:0.0: cp210x converter detected [ 1924.795101][ T10] usb 6-1: USB disconnect, device number 5 [ 1925.043653][ T5895] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1925.080321][ T5895] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1925.260797][ T5832] usb 5-1: USB disconnect, device number 109 [ 1925.272587][ T5832] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1925.414837][ T5832] cp210x 5-1:0.0: device disconnected [ 1926.467585][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1926.467597][ T30] audit: type=1326 audit(1762437963.235:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d978f6c9 code=0x7ffc0000 [ 1926.615606][ T30] audit: type=1326 audit(1762437963.275:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d978f6c9 code=0x7ffc0000 [ 1926.645510][ T5832] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1926.688751][ T30] audit: type=1326 audit(1762437963.275:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77d978df10 code=0x7ffc0000 [ 1926.752438][ T30] audit: type=1326 audit(1762437963.275:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d978f6c9 code=0x7ffc0000 [ 1926.790693][ T30] audit: type=1326 audit(1762437963.275:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d978f6c9 code=0x7ffc0000 [ 1926.813125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1926.835567][ T30] audit: type=1326 audit(1762437963.275:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f77d978f6c9 code=0x7ffc0000 [ 1926.850145][ T5832] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1926.871401][ T30] audit: type=1326 audit(1762437963.275:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d978f6c9 code=0x7ffc0000 [ 1926.880252][ T5832] usb 5-1: not running at top speed; connect to a high speed hub [ 1926.896554][ T30] audit: type=1326 audit(1762437963.275:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77d978f6c9 code=0x7ffc0000 [ 1926.928809][ T5832] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.942856][T32503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.955207][ T5832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1926.955327][T32504] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 1926.966924][T32503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.983096][ T30] audit: type=1326 audit(1762437963.275:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d978f6c9 code=0x7ffc0000 [ 1926.996452][T28139] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1927.021878][ T5832] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1927.041441][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.056681][ T30] audit: type=1326 audit(1762437963.275:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.0.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77d978df10 code=0x7ffc0000 [ 1927.066398][ T5832] usb 5-1: Product: syz [ 1927.079143][ C0] vkms_vblank_simulate: vblank timer overrun [ 1927.089469][ T5832] usb 5-1: Manufacturer: syz [ 1927.094070][ T5832] usb 5-1: SerialNumber: syz [ 1927.185663][T28139] usb 1-1: Using ep0 maxpacket: 16 [ 1927.192851][T28139] usb 1-1: config index 0 descriptor too short (expected 36, got 26) [ 1927.201329][T28139] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1927.211711][T28139] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1927.226043][T28139] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1927.235310][T28139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.256366][T28139] usb 1-1: config 0 descriptor?? [ 1927.269067][T28139] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1927.314832][T32486] macvlan0: entered promiscuous mode [ 1927.320745][T32486] netlink: 'syz.4.8209': attribute type 1 has an invalid length. [ 1927.329307][T32486] netlink: 'syz.4.8209': attribute type 2 has an invalid length. [ 1927.354115][ T5832] usb 5-1: 0:2 : does not exist [ 1927.381282][ T5832] usb 5-1: USB disconnect, device number 110 [ 1927.995856][T32555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8221'. [ 1928.180052][T32561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.196196][T32561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.396890][T32566] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1928.403420][T32566] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1928.609601][T32566] vhci_hcd vhci_hcd.0: Device attached [ 1928.765239][T32572] vhci_hcd: connection closed [ 1928.765719][T12136] vhci_hcd: stop threads [ 1928.795107][T12136] vhci_hcd: release socket [ 1928.807824][T12136] vhci_hcd: disconnect device [ 1928.887013][T32584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.971375][T32584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.047616][ T5895] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1929.228238][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 1929.234954][ T5895] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 1929.263844][ T5895] usb 5-1: config 0 has no interface number 0 [ 1929.283555][ T5895] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 1929.322830][ T5895] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 1929.395331][ T5895] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1929.422185][ T5895] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1929.455646][ T5895] usb 5-1: Product: syz [ 1929.469023][ T5895] usb 5-1: Manufacturer: syz [ 1929.480276][ T5895] usb 5-1: SerialNumber: syz [ 1929.514337][ T5895] usb 5-1: config 0 descriptor?? [ 1929.556663][ T5895] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 1929.597671][ T5895] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 1929.613685][T32597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8227'. [ 1929.623362][ T5895] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 1929.651417][ T5895] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1929.671029][ T5895] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 1929.689804][ T5895] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1929.709677][ T5895] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 1929.743867][ T5895] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1929.765181][ T875] usb 1-1: USB disconnect, device number 66 [ 1929.811594][ T5895] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 1929.852991][ T5895] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1929.887662][ T5895] usb 5-1: USB disconnect, device number 111 [ 1930.004809][ T5895] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1930.047972][ T5895] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1930.087405][ T5895] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1930.126374][ T5895] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1930.164472][ T5895] keyspan 5-1:0.107: device disconnected [ 1930.335555][ T875] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1930.595946][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1930.625730][ T875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.637640][ T875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.658656][ T875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1930.686633][ T875] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1930.710842][ T875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.749621][ T875] usb 1-1: config 0 descriptor?? [ 1930.788891][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1930.799270][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1112, setting to 1024 [ 1930.828432][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1930.858210][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1930.906964][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1930.919764][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.925690][T28139] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1930.928472][ T10] usb 2-1: Product: syz [ 1930.940966][ T10] usb 2-1: Manufacturer: syz [ 1930.947254][ T10] usb 2-1: SerialNumber: syz [ 1930.968243][T32657] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1930.979862][T32657] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1931.088742][T28139] usb 5-1: Using ep0 maxpacket: 16 [ 1931.099561][T28139] usb 5-1: no configurations [ 1931.111947][T28139] usb 5-1: can't read configurations, error -22 [ 1931.192366][ T875] plantronics 0003:047F:FFFF.0091: reserved main item tag 0xd [ 1931.223991][ T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1931.247144][ T875] plantronics 0003:047F:FFFF.0091: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1931.255583][T28139] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1931.286368][ T10] usb 2-1: USB disconnect, device number 55 [ 1931.395513][ T5832] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1931.415746][T28139] usb 5-1: Using ep0 maxpacket: 16 [ 1931.428685][T28139] usb 5-1: no configurations [ 1931.433311][T28139] usb 5-1: can't read configurations, error -22 [ 1931.452348][T32631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.461342][T32631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.465166][T28139] usb usb5-port1: attempt power cycle [ 1931.475858][ T875] usb 1-1: USB disconnect, device number 67 [ 1931.557923][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 1931.567674][ T5832] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1931.577102][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.585092][ T5832] usb 6-1: Product: syz [ 1931.590387][ T5832] usb 6-1: Manufacturer: syz [ 1931.594995][ T5832] usb 6-1: SerialNumber: syz [ 1931.605235][ T5832] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1931.612119][ T5832] r8152-cfgselector 6-1: config 0 descriptor?? [ 1931.703600][T32712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.714600][T32712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.729113][T32713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.742053][T32713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.816028][T28139] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1931.827863][T32722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8240'. [ 1931.841897][T28139] usb 5-1: Using ep0 maxpacket: 16 [ 1931.851981][T28139] usb 5-1: no configurations [ 1931.857225][T28139] usb 5-1: can't read configurations, error -22 [ 1931.995545][T28139] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1932.036519][T28139] usb 5-1: Using ep0 maxpacket: 16 [ 1932.045537][T28139] usb 5-1: no configurations [ 1932.050700][T28139] usb 5-1: can't read configurations, error -22 [ 1932.063573][T28139] usb usb5-port1: unable to enumerate USB device [ 1932.094205][T32737] FAULT_INJECTION: forcing a failure. [ 1932.094205][T32737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1932.109801][T32737] CPU: 1 UID: 0 PID: 32737 Comm: syz.1.8247 Not tainted syzkaller #0 PREEMPT(full) [ 1932.109817][T32737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1932.109823][T32737] Call Trace: [ 1932.109828][T32737] [ 1932.109833][T32737] dump_stack_lvl+0x189/0x250 [ 1932.109851][T32737] ? __pfx____ratelimit+0x10/0x10 [ 1932.109864][T32737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1932.109877][T32737] ? __pfx__printk+0x10/0x10 [ 1932.109888][T32737] ? __might_fault+0xb0/0x130 [ 1932.109907][T32737] should_fail_ex+0x414/0x560 [ 1932.109924][T32737] _copy_from_user+0x2d/0xb0 [ 1932.109937][T32737] ___sys_sendmsg+0x158/0x2a0 [ 1932.109950][T32737] ? __pfx____sys_sendmsg+0x10/0x10 [ 1932.109978][T32737] ? __fget_files+0x2a/0x420 [ 1932.109987][T32737] ? __fget_files+0x3a0/0x420 [ 1932.110001][T32737] __sys_sendmmsg+0x227/0x430 [ 1932.110014][T32737] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1932.110029][T32737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1932.110051][T32737] ? ksys_write+0x22a/0x250 [ 1932.110065][T32737] ? __pfx_ksys_write+0x10/0x10 [ 1932.110080][T32737] __x64_sys_sendmmsg+0xa0/0xc0 [ 1932.110092][T32737] do_syscall_64+0xfa/0xfa0 [ 1932.110104][T32737] ? lockdep_hardirqs_on+0x9c/0x150 [ 1932.110116][T32737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.110126][T32737] ? clear_bhb_loop+0x60/0xb0 [ 1932.110138][T32737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1932.110147][T32737] RIP: 0033:0x7fb6a918f6c9 [ 1932.110157][T32737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1932.110166][T32737] RSP: 002b:00007fb6aa0ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1932.110178][T32737] RAX: ffffffffffffffda RBX: 00007fb6a93e5fa0 RCX: 00007fb6a918f6c9 [ 1932.110185][T32737] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1932.110192][T32737] RBP: 00007fb6aa0ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1932.110198][T32737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1932.110204][T32737] R13: 00007fb6a93e6038 R14: 00007fb6a93e5fa0 R15: 00007fb6a950fa28 [ 1932.110220][T32737] [ 1932.480934][T32744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8250'. [ 1932.745493][ T875] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1932.987578][ T875] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.010237][ T875] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1933.169947][ T875] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1933.201545][ T875] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1933.211639][ T875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.464774][ T875] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1933.472400][ T875] usb 2-1: invalid MIDI out EP 0 [ 1933.607532][ T875] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1934.163897][ T875] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 1934.231238][ T337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8256'. [ 1934.253283][ T337] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8256'. [ 1934.643581][ T350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8258'. [ 1934.789246][ T355] FAULT_INJECTION: forcing a failure. [ 1934.789246][ T355] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.860228][ T355] CPU: 0 UID: 0 PID: 355 Comm: syz.4.8259 Not tainted syzkaller #0 PREEMPT(full) [ 1934.860254][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1934.860265][ T355] Call Trace: [ 1934.860275][ T355] [ 1934.860283][ T355] dump_stack_lvl+0x189/0x250 [ 1934.860311][ T355] ? __pfx____ratelimit+0x10/0x10 [ 1934.860334][ T355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1934.860357][ T355] ? __pfx__printk+0x10/0x10 [ 1934.860379][ T355] ? __pfx___might_resched+0x10/0x10 [ 1934.860397][ T355] ? fs_reclaim_acquire+0x7d/0x100 [ 1934.860425][ T355] should_fail_ex+0x414/0x560 [ 1934.860453][ T355] should_failslab+0xa8/0x100 [ 1934.860473][ T355] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1934.860497][ T355] ? __alloc_skb+0x112/0x2d0 [ 1934.860512][ T355] ? netlink_autobind+0xdb/0x300 [ 1934.860535][ T355] __alloc_skb+0x112/0x2d0 [ 1934.860556][ T355] netlink_sendmsg+0x5c6/0xb30 [ 1934.860583][ T355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1934.860604][ T355] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1934.860631][ T355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1934.860650][ T355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1934.860669][ T355] __sock_sendmsg+0x21c/0x270 [ 1934.860695][ T355] ____sys_sendmsg+0x52d/0x830 [ 1934.860720][ T355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1934.860749][ T355] ? import_iovec+0x74/0xa0 [ 1934.860775][ T355] ___sys_sendmsg+0x21f/0x2a0 [ 1934.860795][ T355] ? __pfx____sys_sendmsg+0x10/0x10 [ 1934.860850][ T355] ? __fget_files+0x2a/0x420 [ 1934.860867][ T355] ? __fget_files+0x3a0/0x420 [ 1934.860894][ T355] __sys_sendmmsg+0x227/0x430 [ 1934.860920][ T355] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1934.860948][ T355] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1934.860996][ T355] ? ksys_write+0x22a/0x250 [ 1934.861022][ T355] ? __pfx_ksys_write+0x10/0x10 [ 1934.861050][ T355] __x64_sys_sendmmsg+0xa0/0xc0 [ 1934.861071][ T355] do_syscall_64+0xfa/0xfa0 [ 1934.861092][ T355] ? lockdep_hardirqs_on+0x9c/0x150 [ 1934.861113][ T355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.861130][ T355] ? clear_bhb_loop+0x60/0xb0 [ 1934.861152][ T355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.861169][ T355] RIP: 0033:0x7f135cf8f6c9 [ 1934.861186][ T355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1934.861201][ T355] RSP: 002b:00007f135de82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1934.861221][ T355] RAX: ffffffffffffffda RBX: 00007f135d1e5fa0 RCX: 00007f135cf8f6c9 [ 1934.861235][ T355] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1934.861248][ T355] RBP: 00007f135de82090 R08: 0000000000000000 R09: 0000000000000000 [ 1934.861259][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1934.861271][ T355] R13: 00007f135d1e6038 R14: 00007f135d1e5fa0 R15: 00007f135d30fa28 [ 1934.861301][ T355] [ 1935.143893][ C0] vkms_vblank_simulate: vblank timer overrun [ 1935.181953][ T359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1935.289581][ T359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1935.440463][ T875] usb 2-1: USB disconnect, device number 56 [ 1936.495271][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1936.495284][ T30] audit: type=1326 audit(1762437973.255:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=393 comm="syz.1.8266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a918f6c9 code=0x7ffc0000 [ 1936.640287][ T30] audit: type=1326 audit(1762437973.255:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=393 comm="syz.1.8266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a918f6c9 code=0x7ffc0000 [ 1936.657221][ T401] netlink: 34 bytes leftover after parsing attributes in process `syz.4.8268'. [ 1936.662588][ C0] vkms_vblank_simulate: vblank timer overrun [ 1936.697936][ T400] tipc: Enabled bearer , priority 0 [ 1936.714898][ T400] syzkaller0: entered promiscuous mode [ 1936.715206][ T30] audit: type=1326 audit(1762437973.255:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=393 comm="syz.1.8266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fb6a918f6c9 code=0x7ffc0000 [ 1936.730900][ T400] syzkaller0: entered allmulticast mode [ 1936.758005][ T30] audit: type=1326 audit(1762437973.255:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=393 comm="syz.1.8266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a918f6c9 code=0x7ffc0000 [ 1936.780270][ C0] vkms_vblank_simulate: vblank timer overrun [ 1936.787102][ T30] audit: type=1326 audit(1762437973.255:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=393 comm="syz.1.8266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6a918f6c9 code=0x7ffc0000 [ 1936.810143][ T30] audit: type=1326 audit(1762437973.255:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=393 comm="syz.1.8266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a918f6c9 code=0x7ffc0000 [ 1936.832378][ C0] vkms_vblank_simulate: vblank timer overrun [ 1936.857144][ T30] audit: type=1326 audit(1762437973.255:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=393 comm="syz.1.8266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6a918f6c9 code=0x7ffc0000 [ 1936.879304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1936.890306][ T30] audit: type=1326 audit(1762437973.255:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=393 comm="syz.1.8266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a918f6c9 code=0x7ffc0000 [ 1936.912551][ C0] vkms_vblank_simulate: vblank timer overrun [ 1936.921956][ T30] audit: type=1326 audit(1762437973.255:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=393 comm="syz.1.8266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6a918f6c9 code=0x7ffc0000 [ 1936.944135][ C0] vkms_vblank_simulate: vblank timer overrun [ 1936.954959][ T30] audit: type=1326 audit(1762437973.255:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=393 comm="syz.1.8266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6a918f6c9 code=0x7ffc0000 [ 1937.045613][ T5954] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1937.053245][ T5832] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1937.093762][ T422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8270'. [ 1937.179252][ T422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8270'. [ 1937.195739][ T5954] usb 2-1: device descriptor read/64, error -71 [ 1937.225638][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 1937.234777][ T5832] usb 6-1: too many configurations: 91, using maximum allowed: 8 [ 1937.246428][ T5832] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1937.357582][ T5832] usb 6-1: can't read configurations, error -61 [ 1937.485518][ T5954] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1937.493182][ T5832] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1937.625527][ T5954] usb 2-1: device descriptor read/64, error -71 [ 1937.645629][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 1937.652170][ T5832] usb 6-1: too many configurations: 91, using maximum allowed: 8 [ 1937.662940][ T5832] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1937.672727][ T5832] usb 6-1: can't read configurations, error -61 [ 1937.679765][ T5832] usb usb6-port1: attempt power cycle [ 1937.735839][ T5954] usb usb2-port1: attempt power cycle [ 1938.025621][ T5832] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1938.066392][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 1938.072097][ T5832] usb 6-1: too many configurations: 91, using maximum allowed: 8 [ 1938.081275][ T5832] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1938.088991][ T5954] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1938.096787][ T5832] usb 6-1: can't read configurations, error -61 [ 1938.116202][ T5954] usb 2-1: device descriptor read/8, error -71 [ 1938.225719][ T5832] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1938.382591][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 1938.392753][ T5832] usb 6-1: too many configurations: 91, using maximum allowed: 8 [ 1938.402658][ T5954] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1938.411865][ T5832] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1938.423007][ T5832] usb 6-1: can't read configurations, error -61 [ 1938.436201][ T5954] usb 2-1: device descriptor read/8, error -71 [ 1938.442483][ T5832] usb usb6-port1: unable to enumerate USB device [ 1938.615846][ T5954] usb usb2-port1: unable to enumerate USB device [ 1938.730190][ T486] netdevsim netdevsim3: Direct firmware load for . [ 1938.730190][ T486] failed with error -2 [ 1938.742493][ T486] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1938.742493][ T486] [ 1938.955759][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1939.654982][ T407] tipc: Resetting bearer [ 1939.683067][ T407] tipc: Disabling bearer [ 1939.760341][ T496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8278'. [ 1939.773483][ T496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8278'. [ 1940.108075][ T515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1940.117460][ T515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1940.165575][ T5832] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1940.626061][ T5832] usb 6-1: config 0 has no interfaces? [ 1940.666990][ T5832] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1940.682278][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1940.732866][ T5832] usb 6-1: SerialNumber: syz [ 1940.744247][ T5832] usb 6-1: config 0 descriptor?? [ 1940.985591][ T5832] usb 6-1: USB disconnect, device number 11 [ 1941.655952][ T5954] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1941.785511][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1942.050372][ T5954] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1942.077546][ T566] bond3: Unable to set down delay as MII monitoring is disabled [ 1942.089566][ T566] bond3 (unregistering): Released all slaves [ 1942.106994][ T875] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1942.235651][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1942.305648][ T5832] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1942.315698][ T875] usb 2-1: Using ep0 maxpacket: 16 [ 1942.322283][ T875] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 1942.330898][ T875] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 1942.339276][ T875] usb 2-1: config 166 has no interface number 0 [ 1942.345663][ T875] usb 2-1: config 166 has no interface number 1 [ 1942.352024][ T875] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1942.355825][ T5954] usb usb1-port1: attempt power cycle [ 1942.363176][ T875] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1942.380081][ T875] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1942.391104][ T875] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1942.403984][ T875] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1942.416962][ T875] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1942.427615][ T875] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1942.439381][ T875] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1942.449800][ T875] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1942.463502][ T875] usb 2-1: config 166 interface 177 has no altsetting 0 [ 1942.470611][ T875] usb 2-1: config 166 interface 34 has no altsetting 0 [ 1942.475539][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 1942.481284][ T875] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1942.484286][ T5832] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1942.500503][ T875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.500586][ T5832] usb 6-1: config 0 has no interface number 0 [ 1942.508928][ T875] usb 2-1: Product: syz [ 1942.517831][ T5832] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1942.519187][ T875] usb 2-1: Manufacturer: syz [ 1942.530720][ T875] usb 2-1: SerialNumber: syz [ 1942.532079][ T5832] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1942.550842][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.559306][ T5832] usb 6-1: Product: syz [ 1942.563562][ T5832] usb 6-1: Manufacturer: syz [ 1942.568533][ T5832] usb 6-1: SerialNumber: syz [ 1942.584248][ T5832] usb 6-1: config 0 descriptor?? [ 1942.596305][ T5832] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1942.606315][ T5832] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1942.715760][ T5954] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1942.743024][ T875] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 1942.752136][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1942.812658][ T875] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 1942.851630][ T875] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 1942.863853][ T875] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1942.871654][ T875] uvcvideo 2-1:166.34: No valid video chain found. [ 1942.884847][ T875] usb 2-1: USB disconnect, device number 61 [ 1943.005656][ T5954] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1943.026371][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1943.136193][ T5954] usb usb1-port1: unable to enumerate USB device [ 1943.368272][ T675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8294'. [ 1943.585905][ T875] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1943.725558][ T875] usb 2-1: device descriptor read/64, error -71 [ 1943.725945][ T5832] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1943.825212][ T5832] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1943.839254][ T5832] em28xx 6-1:0.89: board has no eeprom [ 1943.915565][ T5832] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1943.924151][ T5832] em28xx 6-1:0.89: analog set to bulk mode. [ 1943.948615][ T5954] em28xx 6-1:0.89: Registering V4L2 extension [ 1944.013592][ T875] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1944.052132][ T5954] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1944.063601][ T693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1944.074554][ T693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.077760][ T5954] em28xx 6-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1944.104213][ T5954] em28xx 6-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1944.114043][ T5954] em28xx 6-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1944.127068][ T5954] em28xx 6-1:0.89: Config register raw data: 0xfffffffb [ 1944.137796][ T5954] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1944.145063][ T5954] em28xx 6-1:0.89: No AC97 audio processor [ 1944.156740][ T875] usb 2-1: device descriptor read/64, error -71 [ 1944.167999][ T5954] usb 6-1: Decoder not found [ 1944.240194][ T5954] em28xx 6-1:0.89: failed to create media graph [ 1944.286541][ T875] usb usb2-port1: attempt power cycle [ 1944.307881][ T5954] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1944.367096][ T699] ================================================================== [ 1944.375190][ T699] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1944.382567][ T699] Read of size 8 at addr ffff88805fc2c740 by task v4l_id/699 [ 1944.389935][ T699] [ 1944.392264][ T699] CPU: 0 UID: 0 PID: 699 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1944.392284][ T699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1944.392295][ T699] Call Trace: [ 1944.392302][ T699] [ 1944.392310][ T699] dump_stack_lvl+0x189/0x250 [ 1944.392335][ T699] ? __virt_addr_valid+0x1c8/0x5c0 [ 1944.392358][ T699] ? rcu_is_watching+0x15/0xb0 [ 1944.392378][ T699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1944.392400][ T699] ? rcu_is_watching+0x15/0xb0 [ 1944.392419][ T699] ? lock_release+0x4b/0x3e0 [ 1944.392435][ T699] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1944.392457][ T699] ? __virt_addr_valid+0x1c8/0x5c0 [ 1944.392479][ T699] ? __virt_addr_valid+0x4a5/0x5c0 [ 1944.392501][ T699] print_report+0xca/0x240 [ 1944.392522][ T699] ? v4l2_fh_open+0xac/0x420 [ 1944.392539][ T699] kasan_report+0x118/0x150 [ 1944.392558][ T699] ? v4l2_fh_open+0xac/0x420 [ 1944.392578][ T699] v4l2_fh_open+0xac/0x420 [ 1944.392595][ T699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1944.392620][ T699] em28xx_v4l2_open+0x157/0x9a0 [ 1944.392648][ T699] v4l2_open+0x1bf/0x3a0 [ 1944.392667][ T699] chrdev_open+0x4cc/0x5e0 [ 1944.392686][ T699] ? __pfx_chrdev_open+0x10/0x10 [ 1944.392703][ T699] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1944.392725][ T699] ? __pfx_chrdev_open+0x10/0x10 [ 1944.392740][ T699] do_dentry_open+0x953/0x13f0 [ 1944.392765][ T699] vfs_open+0x3b/0x340 [ 1944.392782][ T699] ? path_openat+0x2ecd/0x3830 [ 1944.392804][ T699] path_openat+0x2ee5/0x3830 [ 1944.392838][ T699] ? __pfx_path_openat+0x10/0x10 [ 1944.392867][ T699] do_filp_open+0x1fa/0x410 [ 1944.392886][ T699] ? __lock_acquire+0xab9/0xd20 [ 1944.392904][ T699] ? __pfx_do_filp_open+0x10/0x10 [ 1944.392933][ T699] ? _raw_spin_unlock+0x28/0x50 [ 1944.392951][ T699] ? alloc_fd+0x64c/0x6c0 [ 1944.392978][ T699] do_sys_openat2+0x121/0x1c0 [ 1944.392999][ T699] ? __pfx_do_sys_openat2+0x10/0x10 [ 1944.393019][ T699] ? exc_page_fault+0x82/0x100 [ 1944.393042][ T699] ? do_user_addr_fault+0xc85/0x1380 [ 1944.393061][ T699] __x64_sys_openat+0x138/0x170 [ 1944.393088][ T699] do_syscall_64+0xfa/0xfa0 [ 1944.393110][ T699] ? lockdep_hardirqs_on+0x9c/0x150 [ 1944.393131][ T699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1944.393148][ T699] ? clear_bhb_loop+0x60/0xb0 [ 1944.393167][ T699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1944.393185][ T699] RIP: 0033:0x7fcfd26a7407 [ 1944.393201][ T699] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1944.393216][ T699] RSP: 002b:00007fff30101770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1944.393237][ T699] RAX: ffffffffffffffda RBX: 00007fcfd2dfd880 RCX: 00007fcfd26a7407 [ 1944.393250][ T699] RDX: 0000000000000000 RSI: 00007fff30102f1b RDI: ffffffffffffff9c [ 1944.393263][ T699] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1944.393273][ T699] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1944.393284][ T699] R13: 00007fff301019c0 R14: 00007fcfd2f64000 R15: 000055b3f238d4d8 [ 1944.393304][ T699] [ 1944.393310][ T699] [ 1944.695447][ T699] Allocated by task 5954: [ 1944.699765][ T699] kasan_save_track+0x3e/0x80 [ 1944.704421][ T699] __kasan_kmalloc+0x93/0xb0 [ 1944.708989][ T699] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1944.714337][ T699] em28xx_v4l2_init+0x10b/0x2e70 [ 1944.719254][ T699] em28xx_init_extension+0x120/0x1c0 [ 1944.724512][ T699] process_scheduled_works+0xae1/0x17b0 [ 1944.730028][ T699] worker_thread+0x8a0/0xda0 [ 1944.734588][ T699] kthread+0x711/0x8a0 [ 1944.738629][ T699] ret_from_fork+0x4bc/0x870 [ 1944.743245][ T699] ret_from_fork_asm+0x1a/0x30 [ 1944.747984][ T699] [ 1944.750280][ T699] Freed by task 5954: [ 1944.754231][ T699] kasan_save_track+0x3e/0x80 [ 1944.758883][ T699] __kasan_save_free_info+0x46/0x50 [ 1944.764055][ T699] __kasan_slab_free+0x5c/0x80 [ 1944.768801][ T699] kfree+0x19a/0x6d0 [ 1944.772670][ T699] em28xx_v4l2_init+0x1683/0x2e70 [ 1944.777668][ T699] em28xx_init_extension+0x120/0x1c0 [ 1944.782926][ T699] process_scheduled_works+0xae1/0x17b0 [ 1944.788559][ T699] worker_thread+0x8a0/0xda0 [ 1944.793125][ T699] kthread+0x711/0x8a0 [ 1944.797169][ T699] ret_from_fork+0x4bc/0x870 [ 1944.801738][ T699] ret_from_fork_asm+0x1a/0x30 [ 1944.806563][ T699] [ 1944.808866][ T699] The buggy address belongs to the object at ffff88805fc2c000 [ 1944.808866][ T699] which belongs to the cache kmalloc-8k of size 8192 [ 1944.822893][ T699] The buggy address is located 1856 bytes inside of [ 1944.822893][ T699] freed 8192-byte region [ffff88805fc2c000, ffff88805fc2e000) [ 1944.836853][ T699] [ 1944.839164][ T699] The buggy address belongs to the physical page: [ 1944.845564][ T699] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fc28 [ 1944.854297][ T699] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1944.862783][ T699] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1944.870319][ T699] page_type: f5(slab) [ 1944.874282][ T699] raw: 00fff00000000040 ffff88801a027280 ffffea0000a08a00 dead000000000002 [ 1944.882842][ T699] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1944.891403][ T699] head: 00fff00000000040 ffff88801a027280 ffffea0000a08a00 dead000000000002 [ 1944.900051][ T699] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1944.908697][ T699] head: 00fff00000000003 ffffea00017f0a01 00000000ffffffff 00000000ffffffff [ 1944.917340][ T699] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1944.925981][ T699] page dumped because: kasan: bad access detected [ 1944.932375][ T699] page_owner tracks the page as allocated [ 1944.938061][ T699] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 23855, tgid 23853 (syz.4.7181), ts 1692823041592, free_ts 1692818167494 [ 1944.961127][ T699] post_alloc_hook+0x240/0x2a0 [ 1944.965875][ T699] get_page_from_freelist+0x2365/0x2440 [ 1944.971395][ T699] __alloc_frozen_pages_noprof+0x181/0x370 [ 1944.977175][ T699] alloc_pages_mpol+0x232/0x4a0 [ 1944.982000][ T699] allocate_slab+0x96/0x350 [ 1944.986477][ T699] ___slab_alloc+0xe94/0x18a0 [ 1944.991126][ T699] __slab_alloc+0x65/0x100 [ 1944.995516][ T699] __kmalloc_noprof+0x471/0x7f0 [ 1945.000340][ T699] ops_init+0x7b/0x5c0 [ 1945.004378][ T699] setup_net+0xfe/0x320 [ 1945.008513][ T699] copy_net_ns+0x34e/0x4e0 [ 1945.012907][ T699] create_new_namespaces+0x3f3/0x720 [ 1945.018163][ T699] unshare_nsproxy_namespaces+0x11c/0x170 [ 1945.023873][ T699] ksys_unshare+0x4c8/0x8c0 [ 1945.028351][ T699] __x64_sys_unshare+0x38/0x50 [ 1945.033087][ T699] do_syscall_64+0xfa/0xfa0 [ 1945.037661][ T699] page last free pid 23812 tgid 23806 stack trace: [ 1945.044131][ T699] __free_frozen_pages+0xbc4/0xd30 [ 1945.049218][ T699] __put_partials+0x146/0x170 [ 1945.053876][ T699] put_cpu_partial+0x1f2/0x2e0 [ 1945.058612][ T699] __slab_free+0x2b9/0x390 [ 1945.063001][ T699] qlist_free_all+0x97/0x140 [ 1945.067582][ T699] kasan_quarantine_reduce+0x148/0x160 [ 1945.073013][ T699] __kasan_slab_alloc+0x22/0x80 [ 1945.077841][ T699] kmem_cache_alloc_node_noprof+0x433/0x710 [ 1945.083716][ T699] __alloc_skb+0x112/0x2d0 [ 1945.088109][ T699] rtmsg_ifa+0xf8/0x1f0 [ 1945.092243][ T699] __inet_insert_ifa+0x9ff/0xbf0 [ 1945.097153][ T699] inetdev_event+0xfa6/0x15b0 [ 1945.101807][ T699] notifier_call_chain+0x1b6/0x3e0 [ 1945.106893][ T699] __dev_notify_flags+0x18d/0x2e0 [ 1945.111893][ T699] netif_change_flags+0xe8/0x1a0 [ 1945.116802][ T699] do_setlink+0xc55/0x41c0 [ 1945.121189][ T699] [ 1945.123488][ T699] Memory state around the buggy address: [ 1945.129092][ T699] ffff88805fc2c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1945.137123][ T699] ffff88805fc2c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1945.145155][ T699] >ffff88805fc2c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1945.153185][ T699] ^ [ 1945.159309][ T699] ffff88805fc2c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1945.167342][ T699] ffff88805fc2c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1945.175369][ T699] ================================================================== [ 1945.183490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1945.190818][ T5954] em28xx 6-1:0.89: Registering snapshot button... [ 1945.210883][ T5954] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input182 [ 1945.249513][ T5954] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1945.279994][ T699] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1945.287221][ T699] CPU: 0 UID: 0 PID: 699 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1945.296076][ T699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1945.306223][ T699] Call Trace: [ 1945.309490][ T699] [ 1945.312405][ T699] dump_stack_lvl+0x99/0x250 [ 1945.316986][ T699] ? __asan_memcpy+0x40/0x70 [ 1945.321563][ T699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1945.326747][ T699] ? __pfx__printk+0x10/0x10 [ 1945.331322][ T699] vpanic+0x237/0x6d0 [ 1945.335288][ T699] ? __pfx_vpanic+0x10/0x10 [ 1945.339774][ T699] ? preempt_schedule+0xae/0xc0 [ 1945.344612][ T699] ? __pfx_preempt_schedule+0x10/0x10 [ 1945.349973][ T699] panic+0xb9/0xc0 [ 1945.353701][ T699] ? __pfx_panic+0x10/0x10 [ 1945.358111][ T699] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1945.363992][ T699] ? is_module_address+0x17/0xf0 [ 1945.368914][ T699] ? v4l2_fh_open+0xac/0x420 [ 1945.373577][ T699] check_panic_on_warn+0x89/0xb0 [ 1945.378500][ T699] ? v4l2_fh_open+0xac/0x420 [ 1945.383072][ T699] end_report+0x78/0x160 [ 1945.387296][ T699] kasan_report+0x129/0x150 [ 1945.391778][ T699] ? v4l2_fh_open+0xac/0x420 [ 1945.396353][ T699] v4l2_fh_open+0xac/0x420 [ 1945.400752][ T699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1945.406725][ T699] em28xx_v4l2_open+0x157/0x9a0 [ 1945.411564][ T699] v4l2_open+0x1bf/0x3a0 [ 1945.415791][ T699] chrdev_open+0x4cc/0x5e0 [ 1945.420191][ T699] ? __pfx_chrdev_open+0x10/0x10 [ 1945.425119][ T699] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1945.431430][ T699] ? __pfx_chrdev_open+0x10/0x10 [ 1945.436349][ T699] do_dentry_open+0x953/0x13f0 [ 1945.441187][ T699] vfs_open+0x3b/0x340 [ 1945.445237][ T699] ? path_openat+0x2ecd/0x3830 [ 1945.449987][ T699] path_openat+0x2ee5/0x3830 [ 1945.454573][ T699] ? __pfx_path_openat+0x10/0x10 [ 1945.459497][ T699] do_filp_open+0x1fa/0x410 [ 1945.463983][ T699] ? __lock_acquire+0xab9/0xd20 [ 1945.468815][ T699] ? __pfx_do_filp_open+0x10/0x10 [ 1945.473832][ T699] ? _raw_spin_unlock+0x28/0x50 [ 1945.478666][ T699] ? alloc_fd+0x64c/0x6c0 [ 1945.482987][ T699] do_sys_openat2+0x121/0x1c0 [ 1945.487649][ T699] ? __pfx_do_sys_openat2+0x10/0x10 [ 1945.492830][ T699] ? exc_page_fault+0x82/0x100 [ 1945.497578][ T699] ? do_user_addr_fault+0xc85/0x1380 [ 1945.502847][ T699] __x64_sys_openat+0x138/0x170 [ 1945.507687][ T699] do_syscall_64+0xfa/0xfa0 [ 1945.512179][ T699] ? lockdep_hardirqs_on+0x9c/0x150 [ 1945.517362][ T699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1945.523411][ T699] ? clear_bhb_loop+0x60/0xb0 [ 1945.528075][ T699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1945.533947][ T699] RIP: 0033:0x7fcfd26a7407 [ 1945.538354][ T699] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1945.557954][ T699] RSP: 002b:00007fff30101770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1945.566359][ T699] RAX: ffffffffffffffda RBX: 00007fcfd2dfd880 RCX: 00007fcfd26a7407 [ 1945.574316][ T699] RDX: 0000000000000000 RSI: 00007fff30102f1b RDI: ffffffffffffff9c [ 1945.582270][ T699] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1945.590223][ T699] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1945.598177][ T699] R13: 00007fff301019c0 R14: 00007fcfd2f64000 R15: 000055b3f238d4d8 [ 1945.606144][ T699] [ 1945.609388][ T699] Kernel Offset: disabled [ 1945.613692][ T699] Rebooting in 86400 seconds..