last executing test programs: 1m18.338799432s ago: executing program 0 (id=680): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x0, {0xa, 0x4e21, 0x9, @loopback, 0x4}}, 0x24) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r2 = dup(r0) sendto$inet6(r2, &(0x7f0000000800)="1e", 0x1, 0x4041, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e000100e3000000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x800) 1m18.217873413s ago: executing program 0 (id=681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="044505d10fc800c86510e4443095f7c275cbe9a78751289169fb4d1fe9032b9634b3637ea75df71f17160037"], 0x8) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x0, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m17.990885337s ago: executing program 0 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000010, 0x42003) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0305602, &(0x7f00000004c0)={0x1, 0x0, {0x34a, 0xfffffffc, 0x2004, 0x8, 0x0, 0x7}}) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e400000000000000080c000780080006400000000612000300686173683a6e65742c706f72740000000900020073797a3100000000050005000200000005000400000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7}, 0x1, 0x8, 0xffffffff, 0x8, r2, r2, 0x6f8a}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x90}}, 0x0) 1m17.790831163s ago: executing program 0 (id=683): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="a6a6080737adba061d71bd08000000fe0000000b00000000000000"], 0x55117e) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x60, 0x1412, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x48095}, 0x6008040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/219, 0xdb}], 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b0000001b"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)=@known='user.syz\x00') unlink(&(0x7f00000000c0)='./file0\x00') futex(&(0x7f0000000100), 0x3, 0x2, 0x0, 0xfffffffffffffffd, 0x1) open(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x81000, 0x179) syz_usb_connect(0x3, 0x3e, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000d684e120080490303fa60102030109022c0002000000000904fa00000e0100000904000001ff041000090500000000000000080bb679"], 0x0) 1m15.288153679s ago: executing program 0 (id=691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="450f78b1c3cff1340fc76e02b9800000c00f3235000400000f30646467410fc77a2b0f06c483c56b6c2c0077876800b9800000c00f3235002000000f3036d15000b928000000b82ab60000ba000000000f30", 0x52}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffea8, {0xf000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x80) 1m14.478579825s ago: executing program 0 (id=694): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="eefdaf36", 0x4}], 0x1, &(0x7f0000000440)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x18}}], 0x1, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0xd, @sliced={0x0, [0x8, 0x1, 0x1, 0x5, 0x9, 0x2, 0x6, 0x1cf, 0x4, 0xa488, 0x200, 0x1, 0x8000, 0x8, 0xa1ed, 0xc0e, 0x0, 0xbf, 0x7d, 0x70, 0x1, 0x401, 0xf8, 0x0, 0x40, 0x3ff, 0x3, 0xddde, 0x81, 0x3, 0x1, 0xfccf, 0x4, 0x5, 0x5, 0x7fff, 0x80, 0xffff, 0x7, 0xff, 0x8, 0x7, 0x3, 0xfff, 0x8, 0x4, 0x14, 0x10], 0x401}}) r6 = socket(0x1, 0x803, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000d3e3eac292a8c333fd37f99f6db200ff", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r8, @ANYBLOB], 0x54}}, 0x0) 1m13.389627728s ago: executing program 32 (id=694): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="eefdaf36", 0x4}], 0x1, &(0x7f0000000440)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x18}}], 0x1, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0xd, @sliced={0x0, [0x8, 0x1, 0x1, 0x5, 0x9, 0x2, 0x6, 0x1cf, 0x4, 0xa488, 0x200, 0x1, 0x8000, 0x8, 0xa1ed, 0xc0e, 0x0, 0xbf, 0x7d, 0x70, 0x1, 0x401, 0xf8, 0x0, 0x40, 0x3ff, 0x3, 0xddde, 0x81, 0x3, 0x1, 0xfccf, 0x4, 0x5, 0x5, 0x7fff, 0x80, 0xffff, 0x7, 0xff, 0x8, 0x7, 0x3, 0xfff, 0x8, 0x4, 0x14, 0x10], 0x401}}) r6 = socket(0x1, 0x803, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000d3e3eac292a8c333fd37f99f6db200ff", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r8, @ANYBLOB], 0x54}}, 0x0) 11.774527332s ago: executing program 5 (id=883): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x10, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000003240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x2c67, 0x20b, 0x1, 0xc7, 0xb, 0x7, 0xfff}}], 0x48, 0x80}], 0x1, 0x2000c051) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000004200bf1b45fc66fbe108ee9702e204f4010a27bd5700fddbdf251d000000"], 0x14}}, 0x24040000) read(r0, &(0x7f0000001300)=""/112, 0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000540)='\x00\x00\x00', 0x5) fsetxattr$system_posix_acl(r5, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="090000000100010000000000200005000000000010000000000000002000010000000000"], 0x4, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000040)) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) write$cgroup_pid(r6, &(0x7f0000000100)=r10, 0x12) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x7fff, 0x4) 10.879660668s ago: executing program 5 (id=888): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xaf, 0x0, &(0x7f0000000040)="950d37e4805dd295c12f19db2bc8c598f9fd657ee292a91aa797a6572f3fc5d85585d7e9f875a9400df32da1ac1f01f4b4709771c810ad417a5c89256793f29cc6ab83397234bdfefe4d521542a0213f5627e55e1c782ab522152171d457208b36ce1e21b71363d381efb6d3a68644053eb7e8f76c00fbe5cd3875bd913ed3c13e0b724717ce0f3cffed7d46553f3cf1afab38dd210c98fb89f69ad8c1d54e06a35ab3acd3590b97c3bf43ddd2fba4", 0x0, 0x7, 0x0, 0xe5, 0x0, &(0x7f0000000180)="0623ca310392eb3f7374df63249044d9b1e74543d2d3a39f2dadc90a994178958923dde3df0fcdb90331fd39cd0f2137e99f021c57dd8108e24956ff57518ff03a29667b117e392121c2817e01285290d2be1b4261b4bab5e88b767dbcb698a9be05a71f8ff4bf9ba28cde38f47e01df9d242b1c0ed5f23a06ea2b05a75c6a936645a92c849adce3943953aeb7467e114cb3d2aa121279f2cbc7e27b2b57fb3ec89cdfa2e6723fd6243aedab2bbe1ccbe81147ed7c0936fbdab8f2f3c35715aa4462523617d6db9e4719fe0345d4ef79e7d00ed9de12364d4273a75879dce06245afe18a7d"}, 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0xf, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 10.065830919s ago: executing program 2 (id=890): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x20040040) socket$rds(0x15, 0x5, 0x0) (async) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x400}, 0xfffffffffffffffd, 0x0, 0xe, 0x4d6, 0xb3e, 0x0, 0x8, 0x4}}], 0x58, 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x18, 0x4, 0x20000008) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x103) fcntl$notify(r9, 0x402, 0x8000003d) (async) fcntl$notify(r9, 0x402, 0x8000003d) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}, 0x1, 0x40}) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(r11, &(0x7f0000000580)=ANY=[], 0x78) (async) write$binfmt_elf64(r11, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r10, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) (async) recvmmsg(r10, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 9.788112534s ago: executing program 5 (id=891): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x123980) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1, &(0x7f0000000940)) getrlimit(0x5, 0x0) getrlimit(0xa, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xffefffffffffffff) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x8000000001) 8.870784394s ago: executing program 1 (id=895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379ffffffffffffffff0000110001b6a8c9030fd62cd6045757ce8b0f1203e996545f16481a18113415afc89b85f5346fe0ba118061c670445fd725017565f6cdf0c97317eb555e8074f823b6445250275f23af31d0b7141a55a85f9641dc"], 0x7c}}, 0x4000) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@private0, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001dc0)=@newchain={0x30f8, 0x64, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xe}, {0x1, 0x1}, {0xd, 0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30c8, 0x2, [@TCA_CGROUP_ACT={0x32c, 0x1, [@m_nat={0x19c, 0xe, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x0, 0x0, 0xe2, 0x1}, @rand_addr=0x64010101, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x7, 0x8, 0xa, 0x7a08}, @remote, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0xffffffffffffffff, 0x9, 0x1b3}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}]}, {0xfb, 0x6, "36c44c2e7d7075fa84fa143673a8d1da993ef229e1e49cd257284d7aa1f125615d1b986294c457aad87032406194a9e08b2d0ff76913887df4d7c2f671ea29642de412e0edf77a8022871183823d065f7975463ca742c336b5d383410d462f75801d4a2b6bd36cef034bd2edd23665d5f3019aee03ead79fc0aedcaabec224818114c6e2035a64c6087574c2762a6ccbf19e053e8bf2324605773ada75c7f5d25bd9564271d822bdab5709daf5e3ee016da1c2d1b28af563370ac96bf8b3294157513fcb7babcc341c109650437527ef5e3e8f6e4deeeb9d6be761fe354d79310fa44db3bc75b5b4ef83904fc79f35d8de7a4f2b00e64b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xc4, 0xc, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xfffffffe, 0x4, 0x9, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7fff, 0x3, 0x1d8a, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1248, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xd70, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x7, 0x4, 0x5, 0x1b}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2694, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x5, 0x8, 0x2, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x11eb, 0x2}}]}, {0x7, 0x6, "3694f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xc8, 0xd, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xcf}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5c1, 0x20000000, 0x800, 0x1}}]}, {0x6a, 0x6, "0da6aa0de573793ce65d96c571b4e51e9ee8cf54a89b1b89545e62d206cd9fca94815e0a1f77db8b4542b8f65a5e36e893f8e3897876ab660ec5087f0f07b3e48be1dc9559a101b4872b4a2103dde196b8060d4b63c722e9abc961ec51d6c7eea28fabd7ba07"}, {0xc}, {0xc}}}]}, @TCA_CGROUP_POLICE={0x874, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0xa, 0x0, 0x9, {0xf7, 0x0, 0x1ff, 0x8, 0xd, 0x8}, {0x0, 0x1, 0x8001, 0x4, 0x6, 0x5}, 0x3ae9489, 0x5, 0xf}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4, 0x0, 0x4, 0x7, 0x35, 0x9, 0x8, 0x41, 0x4, 0x8, 0x59c79b7d, 0x80, 0x200, 0xcb4a, 0x7072, 0x7, 0xaa7, 0xffffff7e, 0xef0a, 0x9, 0x5, 0x4, 0x2, 0x3, 0x1484ead8, 0x1, 0xf, 0xffffffff, 0x7, 0xffff, 0x0, 0x7fffffff, 0x7, 0x917c, 0xfffffffd, 0x3, 0x3, 0x3, 0x9, 0x7, 0x7, 0x7, 0x3ff, 0xfffffff7, 0x8, 0x7, 0x260a, 0x3, 0x14, 0xffffff80, 0x800, 0x4, 0x7, 0x80000001, 0xce10, 0x2, 0x240, 0x40, 0x10, 0x80, 0x7fffffff, 0x7fff, 0x1c, 0x6, 0x40, 0x3ff, 0xf, 0x0, 0x7, 0x8, 0x5, 0x0, 0x3, 0x65, 0x6, 0x8, 0x8a, 0x4, 0x7, 0xb, 0xa2, 0x3, 0x200, 0x8, 0x4, 0xf, 0x6, 0x5, 0x0, 0x4, 0x5, 0x200, 0x8, 0x4, 0x9, 0x800, 0xb218, 0x7a66, 0x95b, 0x0, 0x6, 0x1, 0x2, 0xf, 0x4, 0x8001, 0x7, 0x40, 0x5, 0x1ff, 0x3, 0x8ba, 0x8001, 0x7, 0x2fd4, 0xff, 0x2, 0x7f, 0x2, 0x80000000, 0x1, 0x8, 0x8, 0x80, 0x10000, 0xf68, 0x2, 0x3, 0x800, 0xf, 0x5, 0x0, 0x5, 0xb, 0x2, 0x0, 0x5, 0xe20, 0x2, 0x55019ba, 0x3, 0x6, 0x3ff, 0x8, 0x2c, 0x40, 0x5, 0x8, 0x10000, 0xec49, 0x9, 0x6, 0x4, 0x401, 0x9, 0xd, 0x1d77, 0x2, 0x4, 0x7fff, 0x1ff, 0xc6, 0x200, 0x3, 0x0, 0xfffffff4, 0x401, 0x3, 0x6, 0x2, 0x10, 0x30, 0x626e, 0x1, 0x7, 0x10000, 0x2, 0x421c99d2, 0x8, 0xfffffffe, 0x1, 0x52d5, 0x8, 0x7ff, 0x58, 0x7ff, 0x5, 0xa, 0x8, 0x8, 0x5, 0x0, 0x7, 0xffff, 0x3, 0xfff, 0x5, 0x2, 0x2, 0x7, 0x0, 0xd07, 0x4, 0x10001, 0x1a, 0x612, 0xfffffffe, 0x3, 0xab8, 0x600000, 0xfff, 0x1ff, 0x3, 0xd, 0xd10794c5, 0x9, 0x7, 0x969, 0xc2, 0x76c, 0x81, 0xff, 0x80, 0x7, 0xfffffffd, 0x4, 0x5c, 0x83b, 0x9, 0x10, 0x5, 0x9, 0x1000, 0x6, 0x9, 0x6, 0xdd, 0x4, 0x0, 0x40, 0x9, 0x9, 0xe, 0xfffffff8, 0x1c3, 0x98b6, 0xcc, 0x9, 0x1, 0x7f, 0x0, 0xb6f, 0x95b, 0x54, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x8, 0x2, 0x9, 0x0, 0xffc00, 0x7, 0x8, 0xeac0, 0x40, 0x1, 0x3, 0x17, 0xfffffff7, 0x4, 0x9, 0x7, 0x6063fca7, 0x1, 0x9, 0xffffffff, 0x54c, 0x3, 0x579, 0x8, 0xe70, 0x7, 0xe436, 0x7, 0x10000, 0x1, 0x92, 0x40, 0xb02f, 0x2, 0xd, 0x4, 0x6, 0xb7, 0xabb4d651, 0x3ff, 0x8, 0xf728000, 0x9, 0xe5bd, 0x7ff, 0x80000001, 0x8, 0x9, 0x1, 0x1, 0x9a3, 0x3, 0x400, 0x9, 0x10001, 0x200, 0x4, 0xdfe1, 0x8, 0x8, 0x2, 0x3, 0xff, 0x7, 0x1, 0x0, 0xb, 0x300000, 0x7, 0xac, 0x8, 0x9ffd, 0x2, 0x4, 0xba6, 0x5, 0x10000, 0x1, 0x6, 0x6, 0xfffffc91, 0x4, 0x1, 0x1a3bb3d0, 0x2a39, 0x10, 0x0, 0x0, 0x800, 0xa, 0x10000, 0x5, 0xfff, 0x2, 0x8, 0x6, 0xfffffffd, 0x5, 0x9, 0x0, 0x7, 0x6, 0x5, 0x6, 0xcee, 0x80, 0x80, 0x3, 0x54, 0x7fff, 0x5, 0x168, 0x9, 0x5, 0x5, 0x1, 0x1, 0x0, 0x4ee, 0x5, 0xd0, 0xffffff7f, 0x101, 0xfffffffe, 0x5, 0xff, 0xffff, 0xff, 0x3, 0x10, 0x1, 0x8, 0x5d, 0xecfc, 0xb1, 0x4, 0x4, 0x7fff, 0x80000000, 0x2, 0x0, 0x4, 0xd2e, 0x1, 0x400, 0xffffffff, 0x6, 0x4, 0xa2, 0x8, 0x200, 0x2, 0x3, 0x801, 0x0, 0x3, 0x7, 0x5, 0x6, 0x0, 0x3, 0x5, 0xe7ac, 0x78ed, 0x5, 0x400000, 0x7b4, 0x7f, 0x80, 0x100, 0xfffffffb, 0x5, 0x3, 0x7, 0x4, 0x4, 0x2, 0x4, 0x2, 0xb, 0x5, 0x3, 0x55, 0x8001, 0x6710, 0x83, 0x8, 0x9, 0x658, 0x0, 0xd, 0x7, 0xe16, 0xfffffff9, 0x3, 0x80, 0x4d05, 0x3, 0x1c00, 0x6, 0x6, 0x5f, 0x7, 0x3, 0x6, 0x1, 0x1000, 0x8000, 0x5, 0x4, 0x6, 0xfffffffa, 0xdb, 0x1, 0x40, 0x0, 0x1, 0x2, 0xedf, 0x5f7, 0x4, 0x7ff, 0x4, 0x4, 0x1, 0xfffffffe, 0x6, 0xc5f, 0x7fff, 0x6, 0x9, 0x7, 0x6, 0xc3, 0x3, 0xfffffffa, 0x4, 0xfffffff9, 0x3, 0xfffffffb, 0x90, 0x8, 0x9, 0xff, 0x10, 0x4, 0x6, 0x1, 0x6, 0x9, 0x4, 0x5, 0x7b987190, 0xf4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x596}]}, @TCA_CGROUP_ACT={0x9c, 0x1, [@m_skbmod={0x98, 0x6, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0x3e, 0x6, "ea5402982af466119a6471c1947d6509df75e32e9cfeadee8daaeb2ff0d0e7349b024e8110dc74d5b4201dd8577c877faa739f3efd0543d1db79"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0xa8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0xc}, {{0x4, 0x0, 0x0, 0x1}, {0x1}}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x5348, 0x4, 0xfa}, [@TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_VAR="b5f1fe3bd9dffb466b5f", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='-', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="bfe85f"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x1c, 0x2}, {0x9, 0xdc}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x54}, {0x8001, 0xf, 0x0, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0xd}, {{0x1, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_ACT={0x170c, 0x1, [@m_skbedit={0x9c, 0x1d, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0x1, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xc}}]}, {0x3e, 0x6, "2581a854de558c282294eb909a72989d9338212505861bc89eca276bd88907a7408a9fe062fc402936a6e5fb1ca64cd0dc0f2596afd5479e9846"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1088, 0x1c, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x94be, 0x4, 0x10000000, 0x2, 0x1}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x577d, 0x9, 0x1, 0x101, 0x2}, 0xfffa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x3, 0x4, 0x5}, 0x7}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x514, 0x1c, 0x0, 0x0, {{0xb}, {0x48c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x6, 0x10, 0x1, {0x8, 0x2, 0x0, 0x2d6, 0x89, 0x1}, {0xfe, 0x1, 0x4, 0xb3f6, 0xcd, 0xfffffff8}, 0x7, 0x430, 0x1}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x21, 0x9, 0x800, 0x3, 0xf, 0x10001, 0x0, 0x3ff, 0x40, 0x2, 0x2, 0x200000, 0x3, 0x830, 0x8, 0x1, 0x4000000, 0x10000, 0x8001, 0x547, 0xd, 0x800, 0x7fff, 0x5, 0x3, 0x2, 0x7, 0x4, 0x7171, 0x9, 0xd1cb, 0x800, 0x2, 0x9, 0x7, 0x1000, 0x6, 0x8, 0x4, 0x2, 0x9, 0x800, 0xe00f, 0xaaa, 0xe75, 0xb, 0x8aa, 0x4b, 0x0, 0x1ec862a3, 0x8, 0x0, 0x208001, 0x3c7, 0x2, 0x600000, 0x5, 0x7, 0x9, 0x475, 0x9, 0x757b, 0x200, 0x4, 0x5, 0xd3, 0x5, 0x8, 0xfffffff9, 0x2, 0xb, 0x8, 0x2, 0x1, 0xb, 0x8, 0x0, 0x9, 0x7, 0x400, 0x7, 0x8, 0xde2d, 0x5, 0x6, 0x7, 0x4, 0x80, 0x3, 0x1ff, 0xffff7fff, 0xfffffffb, 0x3ff, 0x1, 0x6, 0x8, 0x5, 0x8000, 0x71a, 0xffff, 0x5, 0x7f, 0x9, 0x6, 0x4000000, 0x0, 0x4, 0x6, 0x9, 0xc, 0xffffffd1, 0x8001, 0xfffffffa, 0x1e, 0x9, 0x40, 0x2e5, 0x400, 0x5, 0x9, 0x5, 0x9, 0x5, 0x3c6f, 0x6, 0x2, 0x9, 0x4e25, 0x5cbd, 0x736d, 0x11c3, 0x9, 0x2, 0x1, 0x1efdcd9a, 0x10001, 0x2, 0x2, 0x100, 0x6, 0x8000, 0x5, 0x7, 0xd93e, 0x5, 0x7, 0x9, 0x565, 0x2, 0x9, 0x8, 0x6, 0x6, 0x80, 0x5, 0x8001, 0x2f8d4fc0, 0x7f, 0xfffffffb, 0x200, 0xf34e, 0x2, 0x8, 0xfff, 0x8001, 0xd09, 0x4, 0x8, 0x7fffffff, 0x1, 0x4, 0x2, 0x5, 0xb86, 0x5, 0x8, 0x2, 0x10, 0x0, 0x5, 0x7f, 0x2, 0x32, 0x229, 0x7, 0x2, 0x120, 0x9, 0x7, 0x9, 0x0, 0x10000, 0x5, 0x8, 0x7fff, 0x8, 0x7, 0x6, 0x1000, 0x32db8b7a, 0xfffffffd, 0x9, 0x2, 0xb6b2, 0x7, 0xffffffff, 0x0, 0xc, 0x0, 0x4, 0xb, 0xcda6, 0xfffffffd, 0xaa68, 0x9, 0x80, 0x9, 0x800, 0x0, 0x40c, 0x1, 0xfffffffc, 0x4, 0x66f8, 0x8001, 0x4, 0x7, 0xffffffff, 0x9, 0x8000, 0x1, 0x2, 0xfaa, 0x2, 0xea, 0x7, 0x1ff, 0xb, 0x1ff, 0x6, 0x8, 0xf38, 0x6, 0x5, 0x6, 0x1, 0x20000000, 0x2, 0x7fffffff, 0x1, 0x8001, 0xfffff297, 0x1, 0x7, 0x5, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x3, 0x3, 0x6, {0x6, 0x3, 0x9, 0x401, 0x3135, 0x6}, {0x5, 0x0, 0xb39, 0x1ff, 0x7, 0x6}, 0xffff, 0x0, 0x8}}]]}, {0x5f, 0x6, "76818d7e96dc59b32f0879cd827f2ac1ef1f44d1e97420429224fc777bfdf14a436780626c624af1ce0c10fef30be3ee34969adabdfc1c87dfd0c04e713c1685da74a3b9383b9aade6c734c8935d0bf14ae5969533f268e9ef966e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0xd0, 0x1d, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xc8}, @TCA_IPT_INDEX={0x8, 0x3, 0xd964}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x49, 0x6, "c63783e45d6e27ba005219651bef7bf4c4a25bd75d984c3a48aaa35fe0e07e0397ccbb7bf5387a4de88aa2344ec737b938389476f8477d59f085939d634c2c81d6ba820ff0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0x5, 0x7, 0x200, {0x67, 0x0, 0x4, 0xfff9, 0x6, 0x9f87}, {0x7, 0x0, 0x3, 0x5, 0x8, 0x1}, 0x9, 0x80000000, 0xf571}}]}, @TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_CGROUP_POLICE={0xc64, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x18a, 0x3, 0x7, 0x2, 0xfff, 0x4, 0x80, 0x0, 0x80000000, 0x3, 0x8, 0x6, 0x1ff, 0x1, 0x9, 0x4, 0x10000, 0x8, 0x10001, 0x80000000, 0x1, 0x0, 0x6, 0x9, 0x6, 0xd7, 0x400, 0x1, 0x3, 0x2, 0x3, 0x2, 0x401, 0x7, 0x6, 0x2, 0x4, 0x6, 0x10000, 0x81, 0x8, 0x5, 0x6, 0x2aac7e76, 0x7, 0xb4, 0x7, 0x3a, 0x614, 0xab, 0x8d80, 0x78, 0x4, 0x9, 0xf, 0x4, 0x2, 0xfffffffa, 0x7ff, 0x80000000, 0x83, 0x80, 0xfffffff9, 0xfffffffa, 0xaec4, 0x2, 0x4, 0x5, 0x2, 0x7fffffff, 0x0, 0x384f, 0x4, 0x6, 0x8, 0xa, 0x7f, 0x800, 0x4, 0x5, 0x40, 0xfffffff9, 0x1ff, 0x7, 0x4, 0x1, 0x9, 0xe, 0xa, 0x5, 0x0, 0x7fff, 0x6, 0x0, 0x6, 0x8bd5, 0x1, 0x9, 0x5657, 0x0, 0x5, 0x6, 0xffff, 0x42, 0x6, 0x3, 0x9a18, 0x1, 0x6, 0x9, 0x0, 0x5b2a, 0x1, 0xffffe28a, 0x0, 0x3, 0x5, 0x9, 0x9, 0x1, 0x6, 0x9, 0x0, 0x8000, 0x5, 0x4, 0x3, 0x2, 0x6, 0x4, 0x4, 0x6, 0xfffffff6, 0x2, 0x2, 0x8, 0xffffff7f, 0x7, 0x3, 0xcb, 0x7, 0x1, 0x9, 0x200, 0x2, 0x3, 0x1, 0x9, 0x40, 0x9, 0x1, 0x800, 0x4, 0x8, 0x1, 0x5, 0x101, 0xec, 0xd, 0x7, 0x8, 0x4, 0x4, 0x7, 0x7, 0x10001000, 0x5, 0x6, 0x3, 0x98e, 0x7fff, 0x9, 0x0, 0x5, 0x650, 0x6, 0x5, 0x4, 0x80000001, 0x4b, 0x2, 0x7, 0x7fff, 0xdd10, 0x2, 0x5, 0xb5, 0x6, 0x8, 0x400, 0x8001, 0x1000, 0x6, 0x8, 0xfffffff5, 0x4b, 0x5, 0x7, 0x401, 0x23e81ed2, 0x40, 0x7, 0x5, 0x3, 0xc663, 0x17, 0x8, 0xff, 0xf2c, 0x8, 0x6, 0xfffffdf8, 0x1e, 0xc08, 0xfffff579, 0x7, 0x4, 0xd59, 0x0, 0x2, 0x3, 0x1, 0x0, 0x4, 0x6, 0x7, 0x400, 0x0, 0x8, 0x9, 0x4, 0x1ff, 0x65, 0x1e, 0x8, 0x4, 0x7, 0x5, 0x0, 0x4, 0x7a38, 0xf, 0xffffffff, 0x6, 0x7, 0x5, 0x200, 0x0, 0x0, 0xbb, 0x4, 0x10001, 0x10001, 0x8, 0x7, 0xfffffff7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x5, 0xffffffff, 0x8, {0x8, 0x2, 0xf, 0xd6, 0x5, 0x5}, {0x1, 0x1, 0x1000, 0xe1c, 0x5, 0xb25}, 0x1, 0x8, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x4, 0xfffffcab, 0x9, 0xa, 0x6, 0x1, 0x5, 0x6, 0xe88f, 0xf07, 0x3ff, 0x4, 0x0, 0x0, 0x7, 0x3, 0x3ff, 0x2, 0x5, 0x1, 0x5a9, 0x1ff, 0xd292, 0xc2e1, 0x5, 0x1ff, 0xfffffff7, 0x5, 0x5, 0x3, 0xc6, 0x3, 0x2, 0x8001, 0x1, 0xd, 0xffff27b6, 0x10, 0x9, 0x7f, 0x1000, 0x401, 0x6, 0x0, 0x7fffffff, 0x2, 0xa, 0x80000001, 0xffff2367, 0x6, 0x8, 0x6faa6d, 0x0, 0x7, 0x8, 0x9, 0xe, 0x1, 0x5a1, 0x0, 0x3, 0xffffffff, 0x4, 0x7, 0x68, 0x1, 0xef4, 0x7ff, 0x0, 0x1, 0x4, 0x5, 0x6, 0x5, 0xffffffff, 0x0, 0x1440, 0xeb4b, 0x3, 0x7fffffff, 0x8, 0x4, 0x49e, 0x5, 0xfffffffb, 0xffffffff, 0x1000, 0xf588, 0x8, 0x8, 0x40, 0xfff, 0x6, 0x1ff, 0xa4a, 0x7, 0x0, 0x2f, 0x7, 0x4, 0x3a54097, 0x80, 0x3, 0xc3, 0x42fd5e2b, 0x3c4, 0x0, 0x32, 0x1, 0x400, 0x1, 0x9, 0x6f, 0x10001, 0x400, 0x2, 0x5f, 0x0, 0x2, 0xbc, 0xf4, 0x81, 0x200, 0x80, 0x1438, 0x7, 0x2, 0xb4, 0x3, 0x3, 0x101, 0x9, 0x4, 0x7fffffff, 0xffffff01, 0x101, 0x285, 0x9, 0xc, 0x8, 0x4, 0x2, 0x8, 0xff7, 0x7be0, 0xa, 0xe, 0x9, 0xfffffffc, 0x6, 0x67, 0x0, 0x49, 0x400, 0x1, 0x6, 0x7ff, 0x0, 0x0, 0xb, 0x6, 0x4, 0x7, 0x0, 0xf, 0x2, 0x6, 0x0, 0x4, 0x4, 0xeef4, 0x15, 0x2, 0x80, 0x7fff, 0x4, 0xe2, 0xe, 0x50000000, 0x80000000, 0xc, 0x3, 0x5, 0x0, 0x80000000, 0xc3, 0xfffffffa, 0xe, 0x3, 0x0, 0x9, 0xfffffff9, 0x1, 0x4, 0xd, 0xef21, 0x67, 0x40, 0xf8, 0x7, 0x5, 0x2, 0x2, 0x9, 0x1, 0xa8e, 0x5, 0xb, 0x10000005, 0x1, 0x6, 0xa, 0x5, 0xc11, 0x4d, 0xffffffff, 0x9, 0x5, 0x101, 0x400, 0xc, 0x9, 0x4, 0xfffffffb, 0x2, 0x6, 0x6, 0xcca1, 0x4, 0x4, 0x80000000, 0x63d07fa1, 0x3ff, 0x6, 0x0, 0xfd, 0x1, 0x3b9, 0xefe, 0x1, 0x6f94ef04, 0xfffffe00, 0x80000000, 0x1, 0x80000000, 0x4, 0x7, 0xf4d, 0x9, 0xffff, 0x4, 0x8, 0x8, 0x602f6a7c]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x5, 0x7, 0x1, 0x7, 0x8, 0xf, 0x3, 0x2d4, 0x25, 0x84, 0x80, 0x4e0d11d8, 0x1, 0x8001, 0xb, 0x5, 0x0, 0xffffffff, 0x8, 0x8, 0x7, 0x3, 0x7, 0x6, 0x0, 0x6, 0xfffffff2, 0x10001, 0x6, 0x1, 0x4, 0x5, 0x5, 0x7, 0x8, 0x7fffffff, 0x5, 0x5, 0x3ff, 0x1e, 0x800, 0x1000, 0xfffffffa, 0x8001, 0x7, 0x9, 0x6, 0x2, 0x6a, 0x1, 0x9, 0x1, 0x9, 0xffffff7f, 0x7ff, 0xc29f, 0x7ff, 0x4, 0x8, 0x4447, 0x7, 0x6, 0x9, 0x4, 0x5, 0x81, 0x9, 0xfed, 0x81, 0x7, 0x5, 0x5, 0x1, 0x1, 0x3, 0x1, 0x1, 0x4, 0x6, 0x0, 0x5, 0x1000, 0x2, 0x5, 0xc2fe, 0xf, 0x7, 0x5, 0xfffff801, 0x0, 0x4, 0x3, 0x7f, 0x4, 0xb9a71c, 0xfffffffb, 0x0, 0x4, 0x4, 0x6, 0x80000001, 0x2917f9d9, 0x2, 0x96, 0x3, 0x1, 0x0, 0xfff, 0x0, 0xa2, 0x0, 0x9, 0x5, 0xfb, 0x0, 0x8, 0x1, 0x401, 0xffffffd4, 0xffff9c0c, 0x800, 0x400, 0x2, 0x3, 0x2, 0x0, 0x401, 0xf4, 0x4, 0x2, 0x7, 0x3, 0x4, 0x989, 0x10000, 0x4, 0x5a8, 0x800, 0x38, 0x8001, 0x40000000, 0x8, 0x9, 0x792c, 0xa, 0x7, 0xf, 0x7f, 0x2, 0x9, 0x0, 0x8, 0xf29a, 0x7f, 0xf, 0xfff, 0x80000000, 0x8, 0x8, 0x9, 0x9, 0x1, 0xfffffff7, 0xa6f, 0x5, 0x4, 0x400, 0x763c, 0xb, 0x6, 0x3, 0xa, 0x401, 0xb, 0x7, 0x2, 0x1, 0x2, 0x10001, 0xff, 0x7, 0x8, 0x8, 0x4, 0x6, 0x9, 0x5, 0x4, 0xffffffd3, 0x2, 0x7, 0x6e, 0xfffffffb, 0x401, 0x3, 0x5, 0x6, 0xc45, 0x7, 0x1, 0x9, 0x2, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3, 0x92c8, 0x7f, 0xdd24, 0x5, 0x81, 0x7, 0xe, 0x4, 0x2, 0x9, 0x4, 0x77, 0x0, 0x6, 0x1, 0x7, 0x4, 0xe28, 0x1, 0x1, 0x9, 0x8, 0x6, 0x1ff, 0x10000, 0xc17b, 0xd, 0x3ff, 0x0, 0x1, 0x8, 0x1, 0x4, 0x2, 0xc, 0x3, 0x8, 0x7, 0xf, 0x5, 0x1, 0xd169, 0x3, 0x5, 0x6, 0xfffff9a5, 0x4]}]}, @TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}]}}]}, 0x30f8}, 0x1, 0x0, 0x0, 0x40080}, 0x4048084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x4ffe6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') socket$kcm(0x2a, 0x2, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000040)=0x8) fsopen(&(0x7f00000007c0)='erofs\x00', 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES8=r4], 0x128}, 0x8015) 8.56608934s ago: executing program 2 (id=898): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000051b7f020510452516aaa0102030209021b0001010010000904ec0201af3af30009050502"], 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xffffffffffffff51, 0x5, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2, 0x7}, 0x0) syz_usb_connect(0x7, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_io_uring_setup(0x800f04, &(0x7f00000002c0)={0x0, 0x513f, 0x1, 0xfffffffe, 0x24000, 0x0, r3}, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x8, 0x200) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r4 = getpid() r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xdd9f86, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb0936, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x40, 0xffff, 0x9, 0x3ff, 0x6}, &(0x7f0000000440)=0x14) r9 = syz_pidfd_open(r4, 0x0) setns(r9, 0x24020000) 7.788274685s ago: executing program 1 (id=901): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000080)={&(0x7f00000004c0)=[0x2, 0x10001, 0xb, 0x3, 0x5, 0x9, 0x81, 0x4, 0x7, 0x3, 0x7fff, 0x4, 0x1, 0x9, 0x1a000, 0x5, 0x0, 0xa, 0x9, 0x1, 0x7d0, 0x8, 0x88c9, 0x7fffffff, 0x5, 0x8, 0x65341ed1, 0x37, 0x2, 0x6, 0x200, 0x0, 0x7, 0x9, 0x0, 0x28e, 0x9, 0xf873, 0xff, 0x6, 0x26e, 0x0, 0x4, 0x7, 0x1, 0xb5, 0x6, 0x3, 0x4, 0x0, 0x2, 0x3, 0x0, 0xffff, 0x6, 0x7, 0x7cc1, 0x7, 0x3, 0x0, 0x8, 0x8001, 0x43e, 0xce8, 0x9, 0x7de5, 0x8, 0x9, 0x7, 0x20000, 0x8, 0x4, 0x5, 0xdb, 0x1, 0x7, 0x8, 0x8, 0x2, 0xaf7, 0x47, 0x4, 0xa, 0x400, 0x10, 0x3ff, 0x9, 0x8, 0xfffffff7, 0x7, 0x0, 0x5, 0x6, 0x10000, 0x40, 0xff, 0x231, 0x40, 0x8000, 0x400, 0xf, 0x43, 0x6, 0x2, 0xe5d, 0x5, 0x7, 0x3, 0x6, 0xcd, 0x7, 0x10000, 0x7, 0x9, 0x0, 0x2f85, 0xfe000000, 0x9b12, 0x3ff, 0x9ab, 0x168b, 0x0, 0x7, 0x5, 0x80, 0x1, 0x8, 0x3, 0xffffff4b, 0x4, 0xb6e, 0x100, 0x8001, 0x1, 0x1385e00, 0x3, 0x0, 0x95f, 0x4, 0x4, 0x6, 0xfada, 0x1, 0x101, 0x3ff, 0x0, 0xc, 0x2, 0x262, 0x4, 0x7db, 0x6, 0x1, 0x6, 0x7fffffff, 0x0, 0x0, 0x5, 0x4, 0x9, 0xffffffff, 0xc, 0x9, 0x9, 0x5, 0x0, 0xffe00000, 0x308d, 0x6, 0x0, 0x8, 0x4, 0xab, 0xf, 0x4, 0x4, 0xa6d, 0x4, 0x2, 0x10000, 0x7, 0x4, 0x2, 0x4, 0x2, 0x1, 0x7, 0x2, 0x1226, 0x5, 0xcc2, 0x0, 0x4, 0x81, 0x81, 0xfffffe00, 0x7, 0x1, 0xd, 0x1000, 0xe6f6, 0x4, 0x1, 0x147, 0x6, 0x2, 0x9, 0x3, 0x7, 0x9, 0x0, 0xfffffff8, 0xfffffff7, 0xda, 0xe, 0xffff, 0x1, 0x8, 0x81, 0xc5f, 0x9, 0x7, 0x1ff, 0x21, 0xffff5f62, 0x7f, 0xe, 0x8, 0x9, 0x57e9, 0x8, 0x200, 0x9, 0x8, 0x8, 0x1ff, 0x8, 0x3, 0x9, 0xfffffff8, 0x8, 0x5, 0x6, 0x6, 0x2, 0x2, 0x1, 0x7, 0x0, 0x9, 0x8, 0x4, 0xffff0001, 0x2, 0xf, 0xfffffff9, 0x3ff, 0xe4d, 0x2, 0x1, 0x1, 0x40, 0x6, 0x3, 0x84c, 0x6, 0x34, 0x507, 0xa, 0x5, 0xfffffff8, 0x7, 0x9, 0x2e, 0x8001, 0x4, 0xfffffffe, 0x5, 0x1, 0x1, 0x8e1, 0x108, 0xfffffffc, 0x6, 0x0, 0x9, 0x0, 0x10, 0xfff, 0x1, 0x40, 0x1, 0x5, 0xd8, 0x10000, 0x1ff, 0xff, 0x9, 0xd, 0x5, 0x7, 0x20000, 0xc, 0x40006, 0x2, 0x55, 0xf, 0x4, 0xfffffffd, 0x78b, 0x10001, 0x80, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x7, 0x7, 0x200, 0x7, 0x8, 0x7, 0x7f, 0x3, 0x5, 0x8, 0x7, 0x401, 0x5, 0x0, 0x8, 0x101, 0x4, 0x1, 0x8, 0x1ff, 0x2, 0x2, 0xfffff0cd, 0x2, 0x5, 0xd69, 0x8, 0x4, 0x4, 0x2, 0xd7, 0xb, 0x8000800, 0x4, 0x4, 0x7fffffff, 0x5, 0x9, 0x9, 0x101, 0x4, 0xffffffff, 0x2, 0xffffffff, 0xcad, 0x4, 0x65be, 0x101, 0x3, 0xe, 0x8, 0x7ff, 0x0, 0xfffffbd8, 0x80000001, 0x101, 0x7fff, 0x3, 0x37f2f11c, 0xffffffff, 0x7fffffff, 0x800, 0x8, 0x6, 0xc8, 0x9, 0x8, 0x5, 0x5, 0xa, 0xffff, 0x5, 0xc81, 0xf, 0x2, 0x5, 0x3000, 0x3, 0xa, 0x9, 0x1a, 0x8, 0x9, 0x7ff, 0x3e, 0x5, 0x200, 0x8, 0x3, 0x5, 0x6, 0xc, 0x4c2, 0x100, 0x8, 0x3d9, 0xffff, 0x7, 0x8000, 0x400, 0x84, 0x7, 0x100, 0x8, 0x7, 0x4, 0xffc0000, 0x7, 0x0, 0x3, 0xb, 0x6, 0xb, 0x3, 0x8000, 0x7f, 0x9, 0xffffffff, 0x7, 0xfffffff8, 0x3, 0x3, 0x6, 0x5, 0x23e, 0x100, 0x3, 0x0, 0x9, 0x24f9, 0x6, 0x5, 0x8, 0x3ff, 0x400, 0xffff19fb, 0x4, 0x3c00000, 0x2bce, 0x3e, 0x3, 0x6, 0x8, 0x7, 0xe97, 0x0, 0x9, 0x28, 0x9, 0x4, 0x30e, 0x8, 0x98, 0x1ce, 0x5, 0x4, 0x5, 0x1, 0x6e06d0d4, 0xd, 0x4, 0x10001, 0x40, 0x4, 0x1, 0x5, 0x2de, 0x3, 0x3f, 0xc, 0x7, 0x7, 0x9, 0x4, 0x796, 0x2, 0x3, 0x6, 0x8, 0x7fff, 0xa3, 0xff71, 0x1, 0x5, 0x3ff, 0x2, 0x9, 0x0, 0x5, 0x3, 0x8, 0x401, 0xffffffff, 0x401, 0xb, 0x303, 0x9, 0x5, 0x5, 0x5, 0x1ff, 0x10000, 0xff7ffff1, 0x6, 0x9, 0xc00000, 0xffffffff, 0xfb4e, 0x7d, 0x9, 0x80000001, 0xfffffff9, 0x8000, 0x4, 0x12c7, 0x4, 0x6, 0x80, 0x6, 0x9, 0xfffff801, 0x2, 0x3, 0x4, 0x8, 0x9, 0x4e3dfdf3, 0x3, 0xfcf, 0x9, 0x167ac21d, 0x80000001, 0x7, 0x5, 0x4, 0x80000001, 0x7, 0x4f4248c4, 0x6, 0x2, 0x9, 0x8001, 0xffff, 0x0, 0xfffffffe, 0x6, 0x65407f4, 0x50a, 0xac87, 0x3ff, 0x4, 0x80000000, 0x0, 0x2, 0x4, 0x40, 0x2000, 0x86f, 0x4, 0x1, 0x0, 0xb, 0x2, 0x9, 0x9, 0x1, 0x3, 0x1, 0x80000001, 0x3, 0x5, 0x5, 0x7af, 0x5, 0x8, 0xd, 0x5, 0x1, 0x9, 0xcf, 0xfbb00000, 0x3, 0x2, 0x40, 0xfffffff7, 0x101, 0x5, 0x9, 0x800, 0xa, 0x3ff, 0x3, 0xfffff8ee, 0x9e, 0x1, 0x8, 0x8f, 0x2, 0x5, 0x901, 0x1, 0x1, 0x8, 0x6, 0xffffffff, 0x400, 0xffff, 0xfffffff8, 0xfffffff8, 0x9, 0x6, 0x6a, 0x9, 0xff, 0x3ff, 0x200, 0xfffffff9, 0x10, 0x3, 0x9, 0x81, 0x5e, 0xd, 0x4a83, 0x5e023bdd, 0x8, 0x0, 0x0, 0x3, 0x4, 0x6, 0x800, 0xe5, 0x4, 0x8aa9, 0x10, 0x0, 0x1ff, 0x25, 0x9, 0x91, 0x445, 0x8001, 0xffff0000, 0x4, 0x5, 0x1, 0x4, 0x1bdf, 0x81, 0x2, 0x8, 0xfffffffe, 0xa, 0xfffffff0, 0x9ec9, 0x3, 0xe1f, 0x5, 0x7, 0xd79, 0xfffffff8, 0x1ff, 0x5, 0x6, 0x80000000, 0x3, 0x5, 0x6, 0x7, 0x7fffffff, 0x0, 0xbdb, 0x9, 0x81, 0x4d, 0xfffffffd, 0x1, 0x3, 0x7, 0x7, 0x101, 0x3, 0x5, 0xf30, 0xff, 0x40, 0xf98a, 0x7ff, 0x4, 0x3, 0x5, 0x9, 0x8, 0x80, 0x8, 0x7, 0x6, 0x5, 0xffffe994, 0x79a9c162, 0x9, 0x3, 0x1, 0x3ff, 0x9, 0x7f, 0x800, 0x8, 0x1, 0x1, 0x5, 0x79bb, 0x0, 0x5, 0x1, 0x5, 0x8, 0x5, 0x3, 0x3, 0x5, 0x1, 0x10001, 0x9c, 0x1, 0xe, 0x2, 0x10000, 0x0, 0x1, 0x9, 0x6, 0x6, 0x8000, 0x7, 0x0, 0xb4a, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x2, 0x2, 0x1, 0x6, 0x2, 0x2, 0x110000, 0x6, 0x310, 0x3, 0x2, 0x0, 0x1ff, 0x9, 0x7f, 0x2, 0x1, 0x98a, 0x5, 0x2, 0x9, 0x1, 0x3, 0x5, 0x5, 0x200, 0x10, 0x8, 0x0, 0x100, 0xf, 0x7f, 0x0, 0x4, 0x10000000, 0x3, 0x1ff, 0x7fffffff, 0x67e, 0x3, 0x7, 0x2, 0x0, 0x1, 0x1, 0x9, 0x1, 0x5, 0xab, 0x7fff, 0x0, 0x6, 0xdeda, 0x10000, 0x1, 0x100, 0x3, 0x9, 0x7f, 0x7fffffff, 0x2, 0x2, 0x4, 0x8001, 0x8, 0x6, 0x5, 0xcb9c, 0x34, 0xfff, 0x3, 0xa1a3, 0x3170, 0x8560, 0x1, 0x400, 0x5, 0x4, 0xaee, 0x1, 0x2ec8ac9f, 0xffffff7f, 0x2, 0x6, 0xd532, 0x4, 0xa, 0x3, 0x4, 0x7, 0x76f4, 0x7fff, 0x4305, 0x6, 0x80000000, 0x6, 0x101, 0x0, 0x2, 0x100, 0x9, 0xfffffff0, 0x9, 0x2, 0x83, 0x401, 0x8, 0x1d, 0x2, 0x1, 0x8, 0x8, 0xc, 0x9, 0x160f, 0xfffff801, 0xe2, 0x3, 0xfffffffb, 0x80000001, 0x3, 0x9, 0x2, 0xfff, 0x5, 0x4, 0xffcf, 0x9, 0x6, 0x9, 0x1, 0x8, 0x9, 0x7, 0x800, 0x94c, 0x800, 0x16, 0x7, 0x3, 0xe, 0x4, 0xf5, 0x9, 0x1000, 0x0, 0xf, 0x0, 0x3, 0x8, 0x8, 0x5, 0x7, 0x0, 0x7, 0x7, 0x0, 0x0, 0xfffffffc, 0x101, 0x7, 0x0, 0x782, 0x100, 0x0, 0x1, 0x7fffffff, 0x5, 0x89, 0xf, 0x2, 0x3, 0x4, 0x93c, 0x1, 0xe06, 0x1, 0x6, 0x5, 0x2, 0x4f67b0f6, 0x9, 0x5, 0x4, 0x4, 0x2, 0x2, 0x3, 0x6, 0x0, 0x7, 0x6, 0x3d, 0xfffffffa, 0x3, 0x1, 0x0, 0x5, 0x10001, 0x1, 0x5, 0xfffffffb, 0x1, 0x7, 0x2, 0xb, 0x8, 0x0, 0x1, 0x2, 0x3, 0xfffffff1, 0x6, 0x73de785b, 0x279, 0xffff, 0x7, 0x6, 0x0, 0x9, 0x357, 0x0, 0x80000000, 0xfaa, 0x5, 0x200, 0x0, 0x10, 0x8, 0x4, 0x0, 0x3, 0x5, 0x0, 0x9, 0x9, 0x0, 0xa5ed, 0x101, 0x4066, 0x1000, 0x7, 0x4, 0x7, 0xe8, 0x40, 0x4, 0x100, 0x0, 0x20, 0x3, 0x3, 0x5, 0x1800, 0xa, 0x80000001, 0x10, 0x1000, 0xffd, 0xfd9c, 0xe, 0xcf, 0x5], 0x1, 0x400}) dup(r5) 6.953822631s ago: executing program 5 (id=902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf86000000000000c4080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf98000000000000560800000200000085000000070000007b0000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x6, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0xa, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x4010) 6.506096405s ago: executing program 5 (id=903): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000009f00)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, @mpls={[], @ipv6=@gre_packet={0x7, 0x6, "bf82ec", 0x44, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xc, 0x1, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0xe}, 0x2, {0x1, 0x3, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x7a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a40003006272696467657fc5f71c", @ANYRESDEC], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r3) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x40, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x1f}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) syz_usb_connect(0x3, 0xb26, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x96, 0x68, 0x79, 0x8, 0x110a, 0x1451, 0x5cc7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb14, 0x2, 0x0, 0x9, 0x0, 0xe, [{{0x9, 0x4, 0x7a, 0xa, 0x10, 0xff, 0x5e, 0x62, 0x1, [], [{{0x9, 0x5, 0x7, 0x10, 0x8, 0x9, 0xd, 0xe, [@generic={0x38, 0x9, "ce478ca74c6861c4bdbd75b0cfa51149a08fda5903552d1f02f188b097b6f4fa862cc8a4edbd5e3a761bf9c00b9e8a7b3014d64fc71f"}, @generic={0xe4, 0x21, "9a2911922c8345c2f9ead40dbc3641ed889993e2ede4dedca18231499c1d5cd428b6d0a8a29ec7b39a73029f893f4577f46deb789eb48c6d76877edac87a3d642d9adbc6fe7a2cca38f10bbcbba74feed74e6b4d11640de8e391083eb53ff181dcb5d830b621131c79dda5507e78e37c95e31c2035d216c962edaf3ef16105ad7c596c0d4d7046f1b678ac64aba62b1c124ee53f7a558644506a71eda16842325b27acefcf133f90fbde4b8834f1760338bc95dfacd71dc2ad5af74cd1caf134abd0ec678cc35f900f7bef464e03df54cb4fe59fb42db7701a23da122301c1d5a6e2"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x7, 0x7, 0x7, [@generic={0x3e, 0x6, "7fcb906c670a7f4b74c7b227b9db2d20da591a8aa5bbd600638f55383298caafb2a97079e159f176167a4b6b0fa09317bcea2bca76ffbbdfec71abdb"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x2}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x4, 0x99, 0x5, [@generic={0x43, 0x3, "bc54aabb53080a2d8b2bbfefac2dbeb2e2353bd8c94ef45641aa2cdb4909fc5e6912fe1a6ba6410c25ad27da9e1b2320f13a466307e9f16f3e913cc60d48d2c5dc"}, @generic={0xfb, 0x3, "49ca23e52f003a58f9158574dafde563c33f22da80f9372d664dc1aa819d02571610abf9079a422aed25f702741e87a239441e8e7ebaf1323ddf460ded4e387970394d8f7b2c3d2005f954b1bec8ef60db5490363ecc4f48e747020d50ace46152ccb814bda975ac81a583eb69799476145efa4a7c38598a0cadc5a6005ce2fec61201600927c0e060d7e828b075d7d8ad7c496666e7ea68dd55884f3e8a94ded72935d7fa1839d5a308e395109efe58befb7f80dd8f4b6e3c617c54b65cb90a1d51264a8e6b69d65b1c5e56c70aaab7cb7136e41a18365196c1a84e51ccce1ebce89108e4e4c35de33ec9525db2fec8ccfc15b1ec86713255"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x4, 0x40, 0x40, [@generic={0xc4, 0x6, "3cd7c5c9ec9f34ed07849ead3e77232e02adfd412dbe48eddabd7f7369476de50b290b7c7779b62baac1457c7042ec38d76d6be73d854c100ce9f823bb010bb614c12bcc893b072a34dc0b46d812883ff3336532218464a24829da39169e0f448cb777d534a12c004cd8ef37f6d03822b986d0a6b88d08e511d6663fd5d7638d6e151d417408089467b5f94abd93cf8aff5b91ffe310041af392ef2eae9f6b11018eadf72d174b8d42f5deb542d6452c7334558961c6dea528540225925d12a7f71b"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x3, 0x9, 0x80}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x9, 0x9, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x2, 0xf5, 0xb, [@generic={0xec, 0xe, "d189bf4c7b0750840cee72a74a4620378fcc6c85876906ff7e9795fff119d7004da709353e589b2accf159b08a970943102b281fa7cc364fd13b8abc96e7c5fc9664b35c1e3389b83644e31f709c2ac01d3634ba450616cfbaf0949f53ee4a6aad77b2d558dc4ffdfb570d40b3eb52274914a0ba79c7753773191818008815eca842aa50a4184ea2a45c4332282b3a4657e96bee9f86882bea4d43d3e97fa598ac0cc4d6a414851a4273e98735c8973899cfb2b1e862a98f601576324251f9b4d9451ea065dc19544e5c32b770100f779debe8c4cdce3873840fd5f2f535fe53d45af38eaeccc4175351"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x1, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x3}, @generic={0x43, 0x5, "87b238944a71ce7415f9644ca9b919a970c8c0f241740f1ade06e078062878301cf6dd0811fda38244c72efe398abbfb4ab3141916f3e97edd0934e896d50edf4d"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x2, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x2, 0x80}, @generic={0x101, 0xd099651505d7af5e, "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"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x8, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6d}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0xf9, 0x3c, 0x9, [@generic={0xc6, 0xa, "e78a75cecf331292c0cc242c2a0c9d0a17c69bbb990b44522c4506162e6340a613f41aa3ceec3c8df24c92999c1a836fdcab13f6e91a05f08971f36028abbee75e87af93bbd7e6b43dfb0ff9f7f7890477286c9a5a3951bb87388549371913ab8eeb60c7d234b57da3306495e17222cf0041e30ce4cb3ef7b4432c015399f45b802dedc7f99cb671a279889c302587e6855ce2ab8c9349968036ac29a56ab2ac6d562c5fb6fa998be30a276cbc98776766554ed062b3df1418d8a35b33dc9d93a11d222c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x55}]}}, {{0x9, 0x5, 0xd, 0x16, 0x400, 0x4, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x4, 0x7, 0x2, [@generic={0x6d, 0x24, "8b8aa28209cba3d9d218297d291a80c2e0e4dc0741b2c7dd4e15f6e192d3b0e6b356e2027bf5ed8b08b7de19dffca6f9785c02009803d2dc22fad675fca2f9a204d6e5a2253494d31ff01d9f44a02d4061595299d33700d2aa5bd670178808120f745d430da0e2aab4daa5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x3}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x6, 0x5, 0x81}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x9, 0xc4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x80}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x4, 0x9, 0x85, [@generic={0x81, 0x9, "078449bc0b0992a649fde7a0ff516c8e80ce5016aa6305b571c46c5078644ef8e34f4e020fa50d115eb5de99c2ed1e19069b0ee1ea8ba2c366c8615a9925fbab1e8de2aadeabdfe679a46188e5410999a11881f0309170ad8f846499ae56b053182c078e8477f9b4a36717a0b7ea2f145487cc2f93fb4dae1a0124c7cb4612"}]}}]}}, {{0x9, 0x4, 0x73, 0x0, 0x8, 0xff, 0x41, 0xf1, 0x4, [@hid_hid={0x9, 0x21, 0x1ff, 0x5, 0x1, {0x22, 0x640}}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "f60aa8c4"}, {0x5, 0x24, 0x0, 0x240}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x3, 0x1000, 0xd2}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0xe6, 0x4}, @dmm={0x7, 0x24, 0x14, 0x3, 0xd}, @dmm={0x7, 0x24, 0x14, 0xd, 0x1}, @acm={0x4, 0x24, 0x2, 0x5}, @obex={0x5}, @dmm={0x7, 0x24, 0x14, 0x2, 0x9}]}], [{{0x9, 0x5, 0x7, 0xd, 0x10, 0x3, 0x31, 0x2, [@generic={0xc8, 0x5, "e3a29481b640ef40003c2edcab1947b30f819f921826f9027f4640eab8e168582fd549ad146f028e60e1df73ddc227a51bc477c4fa24367739b6f68b451662033800284e734cefff466f48534396efa898a3f0882b4396bbdea413d4e728480891a7f28926694ae64fd6f230f3b92995887d3fa5eaa6f9d6eb427d1d4c7c47b6cff88048b4efc1df418d54e50a734a91d9681c74ec377da18466afd24af9bc5eb976e0ff7450a0882fe8fab12281281ab4341a8a77f8d45990ef4fde015131275b232f32e238"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xf9, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x3, 0xed, 0x7f}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0xd3, 0x80}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xd}, @generic={0x63, 0x22, "4eaf031bbaf159e0e4fa7e84ab08f6a9f3ea07d49f3175ff24f73a22f645cbbf163c9c8f5ed68684731765e8749ebd7706013d26992281dae6ebc2406fd0b46570b8a0e5a50fca371b325e4b72d5155fb668f4df5cbd796882e18de1395cba7a0e"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x0, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7}]}}, {{0x9, 0x5, 0x2, 0x3, 0xe24a7b13382083, 0xff, 0x9, 0x7, [@generic={0x43, 0xf, "646be60f7631fccfac22f5c93679ca1f463c7b694440aa452d43a6348145b5f7352b0c624ae139ee72b71dfa640f0e6fa99a43f1e26f98ed2d190212bfa2f5b4bf"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x76, 0x8, 0x1, [@generic={0xd6, 0xc, "bab287b40ff1a7fa8974324a9bf827778063e1fdac276f6c71d90cebf687027846c7e77c809fab1d019d5d1da6105d247936fb15cac773f1a10df48217261a79cd93c619ac4e5e0097d0e4e8bdff3dc032f50d44e2c2167cde046a6a60fa6db74d9ae5739793360a1b86ef950b39162e78a916ada29276c7348368d876858bb7e8de0e71cc2309142a493c238f5ca9ffab1384430a2edb02de0f55535cf1594e90f7ed5f3af5eb2f988670866e0656609b72d3ca88abf27b696bad4b7df8ea089c93fc5d3d8765a69e8f19b3a7e596c106ac33f1"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x7, 0x1}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x5, 0x5, 0x5, 0x40, 0x1}, 0x12a, &(0x7f0000000480)={0x5, 0xf, 0x12a, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x7, 0xf000, 0x8e4, [0xff60, 0xc0, 0xf, 0x3f30, 0xff3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "98d05da33d08ca7bf6fc579e485e7c1d"}, @generic={0xf1, 0x10, 0x3, "6d283517e871e8c3a5a571ea8b3808ceff51f565ede3210605dac467010310d55700bc92337a43eab0c6b13b8259fd991f8a7fe7f59b8df271f8f253743103edd6d57749926ed5e8f8bb222afa72ffbda56ec1dc6eef69e87a0c56426265cfbf091639ab8a8931108004d279ea595f9ef3c97ea8b642c0a35b71861eb7aa8b8f74f103e3a64d29a9cf595101e84761ac69d61ecbb7ee4af091035f0169e1e81f09af8866cfe4724ead3b9aed8bb9cb8e5e86e32cd97ff97ec219e7f0d09e04a7102d440e723ee73affa48b0c5f51ac8b9960b490dfa7d214e1dc342cbac398746df4ca8bd17fe7a08175e0f1a61d"}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x4001}}, {0xb8, &(0x7f0000000600)=@string={0xb8, 0x3, "d81b758d995e2944904bd56960c665c60e23b169f0d79fbb8635afb956d180a5e2311c81464cb0c2687144f14d8b6700487bb49be9846ceb37c6adba69d8f5e9dce0b32c70aa3bb100471c78046569f784aa3b533f75b9f9de8c74dbabf878556522d50ef742c7d349c3ba7d45bc446b65a5d35a522ff9fe02684311f9b87f865a32155d2d2a279ebcfa1122f00c20535c8ebb4ba7e9ccfb57aa823666dd51b4ef1308957a5324dd16b855931786272b698994701e2e"}}, {0x12, &(0x7f00000006c0)=@string={0x12, 0x3, "69337a517a03fe83f332cbedc000aa84"}}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x0, 0x3, 0x3fa1, {{0xe, 0x4, 0x3, 0x7, 0x38, 0x64, 0x0, 0x8a, 0x4, 0x0, @private=0xa010100, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0xa, [{@empty, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x9}]}, @end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x178, r5, 0x20, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_WOL_MODES={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.}/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff3c}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x59, 0x4, "668b100600d03a73ef8ad145b464025bb1492f0ed5b3e062e9bd3a1031dca282224bd2ec2017b14fb7ba1ca0ebbdf53d856b42cfea92f6c9c6ee0760f9dd168e819801f0aa42161fc78294027d4ff4e530af4db3cc"}, @ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "ae4b206bead2219ba540e024a316cad95ce5dc0f74657dc292a2790e45fd2121faffb8aa7bfcd550f40d91"}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80d}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 6.207436555s ago: executing program 4 (id=905): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x10000, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000022c0)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x1, @link_local}, 0x2, {0x2, 0x4e21, @rand_addr=0x64010101}, 'veth1_to_bond\x00'}) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) bind$unix(r3, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6.073553071s ago: executing program 4 (id=906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0xa4, 0xd, 0x9, 0x0, 0xd1, 0xfe, 0x6, 0x6e, 0xfe, 0x2, 0x30, 0x4, 0x0, 0x9, 0x9, 0x5, 0x2, 0x1, 0x3, '\x00', 0x0, 0x7}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) 5.586874398s ago: executing program 4 (id=907): connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x5}}}]}, 0x3c}}, 0x4048004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x5}}}]}, 0x3c}}, 0x4048004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) socket$kcm(0x10, 0x2, 0x4) 5.205316807s ago: executing program 1 (id=909): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6160020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf347}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000011) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, 0x0, 0x520, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa, 0x64}}}}, [@key_params=[@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x93b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_SSID={0x18, 0x34, @random="f6809e47e3e39380cf77ae9dda62ce425549efd0"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x501180) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000300)={0x8, 0x5}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000340)={0x7fffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c002}, 0x20041804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x56}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ea4f386674539f5cbb35e07122f88c95"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f4d1ad35d421a136bdbdfe108f48e920"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x50000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) fanotify_init(0x1, 0x1000) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x12000, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24004083}, 0x4010) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x5091c}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb0, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x85}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x95}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10048840}, 0x81) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000a00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000c00)={{r4}, r5, 0x6, @unused=[0x1, 0x4, 0x4aba, 0xe2dd], @name="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"}) init_module(&(0x7f0000001c00)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x9, 0x2, 0x0, 0xaa32, 0x3, 0x3, 0x4, 0x36, 0x40, 0x19e, 0x3eb, 0x6, 0x38, 0x1, 0xae57, 0x2, 0xd}, [{0x2, 0x1ff, 0x8, 0x8, 0x8, 0x1, 0x3, 0x8}], "6ab6efae1ab95136f0c1ffd73e796ae80f70390d4a107dd1c37660882123da1be408bffa34a928c63d62bf49991c3548062507c332096462105b1d2127aebdfd701b48b02ef7d9aeb4b4b5aa3ad8ed8d2a11c956a56afe829ff063934c5365422370d0e7a465cfa93bbfcf59dd6b3b2a89da247b742a7d0068f5ff7df19cb00f59b5379d051549bbe5d04c87f794a362999ccf2813675f1cddfb0952ac01f1e9426e5858ab4bc1f4c6624f272b44093a3aa7396e7a42556c8695e69a3c7c7dbd7c28f4861e602d0476c5899325643cf37407f72da151b4008ea680bb4f62aa76035ca369ed58cddefae59b2bbe47ec533624", ['\x00', '\x00', '\x00']}, 0x46a, &(0x7f0000002080)='\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002100), r1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x50, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r7, &(0x7f0000002240)="acd790e91e3af7878e847509a0911205e7706fcedaebc2bf16d68a07857fd980d63b1376072f9006764c4c9ab6cdc9d632f1c99877d98006ce502e1ec602e2f9d4d5cecd3bfb818f5ac0835ce52067a8e23ad6b884dc21cf1fa902c04e807a51dbe65127481d049c5ca4b2b4219759fc979d89b870fcd59e57d831", 0x7b, 0x10, &(0x7f00000022c0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000002300), &(0x7f0000002340)=0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000002380), 0x604001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'wlan0\x00'}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002400), 0x80400, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f00000025c0)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002580)={&(0x7f0000002480)={0xdc, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x40005) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000) 4.830032591s ago: executing program 1 (id=910): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0x0, 0x6d, '\x00', "8173828d"}}, 0x0}, 0x0) (async, rerun: 32) r1 = syz_usb_connect$cdc_ecm(0x4, 0x61, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x3, 0x30, 0x80, [{{0x9, 0x4, 0x0, 0xb2, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, "d0"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x4ca1, 0x0, 0xffff, 0x4}, [@obex={0x5, 0x24, 0x15, 0xfff6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x88}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x9, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x0, 0xcd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x8, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x52, 0x9, 0x1, 0x20, 0x2}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x51, 0x5, 0x15, 0x101, 0x7d}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x445}}, {0x14, &(0x7f0000000180)=@string={0x14, 0x3, "3b8fbfe8351906b4d11c28f2c0fe12f7621e"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x814}}, {0x7a, &(0x7f0000000240)=@string={0x7a, 0x3, "aeb1fc15c61eb22bac7809d36e453b18478d1534bd1ca664bde0fcbf3a2ad6903e86695e43f0f345ecc77952719a09b70d886695886e48741d903f1e9ca919c2106202523e988f54ba59d8960801aabf6641a7c9c93e49a61b941706dd9cd8903aafbc7283b361a7c0d2de36989cb67437b565ad636bafe0"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x83e}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "92ad367f11770b8bb219f59e7f317adcc983e8bf973aeffca797a051bf0b9a64a5b51adea5e515b324ff9658633c56546649c0df4fbeec243af987d55996d98940ee66983dd824e807785dd2493f00c2390907cc348096875c3e125c9ab588a2d144609e5fa2415e42d2770249aadd9052bd6876c78300e7a6e7d7db1b43022b85d8c6136261450606687f9e46e7b85dd29a2357a44bd681d508757afbe4cdb5471f7c376bd59698205995e57c21c32d5934b65627e9d83911471a974b6f76b39c2e448c1b6c6aa8708ddeee95e70e"}}]}) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@RTM_NEWNSID={0x3c, 0x58, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x80) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000580)={0x14, &(0x7f0000000340)={0x20, 0xe, 0x2e, {0x2e, 0x4, "97565a7771c67b7549aca5bd7947cb4348d49f24013308ea2aeb98ab05cc8d9a7d14e96e2398bcb29b79cd84"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f00000005c0)={0x40, 0xd, 0xb0, "0e4702e3d492325042c017a18990bf8f1106386311d64c6231a7ce8bc7e042ca57aea7c9b74fc1622156497c01b81b02485411a669f3bc02bee2db02a9c38170a32de589806f4a48af522ef4ba065479270e473d8b27863b6ffb4955ac94151fc86ff959eec865685e962cd8fe3877c661d52f9c27dc4b6aa6a322a86335775c1879dbb719835b9f72281e970811fdc9d96805d4c68d08a871dfa65231d8a45b5c53ec4169cf5cdbbbf562030718aa42"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1}}) 4.591375908s ago: executing program 2 (id=912): shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1, &(0x7f00000010c0)=""/247, 0xf7}, 0x7}], 0x1, 0x10053, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000001000)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53}]}, 0x3ff}, {{&(0x7f00000001c0)=@tipc=@id, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/41}, {&(0x7f0000000400)=""/160}, {&(0x7f0000000340)=""/62}, {&(0x7f00000004c0)=""/73}, {&(0x7f0000000600)=""/201}, {&(0x7f0000000540)=""/15}, {&(0x7f0000000580)=""/1}, {&(0x7f0000000700)=""/189}, {&(0x7f00000007c0)=""/168}, {&(0x7f0000000880)=""/145}], 0x0, &(0x7f0000000a00)=""/146}, 0x4}, {{&(0x7f0000000ac0)=@isdn, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/26}, {&(0x7f0000000b80)=""/232}, {&(0x7f0000000c80)=""/88}, {&(0x7f0000000d00)=""/46}, {&(0x7f0000000d40)=""/224}, {&(0x7f0000000e40)=""/111}], 0x0, &(0x7f0000000f40)=""/168}}], 0xde0fddea64781a, 0x10002, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) (async) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x48, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x4c, 0xb6, 0xe8, 0x10, 0x10c5, 0x819a, 0x9591, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x5, 0x1, 0x400, 0x6, 0x7, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0xc4, 0xf}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x19, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x24, 0x86, 0x7}}]}}]}}]}}, 0x0) 4.474936104s ago: executing program 4 (id=913): r0 = epoll_create(0x5d10) pipe(&(0x7f0000000440)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x25a5, 0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x10}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.424389411s ago: executing program 2 (id=914): r0 = socket(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2134834, &(0x7f0000000d40)=ANY=[@ANYRES64=r8, @ANYRES64=r7, @ANYRESDEC=r3, @ANYRES64=r8, @ANYBLOB="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", @ANYRESOCT=r7, @ANYRESHEX=r0], 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYRES16=r4, @ANYRESDEC=0x0, @ANYRES64, @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 4.331398583s ago: executing program 3 (id=915): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sigaltstack(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x7, 0xffffffffffffffff}) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x32) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x26) close(r2) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) mmap(&(0x7f000092f000/0x3000)=nil, 0x3000, 0x2000002, 0x810, r3, 0xcb632000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) 4.182722753s ago: executing program 5 (id=916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x1e, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0x2, 0xfff3}, {0xb, 0xfff2}}, ["", "", "", "", "", ""]}, 0x24}}, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904", @ANYRESDEC=r1, @ANYRES8=r0], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f0000000180)=""/135) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b0001007470726f7879000014000280080002400000080c080001400000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x24044010) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000000c0)={@empty, @empty, 0x19, 0x2}}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4e982, 0x0) 3.640586646s ago: executing program 1 (id=917): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x401, 0xd, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x66c7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)={0x8248851b466bc885, 0x16, 0x6, "da441b5bdf3e"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) 3.454408676s ago: executing program 3 (id=918): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, 0x1}) io_uring_enter(r0, 0x242f, 0x11f7, 0x28, 0x0, 0x0) io_uring_enter(r0, 0x26c8, 0xe000000, 0x1, 0x0, 0x10) 3.298174463s ago: executing program 4 (id=919): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r0, 0x57fdb2f0a9f96757) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) (async) fcntl$lock(r3, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) (async) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[], 0x32600) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000000c0)={'batadv0\x00', {0x2, 0x4e23, @multicast1}}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x401064d0, &(0x7f0000000000)={0x5, 0x2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000003600)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0x8, @empty, 0x3}, 0x1c, 0x0}}, {{&(0x7f0000000700)={0xa, 0x4e24, 0x7, @loopback, 0xe0}, 0x1c, 0x0, 0x0, &(0x7f0000000e40)=ANY=[], 0x18}}], 0x2, 0x0) 3.208722701s ago: executing program 4 (id=920): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = getpgrp(0xffffffffffffffff) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x2, 0x5004) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x855, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040)) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x3, 0x7ff, 0x6, 0x8, 0x8000000000000000, r4}) bind$tipc(r5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) close_range(r0, 0xffffffffffffffff, 0x0) 3.126222974s ago: executing program 3 (id=921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/243, 0x0, 0x80a0000}) r2 = dup2(r1, r1) write$vhost_msg_v2(r2, &(0x7f0000000600)={0x2, 0x0, {&(0x7f00000001c0)=""/128, 0x80, 0x0, 0x2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000380)=0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000640)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xb, 0xffff}, {0xe, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800) recvmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000540)=""/234, 0xea}], 0x1}, 0x7}], 0x1, 0x1, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) 1.970822003s ago: executing program 3 (id=922): r0 = socket$inet(0x2, 0x3, 0x0) unshare(0x20000400) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="aaaaaaaaaa12000000000000080045000028006400000402717800000000e000000231009078e0000002000000020000000000000000"], 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000080)={@link_local, @local, @void, {@x25={0x805, {0x3, 0xe3, 0x13, "71dc3692b6baa468ac8eb77091672a060fd3adc716b238d45e1ed98c5ecc783354f6ab3af290493d6e0fcc1f77c875982542228674f998e237214f36bc02"}}}}, 0x0) 1.311232874s ago: executing program 2 (id=923): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x50, 0x408202) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000080)=0x3) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000140)=0x9) r2 = syz_open_dev$vivid(&(0x7f0000000180), 0x0, 0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x4, 0xa, 0x4, 0x2000, 0x8b29, {r3, r4/1000+60000}, {0x1, 0x2, 0xff, 0x4, 0x7, 0xd1, "0e615f4f"}, 0x101, 0x4, {}, 0xfffffffe}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000440)={0x7, 0x247, &(0x7f0000000280)="ac5ae3c2c5857bc7a911d38b8bb76e373ed11a97427f48275f1c2a7eac7a1dc56164514f1bb31470198cc1387f46a53c83c5012e4c2a64cf50e946f09020c52faea56c9f1aac645714ad2c0d67c50d10fef1fe199783dc3c008daff9a472c84bdf67ebf6bb9c372fa479eaadbbec13d9419518916248fb3d5164971ff1059d29aeaee52f43e9a7814400ffb9a5e935b68802", &(0x7f0000000340)="6624441287bef015dd79fff77b3b2546721935451b56ebd5e733b4545df42bf86d127f56fb538437a70dd068674e65fb1aafb013725f9b64fb77806a388b670db427184e7a87bd2869dce31c1ced4583906ee7b365c147b1c33e021afd8faf3d564c69c1b4cddde4d3bd2135350a45313e3eb4a40a82d5caf53844e34fbe279724a2655f765fdfae514e2fd124586c8a4303bf6c9f8b08cf8475c0bb1194eed228c90acc638fb5d8cd5b1f3083b07a6de23dc3dc8f722de108be64f46e86daf979845cd787a8fc", 0x92, 0xc7}) r6 = syz_open_dev$sndctrl(&(0x7f0000000480), 0x6, 0x248800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f00000004c0)={0x7ff, 0x401}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000600)={0xbaf5, 0x14, [{0xc}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0xc, 0x1}, {0xb, 0x1}, {0xa}, {0x1}, {0x3, 0x1}, {0x2}, {0xa}, {0xd}, {0x0, 0x1}, {0x6, 0x1}, {}, {0x4}, {0xb, 0x1}, {0xf}, {0x5}, {0xe, 0x1}]}) r7 = socket$netlink(0x10, 0x3, 0xa) listen(r7, 0x8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r7) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x23c, r8, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x58, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x54, 0x2, "2895b21ceac2e4173e8d792eb99ded276a399a55271b6346deadbcc297d8a09b85e7ed7e097842b3803af8626821fc6cdedabc617d7748be4e026cac39096ec779bbc2b1c068a652f1a8d016d73508b8"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xd5, 0x80, [@mic={0x8c, 0x10, {0xd63, "c084025dcb8b", @short="32d4040da385ebc4"}}, @fast_bss_trans={0x37, 0xb7, {0xc, 0x3, "a3e2abfbca1b91f5e3316f5f9a1a3489", "0ba453c261ece30bf4522916e8b5bd958f2813584e5853940c24c852273922b7", "c21bab6a1a88019780cf7a52c39279c2879e658a770e3458406610a434071b1e", [{0x3, 0x12, "30e4a6a66038c346654e4ebacf57bb2e48fc"}, {0x4, 0x28, "35f5b9d45d64e89164365d51061f8f1c30ba0ecf65bbccb547f956faf525e9e769a4c27175dafbe1"}, {0x3, 0x25, "c8207623e3f8e172f2095fed046e6a4cbeb54cfdb6fe5af70c9c9830401b5d8fde7f42ee98"}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x2}}]}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9, 0x3, "6ec4688b6f"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xe5, 0x7f, [@gcr_ga={0xbd, 0x6}, @channel_switch={0x25, 0x3, {0x1, 0x7c, 0x7}}, @preq={0x82, 0x46, {{0x0, 0x1}, 0x6, 0xf, 0xe0, @device_a, 0x26c, @void, 0x9, 0xfffffff2, 0x4, [{{0x1, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}}, {{}, @broadcast, 0xffff6e51}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x2}}, @preq={0x82, 0x4c, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x2, 0x44d, @broadcast, 0xfffffffe, @value=@broadcast, 0x1, 0xd, 0x4, [{{0x0, 0x0, 0x1}, @device_b, 0x299}, {{0x1, 0x0, 0x1}, @device_a, 0x7}, {{0x1}, @device_a, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x1}]}}, @random_vendor={0xdd, 0x36, "71d3a441d83bf56bcd7b53ebe1381c753c813abf783302ceefa05ecf50869ab4e535c6c1966de79cc3dcc857a109ea25eb904c46b4d8"}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x81}, 0xc010) r9 = syz_open_dev$sndpcmp(&(0x7f0000000980), 0x9, 0x6000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f00000009c0)={0x1, 0x9, 0x0, 0xfffffffffffffff8, 0x8, 0x3, 0x1, 0x0, 0x0, 0xffdb, 0x3, 0x3}) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x18c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdd5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x26f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x40890) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d40), r7) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r10, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20001}, 0x2400c005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r7) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000e80)=0x80000001) r11 = syz_open_dev$hiddev(&(0x7f0000000ec0), 0x202, 0x0) ioctl$HIDIOCGFLAG(r11, 0x8004480e, &(0x7f0000000f00)) statx(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', 0x0, 0x100, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r5, &(0x7f0000001140)={0xa0, 0x19, 0x2, {0x100, {0x2, 0x4, 0x6}, 0x0, r12, 0x0, 0x6, 0x5, 0x44da, 0x7, 0xffffffffffffffc0, 0x7fffffff, 0x1, 0x6, 0xffff, 0xff, 0x6, 0x5, 0x1, 0xa6, 0x1}}, 0xa0) 965.116537ms ago: executing program 3 (id=924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="106e7d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 718.839206ms ago: executing program 1 (id=925): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x84d00, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1, {0xfffc}}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fallocate(0xffffffffffffffff, 0x0, 0x3, 0x80000003) r9 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) 149.675007ms ago: executing program 2 (id=926): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f700000001090210000100000000090400000024e4d500"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000240)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f00000002c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {0x7, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r3, 0x2f, 0x3, 0x0, 0x80000000, 0x6f, @loopback, @private1, 0x20, 0x1, 0x5, 0xfffffff7}}) 0s ago: executing program 3 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) (async, rerun: 64) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000200)="a38d", 0x2) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) (async) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) (async, rerun: 32) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (rerun: 32) ftruncate(r8, 0x2007ffb) (async) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) r10 = creat(&(0x7f0000000500)='./bus\x00', 0x2) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x39777c09, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000440)='GPL\x00', 0x2, 0x1000, &(0x7f0000001480)=""/4096, 0x100, 0x4, '\x00', 0x0, @fallback=0x24, r9, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff]}, 0x94) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r12, 0x1276, 0x20000000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8a}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async, rerun: 64) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000400)={0x2, 0x0, [{0xe2}, {0x873, 0x0, 0x3}]}) (async) r13 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) kernel console output (not intermixed with test programs): : Mfr=0, Product=0, SerialNumber=3 [ 387.469246][ T5952] usb 4-1: SerialNumber: syz [ 387.558588][ T8507] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 387.567801][ T5930] cdc_subset 1-1:0.110: probe with driver cdc_subset failed with error -22 [ 387.727562][ T5952] usb 4-1: 0:2 : does not exist [ 387.809869][ T5952] usb 4-1: USB disconnect, device number 42 [ 388.010961][ T5930] usb 1-1: USB disconnect, device number 58 [ 388.321232][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 388.543458][ T8534] syzkaller1: entered promiscuous mode [ 388.550540][ T8534] syzkaller1: entered allmulticast mode [ 388.937125][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.949454][ T5930] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 388.976570][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.130596][ T5930] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 389.179442][ T5952] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 389.207034][ T5930] usb 2-1: config 0 has no interface number 1 [ 389.231020][ T5930] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.432028][ T5930] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 389.533838][ T5930] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 389.575929][ T30] audit: type=1326 audit(1758719207.493:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 389.640795][ T5930] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.772871][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 389.789691][ T30] audit: type=1326 audit(1758719207.493:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 389.849446][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 46363, setting to 64 [ 389.886358][ T5930] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 389.907679][ T30] audit: type=1326 audit(1758719207.493:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 389.955073][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.009098][ T5930] usb 2-1: Product: syz [ 390.029517][ T5930] usb 2-1: Manufacturer: syz [ 390.056887][ T5930] usb 2-1: SerialNumber: syz [ 390.101317][ T5930] usb 2-1: config 0 descriptor?? [ 390.106598][ T30] audit: type=1326 audit(1758719207.503:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 390.219443][ T30] audit: type=1326 audit(1758719207.513:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 390.262256][ T5952] usb 4-1: device descriptor read/64, error -71 [ 390.300719][ T8534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 390.314984][ T5930] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.343193][ T30] audit: type=1326 audit(1758719207.513:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 390.417463][ T5930] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.435143][ T30] audit: type=1326 audit(1758719207.513:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 390.519430][ T30] audit: type=1326 audit(1758719207.513:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 390.670820][ T30] audit: type=1326 audit(1758719207.543:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 391.390104][ T30] audit: type=1326 audit(1758719207.543:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 391.578727][ T8580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 391.603852][ T8580] block device autoloading is deprecated and will be removed. [ 391.695590][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 391.786277][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 391.798997][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 392.173677][ T45] usb 2-1: USB disconnect, device number 40 [ 392.789882][ T45] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 392.952282][ T8611] loop3: detected capacity change from 0 to 7 [ 392.992350][ T45] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 393.003152][ T8611] Dev loop3: unable to read RDB block 7 [ 393.005801][ T45] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 393.040254][ T8611] loop3: unable to read partition table [ 393.046778][ T8611] loop3: partition table beyond EOD, truncated [ 393.066406][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 393.079816][ T8611] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 393.114104][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 393.192580][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 393.221930][ T45] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 393.238470][ T45] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 393.270397][ T45] usb 2-1: Product: syz [ 393.279515][ T45] usb 2-1: Manufacturer: syz [ 393.311401][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 393.316759][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 393.335541][ T8618] netlink: 'syz.0.650': attribute type 46 has an invalid length. [ 393.347581][ T45] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 393.364048][ T8621] loop2: detected capacity change from 0 to 231 [ 393.375371][ T45] cdc_wdm 2-1:1.0: Unknown control protocol [ 393.383289][ T8621] loop2: [ 393.429559][ T5863] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 393.563336][ T5863] usb 3-1: device descriptor read/64, error -71 [ 393.639607][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 393.819881][ T5863] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 393.835931][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 393.848392][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.861285][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.876559][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 393.894320][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.904285][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.916331][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 393.924489][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.934403][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.945895][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 393.956501][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.959622][ T5863] usb 3-1: device descriptor read/64, error -71 [ 393.965665][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.984608][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.005414][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.022619][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.036754][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.044059][ T5930] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 394.058997][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.069035][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.085946][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.094390][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.112193][ T5863] usb usb3-port1: attempt power cycle [ 394.123465][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.124990][ T8641] syzkaller0: entered promiscuous mode [ 394.136601][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.151806][ T8641] syzkaller0: entered allmulticast mode [ 394.154215][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.189763][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 394.201592][ T45] usb 2-1: USB disconnect, device number 41 [ 394.211550][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.222347][ T5930] usb 5-1: config 10 has an invalid interface number: 234 but max is 0 [ 394.247255][ T5930] usb 5-1: config 10 has no interface number 0 [ 394.264544][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 394.309473][ T5930] usb 5-1: config 10 interface 234 has no altsetting 0 [ 394.333956][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 394.354000][ T5930] usb 5-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=25.db [ 394.383671][ T9] usb 1-1: Product: syz [ 394.390136][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.402854][ T9] usb 1-1: Manufacturer: syz [ 394.413946][ T9] usb 1-1: SerialNumber: syz [ 394.420704][ T5930] usb 5-1: Product: syz [ 394.432995][ T5930] usb 5-1: Manufacturer: syz [ 394.495306][ T9] usb 1-1: config 0 descriptor?? [ 394.499497][ T5863] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 394.504243][ T5930] usb 5-1: SerialNumber: syz [ 394.535092][ T5863] usb 3-1: device descriptor read/8, error -71 [ 394.550108][ T9] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 394.759750][ T5930] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251 [ 394.775798][ T5930] gspca_sn9c20x: Write register 1000 failed -71 [ 394.782450][ T5863] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 394.791193][ T5930] gspca_sn9c20x: Device initialization failed [ 394.811190][ T5863] usb 3-1: device descriptor read/8, error -71 [ 394.815203][ T5930] gspca_sn9c20x 5-1:10.234: probe with driver gspca_sn9c20x failed with error -71 [ 394.912910][ T5930] usb 5-1: USB disconnect, device number 43 [ 394.920942][ T5863] usb usb3-port1: unable to enumerate USB device [ 395.118349][ T8656] program syz.1.658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.218611][ T5952] usb 1-1: USB disconnect, device number 59 [ 395.379435][ T5863] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 395.402619][ T8658] syzkaller1: entered promiscuous mode [ 395.427508][ T8658] syzkaller1: entered allmulticast mode [ 395.476136][ T8659] netlink: 256 bytes leftover after parsing attributes in process `syz.4.659'. [ 395.507744][ T8659] unsupported nlmsg_type 40 [ 395.534734][ T5863] usb 2-1: Using ep0 maxpacket: 8 [ 395.553173][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 395.568151][ T5863] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 395.577612][ T5863] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 395.587171][ T5863] usb 2-1: Product: syz [ 395.595829][ T5863] usb 2-1: Manufacturer: syz [ 395.603493][ T5863] usb 2-1: SerialNumber: syz [ 395.752153][ T8661] loop3: detected capacity change from 0 to 7 [ 395.761154][ T8661] Dev loop3: unable to read RDB block 7 [ 395.767566][ T8661] loop3: unable to read partition table [ 395.778884][ T8661] loop3: partition table beyond EOD, truncated [ 395.785901][ T8661] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 395.861011][ T5863] usb 2-1: Invalid connection information received from device [ 396.064788][ T5930] usb 2-1: USB disconnect, device number 42 [ 396.248646][ T8665] xt_l2tp: missing protocol rule (udp|l2tpip) [ 396.658715][ T5952] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 396.665735][ T5930] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 396.755992][ T8676] netlink: 'syz.0.666': attribute type 64 has an invalid length. [ 396.819457][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.666'. [ 396.836280][ T5930] usb 5-1: config 0 has an invalid interface number: 210 but max is 0 [ 396.848817][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.908897][ T5930] usb 5-1: config 0 has no interface number 0 [ 396.911768][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.916338][ T5930] usb 5-1: config 0 interface 210 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 396.943668][ T5930] usb 5-1: config 0 interface 210 has no altsetting 0 [ 397.245369][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.263505][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.322576][ T45] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 397.417558][ T5930] usb 5-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=4d.c4 [ 397.427252][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.435778][ T5930] usb 5-1: Product: syz [ 397.440532][ T5930] usb 5-1: Manufacturer: syz [ 397.445417][ T5930] usb 5-1: SerialNumber: syz [ 397.475185][ T5930] usb 5-1: config 0 descriptor?? [ 397.495705][ T8672] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.511494][ T5930] em28xx 5-1:0.210: New device syz syz @ 12 Mbps (2013:8461, interface 210, class 210) [ 397.545550][ T5930] em28xx 5-1:0.210: Device initialization failed. [ 397.545573][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 397.726417][ T5930] em28xx 5-1:0.210: Device must be connected to a high-speed USB 2.0 port. [ 397.828013][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.882709][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.906361][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 397.924768][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 397.947112][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.029042][ T45] usb 2-1: config 0 descriptor?? [ 398.305907][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 398.337075][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 398.371071][ T45] usb 2-1: USB disconnect, device number 43 [ 399.339407][ T5930] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 399.359501][ T5952] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 399.419881][ T9] usb 5-1: USB disconnect, device number 44 [ 399.520803][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.542722][ T5952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 399.569706][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.580776][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.609819][ T5930] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 399.619663][ T5952] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.639406][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.659387][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 399.701196][ T5930] usb 3-1: config 0 descriptor?? [ 399.706482][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 399.766721][ T5952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 399.776973][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.789449][ T5952] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.809542][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 399.826604][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 399.858290][ T5952] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 399.876531][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 399.929375][ T5952] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.942045][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'. [ 399.970898][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 399.989042][ T5952] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 400.024738][ T5952] usb 2-1: string descriptor 0 read error: -22 [ 400.044332][ T5952] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 400.083643][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.134005][ T5952] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 400.177318][ T5930] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 400.260519][ T5930] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 400.269069][ T5930] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT submitted - nothing to read [ 400.347149][ T5930] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 400.347695][ T45] usb 2-1: USB disconnect, device number 44 [ 400.381776][ T24] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 400.438555][ T5930] usb 3-1: USB disconnect, device number 44 [ 400.477296][ T5930] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 400.515230][ T8737] fido_id[8737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 400.564558][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.588177][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.619118][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 400.638618][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 400.647987][ T24] usb 4-1: can't read configurations, error -71 [ 400.879857][ T5952] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 401.073965][ T5952] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.084500][ T5952] usb 1-1: config 0 interface 0 has no altsetting 0 [ 401.175847][ T5952] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 401.431213][ T8750] fuse: Unknown parameter 'D21QIM&hE97}-HGl.'@ڭE9?C 1 [ 406.238768][ T5930] usb 2-1: config 5 interface 92 has no altsetting 0 [ 406.238795][ T5930] usb 2-1: config 5 interface 36 has no altsetting 0 [ 406.257586][ T5930] usb 2-1: New USB device found, idVendor=16d8, idProduct=7251, bcdDevice=92.50 [ 406.258888][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.277434][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.293573][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.296437][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.304119][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.323706][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 406.323804][ T5930] usb 2-1: Product: И [ 406.335256][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.343965][ T45] usb 4-1: Product: syz [ 406.348506][ T45] usb 4-1: Manufacturer: syz [ 406.353316][ T45] usb 4-1: SerialNumber: syz [ 406.375957][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 406.401152][ T8791] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 406.411013][ T45] cdc_mbim 4-1:1.0: skipping garbage [ 406.422298][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.464056][ T5930] usb 2-1: Manufacturer: ࠖ [ 406.474307][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.487571][ T5930] usb 2-1: SerialNumber: Д [ 406.515626][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 406.537899][ T8787] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 406.568311][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.599133][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.624369][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 406.637216][ T8791] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 406.650908][ T8791] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 406.685333][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.698344][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.721931][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 406.756480][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.788956][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.818504][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 406.843352][ T5930] option 2-1:5.92: GSM modem (1-port) converter detected [ 406.894137][ T45] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 406.905612][ T5930] option 2-1:5.36: GSM modem (1-port) converter detected [ 406.917194][ T9] usb 5-1: unable to read config index 4 descriptor/start: -71 [ 406.931363][ T45] cdc_mbim 4-1:1.0: bind() failure [ 406.944616][ T9] usb 5-1: can't read configurations, error -71 [ 406.980014][ T45] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 406.986886][ T45] cdc_ncm 4-1:1.1: bind() failure [ 407.002131][ T5930] usb 2-1: USB disconnect, device number 45 [ 407.078923][ T5930] option 2-1:5.92: device disconnected [ 407.115844][ T5930] option 2-1:5.36: device disconnected [ 407.359564][ T60] bond0 (unregistering): Released all slaves [ 407.826450][ T60] bond1 (unregistering): Released all slaves [ 408.179255][ T8829] netlink: 'syz.2.703': attribute type 64 has an invalid length. [ 408.192221][ T8829] netlink: 32 bytes leftover after parsing attributes in process `syz.2.703'. [ 408.420394][ T5866] Bluetooth: hci2: command tx timeout [ 408.659977][ T60] tipc: Left network mode [ 408.723508][ T5863] usb 4-1: USB disconnect, device number 47 [ 408.959724][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 409.198421][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'. [ 409.606397][ T8846] macsec0: left allmulticast mode [ 409.620004][ T8846] veth1_macvtap: left allmulticast mode [ 409.628038][ T8846] macsec0: left promiscuous mode [ 409.666675][ T8846] bridge0: port 3(macsec0) entered disabled state [ 409.763454][ T8846] bridge_slave_1: left allmulticast mode [ 409.773698][ T8846] bridge_slave_1: left promiscuous mode [ 409.780747][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.821981][ T8846] bridge_slave_0: left allmulticast mode [ 409.867599][ T8846] bridge_slave_0: left promiscuous mode [ 409.893288][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.170294][ T8864] loop5: detected capacity change from 0 to 7 [ 410.214246][ T8864] loop5: [ 410.217275][ T8864] loop5: partition table partially beyond EOD, truncated [ 410.489093][ T5866] Bluetooth: hci2: command tx timeout [ 410.542648][ T60] hsr_slave_0: left promiscuous mode [ 410.552061][ T8878] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 410.573088][ T60] hsr_slave_1: left promiscuous mode [ 410.619691][ T60] veth1_macvtap: left promiscuous mode [ 410.625412][ T60] veth0_macvtap: left promiscuous mode [ 410.643158][ T60] veth1_vlan: left promiscuous mode [ 410.648567][ T60] veth0_vlan: left promiscuous mode [ 410.770052][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 410.930067][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 410.944693][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 410.955281][ T9] usb 3-1: config 8 has an invalid interface number: 52 but max is 0 [ 410.964358][ T9] usb 3-1: config 8 has no interface number 0 [ 410.970735][ T9] usb 3-1: too many endpoints for config 8 interface 52 altsetting 100: 52, using maximum allowed: 30 [ 411.002081][ T9] usb 3-1: config 8 interface 52 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 411.034965][ T9] usb 3-1: config 8 interface 52 has no altsetting 0 [ 411.049060][ T9] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 411.058667][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.074969][ T9] usb 3-1: Product: syz [ 411.080085][ T9] usb 3-1: Manufacturer: syz [ 411.085597][ T9] usb 3-1: SerialNumber: syz [ 411.227887][ T8885] netlink: 100 bytes leftover after parsing attributes in process `syz.1.711'. [ 412.600160][ T5866] Bluetooth: hci2: command tx timeout [ 412.859107][ T8878] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 413.321092][ T8894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.364238][ T8893] tipc: Enabling of bearer rejected, failed to enable media [ 413.391551][ T8894] fuse: Unknown parameter 'mGN8oad' [ 413.430569][ T45] IPVS: starting estimator thread 0... [ 413.540078][ T8898] IPVS: using max 47 ests per chain, 112800 per kthread [ 413.667180][ T8805] chnl_net:caif_netlink_parms(): no params data found [ 413.734407][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 413.735965][ T30] audit: type=1800 audit(1758719231.683:50): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.715" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 413.916935][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 413.988787][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 414.010831][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 414.316344][ T8913] netlink: 32 bytes leftover after parsing attributes in process `syz.1.716'. [ 414.476903][ T9] usb 3-1: selecting invalid altsetting 1 [ 414.483803][ T9] catc 3-1:8.52: Can't set altsetting 1. [ 414.560521][ T9] catc 3-1:8.52: probe with driver catc failed with error -5 [ 414.623582][ T9] usb 3-1: USB disconnect, device number 45 [ 414.649446][ T5866] Bluetooth: hci2: command tx timeout [ 414.652445][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.680786][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.691696][ T8805] bridge_slave_0: entered allmulticast mode [ 414.700525][ T8805] bridge_slave_0: entered promiscuous mode [ 414.712246][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.726882][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.734699][ T8805] bridge_slave_1: entered allmulticast mode [ 414.746085][ T8805] bridge_slave_1: entered promiscuous mode [ 415.129416][ T45] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 415.266034][ T8805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.313759][ T8805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.339548][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 415.346888][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 415.381842][ T45] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 415.416063][ T45] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.425457][ T45] usb 4-1: Product: syz [ 415.440779][ T45] usb 4-1: Manufacturer: syz [ 415.445532][ T45] usb 4-1: SerialNumber: syz [ 415.450273][ T5863] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 415.486476][ T45] usb 4-1: config 0 descriptor?? [ 415.500389][ T8926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 415.509875][ T45] hub 4-1:0.0: bad descriptor, ignoring hub [ 415.515876][ T45] hub 4-1:0.0: probe with driver hub failed with error -5 [ 415.530869][ T8805] team0: Port device team_slave_0 added [ 415.547411][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 415.565674][ T8805] team0: Port device team_slave_1 added [ 415.609382][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 415.617126][ T5863] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 415.631048][ T5863] usb 2-1: config 0 has no interface number 0 [ 415.654573][ T5863] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 415.664404][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.673677][ T5863] usb 2-1: Product: syz [ 415.678085][ T5863] usb 2-1: Manufacturer: syz [ 415.680597][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.690819][ T5863] usb 2-1: SerialNumber: syz [ 415.709257][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.709474][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 415.737196][ T5863] usb 2-1: config 0 descriptor?? [ 415.767435][ T8805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.767495][ T5863] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 415.794879][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.802677][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.829420][ T6101] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 415.837632][ T8805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.909183][ T8805] hsr_slave_0: entered promiscuous mode [ 415.916355][ T8805] hsr_slave_1: entered promiscuous mode [ 415.929708][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 415.938326][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.962184][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.982543][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 415.993596][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.031037][ T24] usb 3-1: config 0 descriptor?? [ 416.046514][ T6101] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 416.055282][ T6101] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 416.072962][ T6101] usb 5-1: config 171 has no interface number 0 [ 416.107708][ T24] hub 3-1:0.0: USB hub found [ 416.117943][ T6101] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 416.135232][ T6101] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 416.147767][ T6101] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 416.176596][ T6101] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 416.194110][ T6101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.219486][ T6101] usb 5-1: Product: syz [ 416.223752][ T6101] usb 5-1: Manufacturer: syz [ 416.239727][ T6101] usb 5-1: SerialNumber: syz [ 416.271235][ T8941] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 416.312769][ T24] hub 3-1:0.0: 1 port detected [ 416.438472][ T8805] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.468094][ T8805] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 416.504642][ T8805] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 416.528289][ T8805] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 416.546807][ T6101] ath6kl: Failed to submit usb control message: -71 [ 416.569216][ T6101] ath6kl: unable to send the bmi data to the device: -71 [ 416.594689][ T6101] ath6kl: Unable to send get target info: -71 [ 416.637324][ T6101] ath6kl: Failed to init ath6kl core: -71 [ 416.655769][ T6101] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 416.726228][ T5952] usb 4-1: USB disconnect, device number 48 [ 416.730802][ T6101] usb 5-1: USB disconnect, device number 48 [ 416.885955][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.918385][ T24] hub 3-1:0.0: activate --> -90 [ 416.961919][ T8805] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.983905][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.991432][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.054675][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.061941][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.251101][ T8805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.259751][ T5952] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 417.309670][ T5863] gspca_topro: reg_w err -110 [ 417.341942][ T5863] gspca_topro: Sensor soi763a [ 417.446807][ T8805] veth0_vlan: entered promiscuous mode [ 417.470549][ T5952] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 417.499541][ T5952] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 417.526812][ T5952] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 417.544076][ T8805] veth1_vlan: entered promiscuous mode [ 417.603031][ T5952] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.631148][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.639201][ T5952] usb 4-1: Product: syz [ 417.683945][ T5930] usb 2-1: USB disconnect, device number 46 [ 417.704212][ T8805] veth0_macvtap: entered promiscuous mode [ 417.719927][ T5952] usb 4-1: Manufacturer: syz [ 417.724597][ T5952] usb 4-1: SerialNumber: syz [ 417.806660][ T8805] veth1_macvtap: entered promiscuous mode [ 417.835830][ T30] audit: type=1326 audit(1758719235.783:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.1.725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f801798eec9 code=0x80000000 [ 417.952892][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.989437][ T5937] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 417.991496][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.997629][ T5952] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 418.056628][ T5952] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 418.070332][ T5952] usb 4-1: found format II with max.bitrate = 128, frame size=0 [ 418.078431][ T5952] usb 4-1: 2:1: All rates were zero [ 418.126771][ T5952] usb 4-1: USB disconnect, device number 49 [ 418.157941][ T1028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.216015][ T1157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.229435][ T5937] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1983, setting to 1024 [ 418.251284][ T8455] udevd[8455]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.254244][ T24] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 418.277805][ T5937] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 418.288173][ T1157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.298210][ T5937] usb 5-1: config 1 interface 0 has no altsetting 0 [ 418.306723][ T1157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.308221][ T24] usb 3-1-port1: connect-debounce failed [ 418.333144][ T5937] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 418.359165][ T24] usb 3-1-port1: cannot disable (err = -32) [ 418.365640][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.418863][ T5937] usb 5-1: Product: syz [ 418.430184][ T5937] usb 5-1: Manufacturer: syz [ 418.434886][ T5937] usb 5-1: SerialNumber: syz [ 418.461531][ T8976] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 418.502361][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.523208][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.609755][ T5952] usb 3-1: USB disconnect, device number 46 [ 418.662799][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.686323][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.144461][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.695'. [ 420.436020][ T5952] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 420.486593][ T5937] usb 5-1: USB disconnect, device number 49 [ 420.606376][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.621167][ T5952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.635068][ T5952] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 420.654601][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.825893][ T5952] usb 3-1: config 0 descriptor?? [ 421.287570][ T5952] megaworld 0003:07B5:0312.000D: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 421.355060][ T5952] megaworld 0003:07B5:0312.000D: no inputs found [ 421.551384][ T5952] usb 3-1: USB disconnect, device number 47 [ 421.816160][ T9008] fido_id[9008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 421.842185][ T9013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.099966][ T5863] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 422.259706][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 422.275833][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 422.287246][ T5863] usb 4-1: config 0 has no interface number 0 [ 422.316694][ T5863] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 422.337518][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.349180][ T5863] usb 4-1: Product: syz [ 422.356049][ T5863] usb 4-1: Manufacturer: syz [ 422.377688][ T5863] usb 4-1: SerialNumber: syz [ 422.457503][ T5863] usb 4-1: config 0 descriptor?? [ 422.477474][ T5863] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 422.951109][ T9026] kvm: user requested TSC rate below hardware speed [ 422.968051][ T9026] FAULT_INJECTION: forcing a failure. [ 422.968051][ T9026] name failslab, interval 1, probability 0, space 0, times 1 [ 422.995636][ T9026] CPU: 1 UID: 0 PID: 9026 Comm: syz.5.734 Not tainted syzkaller #0 PREEMPT(full) [ 422.995667][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.995678][ T9026] Call Trace: [ 422.995687][ T9026] [ 422.995697][ T9026] dump_stack_lvl+0x189/0x250 [ 422.995733][ T9026] ? __pfx____ratelimit+0x10/0x10 [ 422.995755][ T9026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.995779][ T9026] ? __pfx__printk+0x10/0x10 [ 422.995809][ T9026] ? __pfx___might_resched+0x10/0x10 [ 422.995856][ T9026] ? fs_reclaim_acquire+0x7d/0x100 [ 422.995882][ T9026] should_fail_ex+0x414/0x560 [ 422.995915][ T9026] should_failslab+0xa8/0x100 [ 422.995945][ T9026] __kmalloc_noprof+0xcb/0x4f0 [ 422.995978][ T9026] ? tomoyo_encode+0x28b/0x550 [ 422.996001][ T9026] tomoyo_encode+0x28b/0x550 [ 422.996028][ T9026] tomoyo_realpath_from_path+0x58d/0x5d0 [ 422.996052][ T9026] ? tomoyo_domain+0xd9/0x130 [ 422.996081][ T9026] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 422.996108][ T9026] tomoyo_path_number_perm+0x1e8/0x5a0 [ 422.996140][ T9026] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 422.996196][ T9026] ? __lock_acquire+0xab9/0xd20 [ 422.996243][ T9026] ? __fget_files+0x2a/0x420 [ 422.996264][ T9026] ? __fget_files+0x2a/0x420 [ 422.996280][ T9026] ? __fget_files+0x3a0/0x420 [ 422.996297][ T9026] ? __fget_files+0x2a/0x420 [ 422.996319][ T9026] security_file_ioctl+0xcb/0x2d0 [ 422.996348][ T9026] __se_sys_ioctl+0x47/0x170 [ 422.996377][ T9026] do_syscall_64+0xfa/0x3b0 [ 422.996399][ T9026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.996417][ T9026] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.996451][ T9026] ? clear_bhb_loop+0x60/0xb0 [ 422.996485][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.996504][ T9026] RIP: 0033:0x7f8d5c38eec9 [ 422.996523][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.996548][ T9026] RSP: 002b:00007f8d5d171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.996577][ T9026] RAX: ffffffffffffffda RBX: 00007f8d5c5e5fa0 RCX: 00007f8d5c38eec9 [ 422.996591][ T9026] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 422.996602][ T9026] RBP: 00007f8d5d171090 R08: 0000000000000000 R09: 0000000000000000 [ 422.996614][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.996625][ T9026] R13: 00007f8d5c5e6038 R14: 00007f8d5c5e5fa0 R15: 00007f8d5c70fa28 [ 422.996659][ T9026] [ 422.997903][ T9026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 423.605997][ T9033] netlink: 'syz.5.736': attribute type 64 has an invalid length. [ 423.651000][ T9033] netlink: 32 bytes leftover after parsing attributes in process `syz.5.736'. [ 423.769677][ T5863] gspca_spca1528: reg_w err -110 [ 423.889546][ T5863] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 424.062852][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.736'. [ 424.619731][ T6101] usb 4-1: USB disconnect, device number 50 [ 424.938042][ T9043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 425.741500][ T30] audit: type=1326 audit(1758719243.673:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 425.824234][ T30] audit: type=1326 audit(1758719243.673:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 426.432062][ T30] audit: type=1326 audit(1758719243.673:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 426.458210][ T30] audit: type=1326 audit(1758719243.673:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 426.459588][ T6101] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 426.480717][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.505492][ T30] audit: type=1326 audit(1758719243.673:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 426.747172][ T30] audit: type=1326 audit(1758719243.673:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 426.866231][ T30] audit: type=1326 audit(1758719243.673:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 426.931841][ T6101] usb 5-1: Using ep0 maxpacket: 16 [ 426.972933][ T6101] usb 5-1: config index 0 descriptor too short (expected 57892, got 36) [ 426.992867][ T6101] usb 5-1: config 207 has too many interfaces: 168, using maximum allowed: 32 [ 426.999521][ T30] audit: type=1326 audit(1758719243.673:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 427.030670][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.055440][ T30] audit: type=1326 audit(1758719243.673:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 427.128461][ T6101] usb 5-1: config 207 has an invalid descriptor of length 0, skipping remainder of the config [ 427.173522][ T6101] usb 5-1: config 207 has 0 interfaces, different from the descriptor's value: 168 [ 427.188780][ T6101] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 427.267641][ T9088] vti0: entered promiscuous mode [ 427.326059][ T9088] vti0: entered allmulticast mode [ 427.385987][ T30] audit: type=1326 audit(1758719243.673:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9061 comm="syz.3.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 427.445997][ T6101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.589929][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 427.845041][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 428.450368][ T9073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.507004][ T9109] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 428.794546][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 429.820416][ T6101] usb 5-1: string descriptor 0 read error: -71 [ 429.838784][ T6101] usb 5-1: USB disconnect, device number 50 [ 430.125873][ T9133] loop5: detected capacity change from 0 to 7 [ 430.134615][ T9133] loop5: [ 430.144656][ T9133] loop5: partition table partially beyond EOD, truncated [ 430.329512][ T6101] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 430.549706][ T6101] usb 2-1: Using ep0 maxpacket: 32 [ 430.595329][ T6101] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 430.640481][ T6101] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 430.686926][ T6101] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 430.756359][ T6101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 430.779634][ T5863] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 430.846666][ T6101] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 430.874756][ T6101] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 430.957339][ T9142] kvm: user requested TSC rate below hardware speed [ 430.965538][ T6101] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 430.980117][ T5863] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 431.032780][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 431.055820][ T6101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.067732][ T5863] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 431.078952][ T6101] usb 2-1: config 0 descriptor?? [ 431.099449][ T5863] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 431.108839][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.119999][ T5863] usb 5-1: Product: syz [ 431.130129][ T5863] usb 5-1: Manufacturer: syz [ 431.163133][ T5863] usb 5-1: SerialNumber: syz [ 431.250609][ T5863] usb 5-1: config 0 descriptor?? [ 431.273056][ T9139] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 431.290681][ T9139] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 431.308773][ T6101] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 431.326317][ T9130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.361978][ T5863] usb 5-1: ucan: probing device on interface #0 [ 431.372533][ T9130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.528958][ T5952] usb 2-1: USB disconnect, device number 47 [ 431.551040][ T5952] usblp0: removed [ 431.615002][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 431.641498][ T6101] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 431.659491][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 431.693933][ T24] usb 6-1: can't read configurations, error -71 [ 431.869909][ T6101] usb 3-1: Invalid ep0 maxpacket: 64 [ 431.989557][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 432.020043][ T6101] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 432.167369][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.204398][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.205303][ T6101] usb 3-1: Invalid ep0 maxpacket: 64 [ 432.239824][ T5863] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 432.249611][ T6101] usb usb3-port1: attempt power cycle [ 432.280375][ T5863] usb 5-1: USB disconnect, device number 51 [ 432.317862][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.339475][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.359038][ T9] usb 4-1: Product: syz [ 432.401733][ T9] usb 4-1: Manufacturer: syz [ 432.426862][ T9] usb 4-1: SerialNumber: syz [ 432.609480][ T6101] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 432.643814][ T6101] usb 3-1: Invalid ep0 maxpacket: 64 [ 432.651532][ T9] cdc_ncm 4-1:1.0: bind() failure [ 432.712032][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 432.726391][ T9] cdc_ncm 4-1:1.1: bind() failure [ 432.742070][ T9] usb 4-1: USB disconnect, device number 51 [ 432.781689][ T8587] udevd[8587]: setting owner of /dev/bus/usb/004/051 to uid=0, gid=0 failed: No such file or directory [ 432.809438][ T6101] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 432.851587][ T6101] usb 3-1: Invalid ep0 maxpacket: 64 [ 432.859493][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 432.887717][ T6101] usb usb3-port1: unable to enumerate USB device [ 432.943005][ T9188] loop5: detected capacity change from 0 to 7 [ 432.965296][ T8455] loop5: [ 432.968505][ T8455] loop5: partition table partially beyond EOD, truncated [ 432.988219][ T9188] loop5: [ 432.996063][ T9188] loop5: partition table partially beyond EOD, truncated [ 433.064005][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 433.082364][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.117217][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.149451][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 433.183300][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.247475][ T24] usb 6-1: config 0 descriptor?? [ 433.696148][ T9212] binder: 9211:9212 ioctl c00c620f 200000000100 returned -22 [ 433.720562][ T24] ft260 0003:0403:6030.000E: unknown main item tag 0x7 [ 433.884363][ T24] ft260 0003:0403:6030.000E: chip code: 6424 8183 [ 433.940115][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 434.118711][ T9] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 434.143171][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.197600][ T9] usb 5-1: config 0 has no interface number 0 [ 434.226780][ T9] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 434.259087][ T9] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.284670][ T9219] netlink: 44 bytes leftover after parsing attributes in process `syz.3.774'. [ 434.361043][ T9] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 434.380637][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.413966][ T9] usb 5-1: Product: syz [ 434.418292][ T9] usb 5-1: Manufacturer: syz [ 434.445634][ T9] usb 5-1: SerialNumber: syz [ 434.458681][ T9] usb 5-1: config 0 descriptor?? [ 434.606989][ T9226] vivid-000: disconnect [ 434.659923][ T9225] vivid-000: reconnect [ 434.850551][ T9233] netlink: 32 bytes leftover after parsing attributes in process `syz.4.772'. [ 434.856418][ T24] usb 6-1: USB disconnect, device number 4 [ 434.889532][ T9233] netlink: 152 bytes leftover after parsing attributes in process `syz.4.772'. [ 434.922396][ T9233] netlink: 152 bytes leftover after parsing attributes in process `syz.4.772'. [ 435.104417][ T9239] loop5: detected capacity change from 0 to 7 [ 435.127229][ T9239] loop5: [ 435.136733][ T9239] loop5: partition table partially beyond EOD, truncated [ 435.511535][ T5863] usb 5-1: USB disconnect, device number 52 [ 435.540174][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 435.839584][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 435.850944][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 435.993068][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 436.046630][ T24] usb 2-1: can't read configurations, error -61 [ 436.291361][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 436.699597][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 436.753170][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 436.796933][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 436.819354][ T24] usb 2-1: can't read configurations, error -61 [ 436.889021][ T24] usb usb2-port1: attempt power cycle [ 437.220904][ T5863] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 437.259591][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 437.315613][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 437.358240][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 437.390044][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 437.399459][ T24] usb 2-1: can't read configurations, error -61 [ 437.494776][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.524894][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 437.547820][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 437.601676][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 437.665008][ T5863] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 437.687398][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.695825][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 437.706238][ T5863] usb 5-1: Product: syz [ 437.712489][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 437.726383][ T5863] usb 5-1: Manufacturer: syz [ 437.731242][ T5863] usb 5-1: SerialNumber: syz [ 437.739818][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 437.747569][ T24] usb 2-1: can't read configurations, error -61 [ 437.754278][ T24] usb usb2-port1: unable to enumerate USB device [ 437.780062][ T5863] usb 5-1: config 0 descriptor?? [ 437.807007][ T5863] usb 5-1: ucan: probing device on interface #0 [ 437.830514][ T5863] usb 5-1: ucan: invalid EP count (1) [ 437.876734][ T5863] usb 5-1: ucan: probe failed; try to update the device firmware [ 438.047053][ T9291] vcan0: tx drop: invalid da for name 0x0000000200000004 [ 438.192583][ T9291] vcan0: tx drop: invalid da for name 0x0000000200000004 [ 438.233980][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dd9e800: rx timeout, send abort [ 438.405271][ T9291] vcan0: tx drop: invalid da for name 0x0000000200000004 [ 438.570373][ T9293] syz.2.789 (9293): drop_caches: 2 [ 438.734075][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dd9ec00: rx timeout, send abort [ 438.742638][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dd9e800: abort rx timeout. Force session deactivation [ 438.969429][ T5952] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 439.081324][ T9309] loop5: detected capacity change from 0 to 7 [ 439.094761][ T9309] loop5: [ 439.154038][ T9301] can: request_module (can-proto-4) failed. [ 439.180040][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 439.190382][ T9309] loop5: partition table partially beyond EOD, truncated [ 439.193740][ T5952] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 439.242415][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dd9ec00: abort rx timeout. Force session deactivation [ 439.256143][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.287228][ T5952] usb 2-1: Product: syz [ 439.300874][ T5952] usb 2-1: Manufacturer: syz [ 439.329590][ T5952] usb 2-1: SerialNumber: syz [ 439.359268][ T5952] usb 2-1: config 0 descriptor?? [ 439.420240][ T5952] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 439.710594][ T9299] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 440.052970][ T5952] gp8psk: usb in 128 operation failed. [ 440.221034][ T5952] gp8psk: usb in 137 operation failed. [ 440.226783][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.246112][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.261053][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.265954][ T5952] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 440.364105][ T5952] usb 2-1: media controller created [ 440.449614][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 440.556901][ T6101] usb 5-1: USB disconnect, device number 53 [ 440.573225][ T5863] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 440.602097][ T24] usb 6-1: device descriptor read/64, error -71 [ 440.663335][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.759428][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 440.797943][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.835669][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.859600][ T9327] loop3: detected capacity change from 0 to 7 [ 440.865069][ T5863] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 440.868200][ T5952] gp8psk_fe: Frontend revision 1 attached [ 440.878307][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.890822][ T8455] Dev loop3: unable to read RDB block 7 [ 440.896417][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 440.905389][ T8455] loop3: unable to read partition table [ 440.917276][ T8455] loop3: partition table beyond EOD, truncated [ 440.925593][ T5952] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 440.937870][ T9327] Dev loop3: unable to read RDB block 7 [ 440.951644][ T9327] loop3: unable to read partition table [ 440.963280][ T9327] loop3: partition table beyond EOD, truncated [ 440.965591][ T5863] usb 4-1: config 0 descriptor?? [ 440.992589][ T5952] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 441.014568][ T9327] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 441.040550][ T24] usb 6-1: device descriptor read/64, error -71 [ 441.047195][ T6101] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 441.190495][ T24] usb usb6-port1: attempt power cycle [ 441.239411][ T6101] usb 3-1: Using ep0 maxpacket: 16 [ 441.374010][ T6101] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 441.399390][ T6101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.448812][ T6101] usb 3-1: Product: syz [ 441.455922][ T6101] usb 3-1: Manufacturer: syz [ 441.467244][ T6101] usb 3-1: SerialNumber: syz [ 441.509691][ T5952] gp8psk: usb in 137 operation failed. [ 441.515226][ T5952] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 441.641332][ T6101] usb 3-1: config 0 descriptor?? [ 441.661498][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 441.694472][ T5952] gp8psk: found Genpix USB device pID = 201 (hex) [ 441.702235][ T24] usb 6-1: device descriptor read/8, error -71 [ 441.811749][ T5952] usb 2-1: USB disconnect, device number 52 [ 442.273726][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 442.302559][ T6101] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 442.367264][ T5952] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 442.370332][ T6101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.416823][ T24] usb 6-1: device descriptor read/8, error -71 [ 442.460078][ T6101] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 442.487235][ T9324] dtv5100: wlen = 0, aborting. [ 442.529875][ T24] usb usb6-port1: unable to enumerate USB device [ 442.540125][ T6101] usb 3-1: media controller created [ 442.769218][ T6101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.949863][ T6101] zl10353_read_register: readreg error (reg=127, ret==0) [ 443.076793][ T6101] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 443.148900][ T6101] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 443.215520][ T6101] usb 3-1: USB disconnect, device number 52 [ 443.383055][ T6101] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 443.395693][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 443.395707][ T30] audit: type=1326 audit(1758719261.343:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 443.538345][ T30] audit: type=1326 audit(1758719261.403:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 443.692877][ T30] audit: type=1326 audit(1758719261.403:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 444.186998][ T30] audit: type=1326 audit(1758719261.413:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 444.187059][ T30] audit: type=1326 audit(1758719261.413:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 444.187134][ T30] audit: type=1326 audit(1758719261.413:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 444.187181][ T30] audit: type=1326 audit(1758719261.423:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 444.187254][ T30] audit: type=1326 audit(1758719261.423:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 444.187299][ T30] audit: type=1326 audit(1758719261.423:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 444.187347][ T30] audit: type=1326 audit(1758719261.423:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.2.802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 444.310228][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.497292][ C1] vkms_vblank_simulate: vblank timer overrun [ 444.597212][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.192200][ T5863] usbhid 4-1:0.0: can't add hid device: -71 [ 445.213302][ T5863] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 445.313044][ T5863] usb 4-1: USB disconnect, device number 52 [ 445.465711][ T9373] fuse: Unknown parameter '4.P멽/GLA5P\ ӑ{JM_ۅ' [ 445.506229][ T9370] loop3: detected capacity change from 0 to 7 [ 445.537584][ T9370] Dev loop3: unable to read RDB block 7 [ 445.584135][ T9370] loop3: unable to read partition table [ 445.597009][ T9370] loop3: partition table beyond EOD, truncated [ 445.604620][ T9370] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 446.219387][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 446.299516][ T6101] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 446.358940][ T9388] loop5: detected capacity change from 0 to 7 [ 446.371431][ T8455] loop5: [ 446.374450][ T8455] loop5: partition table partially beyond EOD, truncated [ 446.388717][ T9388] loop5: [ 446.393748][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 446.399109][ T9388] loop5: partition table partially beyond EOD, truncated [ 446.418954][ T24] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.439887][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 446.449621][ T24] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 446.479410][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.498052][ T6101] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 446.530060][ T24] usb 5-1: config 0 descriptor?? [ 446.535206][ T6101] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.570807][ T6101] usb 6-1: config 0 descriptor?? [ 446.599931][ T6101] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 446.799011][ T9386] program syz.5.812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.832110][ T9385] bridge_slave_0: left allmulticast mode [ 446.837959][ T9385] bridge_slave_0: left promiscuous mode [ 446.857760][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.873391][ T9385] bridge_slave_1: left allmulticast mode [ 446.879810][ T9385] bridge_slave_1: left promiscuous mode [ 446.887128][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.907156][ T9385] bond0: (slave bond_slave_0): Releasing backup interface [ 446.932142][ T9385] bond0: (slave bond_slave_1): Releasing backup interface [ 446.948954][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.960341][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.980219][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.000811][ T9385] team0: Port device team_slave_0 removed [ 447.007503][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.028731][ T9385] team0: Port device team_slave_1 removed [ 447.040904][ T24] betop 0003:11C0:5506.000F: item fetching failed at offset 7/8 [ 447.050381][ T9385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.057870][ T9385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.072003][ T24] betop 0003:11C0:5506.000F: parse failed [ 447.078218][ T24] betop 0003:11C0:5506.000F: probe with driver betop failed with error -22 [ 447.090970][ T9385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.102241][ T9385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.161851][ T6101] gp8psk: usb in 128 operation failed. [ 447.172632][ T6101] gp8psk: usb in 137 operation failed. [ 447.178889][ T6101] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 447.207571][ T6101] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 447.227390][ T5952] usb 5-1: USB disconnect, device number 54 [ 447.241462][ T6101] usb 6-1: USB disconnect, device number 9 [ 447.689471][ T6101] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 447.862285][ T6101] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 447.879472][ T6101] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.897249][ T6101] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 447.914121][ T6101] usb 6-1: config 1 has no interface number 1 [ 447.923450][ T5863] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 447.944807][ T6101] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 447.958293][ T6101] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.978100][ T6101] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.995957][ T6101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.005576][ T6101] usb 6-1: Product: syz [ 448.019829][ T6101] usb 6-1: Manufacturer: syz [ 448.024570][ T6101] usb 6-1: SerialNumber: syz [ 448.109524][ T5863] usb 4-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 448.129870][ T5863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 448.160577][ T5863] usb 4-1: config 1 has no interface number 0 [ 448.167830][ T5863] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.184731][ T5863] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.194363][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.202570][ T5863] usb 4-1: Product: syz [ 448.207023][ T5863] usb 4-1: Manufacturer: syz [ 448.213443][ T5863] usb 4-1: SerialNumber: syz [ 448.309847][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.319193][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.320301][ T5863] cdc_ncm 4-1:1.1: skipping garbage [ 448.339840][ T5863] usb 4-1: selecting invalid altsetting 1 [ 448.365854][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.386815][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.408403][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.434528][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.502105][ T6101] usb 6-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 448.539250][ T6101] usb 6-1: MIDIStreaming interface descriptor not found [ 448.676378][ T9402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.711486][ T9402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.755455][ T6101] usb 6-1: USB disconnect, device number 10 [ 448.890184][ T5863] cdc_ncm 4-1:1.1: SET_CRC_MODE failed [ 448.899580][ T5863] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 448.932028][ T9414] loop3: detected capacity change from 0 to 7 [ 448.936138][ T5863] usb 4-1: selecting invalid altsetting 1 [ 448.969558][ T5863] cdc_ncm 4-1:1.1: bind() failure [ 449.036764][ T9414] Dev loop3: unable to read RDB block 7 [ 449.058580][ T8465] udevd[8465]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.089983][ T9414] loop3: unable to read partition table [ 449.097272][ T9414] loop3: partition table beyond EOD, truncated [ 449.139507][ T9414] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 449.165385][ T5863] usb 4-1: USB disconnect, device number 53 [ 449.749798][ T8983] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 449.779428][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 449.950172][ T8983] usb 3-1: Using ep0 maxpacket: 16 [ 449.975495][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.987253][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.002615][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.011991][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.070512][ T8983] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.114081][ T8983] usb 3-1: config 0 interface 0 has no altsetting 0 [ 450.129042][ T8983] usb 3-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 450.213866][ T8983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.290971][ T8983] usb 3-1: config 0 descriptor?? [ 450.316681][ T9] usb 6-1: usb_control_msg returned -32 [ 450.323122][ T9] usbtmc 6-1:16.0: can't read capabilities [ 450.503819][ T5863] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 450.679464][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 450.801371][ T9458] netlink: 40 bytes leftover after parsing attributes in process `syz.5.822'. [ 450.866349][ T5863] usb 5-1: unable to get BOS descriptor or descriptor too short [ 450.899362][ T5863] usb 5-1: config 255 has an invalid interface number: 190 but max is 1 [ 450.916098][ T5863] usb 5-1: config 255 has an invalid interface number: 137 but max is 1 [ 450.953195][ T5863] usb 5-1: config 255 has no interface number 0 [ 450.972406][ T5863] usb 5-1: config 255 has no interface number 1 [ 450.978864][ T5863] usb 5-1: config 255 interface 190 has no altsetting 0 [ 450.986354][ T5863] usb 5-1: config 255 interface 137 has no altsetting 0 [ 451.034506][ T5863] usb 5-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 451.046005][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.054128][ T5863] usb 5-1: Product: syz [ 451.060300][ T5863] usb 5-1: Manufacturer: syz [ 451.065347][ T5863] usb 5-1: SerialNumber: syz [ 451.179209][ T8983] hid_mf 0003:0079:1844.0010: hidraw0: USB HID v1.00 Device [HID 0079:1844] on usb-dummy_hcd.2-1/input0 [ 451.203041][ T8983] hid_mf 0003:0079:1844.0010: Invalid report, this should never happen! [ 451.223428][ T8983] hid_mf 0003:0079:1844.0010: Force feedback init failed. [ 451.327830][ T8983] usb 3-1: USB disconnect, device number 53 [ 451.346322][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.438473][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.481483][ T9462] fido_id[9462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 451.713123][ T9469] ipip0: entered promiscuous mode [ 451.733294][ T9468] loop3: detected capacity change from 0 to 7 [ 451.786747][ T9468] Dev loop3: unable to read RDB block 7 [ 451.859591][ T9468] loop3: unable to read partition table [ 451.866380][ T9468] loop3: partition table beyond EOD, truncated [ 451.890120][ T9468] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 452.398084][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 452.398108][ T30] audit: type=1326 audit(1758719270.343:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 452.573915][ T30] audit: type=1326 audit(1758719270.343:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 452.621089][ T55] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 452.699532][ T8983] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 452.873995][ T55] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.882840][ T55] usb 3-1: config 0 has no interface number 0 [ 452.888994][ T55] usb 3-1: config 0 interface 1 has no altsetting 0 [ 452.896495][ T8983] usb 4-1: device descriptor read/64, error -71 [ 452.899392][ T55] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 452.912695][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.921188][ T55] usb 3-1: Product: syz [ 452.934036][ T55] usb 3-1: Manufacturer: syz [ 453.019427][ T55] usb 3-1: SerialNumber: syz [ 453.074874][ T55] usb 3-1: config 0 descriptor?? [ 453.138545][ T55] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 453.252045][ T8983] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 453.321253][ T30] audit: type=1326 audit(1758719271.263:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 453.412027][ T8983] usb 4-1: device descriptor read/64, error -71 [ 453.429523][ T5950] usb 6-1: USB disconnect, device number 11 [ 453.618201][ T8983] usb usb4-port1: attempt power cycle [ 453.689831][ T30] audit: type=1326 audit(1758719271.273:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 453.758686][ T5863] usb 5-1: USB disconnect, device number 55 [ 453.781824][ T55] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 453.804297][ T30] audit: type=1326 audit(1758719271.273:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 453.854140][ T55] sq905c 3-1:0.1: Get version command failed [ 453.874330][ T55] sq905c 3-1:0.1: probe with driver sq905c failed with error -110 [ 453.933123][ T30] audit: type=1326 audit(1758719271.273:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 454.048355][ T30] audit: type=1326 audit(1758719271.273:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 454.089797][ T8983] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 454.173085][ T8983] usb 4-1: device descriptor read/8, error -71 [ 454.315978][ T30] audit: type=1326 audit(1758719271.273:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 454.339248][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 454.362846][ T30] audit: type=1326 audit(1758719271.403:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 454.390073][ T30] audit: type=1326 audit(1758719271.403:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.2.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c78eec9 code=0x7ffc0000 [ 454.419570][ T8983] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 454.440176][ T8983] usb 4-1: device descriptor read/8, error -71 [ 454.450861][ T55] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 454.549863][ T8983] usb usb4-port1: unable to enumerate USB device [ 454.592376][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.665719][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.685428][ T55] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 454.699923][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.786051][ T55] usb 2-1: config 0 descriptor?? [ 454.797442][ T55] gspca_main: spca508-2.14.0 probing 8086:0110 [ 454.842367][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 454.886304][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 454.909554][ T9] usb 5-1: SerialNumber: syz [ 455.021221][ T55] gspca_spca508: reg_read err -32 [ 455.027874][ T55] gspca_spca508: reg_read err -32 [ 455.239947][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.248997][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.258488][ T55] gspca_spca508: reg_read err -71 [ 455.265062][ T55] gspca_spca508: reg_read err -71 [ 455.272233][ T55] gspca_spca508: reg write: error -71 [ 455.297183][ T55] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 455.308850][ T55] usb 2-1: USB disconnect, device number 53 [ 455.410049][ T8983] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 455.580244][ T8983] usb 6-1: Using ep0 maxpacket: 8 [ 455.662590][ T8983] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.900052][ T5937] usb 3-1: USB disconnect, device number 54 [ 455.910920][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.913132][ T8983] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.939067][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.978177][ T9513] loop3: detected capacity change from 0 to 7 [ 455.991204][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 456.021653][ T9513] Dev loop3: unable to read RDB block 7 [ 456.042072][ T8983] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 456.046392][ T9513] loop3: unable to read partition table [ 456.080956][ T9513] loop3: partition table beyond EOD, truncated [ 456.255031][ T9513] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 456.286537][ T8983] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.367842][ T8983] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.449467][ T5937] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 456.468422][ T8983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.609719][ T5937] usb 3-1: device descriptor read/64, error -71 [ 456.630901][ T8983] usbtmc 6-1:16.0: bulk endpoints not found [ 456.816585][ T55] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 456.927028][ T5937] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 456.944949][ T9] usb 5-1: 0:2 : does not exist [ 456.964339][ T9] usb 5-1: unit 5: unexpected type 0x0c [ 456.969370][ T55] usb 4-1: device descriptor read/64, error -71 [ 457.005518][ T9] usb 5-1: USB disconnect, device number 56 [ 457.109572][ T5937] usb 3-1: device descriptor read/64, error -71 [ 457.208245][ T8455] udevd[8455]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.225823][ T55] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 457.234013][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 457.242522][ T5937] usb usb3-port1: attempt power cycle [ 457.379393][ T55] usb 4-1: device descriptor read/64, error -71 [ 457.439457][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 457.447226][ T10] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 457.455647][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.466437][ T10] usb 2-1: config 0 has no interfaces? [ 457.507853][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 457.519742][ T55] usb usb4-port1: attempt power cycle [ 457.549784][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 457.561598][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.586320][ T10] usb 2-1: Product: syz [ 457.591097][ T10] usb 2-1: Manufacturer: syz [ 457.601580][ T10] usb 2-1: SerialNumber: syz [ 457.609639][ T5937] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 457.624056][ T10] usb 2-1: config 0 descriptor?? [ 457.640800][ T5937] usb 3-1: device descriptor read/8, error -71 [ 457.739390][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 457.751049][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 457.758583][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 457.772611][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 457.784663][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 457.796632][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 457.826377][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 457.884459][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 457.887949][ T55] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 457.959721][ T5937] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 457.968010][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 458.001901][ T5937] usb 3-1: device descriptor read/8, error -71 [ 458.008931][ T55] usb 4-1: device descriptor read/8, error -71 [ 458.010062][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 458.026700][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 458.038570][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 458.050241][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.062727][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 458.074547][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 458.088215][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 458.102073][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 458.110807][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 458.119920][ T5937] usb usb3-port1: unable to enumerate USB device [ 458.135618][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 458.159470][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 458.186528][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 458.222563][ T5937] usb 6-1: USB disconnect, device number 12 [ 458.241081][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 458.249449][ T55] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 458.269003][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 458.331188][ T55] usb 4-1: device descriptor read/8, error -71 [ 458.362268][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 458.392823][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 458.413583][ T9] usb 5-1: string descriptor 0 read error: -22 [ 458.433723][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 458.449605][ T55] usb usb4-port1: unable to enumerate USB device [ 458.462567][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.629767][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 458.698359][ T55] usb 5-1: USB disconnect, device number 57 [ 458.908950][ T9527] adutux: No device or device unplugged -19 [ 458.968018][ T9536] program syz.2.852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.463480][ T55] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 459.835915][ T9545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.855'. [ 459.917558][ T5863] usb 2-1: USB disconnect, device number 54 [ 459.944457][ T55] usb 3-1: device descriptor read/64, error -71 [ 460.243244][ T9553] loop3: detected capacity change from 0 to 7 [ 460.293759][ T9553] Dev loop3: unable to read RDB block 7 [ 460.339414][ T55] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 460.340623][ T9553] loop3: unable to read partition table [ 460.442329][ T9553] loop3: partition table beyond EOD, truncated [ 460.492470][ T9553] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 461.049539][ T55] usb 3-1: device descriptor read/64, error -71 [ 461.155048][ T9565] netlink: 'syz.1.860': attribute type 64 has an invalid length. [ 461.174066][ T9565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.860'. [ 461.224100][ T55] usb usb3-port1: attempt power cycle [ 461.686676][ T55] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 461.870250][ T55] usb 3-1: device descriptor read/8, error -71 [ 462.123355][ T55] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 462.229405][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 462.282126][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 462.421595][ T55] usb 3-1: device not accepting address 62, error -71 [ 462.442667][ T55] usb usb3-port1: unable to enumerate USB device [ 462.461095][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.532381][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.567762][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 462.598211][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 462.639498][ T9] usb 5-1: SerialNumber: syz [ 462.909989][ T5937] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 462.939642][ T9] usb 5-1: 0:13 : does not exist [ 463.001167][ T55] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 463.027723][ T9] usb 5-1: USB disconnect, device number 58 [ 463.137753][ T5937] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 463.150094][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.206785][ T5937] usb 6-1: Product: syz [ 463.248295][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 463.252776][ T5937] usb 6-1: Manufacturer: syz [ 463.258020][ T5937] usb 6-1: SerialNumber: syz [ 463.272587][ T55] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 463.284867][ T9598] loop3: detected capacity change from 0 to 7 [ 463.365422][ T8455] udevd[8455]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.373387][ T9598] Dev loop3: unable to read RDB block 7 [ 463.392665][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.395578][ T9598] loop3: unable to read partition table [ 463.409869][ T9598] loop3: partition table beyond EOD, truncated [ 463.446973][ T9598] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 463.491488][ T55] pvrusb2: Hardware description: Terratec Grabster AV400 [ 463.525073][ T55] pvrusb2: ********** [ 463.529462][ T55] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 463.556762][ T55] pvrusb2: Important functionality might not be entirely working. [ 463.600027][ T55] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 463.653380][ T55] pvrusb2: ********** [ 463.708211][ T2347] pvrusb2: Invalid write control endpoint [ 463.905774][ T2347] pvrusb2: Invalid write control endpoint [ 463.919430][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 463.935768][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 463.948594][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 463.984294][ T9] usb 3-1: USB disconnect, device number 63 [ 464.027523][ T2347] pvrusb2: Device being rendered inoperable [ 464.038731][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 464.075049][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 464.100642][ T2347] pvrusb2: Attached sub-driver cx25840 [ 464.133897][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 464.174944][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 464.535347][ T5937] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 464.549364][ T5937] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 464.595542][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 464.655838][ T5937] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 464.708774][ T5937] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 464.770668][ T9] usb 3-1: device descriptor read/64, error -71 [ 465.019846][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 465.170322][ T9] usb 3-1: device descriptor read/64, error -71 [ 465.281435][ T9] usb usb3-port1: attempt power cycle [ 465.539527][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 465.629705][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 465.653087][ T9] usb 3-1: device descriptor read/8, error -71 [ 465.701372][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.711929][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 465.722110][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 465.749704][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 465.761370][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.770345][ T10] usb 5-1: Product: syz [ 465.779503][ T10] usb 5-1: Manufacturer: syz [ 465.784409][ T10] usb 5-1: SerialNumber: syz [ 465.809754][ T10] usb 5-1: config 0 descriptor?? [ 465.820782][ T10] usb 5-1: ucan: probing device on interface #0 [ 465.833790][ T10] usb 5-1: ucan: invalid EP count (1) [ 465.839230][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 465.899407][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 465.937136][ T10] usb 6-1: USB disconnect, device number 13 [ 465.946748][ T9] usb 3-1: device descriptor read/8, error -71 [ 466.043253][ T9635] netlink: 56 bytes leftover after parsing attributes in process `syz.5.879'. [ 466.070238][ T9] usb usb3-port1: unable to enumerate USB device [ 466.115319][ T9635] syzkaller1: entered promiscuous mode [ 466.123815][ T9635] syzkaller1: entered allmulticast mode [ 466.376335][ T9635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.879'. [ 466.385839][ T9635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.879'. [ 466.545461][ T9645] loop3: detected capacity change from 0 to 7 [ 466.553803][ T9645] Dev loop3: unable to read RDB block 7 [ 466.559565][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 466.567555][ T9645] loop3: unable to read partition table [ 466.573732][ T9645] loop3: partition table beyond EOD, truncated [ 466.582303][ T9645] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 466.729597][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 466.737064][ T10] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 466.748476][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.767361][ T10] usb 4-1: config 0 descriptor?? [ 466.776591][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 467.768673][ T55] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 467.933627][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 467.943508][ T55] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 467.952818][ T55] usb 2-1: config 1 has no interface number 1 [ 467.958985][ T55] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 467.972166][ T55] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 467.988135][ T55] usb 2-1: string descriptor 0 read error: -22 [ 467.995988][ T55] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.005771][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.027849][ T55] usb 2-1: low speed audio streaming not supported [ 468.153530][ T55] usb 5-1: USB disconnect, device number 59 [ 468.261491][ T5950] usb 2-1: USB disconnect, device number 55 [ 468.619950][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 468.632251][ T55] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 468.637560][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 468.711792][ T10] gspca_vc032x: reg_r err -71 [ 468.727956][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.739702][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.749465][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.755002][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.792768][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.798113][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.819334][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.839434][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.844795][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.859800][ T55] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 468.879326][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.887654][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.905116][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.910723][ T55] usb 5-1: config 0 descriptor?? [ 468.939412][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.959553][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.966345][ T9674] tipc: Started in network mode [ 468.975336][ T9674] tipc: Node identity 46d964b54d7, cluster identity 4711 [ 468.989663][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.993815][ T9674] tipc: Enabled bearer , priority 0 [ 468.995015][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.995031][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.995041][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 468.995051][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 469.004560][ T9674] syzkaller0: entered promiscuous mode [ 469.035231][ T10] gspca_vc032x: Unknown sensor... [ 469.036541][ T9674] syzkaller0: entered allmulticast mode [ 469.068675][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 469.099378][ T10] usb 4-1: USB disconnect, device number 62 [ 469.187354][ T9673] tipc: Resetting bearer [ 469.226072][ T55] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 469.288807][ T55] [drm:udl_init] *ERROR* Selecting channel failed [ 469.292593][ T9673] tipc: Disabling bearer [ 469.388587][ T55] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 469.433856][ T55] [drm] Initialized udl on minor 2 [ 469.468913][ T55] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.509031][ T55] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 469.533096][ T5863] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.564053][ T55] usb 5-1: USB disconnect, device number 60 [ 469.585484][ T5863] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 469.885177][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 469.885197][ T30] audit: type=1326 audit(1758719287.823:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 469.984782][ T30] audit: type=1326 audit(1758719287.823:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 470.096837][ T30] audit: type=1326 audit(1758719287.833:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 470.119687][ T30] audit: type=1326 audit(1758719287.833:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 470.230765][ T30] audit: type=1326 audit(1758719287.833:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 470.289419][ T5863] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 470.429409][ T55] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 470.484068][ T30] audit: type=1326 audit(1758719287.893:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 470.506812][ T30] audit: type=1326 audit(1758719287.893:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 470.530103][ T30] audit: type=1326 audit(1758719287.893:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 470.553324][ T30] audit: type=1326 audit(1758719287.893:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 470.578001][ T30] audit: type=1326 audit(1758719287.893:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9692 comm="syz.3.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad89b8eec9 code=0x7ffc0000 [ 470.639621][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 470.645495][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 470.660114][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 470.668076][ T5863] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 470.682634][ T5863] usb 3-1: config 1 has no interface number 0 [ 470.690446][ T5863] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.700980][ T55] usb 5-1: config 127 has an invalid interface number: 121 but max is 0 [ 470.717275][ T55] usb 5-1: config 127 has no interface number 0 [ 470.733693][ T5863] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 470.746329][ T55] usb 5-1: config 127 interface 121 has no altsetting 0 [ 470.763590][ T5863] usb 3-1: config 1 interface 236 has no altsetting 0 [ 470.774004][ T55] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=ba.4a [ 470.828221][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.836992][ T55] usb 5-1: Product: syz [ 470.842795][ T5863] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 470.852116][ T5863] usb 3-1: config 1 has no interface number 0 [ 470.861079][ T55] usb 5-1: Manufacturer: syz [ 470.943548][ T55] usb 5-1: SerialNumber: syz [ 470.949608][ T5863] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.961387][ T5863] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 471.062490][ T5863] usb 3-1: config 1 interface 236 has no altsetting 0 [ 471.144842][ T5863] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 471.154773][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.163236][ T5863] usb 3-1: Product: syz [ 471.167621][ T5863] usb 3-1: Manufacturer: syz [ 471.172767][ T5863] usb 3-1: SerialNumber: syz [ 471.194779][ T5863] ti_usb_3410_5052 3-1:1.236: TI USB 5052 2 port adapter converter detected [ 471.218310][ T55] usb_ehset_test 5-1:127.121: probe with driver usb_ehset_test failed with error -32 [ 471.303953][ T55] usb 5-1: USB disconnect, device number 61 [ 472.020767][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 472.069783][ T9722] netlink: 312 bytes leftover after parsing attributes in process `syz.4.904'. [ 472.389762][ T55] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 472.599570][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 472.607695][ T55] usb 6-1: config 0 has an invalid interface number: 122 but max is 1 [ 472.617768][ T55] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 472.662542][ T55] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 472.676562][ T55] usb 6-1: config 0 has no interface number 0 [ 472.693314][ T55] usb 6-1: config 0 interface 122 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 472.708176][ T55] usb 6-1: config 0 interface 122 altsetting 10 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 472.723775][ T55] usb 6-1: config 0 interface 122 altsetting 10 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 472.735568][ T55] usb 6-1: config 0 interface 122 altsetting 10 has a duplicate endpoint with address 0x87, skipping [ 472.749107][ T55] usb 6-1: config 0 interface 122 altsetting 10 has a duplicate endpoint with address 0xA, skipping [ 472.777697][ T55] usb 6-1: config 0 interface 122 altsetting 10 has 10 endpoint descriptors, different from the interface descriptor's value: 16 [ 472.834388][ T55] usb 6-1: config 0 interface 122 has no altsetting 0 [ 472.946928][ T55] usb 6-1: Dual-Role OTG device on HNP port [ 472.953453][ T55] usb 6-1: New USB device found, idVendor=110a, idProduct=1451, bcdDevice=5c.c7 [ 472.962615][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.989549][ T55] usb 6-1: Product: ㍩兺ͺ菾㋳À蒪 [ 473.011336][ T55] usb 6-1: Manufacturer: ᯘ赵庙䐩䮐槕왠왥⌎榱ퟰ뮟㖆릯텖ꖀ㇢脜䱆슰煨譍g筈鮴蓩옷몭ⲳꩰ넻䜀砜攄ꪄ医甿惡賞啸≥໕䋷폇썉綺뱅歄ꕥ嫓⽒ﻹ栂ᅃ룹虿㉚崕⨭鸧謁∑೰匠蹜䮻﯌꩗㚂둑Ꮿ锈卺렖鍕蘗⬧襩炔⸞ [ 473.100258][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.907'. [ 473.137656][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 473.213965][ T55] usb 6-1: SerialNumber: syz [ 473.240133][ T55] usb 6-1: config 0 descriptor?? [ 473.245844][ T9733] vxlan0: entered promiscuous mode [ 473.246937][ T9724] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 473.266596][ T9724] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 473.279597][ T1157] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.366767][ T1157] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.428765][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.482100][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.533520][ T55] mxuport 6-1:0.122: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 473.672711][ T55] mxuport 6-1:0.122: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 473.698713][ T55] mxuport 6-1:0.122: probe with driver mxuport failed with error -71 [ 473.762693][ T55] usb 6-1: USB disconnect, device number 14 [ 473.819628][ T5863] usb 3-1: USB disconnect, device number 68 [ 473.929826][ T5950] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 474.119935][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 474.133285][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.175498][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.199807][ T5950] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 474.214874][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.242292][ T5950] usb 2-1: config 0 descriptor?? [ 474.271806][ T5950] hub 2-1:0.0: USB hub found [ 474.319518][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 474.459603][ T5950] hub 2-1:0.0: 2 ports detected [ 474.489813][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 474.509220][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 474.542778][ T9] usb 3-1: config 0 has no interface number 0 [ 474.558232][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 474.602586][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 474.617127][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.633382][ T9] usb 3-1: Product: syz [ 474.645923][ T9] usb 3-1: Manufacturer: syz [ 474.653908][ T9] usb 3-1: SerialNumber: syz [ 474.680239][ T9] usb 3-1: config 0 descriptor?? [ 474.707715][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 474.719742][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 474.737959][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 474.782763][ T5950] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 474.801553][ T5950] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 474.824652][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 474.838744][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 474.909498][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 474.935457][ T10] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 474.950704][ T10] usb 6-1: config 0 has no interface number 0 [ 474.965629][ T10] usb 6-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 475.008387][ T10] usb 6-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 475.050297][ T10] usb 6-1: config 0 interface 48 has no altsetting 0 [ 475.068232][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 475.073336][ T5950] usb 2-1: USB disconnect, device number 56 [ 475.081630][ T10] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 475.118257][ T10] usb 6-1: Product: syz [ 475.135625][ T9] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 475.146191][ T10] usb 6-1: Manufacturer: syz [ 475.152575][ T10] usb 6-1: SerialNumber: syz [ 475.162652][ T10] usb 6-1: config 0 descriptor?? [ 475.569604][ T9] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 475.597776][ T9] em28xx 3-1:0.132: board has no eeprom [ 475.639557][ T5950] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 475.729424][ T8983] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 475.809553][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 475.945012][ T9789] fuse: Bad value for 'fd' [ 475.982512][ T8983] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.993452][ T5950] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 476.011091][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.016797][ T8983] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.042340][ T5950] usb 2-1: Product: syz [ 476.046664][ T5950] usb 2-1: Manufacturer: syz [ 476.051590][ T5950] usb 2-1: SerialNumber: syz [ 476.060484][ T5950] usb 2-1: config 0 descriptor?? [ 476.075955][ T8983] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.097439][ T8983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.384524][ T5950] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 476.517154][ T8983] usb 5-1: usb_control_msg returned -32 [ 476.547521][ T8983] usbtmc 5-1:16.0: can't read capabilities [ 476.699417][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 476.707655][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 476.727784][ T8983] em28xx 3-1:0.132: Registering V4L2 extension [ 476.994695][ T5950] usb write operation failed. (-71) [ 477.026378][ T5950] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 477.050079][ T5950] dvbdev: DVB: registering new adapter (Terratec H7) [ 477.080332][ T5950] usb 2-1: media controller created [ 477.087087][ T5950] usb read operation failed. (-71) [ 477.104760][ T5950] usb write operation failed. (-71) [ 477.122101][ T9] usb 3-1: USB disconnect, device number 69 [ 477.148164][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 477.202738][ T5950] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 477.383978][ T5950] usb 2-1: USB disconnect, device number 57 [ 477.859786][ T8983] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 477.889541][ T8983] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 477.911019][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.924'. [ 477.923769][ T8983] em28xx 3-1:0.132: No AC97 audio processor [ 478.090853][ T8983] usb 3-1: Decoder not found [ 478.145787][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 478.145802][ T30] audit: type=1326 audit(1758719296.093:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9804 comm="syz.1.925" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801798eec9 code=0x0 [ 478.344597][ T8983] em28xx 3-1:0.132: failed to create media graph [ 478.351976][ T5950] usb 5-1: USB disconnect, device number 62 [ 478.421033][ T8983] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 478.501457][ T8983] em28xx 3-1:0.132: Remote control support is not available for this card. [ 478.509527][ T9811] ================================================================== [ 478.518272][ T9811] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 478.525705][ T9811] Read of size 8 at addr ffff88803759c740 by task v4l_id/9811 [ 478.533161][ T9811] [ 478.535672][ T9811] CPU: 1 UID: 0 PID: 9811 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 478.535688][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.535695][ T9811] Call Trace: [ 478.535701][ T9811] [ 478.535707][ T9811] dump_stack_lvl+0x189/0x250 [ 478.535723][ T9811] ? rcu_is_watching+0x15/0xb0 [ 478.535735][ T9811] ? __kasan_check_byte+0x12/0x40 [ 478.535751][ T9811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.535763][ T9811] ? rcu_is_watching+0x15/0xb0 [ 478.535773][ T9811] ? lock_release+0x4b/0x3e0 [ 478.535789][ T9811] ? __virt_addr_valid+0x1c8/0x5c0 [ 478.535805][ T9811] ? __virt_addr_valid+0x4a5/0x5c0 [ 478.535818][ T9811] print_report+0xca/0x240 [ 478.535829][ T9811] ? v4l2_fh_open+0xc7/0x430 [ 478.535840][ T9811] kasan_report+0x118/0x150 [ 478.535855][ T9811] ? v4l2_fh_open+0xc7/0x430 [ 478.535867][ T9811] v4l2_fh_open+0xc7/0x430 [ 478.535879][ T9811] em28xx_v4l2_open+0x157/0x9a0 [ 478.535899][ T9811] v4l2_open+0x20f/0x360 [ 478.535911][ T9811] chrdev_open+0x4c9/0x5e0 [ 478.535922][ T9811] ? __pfx_chrdev_open+0x10/0x10 [ 478.535932][ T9811] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 478.535950][ T9811] ? __pfx_chrdev_open+0x10/0x10 [ 478.535959][ T9811] do_dentry_open+0x950/0x13f0 [ 478.535974][ T9811] vfs_open+0x3b/0x340 [ 478.535984][ T9811] ? path_openat+0x2ecd/0x3830 [ 478.535997][ T9811] path_openat+0x2ee5/0x3830 [ 478.536010][ T9811] ? arch_stack_walk+0xfc/0x150 [ 478.536027][ T9811] ? stack_depot_save_flags+0x40/0x860 [ 478.536046][ T9811] ? __pfx_path_openat+0x10/0x10 [ 478.536058][ T9811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.536073][ T9811] do_filp_open+0x1fa/0x410 [ 478.536086][ T9811] ? __lock_acquire+0xab9/0xd20 [ 478.536101][ T9811] ? __pfx_do_filp_open+0x10/0x10 [ 478.536119][ T9811] ? _raw_spin_unlock+0x28/0x50 [ 478.536158][ T9811] ? alloc_fd+0x64c/0x6c0 [ 478.536176][ T9811] do_sys_openat2+0x121/0x1c0 [ 478.536188][ T9811] ? __pfx_do_sys_openat2+0x10/0x10 [ 478.536200][ T9811] ? exc_page_fault+0x76/0xf0 [ 478.536211][ T9811] ? do_user_addr_fault+0xc8a/0x1390 [ 478.536228][ T9811] __x64_sys_openat+0x138/0x170 [ 478.536241][ T9811] do_syscall_64+0xfa/0x3b0 [ 478.536252][ T9811] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.536263][ T9811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.536273][ T9811] ? clear_bhb_loop+0x60/0xb0 [ 478.536285][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.536296][ T9811] RIP: 0033:0x7f58cb2a7407 [ 478.536307][ T9811] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 478.536317][ T9811] RSP: 002b:00007ffe96a65370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 478.536330][ T9811] RAX: ffffffffffffffda RBX: 00007f58cb951880 RCX: 00007f58cb2a7407 [ 478.536339][ T9811] RDX: 0000000000000000 RSI: 00007ffe96a65f1b RDI: ffffffffffffff9c [ 478.536347][ T9811] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 478.536353][ T9811] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 478.536360][ T9811] R13: 00007ffe96a655c0 R14: 00007f58cba56000 R15: 000055ed24ff34d8 [ 478.536372][ T9811] [ 478.536376][ T9811] [ 478.846811][ T9811] Allocated by task 8983: [ 478.851142][ T9811] kasan_save_track+0x3e/0x80 [ 478.856004][ T9811] __kasan_kmalloc+0x93/0xb0 [ 478.860608][ T9811] __kmalloc_cache_noprof+0x230/0x3d0 [ 478.865991][ T9811] em28xx_v4l2_init+0x10b/0x2e70 [ 478.870958][ T9811] em28xx_init_extension+0x120/0x1c0 [ 478.876337][ T9811] process_scheduled_works+0xae1/0x17b0 [ 478.881913][ T9811] worker_thread+0x8a0/0xda0 [ 478.886504][ T9811] kthread+0x70e/0x8a0 [ 478.890574][ T9811] ret_from_fork+0x439/0x7d0 [ 478.895182][ T9811] ret_from_fork_asm+0x1a/0x30 [ 478.900037][ T9811] [ 478.902365][ T9811] Freed by task 8983: [ 478.906350][ T9811] kasan_save_track+0x3e/0x80 [ 478.911548][ T9811] kasan_save_free_info+0x46/0x50 [ 478.916648][ T9811] __kasan_slab_free+0x5b/0x80 [ 478.921414][ T9811] kfree+0x18e/0x440 [ 478.925397][ T9811] em28xx_v4l2_init+0x1683/0x2e70 [ 478.930430][ T9811] em28xx_init_extension+0x120/0x1c0 [ 478.935982][ T9811] process_scheduled_works+0xae1/0x17b0 [ 478.941533][ T9811] worker_thread+0x8a0/0xda0 [ 478.946119][ T9811] kthread+0x70e/0x8a0 [ 478.950199][ T9811] ret_from_fork+0x439/0x7d0 [ 478.954873][ T9811] ret_from_fork_asm+0x1a/0x30 [ 478.959647][ T9811] [ 478.961976][ T9811] The buggy address belongs to the object at ffff88803759c000 [ 478.961976][ T9811] which belongs to the cache kmalloc-8k of size 8192 [ 478.976026][ T9811] The buggy address is located 1856 bytes inside of [ 478.976026][ T9811] freed 8192-byte region [ffff88803759c000, ffff88803759e000) [ 478.990079][ T9811] [ 478.992411][ T9811] The buggy address belongs to the physical page: [ 478.998911][ T9811] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37598 [ 479.007761][ T9811] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 479.016435][ T9811] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 479.023984][ T9811] page_type: f5(slab) [ 479.028077][ T9811] raw: 00fff00000000040 ffff88801a442280 ffffea0000e28e00 0000000000000002 [ 479.036660][ T9811] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 479.045247][ T9811] head: 00fff00000000040 ffff88801a442280 ffffea0000e28e00 0000000000000002 [ 479.054122][ T9811] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 479.062964][ T9811] head: 00fff00000000003 ffffea0000dd6601 00000000ffffffff 00000000ffffffff [ 479.071658][ T9811] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 479.080427][ T9811] page dumped because: kasan: bad access detected [ 479.087122][ T9811] page_owner tracks the page as allocated [ 479.092836][ T9811] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9475, tgid 9472 (syz.2.834), ts 453490291711, free_ts 453229003122 [ 479.114544][ T9811] post_alloc_hook+0x240/0x2a0 [ 479.119330][ T9811] get_page_from_freelist+0x21e4/0x22c0 [ 479.124992][ T9811] __alloc_frozen_pages_noprof+0x181/0x370 [ 479.130795][ T9811] alloc_pages_mpol+0x232/0x4a0 [ 479.135659][ T9811] allocate_slab+0x8a/0x370 [ 479.140171][ T9811] ___slab_alloc+0xbeb/0x1420 [ 479.144854][ T9811] __kmalloc_cache_noprof+0x296/0x3d0 [ 479.150235][ T9811] audit_log_d_path+0xb5/0x190 [ 479.155022][ T9811] audit_log_d_path_exe+0x42/0x70 [ 479.160083][ T9811] audit_log_task+0x2b3/0x3c0 [ 479.164776][ T9811] audit_seccomp+0x86/0x190 [ 479.169326][ T9811] __seccomp_filter+0x9aa/0x1a40 [ 479.174353][ T9811] syscall_trace_enter+0xaa/0x160 [ 479.179567][ T9811] do_syscall_64+0xd3/0x3b0 [ 479.184078][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.190260][ T9811] page last free pid 55 tgid 55 stack trace: [ 479.196526][ T9811] __free_frozen_pages+0xbc4/0xd30 [ 479.201650][ T9811] __put_partials+0x156/0x1a0 [ 479.206327][ T9811] put_cpu_partial+0x17c/0x250 [ 479.211095][ T9811] __slab_free+0x2d5/0x3c0 [ 479.215510][ T9811] qlist_free_all+0x97/0x140 [ 479.220099][ T9811] kasan_quarantine_reduce+0x148/0x160 [ 479.225650][ T9811] __kasan_slab_alloc+0x22/0x80 [ 479.230503][ T9811] __kmalloc_noprof+0x224/0x4f0 [ 479.235358][ T9811] gspca_dev_probe2+0xd5/0x1440 [ 479.240329][ T9811] usb_probe_interface+0x668/0xc30 [ 479.245542][ T9811] really_probe+0x26a/0x9e0 [ 479.250077][ T9811] __driver_probe_device+0x18c/0x2f0 [ 479.255386][ T9811] driver_probe_device+0x4f/0x430 [ 479.260427][ T9811] __device_attach_driver+0x2ce/0x530 [ 479.265831][ T9811] bus_for_each_drv+0x251/0x2e0 [ 479.270685][ T9811] __device_attach+0x2b8/0x400 [ 479.275456][ T9811] [ 479.277954][ T9811] Memory state around the buggy address: [ 479.283581][ T9811] ffff88803759c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.291656][ T9811] ffff88803759c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.299740][ T9811] >ffff88803759c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.307827][ T9811] ^ [ 479.313981][ T9811] ffff88803759c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.322135][ T9811] ffff88803759c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 479.330196][ T9811] ================================================================== [ 479.439550][ T9] em28xx 3-1:0.132: Closing input extension [ 479.710625][ T10] usb 6-1: USB disconnect, device number 15 [ 479.742838][ T8585] udevd[8585]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.48/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.790052][ T9811] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 479.797309][ T9811] CPU: 1 UID: 0 PID: 9811 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 479.806267][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 479.816329][ T9811] Call Trace: [ 479.819617][ T9811] [ 479.822642][ T9811] dump_stack_lvl+0x99/0x250 [ 479.827325][ T9811] ? __asan_memcpy+0x40/0x70 [ 479.832315][ T9811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.837528][ T9811] ? __pfx__printk+0x10/0x10 [ 479.842234][ T9811] vpanic+0x281/0x750 [ 479.846301][ T9811] ? preempt_schedule+0xae/0xc0 [ 479.851293][ T9811] ? __pfx_vpanic+0x10/0x10 [ 479.855838][ T9811] ? preempt_schedule_common+0x83/0xd0 [ 479.861325][ T9811] ? preempt_schedule+0xae/0xc0 [ 479.866264][ T9811] ? __pfx_preempt_schedule+0x10/0x10 [ 479.871859][ T9811] panic+0xb9/0xc0 [ 479.875832][ T9811] ? __pfx_panic+0x10/0x10 [ 479.880320][ T9811] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 479.886422][ T9811] ? v4l2_fh_open+0xc7/0x430 [ 479.891139][ T9811] check_panic_on_warn+0x89/0xb0 [ 479.896105][ T9811] ? v4l2_fh_open+0xc7/0x430 [ 479.900709][ T9811] end_report+0x78/0x160 [ 479.905057][ T9811] kasan_report+0x129/0x150 [ 479.909575][ T9811] ? v4l2_fh_open+0xc7/0x430 [ 479.914171][ T9811] v4l2_fh_open+0xc7/0x430 [ 479.918781][ T9811] em28xx_v4l2_open+0x157/0x9a0 [ 479.923645][ T9811] v4l2_open+0x20f/0x360 [ 479.927909][ T9811] chrdev_open+0x4c9/0x5e0 [ 479.932714][ T9811] ? __pfx_chrdev_open+0x10/0x10 [ 479.937770][ T9811] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 479.944281][ T9811] ? __pfx_chrdev_open+0x10/0x10 [ 479.949308][ T9811] do_dentry_open+0x950/0x13f0 [ 479.954229][ T9811] vfs_open+0x3b/0x340 [ 479.958296][ T9811] ? path_openat+0x2ecd/0x3830 [ 479.963150][ T9811] path_openat+0x2ee5/0x3830 [ 479.967740][ T9811] ? arch_stack_walk+0xfc/0x150 [ 479.972688][ T9811] ? stack_depot_save_flags+0x40/0x860 [ 479.978257][ T9811] ? __pfx_path_openat+0x10/0x10 [ 479.983281][ T9811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.989356][ T9811] do_filp_open+0x1fa/0x410 [ 479.993864][ T9811] ? __lock_acquire+0xab9/0xd20 [ 479.998725][ T9811] ? __pfx_do_filp_open+0x10/0x10 [ 480.003773][ T9811] ? _raw_spin_unlock+0x28/0x50 [ 480.008652][ T9811] ? alloc_fd+0x64c/0x6c0 [ 480.013082][ T9811] do_sys_openat2+0x121/0x1c0 [ 480.017774][ T9811] ? __pfx_do_sys_openat2+0x10/0x10 [ 480.023069][ T9811] ? exc_page_fault+0x76/0xf0 [ 480.027838][ T9811] ? do_user_addr_fault+0xc8a/0x1390 [ 480.033218][ T9811] __x64_sys_openat+0x138/0x170 [ 480.038205][ T9811] do_syscall_64+0xfa/0x3b0 [ 480.042844][ T9811] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.048157][ T9811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.054252][ T9811] ? clear_bhb_loop+0x60/0xb0 [ 480.059029][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.064925][ T9811] RIP: 0033:0x7f58cb2a7407 [ 480.069348][ T9811] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 480.089133][ T9811] RSP: 002b:00007ffe96a65370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 480.097643][ T9811] RAX: ffffffffffffffda RBX: 00007f58cb951880 RCX: 00007f58cb2a7407 [ 480.105622][ T9811] RDX: 0000000000000000 RSI: 00007ffe96a65f1b RDI: ffffffffffffff9c [ 480.113599][ T9811] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 480.121574][ T9811] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 480.129547][ T9811] R13: 00007ffe96a655c0 R14: 00007f58cba56000 R15: 000055ed24ff34d8 [ 480.137707][ T9811] [ 480.141028][ T9811] Kernel Offset: disabled [ 480.145366][ T9811] Rebooting in 86400 seconds..