last executing test programs: 10.954108644s ago: executing program 0 (id=799): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x27, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c0000001000030400000000fbdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x6c}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$swradio(&(0x7f00000004c0), 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000500)={0x52c59b80, 0x9, @name="99960dc855475cc48cda4d12e402a370b28c5df92b9281efae89ffa6f42b3d12"}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10.726025812s ago: executing program 4 (id=802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 9.839512292s ago: executing program 3 (id=811): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0xa16da000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = gettid() r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x10, 0x3, 0x1, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x50313459}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x0, 0x3}) bind$alg(r4, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x4, 0x4}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) r10 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000040), 0x0, 0x4040080) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.823042347s ago: executing program 0 (id=812): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x1e75, 0x41d9, 0x3c8d5fc9f42768d0, &(0x7f0000000040)={[0x8]}, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x303}, "fd589b4ae4f36c6c", "3910889f80beb0cd44392af04f787c933831e07edd8aaf418d9c79b78fe64cd7", "33a0a308", "312afaed023bb4ae"}, 0x38) fcntl$setflags(r3, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc", 0x2, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r6}) keyctl$link(0x8, r6, r5) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40000, 0x3}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x6000}, &(0x7f00000001c0)=0x8) 8.103520138s ago: executing program 4 (id=817): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004000a01010108000d001908"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x100000) 8.022099336s ago: executing program 3 (id=818): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010660504300000000000010902240001000040030904000404030002000921000000012203000905810340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002225f8735c28000000b725ee8f049b34a341e1d75bd4899070474dbf5a2d830000000023400000007b"], 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000105002, 0x0) sync_file_range(r4, 0x4, 0x2000000000001, 0x3) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000001080)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[]) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x1) 7.322323972s ago: executing program 2 (id=819): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000ff2505a1a44000010203010902610002010e10550904000001020d00000a240600411aa8a0083705240001800d240f0100000000fbfff9ff0006241a0000080905810398c5467a2881d5e1f501497eff030608210904010000020d000009"], 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d010140000102030109025f0003010380f40904000000010100000a24010f0003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020101010200000905820940002606"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000000}}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc2}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) nanosleep(&(0x7f00000001c0), 0x0) dup3(r3, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x200, 0x4, 0x0, 0x70, 0x4}) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2004, @fd=r6, 0xfffffffffffffffe, &(0x7f00000004c0)=[{0x0}], 0x1, 0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r2}, 0x18) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x24008000}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.297796006s ago: executing program 4 (id=820): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private0, 0xc7ec}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7.074121808s ago: executing program 4 (id=821): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x1, 0x0, 0x0, 'queue1\x00'}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f1100000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x201, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) pselect6(0x40, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES64=r2], 0xf0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) link(0x0, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000001180)=ANY=[@ANYBLOB="2c0203fc0000000020030000000000000000000000000002"], 0x18) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) 6.284198608s ago: executing program 0 (id=823): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000012000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={0x0, r0}, 0x18) 6.178605964s ago: executing program 0 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x40}, 0x8) r2 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) connect$qrtr(0xffffffffffffffff, &(0x7f0000000300)={0x2a, 0x0, 0x4000}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRES16=r7, @ANYBLOB="050700004000ffc25e77e30000"], 0x14}}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@newchain={0x55b4, 0x64, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0xffff, 0x1}, {0x255d08ece1c6e6f1, 0x6}}, [@f_rsvp={{0x9}, {0x2268, 0x2, [@TCA_RSVP_ACT={0x1630, 0x6, [@m_xt={0x1304, 0x13, 0x0, 0x0, {{0x7}, {0x1204, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xaa, 0x6, {0x6, 'nat\x00', 0x0, 0x1000, "4be8e2108a29b8a061c94a9523fe872459e6c918ac52c1c6ab6a44086f56bcda89c78fe0493a36296675a530b36575182b5501c9590a1285e4fe8bb2dd3cc6776ab51164a0b999164ab9b092d8a5f90b83e504dc0d6fa03a441c31e3801ededc0ed16cb1c405f5d214027c2ed48ba610a28a4a060ba76eda3d2d7c5e4163e29a"}}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xb5, 0x6, {0x6, 'security\x00', 0x3, 0x9, "4fc1f86eaa92bfa5742a868c47cc6dff2e776cfe286b1d41351e1ca3a4ab15233bdd67107c64c558545182a0e4ee8641370ca05b53e3ab59ef404b4682f6fdb3b2e2b6355ab47f1658132bb138fe650bdf86976afdbe025ffd1de998ca34487bceb311258191f2588470270632eec2ff2f1cd9f6dcf926b4c93d8a4aea18edbbe2834cf480b75893b77df7"}}, @TCA_IPT_TARG={0x102a, 0x6, {0xf62, 'nat\x00', 0x7, 0xff, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xda, 0x6, "e61fc3b55ddb6db44e306d3845d02181c900d8c30b694e1be84f12975196301720278f6b5e38fee6f68e82c6eb86213e6b0000712eb9371b0187e377334ac11d48e24f1885680e85b8d893bed2b82f37237686e521f6c1d63a9dbccda49ed03b1e260140169ca50a9d03c8eeb782fc6db14bfe29cd4daefc4f5d4619020c0c068d4071e5be296e80d84a2a6b41cd90d9b614ca8378f6333a04349212ea5e54e1ac2d7e9f3cf1672e4ed3405dc5f775fbfd1a859058d0004b8e4bcdaec7878850c218d68cc999cab98ad7df798e171420dbe63bc15bdd"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x74, 0xe, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xb}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x1b, 0x6, "27d24c27ee8018463c244c5ae709b916798c667fca86b6"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_skbmod={0x150, 0x1d, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xd, 0x1, 0x0, 0x4b}, 0x9}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3ff25e23, 0x6, 0x44a, 0xdff}, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0xf, 0x0, 0x7fff, 0x101}, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x72, 0x6, "2371e83f75456ea9ae5691dbfa9cd05abcf85cd16308bf50047092a70faa4201abbebc9076e6da836a7f90140f79070816234007cc6f7354fa1bcdfbf3ee16286bee5f6a7f28137ec9a19ed55ab7070da5da98023b4cee24f3ba611951e9351efa9f436d8102dae1c7b48e9413af"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x164, 0x1a, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7fff, 0x3, 0x10000000, 0x6, 0x3}, 0x1}}]}, {0xef, 0x6, "f1b0cc895d5b20f6b22b34f99536fe4b3c51576fd2e5f14d616e2bed55dd4fd3c147ff1b793c33f59b0cf68861e0d5154cc3c9a9ccab822dd0df3925d8a29c0e335ca290065fdbb14be43d87400a57907b446f0e276ed1002e4dcbecac3b89e917c7b17a062c41d23813d921e7ea34e1942300e82397fa780d5738e4e3acb954808504eb3b9074041c23b90d0e5bb0822627c92fe885a8d42709b635a6db4fd3abaf2179050408032008d50cb17cc846e16641fcd356c5ad86f973f54d008f39b086850c1180453db23b7080cb74addcc9c4d79b0d90a794de9d268ae205e055498ab112225b715fc1b8ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_POLICE={0xc24, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0xa46a, 0x5, 0x10, 0x3, 0x27, 0x101, 0x8001, 0x7f, 0x9, 0x5, 0x21, 0x58, 0xfffffffe, 0x6, 0x5, 0xffffff18, 0x2, 0x2, 0x9, 0x5, 0x6, 0xc, 0x8, 0x5, 0x5, 0x10001, 0x3, 0x2, 0x4, 0x8, 0x80000001, 0x1, 0xfffffffb, 0xfc9, 0x8, 0x4, 0x10001, 0x7f, 0x6, 0x7, 0x8, 0x3, 0x10001, 0xa, 0x6, 0x3, 0x3, 0x400, 0x1, 0x7, 0x3, 0x10, 0x4, 0x9, 0x0, 0x1, 0x7, 0xa5f, 0x7, 0x19918bf7, 0x3, 0x2c9757a, 0xea, 0x101, 0x81, 0x7, 0x2, 0x1, 0x2, 0x9, 0xb28, 0x7, 0x8, 0x6, 0x87, 0x1000, 0x4, 0x0, 0x1f7b, 0xe0df, 0x800, 0x4d2, 0x4, 0x100, 0x9, 0x195, 0x1, 0x5, 0x7, 0x80, 0x6, 0x10, 0x8, 0x9120, 0x1, 0xbc, 0xfffffffa, 0x0, 0x8, 0x62, 0x1, 0x7, 0xffffff80, 0x2, 0x7, 0x2, 0x9, 0x7, 0x6, 0x300, 0x7, 0x6, 0x9, 0x1000, 0x8000, 0x8, 0x4800, 0x2, 0x2, 0x80, 0x4, 0x2, 0x7f, 0x7, 0x800, 0xffff, 0x8, 0x0, 0x798a, 0x1, 0x9, 0x80000000, 0x100, 0x57d1, 0x8, 0x7, 0x2, 0x100, 0x100, 0xffff406f, 0x10000, 0x76, 0xda5, 0x20000000, 0x593, 0xe, 0x6, 0x1, 0x8df, 0x7fffffff, 0x9, 0x2, 0x1, 0x17fb, 0x9, 0xaf44, 0x1, 0x9, 0x23d199a7, 0x2, 0x4, 0x6, 0x4, 0x10000, 0x2, 0x220000, 0xd, 0x3, 0x2, 0xccf8, 0x7f, 0x6, 0x7fff, 0x8, 0xe4f, 0x4, 0xff, 0x8, 0x3, 0xc, 0x9, 0xfdc5, 0x1, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x400, 0x9, 0xff, 0x4, 0x9b88, 0x4, 0x5, 0x2ae6, 0x4, 0x5, 0x5, 0x4, 0x9, 0x9, 0x7, 0x0, 0xff4f, 0x214, 0x1, 0x4, 0x8, 0xd5e, 0x6, 0x800, 0xc37e, 0x7, 0x9, 0x4, 0x10, 0x2, 0x8, 0x1fee37b8, 0x1, 0xf47c, 0x8000, 0x8, 0xe0, 0xfffffffb, 0x5594, 0x7, 0x5, 0x6c2, 0x933, 0x40, 0x9, 0x9, 0x2fd, 0x1000, 0x3, 0x3, 0xffffffff, 0x4, 0x7, 0x9, 0xb7, 0xbe8c, 0xe, 0x7, 0x3000000, 0x7ff, 0x10001, 0x7, 0x216, 0xff, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x5, 0xc, 0x8, 0xa, 0x6, 0x51e7e825, 0xff, 0x80, 0x4d, 0x8000, 0xbfee, 0x1d, 0x4, 0x31b0a916, 0x3, 0x400, 0x8, 0x1, 0x5d5, 0x0, 0xc36, 0x1, 0x2, 0x7, 0x0, 0xc, 0x7, 0x4, 0xfffff001, 0x1, 0x5, 0x816b, 0x100, 0x5, 0x5, 0xb6a, 0x1200000, 0xfffffffb, 0xb, 0x0, 0x64a2, 0x10, 0x0, 0x7ff, 0xa, 0x2, 0x5, 0x6, 0x4, 0x9, 0x7, 0x3, 0x3, 0xc00, 0x2, 0x6, 0x1, 0x7, 0x8, 0x4, 0x4e, 0x8, 0x6, 0x3, 0x3260, 0x2, 0x80000000, 0x70, 0x4, 0xb, 0x1, 0x80000001, 0x2, 0x80, 0x8, 0x6, 0x6, 0x2, 0x5, 0x4a6, 0x5, 0x2, 0xcc, 0xfffffffb, 0xcff6, 0x0, 0x1, 0x6, 0x76, 0x6, 0x1, 0x4, 0x390, 0x1, 0xb5, 0x1, 0x0, 0x9b, 0x593, 0x4, 0x1000, 0xfffffffa, 0xa, 0x800, 0x5, 0x0, 0x4, 0x3000, 0x5, 0x7133, 0x3, 0x1, 0x9, 0x5, 0x7, 0x9de4, 0x7, 0x80, 0x5, 0x1, 0x9, 0x3, 0x5, 0x3f, 0x2, 0x60000000, 0xffff, 0x8583, 0x4, 0x6, 0xffffffc1, 0x9, 0x9, 0x80000001, 0x1ff, 0x0, 0x79f, 0x2, 0x4, 0x3, 0x51f, 0x172a5e61, 0x6, 0x3, 0x6, 0x8, 0x3, 0x4, 0x7fffffff, 0x5, 0x6, 0x9, 0x45, 0x9, 0x4392, 0xe0, 0x800, 0xe, 0x3, 0xfffffffe, 0xc47d, 0xc, 0x5, 0x0, 0x4, 0x100, 0x9403, 0xfff, 0x8, 0x7, 0x6, 0x5, 0x8, 0x9, 0xf9eb, 0x4, 0x0, 0x4, 0x1cb9, 0x4, 0x1, 0x3ff, 0x7ff, 0x401, 0x4, 0x3, 0x5, 0x2dc9, 0xe, 0x3, 0x4, 0x4, 0x4, 0x2cfc2f0f, 0x5277, 0x9, 0x6, 0x10000, 0xffffff31, 0x1, 0x9, 0x100, 0x708, 0x8, 0xffff, 0x0, 0x8, 0xc5a, 0x2, 0x8001, 0x3, 0x9d9d, 0x8, 0xc8e6, 0x64, 0x7ff, 0x100, 0x0, 0x1, 0x6, 0x7, 0x5, 0xa, 0x10001, 0x4, 0x1, 0x81, 0x2, 0xbc48, 0x2, 0x9, 0x4000000, 0x0, 0x1, 0x0, 0xf43, 0x9, 0x6, 0x3, 0x6, 0xb, 0x100, 0x0, 0x4, 0x1, 0x6, 0xb6, 0x5, 0xba, 0x4, 0x7, 0x4, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7fff, 0x10000, 0xa4, 0xffffffff, 0xfffffffa, 0x400, 0x5, 0x6, 0x20000000, 0x5eb, 0x7, 0x3, 0xe98, 0x5, 0x7fffffff, 0x7fffffff, 0x7, 0x7, 0x2, 0xb, 0x4, 0x3d6, 0x2ce1b381, 0x4, 0x5, 0x5, 0xb16, 0x3, 0x8, 0x4, 0xfffffffb, 0x16e6, 0x23, 0x7, 0x1, 0x8, 0x2, 0x5, 0x9, 0x0, 0x34d, 0x8, 0xf, 0x2, 0x9, 0xb, 0x10000, 0x1ff, 0xfffffffd, 0x9, 0x9, 0x2, 0x5, 0x8, 0xfffffffb, 0x8001, 0x7, 0x2e, 0x10, 0x5, 0x8, 0xb5a, 0xa4, 0x2, 0x8a7, 0x7, 0xc, 0x1ff, 0x2, 0x2, 0xf9, 0x1, 0xc, 0x6, 0xddf, 0x2, 0x8, 0x6, 0x1, 0x1, 0xd, 0x7, 0x8000, 0x10, 0x7, 0x3, 0x4, 0x10001, 0x6, 0x2, 0x80, 0x3, 0x1, 0xfffffff7, 0xfffffbff, 0x9, 0x8, 0x400, 0x1, 0x9, 0x5, 0x5, 0x4, 0x340a, 0xb, 0x6, 0x1, 0x5, 0x5, 0x78, 0x1, 0x5, 0x9, 0x3, 0x2, 0x7, 0x2, 0x8, 0x9, 0x6, 0x10000, 0x101, 0xffffffff, 0x7, 0x5, 0x0, 0x59b, 0x4, 0x7, 0x9, 0xa, 0x2, 0x1, 0x3, 0x7, 0x1, 0x1, 0x8, 0x7, 0x2, 0xfffffff9, 0x8, 0xf, 0xfffffffc, 0x4, 0xfffffffc, 0x10, 0x3, 0x5, 0x1, 0x9de, 0x9, 0x5, 0x7, 0x3ff, 0x7, 0x6, 0x7, 0x9, 0xfffffffd, 0x4, 0x401, 0xfff, 0x6, 0x6, 0x7, 0x86, 0xa46e, 0x1000, 0x1ff, 0x6, 0x5, 0x44e, 0x9a0, 0xb7b, 0x3, 0x3, 0x4, 0x612e, 0x81, 0xc, 0x0, 0x500000, 0x9, 0x3, 0x800, 0xfffffffd, 0x401, 0x4, 0x0, 0x7ff, 0xc06, 0x2, 0x3ff, 0x8, 0x5, 0x8, 0x1, 0x0, 0x3, 0x3, 0xaa, 0x4, 0x6, 0xe1, 0x4, 0x46, 0x10001, 0x7cce, 0x80000001, 0x9, 0xfffffffe, 0x1e6f, 0xd0, 0x8, 0x0, 0x80f5, 0x6, 0x7, 0x9, 0x2, 0x4, 0x80000000, 0x0, 0x601, 0x6, 0x9da8, 0x476, 0x6, 0xffff7532, 0x0, 0x12, 0x8, 0x100, 0x401, 0x2e, 0x80000000, 0x9, 0x0, 0xe, 0x0, 0x4, 0x9, 0x6, 0x7, 0x4, 0xfffffffd, 0xfffffff6, 0x6, 0x0, 0x1, 0x0, 0xe116, 0x8001]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0x3}}]}}, @f_tcindex={{0xc}, {0x3310, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xa1cb}, @TCA_TCINDEX_ACT={0x1a94, 0x7, [@m_bpf={0x16c, 0x9, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x7ff, 0x7, 0x1, 0x7}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x200, 0x3, 0x6, 0x8dc}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x7, 0x2, 0x19, 0x6}, {0x1024, 0x6, 0xe8, 0x81}, {0xa3, 0x3, 0x9, 0x9}, {0x80, 0x7, 0x9, 0x9e0}, {0x1, 0x7, 0x0, 0x40}, {0x0, 0x1, 0x1, 0x1000}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x9, 0x7, 0x2, 0x3}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0xba, 0x6, "67a4d3998a628d0772ecb4231f52c0b2b229f05fefbe2fd11d1becab357e7669ade1e95038489af0c482521b9cf4eb6b6f60783fd047c193f35fe992afd8f3824f20adb8f816d38cc56e46a25f7d5b25ee9ca51fa678af36942e46cd6014a6408f586a0691d42c9536642c9013f3c5b021da2e5d75ec3d5b4b91255e38cca757d80c971283c5252ce3002ab1d69208c989619634457d48e915ca8a4b763b97e36b25ac11dc22efe99a05e3d9d285b3cf107139dc5b90"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x90, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x10000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x44, 0x6, "438acea37bbdd160e23c9c566c55571227e5ecca802a94c6bcfaaaea938c1fef15d5fecf41118997f85658fbce230b76be05e8dfd901d4bc94e808465691b82d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x190, 0x15, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x40, 0x5, 0x10000000, 0x0, 0x7}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x0, 0x10000005, 0x200, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1000, 0x6, 0x2, 0x30, 0x3}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0xea, 0x6, "f44a1daef88b6b9ef0c1b7779dc9b1db86b97a93dfd9ee63d62a87c09f179a764b5cfe4b13df6f11057d09d8106fee277e3379947c990e735584a1148a4961f53db7d500f5bd766d734c44b3a681874196eaca8cd4e11459dc6e26adb8927089c5929776bdf8db580e8e8b23df3a08ed7fdee3b0fb94234828327b90411b632121d4e5f2b77b8c75e6790b434aa1409feb8d6268169e3d4ccdfefcf35aad0a01e947caf388ecb030186351021a797d837f7dca6b6d96615c2b5e6a477fe753ff597e13629eb3dc2cd417c5cab91eb42746e3360cc46e7487bd8e3c7d9268044482e2355da0ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x208, 0x14, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0xfffffff7, 0xffffffffdffffffc, 0x2, 0x8}, @remote, @dev={0xac, 0x14, 0x14, 0x14}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0x2, 0x2, 0x5, 0x1}, @private=0xa010101, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc04d, 0xb, 0x5, 0x8, 0x5000000}, @dev={0xac, 0x14, 0x14, 0x32}, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0xfffffffffffffffb, 0x1ff, 0x7}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7fffffff, 0x1, 0x59f, 0x5}, @local, @private=0xa010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd0be, 0x80000001, 0x0, 0x7fffffff, 0x4}, @multicast1, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x2, 0x81}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xe0830bfd1a77c007}}]}, {0xc6, 0x6, "add1105aefb3b6b2abaf7a8091e8b69d009c6629429b79d4978a576c6775091d6022b90e3ed1e8058bd91bede19b29a34fa948974ff9a72d58c139647337b0ecb5a353c9848b6ea649e79521e6b2abd414c9a9d522331ff8a0fb999b2bde45c63b6da79fedb9c47b5e876dac865e477e3b7d9dcd160cc2bc594c9137e45c06e9c28d333000a8fba2edb6c794b04a82d651fc84d4ccd8faebe9169b683d833ec13b6077d4bdd0343f82a0c220b8b6dde3076909b7c69ee33b82e171997a4c4b544d21"}, {0xc, 0x7, {0x0, 0x8ffd73fcd0b23b6}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x120, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xadf8, 0x69b, 0x20000000, 0x3863, 0x70000}, 0x2, r5}}]}, {0xd2, 0x6, "f6c470bb8880551d27088fcb1249560fd4621145251cc39b3bce0f843453f710f1f84bab9b2007d2da307f4179a7b3562b3924dc31c0f9a7217ac222e995f630f3e8f78facf7f78419e111354cc23e3dda7db24a74e8d952eeb3c447d061ae958d4d578ff6461b6a3ddaacef7656c228226efc39bd0be03b91558bafd9b737b7427cb9a912a167f10666a4b0420c7c16c4cf641d78ddfd55014b0f1561ce708e676358e427858824a35a19d5c54d1518d89245be20878dbe9fa44ccfd50cd0eb1380bbe7b2e4d9f7453e93e05f31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x128, 0xc, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x40, 0xf, 0x5, 0x6}, {0x1, 0xc, 0x80, 0x5}, {0xa, 0x2, 0xf, 0x6}]}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x3, 0x1, 0x4, 0x7fffffff}, {0x8000, 0x5, 0xff, 0xe37}, {0x2, 0xf8, 0x5, 0x101}, {0x1, 0x2, 0x2, 0x4}, {0x4, 0x7, 0x6, 0x989}, {0x8000, 0x62, 0x9, 0x8}, {0x7, 0x9, 0x40, 0xb}, {0x6, 0x0, 0xd6, 0x5}]}]}, {0x87, 0x6, "a8160e8343b97a468fbe801e0c212dbb73ed7283e1a3346dd3c60295f79d0b51169127c77cbd6fc9190359f70686525ae174da4582a21a271225fce867b1570f251de83972516a72cd19980c4f16120d17e681022a41ba2322c64290e76fbc3c003ef9b25fcef0fac3e1c06c3814e045ad2128827ec59fb302dfc1491569916ee55368"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x10c4, 0x0, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x8, 0x5, 0x101, 0xffff8000}, 0x5}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x1000, 0x6, 0x8, 0x8}, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x99}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x173e, 0xb76, 0x20000000, 0x5, 0x8}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x1f0, 0x3, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x6, 0x4, 0x20000005}, @dev={0xac, 0x14, 0x14, 0x21}, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x55a, 0x275e, 0x0, 0x4832, 0x6}, @loopback, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0x20000000, 0xfff, 0x3}, @multicast2, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x3, 0xffffffffffffffff, 0x2, 0x6}, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x33}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4, 0x3, 0x7}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x19}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x80000001, 0x3, 0x4, 0x4}, @remote, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x89, 0x1, 0x3, 0xffffff00, 0x8f6}, @multicast1, @remote, 0x1000001ff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x27c, 0x2, 0xffffffffffffffff, 0xff, 0x9}, @empty, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xff, 0x6, 0xffff, 0xf}, @remote, @empty, 0xff, 0x1}}]}, {0x5e, 0x6, "85d41b0335b7ced40b7c3f7ab827661a5c06432e6bbfcb7c0bc50b4f06ea7c0911eeb55a641d7ef9a3d9cee57a8659663b26f08aed87345dfc70fd64d14e9e93dd7cd1e01f9b9d66a4d3c7e177281e0d38a3b8a0544c5ebc05cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x3}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x3}, @TCA_TCINDEX_ACT={0x1848, 0x7, [@m_connmark={0x10c, 0x2, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x87, 0x7, 0x9, 0x8000}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x4, 0x6, 0x3ff}, 0x400}}]}, {0xa2, 0x6, "85734867cc1f9ed766a960bf6ed338186b20c99d7d8f50f7ed05b9b218643be05a8d6fa346cfd45f74324c9d22a6c339713bd9ba5e5d3a8199138b017bc99af864089f2010d1aa388fceb7dc1d267e7b2c6b0217b5292be6fedf5a5e4a15e5b680b8e44147c6ae8886e120273a34c39fee853193905fb657890a774b9c9ed0573f734a80042da9c7b437d1f7c7d50912db6b626185d93ff7df2e35c06fd2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xa63a366a4398a891, 0x3}}}}, @m_ctinfo={0x148, 0x1a, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80000001}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x90ce}]}, {0xe4, 0x6, "c6a6245e62441de77c0e71a69da466348341eb0bcdcf43c1fa87774d7c5c03510311e179c331aa6c3934c3f8a77ade3da7f3a78e6ada79fb523af21bd8cfde27cfc76b9d1b96b58895b934e52e1433d5908981115903facb7966b4c5863bd5416d3f189e4336abed5730bebb17b094800d20cffa35327e3900339558d54188f794bfa93c0afd21cc06e48af180eaba11bf63a6276e03ca3bcea51af599e9f5212cdf6c18375fa8a83b24b470e21900a5071a4df4d23234587f5aaeb2861f26784a82033d2cdb27f8a43321d8eba69aec48fd1c6bb6eb69eb9c79d1077ee682f3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x120, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0xeb, 0x6, "23f374cc58b94ceb9b24455c1b24c1c4fbd4f0665fe6bb22c0d3ecfe914936cc7866c2bb4f426d2248207593ad7655516f37948a3bf3fd5ee85527081d477f549f2d06106151f1ff842b7e1900669563b01186e873a2abdd39f552647f5122d059c87f2d34b6cc91c502af5ff3cda69096b4d07ae6438cef84e201b070fb162614d719d0535502a9962df030da4f6aae056d2733c7bfe58ac8635ee834820786d69aabacab29bb3fcfcaf64d83dd5e99c2cb8731e7f3905fc99cfbf6e1fd81054eaa82f5abaeca98205de9a4a7870873bf46e020c432f5ededf1db581787fdb1f77ede2dffed92"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x1170, 0x0, 0x0, 0x0, {{0x7}, {0x148, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xe4, 0x6, {0xffff, 'raw\x00', 0x1, 0xc, "46509e662402ed37f0561cf89495f6cf58da796d59fbc5ac837b03958b39d4e0a412ec86fb79fb7503b89974918a4a1a1e0ee412fcedfadf5e8ec9c30157e907aeb11eccb71d872ed1f576580151eb119ccb22a8b9c730c4a4d1a7af95e873d44d207b0f4af2766bb090d8ed1e0c6b6a72ac3dba871e7698c80215a7a694e0df2a63bc726522cb8e0bd5f2596b07912e08c09743538d7be19c0e4169f5d1f1f976ea993e3a52828d9ca834532c5e177f6dda3011a162be72182d"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x46, 0x6, {0xecf, 'mangle\x00', 0xac, 0x8, "ad8036359679b200e58e53c79efc150a83bb4396c8ccd65f5a3f1e5c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x108, 0xc, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x0, 0x7, 0x101, 0x8}, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff8}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x5, 0x6, 0xd4dc, 0x4}, 0xf}}]}, {0x63, 0x6, "d838525010dc936ac0828acac064fc7e39c3f50ed5afddca8e9db331ff6a8997929aa5ad06e2d0960d1557041fd5c281205522fc8d1223f7ca1940c948b9993cb1098e3ffe9cb82066a8949788ff0b40df1632cb2af24e7fd318c30d89a2d0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x124, 0x20, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x4, 0x4, 0xa2}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x2, 0x6, 0x413ef33a}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x4, 0xfdcb}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x7, 0x10000, 0x4}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x3, 0x5, 0x1, 0x8}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x6, 0x4, 0x5, 0x2}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x68, 0x1ff, 0x0, 0x3f01, 0x3}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0xffffffff, 0x8, 0x5, 0x200}, 0x3b}}]}, {0x16, 0x6, "7ab9c4092c8f07e3453671821fc1be3ef686"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0xa8, 0x11, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8b, 0x10001, 0x8, 0x0, 0x9}}}]}, {0x61, 0x6, "9aa01a8e52b9dde3c1f797cab7335ce0b8fffe663053a32b96efcb06e890a1e634bd00ab984ebf4e5318e7423b8a27bf272bdf15b2821a6bb25653c88aa28afac099d23f0406ca5f084d7bca803cd03b0be8f158d1b9535b66ca78df16"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x8c, 0xc, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x47c10}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x7, 0x0, 0xa30, 0x80000000}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x55b4}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000120a090000000000000000000200000008000440000000000900010073797a300000000008000340000000016c000000140a03000000000000000000020000000900010073797a300000"], 0xc4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a3100000000080003400000000109"], 0x34}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 5.84191312s ago: executing program 3 (id=825): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x2}, 0x8) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfe16) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r5) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x94) 4.97379785s ago: executing program 2 (id=828): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x58}}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fdffffff000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7e8ffffff0000008500000043000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) dup(r3) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x194, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "e3630dde215f3da533f861c33b10bf7d"}}]}, 0x194}}, 0x0) r5 = userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) shutdown(r6, 0x2) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000e00)=""/202, 0xca}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.509835745s ago: executing program 1 (id=830): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x4, "b546baa5cc590d3033de259c2996817b28e5ebab028de5a501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r5}) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x28040000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0xffffffffffffffff, 0x400000000000000, 0x4, 0x3, 0xffffffffffffffff, 0x2000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) creat(0x0, 0xecf86c37d53049cc) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="388219d25a8985d3a909841c8e956469a15e906a4fad26298b696426a81fcf0d6134c5dfa3dac33b6ea4c5d859c2e1333584935ed9d80c184939089e0cb436417aef5dcfb0c878732c6827d278c2910d390115e202c3162f4711bda810555b179a84d7df9f870f6c7510312f0255ce1bef6e875780543aaaebfbdf8208ee5dfd0de60437108b819a35569013870ba0bd0700000000000000c69ac3d0f174042b37d31f7821f65636376ab7bac88a99fc39c60286cac8d3edb5ac4c768a68a43fc77a52adea3b7397aaa2433cad989958c9a6118c72006208f95199efe7d08508913b00711053120551466066aebc0f3f5c6fdb9693ae6c2dc5fa839b808b8789cb1f88514918a6aa1d1a76eb131ebf84a0edaa97fbbcff14101f79a159222f4b4f31942f18bd6f1d393d3e298803a8435d214fe2f7bb31e02e2a75370bffa78d6752c8a6221b50162f7ec7174c258e4b65bf2797b4f7b7fec7488a0675990a075f7ec74b93fd845a6a9e12b0baeda5c81ce23be3b4cc15b493d4b9ae40736c55fcb8266f33760fd09c80bee60e1d5269770dd67c34d6c7ee57d67558f6421b3002c66df981a3114be6e62d4ff999c7985aa767f0a073eb499257c7b1b977f18dfae99f3be0664bb0c0d96fe4f3b1df5d904744570d01b517cccdbf17dada77ad37099ff69c040c0826cb23a80391f341749f2c21c32b5977b796b6af2d7194f1af44f2e0a84bf102b28dff97fa723c6792e16807939429c921dcd26d375fe58c59bb76e3d5227a5c4e2331c78a46e5a7d84ac45b1bd268a9d66fc2fd03aa23a7bcd7ab711c4fca2958883260b5d5741b145717012d4aa15f2d49b54660a46ec7cd7f9181213acb61074c65189bda02ac65f0e916f9b9260fc4cfc4bad08afb07fde1c2dfbe7807835958ac127021a7a2da901700483f8e5809a51fcb9a455fcc58d4dd8745ad4af3567fa9ee1b8750543117a970bd98d2595da38f3ea455b1611d32870677b0e0605ac387ca068892e1fb81411f901a1137ab9f5b78d350aeec44957e54e28f9ceb6d5ce046237b979ce4f7e7211167a6d3a3e99b151c08bc2a1593174e18196290e16e517e3ac66dceb7b1cabca97c38a6aefe048aff9fb203e1e58e5343062cd36b65198005d0b8ae336a47e8e4372a73aee7131804013d24e3d9bcd5ae2dd7baf036d571ba12ea7f17976e3e20887d8f24db24b2eb3c5e3f3b9ca8611ad4f4be7aa435c9641f290fb478168d3e204edb8181eebe3acb2552ddfa1f01d368d6604c03f84cbe78ce58284dc3b99aef5936adce8fb81118af0ef5a236391b9856bed6d1bc6cf02990c48b7f6c917efdab113ce0851f87258fb0d3f8633c6d41f33cf76f54492c4a1dcd4459153cd28c6473351371c73d73dd8f9a22f175959febadb76a866a9625b926fa1a12b32ba97df3c2e3b5d6893fab9a6352f168c423b38db9d13895afe3a017d27c84b7c20363f4e8a81f0af52c5368b856ecab23f52cf87f1ee3f73bdefc424b253c9c55f91df8a02b7df35a7c7defb7d260e4edf040503ed18f16aaf742b2c30ffb7f0108a48f50a7e603e24e0399c309781689118b2f1c23721e2528a3f020a4a43cf5439d169b4c116c284aac82ca2a5cecafb97d9dffb2b56af3cd73fe9ca2553ad33c12add00f01fbf7e11f8b30d3bee0096418b1bfdf2f458d8534c3660da46483bcf884088c171d105ff05e441d018dcc495eb35ea1f921f98ad1f5a0bc0f5cf69450b70bbb2a24d427511baf0638d3b4da0fbdcbe126e2e9e415b81fb12239b424f8f553d73520aff5f212fad8a15760759dd4726bd2d05eda93ddb10cc2ae01977d1030480fddea6045be4a5983fb67a263bdb86f722592880e4feaf9767dc5352cd898da96b647eacb41d7c97a1e2bf1e48b548172a06ff21962e79ff3724b94c3e339dae7ac1e67225846da5e1399639885fea22620c9501dbb4b8ec62292c1b8392e20ad72bdd72c85d5aff8e7432117097bb4cc173de0f8dfed12134024d92c2c8512cbb96b31f156d759770467abf602e3a580bb0ee26137229e11df6986f33c8de3921b81ecc56f600f6fbe39787b72293d567c3d396ea4d65baa3fae1a25df344c5f33ec1fdcafefc0bee2c5cdf59dbb0408e99ca27f7a6872bfd2c20e11bd8c5b9a38fa98f30b5a56eb3dd10be3cfc60f43264a40ba7e91676920540b87d9b4f88b59f6ed8b66d5144930f0f4d3748084923b27082d8a175f955687cc1598d02937af997018a871db6e0c1db1e2e4431e452cdb0110c65bea7da6c8a9e4a66f0957fcdf1b8c7cb4d808b896ff217db472709690bf7ff4d4ca912017fd57812e1dac1c4d1db8d5113739e917bfba37581118e950ba1a77aa124b4de0611ab834f8a82794bbd0b0b14ef60031642a6bfe152975b1aee3b466d3d9780c0c3b47aacaa8630a117b25409bb49af1f4b6105f0002b84325dce613054b6402d68e16bf3baa7ec6e9bc39cf324759f92cb82492e9b653015f1d795145fa911ed77ac5acbcff00cbbc2db04d2753c937dac0d09dbba128dc2f5c5918febb6ffaca8feb5bdd2c54853b9efe9b93f5356ab3bfe67bad1985e4c7e32c23e47140c540acdf30aaa966627923dc904f334a309789e17af70c2094ae28375a9414233115a635bb783ff422cd130b9efd41dd1c667d571241dab5d773f83e897787094f130f51c6c34f5af6d67ec94e57c5f9c37aba10f0a0433fa55b6ca2ce88b5ff1f44985312efc85fd31cfbf2412431763ec5ed6f39a799171aad1db74fa5c04295f5476446e5c148ddd3062a8ec4e773dba59139e9d0eb72b327cdc6b306bd475ca92ee5310d72c0906faab2950cec8f8619e009cb8c52e75fbec8aa4ce2736b3326583d365da32284f2b5f5d3c849623d15da5e6b2d780de22cf3504e5f06bc502a174db330d72214849ebd6887bdf4e7763db928b159698ef4e0755946d3a3508f92f332dae105a4c177d3ece1c7360dbade67e339934509e2f38b4f5022f5584255163d152f07b987ba838e45d1e62f14e46c45fe9e8a34dc4ba572081e96e9a33f31509d9bd0a362dace52d3a877fd238890d658ff776224609529e4ad4dc5d9138b3a2750dcafbd04de7d3d94d2b00128db71571ca361e4e257dcbecafa1f236c5c7990a37933a62ad28f575d5641b672fbd6b67b52075cc8daf420e4fe703326c05795ec388f6bfcdefeedf0d50617e086f749f7c37aaae655c5e059cdf0a1d2140273b3e6a22f6f79f843e3a4d05e92565260d354d068a71cc9ac41556e795c84291490821f5e5134ec03faf8b1073b774eb6e81a48f16ab2c2b4ecc0ca758cfcf4d2301f524a2dafa7a1a0cccf08b325dde92ee365c23ac818e673e60d887f8a24e3395e02379341b2a21959d01812f2d2de3eed3616e1d38249b4ccb0bfff4049725324c5d3dae738673e8849a889badf69237f98878efdb3c3136db8a902b83a7fbf62f08501f1e55c2fdee54fbb8e824648e58bd8f45e729261c6e75637e454b14b3e7175ef81551e9ce6609d7b7e9e53467aec2ce5b34a1761ad6a510838bf2611722885251732ba1aa8782a4316619bd49194fc0ecb67b3ec0f199e6af276bfa9cae0769d2779f6579792dd100bbc9b8bcd94bfe7bf1fb985789917c2d83b14a8b028d79236e0b01f1cfa00b34554148643a9ec25053baa4b56a1dfec6c84c1767989f2a400beaf4373daaa7f578846ba90de1bf47a921a0dd4f22746ea82800bb2d51bb80d916148b1fbe8e7ebb79cf11c8bf588e2a0b95f6984e866c623a9015371d5d3495a3f3d9b42ee7828f1a3dce118a648342d0b0b8e17dc9cbc95c16fc7410f5a7ade7bf921279611e6f2cec5c945e4115142075287203b65f8a3b14d026c465b83a4447891dacbc37de3f23b801abd1a628973b5858a9fcfcb1c3923eaddc6fa3787f28f5ed0f2e1df91bf9d7396891b4efbe008e0818cb57d3eb178844e98db8b09fc859c11427adb4a92630aafc2ce7ae644f077bbfe3a899b6014be74be9277177d10c72f0b13998fb666af0cf0b28757c5ae8f5021c00adb414d16aea5cb23f22c7f526d8266e4b67b85f124704769e1187c3415acbf81cb3c2d5cc04d95edbd75bfdd32847e984a55d4dc1a7d3781bad2b6ae2a576c10ff471e107add2a74e59ab11071bf5fb57c0cc34a45dc8796fe47000811cfea6cfb22c22e2b4656efd5ced8da97ca0179a6c3a4d58a7bd77260516107a9a72036c92c2dc800d825c3f45c6123a0332d37d7e29f84184e19decc59102950da0b0cef36160153f5a453c9c7fcfe2e145aae343fb9bb726bc3aefb9a604708d3ab1c5f51228ef8987a00ab2abfee2f3c1a38c48797035d43f74d1d6ac26df34926ce8d95d1d57f9e442398822b5014367dd8dde2db00ea5972dc8e782a7a193744d3bfa0298f353207e442716d26ba943821a6b0d2e112bd7033d7df3c99f0d875dca45f466567c198c16039b00f1125b77c1c560ac21ca70db4a642ed58f5f55db9acf206fcb3adb31731d9efb1b7dd9cc124858bc8fd9fe2651e31f152f05d2be376f3854d3de9dc464541bbdab3902773b3b5b2a14a20c0e80ae3a2ca02ddb584fab1767af0428969d4a9035cef9092d8d3bb48b8be88bac57d53c6e50b07fa51e0d9351159eb97741e09f55317c802fdb0cb172fa79b2ad25fd55613dbcad1f070a407facbcce6a229f4bc88de1ab99dea251a677209e9bc08fdb2e0299535beea1189044ab8c69c9196fb9d39b6c609c0c815ec929a01cd974d08b6f0e301991101ccb8c7e591f9cf1dd6fb6cfa17d6925d13bf18508103c44a52efb3701176d31e34207aed48792f5d7c4ddb6bb3bf6f0869f528363b7e0650b06b0e4caf53dc30157e80ae1e2432b60a1c64088eec7013a213ed65340adddf6940d277e87802729c3a6dc9c3d5919d835fd55642e15ffce4a9bd8553be5ec276d0867311f2b0e11173eedf0d7d5dcac0d44f8076ffd9ce8e90f828c4443c8b602db35ca19220f2cbc295e8fda0602e6437a46abc775da4237bede18196bb1e1106220235fd2072fa4375fd8bffa037afeddedc4477b315799176a23f47f48afc652fff5083c917ed1b4097cddd186921531357cd0da18996a152639692f5a2bf4c7745c3b640d7ca69e236edca95934c36ca4b9236d9cbbd3f248b948c942f65dfce17167628b4eb0c5893512c2d8439812bcea8d5fe6a229264723b66e4f2cb6f970139415440dde9946c5ad40032a1c5a18c248d35b73100d8f38aac9c5c302354a9db4e8d99a2d845f54a767c4a0623d40b998e28d454aff7defc9bb4cd3673374a33e641a6614c6b5546b3f70ed288f53def2e49baa32d1afb93b4c04a22b5c9ac3a23f1e0cb423eab40f51e2b3c170b501dc517abbac962784e1bd151815494d04e336ae2f16064ca27c7d776f8c5974a76e9b3d313446336e696e24202b2cb94603e2929906ad4000b13f0f7e7ecf6c2d7243e12d0aba4fb5d4a30de4e2c5a0ea8ade6d79bef8dead7b49ceaf6d7157a427382570771040c084c9feba727019c3b03dae0c5880b0a2dbd8150b743f987b5019b421c5d164150592ae0646217618c92e7876e6c4a2b0ecdfde08f04265e0bfa096a2d6f83953af12209e892a9a326368e0270f8e669ed5aca72579d1d6b806eaba059bb28c7f80fc1ce39b994e6816cac5df5cf9d40582bf9301b12deeb09a2eeab9c8a83a7d44d04a87ae0d4a590cb5f5e3824dc381fc56aca6787be5899aa3694f3b9a872b61dd5876c0f8ff3c81f38b4e52792254edfb954b157abd7b2ae2f4f8caee5b78886894e467e38a93c26cbc546022371b44360a317513341933a0db7ba88929844489e51259a489854f8160ad46594a19cbe799515f396168505520a5288d00f8093d3aef119d94a7863e67c9a7d6f900ba9834fd886044513ee1853713c2a4b5121487db6e7424a0b7f19895e5cf5e41e69c34b3378bae46e2e1c7d29c1cfe1bd0370bc2c0649ea144cd1d4d40fa57160cf856f3fb3dd3cd9ff014b4194837af58189305226b534e1a82297adb14e7af42693fa5065873cbb7fd7ceef5a41d8a63c1ec4a0b214182c5ee3cb9430f6dd7cd57fa56e1b6df932c683905f111867e5bc229bedbb3099a72644d96c38aef3e93268dcab401a2882f1f48c63dc068fc102adf0c8e8a1debdf454919cf7042c6b80955bd63cbc27d785e06ef360feb725748e8359e1fe6d64851ad9faf834d28e6273db6830eb655e6ca3d0d437dee2bd6d0ffbe9aac4e54af0e8436ab653f8d6580acb7388634f342b36fac1feb35526eeeb8602a31a65843c18a9bd463c365e42192f6aadaa1a6e4991e9340258532f4f4811788d8662925405b76db6aba7965aee669441818c5e96a3d945d81baebd00ba2d97414f1840b3dfc7d34d9fb13877d241744cad6a367dea3ff5c4f29fd41e06f85c67c614cfa307463b3a8550a5a31cadc8c7111f1236c9113b18c631cf9ede683818be932fc0c8f389457a05c1b02e7a380b27b10853c79d9495ffa702aa01a1953f269c952e4ee95b001c5ebbba33c902a7d3aa81ac9ff01b1f9ed97a6f280f3caae24cf236e41993cf991e7d8f3ff50a173997179a190d92a26beaef64eae0ebf824b485962089f8675c2cc176c2c052948176937a4074f2506edb7e60a65149ab319f76fff07cfde46f6799869202d735e5ae9f91f4d23150de807efd933ecab245fe128554664fc8a3f411a9e45e050ea40c68e45f57403dc62b3a6908df7f6d8cf9ef45133e56b5682757415093b49b86630758075103fe98f1d380f58829b796b9ea4f06499beaa81108976a3a70174c3542eb2130070b1c4354166049b412b2256be40a9d20e18a2600540e1e1c15549892310c09870dbf70874be181a0ed4009592bea754fe30ff3cd96a551071d7ce21c6cfd3e449dd8c39bd97ed47b16bf00096578342112fd1aaef915962aa9a3141276c7442aab367fdaa02b2db13bb1e1be5c7486464196541d584096200520a6a57a228466fef61e2f6f678ba9f3733f6ae80bdd6bf67dda5b13bb7c8d05d20825566ee3ddfb9c94dc270aebe3d5a24933ba6befcb65226de3f2d8fc6fb518a36bb655289d2daa616121a4ce08c9f4effc5127c90d93369d8345357c67e3bdc024263fd43d090b8f1643c75236ce000ba02001c5974035f733ecb05f35d3d205027b393b4bf33dd86050a9e2c8f779de8947a38ee7b2b2b39d427cf48a359f10bc0fbd50763c8f4727ba82a55f6c2e944b71f8e05626bef8e7598c55cd4e587686446adf394282e312d48e02b9ce324b8523b33978c9ed7e67b886479c8c36d136d276b34de843ccb98d624daee93cd3d5db695189a5b1f730091b6339d8ecb93485f9091b46e998ff1efad6d647a2b6d5f4647e84835cb1d863386a337c9ef4ec0ad827fd0acff7498422f8277052c53f0a7001b3771a19241b1d14021d6dbae44dc7fd92365012d1ced3c4f494699e398c404d8ffa5a6cd824e2f7638a4087693dc5191a7c6fb4fd29967e27988234c015a33db9ac71a416a8469f871b7da09c95f3331576c1b4f4c72b7b127ad2e48a57e28804efe74f8145aeaef16c03e2c3e99fe3ccaddded1da622fc62172e8f55d04e1305df63e789774d3640e6cf36ed53c2fcdeef189178dde1b60c640742c68d8d06cae2538b7b7d0ffe1905037537a754ba44950c4194c8013b5a4eb2a2b6406f9795d70e4321c7ab7e630381ce04e2e4f15e49153842118abb5179e246e41ffa49ed2b39b62ea47001f35229be23d332a81b5d47f88a5737b480f27ca75a653efa3afa257ef05e1b4da1cb84653b074e9aace9f6f4b94f48cf50b3fe2b1658d30e3f288b6d6a1164f3c9153b0f185c10a64c861889dc3faf8bebd6caab6f751a31109756cbc8b9a62384faa1a88b2ef8803855414dcc209329752a65b05a0784be9837e3a4a7cdc49b302a1e3e9be08080b6af5049702613b777e55b0033eab3ad76024a6132522289df20d753b595a48b1d116e792b51c9840541f16f56ef185a3c14e64b7e293c178ade690abeffc9d8f908bab3db2460d7f692e48dbdda353b6df648a98411bd8c70f95f6fb27390e6d3241f36fea36c0aea9198cd40fcc23b181d41fd91cf66570aaaf0688a4eff348b6f0e4c8bbda629cf269eafe2d60cab7108dbaeb0119ed441b7c4b379d0198be27dc6de0b53acca37dd9e5a40a558d8405de127fdd4b381a83d6d33b11061ef5428c08a8c64e73a3a6ccb11037cda942aa937f1ec14a9e2088acbb7b5489d173ce08ea04febb1cd93d7c0e1b3fb2facf8536e6568ea349647e2e449fe220516f5e94ab5727a91b92f9ac957cadb2e107b101c286e521d7742b86dc53df904cd29e6b7488ac8d149226254976858d25d388eb6842271f051a082e18d0549232dd0fdc8da13aaa44f925dc3f462a188cdc8e1573bf989d25243f975a7765cbe01d34ae4654fa60e20a39f89b53f008796c5360ca8ad4cd9adf0bac7862002f9a02a30aebadb738673bb12edb7f61755ca16defb8aca9bbcbf2fd39cd556369050407d4a7077b14cf922f3597af3e967ae63f1c1e8a6b6d10fcdb8aca23c2596b72155962438889005fb8a835153ac594f1a8edfef2ffc66db8d642beee43524f6f271a1c24824c92ad58531251df443d712615f7fff6a385298183cfce80296dc95ef4728b5b1b98549460efaa2d230453f8156b4c6d76e5bce6aa9e1b4da827a96949af8681edd094d0d63dc3b582a156480b1800130ec5543c40be0c561d90bb379db82a4b59b657b05333c958908bc65b3a26fa8d745d579b09b5fd5e2223e7c182bc7610d414a379ff9a8922909340433ac17b77130ed417bf23e4ae48ca4a834b038f977d0deefe1291e76395c35b4107b2de4178b1051251cacb6bff04fd2d092d6ae2a72b25213605ab08b71fe478927cf82353ebcf382630cee84d03bd38227bf8b12c1bca16686ec9ffe61aed4635328f39ee09aafebf30da052e0e4bf28da6badd62636022b130dc4f1e196ffce2051d3e7f80ae29a38abf6367f2555d93f6ad2ab346f3037737ca141dad639771645fd683361c2b67abf0b04c1846dff0ce319ae12a9c79a7bad5e8e6fac23ce85860d1201e69319c41924d87066f6f320006bb3fe802d04a5bedbf50dd15e22df446cd94be3486047315f9ba0fea5af6915ea399075704308653b03f29d4e99419a1a7f848302a46537a297f6331abc7c36df88bb535096135b971d41c4335eb8d2a9eac87061d16f2e6899662d327deb8fd788661d6d151a7e4d3f8cb8312a0b8b60807cb6abc7bad6b66e8d5a492cef77759055e15c7c37a20c751b9571e02ad40b65c0b17668eda7ef989f8bde821d2e9c7a119cac9ca3e925f51cf6c2bab2a406699555099e016944554222144a3e970220e01bfe3b152c955ee4e21716c1e521a4bb0228dcd9b0a237f8fc2ccf9b4ecd8d6e2eec4508cd6c6453db134def3be0808a9f0df28960e28385611ec490cdabd63cd76bc53fe10d67af82c755721f6ba406969969008dc072d1a3c0a64a95f5265e9529575bf1038fe0df1925bc40bd7d8831e891aab8f888d1906681a08fccac5bb4cb3c7e67ccdeff175b76d9bd7029f53e0ee15d8845504476940d05b87156cce1d5ed93671d5ee0ce0874f0606f7d09d15cf16d98a1cbb456a5704cffc0a3918ef543a6e9a67e965c4fbb8186991ac3ca2218244cdc44af93a08763e04cce549c5ab00146278a63c2c94859a91544efc6559061cf781ce86969f8b1f5b65389ab3b19c0cc41ddd39e614803b06599b8653ed64cf8e3605c69afc879ae03e6cc5f80f88fedae281d1adf53a9204c491204edb99d1106b68ccb21004d51c419842f3e1564b5a4e01e71a47135178d8d045b07c045cba01436cd0ce6a1ce9a480b1bd6eb48fe2888214ca31766f5c5144edf8bdf7edefe015cf95bc6834bb06aa157b76f9fbcbade1ceb547fa678ff33a24ed4cca831654c0b03bd1a52ceca4287171d524e37d42899a4c5586ffb7b4aead7cdf892ce24d66eaff3530dcca213f70cec1d24cd59bbdc12e3f6f4bd4d0a2b232fa5f9ce2c70aa529fc85d4d2183f4c20f154da58103cfeffd477901d188ea888aad45f778dc48969936ce7519d2e1f0e14b2fc8b02340af1f83119cb69ab38e5122223950d5045479cbfb0b989013e2b1b995d6c45656b8124e8fc54f7daf9409ff4ad5babdc9789e3d420cccb792bf06a75cbf2bcc8b45a394e62dce6ed5188495c0de5a86d00694fc70a41b1cede2e986a33c13a7bc88d9c79775dbb624b9d66c577466547183ca48a0279ccfc7bffe699d0f4f82bca906d0118865e8851b75f9914ae12a368c0e2881fbf8c1f4374c37fce575034bdac4a06e022e62b34874966952f0ffb6c9fc8138eff8e07ad630635772e84993af6d71dc3eb534bdb00475eeb433da5b6cdf9051a8898a8893ef0ea4102aa24968c2c8be9b5b02e07c075f59c3398e08876054135ad6be1c51a5e98e1400edcca8061640a0d20b3f7a92acff856d20703f70c2159f91f9419d34cfb87f890b578bed938ec52eb1b45fbef56828774cba3704e0a22b1fff7ff6bb94620c9f0317728ee32d09615d186138238fc529247e80fcf71e9269e72fa25962695e40a38a816c2eb5d5e3f169e5c54ae20cecdc206b8cc093f6f5d3461268ff8a7154bafe92cf145aa415556cd9c6b4f5693050d00d6e1f5441c67b4c3abf561803ef525f4e199b2cdd03b806c0d8606ecaf25ca51a750dab89d91aaab170fcb7b6f50766ab8f11cf177bd75e58d432c051cdafccde5fd81233f524d37a6ae391da09b381d46b1333a07d5632b9f83c1aa8cd44f417320550d5b9ae5118502ff8fe89fffba8e0cf4f8fa4c096ea4937b7b3ea6f9dc0fc13e2e2b4ca172c97b67a58404a335436658063a9bd1c71422e9ee5ef345df6534be0b0482273c4750b9ae92c463bb87e7de173b40a8709a4018bdbe9e799b0a95c5946dc424efaac67eb3fe869d49e040d94d42c1c7680c47c9bba3344f7034d68394e65f6d31b9e5b21a763429432b91b85e274a5675011b2d5442f1d329ccf1220275ba714738022742135bb9674a2544d23b09c93d1d07f35738abf59f44b894048faf09bf0467b9d8171afe57ee10c828640fed3801dc8711e0b678b30f42f396be642975cc2724110d48a59d3ae7160781b7a3f4973fc2d720440408ffced0e2b62728e7ef1f5228fab181fb9b7a1077e376df6c5aeba81e9fe3fc9f82919bf476f1e97c64da1aaa0fc7d1e0b31d8519717717a1ca1856bae339cb612e4880d0aed31500c80e63fc888389c20be12e73cb3299f7a23cfcfd47834ce9b0d92d7b732d15b2df232158cc9b690a0c7e9fd2c511bbce0a6aced586059a9446019ac26ce6eb9ab507dfb24c58acfe596dc2d67ff19569211078498f31e7998135b47a5e2f39b23e474bf74484690c080fc1b818474094d960fe89d45b43c926cc0e6b60bdf3fed333ade75161441c622005e243964d6603a29888a5e921a713e7403785a86103c7fa700", 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) 3.989036253s ago: executing program 2 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x300, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3.669609041s ago: executing program 2 (id=832): r0 = socket$inet6(0xa, 0x3, 0xff) socket(0x2d, 0x2, 0x0) (async) r1 = socket(0x2d, 0x2, 0x0) socket(0x26, 0xa, 0x3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0xb00) 3.473896257s ago: executing program 4 (id=833): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c00) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x4, 0x6, 0x9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1bf645000000", 0x0, 0x6, 0x10012, 0xffffffffffffffff, 0x0}) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/19, 0xffffffffffffffb3}, 0x20000000}], 0x1, 0x40000000, 0x0) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0xffe1, 0xf}, {0xfff1, 0xe}}, ["", "", ""]}, 0x24}}, 0x850) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b0000000000000000fb5a16493dfeb795857bc4cf264ad9b00f5ecb08b51ecf13dc2be6e4dbe9bbbbe6c972ba89e9f818d87c778540e77b8d29365a97931542aba0f69f4c293d47408abc6cd852b141b129fa44d438a34f09c486f7055c4f12a40152d3b93b73c1936d8984a5008b6ba83bd51bb50bbd75bfb9741d0d3686dd87ffbcdbb9d86e9526ebb677017d8566249d8969cf89044c7a5ec2b4d2312500648c5153428a59828a28794cc595087ebec4722ca2dc889dd9382b935217fd3acec04e8be408a62f677d5df6593c0d07e86d486e9e1b91741ca0e3e042925b1988aad0c8e6"], 0x48) pipe(&(0x7f0000000380)={0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000980)={0x0, 0x0, 0x0, @raw}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.473569756s ago: executing program 2 (id=834): ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000240)={0x0, "72c26325ae5a9ee6f391c20c47869a13771312967bc9cb1852a577e11a01900047c1d46c9f2723700c741f33b3f18bf89070cfc06f000800", {0x1}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xd2, 0x2) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f00000002c0)=""/72, 0x48}], 0x3, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905827931"], 0x0) 3.289302038s ago: executing program 1 (id=835): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4040040) socket$l2tp6(0xa, 0x2, 0x73) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 3.007554652s ago: executing program 4 (id=836): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000001900)={&(0x7f0000001500)=@in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100008}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001540)="b0", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="3000000000000000840000000100000004005fa848"], 0x30, 0x800}, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffefffff8, 0x3fff}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000080)={0x28, 0x3, r3, 0x0, &(0x7f0000000580)='b^', 0x2, 0x7c}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r3, 0x0, &(0x7f0000000440)='O', 0x1, 0x6}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) mmap(&(0x7f00008f2000/0x2000)=nil, 0x2000, 0x5, 0x912, r2, 0xa0f1f000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.906090427s ago: executing program 3 (id=837): pipe(&(0x7f0000000080)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000200)=0x800, 0x0, 0x4) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f000000c740)={0x0, 0x0, &(0x7f000000c700)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24048048) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x1, 0x0, 0x1, 0x80, 0x100, @void}, "9217e114b1"}}}}}}}, 0x0) 2.805433783s ago: executing program 3 (id=838): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0xf8, r6}, 0x14) splice(r3, 0x0, r5, 0x0, 0x10500, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYRES32=r3], 0xffdd) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'sit0\x00'}}, 0x1e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.675497359s ago: executing program 1 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000001980)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000001140)={0xf0, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x70}}}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x5, 0x6, 0x7, 0x35b0, 0x5, 0x9, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x9, 0x0, 0x401, 0x1ff, 0x9, 0x2b1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xe6f7, 0x0, 0x10, 0x1, 0x3, 0x1000, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff8, 0x2, 0x5, 0x9, 0xfffb, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7ff, 0xf28, 0x1000, 0x400, 0x9, 0x107c, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x800cf6bf1d68dd7d}]}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0xa}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x2, 0x1}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x1}, {0x2}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x4, 0x9}, {0x5, 0xa}, {0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x2}, {0x4}, {0x5}, {0x4}, {0x3, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000c804}, 0x40000) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x68, r9, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 2.48205682s ago: executing program 0 (id=840): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000140)='rxrpc_s\x00', 0x0, &(0x7f0000000600)="9da92e4d6e68010c06f32fc908cce11445e892b2a2cfa33bf0cbc9923cec281d78df2f632a7a04b861e77319f4704fa74b340069ed05031f8f2463a8cb3b37b57d9c3522ee273cfe19b51c111dceab34f82eb1c63bfa5aee23fb3846b896f72fd0b78bd94ac8f7a7b280707fbcca63fe71a63a7d83213688bd015220657c1ae3ed64ddc2a19e667abb97683ae7602993daedfb32b45a25792f001360ff56c3652d9d018d1ae87ba1fce159a9639fe9760c18b3baf8bd856dc26c2733c804a15000000000000000000000000000f1c4", 0xcf, r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000cc0)={0x24, &(0x7f0000000b80)={0x40, 0x31, 0x51, {0x51, 0x21, "66aa65d3fd6df9bc448c77a1aaf43a8aa5581b136b28eef8c10f9f944b04b9ad3fea15fa8f7eefcb287219db35dc68605103c3b1796d6f2571edc72718da05764ea3b9149d1d1ca308e7c2325d257d"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}, &(0x7f0000000c40)={0x0, 0x22, 0x1a, {[@global=@item_4={0x3, 0x1, 0x8, "0b8112f2"}, @local=@item_012={0x1, 0x2, 0x2, "d6"}, @local=@item_012={0x2, 0x2, 0x9, "3913"}, @global=@item_012={0x1, 0x1, 0x2, 'E'}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_012={0x2, 0x0, 0xa, "2fb5"}, @local=@item_012={0x1, 0x2, 0x2, "95"}, @global=@item_012={0x2, 0x1, 0xa, "fa59"}, @local=@item_4={0x3, 0x2, 0x9, "2002db7c"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x821}}}}, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00)={0x0, 0x7, 0xcb, "3c9b9502fbc879da332fa6e20cb07a64a149d9d2d5e21afd49fbbc14ebcfa95f072804d90ebcd26bbede98e283df661b636fcb587b60ad869342773ececc827ad1bcd576dded8d5f58e96b0d3477c75f4dbea31c7186901a17a566f790339b33b20c6dc2c3e8266c13e340067927069a64a19ca826db27cceebdc3656cbbfb2e4912297b8588a1417a99f3fa0f3ccad5a30940ceb4e6c5f108681082c707ddb9a21770a4608d73393053001a90b7030c3836d2570f0becdc65ddff456950bc32e87771ff7e2666b93a5792"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000e80)={0x20, 0x1, 0x5c, "2d78e483f418dce0c869494f3b2f3fb31134faada80772f5eecead52f906cea9c921793be13aabb017829179323bfa7bf509802f1a789d28c8ffaae4ef256252546bfbcf40fbe448f8af2e73996d895932c39039ee9600cba83f3ca8"}, &(0x7f0000000f00)={0x20, 0x3, 0x1, 0x89}}) 2.147753993s ago: executing program 1 (id=841): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x58}}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fdffffff000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7e8ffffff0000008500000043000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) dup(r3) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x194, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "e3630dde215f3da533f861c33b10bf7d"}}]}, 0x194}}, 0x0) r5 = userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) shutdown(r6, 0x2) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000e00)=""/202, 0xca}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1.504220974s ago: executing program 3 (id=842): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x47, @loopback, 0x20000404}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) r3 = socket$netlink(0x10, 0x3, 0xa) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xe4}, {0xe94a, 0x2, 0x8, 0x3}, {0x9, 0xe, 0x7, 0xb}, {0x8, 0x1, 0x64, 0x3}, {0x1, 0x71, 0x2, 0x4}, {0x2, 0x5, 0x5, 0x6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x80, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) r7 = socket$inet(0x2, 0x80000, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x0, {0x0, 0x0, 0x2}}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9, 0x0, {0x0, 0xff}}, 0x18) sendmmsg(r8, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) recvfrom$inet(r7, &(0x7f00000002c0)=""/96, 0x60, 0x40002002, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 1.130616442s ago: executing program 1 (id=843): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) setfsgid(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x2, 0xffffffff}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000880)={0x20, r1, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780fcff10400000000005001500032000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c6d61726b00000000"], 0x60}}, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 440.485416ms ago: executing program 1 (id=844): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004850) (fail_nth: 6) 362.133922ms ago: executing program 2 (id=845): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000040c0), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000004300)={0x6, @capture={0x1000, 0x0, {0x6, 0x4}, 0x0, 0x93}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) 0s ago: executing program 0 (id=846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000001980)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000001140)={0xf0, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x70}}}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x5, 0x6, 0x7, 0x35b0, 0x5, 0x9, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x9, 0x0, 0x401, 0x1ff, 0x9, 0x2b1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xe6f7, 0x0, 0x10, 0x1, 0x3, 0x1000, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff8, 0x2, 0x5, 0x9, 0xfffb, 0x2, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7ff, 0xf28, 0x1000, 0x400, 0x9, 0x107c, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x800cf6bf1d68dd7d}]}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0xa}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x6}, {0x2, 0x1}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0xa}, {0x1}, {0x2}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x4}, {0x6, 0x3}, {0x4, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x4, 0x9}, {0x5, 0xa}, {0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x2}, {0x4}, {0x5}, {0x4}, {0x3, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000c804}, 0x40000) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x68, r9, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2805}, 0x0) kernel console output (not intermixed with test programs): [ 304.944800][ T5918] usb 2-1: string descriptor 0 read error: -71 [ 304.995966][ T5918] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 305.055626][ T5918] letsketch 0003:6161:4D15.001D: probe with driver letsketch failed with error -32 [ 305.113103][ T5918] usb 2-1: USB disconnect, device number 45 [ 305.265976][ T7976] fuse: Unknown parameter 'ft' [ 305.278149][ T7976] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 306.048808][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 306.206416][ T5887] usb 4-1: USB disconnect, device number 41 [ 306.361935][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 306.372603][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 306.386505][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.396444][ T24] usb 3-1: Product: syz [ 306.402215][ T24] usb 3-1: Manufacturer: syz [ 306.408139][ T24] usb 3-1: SerialNumber: syz [ 306.427864][ T24] usb 3-1: config 0 descriptor?? [ 306.637941][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 306.898879][ T5897] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 307.059017][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 307.080766][ T5897] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 307.109691][ T5897] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 307.119511][ T7997] FAULT_INJECTION: forcing a failure. [ 307.119511][ T7997] name failslab, interval 1, probability 0, space 0, times 0 [ 307.127251][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 307.151655][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 307.171223][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 307.193914][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 42318, setting to 1024 [ 307.213490][ T7997] CPU: 0 UID: 0 PID: 7997 Comm: syz.4.579 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 307.213519][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.213532][ T7997] Call Trace: [ 307.213540][ T7997] [ 307.213549][ T7997] dump_stack_lvl+0x189/0x250 [ 307.213588][ T7997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.213617][ T7997] ? __pfx__printk+0x10/0x10 [ 307.213643][ T7997] ? __pfx___might_resched+0x10/0x10 [ 307.213661][ T7997] ? fs_reclaim_acquire+0x7d/0x100 [ 307.213696][ T7997] should_fail_ex+0x414/0x560 [ 307.213723][ T7997] should_failslab+0xa8/0x100 [ 307.213752][ T7997] kmem_cache_alloc_noprof+0x73/0x3c0 [ 307.213777][ T7997] ? __kernfs_new_node+0xd7/0x7f0 [ 307.213811][ T7997] __kernfs_new_node+0xd7/0x7f0 [ 307.213842][ T7997] ? __lock_acquire+0xaac/0xd20 [ 307.213877][ T7997] ? __pfx___kernfs_new_node+0x10/0x10 [ 307.213907][ T7997] ? kernfs_root+0x1c/0x230 [ 307.213941][ T7997] ? kernfs_root+0x1c/0x230 [ 307.213967][ T7997] ? kernfs_root+0x1c/0x230 [ 307.213992][ T7997] ? kernfs_root+0x1c/0x230 [ 307.214032][ T7997] kernfs_new_node+0x102/0x210 [ 307.214066][ T7997] kernfs_create_dir_ns+0x44/0x130 [ 307.214102][ T7997] internal_create_group+0x419/0x1110 [ 307.214149][ T7997] ? __pfx_internal_create_group+0x10/0x10 [ 307.214179][ T7997] ? kernfs_add_one+0xf0/0x520 [ 307.214216][ T7997] sysfs_create_groups+0x59/0x120 [ 307.214247][ T7997] device_add_attrs+0x13f/0x5a0 [ 307.214279][ T7997] ? __pfx_device_add_attrs+0x10/0x10 [ 307.214309][ T7997] ? device_add_class_symlinks+0x21f/0x240 [ 307.214336][ T7997] device_add+0x496/0xb50 [ 307.214364][ T7997] input_register_device+0x9ca/0x10b0 [ 307.214404][ T7997] uinput_create_device+0x422/0x670 [ 307.214437][ T7997] uinput_ioctl_handler+0x3f0/0x1570 [ 307.214463][ T7997] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 307.214502][ T7997] ? __fget_files+0x2a/0x420 [ 307.214532][ T7997] ? bpf_lsm_file_ioctl+0x9/0x20 [ 307.214558][ T7997] ? __pfx_uinput_ioctl+0x10/0x10 [ 307.214580][ T7997] __se_sys_ioctl+0xf9/0x170 [ 307.214604][ T7997] do_syscall_64+0xf6/0x210 [ 307.214629][ T7997] ? clear_bhb_loop+0x45/0xa0 [ 307.214654][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.214672][ T7997] RIP: 0033:0x7fb34d38e969 [ 307.214690][ T7997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.214709][ T7997] RSP: 002b:00007fb34e234038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.214729][ T7997] RAX: ffffffffffffffda RBX: 00007fb34d5b6080 RCX: 00007fb34d38e969 [ 307.214742][ T7997] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000a [ 307.214754][ T7997] RBP: 00007fb34e234090 R08: 0000000000000000 R09: 0000000000000000 [ 307.214767][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.214779][ T7997] R13: 0000000000000000 R14: 00007fb34d5b6080 R15: 00007fb34d6dfa28 [ 307.214811][ T7997] [ 307.218179][ T5897] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 307.522747][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 307.534327][ T24] usb 3-1: USB disconnect, device number 53 [ 307.544651][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.553401][ T5897] usb 4-1: Product: syz [ 307.557599][ T5897] usb 4-1: Manufacturer: syz [ 307.562359][ T5897] usb 4-1: SerialNumber: syz [ 307.572142][ T5897] usb 4-1: config 0 descriptor?? [ 307.578014][ T7994] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 307.587206][ T5897] hub 4-1:0.0: bad descriptor, ignoring hub [ 307.594389][ T5897] hub 4-1:0.0: probe with driver hub failed with error -5 [ 307.611596][ T5897] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 307.782602][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 307.792640][ T8004] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 48 [ 307.975066][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.996315][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.106566][ T24] usb 4-1: USB disconnect, device number 42 [ 308.449175][ T5897] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 308.621234][ T5897] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 308.632745][ T5897] usb 3-1: config 0 has no interface number 0 [ 308.636365][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802820e000: rx timeout, send abort [ 308.649390][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802820e000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 308.664263][ T5897] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.754746][ T5897] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 308.765565][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.805367][ T5897] usb 3-1: Product: syz [ 308.841690][ T5897] usb 3-1: Manufacturer: syz [ 308.863845][ T5897] usb 3-1: SerialNumber: syz [ 308.926776][ T5897] usb 3-1: config 0 descriptor?? [ 308.951974][ T5897] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 308.969053][ T5918] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 309.130965][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.148959][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.159654][ T5918] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 309.172254][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.196351][ T5918] usb 2-1: config 0 descriptor?? [ 309.271746][ T8026] FAULT_INJECTION: forcing a failure. [ 309.271746][ T8026] name failslab, interval 1, probability 0, space 0, times 0 [ 309.292347][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.587'. [ 309.309241][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.3.587 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 309.309271][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.309284][ T8026] Call Trace: [ 309.309293][ T8026] [ 309.309302][ T8026] dump_stack_lvl+0x189/0x250 [ 309.309343][ T8026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.309374][ T8026] ? __pfx__printk+0x10/0x10 [ 309.309401][ T8026] ? __pfx___might_resched+0x10/0x10 [ 309.309420][ T8026] ? fs_reclaim_acquire+0x7d/0x100 [ 309.309454][ T8026] should_fail_ex+0x414/0x560 [ 309.309480][ T8026] should_failslab+0xa8/0x100 [ 309.309508][ T8026] kmem_cache_alloc_noprof+0x73/0x3c0 [ 309.309540][ T8026] ? security_inode_alloc+0x39/0x330 [ 309.309571][ T8026] security_inode_alloc+0x39/0x330 [ 309.309597][ T8026] inode_init_always_gfp+0x9ed/0xdc0 [ 309.309630][ T8026] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 309.309650][ T8026] alloc_inode+0x82/0x1b0 [ 309.309672][ T8026] ? __pfx_fuse_inode_eq+0x10/0x10 [ 309.309702][ T8026] ? __pfx_fuse_inode_set+0x10/0x10 [ 309.309732][ T8026] iget5_locked+0x4a/0xa0 [ 309.309762][ T8026] fuse_iget+0x381/0x9b0 [ 309.309802][ T8026] ? __pfx_fuse_iget+0x10/0x10 [ 309.309830][ T8026] ? __kasan_kmalloc+0x93/0xb0 [ 309.309864][ T8026] fuse_lookup_name+0x713/0x860 [ 309.309899][ T8026] ? __pfx_fuse_lookup_name+0x10/0x10 [ 309.309919][ T8026] ? fuse_lock_inode+0xd3/0x120 [ 309.309955][ T8026] ? d_alloc_parallel+0x13d0/0x14e0 [ 309.309986][ T8026] fuse_lookup+0x13e/0x5a0 [ 309.310004][ T8026] ? trace_irq_disable+0x37/0x110 [ 309.310030][ T8026] ? __pfx_fuse_lookup+0x10/0x10 [ 309.310063][ T8026] ? __raw_spin_lock_init+0x45/0x100 [ 309.310088][ T8026] ? __init_waitqueue_head+0xa9/0x150 [ 309.310119][ T8026] __lookup_slow+0x294/0x3d0 [ 309.310153][ T8026] ? __pfx___lookup_slow+0x10/0x10 [ 309.310199][ T8026] ? down_read+0x1ad/0x2e0 [ 309.310229][ T8026] lookup_slow+0x53/0x70 [ 309.310261][ T8026] link_path_walk+0x925/0xe50 [ 309.310308][ T8026] __filename_parentat+0x246/0x670 [ 309.310348][ T8026] ? __pfx___filename_parentat+0x10/0x10 [ 309.310419][ T8026] filename_create+0xcf/0x470 [ 309.310448][ T8026] ? __pfx_filename_create+0x10/0x10 [ 309.310481][ T8026] do_mknodat+0x184/0x4d0 [ 309.310517][ T8026] ? __pfx_do_mknodat+0x10/0x10 [ 309.310574][ T8026] ? getname_flags+0x1e5/0x540 [ 309.310606][ T8026] __x64_sys_mknod+0x8c/0xa0 [ 309.310629][ T8026] do_syscall_64+0xf6/0x210 [ 309.310656][ T8026] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 309.310688][ T8026] ? clear_bhb_loop+0x45/0xa0 [ 309.310713][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.310733][ T8026] RIP: 0033:0x7f2e8d38e969 [ 309.310752][ T8026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.310769][ T8026] RSP: 002b:00007f2e8e1a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 309.310791][ T8026] RAX: ffffffffffffffda RBX: 00007f2e8d5b5fa0 RCX: 00007f2e8d38e969 [ 309.310807][ T8026] RDX: 0000000000000707 RSI: 0000000000008000 RDI: 0000200000000180 [ 309.310820][ T8026] RBP: 00007f2e8e1a2090 R08: 0000000000000000 R09: 0000000000000000 [ 309.310833][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.310845][ T8026] R13: 0000000000000000 R14: 00007f2e8d5b5fa0 R15: 00007f2e8d6dfa28 [ 309.310878][ T8026] [ 309.350200][ T5943] usb 3-1: USB disconnect, device number 54 [ 309.641763][ T5918] hid (null): unknown global tag 0x9c [ 309.716199][ T5918] hid (null): unknown global tag 0xc [ 309.737432][ T5918] hid (null): unknown global tag 0xd [ 309.778444][ T5918] hid (null): unknown global tag 0xc [ 309.779200][ T5943] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 309.809033][ T5918] hid (null): unknown global tag 0xe [ 309.828981][ T5918] hid (null): invalid report_size 39531 [ 309.839781][ T5897] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 309.869388][ T5918] hid (null): invalid report_count 16579 [ 309.875535][ T5918] hid (null): unknown global tag 0xe [ 309.906156][ T5918] usb 2-1: string descriptor 0 read error: -71 [ 309.942896][ T5918] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 309.951002][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 309.959828][ T5918] letsketch 0003:6161:4D15.001E: probe with driver letsketch failed with error -32 [ 310.055365][ T5918] usb 2-1: USB disconnect, device number 46 [ 310.114700][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 310.123738][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 310.132484][ T10] usb 4-1: config 0 has no interface number 0 [ 310.143786][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 310.153847][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.164928][ T10] usb 4-1: Product: syz [ 310.169437][ T10] usb 4-1: Manufacturer: syz [ 310.174234][ T10] usb 4-1: SerialNumber: syz [ 310.184307][ T10] usb 4-1: config 0 descriptor?? [ 310.197156][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 310.332098][ T5827] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 310.428906][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 310.451401][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 310.500626][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 310.527489][ T5827] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.542996][ T5827] usb 3-1: config 0 has no interface number 0 [ 310.552956][ T5827] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.567961][ T5827] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.578405][ T5827] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 310.588836][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.602495][ T5827] usb 3-1: config 0 descriptor?? [ 310.748872][ T5943] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 310.898997][ T5897] usb 5-1: device descriptor read/64, error -71 [ 310.907209][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 310.909031][ T24] usb 4-1: USB disconnect, device number 43 [ 310.937798][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 310.967503][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 310.989467][ T24] quatech2 4-1:0.51: device disconnected [ 311.024528][ T5943] usb 2-1: config 0 has no interfaces? [ 311.082518][ T5943] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 311.107569][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.117196][ T5943] usb 2-1: Product: syz [ 311.126086][ T5943] usb 2-1: Manufacturer: syz [ 311.131191][ T5943] usb 2-1: SerialNumber: syz [ 311.138869][ T5897] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 311.147737][ T5943] usb 2-1: config 0 descriptor?? [ 311.224820][ T5827] uclogic 0003:28BD:0071.001F: pen parameters not found [ 311.231939][ T5827] uclogic 0003:28BD:0071.001F: interface is invalid, ignoring [ 311.316624][ T5897] usb 5-1: config 0 has no interfaces? [ 311.385588][ T5897] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 311.394980][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.406239][ T5897] usb 5-1: Product: syz [ 311.414678][ T5897] usb 5-1: Manufacturer: syz [ 311.420450][ T5897] usb 5-1: SerialNumber: syz [ 311.432273][ T5827] usb 3-1: USB disconnect, device number 55 [ 311.462630][ T5897] usb 5-1: config 0 descriptor?? [ 311.678521][ T8046] FAULT_INJECTION: forcing a failure. [ 311.678521][ T8046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.695023][ T8046] CPU: 0 UID: 0 PID: 8046 Comm: syz.4.592 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 311.695052][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.695065][ T8046] Call Trace: [ 311.695074][ T8046] [ 311.695083][ T8046] dump_stack_lvl+0x189/0x250 [ 311.695116][ T8046] ? __lock_acquire+0xaac/0xd20 [ 311.695147][ T8046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.695177][ T8046] ? __pfx__printk+0x10/0x10 [ 311.695198][ T8046] ? __might_fault+0xb0/0x130 [ 311.695236][ T8046] should_fail_ex+0x414/0x560 [ 311.695263][ T8046] _copy_from_user+0x2d/0xb0 [ 311.695292][ T8046] ___sys_sendmsg+0x158/0x2a0 [ 311.695322][ T8046] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.695385][ T8046] ? __fget_files+0x2a/0x420 [ 311.695407][ T8046] ? __fget_files+0x3a0/0x420 [ 311.695436][ T8046] __x64_sys_sendmsg+0x19b/0x260 [ 311.695460][ T8046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.695495][ T8046] ? do_syscall_64+0xba/0x210 [ 311.695519][ T8046] do_syscall_64+0xf6/0x210 [ 311.695540][ T8046] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 311.695556][ T8046] ? clear_bhb_loop+0x45/0xa0 [ 311.695575][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.695591][ T8046] RIP: 0033:0x7fb34d38e969 [ 311.695606][ T8046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.695620][ T8046] RSP: 002b:00007fb34e213038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.695639][ T8046] RAX: ffffffffffffffda RBX: 00007fb34d5b6160 RCX: 00007fb34d38e969 [ 311.695651][ T8046] RDX: 0000000004000400 RSI: 0000200000000180 RDI: 0000000000000007 [ 311.695662][ T8046] RBP: 00007fb34e213090 R08: 0000000000000000 R09: 0000000000000000 [ 311.695672][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.695682][ T8046] R13: 0000000000000000 R14: 00007fb34d5b6160 R15: 00007fb34d6dfa28 [ 311.695705][ T8046] [ 312.158916][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 312.248809][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 312.422249][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 312.439398][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 312.485406][ T24] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 312.503687][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.523930][ T24] usb 4-1: Product: syz [ 312.535851][ T24] usb 4-1: Manufacturer: syz [ 312.545268][ T24] usb 4-1: SerialNumber: syz [ 312.584860][ T24] usb 4-1: config 0 descriptor?? [ 312.614036][ T24] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 312.622661][ T5943] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 312.781558][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 312.856509][ T10] usb 1-1: config 0 has no interfaces? [ 312.874910][ T5943] usb 3-1: unable to get BOS descriptor or descriptor too short [ 312.952173][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 312.961471][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.969880][ T10] usb 1-1: Product: syz [ 312.974178][ T10] usb 1-1: Manufacturer: syz [ 312.990381][ T5943] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 313.012191][ T5943] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.037129][ T10] usb 1-1: SerialNumber: syz [ 313.043279][ T5943] usb 3-1: config 1 interface 0 has no altsetting 0 [ 313.055279][ T24] snd_usb_toneport 4-1:0.0: set_interface failed [ 313.135688][ T10] usb 1-1: config 0 descriptor?? [ 313.139083][ T24] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 313.171522][ T5943] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 313.188352][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.198036][ T24] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 313.209444][ T5943] usb 3-1: Product: syz [ 313.218951][ T5943] usb 3-1: Manufacturer: syz [ 313.225145][ T24] usb 4-1: USB disconnect, device number 44 [ 313.235904][ T5943] usb 3-1: SerialNumber: syz [ 314.218856][ T5827] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 314.242456][ T5884] usb 2-1: USB disconnect, device number 47 [ 314.348907][ T5827] usb 4-1: device descriptor read/64, error -71 [ 314.413329][ T5918] usb 5-1: USB disconnect, device number 53 [ 314.588889][ T5827] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 314.729690][ T5827] usb 4-1: device descriptor read/64, error -71 [ 314.811602][ T10] usb 1-1: can't set config #0, error -71 [ 314.822489][ T10] usb 1-1: USB disconnect, device number 36 [ 314.849262][ T5827] usb usb4-port1: attempt power cycle [ 315.188796][ T5883] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 315.198875][ T5827] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 315.220108][ T5827] usb 4-1: device descriptor read/8, error -71 [ 315.353641][ T5887] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 315.438998][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 315.446344][ T5883] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.458992][ T5827] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 315.476433][ T5883] usb 5-1: config 0 has no interface number 0 [ 315.493438][ T5883] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 315.507570][ T5827] usb 4-1: device descriptor read/8, error -71 [ 315.535064][ T5883] usb 5-1: config 0 interface 1 has no altsetting 0 [ 315.554629][ T5883] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 315.575932][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.598950][ T5883] usb 5-1: Product: syz [ 315.607912][ T5883] usb 5-1: Manufacturer: syz [ 315.621529][ T5883] usb 5-1: SerialNumber: syz [ 315.629502][ T5827] usb usb4-port1: unable to enumerate USB device [ 315.638814][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 315.652108][ T5883] usb 5-1: config 0 descriptor?? [ 315.672396][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 315.738938][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 315.854344][ T5887] usb 2-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb [ 315.893621][ T5883] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 315.908462][ T5883] cx231xx 5-1:0.1: Failed to read PCB config [ 315.927431][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.927470][ T5883] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 315.965394][ T5887] usb 2-1: Product: syz [ 315.976161][ T5883] usb 5-1: USB disconnect, device number 54 [ 315.991334][ T5887] usb 2-1: Manufacturer: syz [ 315.996012][ T5887] usb 2-1: SerialNumber: syz [ 316.039351][ T5887] usb 2-1: config 0 descriptor?? [ 316.063164][ T5887] safe_serial 2-1:0.0: safe_serial converter detected [ 316.081843][ T5887] safe_serial 2-1:0.0: probe with driver safe_serial failed with error -22 [ 316.493289][ T5883] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 316.672384][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 316.685664][ T5883] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.698599][ T5883] usb 5-1: config 0 has no interface number 0 [ 316.705599][ T5883] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 316.716956][ T5883] usb 5-1: config 0 interface 1 has no altsetting 0 [ 316.730242][ T5883] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 316.740352][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.748475][ T5883] usb 5-1: Product: syz [ 316.754447][ T5883] usb 5-1: Manufacturer: syz [ 316.759577][ T5883] usb 5-1: SerialNumber: syz [ 316.777809][ T5883] usb 5-1: config 0 descriptor?? [ 317.203298][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.213219][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.292102][ T8103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.308435][ T8103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.322873][ T8105] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.607' sets config #0 [ 317.371172][ T8105] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.607' sets config #1 [ 317.628983][ T5897] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 317.818814][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 317.848540][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 317.863876][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 318.150632][ T5897] usb 4-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb [ 318.160174][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.169185][ T5897] usb 4-1: Product: syz [ 318.178017][ T5897] usb 4-1: Manufacturer: syz [ 318.183117][ T5897] usb 4-1: SerialNumber: syz [ 318.193310][ T5897] usb 4-1: config 0 descriptor?? [ 318.204485][ T5897] safe_serial 4-1:0.0: safe_serial converter detected [ 318.212213][ T5897] safe_serial 4-1:0.0: probe with driver safe_serial failed with error -22 [ 319.615805][ T5943] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 319.812401][ T8109] netlink: 'syz.0.608': attribute type 10 has an invalid length. [ 319.828552][ T8109] team0: Device hsr_slave_0 failed to register rx_handler [ 319.859899][ T5883] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 319.879423][ T5883] cx231xx 5-1:0.1: Failed to read PCB config [ 319.885614][ T5883] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 319.894784][ T8109] binder: 8108:8109 ioctl c0306201 2000000003c0 returned -14 [ 319.901769][ T5883] usb 5-1: USB disconnect, device number 55 [ 320.089268][ T5943] usb 3-1: USB disconnect, device number 56 [ 320.169721][ T5897] usb 2-1: USB disconnect, device number 48 [ 320.694425][ T5897] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 321.492252][ T5897] usb 2-1: config 0 has no interfaces? [ 321.531629][ T5897] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 321.558083][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.578259][ T5897] usb 2-1: Product: syz [ 321.586495][ T5897] usb 2-1: Manufacturer: syz [ 321.601787][ T5897] usb 2-1: SerialNumber: syz [ 321.621044][ T5897] usb 2-1: config 0 descriptor?? [ 321.989043][ T5943] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 322.207992][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 322.219367][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.229765][ T5943] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 322.239003][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.251108][ T5943] usb 3-1: config 0 descriptor?? [ 322.287167][ T5897] usb 4-1: USB disconnect, device number 49 [ 322.661993][ T5943] hid (null): unknown global tag 0x9c [ 322.667636][ T5943] hid (null): unknown global tag 0xc [ 322.683170][ T5943] hid (null): unknown global tag 0xd [ 322.700852][ T5943] hid (null): unknown global tag 0xc [ 322.712606][ T5943] hid (null): unknown global tag 0xe [ 322.725514][ T5943] hid (null): invalid report_size 39531 [ 322.735167][ T5943] hid (null): invalid report_count 16579 [ 322.746413][ T5943] hid (null): unknown global tag 0xe [ 322.806730][ T5943] hid (null): unknown global tag 0xe [ 322.880564][ T5943] usb 3-1: string descriptor 0 read error: -71 [ 322.905694][ T8156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.620'. [ 322.935198][ T5943] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 322.946837][ T5943] letsketch 0003:6161:4D15.0020: probe with driver letsketch failed with error -32 [ 322.973625][ T8151] usb usb8: usbfs: process 8151 (syz.3.620) did not claim interface 0 before use [ 322.983041][ T5887] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 323.070617][ T5943] usb 3-1: USB disconnect, device number 57 [ 323.197479][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 323.266699][ T5887] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 323.391432][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.432193][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.540430][ T5887] usb 5-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 323.584007][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.614834][ T5887] usb 5-1: Product: syz [ 323.634075][ T5887] usb 5-1: Manufacturer: syz [ 323.644216][ T5887] usb 5-1: SerialNumber: syz [ 323.665115][ T5887] usb 5-1: config 0 descriptor?? [ 323.702563][ T5887] rndis_host 5-1:0.0: skipping garbage [ 323.709244][ T5943] usb 2-1: USB disconnect, device number 49 [ 323.747999][ T5887] usb 5-1: bad CDC descriptors [ 323.755575][ T5887] cdc_acm 5-1:0.0: skipping garbage [ 323.762965][ T5887] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 323.774407][ T5887] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 323.781194][ T5887] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 323.934031][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.955495][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.077947][ T8153] netlink: 27 bytes leftover after parsing attributes in process `syz.4.622'. [ 324.269022][ T5943] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 324.302189][ T5887] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 324.309412][ T5883] usb 5-1: USB disconnect, device number 56 [ 324.430779][ T5943] usb 2-1: config 0 has no interfaces? [ 324.439683][ T5943] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 324.450213][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.458313][ T5943] usb 2-1: Product: syz [ 324.463277][ T5943] usb 2-1: Manufacturer: syz [ 324.468010][ T5943] usb 2-1: SerialNumber: syz [ 324.472883][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 324.486051][ T5943] usb 2-1: config 0 descriptor?? [ 324.493486][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.504142][ T5887] usb 4-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 324.513539][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.524107][ T5887] usb 4-1: config 0 descriptor?? [ 324.540451][ T5887] usb 4-1: Found UVC 0.00 device (05a9:2630) [ 324.550707][ T5887] usb 4-1: No valid video chain found. [ 324.756877][ T5883] usb 4-1: USB disconnect, device number 50 [ 324.868967][ T5943] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 325.146381][ T5943] usb 1-1: config 0 has no interfaces? [ 325.182479][ T5943] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 325.192860][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.202903][ T5943] usb 1-1: Product: syz [ 325.207159][ T5943] usb 1-1: Manufacturer: syz [ 325.216405][ T5943] usb 1-1: SerialNumber: syz [ 325.231942][ T5943] usb 1-1: config 0 descriptor?? [ 326.358964][ T5887] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 326.458969][ T5885] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 326.519141][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 326.536142][ T5887] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 326.547807][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.562656][ T5887] usb 3-1: Product: syz [ 326.568050][ T5887] usb 3-1: Manufacturer: syz [ 326.574902][ T5887] usb 3-1: SerialNumber: syz [ 326.588611][ T5887] usb 3-1: config 0 descriptor?? [ 326.619569][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 326.627816][ T5885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.638463][ T5885] usb 4-1: config 0 has no interface number 0 [ 326.648538][ T5885] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 326.688896][ T5885] usb 4-1: config 0 interface 1 has no altsetting 0 [ 326.696866][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 326.718125][ T5885] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 326.727482][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.735736][ T5885] usb 4-1: Product: syz [ 326.740047][ T5885] usb 4-1: Manufacturer: syz [ 326.744698][ T5885] usb 4-1: SerialNumber: syz [ 326.783660][ T5885] usb 4-1: config 0 descriptor?? [ 326.838189][ T5887] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 326.859904][ T5887] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 326.880805][ T5887] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 326.889700][ T5887] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 326.907879][ T5887] usb 3-1: USB disconnect, device number 58 [ 326.994996][ T24] usb 5-1: config 0 has no interfaces? [ 327.005715][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 327.016639][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.030744][ T24] usb 5-1: Product: syz [ 327.035004][ T24] usb 5-1: Manufacturer: syz [ 327.039912][ T24] usb 5-1: SerialNumber: syz [ 327.088891][ T24] usb 5-1: config 0 descriptor?? [ 327.232102][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.243739][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.319541][ T5885] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 327.331480][ T5885] cx231xx 4-1:0.1: Failed to read PCB config [ 327.349701][ T5885] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 327.373377][ T5885] usb 4-1: USB disconnect, device number 51 [ 327.475239][ T8214] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 327.490083][ T8214] batman_adv: batadv0: Adding interface: ip6gretap1 [ 327.497157][ T8214] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.528729][ T8214] batman_adv: batadv0: Interface activated: ip6gretap1 [ 327.666390][ T5883] usb 1-1: USB disconnect, device number 37 [ 328.025163][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 328.057361][ T5827] usb 2-1: USB disconnect, device number 50 [ 328.278875][ T5887] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 328.439899][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 328.480250][ T5827] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 328.650019][ T5887] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 328.651747][ T5827] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 328.675996][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.686064][ T5887] usb 4-1: Product: syz [ 328.696092][ T5887] usb 4-1: Manufacturer: syz [ 328.707300][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.735967][ T5887] usb 4-1: SerialNumber: syz [ 328.750110][ T5887] usb 4-1: config 0 descriptor?? [ 328.757081][ T5827] usb 2-1: config 0 descriptor?? [ 328.977908][ T5887] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.355449][ T10] usb 5-1: USB disconnect, device number 57 [ 329.478929][ T5885] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 329.585574][ T5887] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 329.607840][ T5887] usb 4-1: USB disconnect, device number 52 [ 329.653152][ T5885] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 329.664977][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.676656][ T5885] usb 1-1: config 0 descriptor?? [ 329.748855][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 329.899006][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 329.913854][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 329.923712][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.936198][ T10] usb 5-1: config 0 descriptor?? [ 329.946945][ T10] pwc: Logitech QuickCam Zoom USB webcam detected. [ 329.956273][ T10] pwc: Warning: more than 1 configuration available. [ 330.203401][ T5827] pegasus 2-1:0.0: can't reset MAC [ 330.209305][ T5827] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 330.364115][ T10] pwc: send_video_command error -71 [ 330.386856][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 330.404869][ T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 330.441167][ T10] usb 5-1: USB disconnect, device number 58 [ 330.474035][ T5883] usb 2-1: USB disconnect, device number 51 [ 331.182453][ T5885] pegasus 1-1:0.0: can't reset MAC [ 331.187939][ T5885] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 331.434250][ T5918] usb 1-1: USB disconnect, device number 38 [ 331.448867][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 331.692515][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 331.710123][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.727366][ T10] usb 5-1: config 0 has no interface number 0 [ 331.748822][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.815261][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.854566][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 331.881482][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.900200][ T10] usb 5-1: config 0 descriptor?? [ 332.328788][ T5918] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 332.496836][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 332.552055][ T10] uclogic 0003:28BD:0071.0021: pen parameters not found [ 332.571619][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 332.583914][ T10] uclogic 0003:28BD:0071.0021: interface is invalid, ignoring [ 332.595417][ T5918] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 332.623576][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.658600][ T5918] usb 4-1: Product: syz [ 332.665615][ T5918] usb 4-1: Manufacturer: syz [ 332.675140][ T5918] usb 4-1: SerialNumber: syz [ 332.695363][ T5918] usb 4-1: config 0 descriptor?? [ 332.710742][ T5827] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 332.728298][ T5918] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 332.785179][ T5883] usb 5-1: USB disconnect, device number 59 [ 332.894917][ T5827] usb 1-1: config 0 has no interfaces? [ 332.913697][ T5827] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 332.959472][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.979964][ T5827] usb 1-1: Product: syz [ 332.984183][ T5827] usb 1-1: Manufacturer: syz [ 333.008836][ T5827] usb 1-1: SerialNumber: syz [ 333.035942][ T5827] usb 1-1: config 0 descriptor?? [ 333.089885][ T8267] fuse: Bad value for 'fd' [ 333.147375][ T5918] snd_usb_toneport 4-1:0.0: set_interface failed [ 333.160934][ T8269] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 333.190865][ T5918] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 333.224223][ T5918] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 333.276968][ T5918] usb 4-1: USB disconnect, device number 53 [ 333.284977][ T8269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.317248][ T8271] bond1: (slave gretap1): making interface the new active one [ 333.327377][ T8271] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 333.338221][ T8272] tipc: Started in network mode [ 333.346366][ T8272] tipc: Node identity 68a, cluster identity 3 [ 333.357381][ T8272] tipc: Node number set to 1674 [ 333.365453][ T8272] tipc: Cannot configure node identity twice [ 333.450878][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 333.459888][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.467345][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.483086][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.491208][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.683524][ T8284] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.658' sets config #0 [ 333.878334][ T8284] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.658' sets config #1 [ 333.987701][ T8283] netlink: 'syz.1.659': attribute type 32 has an invalid length. [ 333.995987][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 334.005579][ T8283] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 334.388880][ T5827] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 334.538773][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 334.558519][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 334.631599][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 334.730069][ T36] bond0 (unregistering): Released all slaves [ 334.768575][ T5827] usb 5-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb [ 334.791040][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.819063][ T5827] usb 5-1: Product: syz [ 334.823416][ T5827] usb 5-1: Manufacturer: syz [ 334.828104][ T5827] usb 5-1: SerialNumber: syz [ 334.915561][ T5827] usb 5-1: config 0 descriptor?? [ 334.934129][ T5827] safe_serial 5-1:0.0: safe_serial converter detected [ 334.950052][ T5827] safe_serial 5-1:0.0: probe with driver safe_serial failed with error -22 [ 335.602388][ T5827] usb 1-1: USB disconnect, device number 39 [ 335.678804][ T5887] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 335.909001][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 335.942379][ T5887] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.955639][ T5887] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.966187][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 335.975693][ T5887] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 335.987497][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.070489][ T5887] usb 4-1: config 0 descriptor?? [ 336.567859][ T5887] smartjoyplus 0003:0B43:0003.0022: ignoring exceeding usage max [ 336.584325][ T5887] smartjoyplus 0003:0B43:0003.0022: unbalanced collection at end of report description [ 336.614382][ T5887] smartjoyplus 0003:0B43:0003.0022: parse failed [ 336.635855][ T5887] smartjoyplus 0003:0B43:0003.0022: probe with driver smartjoyplus failed with error -22 [ 336.787131][ T10] usb 4-1: USB disconnect, device number 54 [ 336.900363][ T8310] netlink: 88 bytes leftover after parsing attributes in process `syz.2.666'. [ 337.208887][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 337.369086][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 337.388150][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 337.396632][ T10] usb 3-1: config 0 has no interface number 0 [ 337.403060][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.421061][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.433821][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 337.455827][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.475080][ T10] usb 3-1: config 0 descriptor?? [ 337.543002][ T5887] usb 5-1: USB disconnect, device number 60 [ 338.135179][ T10] uclogic 0003:28BD:0071.0023: pen parameters not found [ 338.144675][ T10] uclogic 0003:28BD:0071.0023: interface is invalid, ignoring [ 338.338038][ T10] usb 3-1: USB disconnect, device number 59 [ 338.888859][ T5887] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 338.949312][ T8333] syz_tun: entered allmulticast mode [ 338.975764][ T8333] dvmrp1: entered allmulticast mode [ 338.985142][ T8332] syz_tun: left allmulticast mode [ 339.068793][ T5883] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 339.086746][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 339.097562][ T8335] netlink: 'syz.2.673': attribute type 1 has an invalid length. [ 339.124833][ T8335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.135305][ T5887] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 339.169118][ T8337] bond1: (slave gretap0): making interface the new active one [ 339.179922][ T8337] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 339.207105][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.220974][ T5883] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 339.230513][ T5883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.256432][ T5883] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 339.268118][ T5883] usb 4-1: config 1 has no interface number 1 [ 339.275692][ T5883] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 339.291670][ T5883] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.310465][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.312936][ T5887] usb 5-1: config 0 descriptor?? [ 339.336757][ T5883] usb 4-1: Product: syz [ 339.339811][ T5887] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 339.341462][ T5883] usb 4-1: Manufacturer: syz [ 339.358119][ T5887] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 339.365365][ T5883] usb 4-1: SerialNumber: syz [ 339.467192][ T8342] netlink: 32 bytes leftover after parsing attributes in process `syz.2.675'. [ 339.604723][ T5883] usb 4-1: Failed to set altset [ 339.628548][ T5883] usb 4-1: 0:2: cannot create sequencer device [ 339.630845][ T5897] usb 5-1: USB disconnect, device number 61 [ 339.651462][ T5887] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 339.678868][ T5883] usb 4-1: Failed to set altset [ 339.709834][ T5883] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 339.722348][ T5883] usb 4-1: USB disconnect, device number 55 [ 339.763804][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.788834][ T5885] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 339.842485][ T5887] usb 2-1: config 0 has no interfaces? [ 339.853691][ T5887] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 339.863525][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.872464][ T5887] usb 2-1: Product: syz [ 339.876956][ T5887] usb 2-1: Manufacturer: syz [ 339.882083][ T5887] usb 2-1: SerialNumber: syz [ 339.896620][ T5887] usb 2-1: config 0 descriptor?? [ 339.949235][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 339.956246][ T5885] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 339.968913][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.980521][ T5885] usb 1-1: config 0 descriptor?? [ 340.029051][ T5918] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 340.178750][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 340.186120][ T5918] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 340.195364][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.207127][ T5918] usb 3-1: config 0 descriptor?? [ 340.273467][ T5885] ortek 0003:1223:3F07.0024: collection stack underflow [ 340.297242][ T5885] ortek 0003:1223:3F07.0024: item 0 1 0 12 parsing failed [ 340.308423][ T5885] ortek 0003:1223:3F07.0024: probe with driver ortek failed with error -22 [ 340.414572][ T5885] usb 1-1: USB disconnect, device number 40 [ 340.427293][ T5918] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 340.435913][ T8361] : renamed from bond0 (while UP) [ 340.446279][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.462020][ T5918] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 340.470588][ T5918] usb 3-1: media controller created [ 340.541262][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.635011][ T5918] az6027: usb out operation failed. (-71) [ 340.670094][ T5918] az6027: usb out operation failed. (-71) [ 340.676082][ T5918] stb0899_attach: Driver disabled by Kconfig [ 340.682188][ T5918] az6027: no front-end attached [ 340.682188][ T5918] [ 340.695040][ T5918] az6027: usb out operation failed. (-71) [ 340.703024][ T5918] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 340.714070][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 340.727963][ T5918] dvb-usb: schedule remote query interval to 400 msecs. [ 340.735178][ T5918] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 340.748424][ T5918] usb 3-1: USB disconnect, device number 60 [ 340.961187][ T5918] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 341.186937][ T8360] delete_channel: no stack [ 341.263042][ T8373] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.684' sets config #0 [ 341.297783][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 341.308552][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 341.317919][ T5883] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 341.333641][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 341.343520][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 341.372724][ T8373] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.684' sets config #1 [ 341.473792][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.685'. [ 341.500361][ T5883] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 341.508478][ T5883] usb 5-1: config 0 has no interface number 0 [ 341.514928][ T5883] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.535568][ T5883] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 341.545599][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.556179][ T5883] usb 5-1: Product: syz [ 341.560726][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 341.623375][ T5883] usb 5-1: Manufacturer: syz [ 341.638454][ T5883] usb 5-1: SerialNumber: syz [ 341.654738][ T5883] usb 5-1: config 0 descriptor?? [ 341.690472][ T5883] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 341.709572][ T5885] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 341.768911][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 341.781299][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 341.794671][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 341.804414][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 341.812859][ T10] usb 3-1: Product: syz [ 341.817189][ T10] usb 3-1: Manufacturer: syz [ 341.822364][ T10] usb 3-1: SerialNumber: syz [ 341.834064][ T10] usb 3-1: config 0 descriptor?? [ 341.846840][ T8376] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 341.900934][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 341.917507][ T8386] FAULT_INJECTION: forcing a failure. [ 341.917507][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 341.956496][ T8386] CPU: 1 UID: 0 PID: 8386 Comm: syz.3.689 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 341.956527][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.956544][ T8386] Call Trace: [ 341.956554][ T8386] [ 341.956564][ T8386] dump_stack_lvl+0x189/0x250 [ 341.956603][ T8386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.956632][ T8386] ? __pfx__printk+0x10/0x10 [ 341.956662][ T8386] ? ref_tracker_alloc+0x318/0x460 [ 341.956687][ T8386] should_fail_ex+0x414/0x560 [ 341.956711][ T8386] should_failslab+0xa8/0x100 [ 341.956738][ T8386] kmem_cache_alloc_noprof+0x73/0x3c0 [ 341.956761][ T8386] ? skb_clone+0x212/0x3a0 [ 341.956795][ T8386] skb_clone+0x212/0x3a0 [ 341.956825][ T8386] __netlink_deliver_tap+0x404/0x850 [ 341.956861][ T8386] ? netlink_deliver_tap+0x2e/0x1b0 [ 341.956884][ T8386] netlink_deliver_tap+0x19c/0x1b0 [ 341.956907][ T8386] netlink_unicast+0x72f/0x8d0 [ 341.956948][ T8386] netlink_sendmsg+0x805/0xb30 [ 341.956990][ T8386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.957016][ T8386] ? aa_sock_msg_perm+0x94/0x160 [ 341.957039][ T8386] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.957061][ T8386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.957086][ T8386] __sock_sendmsg+0x219/0x270 [ 341.957109][ T8386] ____sys_sendmsg+0x505/0x830 [ 341.957140][ T8386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.957177][ T8386] ? import_iovec+0x74/0xa0 [ 341.957206][ T8386] ___sys_sendmsg+0x21f/0x2a0 [ 341.957236][ T8386] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.957300][ T8386] ? __fget_files+0x2a/0x420 [ 341.957326][ T8386] ? __fget_files+0x3a0/0x420 [ 341.957363][ T8386] __x64_sys_sendmsg+0x19b/0x260 [ 341.957395][ T8386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.957439][ T8386] ? do_syscall_64+0xba/0x210 [ 341.957468][ T8386] do_syscall_64+0xf6/0x210 [ 341.957493][ T8386] ? clear_bhb_loop+0x45/0xa0 [ 341.957517][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.957539][ T8386] RIP: 0033:0x7f2e8d38e969 [ 341.957558][ T8386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.957575][ T8386] RSP: 002b:00007f2e8e1a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.957596][ T8386] RAX: ffffffffffffffda RBX: 00007f2e8d5b5fa0 RCX: 00007f2e8d38e969 [ 341.957611][ T8386] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 341.957623][ T8386] RBP: 00007f2e8e1a2090 R08: 0000000000000000 R09: 0000000000000000 [ 341.957634][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.957645][ T8386] R13: 0000000000000000 R14: 00007f2e8d5b5fa0 R15: 00007f2e8d6dfa28 [ 341.957676][ T8386] [ 342.233674][ C0] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 342.238889][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 342.244798][ T8376] FAULT_INJECTION: forcing a failure. [ 342.244798][ T8376] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.266495][ T8376] CPU: 0 UID: 0 PID: 8376 Comm: syz.2.686 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 342.266526][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.266539][ T8376] Call Trace: [ 342.266547][ T8376] [ 342.266556][ T8376] dump_stack_lvl+0x189/0x250 [ 342.266594][ T8376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.266624][ T8376] ? __pfx__printk+0x10/0x10 [ 342.266651][ T8376] ? fs_reclaim_acquire+0x7d/0x100 [ 342.266690][ T8376] should_fail_ex+0x414/0x560 [ 342.266717][ T8376] prepare_alloc_pages+0x213/0x610 [ 342.266756][ T8376] __alloc_frozen_pages_noprof+0x123/0x370 [ 342.266793][ T8376] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.266828][ T8376] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 342.266851][ T8376] ? arch_stack_walk+0xfc/0x150 [ 342.266878][ T8376] ? policy_nodemask+0x27c/0x720 [ 342.266910][ T8376] alloc_pages_mpol+0x232/0x4a0 [ 342.266943][ T8376] alloc_pages_noprof+0xa9/0x190 [ 342.266971][ T8376] get_free_pages_noprof+0xc/0x30 [ 342.267001][ T8376] kasan_populate_vmalloc_pte+0x3a/0x100 [ 342.267025][ T8376] __apply_to_page_range+0x7cb/0xd20 [ 342.267056][ T8376] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 342.267083][ T8376] ? __pfx___apply_to_page_range+0x10/0x10 [ 342.267107][ T8376] ? do_raw_spin_unlock+0x122/0x240 [ 342.267135][ T8376] alloc_vmap_area+0x1e09/0x24d0 [ 342.267192][ T8376] ? __pfx_alloc_vmap_area+0x10/0x10 [ 342.267218][ T8376] ? __kasan_kmalloc+0x93/0xb0 [ 342.267243][ T8376] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 342.267270][ T8376] ? __get_vm_area_node+0x13f/0x300 [ 342.267295][ T8376] ? copy_process+0x544/0x3b80 [ 342.267317][ T8376] __get_vm_area_node+0x1f8/0x300 [ 342.267351][ T8376] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 342.267381][ T8376] ? copy_process+0x544/0x3b80 [ 342.267403][ T8376] ? mod_objcg_state+0x15a/0xa10 [ 342.267427][ T8376] ? __pfx_mod_objcg_state+0x10/0x10 [ 342.267454][ T8376] ? percpu_ref_get_many+0x19/0x140 [ 342.267481][ T8376] ? percpu_ref_get_many+0x19/0x140 [ 342.267519][ T8376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.267553][ T8376] ? rcu_is_watching+0x15/0xb0 [ 342.267586][ T8376] ? copy_process+0x544/0x3b80 [ 342.267605][ T8376] __vmalloc_node_noprof+0x7d/0x90 [ 342.267633][ T8376] ? copy_process+0x544/0x3b80 [ 342.267655][ T8376] dup_task_struct+0x3e7/0x860 [ 342.267682][ T8376] copy_process+0x544/0x3b80 [ 342.267711][ T8376] ? __lock_acquire+0xaac/0xd20 [ 342.267756][ T8376] ? __pfx_copy_process+0x10/0x10 [ 342.267790][ T8376] kernel_clone+0x21e/0x870 [ 342.267811][ T8376] ? vfs_write+0x8d8/0xa90 [ 342.267837][ T8376] ? __pfx_kernel_clone+0x10/0x10 [ 342.267870][ T8376] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 342.267904][ T8376] __x64_sys_clone+0x18b/0x1e0 [ 342.267930][ T8376] ? __pfx___x64_sys_clone+0x10/0x10 [ 342.267966][ T8376] ? rcu_is_watching+0x15/0xb0 [ 342.268005][ T8376] ? do_syscall_64+0xba/0x210 [ 342.268035][ T8376] do_syscall_64+0xf6/0x210 [ 342.268061][ T8376] ? clear_bhb_loop+0x45/0xa0 [ 342.268086][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.268105][ T8376] RIP: 0033:0x7fd66138e969 [ 342.268123][ T8376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.268141][ T8376] RSP: 002b:00007fd662222fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 342.268162][ T8376] RAX: ffffffffffffffda RBX: 00007fd6615b5fa0 RCX: 00007fd66138e969 [ 342.268184][ T8376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.268195][ T8376] RBP: 00007fd662223090 R08: 0000000000000000 R09: 0000000000000000 [ 342.268207][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.268219][ T8376] R13: 0000000000000000 R14: 00007fd6615b5fa0 R15: 00007fd6616dfa28 [ 342.268250][ T8376] [ 342.268580][ T8376] syz.2.686: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 342.605523][ T5897] usb 5-1: USB disconnect, device number 62 [ 342.693882][ T24] usb 2-1: USB disconnect, device number 52 [ 342.775372][ T5897] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 342.815871][ T8376] ,cpuset=/,mems_allowed=0-1 [ 342.822893][ T8376] CPU: 0 UID: 0 PID: 8376 Comm: syz.2.686 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 342.822920][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.822933][ T8376] Call Trace: [ 342.822942][ T8376] [ 342.822950][ T8376] dump_stack_lvl+0x189/0x250 [ 342.822988][ T8376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.823018][ T8376] ? __pfx__printk+0x10/0x10 [ 342.823039][ T8376] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 342.823072][ T8376] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 342.823107][ T8376] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 342.823142][ T8376] warn_alloc+0x214/0x310 [ 342.823179][ T8376] ? kasan_quarantine_put+0xdd/0x220 [ 342.823201][ T8376] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.823228][ T8376] ? __pfx_warn_alloc+0x10/0x10 [ 342.823258][ T8376] ? kfree+0x193/0x440 [ 342.823278][ T8376] ? __get_vm_area_node+0x13f/0x300 [ 342.823308][ T8376] ? copy_process+0x544/0x3b80 [ 342.823328][ T8376] ? __get_vm_area_node+0x211/0x300 [ 342.823362][ T8376] __vmalloc_node_range_noprof+0x316/0x12c0 [ 342.823397][ T8376] ? mod_objcg_state+0x15a/0xa10 [ 342.823421][ T8376] ? __pfx_mod_objcg_state+0x10/0x10 [ 342.823449][ T8376] ? percpu_ref_get_many+0x19/0x140 [ 342.823476][ T8376] ? percpu_ref_get_many+0x19/0x140 [ 342.823514][ T8376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.823548][ T8376] ? rcu_is_watching+0x15/0xb0 [ 342.823581][ T8376] ? copy_process+0x544/0x3b80 [ 342.823601][ T8376] __vmalloc_node_noprof+0x7d/0x90 [ 342.823629][ T8376] ? copy_process+0x544/0x3b80 [ 342.823651][ T8376] dup_task_struct+0x3e7/0x860 [ 342.823677][ T8376] copy_process+0x544/0x3b80 [ 342.823706][ T8376] ? __lock_acquire+0xaac/0xd20 [ 342.823775][ T8376] ? __pfx_copy_process+0x10/0x10 [ 342.823809][ T8376] kernel_clone+0x21e/0x870 [ 342.823831][ T8376] ? vfs_write+0x8d8/0xa90 [ 342.823857][ T8376] ? __pfx_kernel_clone+0x10/0x10 [ 342.823890][ T8376] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 342.823924][ T8376] __x64_sys_clone+0x18b/0x1e0 [ 342.823950][ T8376] ? __pfx___x64_sys_clone+0x10/0x10 [ 342.823985][ T8376] ? rcu_is_watching+0x15/0xb0 [ 342.824025][ T8376] ? do_syscall_64+0xba/0x210 [ 342.824054][ T8376] do_syscall_64+0xf6/0x210 [ 342.824080][ T8376] ? clear_bhb_loop+0x45/0xa0 [ 342.824105][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.824124][ T8376] RIP: 0033:0x7fd66138e969 [ 342.824143][ T8376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.824167][ T8376] RSP: 002b:00007fd662222fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 342.824189][ T8376] RAX: ffffffffffffffda RBX: 00007fd6615b5fa0 RCX: 00007fd66138e969 [ 342.824204][ T8376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.824216][ T8376] RBP: 00007fd662223090 R08: 0000000000000000 R09: 0000000000000000 [ 342.824229][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.824240][ T8376] R13: 0000000000000000 R14: 00007fd6615b5fa0 R15: 00007fd6616dfa28 [ 342.824271][ T8376] [ 342.824364][ T8376] Mem-Info: [ 343.147519][ T8376] active_anon:7117 inactive_anon:0 isolated_anon:0 [ 343.147519][ T8376] active_file:8842 inactive_file:39993 isolated_file:0 [ 343.147519][ T8376] unevictable:768 dirty:213 writeback:0 [ 343.147519][ T8376] slab_reclaimable:10387 slab_unreclaimable:109956 [ 343.147519][ T8376] mapped:32538 shmem:1836 pagetables:1128 [ 343.147519][ T8376] sec_pagetables:0 bounce:0 [ 343.147519][ T8376] kernel_misc_reclaimable:0 [ 343.147519][ T8376] free:1318619 free_pcp:1466 free_cma:0 [ 343.194674][ T8376] Node 0 active_anon:28468kB inactive_anon:0kB active_file:35368kB inactive_file:159772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130152kB dirty:852kB writeback:0kB shmem:5808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11616kB pagetables:4512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.247640][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 343.262044][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 343.296533][ T8376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.358281][ T5885] usb 1-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb [ 343.369091][ T8376] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.407017][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.418848][ T5885] usb 1-1: Product: syz [ 343.431084][ T8376] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 343.448974][ T5885] usb 1-1: Manufacturer: syz [ 343.458460][ T5885] usb 1-1: SerialNumber: syz [ 343.474364][ T8376] Node 0 DMA32 free:1345428kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:28816kB inactive_anon:0kB active_file:35368kB inactive_file:159672kB unevictable:1536kB writepending:900kB present:3129332kB managed:2564140kB mlocked:0kB bounce:0kB free_pcp:13080kB local_pcp:7972kB free_cma:0kB [ 343.509359][ T5885] usb 1-1: config 0 descriptor?? [ 343.526984][ T5885] safe_serial 1-1:0.0: safe_serial converter detected [ 343.542910][ T5885] safe_serial 1-1:0.0: probe with driver safe_serial failed with error -22 [ 343.668993][ T5883] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 343.679613][ T8376] lowmem_reserve[]: 0 0 0 0 0 [ 343.684370][ T8376] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.711241][ T8376] lowmem_reserve[]: 0 0 0 0 0 [ 343.715969][ T8376] Node 1 Normal free:3909772kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.745372][ T8376] lowmem_reserve[]: 0 0 0 0 0 [ 343.750193][ T8376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 343.763012][ T8376] Node 0 DMA32: 722*4kB (UE) 284*8kB (UME) 214*16kB (UME) 239*32kB (UME) 251*64kB (UME) 60*128kB (UME) 19*256kB (UME) 22*512kB (UM) 19*1024kB (UME) 2*2048kB (U) 311*4096kB (UM) = 1353512kB [ 343.788802][ T8376] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 343.800993][ T8376] Node 1 Normal: 203*4kB (UME) 44*8kB (UME) 46*16kB (UME) 205*32kB (UME) 94*64kB (UME) 34*128kB (UME) 13*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3909772kB [ 343.855619][ T8376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.968726][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 343.981767][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 344.005352][ T5883] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 344.030717][ T5883] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 344.065374][ T5883] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.078202][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 344.099251][ T5883] usb 4-1: SerialNumber: syz [ 344.122852][ T8393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.130144][ T8376] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 344.180134][ T8376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.211661][ T8376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.242156][ T8376] 50669 total pagecache pages [ 344.247208][ T8376] 0 pages in swap cache [ 344.251798][ T8376] Free swap = 124996kB [ 344.256230][ T8376] Total swap = 124996kB [ 344.263169][ T8376] 2097051 pages RAM [ 344.267145][ T8376] 0 pages HighMem/MovableOnly [ 344.274201][ T8376] 424358 pages reserved [ 344.278511][ T8376] 0 pages cma reserved [ 344.300584][ T5885] usb 3-1: USB disconnect, device number 61 [ 344.336239][ T5883] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 344.352311][ T5883] usb 4-1: USB disconnect, device number 56 [ 344.729454][ T5887] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 344.898844][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 345.069853][ T8415] vivid-007: ================= START STATUS ================= [ 345.077774][ T8415] vivid-007: Generate PTS: true [ 345.083193][ T8415] vivid-007: Generate SCR: true [ 345.089098][ T8415] tpg source WxH: 640x360 (Y'CbCr) [ 345.094697][ T8415] tpg field: 1 [ 345.098112][ T8415] tpg crop: (0,0)/640x360 [ 345.102781][ T8415] tpg compose: (0,0)/640x360 [ 345.108153][ T8415] tpg colorspace: 8 [ 345.114527][ T8415] tpg transfer function: 0/0 [ 345.119705][ T8415] tpg Y'CbCr encoding: 0/0 [ 345.124206][ T8415] tpg quantization: 0/0 [ 345.128476][ T8415] tpg RGB range: 0/2 [ 345.133345][ T8415] vivid-007: ================== END STATUS ================== [ 345.142400][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.165641][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.290262][ T8420] netlink: 27 bytes leftover after parsing attributes in process `syz.3.699'. [ 345.468847][ T5897] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 345.597059][ T5883] usb 1-1: USB disconnect, device number 41 [ 345.698988][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 345.726220][ T5897] usb 3-1: config 8 has an invalid interface number: 134 but max is 0 [ 345.789572][ T5897] usb 3-1: config 8 has no interface number 0 [ 345.833252][ T5897] usb 3-1: config 8 interface 134 has no altsetting 0 [ 345.852310][ T5897] usb 3-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= 4.15 [ 345.875315][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.944783][ T8432] FAULT_INJECTION: forcing a failure. [ 345.944783][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 345.948738][ T5897] usb 3-1: Product: syz [ 345.957813][ T8432] CPU: 0 UID: 0 PID: 8432 Comm: syz.0.702 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 345.957845][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.957859][ T8432] Call Trace: [ 345.957871][ T8432] [ 345.957882][ T8432] dump_stack_lvl+0x189/0x250 [ 345.957920][ T8432] ? __lock_acquire+0xaac/0xd20 [ 345.957953][ T8432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.957984][ T8432] ? __pfx__printk+0x10/0x10 [ 345.958012][ T8432] ? __lock_acquire+0xaac/0xd20 [ 345.958050][ T8432] should_fail_ex+0x414/0x560 [ 345.958079][ T8432] should_failslab+0xa8/0x100 [ 345.958111][ T8432] kmem_cache_alloc_noprof+0x73/0x3c0 [ 345.958139][ T8432] ? skb_clone+0x212/0x3a0 [ 345.958174][ T8432] skb_clone+0x212/0x3a0 [ 345.958203][ T8432] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 345.958233][ T8432] dev_queue_xmit_nit+0x416/0xcc0 [ 345.958260][ T8432] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 345.958301][ T8432] dev_hard_start_xmit+0x1d5/0x880 [ 345.958335][ T8432] ? stack_trace_save+0x9c/0xe0 [ 345.958371][ T8432] __dev_queue_xmit+0x1adf/0x3a70 [ 345.958408][ T8432] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 345.958438][ T8432] ? __dev_queue_xmit+0x27e/0x3a70 [ 345.958470][ T8432] ? __sock_sendmsg+0x219/0x270 [ 345.958490][ T8432] ? ___sys_sendmsg+0x21f/0x2a0 [ 345.958516][ T8432] ? do_syscall_64+0xf6/0x210 [ 345.958543][ T8432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.958576][ T8432] ? __pfx___dev_queue_xmit+0x10/0x10 [ 345.958626][ T8432] ? __copy_skb_header+0xa7/0x550 [ 345.958661][ T8432] ? __asan_memcpy+0x40/0x70 [ 345.958691][ T8432] ? __skb_clone+0x63/0x7a0 [ 345.958725][ T8432] ? __skb_clone+0x483/0x7a0 [ 345.958763][ T8432] ? skb_clone+0x246/0x3a0 [ 345.958798][ T8432] __netlink_deliver_tap+0x5ad/0x850 [ 345.958838][ T8432] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.958864][ T8432] netlink_deliver_tap+0x19c/0x1b0 [ 345.958890][ T8432] __netlink_sendskb+0x47/0x90 [ 345.958913][ T8432] netlink_dump+0xa5c/0xe70 [ 345.958950][ T8432] ? __pfx_netlink_dump+0x10/0x10 [ 345.958996][ T8432] ? netlink_lookup+0x30/0x200 [ 345.959018][ T8432] ? netlink_lookup+0x30/0x200 [ 345.959039][ T8432] ? netlink_lookup+0x30/0x200 [ 345.959067][ T8432] __netlink_dump_start+0x5cb/0x7e0 [ 345.959102][ T8432] rtnetlink_rcv_msg+0x9eb/0xb70 [ 345.959128][ T8432] ? __pfx_tc_dump_chain+0x10/0x10 [ 345.959156][ T8432] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 345.959179][ T8432] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.959203][ T8432] ? __pfx_rtnl_dumpit+0x10/0x10 [ 345.959226][ T8432] ? __pfx_tc_dump_chain+0x10/0x10 [ 345.959254][ T8432] ? ref_tracker_free+0x63a/0x7d0 [ 345.959277][ T8432] ? __copy_skb_header+0xa7/0x550 [ 345.959319][ T8432] netlink_rcv_skb+0x219/0x490 [ 345.959345][ T8432] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.959370][ T8432] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.959418][ T8432] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.959442][ T8432] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.959473][ T8432] netlink_unicast+0x758/0x8d0 [ 345.959508][ T8432] netlink_sendmsg+0x805/0xb30 [ 345.959544][ T8432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.959573][ T8432] ? aa_sock_msg_perm+0x94/0x160 [ 345.959599][ T8432] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.959623][ T8432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.959650][ T8432] __sock_sendmsg+0x219/0x270 [ 345.959682][ T8432] ____sys_sendmsg+0x505/0x830 [ 345.959718][ T8432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.959760][ T8432] ? import_iovec+0x74/0xa0 [ 345.959794][ T8432] ___sys_sendmsg+0x21f/0x2a0 [ 345.959825][ T8432] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.959898][ T8432] ? __fget_files+0x2a/0x420 [ 345.959926][ T8432] ? __fget_files+0x3a0/0x420 [ 345.959967][ T8432] __x64_sys_sendmsg+0x19b/0x260 [ 345.959999][ T8432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.960048][ T8432] ? do_syscall_64+0xba/0x210 [ 345.960080][ T8432] do_syscall_64+0xf6/0x210 [ 345.960151][ T8432] ? clear_bhb_loop+0x45/0xa0 [ 345.960178][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.960200][ T8432] RIP: 0033:0x7f071438e969 [ 345.960221][ T8432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.960239][ T8432] RSP: 002b:00007f0715251038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.960262][ T8432] RAX: ffffffffffffffda RBX: 00007f07145b5fa0 RCX: 00007f071438e969 [ 345.960278][ T8432] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 345.960293][ T8432] RBP: 00007f0715251090 R08: 0000000000000000 R09: 0000000000000000 [ 345.960307][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.960319][ T8432] R13: 0000000000000000 R14: 00007f07145b5fa0 R15: 00007f07146dfa28 [ 345.960355][ T8432] [ 346.467935][ T5897] usb 3-1: Manufacturer: syz [ 346.472818][ T5897] usb 3-1: SerialNumber: syz [ 346.830514][ T8418] netem: incorrect ge model size [ 346.840250][ T8418] netem: change failed [ 346.996132][ T5897] gspca_main: benq-2.14.0 probing 04a5:3035 [ 347.036736][ T5897] usb 3-1: USB disconnect, device number 62 [ 347.239224][ T5883] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 347.249118][ T5918] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 347.408765][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 347.414067][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 347.421414][ T5883] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 347.430086][ T5883] usb 1-1: config 0 has no interface number 0 [ 347.439342][ T5918] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 347.447900][ T5918] usb 5-1: config 0 has no interface number 0 [ 347.457727][ T5883] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 347.467736][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.476677][ T5918] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 347.488418][ T5883] usb 1-1: Product: syz [ 347.497028][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.505197][ T5883] usb 1-1: Manufacturer: syz [ 347.510152][ T5883] usb 1-1: SerialNumber: syz [ 347.514837][ T5918] usb 5-1: Product: syz [ 347.520853][ T5918] usb 5-1: Manufacturer: syz [ 347.525664][ T5918] usb 5-1: SerialNumber: syz [ 347.533110][ T5883] usb 1-1: config 0 descriptor?? [ 347.544284][ T5883] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 347.558977][ T5918] usb 5-1: config 0 descriptor?? [ 347.579016][ T5918] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 347.599006][ T10] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 347.761390][ T10] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 347.776986][ T10] usb 4-1: config 0 has no interface number 0 [ 347.795325][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 347.810273][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.821997][ T10] usb 4-1: Product: syz [ 347.832993][ T10] usb 4-1: Manufacturer: syz [ 347.850546][ T10] usb 4-1: SerialNumber: syz [ 347.908590][ T10] usb 4-1: config 0 descriptor?? [ 347.984200][ T5918] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 348.002660][ T5918] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 348.044760][ T5883] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 348.072227][ T5883] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 348.321520][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.339598][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 348.347242][ T5887] usb 2-1: can't read configurations, error -71 [ 348.472096][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 348.484751][ T5883] usb 5-1: USB disconnect, device number 63 [ 348.497409][ T5883] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 348.543039][ T5883] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 348.576059][ T5883] quatech2 5-1:0.51: device disconnected [ 348.671704][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 348.672207][ T5897] usb 1-1: USB disconnect, device number 42 [ 348.690649][ T5897] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 348.709358][ T5897] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 348.727024][ T5897] quatech2 1-1:0.51: device disconnected [ 348.998999][ T5887] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 349.008803][ T96] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 349.149011][ T5887] usb 2-1: device descriptor read/64, error -71 [ 349.218777][ T96] usb 3-1: Using ep0 maxpacket: 16 [ 349.257066][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.269148][ T5887] usb usb2-port1: attempt power cycle [ 349.288572][ T96] usb 3-1: unable to get BOS descriptor or descriptor too short [ 349.288924][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.321092][ T96] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 349.359163][ T96] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.452579][ T96] usb 3-1: config 1 interface 0 has no altsetting 0 [ 349.471040][ T96] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 349.489512][ T96] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.498244][ T96] usb 3-1: Product: syz [ 349.507109][ T96] usb 3-1: Manufacturer: syz [ 349.516508][ T96] usb 3-1: SerialNumber: syz [ 349.718837][ T5887] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 349.743279][ T5887] usb 2-1: device descriptor read/8, error -71 [ 350.011734][ T5887] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 350.039429][ T5887] usb 2-1: device descriptor read/8, error -71 [ 350.152284][ T5887] usb usb2-port1: unable to enumerate USB device [ 350.394261][ T8478] loop6: detected capacity change from 0 to 524287999 [ 350.596970][ T5887] usb 4-1: USB disconnect, device number 57 [ 350.853927][ T8477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.919515][ T8477] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 351.105806][ T8477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 351.115585][ T8477] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 351.138589][ T8477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 351.144896][ T8477] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 351.180578][ T8477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.247188][ T8477] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 351.355711][ T8477] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 351.362288][ T8477] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 352.154724][ T8487] hsr0: entered promiscuous mode [ 352.185924][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 352.222826][ T8487] hsr_slave_0: left promiscuous mode [ 352.232836][ T8487] hsr_slave_1: left promiscuous mode [ 352.295403][ T8487] hsr0 (unregistering): left promiscuous mode [ 352.418888][ T5897] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 352.558842][ T5897] usb 4-1: device descriptor read/64, error -71 [ 352.584646][ T96] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 352.598777][ T96] usb 3-1: USB disconnect, device number 63 [ 352.688916][ T5918] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 352.818863][ T5897] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 352.848952][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 352.857793][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.868902][ T5918] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 352.880649][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.889353][ T5918] usb 1-1: Product: syz [ 352.893673][ T5918] usb 1-1: Manufacturer: syz [ 352.898407][ T5918] usb 1-1: SerialNumber: syz [ 352.910396][ T5918] usb 1-1: config 0 descriptor?? [ 352.978969][ T5897] usb 4-1: device descriptor read/64, error -71 [ 353.028798][ T5883] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 353.111028][ T5897] usb usb4-port1: attempt power cycle [ 353.144121][ T8494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.197290][ T5883] usb 5-1: device descriptor read/64, error -71 [ 353.222399][ T8494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.448780][ T5883] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 353.457172][ T5918] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 353.467464][ T5918] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 353.468850][ T5897] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 353.499598][ T5897] usb 4-1: device descriptor read/8, error -71 [ 353.588870][ T5883] usb 5-1: device descriptor read/64, error -71 [ 353.710755][ T5883] usb usb5-port1: attempt power cycle [ 353.737260][ T5918] usb 1-1: USB disconnect, device number 43 [ 353.738887][ T5897] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 353.769768][ T5897] usb 4-1: device descriptor read/8, error -71 [ 353.880573][ T5897] usb usb4-port1: unable to enumerate USB device [ 353.958904][ T5887] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 354.068800][ T5883] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 354.089442][ T5883] usb 5-1: device descriptor read/8, error -71 [ 354.118933][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 354.127869][ T5887] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 354.136109][ T5887] usb 3-1: config 0 has no interface number 0 [ 354.144637][ T5887] usb 3-1: too many endpoints for config 0 interface 12 altsetting 2: 235, using maximum allowed: 30 [ 354.156030][ T5887] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 354.170614][ T5887] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 354.182063][ T5887] usb 3-1: config 0 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 235 [ 354.195518][ T5887] usb 3-1: config 0 interface 12 has no altsetting 0 [ 354.204798][ T5887] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 354.214234][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.222370][ T5887] usb 3-1: Product: syz [ 354.226580][ T5887] usb 3-1: Manufacturer: syz [ 354.231301][ T5887] usb 3-1: SerialNumber: syz [ 354.238392][ T5887] usb 3-1: config 0 descriptor?? [ 354.246736][ T5887] f81534 3-1:0.12: unsupported endpoint max packet size [ 354.329583][ T5883] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 354.359987][ T5883] usb 5-1: device descriptor read/8, error -71 [ 354.471637][ T5883] usb usb5-port1: unable to enumerate USB device [ 354.798929][ T5883] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 354.821523][ T5885] usb 3-1: USB disconnect, device number 64 [ 355.050191][ T5883] usb 1-1: config 0 has no interfaces? [ 355.085053][ T5883] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 355.102896][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.121110][ T5883] usb 1-1: Product: syz [ 355.130568][ T96] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 355.142159][ T5883] usb 1-1: Manufacturer: syz [ 355.146832][ T5883] usb 1-1: SerialNumber: syz [ 355.156952][ T5883] usb 1-1: config 0 descriptor?? [ 355.282360][ T96] usb 2-1: device descriptor read/64, error -71 [ 355.619373][ T96] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 355.788786][ T96] usb 2-1: device descriptor read/64, error -71 [ 355.909149][ T96] usb usb2-port1: attempt power cycle [ 356.278765][ T96] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 356.325414][ T96] usb 2-1: device descriptor read/8, error -71 [ 356.410454][ T8532] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 356.418374][ T8532] netlink: 'syz.3.733': attribute type 2 has an invalid length. [ 356.598816][ T96] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 356.679409][ T96] usb 2-1: device descriptor read/8, error -71 [ 356.790967][ T96] usb usb2-port1: unable to enumerate USB device [ 357.452432][ T8556] Unknown options in mask 5 [ 357.758859][ T5887] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 357.961502][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 357.996335][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.023629][ T5887] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 358.050038][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.083702][ T5887] usb 3-1: config 0 descriptor?? [ 358.153287][ T96] usb 1-1: USB disconnect, device number 44 [ 358.284231][ T8566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.503716][ T5887] hid (null): unknown global tag 0x9c [ 358.511460][ T5887] hid (null): report_id 15679 is invalid [ 358.518813][ T5887] hid (null): global environment stack underflow [ 358.525423][ T5887] hid (null): unknown global tag 0xc [ 358.711809][ T5887] usb 3-1: string descriptor 0 read error: -71 [ 358.732806][ T8578] netlink: 68 bytes leftover after parsing attributes in process `syz.4.748'. [ 358.749191][ T5887] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 358.757482][ T5887] letsketch 0003:6161:4D15.0025: probe with driver letsketch failed with error -32 [ 358.777837][ T5887] usb 3-1: USB disconnect, device number 65 [ 359.238809][ T96] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 359.379222][ T96] usb 2-1: device descriptor read/64, error -71 [ 359.465716][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.753'. [ 359.676513][ T96] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 359.848782][ T96] usb 2-1: device descriptor read/64, error -71 [ 359.970943][ T96] usb usb2-port1: attempt power cycle [ 359.998848][ T5883] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 360.130486][ T5883] usb 3-1: device descriptor read/64, error -71 [ 360.309184][ T96] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 360.330193][ T96] usb 2-1: device descriptor read/8, error -71 [ 360.368837][ T5883] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 360.392405][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 360.511205][ T5883] usb 3-1: device descriptor read/64, error -71 [ 360.551908][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 360.560980][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.570756][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 360.571581][ T96] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 360.588275][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 360.600677][ T10] usb 1-1: config 1 has no interface number 1 [ 360.609820][ T96] usb 2-1: device descriptor read/8, error -71 [ 360.633572][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 360.646676][ T5883] usb usb3-port1: attempt power cycle [ 360.653938][ T10] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.671184][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.680617][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.688792][ T10] usb 1-1: Product: syz [ 360.693011][ T10] usb 1-1: Manufacturer: syz [ 360.697621][ T10] usb 1-1: SerialNumber: syz [ 360.720483][ T96] usb usb2-port1: unable to enumerate USB device [ 360.920329][ T10] usb 1-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 360.928033][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 360.976411][ T10] usb 1-1: USB disconnect, device number 45 [ 360.988769][ T5883] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 361.026582][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.050064][ T5883] usb 3-1: device descriptor read/8, error -71 [ 361.301867][ T5883] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 361.313491][ T8610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.760'. [ 361.328351][ T8610] vlan3: entered promiscuous mode [ 361.335213][ T8610] team0: entered promiscuous mode [ 361.339594][ T5883] usb 3-1: device descriptor read/8, error -71 [ 361.459181][ T5883] usb usb3-port1: unable to enumerate USB device [ 361.779214][ T5883] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 362.326072][ T5883] usb 4-1: config index 0 descriptor too short (expected 8192, got 77) [ 362.363337][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.389215][ T5883] usb 4-1: config 0 has no interfaces? [ 362.405021][ T5883] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 362.501510][ T8626] netlink: 44 bytes leftover after parsing attributes in process `syz.1.763'. [ 362.545528][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.840387][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880416ab400: rx timeout, send abort [ 362.848867][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880416ab400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 362.874035][ T5883] usb 4-1: Product: syz [ 362.954676][ T5883] usb 4-1: Manufacturer: syz [ 362.965966][ T5883] usb 4-1: SerialNumber: syz [ 363.070490][ T5883] usb 4-1: config 0 descriptor?? [ 363.561912][ T8639] @: renamed from vlan0 (while UP) [ 364.287043][ T8648] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 364.347665][ T8648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.918821][ T5885] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 365.111045][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 365.127884][ T5885] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 365.138618][ T5885] usb 2-1: config 0 has no interface number 0 [ 365.146118][ T5885] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 365.160510][ T5883] usb 4-1: USB disconnect, device number 62 [ 365.171257][ T5885] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 365.204108][ T5885] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 365.226107][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.251008][ T5885] usb 2-1: Product: syz [ 365.255240][ T5885] usb 2-1: Manufacturer: syz [ 365.262042][ T5885] usb 2-1: SerialNumber: syz [ 365.272858][ T5885] usb 2-1: config 0 descriptor?? [ 365.323113][ T96] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 365.469556][ T96] usb 3-1: device descriptor read/64, error -71 [ 365.582751][ T5885] usb 2-1: USB disconnect, device number 65 [ 365.620105][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.755155][ T5918] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 365.780800][ T96] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 365.939985][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 365.945195][ T96] usb 3-1: device descriptor read/64, error -71 [ 365.978465][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 365.993439][ T5918] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 366.006356][ T5918] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.025531][ T5918] usb 4-1: config 1 interface 0 has no altsetting 0 [ 366.056127][ T5918] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 366.067576][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.075818][ T5918] usb 4-1: Product: syz [ 366.084914][ T96] usb usb3-port1: attempt power cycle [ 366.090612][ T5918] usb 4-1: Manufacturer: syz [ 366.095830][ T5918] usb 4-1: SerialNumber: syz [ 366.278798][ T5885] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 366.430122][ T96] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 366.449521][ T96] usb 3-1: device descriptor read/8, error -71 [ 366.458889][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 366.496337][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 366.504257][ T5897] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 366.516623][ T5885] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 366.708915][ T96] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 366.725609][ T5885] usb 1-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.750073][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.779546][ T96] usb 3-1: device descriptor read/8, error -71 [ 366.831613][ T5885] usb 1-1: config 1 interface 0 has no altsetting 0 [ 366.865701][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.889556][ T96] usb usb3-port1: unable to enumerate USB device [ 366.933653][ T5885] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 366.943958][ T5897] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 366.974449][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.008530][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.054688][ T5885] usb 1-1: Product: syz [ 367.087366][ T5885] usb 1-1: Manufacturer: syz [ 367.111918][ T5897] usb 5-1: config 0 descriptor?? [ 367.120045][ T5885] usb 1-1: SerialNumber: syz [ 367.551825][ T5897] hid (null): unknown global tag 0x9c [ 367.780418][ T5897] usb 5-1: string descriptor 0 read error: -71 [ 367.813658][ T5897] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 367.840141][ T5897] letsketch 0003:6161:4D15.0026: probe with driver letsketch failed with error -32 [ 367.933968][ T5897] usb 5-1: USB disconnect, device number 68 [ 368.172616][ T8688] FAULT_INJECTION: forcing a failure. [ 368.172616][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 368.221936][ T8690] netlink: 76 bytes leftover after parsing attributes in process `syz.2.784'. [ 368.244288][ T8688] CPU: 0 UID: 0 PID: 8688 Comm: syz.1.783 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 368.244321][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.244338][ T8688] Call Trace: [ 368.244349][ T8688] [ 368.244359][ T8688] dump_stack_lvl+0x189/0x250 [ 368.244398][ T8688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.244426][ T8688] ? __pfx__printk+0x10/0x10 [ 368.244443][ T8688] ? ipt_do_table+0x2a3/0x1610 [ 368.244468][ T8688] ? iptable_mangle_hook+0x189/0x4c0 [ 368.244498][ T8688] should_fail_ex+0x414/0x560 [ 368.244524][ T8688] should_failslab+0xa8/0x100 [ 368.244550][ T8688] kmem_cache_alloc_noprof+0x73/0x3c0 [ 368.244573][ T8688] ? dst_alloc+0x105/0x170 [ 368.244605][ T8688] dst_alloc+0x105/0x170 [ 368.244639][ T8688] rt_dst_clone+0x52/0x680 [ 368.244668][ T8688] ip_mc_finish_output+0x10a/0x5f0 [ 368.244699][ T8688] ip_mc_output+0x25c/0x590 [ 368.244729][ T8688] ip_push_pending_frames+0xbe/0x150 [ 368.244758][ T8688] raw_sendmsg+0x1429/0x18a0 [ 368.244800][ T8688] ? __pfx_raw_sendmsg+0x10/0x10 [ 368.244842][ T8688] ? aa_sk_perm+0x81e/0x950 [ 368.244866][ T8688] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 368.244909][ T8688] ? sock_rps_record_flow+0x19/0x400 [ 368.244941][ T8688] ? inet_sendmsg+0x2f4/0x370 [ 368.244967][ T8688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.244992][ T8688] __sock_sendmsg+0x19c/0x270 [ 368.245013][ T8688] ____sys_sendmsg+0x505/0x830 [ 368.245042][ T8688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.245074][ T8688] ? import_iovec+0x74/0xa0 [ 368.245106][ T8688] ___sys_sendmsg+0x21f/0x2a0 [ 368.245135][ T8688] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.245195][ T8688] ? __fget_files+0x2a/0x420 [ 368.245220][ T8688] ? __fget_files+0x3a0/0x420 [ 368.245258][ T8688] __x64_sys_sendmsg+0x19b/0x260 [ 368.245287][ T8688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.245333][ T8688] ? do_syscall_64+0xba/0x210 [ 368.245364][ T8688] do_syscall_64+0xf6/0x210 [ 368.245391][ T8688] ? clear_bhb_loop+0x45/0xa0 [ 368.245414][ T8688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.245434][ T8688] RIP: 0033:0x7f18bff8e969 [ 368.245452][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.245469][ T8688] RSP: 002b:00007f18c0e05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.245489][ T8688] RAX: ffffffffffffffda RBX: 00007f18c01b5fa0 RCX: 00007f18bff8e969 [ 368.245503][ T8688] RDX: 0000000000000004 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 368.245516][ T8688] RBP: 00007f18c0e05090 R08: 0000000000000000 R09: 0000000000000000 [ 368.245529][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.245541][ T8688] R13: 0000000000000000 R14: 00007f18c01b5fa0 R15: 00007f18c02dfa28 [ 368.245570][ T8688] [ 369.427037][ T5885] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 369.660768][ T5885] usb 1-1: USB disconnect, device number 46 [ 370.210490][ T5885] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 370.370774][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 370.378849][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 370.398430][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.439552][ T5918] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 370.447381][ T5885] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 370.463795][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.469495][ T5918] usb 4-1: USB disconnect, device number 63 [ 370.497363][ T5885] usb 1-1: config 0 descriptor?? [ 370.539344][ T5883] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 370.567966][ T10] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 370.589854][ T10] usb 5-1: config 0 has no interface number 0 [ 370.596003][ T10] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 370.615418][ T8722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.793'. [ 370.631446][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 370.658896][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.668235][ T10] usb 5-1: Product: syz [ 370.677523][ T10] usb 5-1: Manufacturer: syz [ 370.687709][ T10] usb 5-1: SerialNumber: syz [ 370.708762][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 370.728925][ T10] usb 5-1: config 0 descriptor?? [ 370.779274][ T5883] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 370.789650][ T5883] usb 2-1: config 0 has no interface number 0 [ 370.811137][ T5883] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 370.826917][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.835907][ T5883] usb 2-1: Product: syz [ 370.840283][ T5883] usb 2-1: Manufacturer: syz [ 370.845012][ T5883] usb 2-1: SerialNumber: syz [ 370.856090][ T10] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 370.886067][ T5883] usb 2-1: config 0 descriptor?? [ 370.891389][ T5918] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 370.908938][ T5883] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 371.049523][ T5918] usb 4-1: no configurations [ 371.062345][ T5918] usb 4-1: can't read configurations, error -22 [ 371.075531][ T5885] hid (null): unknown global tag 0x9c [ 371.152464][ T5883] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 371.188980][ T5883] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 371.238851][ T5918] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 371.397135][ T5943] usb 5-1: USB disconnect, device number 69 [ 371.408153][ T5885] usb 1-1: string descriptor 0 read error: -71 [ 371.409962][ T5918] usb 4-1: no configurations [ 371.436697][ T5918] usb 4-1: can't read configurations, error -22 [ 371.463542][ T5885] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 371.475085][ T5943] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 371.477859][ T5918] usb usb4-port1: attempt power cycle [ 371.487763][ T5885] letsketch 0003:6161:4D15.0027: probe with driver letsketch failed with error -32 [ 371.544738][ T5885] usb 1-1: USB disconnect, device number 47 [ 371.740113][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 371.746421][ T5943] usb 2-1: USB disconnect, device number 66 [ 371.768129][ T5943] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 371.794466][ T5943] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 371.810660][ T5943] quatech2 2-1:0.51: device disconnected [ 371.959099][ T5918] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 372.000336][ T5918] usb 4-1: no configurations [ 372.005069][ T5918] usb 4-1: can't read configurations, error -22 [ 372.148914][ T5918] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 372.242047][ T5918] usb 4-1: no configurations [ 372.253900][ T5918] usb 4-1: can't read configurations, error -22 [ 372.294397][ T5918] usb usb4-port1: unable to enumerate USB device [ 372.572003][ T8737] netlink: 76 bytes leftover after parsing attributes in process `syz.0.799'. [ 372.999009][ T5943] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 373.177505][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 373.209926][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.255076][ T5943] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 373.292682][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.323071][ T5943] usb 5-1: config 0 descriptor?? [ 373.641503][ T5918] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 373.745755][ T5943] hid (null): unknown global tag 0x9c [ 373.769004][ T5943] hid (null): unknown global tag 0xc [ 373.777531][ T5943] hid (null): unknown global tag 0xd [ 373.804657][ T5943] hid (null): unknown global tag 0xc [ 373.815716][ T5943] hid (null): unknown global tag 0xe [ 373.818888][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 373.821157][ T5943] hid (null): unknown global tag 0xe9 [ 373.833672][ T5943] hid (null): global environment stack underflow [ 373.840628][ T5943] hid (null): unknown global tag 0xc [ 373.849106][ T5943] hid (null): invalid report_size 39531 [ 373.856411][ T8777] netlink: 'syz.3.811': attribute type 2 has an invalid length. [ 373.864425][ T5943] hid (null): invalid report_count 16579 [ 373.868923][ T5918] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 373.879266][ T5943] hid (null): unknown global tag 0xe [ 373.894432][ T5943] hid (null): unknown global tag 0xe [ 373.902635][ T5918] usb 3-1: config 0 has no interface number 0 [ 373.912493][ T5943] hid (null): unknown global tag 0x4c [ 373.945887][ T5918] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 373.968354][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.991392][ T5918] usb 3-1: Product: syz [ 374.010590][ T5918] usb 3-1: Manufacturer: syz [ 374.015258][ T5918] usb 3-1: SerialNumber: syz [ 374.017831][ T5943] usb 5-1: string descriptor 0 read error: -71 [ 374.059188][ T5943] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 374.074879][ T5918] usb 3-1: config 0 descriptor?? [ 374.089636][ T5943] letsketch 0003:6161:4D15.0028: probe with driver letsketch failed with error -32 [ 374.097577][ T5918] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 374.122182][ T5943] usb 5-1: USB disconnect, device number 70 [ 374.287313][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.814'. [ 374.419736][ T5918] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 374.474133][ T5918] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 375.068885][ T24] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 375.252139][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 375.305924][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 375.336530][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 375.377966][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 375.411550][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.450468][ T24] usb 2-1: Product: syz [ 375.472415][ T24] usb 2-1: Manufacturer: syz [ 375.495757][ T24] usb 2-1: SerialNumber: syz [ 375.523233][ T24] usb 2-1: config 0 descriptor?? [ 375.544512][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 375.549172][ T8793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 375.557426][ T5918] usb 3-1: USB disconnect, device number 74 [ 375.576898][ T8793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 375.577305][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 375.631072][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 375.651553][ T5918] quatech2 3-1:0.51: device disconnected [ 375.661906][ T24] usb 2-1: ucan: probing device on interface #0 [ 375.708842][ T5885] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 375.879249][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 375.890673][ T5885] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.910828][ T5885] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 375.925783][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.953271][ T5885] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 375.968478][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.999361][ T5885] usb 4-1: config 0 descriptor?? [ 376.025849][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.041875][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.053844][ T24] usb 2-1: ucan: failed to retrieve device info [ 376.060637][ T24] usb 2-1: ucan: probe failed; try to update the device firmware [ 376.083260][ T24] usb 2-1: USB disconnect, device number 67 [ 376.426700][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.446578][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.460526][ T8796] netlink: 'syz.3.818': attribute type 10 has an invalid length. [ 376.468897][ T5897] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 376.515853][ T8796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.519450][ T8806] netlink: 'syz.3.818': attribute type 10 has an invalid length. [ 376.540776][ T8806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.818'. [ 376.552687][ T8796] : (slave batadv0): Enslaving as an active interface with an up link [ 376.573670][ T8806] batadv0: entered promiscuous mode [ 376.580028][ T8806] batadv0: entered allmulticast mode [ 376.592349][ T5885] monterey 0003:0566:3004.0029: unknown main item tag 0x0 [ 376.593445][ T8806] : (slave batadv0): Releasing backup interface [ 376.611941][ T5885] monterey 0003:0566:3004.0029: unknown main item tag 0x0 [ 376.629352][ T5897] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 376.635207][ T8806] bridge0: port 1(batadv0) entered blocking state [ 376.637813][ T5885] monterey 0003:0566:3004.0029: unknown main item tag 0x0 [ 376.650572][ T8806] bridge0: port 1(batadv0) entered disabled state [ 376.654082][ T5897] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 376.673736][ T5897] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 376.686301][ T5897] usb 3-1: config 220 has no interface number 2 [ 376.693260][ T5885] monterey 0003:0566:3004.0029: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0 [ 376.720758][ T5897] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 376.808763][ T1085] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 376.818421][ T1085] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 376.837454][ T8810] syz.1.822 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 376.853186][ T5897] usb 3-1: config 220 interface 0 has no altsetting 0 [ 376.870442][ T5897] usb 3-1: config 220 interface 76 has no altsetting 0 [ 376.903495][ T5897] usb 3-1: config 220 interface 1 has no altsetting 0 [ 376.916096][ T24] usb 4-1: USB disconnect, device number 68 [ 376.988784][ T96] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 377.030145][ T5897] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 377.064252][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.101506][ T5897] usb 3-1: Product: syz [ 377.131682][ T5897] usb 3-1: Manufacturer: syz [ 377.184932][ T96] usb 5-1: no configurations [ 377.191293][ T96] usb 5-1: can't read configurations, error -22 [ 377.220362][ T5897] usb 3-1: SerialNumber: syz [ 377.319052][ T96] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 377.479574][ T96] usb 5-1: no configurations [ 377.484240][ T96] usb 5-1: can't read configurations, error -22 [ 377.515603][ T96] usb usb5-port1: attempt power cycle [ 377.730894][ T8803] binder: 8802:8803 ioctl 4018620d 0 returned -22 [ 377.809864][ T5897] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 377.816373][ T5897] usb 3-1: No valid video chain found. [ 377.822937][ T5897] usb 3-1: selecting invalid altsetting 0 [ 377.840347][ T5897] usb 3-1: selecting invalid altsetting 0 [ 377.846117][ T5897] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 377.860355][ T5897] usb 3-1: USB disconnect, device number 75 [ 377.919075][ T96] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 377.964892][ T96] usb 5-1: no configurations [ 377.971169][ T96] usb 5-1: can't read configurations, error -22 [ 377.988827][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 378.109454][ T96] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 378.152118][ T96] usb 5-1: no configurations [ 378.156788][ T96] usb 5-1: can't read configurations, error -22 [ 378.166921][ T24] usb 1-1: config 0 has no interfaces? [ 378.184741][ T96] usb usb5-port1: unable to enumerate USB device [ 378.206306][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.215638][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.230955][ T24] usb 1-1: Product: syz [ 378.235347][ T24] usb 1-1: Manufacturer: syz [ 378.245776][ T24] usb 1-1: SerialNumber: syz [ 378.262097][ T24] usb 1-1: config 0 descriptor?? [ 378.524653][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 378.545552][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 378.646154][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.652769][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.539991][ T8849] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 379.556383][ T8849] batman_adv: batadv0: Removing interface: ip6gretap1 [ 380.215920][ T5883] IPVS: starting estimator thread 0... [ 380.308874][ T8861] IPVS: using max 38 ests per chain, 91200 per kthread [ 380.348837][ T5883] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 380.508810][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 380.516524][ T5883] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 380.538730][ T5883] usb 3-1: config 0 has no interface number 0 [ 380.545030][ T5883] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.576078][ T5883] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 380.586473][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.597803][ T5883] usb 3-1: Product: syz [ 380.602631][ T5883] usb 3-1: Manufacturer: syz [ 380.607275][ T5883] usb 3-1: SerialNumber: syz [ 380.618086][ T5883] usb 3-1: config 0 descriptor?? [ 380.661749][ T5883] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 380.690028][ T5883] em28xx 3-1:0.132: Video interface 132 found: isoc [ 380.788963][ T5897] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 380.836552][ T24] usb 1-1: USB disconnect, device number 48 [ 380.947350][ T8873] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 380.961726][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 380.978217][ T5897] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 381.070003][ T5897] usb 5-1: config 0 has no interface number 0 [ 381.116752][ T5897] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.124439][ T8873] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.207163][ T5897] usb 5-1: config 0 interface 85 has no altsetting 0 [ 381.218282][ T5897] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 381.230089][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.240396][ T5897] usb 5-1: Product: syz [ 381.244767][ T5897] usb 5-1: Manufacturer: syz [ 381.250406][ T5897] usb 5-1: SerialNumber: syz [ 381.258884][ T5897] usb 5-1: config 0 descriptor?? [ 381.378951][ T96] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 381.529015][ T96] usb 1-1: Using ep0 maxpacket: 8 [ 381.560999][ T96] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 381.580506][ T96] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.589899][ T96] usb 1-1: Product: syz [ 381.594444][ T96] usb 1-1: Manufacturer: syz [ 381.607015][ T96] usb 1-1: SerialNumber: syz [ 381.636297][ T96] usb 1-1: config 0 descriptor?? [ 381.819310][ T5883] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 381.863232][ T96] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 381.949070][ T5897] appletouch 5-1:0.85: Geyser mode initialized. [ 381.955661][ T5883] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 381.958513][ T5897] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input44 [ 381.967753][ T5883] em28xx 3-1:0.132: board has no eeprom [ 382.042238][ T5883] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 382.079345][ T5883] em28xx 3-1:0.132: analog set to isoc mode. [ 382.091297][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 382.206950][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 382.223725][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 382.239509][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 382.267011][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 382.516450][ T96] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 382.592137][ T8894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.843'. [ 382.622387][ T96] usb 1-1: USB disconnect, device number 49 [ 382.629086][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 382.671375][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 382.733166][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 382.771624][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 382.885761][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 382.894908][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 382.904756][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 382.915586][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 382.927606][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 382.945354][ T10] em28xx 3-1:0.132: Config register raw data: 0xfffffffb [ 382.953869][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 382.983504][ T96] usb 3-1: USB disconnect, device number 76 [ 382.989846][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 383.038492][ T96] em28xx 3-1:0.132: Disconnecting em28xx [ 383.054302][ T8898] FAULT_INJECTION: forcing a failure. [ 383.054302][ T8898] name failslab, interval 1, probability 0, space 0, times 0 [ 383.068541][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.1.844 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 383.068570][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.068581][ T8898] Call Trace: [ 383.068588][ T8898] [ 383.068595][ T8898] dump_stack_lvl+0x189/0x250 [ 383.068638][ T8898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.068667][ T8898] ? __pfx__printk+0x10/0x10 [ 383.068693][ T8898] ? __pfx___might_resched+0x10/0x10 [ 383.068716][ T8898] should_fail_ex+0x414/0x560 [ 383.068742][ T8898] should_failslab+0xa8/0x100 [ 383.068771][ T8898] __kmalloc_noprof+0xcb/0x4f0 [ 383.068795][ T8898] ? security_sk_alloc+0x52/0x390 [ 383.068828][ T8898] security_sk_alloc+0x52/0x390 [ 383.068859][ T8898] sk_prot_alloc+0x101/0x220 [ 383.068890][ T8898] sk_alloc+0x3a/0x370 [ 383.068919][ T8898] inet6_create+0x7fd/0x12a0 [ 383.068938][ T8898] ? inet6_create+0x71/0x12a0 [ 383.068970][ T8898] __sock_create+0x4b0/0x9f0 [ 383.069001][ T8898] mptcp_subflow_create_socket+0xfd/0xb40 [ 383.069035][ T8898] ? look_up_lock_class+0x74/0x170 [ 383.069065][ T8898] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 383.069097][ T8898] ? __lock_acquire+0xaac/0xd20 [ 383.069131][ T8898] __mptcp_nmpc_sk+0x148/0x750 [ 383.069164][ T8898] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 383.069192][ T8898] ? __local_bh_enable_ip+0x12d/0x1c0 [ 383.069223][ T8898] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.069248][ T8898] ? __local_bh_enable_ip+0x12d/0x1c0 [ 383.069282][ T8898] mptcp_sendmsg_fastopen+0xd4/0x580 [ 383.069318][ T8898] mptcp_sendmsg+0x1773/0x1980 [ 383.069344][ T8898] ? __pfx___might_resched+0x10/0x10 [ 383.069374][ T8898] ? __lock_acquire+0xaac/0xd20 [ 383.069406][ T8898] ? aa_sk_perm+0x81e/0x950 [ 383.069429][ T8898] ? __pfx_aa_sk_perm+0x10/0x10 [ 383.069447][ T8898] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 383.069479][ T8898] ? inet6_sendmsg+0x101/0x120 [ 383.069512][ T8898] __sock_sendmsg+0xe5/0x270 [ 383.069535][ T8898] ____sys_sendmsg+0x52d/0x830 [ 383.069568][ T8898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.069605][ T8898] ? import_iovec+0x74/0xa0 [ 383.069636][ T8898] ___sys_sendmsg+0x21f/0x2a0 [ 383.069665][ T8898] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.069731][ T8898] ? __fget_files+0x2a/0x420 [ 383.069756][ T8898] ? __fget_files+0x3a0/0x420 [ 383.069793][ T8898] __sys_sendmmsg+0x227/0x430 [ 383.069826][ T8898] ? __pfx___sys_sendmmsg+0x10/0x10 [ 383.069864][ T8898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 383.069910][ T8898] ? rcu_is_watching+0x15/0xb0 [ 383.069958][ T8898] __x64_sys_sendmmsg+0xa0/0xc0 [ 383.069988][ T8898] do_syscall_64+0xf6/0x210 [ 383.070014][ T8898] ? clear_bhb_loop+0x45/0xa0 [ 383.070040][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.070060][ T8898] RIP: 0033:0x7f18bff8e969 [ 383.070079][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.070096][ T8898] RSP: 002b:00007f18c0e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 383.070119][ T8898] RAX: ffffffffffffffda RBX: 00007f18c01b5fa0 RCX: 00007f18bff8e969 [ 383.070134][ T8898] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 383.070147][ T8898] RBP: 00007f18c0e05090 R08: 0000000000000000 R09: 0000000000000000 [ 383.070159][ T8898] R10: 0000000020004850 R11: 0000000000000246 R12: 0000000000000001 [ 383.070172][ T8898] R13: 0000000000000000 R14: 00007f18c01b5fa0 R15: 00007f18c02dfa28 [ 383.070204][ T8898] [ 383.085073][ T10] usb 3-1: Decoder not found [ 383.262184][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b66b000: rx timeout, send abort [ 383.272305][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b66b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 383.446272][ T10] em28xx 3-1:0.132: failed to create media graph [ 383.458515][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 383.476556][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 383.476579][ T8900] ================================================================== [ 383.493263][ T8900] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 383.493611][ T96] em28xx 3-1:0.132: Closing input extension [ 383.501092][ T8900] Read of size 8 at addr ffff88802efa0738 by task v4l_id/8900 [ 383.501116][ T8900] [ 383.501128][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 383.501150][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.501162][ T8900] Call Trace: [ 383.501171][ T8900] [ 383.501180][ T8900] dump_stack_lvl+0x189/0x250 [ 383.501210][ T8900] ? __virt_addr_valid+0x18c/0x540 [ 383.501235][ T8900] ? rcu_is_watching+0x15/0xb0 [ 383.501264][ T8900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.501293][ T8900] ? rcu_is_watching+0x15/0xb0 [ 383.501326][ T8900] ? lock_release+0x4b/0x3e0 [ 383.501359][ T8900] ? __virt_addr_valid+0x18c/0x540 [ 383.501386][ T8900] ? __virt_addr_valid+0x469/0x540 [ 383.501414][ T8900] print_report+0xb4/0x290 [ 383.501441][ T8900] ? v4l2_fh_open+0xc7/0x430 [ 383.501466][ T8900] kasan_report+0x118/0x150 [ 383.501494][ T8900] ? v4l2_fh_open+0xc7/0x430 [ 383.501524][ T8900] v4l2_fh_open+0xc7/0x430 [ 383.501549][ T8900] ? __pfx___mutex_lock+0x10/0x10 [ 383.501579][ T8900] em28xx_v4l2_open+0x157/0x9a0 [ 383.501611][ T8900] v4l2_open+0x20c/0x360 [ 383.501641][ T8900] chrdev_open+0x4c9/0x5e0 [ 383.501688][ T8900] ? __pfx_chrdev_open+0x10/0x10 [ 383.501719][ T8900] ? __pfx_chrdev_open+0x10/0x10 [ 383.501744][ T8900] do_dentry_open+0xdf0/0x1970 [ 383.501783][ T8900] vfs_open+0x3b/0x340 [ 383.501812][ T8900] ? path_openat+0x2ecd/0x3830 [ 383.501834][ T8900] path_openat+0x2ee5/0x3830 [ 383.501853][ T8900] ? arch_stack_walk+0xfc/0x150 [ 383.501898][ T8900] ? __pfx_path_openat+0x10/0x10 [ 383.501923][ T8900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.501956][ T8900] do_filp_open+0x1fa/0x410 [ 383.501978][ T8900] ? __pfx_do_filp_open+0x10/0x10 [ 383.502010][ T8900] ? _raw_spin_unlock+0x28/0x50 [ 383.502031][ T8900] ? alloc_fd+0x64c/0x6c0 [ 383.502063][ T8900] do_sys_openat2+0x121/0x1c0 [ 383.502095][ T8900] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.502127][ T8900] ? exc_page_fault+0x68/0x110 [ 383.502153][ T8900] ? do_user_addr_fault+0xc8a/0x1390 [ 383.502175][ T8900] __x64_sys_openat+0x138/0x170 [ 383.502211][ T8900] do_syscall_64+0xf6/0x210 [ 383.502239][ T8900] ? clear_bhb_loop+0x45/0xa0 [ 383.502263][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.502284][ T8900] RIP: 0033:0x7f0bff0a7407 [ 383.502304][ T8900] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 383.502323][ T8900] RSP: 002b:00007ffeabb003d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 383.502348][ T8900] RAX: ffffffffffffffda RBX: 00007f0bff7d3880 RCX: 00007f0bff0a7407 [ 383.502365][ T8900] RDX: 0000000000000000 RSI: 00007ffeabb01f1b RDI: ffffffffffffff9c [ 383.502380][ T8900] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 383.502392][ T8900] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 383.502406][ T8900] R13: 00007ffeabb00620 R14: 00007f0bff93a000 R15: 000055b93973a4d8 [ 383.502431][ T8900] [ 383.502438][ T8900] [ 383.803871][ T8900] Allocated by task 10: [ 383.808029][ T8900] kasan_save_track+0x3e/0x80 [ 383.812716][ T8900] __kasan_kmalloc+0x93/0xb0 [ 383.817314][ T8900] __kmalloc_cache_noprof+0x230/0x3d0 [ 383.822698][ T8900] em28xx_v4l2_init+0x10b/0x2e70 [ 383.827641][ T8900] em28xx_init_extension+0x11d/0x1c0 [ 383.832941][ T8900] process_scheduled_works+0xadb/0x17a0 [ 383.838498][ T8900] worker_thread+0x8a0/0xda0 [ 383.843091][ T8900] kthread+0x70e/0x8a0 [ 383.847168][ T8900] ret_from_fork+0x4b/0x80 [ 383.851589][ T8900] ret_from_fork_asm+0x1a/0x30 [ 383.856353][ T8900] [ 383.858698][ T8900] Freed by task 10: [ 383.862506][ T8900] kasan_save_track+0x3e/0x80 [ 383.867191][ T8900] kasan_save_free_info+0x46/0x50 [ 383.872228][ T8900] __kasan_slab_free+0x62/0x70 [ 383.876998][ T8900] kfree+0x193/0x440 [ 383.880986][ T8900] em28xx_v4l2_init+0x1683/0x2e70 [ 383.886102][ T8900] em28xx_init_extension+0x11d/0x1c0 [ 383.891392][ T8900] process_scheduled_works+0xadb/0x17a0 [ 383.896953][ T8900] worker_thread+0x8a0/0xda0 [ 383.901553][ T8900] kthread+0x70e/0x8a0 [ 383.905630][ T8900] ret_from_fork+0x4b/0x80 [ 383.910063][ T8900] ret_from_fork_asm+0x1a/0x30 [ 383.914832][ T8900] [ 383.917181][ T8900] The buggy address belongs to the object at ffff88802efa0000 [ 383.917181][ T8900] which belongs to the cache kmalloc-8k of size 8192 [ 383.931251][ T8900] The buggy address is located 1848 bytes inside of [ 383.931251][ T8900] freed 8192-byte region [ffff88802efa0000, ffff88802efa2000) [ 383.945229][ T8900] [ 383.947557][ T8900] The buggy address belongs to the physical page: [ 383.953982][ T8900] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2efa0 [ 383.962753][ T8900] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 383.971343][ T8900] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 383.978893][ T8900] page_type: f5(slab) [ 383.982889][ T8900] raw: 00fff00000000040 ffff88801a042280 dead000000000122 0000000000000000 [ 383.991479][ T8900] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 384.000169][ T8900] head: 00fff00000000040 ffff88801a042280 dead000000000122 0000000000000000 [ 384.008867][ T8900] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 384.017546][ T8900] head: 00fff00000000003 ffffea0000bbe801 00000000ffffffff 00000000ffffffff [ 384.026222][ T8900] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 384.034902][ T8900] page dumped because: kasan: bad access detected [ 384.041333][ T8900] page_owner tracks the page as allocated [ 384.047052][ T8900] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10, tgid 10 (kworker/0:1), ts 382100218977, free_ts 375783053744 [ 384.068165][ T8900] post_alloc_hook+0x1d8/0x230 [ 384.072944][ T8900] get_page_from_freelist+0x21ce/0x22b0 [ 384.078501][ T8900] __alloc_frozen_pages_noprof+0x181/0x370 [ 384.084317][ T8900] alloc_pages_mpol+0x232/0x4a0 [ 384.089176][ T8900] allocate_slab+0x8a/0x3b0 [ 384.093690][ T8900] ___slab_alloc+0xbfc/0x1480 [ 384.098379][ T8900] __kmalloc_cache_noprof+0x296/0x3d0 [ 384.103764][ T8900] em28xx_v4l2_init+0x10b/0x2e70 [ 384.108712][ T8900] em28xx_init_extension+0x11d/0x1c0 [ 384.114087][ T8900] process_scheduled_works+0xadb/0x17a0 [ 384.119660][ T8900] worker_thread+0x8a0/0xda0 [ 384.124259][ T8900] kthread+0x70e/0x8a0 [ 384.128340][ T8900] ret_from_fork+0x4b/0x80 [ 384.132814][ T8900] ret_from_fork_asm+0x1a/0x30 [ 384.137582][ T8900] page last free pid 8786 tgid 8772 stack trace: [ 384.144355][ T8900] __free_frozen_pages+0xb0e/0xcd0 [ 384.149483][ T8900] __folio_put+0x21b/0x2c0 [ 384.153901][ T8900] skb_release_data+0x4df/0x890 [ 384.158787][ T8900] __kfree_skb+0x55/0x70 [ 384.163037][ T8900] __tcp_close+0x205/0xde0 [ 384.167543][ T8900] tcp_close+0x28/0x110 [ 384.171790][ T8900] tls_sk_proto_close+0x60f/0x8c0 [ 384.176829][ T8900] inet_release+0x184/0x210 [ 384.181349][ T8900] sock_close+0xc0/0x240 [ 384.185607][ T8900] __fput+0x449/0xa70 [ 384.189607][ T8900] task_work_run+0x1d1/0x260 [ 384.194210][ T8900] get_signal+0x11c5/0x1310 [ 384.198784][ T8900] arch_do_signal_or_restart+0x95/0x780 [ 384.204334][ T8900] syscall_exit_to_user_mode+0x8b/0x120 [ 384.209974][ T8900] do_syscall_64+0x103/0x210 [ 384.214573][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.220473][ T8900] [ 384.222796][ T8900] Memory state around the buggy address: [ 384.228436][ T8900] ffff88802efa0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.236501][ T8900] ffff88802efa0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.244570][ T8900] >ffff88802efa0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.252805][ T8900] ^ [ 384.258703][ T8900] ffff88802efa0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.266768][ T8900] ffff88802efa0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 384.274830][ T8900] ================================================================== [ 384.308937][ T8900] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 384.316188][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 384.326110][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.336173][ T8900] Call Trace: [ 384.339483][ T8900] [ 384.342420][ T8900] dump_stack_lvl+0x99/0x250 [ 384.347024][ T8900] ? __asan_memcpy+0x40/0x70 [ 384.351625][ T8900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.356841][ T8900] ? __pfx__printk+0x10/0x10 [ 384.361445][ T8900] panic+0x2db/0x790 [ 384.365356][ T8900] ? __pfx_panic+0x10/0x10 [ 384.369785][ T8900] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 384.375687][ T8900] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 384.382022][ T8900] ? print_memory_metadata+0x314/0x400 [ 384.387491][ T8900] ? v4l2_fh_open+0xc7/0x430 [ 384.392099][ T8900] check_panic_on_warn+0x89/0xb0 [ 384.397047][ T8900] ? v4l2_fh_open+0xc7/0x430 [ 384.401651][ T8900] end_report+0x78/0x160 [ 384.405904][ T8900] kasan_report+0x129/0x150 [ 384.410417][ T8900] ? v4l2_fh_open+0xc7/0x430 [ 384.415017][ T8900] v4l2_fh_open+0xc7/0x430 [ 384.419441][ T8900] ? __pfx___mutex_lock+0x10/0x10 [ 384.424502][ T8900] em28xx_v4l2_open+0x157/0x9a0 [ 384.429367][ T8900] v4l2_open+0x20c/0x360 [ 384.433622][ T8900] chrdev_open+0x4c9/0x5e0 [ 384.438080][ T8900] ? __pfx_chrdev_open+0x10/0x10 [ 384.443037][ T8900] ? __pfx_chrdev_open+0x10/0x10 [ 384.447984][ T8900] do_dentry_open+0xdf0/0x1970 [ 384.452771][ T8900] vfs_open+0x3b/0x340 [ 384.456853][ T8900] ? path_openat+0x2ecd/0x3830 [ 384.461631][ T8900] path_openat+0x2ee5/0x3830 [ 384.466226][ T8900] ? arch_stack_walk+0xfc/0x150 [ 384.471100][ T8900] ? __pfx_path_openat+0x10/0x10 [ 384.476063][ T8900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.482233][ T8900] do_filp_open+0x1fa/0x410 [ 384.486742][ T8900] ? __pfx_do_filp_open+0x10/0x10 [ 384.491780][ T8900] ? _raw_spin_unlock+0x28/0x50 [ 384.496643][ T8900] ? alloc_fd+0x64c/0x6c0 [ 384.500983][ T8900] do_sys_openat2+0x121/0x1c0 [ 384.505680][ T8900] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.510894][ T8900] ? exc_page_fault+0x68/0x110 [ 384.515670][ T8900] ? do_user_addr_fault+0xc8a/0x1390 [ 384.520968][ T8900] __x64_sys_openat+0x138/0x170 [ 384.525836][ T8900] do_syscall_64+0xf6/0x210 [ 384.530358][ T8900] ? clear_bhb_loop+0x45/0xa0 [ 384.535048][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.540947][ T8900] RIP: 0033:0x7f0bff0a7407 [ 384.545393][ T8900] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 384.565115][ T8900] RSP: 002b:00007ffeabb003d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 384.573541][ T8900] RAX: ffffffffffffffda RBX: 00007f0bff7d3880 RCX: 00007f0bff0a7407 [ 384.581520][ T8900] RDX: 0000000000000000 RSI: 00007ffeabb01f1b RDI: ffffffffffffff9c [ 384.589508][ T8900] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 384.597495][ T8900] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 384.605470][ T8900] R13: 00007ffeabb00620 R14: 00007f0bff93a000 R15: 000055b93973a4d8 [ 384.613456][ T8900] [ 384.616832][ T8900] Kernel Offset: disabled [ 384.621164][ T8900] Rebooting in 86400 seconds..