last executing test programs: 1m9.290067279s ago: executing program 3 (id=4057): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf250100000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4092, 0x1000}, {&(0x7f00000013c0)=""/251, 0xfb}, {&(0x7f00000014c0)=""/44, 0x2c}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000002d80)=""/208, 0xd0}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000002f80)=""/245, 0xf5}, {0x0}, {&(0x7f0000003180)=""/246, 0xf6}], 0xa}, 0x81}], 0x400000000000043, 0x40012032, 0x0) 1m9.212707359s ago: executing program 3 (id=4058): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x800, 0x0, 0x4}, {0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa, 0x1}, [@coaddr={0x14, 0xe, @in6=@mcast1}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x14}}}]}, 0x168}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000fe000000000000000800040001", 0x21) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) io_setup(0xc00, &(0x7f0000000000)=0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x17) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xffffffff, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0_to_batadv\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0x9, 0x80000, r1}) r5 = eventfd(0x9) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000040)="1e", 0x1, 0x800000000000004b}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3eb, r0, 0x0, 0x0, 0x9, 0x0, 0x2, r5}]) 1m8.993592417s ago: executing program 3 (id=4061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x7}}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30"], 0x1e4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fff, 0x0) 1m8.939815182s ago: executing program 3 (id=4062): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=0x0, @ANYBLOB=',group_id=', @ANYRES8=r0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x2, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1a}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x401, 0x3, 0x6, 0x81}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x0, "65fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xd0, 0x8, 0x7, {0x7, 0x25, 0x1, 0xc, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x80, 0x61, 0x0, {0x7, 0x25, 0x1, 0xc, 0x4, 0x4a}}}}}}}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x12, 0x0}) 1m8.165730514s ago: executing program 3 (id=4064): syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000be02e708cf100355678f0102030109022d00010806007c0904bc0003e404ac000905"], 0x0) 1m7.846199202s ago: executing program 3 (id=4067): socket$kcm(0x29, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) fchmod(r0, 0x14) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x5bf, 0x7f, 0x6, 0x46, 0xfffffff2, 0x5f, 0x2, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x4, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x4, 0xe661, 0x8, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x15, 0x0, 0x80, 0xfffffffc, 0x5, 0x5, 0x8, 0x0, 0x1, 0x3e], [0x10000007, 0x10002, 0x12b, 0x4734646, 0x9, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x1, 0xea0, 0xfffffff9, 0x4, 0x4, 0x80, 0x5, 0x400, 0xffffffff, 0x6, 0x400001, 0xff, 0x1005, 0x8007fe, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xffffff01, 0x0, 0x10000003, 0x8000, 0xffff, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x9, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3d, 0x3, 0x200, 0x80, 0x3, 0x4, 0x0, 0x543, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x1, 0x7, 0x1, 0x51bf, 0x9, 0xce7, 0x1ff, 0x6, 0x80000000, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x7fff, 0x8ffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x2, 0x1, 0x80000003, 0x5, 0x8, 0xff, 0x1000003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x3, 0x2, 0x2b91, 0xa20, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x2, 0xb1c, 0x1, 0x200, 0x40fff, 0xfff]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) write$UHID_CREATE2(r0, &(0x7f0000000c40)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x2a, 0x7, 0x1, 0x200, 0xc68e, 0x80000000, "104129a6425ee51d43ee489041d7f3e9da4af445092b5e01d2f39e9f5b23230693e249495e3563ecb772"}}, 0x142) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1e0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x21, 0xff, 0x6}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1}, {0x4, 0x0, 0x1}, 0xff, 0x401}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x1, 0x43, 0x1}}, @common=@unspec=@realm={{0x30}, {0xc3c, 0x400}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @rand_addr=0x64010100, 0xffffff00, 0xff, 'pimreg1\x00', 'team0\x00', {}, {}, 0xff, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x9, 0x1, [0x3b, 0x24, 0x35, 0x2d, 0xe, 0x32, 0x7, 0x1f, 0x0, 0x16, 0x39, 0x37, 0xb, 0x7, 0x30, 0x1e], 0x0, 0xffffff7f, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {}, 0x1a, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 'geneve1\x00'}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m7.485861534s ago: executing program 32 (id=4067): socket$kcm(0x29, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) fchmod(r0, 0x14) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x5bf, 0x7f, 0x6, 0x46, 0xfffffff2, 0x5f, 0x2, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x4, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x4, 0xe661, 0x8, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x15, 0x0, 0x80, 0xfffffffc, 0x5, 0x5, 0x8, 0x0, 0x1, 0x3e], [0x10000007, 0x10002, 0x12b, 0x4734646, 0x9, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x1, 0xea0, 0xfffffff9, 0x4, 0x4, 0x80, 0x5, 0x400, 0xffffffff, 0x6, 0x400001, 0xff, 0x1005, 0x8007fe, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xffffff01, 0x0, 0x10000003, 0x8000, 0xffff, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x9, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3d, 0x3, 0x200, 0x80, 0x3, 0x4, 0x0, 0x543, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x1, 0x7, 0x1, 0x51bf, 0x9, 0xce7, 0x1ff, 0x6, 0x80000000, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x7fff, 0x8ffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x2, 0x1, 0x80000003, 0x5, 0x8, 0xff, 0x1000003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x3, 0x2, 0x2b91, 0xa20, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x2, 0xb1c, 0x1, 0x200, 0x40fff, 0xfff]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) write$UHID_CREATE2(r0, &(0x7f0000000c40)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x2a, 0x7, 0x1, 0x200, 0xc68e, 0x80000000, "104129a6425ee51d43ee489041d7f3e9da4af445092b5e01d2f39e9f5b23230693e249495e3563ecb772"}}, 0x142) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1e0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x21, 0xff, 0x6}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1}, {0x4, 0x0, 0x1}, 0xff, 0x401}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x1, 0x43, 0x1}}, @common=@unspec=@realm={{0x30}, {0xc3c, 0x400}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @rand_addr=0x64010100, 0xffffff00, 0xff, 'pimreg1\x00', 'team0\x00', {}, {}, 0xff, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x9, 0x1, [0x3b, 0x24, 0x35, 0x2d, 0xe, 0x32, 0x7, 0x1f, 0x0, 0x16, 0x39, 0x37, 0xb, 0x7, 0x30, 0x1e], 0x0, 0xffffff7f, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {}, 0x1a, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 'geneve1\x00'}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.478803241s ago: executing program 2 (id=4323): socket$kcm(0x10, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_emit_ethernet(0x476, &(0x7f0000000880)={@local, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "ba08b5", 0x440, 0x6, 0x1, @private2, @loopback, {[@routing={0x3a, 0x10, 0x1, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @local}]}, @hopopts={0x84, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @srh={0x3c, 0x6, 0x4, 0x3, 0x7, 0x20, 0x1, [@mcast1, @mcast2, @mcast1]}, @dstopts={0x1d, 0xb, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x200}, @calipso={0x7, 0x30, {0x1, 0xa, 0x5, 0x5, [0x4, 0xb, 0xf, 0x8, 0x9]}}, @jumbo={0xc2, 0x4, 0xc33}]}, @fragment={0x0, 0x0, 0x7, 0x1, 0x0, 0xa, 0x68}, @fragment={0x41be44e1bda34eb7, 0x0, 0x3, 0x0, 0x0, 0x3, 0x67}, @hopopts={0x62, 0x45, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0xfd, 0xe6, "0db985b1ed9f200053c9f0cff8a5909be2fb09897d05ff7e0d09aac6a9fb9c5a963fe578ee3a2cf25648b782d982421e24384e8935a8274337dc2f34ae541ec89240392d62b285f70448ff884441e8125b3776d07a5082adc62cdef5cda713574ba0a44dae55eb28b51636c3df5b78f1d445c6b4cb8cb47050e68353c76eab5539e0cd653119bd33a8a44d8367e482574eb383d90f031de3e32a3229235b8ddd4aba5e39ad2e6e3443ba28c8b8b82a1abfdee168cbebad2690514c557b93b6afb7220308ef56c7898152a4d833250e59c91469bfd52565a8cc360ff21f5d06d03aea83de0775"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x3}, @generic={0x31, 0xac, "3681f3e7aae8cb36383874d0439cd9a0bb69f8335d4ea098073ce23f33ccb87c56b151bed9750e6ae527ede3a609dd13efa9dd15e4114711266f400f40fcc02a06afabb9a94f101dbe58df443e5e716f085c7716c6579b60a6e0ca016497394047819a7f55110f0d22aee4879f2b51428bf24fa4401b678d54159b76887a16578e7af6080c3c0123769ebffeccbd45738bb53af282fb7cfd19ffcfb938cbc3136d211861f5c0abff89a42a21"}, @generic={0x7, 0x33, "b3ec458db34055e6dbf125cea8f26214d5c11b870f39c85cfb73c0aed4c93e031c76ac335e44a77addaca37d2bed36c50f9e73"}, @generic={0x6, 0x3, "61ed2c"}, @calipso={0x7, 0x40, {0x0, 0xe, 0x5, 0x680, [0x0, 0x1, 0x7fffffffffffffff, 0x3, 0x8, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x7f}]}, @routing={0x2, 0x10, 0x0, 0x1, 0x0, [@mcast1, @remote, @remote, @private1, @loopback, @mcast2, @private2, @mcast2]}], @payload_mcast={{{{{{0x30, 0x0, 0x1, 0x0, 0x1, 0xb, 0x0, 0x2, 0x3fdd, 0x0, 0x2, 0x9, 0x5, 0x1, 0x247, 0x0, 0x2, 0x4e21, 0x4e21}, 0x2, 0x2}, 0x4, 0x4}, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x4fbd, 0xc00, 0x0, 0x385}, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080), &(0x7f0000000000)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, r5, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r3, 0x6d32, 0x24, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000200)={0x8043, 0x0, 0x1, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x22200, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) io_pgetevents(0x0, 0x5c4c, 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000200)={[0x79]}, 0x8}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 8.995282461s ago: executing program 2 (id=4327): syz_usb_connect(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYRESDEC], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[5\xa9\x00\x00c\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000004c0)="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", 0xfd48, 0x90, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cfab413c1766972c2cddd27352bb1c6846839bd10fed0551f7c65feb2eb85cb2763b428bb315ba515895b1a85c612d6960364d5257dc816fa8a6dcdf5901cef48158753112a0a70290797ee340c015d50e6f3a98d9"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000740)={0x54, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r7 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r7, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmmsg$inet(r2, &(0x7f0000000280), 0x0, 0x20000000) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 8.598593661s ago: executing program 5 (id=4329): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x9, 0x5, 0x8, 0x2, 0x6, 0x85, 0x7, 0xf7, 0x9, 0x7, 0xbb, 0x7, 0x5}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) pwritev(r3, &(0x7f0000001340)=[{&(0x7f0000000080)="78dc494016527f73af1573b2efe82ecbe147346b66f13f", 0x17}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="cbc69a21bda17bb175e31aee48d40dcb9ee02de2676ea10e621302c9064c3589640538a5945ae18c5c17cfc220c8cee06b3771737af1d14c7c4034b3b5b58ce3a9edbda7f3e59e4ae499627fc478960541f31cd3fbd6ae22a11f7174310464bf51ba16feb496a623dde37f2e37f7be688c5e452386b6da607b240a96e8294133e50164defc485f2ded5ef2abc83cacb464ab72330b071f09cfecc843f1", 0x9d}, {&(0x7f00000012c0)="7186ff30fcc855dd25c81361f639b4defd88bf", 0x13}, {&(0x7f0000001300)='\nqK', 0x3}], 0x5, 0x5, 0x8) 7.82658225s ago: executing program 0 (id=4335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xfc}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lc\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e26, 0x2, 0x40000000, 0xfffffff8, 0x2}}, 0x44) 7.414625657s ago: executing program 0 (id=4338): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0x95) write$binfmt_script(r0, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080), &(0x7f0000000000)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, r5, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r3, 0x6d32, 0x24, 0x2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000200)={0x8043, 0x0, 0x1, 0x3}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x22200, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) io_pgetevents(0x0, 0x5c4c, 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000200)={[0x79]}, 0x8}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) 6.940114715s ago: executing program 5 (id=4340): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x43c002, 0x41) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)={0x28, 0x4, 0x0, {0x1, 0x1}}, 0x28) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0xffffffffffffffd3, 0x2, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, {0x5, 0x80, 0x100, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0xa000, 0x0, r2, 0x0, 0x8, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000ffdbdf25080000000400068005000500040000000e00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00\x00'}, {0x10, 0x111, 0xa}], 0x28}, 0xfc40) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket(0x2, 0x1, 0x0) listen(r7, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r7, 0x0, 0x0, 0x800) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000200)) 6.825820474s ago: executing program 5 (id=4341): r0 = eventfd2(0x8, 0x0) pwrite64(r0, &(0x7f0000000200)="8bd113694249547f6f1f2fcfb623747c4bbabfe4bd9e0f5a505e5ab57495b3a94986dbba94752cca5a76fca4b88bb047393afd237842b66b4e8b8d321c4034fb11da93d3e3dcee7360b7ca123f84356b7b46268842c2bca938634b5a6fddc5fc11be629b4c69a6d9d684a7d0ec02802ab6c157fe99193b515430286f0a18411676a849b85ae9ed6a0f3d8f8f759ebae9783fa3ce5f8fbe5a5464d33502dca7b1acf7acf9b8cac6caaed90f1ddb2f6f342e2fff7bd2d0771a9e4619dee409b01ce98e36caa85b0b", 0xc7, 0x9) ppoll(&(0x7f0000000500)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000480)=""/82, 0x52) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="6120e56c2a3a2a2072"], 0x9) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x1000, 0x4000}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000d00)={&(0x7f0000000940)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000b80)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x6c}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x30}, 0x4) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000a40)={&(0x7f0000000000)=[{0xee, 0x4a11, 0x0, 0x0}], 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) sendto$packet(r1, &(0x7f0000000780)="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", 0x4, 0x4004011, &(0x7f0000000080)={0x11, 0x15, r6, 0x1, 0xff, 0x6, @remote}, 0x14) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x8000000000000002, 0x100, 0x2, 0x9, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0xffffffff, 0x8000, 0x9, r8, r9, 0x1, 0x4}}, {0x20000000000000, 0x3, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000a80)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0x4e21, 0x0, 0x4e22, 0x3, 0xa, 0xa0, 0x80, 0x87, r6, r8}, {0x8, 0xa4, 0x7, 0x7f, 0x7fffffff, 0x4, 0x7, 0x9}, {0x5, 0x81, 0x3, 0x7}, 0x6, 0x6e6bb7, 0x1, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3500, 0x4, 0x1, 0x8, 0x7, 0x4, 0x8000}}, 0xe8) r10 = syz_open_dev$admmidi(&(0x7f0000000540), 0x2, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r10, 0x810c5701, &(0x7f0000000580)) r11 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x48003) ioctl$SCSI_IOCTL_PROBE_HOST(r11, 0x5385, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r11, 0xffffffff80000900, 0xee00, &(0x7f00000000c0)) 6.755364009s ago: executing program 4 (id=4343): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0xa00, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x1, 0xc000, 0x3, 0x20002f7}) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="0200000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020020000100"/28], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8085}, 0x24000840) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffc, 0x8001, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0xa1, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x3c}, 0x2, @in=@remote, 0x3503, 0x4, 0x3, 0x0, 0x0, 0x80000}]}]}, 0xfc}}, 0x0) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x8000) socket$inet6(0xa, 0x2, 0x0) 6.079788054s ago: executing program 0 (id=4348): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000300000000000019078ac14143480bf888f15e643bbffffffff08009078ac1e0101450000000000000000290000"], 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x100007, 0x0, 0x9, 0x1, 0xfffffdfffffffffe, 0xfa0f, 0x800003}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x2, 0x3a, 0x1005, 0x1007, 0x7ff, 0x101, 0x3f}, 0x1c) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500", 0x4, 0x8004, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x8, 0x6, @multicast}, 0x14) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000300)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000002d80)=""/53, 0x0, 0x7000}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000340)=0x1) writev(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000900)="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", 0x7f3}], 0x1) 4.673901363s ago: executing program 4 (id=4350): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) pipe(0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40848c0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, 0xffffffffffffffff, 0x40000) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x88880}, 0x4805) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0, 0xffffffffffffffe8}], 0x1, 0x0, 0x0, 0xfe0c) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 4.307514945s ago: executing program 0 (id=4351): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x43c002, 0x41) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)={0x28, 0x4, 0x0, {0x1, 0x1}}, 0x28) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0xffffffffffffffd3, 0x2, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, {0x5, 0x80, 0x100, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0xa000, 0x0, r2, 0x0, 0x8, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000ffdbdf25080000000400068005000500040000000e00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00\x00'}, {0x10, 0x111, 0xa}], 0x28}, 0xfc40) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket(0x2, 0x1, 0x0) listen(r7, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r7, 0x0, 0x0, 0x800) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000200)) 3.918216059s ago: executing program 0 (id=4352): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x6728) write$dsp(r4, &(0x7f00000001c0)="a5830a602214f6b4e928d758f38a5a7cb4b31c0900000000000000784caa11d6", 0x20) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000140)=0xa) fchdir(r3) close(r3) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000340)=0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x10000000}, 0x10) 3.854684975s ago: executing program 2 (id=4353): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa0402, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="1243", 0x2}], 0x1) 3.826768372s ago: executing program 2 (id=4354): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000005a80)=[{{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/36, 0x24}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/46, 0x2e}], 0x4, &(0x7f0000000580)=""/250, 0xfa}, 0xe}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000700)=""/139, 0x8b}, {&(0x7f00000007c0)=""/163, 0xa3}], 0x3, &(0x7f00000008c0)=""/198, 0xc6}, 0x8}, {{&(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a40)=""/102, 0x66}, {&(0x7f0000000ac0)=""/156, 0x9c}, {&(0x7f0000000b80)=""/107, 0x6b}, {&(0x7f0000000c00)=""/22, 0x16}, {&(0x7f0000000c40)=""/13, 0xd}, {&(0x7f0000000c80)=""/17, 0x11}, {&(0x7f0000000cc0)=""/168, 0xa8}], 0x7, &(0x7f0000000e00)=""/2, 0x2}, 0x4}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000f40)=""/195, 0xc3}, {&(0x7f0000001040)=""/88, 0x58}, {&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/55, 0x37}, {&(0x7f0000005880)=""/148, 0x94}], 0x6, &(0x7f00000059c0)=""/184, 0xb8}, 0xffff}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xc, 0xfa11, 0xffffffff}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = inotify_init() r4 = socket(0x80000000000000a, 0x80000, 0xfffffffd) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) lseek(r6, 0x0, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x16a0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket(0x26, 0x0, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000130a05000000000000000000000000060800034000000005740008006b29d747a350a3b9cb57edcee2dd798b8b6c145ea96e51f08b5a60f788fd302bd4489756ec734885c90211d2152d71e37c3e5576a80361018c27dcb1f5faf10a57c0f5ce032b700b898e3a8391152b75b63843527aa7dae48000dd84091a7326e0b287c7"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 3.70279547s ago: executing program 5 (id=4355): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x208002, 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) (async) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x4000, 0x8000}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c1, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c1, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd]}}}}]}, 0x88}}, 0x20000000) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000"], 0x110) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) (async) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r9, 0x4611, 0x3) (async) ioctl$FBIOBLANK(r9, 0x4611, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2800f3ffff09030000000000000000000300000308000240000000040900010073797a300000000028000000000a010400000000000000000300000a0900010073797a30000000000800024000000007140000001000ee2a94f57eec529300000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2800f3ffff09030000000000000000000300000308000240000000040900010073797a300000000028000000000a010400000000000000000300000a0900010073797a30000000000800024000000007140000001000ee2a94f57eec529300000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78000000020601080000000000000000030000063800078008000640000000100c00028008000142e00000020800134000000040080006400000000808001340000000000500010006000000050005000a000000050004000000000011000300686173683a69702c706f7274000000000000000000000000368f06bcb63c618d3d795eeaf66a"], 0x78}}, 0x80) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 3.033295886s ago: executing program 1 (id=4356): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x1a3000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) (async) syz_usb_connect(0x3, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600010000000009040000040de67a0009050300000400000009050000ebff09030509050402d08fb68d0009058102"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) (async, rerun: 64) syz_usb_connect$uac1(0x5, 0xd8, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x8, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0xf9}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0xe, 0x1, "a4", "1cad39"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0x6, 0x0, 0x7}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x80, 0x1, 0x6, 0x80, "8bbb75"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0xfe, "c0accf", "8a9964"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x6, 0xa9, "e6ee"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x0, 0x7, {0x7, 0x25, 0x1, 0xc, 0x9, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x2, 0xcc, "6fee"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe, 0x2, 0x9, 0x8f, '\n', "9f"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x5, 0xf, "", '\r'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0xe, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x0, 0x3, {0x7, 0x25, 0x1, 0x8, 0x3, 0xfffe}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x200, 0x6, 0x6, 0xff, 0x40, 0x3}, 0xf, &(0x7f00000004c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x9, 0xeeb}]}, 0x2, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x72, &(0x7f0000000540)=@string={0x72, 0x3, "4dc98231e3cb88bf7959d35b19790f929808cf893f7fecbe7f3e9d47c967b5f9628f6104ecee20c174fadbb0f16869fab1df61f53a98a9a11cbaa2412778627545372359bd22025af37d34fbcdf11573d6d56e32faf2489d2e14f0f18b2219102a859366c35c8e5fd7d3f9faedb57989"}}]}) (rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) (async, rerun: 64) syz_usb_ep_write(r1, 0x81, 0x14, &(0x7f0000001180)="22c4e79fb3000000000000000000f7b300000002") (rerun: 64) 2.946978638s ago: executing program 2 (id=4357): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000005c0)=0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x8000000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0xe78eb500, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x2d88, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x2d50, 0x2, [@TCA_CGROUP_ACT={0x2d4c, 0x1, [@m_connmark={0xa4, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x1cb8, 0x5, 0x0, 0x0, {{0xa}, {0x1c8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6, [{0xffffffff, 0x9, 0x0, 0x0, 0x1, 0x2}, {0x3, 0xe, 0x1, 0x1, 0x7, 0x51b}]}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x0, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0x1800, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x5, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x9, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8000, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x1, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x10001, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x3, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x8}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x4, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x8, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xf80, 0xb, 0x0, 0x0, {{0xa}, {0xf54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x88, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x7, 0x456, 0x4, 0x6, 0x1}, 0xb9, 0xf3, [{0x3, 0x5, 0xd, 0x1, 0x5, 0x10}, {0x7fff, 0x4, 0x1, 0x3, 0xb, 0xf}, {0x8, 0xfffffffa, 0x8001, 0x10, 0x0, 0x7fff}, {0xbe, 0x5, 0x6, 0xfffffffa, 0x7, 0x2}, {0x1, 0x1, 0x10, 0x7fffffff, 0xfffffff7, 0x4}, {0x401, 0x7, 0x0, 0x6, 0x4, 0xc8}, {0x22, 0x5, 0x6, 0x5, 0x3, 0x4}]}, [{0x8bc, 0x1, 0x6, 0x4, 0x100, 0xfffffffd}, {0x0, 0x68, 0xfffffff8, 0x6, 0x5, 0x4}, {0xbb05, 0x97af, 0x3, 0x2, 0x4, 0x6}, {0x6, 0x1, 0x3, 0x2c27f2d1, 0x0, 0x559a}, {0x0, 0x8, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x1000, 0x7f, 0x8, 0x3, 0x6}, {0x4, 0x2c4, 0x7ab, 0x4, 0x7}, {0xa92, 0x3, 0xb, 0x0, 0x1, 0x5}, {0x7fff, 0xe, 0xa524, 0x40, 0x5, 0x101}, {0xb, 0x8, 0xfffffff8, 0x1000, 0xd72, 0x4}, {0x9, 0x8000000, 0x0, 0x2, 0x2, 0x3ff}, {0x7, 0x3, 0x6, 0xcea, 0xff, 0x80000001}, {0x1800000, 0x9, 0x3, 0x7ff, 0x1, 0x4}, {0xfffffffd, 0xfffffffd, 0x9, 0x0, 0xd1, 0x61b}, {0xfffffff1, 0x80, 0x7, 0x1, 0x4, 0x1000}, {0xdab4, 0x3b6, 0x8000, 0x9, 0x1}, {0x2, 0x400, 0x0, 0x9, 0x7, 0x2}, {0xffffffff, 0x245, 0x63, 0x80000001, 0xc00000, 0xa}, {0xfffffffc, 0x10000, 0x80000001, 0x8, 0x8, 0x5}, {0x80000001, 0x1, 0x5e67, 0x0, 0xff, 0x9}, {0x6, 0x5, 0x1a, 0x618, 0x2, 0x1}, {0x9, 0x9, 0x5, 0x6, 0x4, 0x8}, {0x1, 0x7, 0xf, 0x1, 0x2, 0x1}, {0x9, 0xa, 0x3, 0x2, 0x6, 0x9}, {0x495f, 0xfe, 0x9bb3, 0x2, 0xfffffffa, 0x7}, {0x9, 0x10001, 0xc, 0x76, 0x6, 0x4}, {0x8c, 0x4, 0x8f29, 0x0, 0xffff8001, 0x7}, {0xfff, 0xffff, 0xc, 0xe4, 0x6, 0x7}, {0x7, 0x8, 0xffff8001, 0x100, 0x7}, {0x4, 0xbe8b, 0x4, 0x6, 0x1, 0x3}, {0x5, 0xad4, 0x2, 0x9, 0xb1a8, 0x5}, {0x9, 0x3, 0xb6e, 0xfff, 0x200, 0x9}, {0x4, 0x8000, 0x8, 0x5, 0x6}, {0x4, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x7, 0x3e, 0x6, 0x8, 0x7, 0x7}, {0x6, 0x401, 0x4, 0x9, 0x3}, {0xa, 0x40, 0x9, 0xf, 0x5, 0xf}, {0x12b8c98e, 0xfff, 0x7fffffff, 0x3, 0xe, 0x7fff}, {0x6, 0x8, 0x118, 0xe6c6, 0x6, 0x9738}, {0x3, 0x9, 0x7ff, 0x3, 0xffffffff, 0x9}, {0x8, 0x6, 0x7, 0x7, 0x2, 0x8}, {0x80000000, 0x5ce23415, 0x24, 0xfff, 0xff, 0x2}, {0x100, 0x1000, 0xca6, 0x0, 0xfffffff7, 0xa1}, {0x1, 0x8, 0x7, 0x5, 0xfffffff7, 0x3a}, {0x84c, 0x81, 0x7, 0x1, 0x1, 0x7f}, {0x9, 0x200, 0x700000, 0x1, 0x3, 0x5}, {0x6, 0x2, 0x7, 0x6, 0xfffffffb, 0x7}, {0x0, 0x6, 0xf, 0x9, 0x5, 0xd5a}, {0xfffffff7, 0x7, 0xffffff7f, 0x5, 0x8, 0x2}, {0x5, 0x8, 0x3, 0x26, 0x3, 0x400}, {0x0, 0x6, 0x6, 0x7, 0x101, 0x222}, {0x1f, 0x800, 0x3, 0xe6b, 0x0, 0xfffffff7}, {0x8, 0x4, 0x6, 0x0, 0x2, 0x5}, {0x0, 0x2, 0x2, 0x7, 0x400, 0x7}, {0x200, 0x3, 0x8000, 0x65, 0x1000, 0x40}, {0x10, 0xa, 0x4, 0x10, 0x1, 0x5}, {0x9, 0x9, 0xe95, 0x4, 0xd}, {0xe0, 0x2, 0x80000001, 0x4, 0x1a49, 0x6}, {0x2, 0x4, 0x4, 0x10, 0xfffff0ac, 0x3}, {0xbb, 0x4, 0x4, 0x1, 0x7fffffff, 0x6}, {0xffffffff, 0xffff, 0x6, 0xe4, 0x0, 0x6}, {0xfffffff9, 0x2, 0x1, 0xc, 0x8, 0x800}, {0x6, 0x4, 0x5, 0x1, 0x1, 0x4}, {0xe, 0x6, 0x1, 0x8, 0x9, 0x9}, {0x7, 0xc6, 0x3ff, 0xe7e3, 0x5, 0x9}, {0xea48, 0xfffffffd, 0x10000, 0x6, 0x3, 0x5}, {0x4, 0xffff, 0x1ff, 0x8, 0x4, 0xfffffff0}, {0xb, 0x3b3, 0x1, 0x101, 0xe11, 0x5}, {0x3, 0x4, 0x6, 0xff, 0xff, 0x7}, {0x0, 0x2, 0x8, 0x4, 0x7, 0x4}, {0x7, 0xb, 0x44df, 0x9, 0x6, 0x5d5ab339}, {0x6, 0x6, 0x40, 0x2, 0x9, 0x1ff}, {0x7, 0xffffffff, 0x4, 0x10001, 0xffffffff, 0x7}, {0x81, 0xa, 0x3, 0x8, 0xd33, 0x6}, {0x2, 0x4, 0x9ab, 0xb4, 0x5, 0xb577}, {0x0, 0xffff, 0x6, 0x7fff, 0x0, 0x5}, {0xd, 0x6, 0xaa10, 0xfffff477, 0x0, 0xff}, {0x2, 0xfffffffa, 0x4, 0x90, 0x9, 0x3e}, {0x2, 0x80000000, 0x4, 0x4, 0x90, 0x2}, {0x4, 0x1, 0x6, 0x4, 0x4, 0x7}, {0x5, 0x6, 0x4, 0xb80c, 0x5, 0x4cf1}, {0x8001, 0x4, 0x8, 0x9, 0x0, 0x6}, {0x40, 0x9, 0x18c, 0x100, 0x2, 0x9}, {0x3, 0x4, 0x9, 0x7f, 0x7, 0x179}, {0x0, 0x7, 0x2, 0x80, 0x401, 0x8}, {0x7, 0x0, 0x10001, 0xf6, 0x64f57d4f, 0x10f00000}, {0x7, 0x200, 0x200, 0x9, 0x5, 0x4512}, {0xd3, 0x0, 0x8, 0x2, 0x8, 0x101}, {0x6b0c, 0x9, 0x7, 0x3ff, 0x4}, {0x5f, 0x4, 0xffffffff, 0x0, 0x0, 0x7}, {0x4, 0x4, 0x1200000, 0x7, 0x800, 0x6}, {0x1, 0x6, 0x80, 0xef8, 0x0, 0x5}, {0x40000, 0x6, 0x1, 0x1, 0x2, 0xd09}, {0x8000, 0x9, 0xfffffffd, 0x100, 0x6, 0xfffffff7}, {0x9, 0x2, 0x9, 0x1, 0x3, 0xbe2}, {0x4, 0xa, 0x0, 0x0, 0x6, 0x6}, {0x3ff, 0x5, 0x1, 0x7000, 0x4e, 0x8}, {0xd6, 0x9, 0x10000, 0x8, 0xff, 0x2}, {0xb, 0x1, 0x1f36, 0x8ff4, 0xfff, 0x6}, {0x0, 0x516607, 0x2, 0x3, 0x3, 0xffffffff}, {0xffff4b03, 0x5, 0x10, 0x1, 0x3, 0x6}, {0x7, 0x0, 0x6, 0x8000, 0x10, 0xa}, {0x2, 0x6c, 0xffffffff, 0x2, 0x94, 0x9}, {0x3, 0x40, 0xfffffffa, 0x6, 0x0, 0xef0}, {0x8, 0x8, 0x64, 0x10, 0x49, 0x80}, {0x9, 0xc, 0x8000, 0x7, 0x3, 0x140}, {0x7, 0x7, 0xf16, 0x7ff, 0x3, 0x7}, {0x1ff, 0x9, 0x1, 0x9, 0x4e, 0xffffffff}, {0x4, 0x2, 0xffffffff, 0xe559, 0xc16, 0x4}, {0xfffff802, 0x1, 0x4, 0x1, 0x6}, {0x2, 0xf, 0x10, 0x3, 0xafae, 0x3}, {0x10000, 0x4, 0x6, 0x2, 0x6, 0xa4}, {0x0, 0x4, 0x0, 0x4, 0x1000, 0x6f17}, {0x2, 0x4, 0xd9, 0x7fffffff, 0x3, 0x805}, {0xf17, 0x4, 0x40, 0x5, 0x1, 0xff}, {0x0, 0x80000001, 0xb44f, 0xfffffffa, 0x0, 0x8a5}, {0x8000, 0x7ff, 0x5, 0x3, 0x4, 0x600}, {0x4b, 0xad, 0x8, 0x669, 0x1ff, 0x3}, {0x2, 0xa45, 0x1000, 0x0, 0xa, 0x1}, {0x4, 0x1, 0x8, 0x2, 0xe0, 0x4}, {0x4, 0xffd, 0x5, 0x3, 0x7fffffff, 0xfffffffb}, {0x8, 0x4, 0x4, 0x6, 0x1, 0x5}, {0x6, 0x0, 0xffffdbdc, 0x2, 0x9, 0x140000}, {0x2, 0x1, 0xdc, 0x8, 0x80000000, 0x569}, {0x0, 0x8, 0xffffffff, 0xa, 0x80000001, 0xa}, {0xfffffbff, 0x10, 0x8, 0x101, 0xfffffffa, 0x8000}, {0xa9c, 0x6, 0x1ff, 0x8, 0x1d, 0x3}, {0x2, 0xfffff16c, 0x5, 0x3, 0x5, 0x7ff}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2d451479be6868cc, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xa02f5fe57b5d7768}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x4}, {0x7}, {0x1}, {0x3}, {0x2}, {}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x2220886d9e210a2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x2d88}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000580), 0x3, 0x2) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000f80000000000000000000000070000000707b5640101010144349301640101010000000fac14141000000009e0000002000000077f00000100000319ac1414bb00000002ffffffff0000007b442497930000000000000002000000007fffffff64010102fffffeffac14141800000007442c1bf1ac1e0001000000040a0101020000000000"], 0x130}, 0x80a0) 2.6212891s ago: executing program 0 (id=4358): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x218540, 0x20, 0x34}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000001704b45adbde81000000810045"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x110f) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r3, 0x4000, r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a2510f000011de2312f2526854a5a004cb08dad59319ee0f21d26bfc6822ac75257946fbc71beb515df07c683b6f8d165e80d3237cf4996c"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 2.54320064s ago: executing program 4 (id=4359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x6728) write$dsp(r4, &(0x7f00000001c0)="a5830a602214f6b4e928d758f38a5a7cb4b31c0900000000000000784caa11d6", 0x20) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000140)=0xa) fchdir(r3) close(r3) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000340)=0xf) truncate(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x10000000}, 0x10) 2.376139871s ago: executing program 1 (id=4360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0)=0xc000000, &(0x7f0000000200)='%pI4 \x00'}, 0x20) 2.212708222s ago: executing program 1 (id=4361): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x240000c1}, 0x4048814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1af87934}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x43}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2.04896992s ago: executing program 5 (id=4362): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x43c002, 0x41) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)={0x28, 0x4, 0x0, {0x1, 0x1}}, 0x28) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0xffffffffffffffd3, 0x2, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, {0x5, 0x80, 0x100, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0xa000, 0x0, r2, 0x0, 0x8, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000ffdbdf25080000000400068005000500040000000e00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00\x00'}, {0x10, 0x111, 0xa}], 0x28}, 0xfc40) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket(0x2, 0x1, 0x0) listen(r7, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r7, 0x0, 0x0, 0x800) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000200)) 1.894160594s ago: executing program 1 (id=4363): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8041, 0x0, 0x5441, 0x0, 0xfffffe0000000001, 0x9, 0xf7ffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) dup(r2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000780)={0x30, r5, 0x0, 0x0, 0x0, 0x84, 0xa9, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$netlink(0x10, 0x3, 0x4) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r10, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb00000000000000", 0x24) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x884) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r12, 0xffffffffffffffff, 0x0) 1.098293496s ago: executing program 5 (id=4364): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000002380)={{0x0, 0x81}, 0x0, 0x0, 0x3, {0x4, 0x21}, 0x14, 0x1}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 840.359346ms ago: executing program 4 (id=4365): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000000600)) unshare(0x24020400) (fail_nth: 7) 249.9395ms ago: executing program 4 (id=4366): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101000000ce2aaa2bcd067f4cd6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000130001002dbd7000fcdbdf", @ANYRES32=0x0, @ANYBLOB="0060000083010000080029004101000014000300766c616e300000000000000000000000080028"], 0x44}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac2(0x0, 0xaa, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003000000ff99040d50400001020301090298000301f79001080b010000010120000924010600001300040a240b09055a2a44a3860904010000010220000904010101010220000b24020181030804aee7c710240202010081000391a05ae0c3b6e2090501090002077c0008250100080008000904020000010220000904020101010220000a240202440bff0754030905820900000908df08250100030106000000000000000000"], &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6, 0x0, 0x4, 0x20, 0xa}, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r1], 0x4, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x340a}}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001104ffffffff3f00000000000008", @ANYRES32=0x0, @ANYBLOB="a5fdad88900a00002c0012800b00010062726964676500001c00028008001d000720000005002d000100000006000600460e00000a0001"], 0x58}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) (async) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/80, 0x50, 0x1, &(0x7f0000000900)=""/208, 0xd0}, &(0x7f0000000700)=0x40) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/80, 0x50, 0x1, &(0x7f0000000900)=""/208, 0xd0}, &(0x7f0000000700)=0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31080000000900010073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) (async) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) (async) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB='M[\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="140035006772653000"/20], 0x3c}}, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0xd0, 0x0, 0x0, 0x0}, {0x5, 0x1, 0x0, 0x0}, {0xf800, 0x4000, 0x0, 0x0}], 0x3}) 249.264202ms ago: executing program 1 (id=4367): socketpair$unix(0x1, 0xcb58ed985d2aaebd, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x400, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x7}}}}]}, 0x40}}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = socket(0x2b, 0x80801, 0x1) shutdown(r4, 0x7ffffffe) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0), 0x802, 0x0) write$UHID_INPUT(r5, &(0x7f0000000600)={0x8, {"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", 0x1000}}, 0x1006) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000001640)=""/140, 0x8c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r7) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000006) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="00082dbd7000fedbdf250300000005003700000000000800310008000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) r10 = dup2(r8, r8) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, 0x0) read$FUSE(r10, &(0x7f00000063c0)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x4000010) 206.522077ms ago: executing program 2 (id=4368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010"], 0x48}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 0s ago: executing program 1 (id=4369): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) (fail_nth: 16) kernel console output (not intermixed with test programs): interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.400191][ T2154] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 876.436237][ T2154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.475038][ T2154] usb 5-1: config 0 descriptor?? [ 876.916595][ T2154] asus 0003:048D:CE50.0031: unknown main item tag 0x0 [ 876.932658][ T2154] asus 0003:048D:CE50.0031: unknown main item tag 0x0 [ 876.948919][ T2154] asus 0003:048D:CE50.0031: unknown main item tag 0x0 [ 876.963788][ T2154] asus 0003:048D:CE50.0031: unknown main item tag 0x0 [ 876.997278][ T2154] asus 0003:048D:CE50.0031: unknown main item tag 0x0 [ 877.018593][ T2154] asus 0003:048D:CE50.0031: unknown main item tag 0x0 [ 877.045461][ T2154] asus 0003:048D:CE50.0031: unknown main item tag 0x0 [ 877.067804][ T2154] asus 0003:048D:CE50.0031: unknown main item tag 0x0 [ 877.085956][ T2154] asus 0003:048D:CE50.0031: unknown main item tag 0x0 [ 877.102163][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 877.123237][ T2154] asus 0003:048D:CE50.0031: unknown main item tag 0x0 [ 877.139440][ T9] usb 1-1: USB disconnect, device number 60 [ 877.154415][ T2154] asus 0003:048D:CE50.0031: unexpected long global item [ 877.174886][ T2154] asus 0003:048D:CE50.0031: Asus hid parse failed: -22 [ 877.193971][ T2154] asus 0003:048D:CE50.0031: probe with driver asus failed with error -22 [ 877.218413][ T2154] usb 5-1: USB disconnect, device number 65 [ 877.682840][T18891] loop9: detected capacity change from 0 to 7 [ 877.691618][T18891] Dev loop9: unable to read RDB block 7 [ 877.697332][T18891] loop9: unable to read partition table [ 877.703900][T18891] loop9: partition table beyond EOD, truncated [ 877.710565][T18891] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 877.722003][T18891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3984'. [ 878.000001][ T796] usb 3-1: 1:151 : invalid UAC_AS_GENERAL desc [ 878.006765][ T796] usb 3-1: 0:2 : does not exist [ 878.055771][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 878.087620][ T796] usb 3-1: USB disconnect, device number 42 [ 878.098648][T18898] FAULT_INJECTION: forcing a failure. [ 878.098648][T18898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.115838][ T29] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 878.149040][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 878.173031][T18898] CPU: 0 UID: 0 PID: 18898 Comm: syz.2.3985 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.173051][T18898] Tainted: [L]=SOFTLOCKUP [ 878.173055][T18898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 878.173062][T18898] Call Trace: [ 878.173067][T18898] [ 878.173073][T18898] dump_stack_lvl+0xe8/0x150 [ 878.173093][T18898] should_fail_ex+0x412/0x560 [ 878.173112][T18898] _copy_to_user+0x31/0xb0 [ 878.173126][T18898] simple_read_from_buffer+0xe1/0x170 [ 878.173147][T18898] proc_fail_nth_read+0x1bb/0x230 [ 878.173163][T18898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 878.173179][T18898] ? rw_verify_area+0x2a6/0x4d0 [ 878.173191][T18898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 878.173206][T18898] vfs_read+0x20c/0xa70 [ 878.173221][T18898] ? __pfx_vfs_read+0x10/0x10 [ 878.173230][T18898] ? aa_sk_perm+0x6d5/0x900 [ 878.173247][T18898] ? fd_install+0x94/0x3d0 [ 878.173262][T18898] ? __pfx_aa_sk_perm+0x10/0x10 [ 878.173280][T18898] ksys_read+0x150/0x270 [ 878.173292][T18898] ? __pfx_ksys_read+0x10/0x10 [ 878.173308][T18898] do_syscall_64+0x14d/0xf80 [ 878.173322][T18898] ? trace_irq_disable+0x3b/0x150 [ 878.173331][T18898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.173342][T18898] ? clear_bhb_loop+0x40/0x90 [ 878.173355][T18898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.173365][T18898] RIP: 0033:0x7f894eb5d04e [ 878.173376][T18898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 878.173391][T18898] RSP: 002b:00007f894fa73fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 878.173403][T18898] RAX: ffffffffffffffda RBX: 00007f894fa746c0 RCX: 00007f894eb5d04e [ 878.173411][T18898] RDX: 000000000000000f RSI: 00007f894fa740a0 RDI: 0000000000000005 [ 878.173418][T18898] RBP: 00007f894fa74090 R08: 0000000000000000 R09: 0000000000000000 [ 878.173424][T18898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.173431][T18898] R13: 00007f894ee16038 R14: 00007f894ee15fa0 R15: 00007f894ef3fa48 [ 878.173446][T18898] [ 878.380883][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 878.599848][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 878.636130][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 878.675552][ T29] usb 1-1: config 0 has no interfaces? [ 878.682516][ T29] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 878.691940][ T29] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 878.700391][ T24] usb 5-1: config 2 has an invalid interface number: 83 but max is 0 [ 878.720527][ T24] usb 5-1: config 2 has no interface number 0 [ 878.729770][ T29] usb 1-1: Manufacturer: syz [ 878.746383][ T29] usb 1-1: config 0 descriptor?? [ 878.751573][ T24] usb 5-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=54.63 [ 878.777873][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.794577][ T24] usb 5-1: Product: syz [ 878.831302][ T24] usb 5-1: Manufacturer: syz [ 878.842910][ T24] usb 5-1: SerialNumber: syz [ 879.090980][T18891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.114757][T18891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.166787][ T24] usb 5-1: USB disconnect, device number 66 [ 879.752290][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3989'. [ 880.712252][ T5884] usb 1-1: USB disconnect, device number 61 [ 880.718248][ T2154] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 880.738604][T18929] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 880.927984][ T2154] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 880.963213][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 880.995457][ T2154] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 881.024302][ T2154] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 881.034495][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.053828][ T2154] usb 4-1: config 0 descriptor?? [ 881.068613][ T2154] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 881.083628][T18940] IPVS: stopping backup sync thread 18941 ... [ 881.225533][ T5933] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 881.272540][ T9] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 881.389883][ T5933] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 881.398992][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.412078][ T5933] usb 5-1: config 0 has no interface number 0 [ 881.500712][ T5933] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 881.502319][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 881.593705][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.601967][ T9] usb 1-1: Product: syz [ 881.611982][ T9] usb 1-1: Manufacturer: syz [ 881.616734][ T9] usb 1-1: SerialNumber: syz [ 881.633256][ T9] usb 1-1: config 0 descriptor?? [ 881.651017][ T5933] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 881.726842][ T5933] usb 5-1: config 0 interface 52 has no altsetting 0 [ 881.743274][ T5933] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 881.785479][ T5933] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 881.806796][ T5933] usb 5-1: Manufacturer: syz [ 881.846738][ T5933] usb 5-1: config 0 descriptor?? [ 881.895278][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 882.011408][ T5933] hub 5-1:0.52: bad descriptor, ignoring hub [ 882.028263][ T5933] hub 5-1:0.52: probe with driver hub failed with error -5 [ 882.334753][ T5933] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input95 [ 882.635674][ T5933] usb 5-1: USB disconnect, device number 67 [ 882.825507][ T2154] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 882.997561][ T2154] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 883.008866][ T2154] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 883.018821][ T2154] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 883.029683][ T2154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.042132][T18951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 883.062509][ T2154] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 883.152870][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 883.169361][T18955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 883.186175][T18953] fuse: Bad value for 'fd' [ 883.192625][T18953] netlink: 'syz.4.4000': attribute type 4 has an invalid length. [ 883.202097][T18953] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4000'. [ 883.220968][T18953] .`: renamed from bond0 (while UP) [ 883.299624][ T24] usb 4-1: USB disconnect, device number 29 [ 883.318899][T18951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.330149][T18951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.384329][ T2154] usb 3-1: USB disconnect, device number 43 [ 883.453630][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4002'. [ 883.715533][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 883.875460][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 883.882836][ T24] usb 5-1: config 0 has no interfaces? [ 883.988370][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 884.037750][ T9] usb 1-1: USB disconnect, device number 62 [ 884.121932][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 884.157222][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 884.175194][ T24] usb 5-1: Manufacturer: syz [ 884.202772][ T24] usb 5-1: config 0 descriptor?? [ 884.742473][T18984] tipc: New replicast peer: 255.255.255.255 [ 884.749231][T18984] tipc: Enabled bearer , priority 10 [ 885.075515][ T9] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 885.240962][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 885.324003][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 885.350660][T18990] netlink: 'syz.3.4010': attribute type 1 has an invalid length. [ 885.362981][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 885.475169][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 885.487418][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 885.496374][ T9] usb 1-1: Product: syz [ 885.500747][ T9] usb 1-1: Manufacturer: syz [ 885.506098][ T9] usb 1-1: SerialNumber: syz [ 885.517804][ T9] usb 1-1: config 0 descriptor?? [ 885.531138][ T9] usb 1-1: selecting invalid altsetting 0 [ 885.686898][ T5884] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 885.847010][ T5884] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 885.862083][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.865180][ T24] usb 1-1: USB disconnect, device number 63 [ 885.872504][ T5884] usb 4-1: config 0 has no interface number 0 [ 885.884598][ T9] tipc: Node number set to 2130706433 [ 885.891072][ T5884] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 885.904507][ T5884] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.918324][ T5884] usb 4-1: config 0 interface 52 has no altsetting 0 [ 885.931118][ T5884] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 885.943928][ T5884] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 885.952807][ T5884] usb 4-1: Manufacturer: syz [ 885.964505][ T5884] usb 4-1: config 0 descriptor?? [ 885.973892][ T5884] hub 4-1:0.52: bad descriptor, ignoring hub [ 885.982146][ T5884] hub 4-1:0.52: probe with driver hub failed with error -5 [ 886.176211][ T5884] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input96 [ 886.322051][ T5933] usb 5-1: USB disconnect, device number 68 [ 886.505848][ T24] usb 4-1: USB disconnect, device number 30 [ 886.641449][T19007] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 886.965608][ T24] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 887.095256][T19014] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 887.112104][T19013] IPVS: stopping backup sync thread 19014 ... [ 887.137557][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 887.147216][ T24] usb 5-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 887.180538][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.220323][ T24] usb 5-1: config 0 descriptor?? [ 887.238964][ T24] pwc: Samsung MPC-C30 USB webcam detected. [ 887.445522][ T5933] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 887.616327][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 887.636887][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 887.650571][ T5933] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 887.659758][ T5933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.670338][ T5933] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 887.707342][ T5933] usb 4-1: too many endpoints for config 1 interface 1 altsetting 151: 235, using maximum allowed: 30 [ 887.749024][ T5933] usb 4-1: config 1 interface 1 altsetting 151 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 887.787656][ T5933] usb 4-1: config 1 interface 1 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 235 [ 887.840753][ T5933] usb 4-1: config 1 interface 1 has no altsetting 1 [ 887.870551][ T5933] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 887.879851][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.888903][ T5933] usb 4-1: Product: syz [ 887.893294][ T5933] usb 4-1: Manufacturer: syz [ 887.899156][ T5933] usb 4-1: SerialNumber: syz [ 888.572463][T19024] fuse: Unknown parameter 'use' [ 888.666318][T13140] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 888.851034][T13140] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 888.860589][T13140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.872427][T13140] usb 1-1: Product: syz [ 888.927172][T13140] usb 1-1: Manufacturer: syz [ 888.945025][T13140] usb 1-1: SerialNumber: syz [ 888.957727][T13140] usb 1-1: config 0 descriptor?? [ 889.111022][T19029] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4021'. [ 889.182967][T13140] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 890.131235][ T5933] usb 4-1: 1:151 : invalid UAC_AS_GENERAL desc [ 890.152432][ T5933] usb 4-1: 0:2 : does not exist [ 890.213622][ T24] pwc: send_video_command error -71 [ 890.243152][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 890.276680][T19039] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 890.286444][ T24] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 890.355327][ T24] usb 5-1: USB disconnect, device number 69 [ 890.364110][ T5933] usb 4-1: USB disconnect, device number 31 [ 890.445120][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 891.379358][T13140] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 891.412249][T13140] usb 1-1: USB disconnect, device number 64 [ 891.722633][T19067] tipc: Started in network mode [ 891.730414][T19067] tipc: Node identity d2637d6c433a, cluster identity 4711 [ 891.743006][T19067] tipc: Enabled bearer , priority 0 [ 891.756315][T19066] syzkaller0: entered promiscuous mode [ 891.764148][T19066] syzkaller0: entered allmulticast mode [ 891.790357][T19066] tipc: Resetting bearer [ 891.798964][T19065] tipc: Resetting bearer [ 891.818685][T19065] tipc: Disabling bearer [ 891.961903][T19074] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 891.994091][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4034'. [ 892.295423][ T30] audit: type=1326 audit(1775964204.121:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41999c819 code=0x7ffc0000 [ 892.434471][ T30] audit: type=1326 audit(1775964204.121:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41999c819 code=0x7ffc0000 [ 892.461729][ T30] audit: type=1326 audit(1775964204.121:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41999c819 code=0x7ffc0000 [ 892.486666][ T30] audit: type=1326 audit(1775964204.121:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fc41999c819 code=0x7ffc0000 [ 892.510466][ T30] audit: type=1326 audit(1775964204.121:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41999c819 code=0x7ffc0000 [ 892.534504][ T30] audit: type=1326 audit(1775964204.121:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41999c819 code=0x7ffc0000 [ 892.560889][ T30] audit: type=1326 audit(1775964204.121:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41999c819 code=0x7ffc0000 [ 892.584534][ T30] audit: type=1326 audit(1775964204.121:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc41999c819 code=0x7ffc0000 [ 892.608570][ T30] audit: type=1326 audit(1775964204.121:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41999c819 code=0x7ffc0000 [ 892.665509][ T30] audit: type=1326 audit(1775964204.121:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19081 comm="syz.3.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41999c819 code=0x7ffc0000 [ 892.895548][T13140] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 892.906947][T19094] fuse: Bad value for 'fd' [ 893.257373][T13140] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 893.269419][T13140] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.280546][T13140] usb 4-1: config 0 has no interface number 0 [ 893.351761][T13140] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 893.365470][T13140] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 893.402363][T13140] usb 4-1: config 0 interface 52 has no altsetting 0 [ 893.425554][ T29] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 893.461982][T13140] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 893.471992][T13140] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 893.480250][T13140] usb 4-1: Manufacturer: syz [ 893.623467][T13140] usb 4-1: config 0 descriptor?? [ 893.637281][ T29] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 893.646869][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.654875][ T29] usb 3-1: Product: syz [ 893.682923][ T29] usb 3-1: Manufacturer: syz [ 893.708728][T13140] hub 4-1:0.52: bad descriptor, ignoring hub [ 893.739027][T13140] hub 4-1:0.52: probe with driver hub failed with error -5 [ 893.746564][ T29] usb 3-1: SerialNumber: syz [ 893.778241][ T29] usb 3-1: config 0 descriptor?? [ 893.808705][ T29] hub 3-1:0.0: bad descriptor, ignoring hub [ 893.814684][ T29] hub 3-1:0.0: probe with driver hub failed with error -5 [ 893.938452][T13140] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input97 [ 894.051039][ T29] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 894.062320][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 894.180681][ T29] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 894.227536][T19103] Invalid option length (1040122) for dns_resolver key [ 894.238548][ T10] usb 4-1: USB disconnect, device number 32 [ 894.258485][ T29] usb 3-1: media controller created [ 894.313846][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 894.501536][ T29] DVB: Unable to find symbol dib7000p_attach() [ 894.515117][ T29] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 894.736193][ T29] rc_core: IR keymap rc-dib0700-rc5 not found [ 894.743030][ T29] Registered IR keymap rc-empty [ 894.751399][ T29] dvb-usb: could not initialize remote control. [ 894.776581][ T29] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 894.994468][T19116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4046'. [ 895.046259][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 895.136522][T19119] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 895.209384][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 895.223033][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.231919][ T10] usb 4-1: Product: syz [ 895.236959][ T10] usb 4-1: Manufacturer: syz [ 895.245132][ T10] usb 4-1: SerialNumber: syz [ 895.287246][ T10] usb 4-1: config 0 descriptor?? [ 895.507426][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 895.705747][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 895.865953][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 895.872806][ T9] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 895.881105][ T9] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 895.891389][ T9] usb 1-1: config 8 has no interface number 0 [ 895.897605][ T9] usb 1-1: config 8 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 895.908566][ T9] usb 1-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 895.923984][ T9] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 895.936530][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.944573][ T9] usb 1-1: Product: syz [ 895.948849][ T9] usb 1-1: Manufacturer: syz [ 895.953465][ T9] usb 1-1: SerialNumber: syz [ 896.177349][ T9] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 896.193829][ T9] usb 1-1: USB disconnect, device number 65 [ 896.280104][T13140] usb 3-1: USB disconnect, device number 44 [ 896.305655][T13140] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 896.475782][ T5933] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 896.496681][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4052'. [ 896.639035][ T5933] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 896.653021][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.663578][ T5933] usb 5-1: Product: syz [ 896.703530][ T5933] usb 5-1: Manufacturer: syz [ 896.722263][ T5933] usb 5-1: SerialNumber: syz [ 896.744299][ T5933] usb 5-1: config 0 descriptor?? [ 897.782448][ T5933] usb 5-1: Firmware version (0.0) predates our first public release. [ 897.792316][ T5933] usb 5-1: Please update to version 0.2 or newer [ 897.978469][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 898.000246][ T10] usb 4-1: USB disconnect, device number 33 [ 898.028230][ T5933] usb 5-1: USB disconnect, device number 70 [ 898.685721][ T29] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 898.702311][T19154] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.4059'. [ 898.715662][T19152] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 898.845536][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 898.852317][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 898.892034][T19160] netlink: 'syz.0.4060': attribute type 4 has an invalid length. [ 898.950841][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 898.960264][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.970310][T19162] fuse: Bad value for 'group_id' [ 898.979469][ T29] usb 5-1: Product: syz [ 898.980489][T19162] fuse: Bad value for 'group_id' [ 898.983658][ T29] usb 5-1: Manufacturer: syz [ 898.983677][ T29] usb 5-1: SerialNumber: syz [ 899.008805][T19160] netlink: 'syz.0.4060': attribute type 4 has an invalid length. [ 899.050106][T19164] netlink: 'syz.3.4062': attribute type 21 has an invalid length. [ 899.059071][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4062'. [ 899.066191][ T29] usb 5-1: config 0 descriptor?? [ 899.081276][ T29] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 900.053096][ T8588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.231444][ T8588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.527685][ T8588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.562742][T14864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 900.587351][T14864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 900.617090][T14864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 900.641221][T14864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 900.651160][ T8588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.684114][T14864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 900.715659][ T5933] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 900.896549][ T5933] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 900.905886][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.929960][ T5933] usb 3-1: Product: syz [ 900.940043][ T5933] usb 3-1: Manufacturer: syz [ 900.954383][ T5933] usb 3-1: SerialNumber: syz [ 900.974993][ T5933] usb 3-1: config 0 descriptor?? [ 901.110194][T19185] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 901.216188][ T29] gspca_zc3xx: i2c_w status error b7 [ 901.221678][ T5933] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 901.319049][ T8588] bridge_slave_1: left allmulticast mode [ 901.324736][ T8588] bridge_slave_1: left promiscuous mode [ 901.365695][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.392315][ T8588] bridge_slave_0: left allmulticast mode [ 901.414700][ T8588] bridge_slave_0: left promiscuous mode [ 901.439574][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.480404][ T8588] bond_slave_0: left promiscuous mode [ 901.494162][ T8588] bond_slave_1: left promiscuous mode [ 901.732072][ T8588] bond1 (unregistering): (slave gretap1): Releasing active interface [ 901.742559][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 901.833620][ T29] gspca_zc3xx: i2c_r status error b7 [ 901.900295][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.911857][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.927010][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 901.940539][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 901.949846][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.973099][ T10] usb 1-1: config 0 descriptor?? [ 902.010909][ T8588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.023323][ T8588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.035960][ T8588] bond0 (unregistering): Released all slaves [ 902.054045][ T8588] bond1 (unregistering): Released all slaves [ 902.077412][ T8588] bond2 (unregistering): Released all slaves [ 902.221434][ T8588] tipc: Left network mode [ 902.244792][ T29] gspca_zc3xx: reg_r err -71 [ 902.269320][ T29] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 902.313640][ T29] usb 5-1: USB disconnect, device number 71 [ 902.329709][T19213] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 902.353294][T19179] chnl_net:caif_netlink_parms(): no params data found [ 902.393039][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 902.402750][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 902.423058][ T10] usb 1-1: USB disconnect, device number 66 [ 902.567918][ T8588] hsr_slave_0: left promiscuous mode [ 902.585255][ T8588] hsr_slave_1: left promiscuous mode [ 902.595086][ T8588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.603726][ T8588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.611911][ T8588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.622326][ T8588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.637096][ T8588] veth1_macvtap: left promiscuous mode [ 902.643099][ T8588] veth0_macvtap: left promiscuous mode [ 902.648880][ T8588] veth1_vlan: left promiscuous mode [ 902.654271][ T8588] veth0_vlan: left promiscuous mode [ 902.792675][T14864] Bluetooth: hci2: command tx timeout [ 903.024118][ T8588] team0 (unregistering): Port device team_slave_1 removed [ 903.048895][ T8588] team0 (unregistering): Port device team_slave_0 removed [ 903.205487][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 903.244955][T19179] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.253355][T19179] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.260754][T19179] bridge_slave_0: entered allmulticast mode [ 903.267330][ T29] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 903.275055][ T5933] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 903.288613][T19179] bridge_slave_0: entered promiscuous mode [ 903.302150][ T5933] usb 3-1: USB disconnect, device number 45 [ 903.313209][T19179] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.326180][T19179] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.333382][T19179] bridge_slave_1: entered allmulticast mode [ 903.343774][T19179] bridge_slave_1: entered promiscuous mode [ 903.356792][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 903.372172][ T10] usb 5-1: config index 0 descriptor too short (expected 17170, got 18) [ 903.382309][ T10] usb 5-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 903.391686][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 903.396778][T19179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.413857][ T10] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 903.430588][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.434497][T19179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.450805][ T10] usb 5-1: Product: syz [ 903.455014][ T10] usb 5-1: Manufacturer: syz [ 903.460194][ T10] usb 5-1: SerialNumber: syz [ 903.466712][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 903.468341][ T10] usb 5-1: config 0 descriptor?? [ 903.477106][ T29] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 903.481568][ T10] ums-freecom 5-1:0.0: USB Mass Storage device detected [ 903.496248][ T29] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 903.526446][ T29] usb 1-1: config 8 has no interface number 0 [ 903.532601][ T29] usb 1-1: config 8 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 903.537479][T19179] team0: Port device team_slave_0 added [ 903.545133][ T29] usb 1-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 903.552600][T19179] team0: Port device team_slave_1 added [ 903.626663][ T29] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 903.636934][T19179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.645454][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.654500][ T29] usb 1-1: Product: syz [ 903.656835][T19179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.663003][ T29] usb 1-1: Manufacturer: syz [ 903.691471][T19179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.702823][ T29] usb 1-1: SerialNumber: syz [ 903.704565][T19228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.742873][T19228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.772259][T19179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.779690][T19179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.818868][T19179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.880590][ T8588] IPVS: stop unused estimator thread 0... [ 903.962960][ T29] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 903.968521][T19179] hsr_slave_0: entered promiscuous mode [ 903.992643][T19179] hsr_slave_1: entered promiscuous mode [ 904.000806][ T29] usb 1-1: USB disconnect, device number 67 [ 904.004490][T19248] loop9: detected capacity change from 0 to 7 [ 904.026568][T19179] debugfs: 'hsr0' already exists in 'hsr' [ 904.034623][T19179] Cannot create hsr debugfs directory [ 904.072217][T19248] Dev loop9: unable to read RDB block 7 [ 904.088391][T19251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4078'. [ 904.097749][T19248] loop9: unable to read partition table [ 904.103585][T19248] loop9: partition table beyond EOD, truncated [ 904.119002][T19248] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 904.407572][T19179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 904.425109][T19179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 904.452038][T19179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 904.463891][T19179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 904.575827][ T29] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 904.709764][T19179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.745503][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 904.754026][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 904.770378][T19179] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.787080][ T29] usb 3-1: config 2 has an invalid interface number: 83 but max is 0 [ 904.795185][ T29] usb 3-1: config 2 has no interface number 0 [ 904.806846][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.814037][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.817414][ T29] usb 3-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=54.63 [ 904.831295][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.840078][ T29] usb 3-1: Product: syz [ 904.844469][ T29] usb 3-1: Manufacturer: syz [ 904.855477][ T29] usb 3-1: SerialNumber: syz [ 904.865996][T14864] Bluetooth: hci2: command tx timeout [ 904.873509][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.880670][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.927262][T19282] fuse: Bad value for 'fd' [ 904.958949][T19282] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 905.033042][T19179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.096494][T19248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.105263][T19248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.159531][ T29] usb 3-1: USB disconnect, device number 46 [ 905.198527][T19179] veth0_vlan: entered promiscuous mode [ 905.224109][T19179] veth1_vlan: entered promiscuous mode [ 905.291267][T19179] veth0_macvtap: entered promiscuous mode [ 905.309411][T19179] veth1_macvtap: entered promiscuous mode [ 905.359603][T19179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.391283][T19179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.416091][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.437712][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.469038][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.493874][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.522201][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.534745][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.556560][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 905.565275][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.575260][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.715905][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 905.726643][ T9] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 905.736425][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.747816][ T9] usb 1-1: config 0 descriptor?? [ 905.764359][ T9] as10x_usb: device has been detected [ 905.774732][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 905.797111][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 905.829048][ T9] as10x_usb: error during firmware upload part1 [ 905.836046][ T9] Registered device nBox DVB-T Dongle [ 905.874452][ T24] usb 5-1: USB disconnect, device number 72 [ 905.991554][ T9] usb 1-1: USB disconnect, device number 68 [ 906.302556][ T9] Unregistered device nBox DVB-T Dongle [ 906.305950][ T9] as10x_usb: device has been disconnected [ 906.379302][T19321] FAULT_INJECTION: forcing a failure. [ 906.379302][T19321] name failslab, interval 1, probability 0, space 0, times 0 [ 906.392488][T19321] CPU: 1 UID: 0 PID: 19321 Comm: syz.5.4090 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.392515][T19321] Tainted: [L]=SOFTLOCKUP [ 906.392522][T19321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 906.392531][T19321] Call Trace: [ 906.392537][T19321] [ 906.392542][T19321] dump_stack_lvl+0xe8/0x150 [ 906.392562][T19321] should_fail_ex+0x412/0x560 [ 906.392581][T19321] should_failslab+0xa8/0x100 [ 906.392596][T19321] __kmalloc_cache_noprof+0x88/0x660 [ 906.392610][T19321] ? tcp_get_metrics+0x34a/0x920 [ 906.392628][T19321] tcp_get_metrics+0x34a/0x920 [ 906.392644][T19321] ? tcp_fastopen_cache_set+0xe8/0x670 [ 906.392660][T19321] tcp_fastopen_cache_set+0x1af/0x670 [ 906.392677][T19321] tcp_rcv_fastopen_synack+0x303/0x930 [ 906.392691][T19321] ? tcp_finish_connect+0x310/0x670 [ 906.392706][T19321] tcp_rcv_state_process+0x2a92/0x4810 [ 906.392726][T19321] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 906.392749][T19321] tcp_v6_do_rcv+0xbef/0x1ba0 [ 906.392766][T19321] ? __local_bh_enable_ip+0xd0/0x130 [ 906.392781][T19321] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 906.392794][T19321] __release_sock+0x1b8/0x3a0 [ 906.392814][T19321] release_sock+0x5f/0x1f0 [ 906.392827][T19321] mptcp_sendmsg_fastopen+0x1b3/0x580 [ 906.392857][T19321] mptcp_sendmsg+0x17af/0x19d0 [ 906.392891][T19321] ? aa_sk_perm+0x6d5/0x900 [ 906.392919][T19321] ? __pfx_aa_sk_perm+0x10/0x10 [ 906.392933][T19321] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 906.392950][T19321] ? inet6_sendmsg+0x101/0x120 [ 906.392967][T19321] ____sys_sendmsg+0x5c7/0x9f0 [ 906.392985][T19321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.393003][T19321] ? import_iovec+0x73/0xa0 [ 906.393017][T19321] ___sys_sendmsg+0x2a5/0x360 [ 906.393033][T19321] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.393063][T19321] ? __fget_files+0x2a/0x420 [ 906.393072][T19321] ? __fget_files+0x3a0/0x420 [ 906.393087][T19321] __x64_sys_sendmsg+0x1bd/0x2a0 [ 906.393102][T19321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.393122][T19321] ? __pfx_ksys_write+0x10/0x10 [ 906.393140][T19321] do_syscall_64+0x14d/0xf80 [ 906.393154][T19321] ? trace_irq_disable+0x3b/0x150 [ 906.393163][T19321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.393173][T19321] ? clear_bhb_loop+0x40/0x90 [ 906.393187][T19321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.393197][T19321] RIP: 0033:0x7f42f399c819 [ 906.393209][T19321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.393218][T19321] RSP: 002b:00007f42f4941028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.393230][T19321] RAX: ffffffffffffffda RBX: 00007f42f3c15fa0 RCX: 00007f42f399c819 [ 906.393238][T19321] RDX: 0000000020000081 RSI: 0000200000000780 RDI: 0000000000000003 [ 906.393244][T19321] RBP: 00007f42f4941090 R08: 0000000000000000 R09: 0000000000000000 [ 906.393251][T19321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 906.393257][T19321] R13: 00007f42f3c16038 R14: 00007f42f3c15fa0 R15: 00007f42f3d3fa48 [ 906.393273][T19321] [ 906.801633][T19324] fuse: Bad value for 'fd' [ 906.825514][ T5884] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 906.841623][T19324] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 906.954741][T14864] Bluetooth: hci2: command tx timeout [ 906.985502][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 907.016530][ T5884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.052416][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 907.094755][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 907.109899][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.133664][ T5884] usb 3-1: Product: syz [ 907.145122][ T5884] usb 3-1: Manufacturer: syz [ 907.152117][ T5884] usb 3-1: SerialNumber: syz [ 907.472810][ T5884] usb 3-1: 0:2 : does not exist [ 907.482265][ T5884] usb 3-1: unit 6 not found! [ 907.606064][ T5884] usb 3-1: USB disconnect, device number 47 [ 907.715596][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 907.816591][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.905520][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 907.913394][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 907.931360][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.953405][ T24] usb 1-1: config 0 descriptor?? [ 908.013323][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 908.088718][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4100'. [ 908.117291][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 908.117327][ T30] audit: type=1800 audit(1775964220.001:1376): pid=19356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4100" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 908.745750][ T24] gspca_sonixj: reg_r err -110 [ 908.750673][ T24] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 909.065574][T14864] Bluetooth: hci2: command tx timeout [ 909.222680][T19366] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 909.718332][T19376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4105'. [ 909.983793][T19384] fuse: Bad value for 'fd' [ 909.998819][T19384] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 910.272100][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 910.305524][T19396] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 910.312047][T19396] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 910.445425][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 910.455536][ T9] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 910.464608][ T9] usb 6-1: config 0 has no interface number 1 [ 910.471981][ T9] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 910.482147][T19396] vhci_hcd vhci_hcd.0: Device attached [ 910.513381][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.525756][T19397] vhci_hcd: connection closed [ 910.534573][ T9] usb 6-1: config 0 descriptor?? [ 910.537608][ T8583] vhci_hcd vhci_hcd.2: stop threads [ 910.597716][ T8583] vhci_hcd vhci_hcd.2: release socket [ 910.665480][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 910.685319][ T8583] vhci_hcd vhci_hcd.2: disconnect device [ 910.765543][ T10] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 910.773935][ T10] usb 37-1: enqueue for inactive port 0 [ 910.799224][ T9] qcserial 6-1:0.2: Qualcomm USB modem converter detected [ 910.865859][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 910.947829][ T24] usb 1-1: USB disconnect, device number 69 [ 911.005084][ T2154] usb 6-1: USB disconnect, device number 2 [ 911.012015][ T2154] qcserial 6-1:0.2: device disconnected [ 911.365619][ T5933] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 911.405490][ T24] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 911.542744][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 911.563907][ T5933] usb 5-1: unable to get BOS descriptor or descriptor too short [ 911.573397][ T24] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.770792][ T5933] usb 5-1: config 4 interface 0 has no altsetting 0 [ 911.788852][ T5933] usb 5-1: string descriptor 0 read error: -22 [ 911.818111][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 911.826810][ T5933] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 911.844088][ T5933] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 911.866215][ T24] usb 1-1: string descriptor 0 read error: -22 [ 911.872795][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 911.900694][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.920042][ T5933] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 911.943655][ T5933] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 911.974304][ T5933] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 912.008089][ T5933] usb 5-1: media controller created [ 912.055901][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 912.073271][T19431] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 912.204258][T19433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.246690][T19433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.637555][T19412] can: request_module (can-proto-0) failed. [ 912.688998][ T24] usbhid 1-1:1.0: can't add hid device: -71 [ 912.708992][ T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 912.746126][ T24] usb 1-1: USB disconnect, device number 70 [ 912.846262][T13140] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 913.041097][T13140] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 913.060982][T13140] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 913.084334][T13140] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 913.094631][T13140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.119068][ T5933] zl10353_read_register: readreg error (reg=127, ret==0) [ 913.367227][T13140] usb 6-1: GET_CAPABILITIES returned 0 [ 913.422817][T13140] usbtmc 6-1:16.0: can't read capabilities [ 914.582112][ T5933] usb 5-1: USB disconnect, device number 73 [ 914.919366][T19493] netlink: 'syz.2.4131': attribute type 1 has an invalid length. [ 915.142912][T19501] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 915.352170][T19510] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 915.550230][T19515] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 915.793306][T13140] usb 6-1: USB disconnect, device number 3 [ 915.855453][ T5933] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 916.005545][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 916.019158][ T5933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 916.031045][ T5933] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 916.040703][ T5933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.209091][ T5933] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 916.239403][ T5933] usb 1-1: too many endpoints for config 1 interface 1 altsetting 151: 235, using maximum allowed: 30 [ 916.264032][ T5933] usb 1-1: config 1 interface 1 altsetting 151 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 916.275437][ T5933] usb 1-1: config 1 interface 1 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 235 [ 916.289047][ T5933] usb 1-1: config 1 interface 1 has no altsetting 1 [ 916.375519][ T5933] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 916.402529][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.432679][ T5933] usb 1-1: Product: syz [ 916.445535][ T5933] usb 1-1: Manufacturer: syz [ 916.457418][ T5933] usb 1-1: SerialNumber: syz [ 916.529486][T19530] fuse: Unknown parameter '~z XU [ 916.529486][T19530] rootmode' [ 917.687395][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 917.747243][T19552] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 917.954926][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 917.969359][ T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 918.012051][ T9] usb 5-1: config 0 has no interface number 0 [ 918.035003][ T9] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 918.091452][ T9] usb 5-1: config 0 interface 85 has no altsetting 0 [ 918.123470][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 918.140693][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.152083][ T9] usb 5-1: Product: syz [ 918.156575][ T9] usb 5-1: Manufacturer: syz [ 918.161307][ T9] usb 5-1: SerialNumber: syz [ 918.173361][ T9] usb 5-1: config 0 descriptor?? [ 918.400084][ T9] appletouch 5-1:0.85: Failed to read mode from device. [ 918.412612][ T9] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 918.801932][T19548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.814509][T19548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.154066][ T5933] usb 1-1: 1:151 : invalid UAC_AS_GENERAL desc [ 919.206365][ T5933] usb 1-1: 0:2 : does not exist [ 919.314784][T19600] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 919.370272][ T5933] usb 1-1: USB disconnect, device number 71 [ 919.443746][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.291862][T19617] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 920.306431][ T5933] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 920.465894][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 920.497412][ T5933] usb 3-1: device descriptor read/all, error -61 [ 920.535458][ T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 920.548311][ T9] usb 5-1: USB disconnect, device number 74 [ 920.648520][ T5933] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 920.715638][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 920.786154][ T5933] usb 3-1: device descriptor read/64, error -71 [ 920.825525][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 920.900851][ T5933] usb usb3-port1: attempt power cycle [ 920.911131][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 920.947073][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 920.972490][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.988510][ T24] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 921.012582][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 921.015437][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 921.063277][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 921.081675][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.106300][ T24] usb 6-1: Product: syz [ 921.115556][ T24] usb 6-1: Manufacturer: syz [ 921.123248][ T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 151: 235, using maximum allowed: 30 [ 921.151262][ T24] usb 6-1: SerialNumber: syz [ 921.168437][ T10] usb 1-1: config 1 interface 1 altsetting 151 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 921.172937][ T24] usb 6-1: config 0 descriptor?? [ 921.224115][ T24] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 921.242927][ T10] usb 1-1: config 1 interface 1 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 235 [ 921.275541][ T5933] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 921.285599][ T10] usb 1-1: config 1 interface 1 has no altsetting 1 [ 921.338164][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 921.361919][ T5933] usb 3-1: device descriptor read/8, error -71 [ 921.402426][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.422528][ T10] usb 1-1: Product: syz [ 921.440144][ T10] usb 1-1: Manufacturer: syz [ 921.485047][ T10] usb 1-1: SerialNumber: syz [ 921.640829][ T5933] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 921.709717][ T5933] usb 3-1: device descriptor read/8, error -71 [ 921.795716][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 921.828666][ T5933] usb usb3-port1: unable to enumerate USB device [ 921.975663][ T24] gspca_sunplus: reg_r err -110 [ 921.980839][ T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 921.994588][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.019929][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.051549][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 922.087028][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.118146][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.187753][ T9] usb 5-1: config 0 descriptor?? [ 923.299090][ T10] usb 1-1: 1:151 : invalid UAC_AS_GENERAL desc [ 923.305924][ T10] usb 1-1: 0:2 : does not exist [ 923.312933][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 923.340696][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 923.381755][ T9] usb 5-1: USB disconnect, device number 75 [ 923.401949][ T10] usb 1-1: USB disconnect, device number 72 [ 923.451183][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4167'. [ 923.583208][ T24] usb 6-1: USB disconnect, device number 4 [ 924.000448][T19675] FAULT_INJECTION: forcing a failure. [ 924.000448][T19675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.066728][T19675] CPU: 0 UID: 0 PID: 19675 Comm: syz.5.4170 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.066747][T19675] Tainted: [L]=SOFTLOCKUP [ 924.066752][T19675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 924.066759][T19675] Call Trace: [ 924.066763][T19675] [ 924.066769][T19675] dump_stack_lvl+0xe8/0x150 [ 924.066788][T19675] should_fail_ex+0x412/0x560 [ 924.066806][T19675] _copy_from_user+0x2d/0xb0 [ 924.066820][T19675] ___sys_recvmsg+0x175/0x590 [ 924.066837][T19675] ? __pfx____sys_recvmsg+0x10/0x10 [ 924.066861][T19675] ? __fget_files+0x3a0/0x420 [ 924.066875][T19675] do_recvmmsg+0x334/0x800 [ 924.066892][T19675] ? __pfx_do_recvmmsg+0x10/0x10 [ 924.066919][T19675] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 924.066942][T19675] __x64_sys_recvmmsg+0x198/0x250 [ 924.066957][T19675] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 924.066976][T19675] do_syscall_64+0x14d/0xf80 [ 924.066990][T19675] ? trace_irq_disable+0x3b/0x150 [ 924.066999][T19675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.067010][T19675] ? clear_bhb_loop+0x40/0x90 [ 924.067023][T19675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.067033][T19675] RIP: 0033:0x7f42f399c819 [ 924.067044][T19675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.067053][T19675] RSP: 002b:00007f42f48ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 924.067065][T19675] RAX: ffffffffffffffda RBX: 00007f42f3c16180 RCX: 00007f42f399c819 [ 924.067072][T19675] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 924.067079][T19675] RBP: 00007f42f48ff090 R08: 0000000000000000 R09: 0000000000000000 [ 924.067086][T19675] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 924.067092][T19675] R13: 00007f42f3c16218 R14: 00007f42f3c16180 R15: 00007f42f3d3fa48 [ 924.067108][T19675] [ 924.645511][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 924.705650][T13140] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 924.798443][ T9] usb 1-1: config 16 has an invalid interface number: 177 but max is 0 [ 924.808341][ T9] usb 1-1: config 16 has no interface number 0 [ 924.814530][ T9] usb 1-1: config 16 interface 177 altsetting 15 endpoint 0x8 has invalid maxpacket 10616, setting to 64 [ 924.860497][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 924.887191][T13140] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 924.912069][T13140] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 924.924342][T13140] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 924.933627][T13140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.941744][ T9] usb 1-1: config 16 interface 177 altsetting 15 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 924.941780][ T9] usb 1-1: config 16 interface 177 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 924.964028][T19693] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 924.994936][ T9] usb 1-1: config 16 interface 177 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 924.999584][T13140] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 925.028917][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 925.047418][ T24] usb 6-1: config 0 has no interfaces? [ 925.054611][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 925.063982][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 925.072176][ T24] usb 6-1: Manufacturer: syz [ 925.083568][ T9] usb 1-1: config 16 interface 177 altsetting 15 bulk endpoint 0xD has invalid maxpacket 32 [ 925.087983][ T24] usb 6-1: config 0 descriptor?? [ 925.124068][ T9] usb 1-1: config 16 interface 177 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 925.179294][T19693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.188224][T19693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.209365][ T9] usb 1-1: config 16 interface 177 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 925.255520][ T9] usb 1-1: config 16 interface 177 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 925.269497][ T9] usb 1-1: config 16 interface 177 altsetting 15 has a duplicate endpoint with address 0x1, skipping [ 925.281738][ T9] usb 1-1: config 16 interface 177 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 925.293992][ T9] usb 1-1: config 16 interface 177 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 925.311204][ T9] usb 1-1: config 16 interface 177 has no altsetting 0 [ 925.312172][T13140] usb 3-1: USB disconnect, device number 52 [ 925.322455][ T9] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=48.27 [ 925.334431][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.423330][ T10] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 925.564855][ T9] usb 1-1: Product: 䰕 [ 925.571242][ T9] usb 1-1: Manufacturer: ၥ瘘ꬠ퇮┗溕居ࡖ禬奸딒ꔰ頡뺥壖屍텻ᙾ⦇㺕扠ꊄ胜宄蘅鑴汋㛻蓙䞹䳢㋖ἱ窻䕮딗囖ꆗỶ㛲◻㩷꩙廬ኀ鄡鶏㊋ힸ쨟蓑㟌斏꼦隌ᾘ᠊蓍 [ 925.643196][ T9] usb 1-1: SerialNumber: К [ 925.649587][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 925.661513][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 925.684403][T19685] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 925.696865][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 925.714986][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 925.737859][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 925.755394][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.774105][ T10] usb 5-1: config 0 descriptor?? [ 925.921289][T19685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.932635][T19685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.943097][T19685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.954746][T19685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.973172][T19685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.991591][T19685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.003808][T19685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.012781][T19685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.038426][ T9] usb_ehset_test 1-1:16.177: probe with driver usb_ehset_test failed with error -32 [ 926.069698][ T9] usb 1-1: USB disconnect, device number 73 [ 926.189054][ T10] hid_parser_main: 153 callbacks suppressed [ 926.189076][ T10] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 926.205758][ T10] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 926.213259][ T10] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 926.220950][ T10] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 926.228761][ T10] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 926.236801][ T10] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 926.245691][ T10] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 926.253236][ T10] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 926.260785][ T10] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 926.269669][ T10] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 926.284137][ T10] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 926.950300][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 927.115512][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 927.128325][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 927.141070][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 927.172370][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 927.182046][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.190809][ T10] usb 3-1: Product: syz [ 927.195619][ T10] usb 3-1: Manufacturer: syz [ 927.200313][ T10] usb 3-1: SerialNumber: syz [ 927.222669][ T10] usb 3-1: config 0 descriptor?? [ 927.234251][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 927.244484][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 927.471495][ T29] usb 6-1: USB disconnect, device number 5 [ 927.825564][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 927.859351][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 927.866363][ T10] em28xx 3-1:0.0: Config register raw data: 0x36 [ 927.872955][ T10] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 927.892301][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 927.905693][T13140] usb 5-1: reset high-speed USB device number 76 using dummy_hcd [ 927.985668][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 927.996206][ T29] usb 6-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 928.015467][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.037182][ T29] usb 6-1: config 0 descriptor?? [ 928.047460][ T29] rndis_host 6-1:0.0: probe with driver rndis_host failed with error -22 [ 928.165561][ T5933] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 928.295781][ T10] usb 3-1: USB disconnect, device number 53 [ 928.935594][T13140] usb 5-1: device descriptor read/64, error -71 [ 929.365482][T13140] usb 5-1: reset high-speed USB device number 76 using dummy_hcd [ 929.556987][T13140] usb 5-1: device firmware changed [ 929.562723][ T24] usb 5-1: USB disconnect, device number 76 [ 929.737329][ T24] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 929.910947][ T24] usb 5-1: config 16 has an invalid interface number: 177 but max is 0 [ 929.919660][ T24] usb 5-1: config 16 has no interface number 0 [ 929.928165][ T24] usb 5-1: config 16 interface 177 altsetting 15 endpoint 0x8 has invalid maxpacket 10616, setting to 64 [ 929.941284][ T24] usb 5-1: config 16 interface 177 altsetting 15 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 929.954441][ T24] usb 5-1: config 16 interface 177 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 929.975668][ T24] usb 5-1: config 16 interface 177 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 930.001856][ T24] usb 5-1: config 16 interface 177 altsetting 15 bulk endpoint 0xD has invalid maxpacket 32 [ 930.026822][ T24] usb 5-1: config 16 interface 177 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 930.039942][ T24] usb 5-1: config 16 interface 177 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 930.052497][ T24] usb 5-1: config 16 interface 177 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 930.064162][ T24] usb 5-1: config 16 interface 177 altsetting 15 has a duplicate endpoint with address 0x1, skipping [ 930.078080][ T24] usb 5-1: config 16 interface 177 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 930.104478][ T24] usb 5-1: config 16 interface 177 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 930.120347][ T24] usb 5-1: config 16 interface 177 has no altsetting 0 [ 930.133451][ T24] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=48.27 [ 930.143077][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.153156][ T24] usb 5-1: Product: 䰕 [ 930.159692][ T24] usb 5-1: Manufacturer: ၥ瘘ꬠ퇮┗溕居ࡖ禬奸딒ꔰ頡뺥壖屍텻ᙾ⦇㺕扠ꊄ胜宄蘅鑴汋㛻蓙䞹䳢㋖ἱ窻䕮딗囖ꆗỶ㛲◻㩷꩙廬ኀ鄡鶏㊋ힸ쨟蓑㟌斏꼦隌ᾘ᠊蓍 [ 930.180853][ T24] usb 5-1: SerialNumber: К [ 930.188979][T19740] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 930.355506][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 930.404618][T19740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.428548][T19740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.458056][T19740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.468861][T19740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.483220][T19740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.507576][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 930.519725][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 930.533484][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 930.554833][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 930.583921][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 930.610910][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.642212][T19740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.644322][ T9] usb 3-1: config 0 descriptor?? [ 930.657881][T13140] usb 6-1: USB disconnect, device number 6 [ 930.691809][T19740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.706881][T19740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.771233][ T24] usb_ehset_test 5-1:16.177: probe with driver usb_ehset_test failed with error -32 [ 930.824788][ T24] usb 5-1: USB disconnect, device number 77 [ 931.085680][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 931.121217][ T9] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 931.267251][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 931.277047][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.288062][ T10] usb 6-1: config 0 descriptor?? [ 931.303082][ T10] cp210x 6-1:0.0: cp210x converter detected [ 931.465621][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 931.498472][ T10] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 931.510764][ T10] cp210x 6-1:0.0: querying part number failed [ 931.519114][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.525631][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.536779][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 931.616730][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 931.626753][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 931.636537][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 931.651287][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 931.660811][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.670689][ T24] usb 1-1: Product: syz [ 931.674898][ T24] usb 1-1: Manufacturer: syz [ 931.679659][ T24] usb 1-1: SerialNumber: syz [ 931.685502][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 931.688852][ T24] hub 1-1:1.0: bad descriptor, ignoring hub [ 931.699340][ T24] hub 1-1:1.0: probe with driver hub failed with error -5 [ 931.845848][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 931.855262][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 931.868478][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 931.885706][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 931.894969][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.904071][ T9] usb 5-1: Product: syz [ 931.906306][ T24] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 931.910358][ T9] usb 5-1: Manufacturer: syz [ 931.926514][ T9] usb 5-1: SerialNumber: syz [ 931.940374][ T9] usb 5-1: config 0 descriptor?? [ 931.952697][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 931.971277][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 932.122054][ T30] audit: type=1326 audit(1775964244.001:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19775 comm="syz.0.4204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b1d39c819 code=0xffff0000 [ 932.562242][ T9] em28xx 5-1:0.0: chip ID is em2874 [ 932.915732][ T24] usb 3-1: reset high-speed USB device number 54 using dummy_hcd [ 933.137662][T19797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.546206][ T5933] usb 1-1: USB disconnect, device number 75 [ 933.555190][ T5933] usblp1: removed [ 933.695766][ T24] usb 3-1: device descriptor read/64, error -71 [ 933.829561][T19809] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 933.949880][T19806] syz.1.4214 (19806): drop_caches: 2 [ 933.966850][ T24] usb 3-1: reset high-speed USB device number 54 using dummy_hcd [ 933.973897][ T10] usb 6-1: USB disconnect, device number 7 [ 933.978788][ T24] usb 3-1: device reset changed ep0 maxpacket size! [ 934.007115][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 934.030687][T13140] usb 3-1: USB disconnect, device number 54 [ 934.044402][ T10] cp210x 6-1:0.0: device disconnected [ 934.235525][T13140] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 934.333328][T19818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4216'. [ 934.405818][T13140] usb 3-1: Using ep0 maxpacket: 16 [ 934.418516][T13140] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.428869][T13140] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 934.445136][T13140] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 934.455184][T13140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.480576][T13140] usb 3-1: Product: syz [ 934.488526][T13140] usb 3-1: Manufacturer: syz [ 934.495820][T13140] usb 3-1: SerialNumber: syz [ 934.524822][ T10] usb 5-1: USB disconnect, device number 78 [ 934.545224][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 934.573338][ T10] em28xx 5-1:0.0: Freeing device [ 934.730804][T13140] usb 3-1: 0:2 : does not exist [ 934.877199][T13140] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 934.968389][T13140] usb 3-1: USB disconnect, device number 55 [ 935.040694][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 935.463027][ T29] hid_parser_main: 5 callbacks suppressed [ 935.463044][ T29] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 935.555837][ T29] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 935.655465][T13140] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 935.870086][T19836] fido_id[19836]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 935.887546][T13140] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 935.900258][T13140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 935.912289][T13140] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 935.929253][T13140] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 935.981202][T13140] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 936.007786][T13140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.032936][T13140] usb 6-1: config 0 descriptor?? [ 936.065453][ T24] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 936.231943][ T24] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 936.240494][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.262004][ T24] usb 3-1: config 0 has no interface number 0 [ 936.276321][ T24] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 936.304190][ T24] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 936.339517][ T24] usb 3-1: config 0 interface 52 has no altsetting 0 [ 936.354239][ T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 936.364811][ T24] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 936.387362][ T24] usb 3-1: Manufacturer: syz [ 936.402986][ T24] usb 3-1: config 0 descriptor?? [ 936.420369][ T24] hub 3-1:0.52: bad descriptor, ignoring hub [ 936.426507][ T24] hub 3-1:0.52: probe with driver hub failed with error -5 [ 936.464686][T13140] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 936.472302][T13140] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 936.502588][T13140] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 936.510131][T13140] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 936.517838][T13140] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 936.546284][T13140] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 936.624863][ T24] usb 3-1: Can not set alternate setting to 1, error: -71 [ 936.654710][ T24] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 936.707056][ T24] usb 3-1: USB disconnect, device number 56 [ 937.695504][T19865] fuse: Unknown parameter './cgroup.net/syz1' [ 937.871802][T19865] ipt_ECN: cannot use operation on non-tcp rule [ 938.012378][T19872] netlink: 'syz.4.4234': attribute type 3 has an invalid length. [ 938.155457][ T24] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 938.773030][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4237'. [ 938.782731][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4237'. [ 939.376540][ T29] usb 6-1: USB disconnect, device number 8 [ 939.545438][ T29] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 939.605629][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 939.707136][ T29] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 939.722527][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.735194][ T29] usb 6-1: config 0 has no interface number 0 [ 939.745167][ T29] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 939.765937][ T29] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 939.769957][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 939.780061][ T29] usb 6-1: config 0 interface 52 has no altsetting 0 [ 939.793453][ T29] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 939.803332][ T29] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 939.812562][ T29] usb 6-1: Manufacturer: syz [ 939.817611][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 939.829456][ T29] usb 6-1: config 0 descriptor?? [ 939.836859][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.839787][ T29] hub 6-1:0.52: bad descriptor, ignoring hub [ 939.901578][T19910] vivid-004: disconnect [ 939.945272][ T29] hub 6-1:0.52: probe with driver hub failed with error -5 [ 939.957071][ T10] usb 1-1: Product: syz [ 939.960362][T19911] vivid-004: reconnect [ 939.965442][ T10] usb 1-1: Manufacturer: syz [ 939.972213][ T10] usb 1-1: SerialNumber: syz [ 939.983350][ T10] usb 1-1: config 0 descriptor?? [ 940.042078][ T29] usb 6-1: Can not set alternate setting to 1, error: -71 [ 940.052453][ T29] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 940.086884][ T29] usb 6-1: USB disconnect, device number 9 [ 940.213122][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 941.777856][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 941.796726][ T10] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 941.845501][ T10] usb 1-1: media controller created [ 941.882958][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.970307][T19922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4249'. [ 942.176685][T19922] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4249'. [ 942.310836][ T10] i2c i2c-1: Added multiplexed i2c bus 2 [ 942.355474][ T10] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 942.406323][ T10] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 942.450303][ T30] audit: type=1800 audit(1775964254.301:1378): pid=19944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4251" name="bus" dev="ramfs" ino=102813 res=0 errno=0 [ 942.497114][T19944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 942.514720][ T10] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 942.916529][ T10] usb 1-1: USB disconnect, device number 76 [ 942.970081][T19951] FAULT_INJECTION: forcing a failure. [ 942.970081][T19951] name failslab, interval 1, probability 0, space 0, times 0 [ 943.018386][T19951] CPU: 0 UID: 0 PID: 19951 Comm: syz.2.4254 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.018417][T19951] Tainted: [L]=SOFTLOCKUP [ 943.018423][T19951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 943.018431][T19951] Call Trace: [ 943.018435][T19951] [ 943.018441][T19951] dump_stack_lvl+0xe8/0x150 [ 943.018461][T19951] should_fail_ex+0x412/0x560 [ 943.018481][T19951] should_failslab+0xa8/0x100 [ 943.018497][T19951] __kvmalloc_node_noprof+0x178/0x8a0 [ 943.018510][T19951] ? rhashtable_init_noprof+0x52e/0xa70 [ 943.018522][T19951] ? rhashtable_init_noprof+0x12d/0xa70 [ 943.018536][T19951] rhashtable_init_noprof+0x52e/0xa70 [ 943.018550][T19951] rhltable_init_noprof+0x1e/0x60 [ 943.018562][T19951] nf_tables_newtable+0x68f/0x1910 [ 943.018598][T19951] nfnetlink_rcv+0x1240/0x27b0 [ 943.018630][T19951] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 943.018653][T19951] ? ref_tracker_free+0x693/0x840 [ 943.018678][T19951] ? __netlink_deliver_tap+0x807/0x850 [ 943.018690][T19951] ? netlink_deliver_tap+0x2e/0x1b0 [ 943.018709][T19951] netlink_unicast+0x80f/0x9b0 [ 943.018729][T19951] ? __pfx_netlink_unicast+0x10/0x10 [ 943.018744][T19951] ? netlink_sendmsg+0x650/0xb40 [ 943.018755][T19951] ? skb_put+0x11b/0x210 [ 943.018770][T19951] netlink_sendmsg+0x813/0xb40 [ 943.018785][T19951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.018798][T19951] ? trace_contention_end+0x3d/0x150 [ 943.018814][T19951] ? aa_sock_msg_perm+0xf1/0x1b0 [ 943.018831][T19951] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 943.018843][T19951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.018855][T19951] sock_sendmsg+0x3fb/0x450 [ 943.018875][T19951] ? __pfx_sock_sendmsg+0x10/0x10 [ 943.018896][T19951] ? __asan_memset+0x22/0x50 [ 943.018907][T19951] ? iov_iter_bvec+0xb8/0x180 [ 943.018920][T19951] splice_to_socket+0xae2/0x11f0 [ 943.018947][T19951] ? __pfx_splice_to_socket+0x10/0x10 [ 943.018982][T19951] ? bpf_lsm_file_permission+0x9/0x20 [ 943.018995][T19951] ? security_file_permission+0x75/0x260 [ 943.019010][T19951] ? rw_verify_area+0x255/0x4d0 [ 943.019022][T19951] ? __pfx_splice_to_socket+0x10/0x10 [ 943.019037][T19951] do_splice+0xee3/0x1910 [ 943.019064][T19951] ? __pfx_do_splice+0x10/0x10 [ 943.019084][T19951] __se_sys_splice+0x353/0x490 [ 943.019097][T19951] ? __pfx___se_sys_splice+0x10/0x10 [ 943.019110][T19951] ? __x64_sys_splice+0x21/0xf0 [ 943.019121][T19951] do_syscall_64+0x14d/0xf80 [ 943.019135][T19951] ? trace_irq_disable+0x3b/0x150 [ 943.019145][T19951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.019155][T19951] ? clear_bhb_loop+0x40/0x90 [ 943.019168][T19951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.019178][T19951] RIP: 0033:0x7f894eb9c819 [ 943.019190][T19951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.019199][T19951] RSP: 002b:00007f894fa53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 943.019211][T19951] RAX: ffffffffffffffda RBX: 00007f894ee16090 RCX: 00007f894eb9c819 [ 943.019219][T19951] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 943.019225][T19951] RBP: 00007f894fa53090 R08: 0000000000007fff R09: 0000000000000000 [ 943.019232][T19951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.019238][T19951] R13: 00007f894ee16128 R14: 00007f894ee16090 R15: 00007f894ef3fa48 [ 943.019254][T19951] [ 944.835435][T13140] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 945.094639][T13140] usb 5-1: Using ep0 maxpacket: 8 [ 945.143849][T13140] usb 5-1: unable to get BOS descriptor or descriptor too short [ 945.316904][T13140] usb 5-1: config 6 has an invalid interface number: 57 but max is 0 [ 945.387937][T13140] usb 5-1: config 6 has no interface number 0 [ 945.478230][T13140] usb 5-1: config 6 interface 57 has no altsetting 0 [ 945.629005][T13140] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=67.16 [ 945.649842][T13140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.680210][T13140] usb 5-1: Product: syz [ 945.688952][T13140] usb 5-1: Manufacturer: syz [ 945.699262][T13140] usb 5-1: SerialNumber: syz [ 945.957532][T19970] fuse: Unknown parameter 'rooL-ȥftmodepD3Qb#} [ 945.957532][T19970] T' [ 946.175494][ T29] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 946.338126][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.355162][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 946.371579][T19997] loop9: detected capacity change from 0 to 4096 [ 946.381245][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 946.414195][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 946.426059][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 946.458273][ T29] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 946.467902][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 946.483470][ T29] usb 6-1: Product: syz [ 946.491425][ T29] usb 6-1: Manufacturer: syz [ 946.498945][ T29] usb 6-1: SerialNumber: syz [ 946.513822][ T29] usb 6-1: config 0 descriptor?? [ 947.290908][ T29] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 947.314029][ T29] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 947.504013][ T29] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 947.520368][T20018] binder: 20013:20018 ioctl 4018620d 0 returned -22 [ 947.555536][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 947.563447][ T29] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 947.576623][ T29] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 947.602332][T20019] binder: 20013:20019 ioctl c0306201 0 returned -14 [ 947.695872][T13140] legousbtower 5-1:6.57: interrupt endpoints not found [ 947.715813][T20019] syz.1.4275 (20019): drop_caches: 2 [ 947.729839][ T29] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 947.754369][T13140] usb 5-1: USB disconnect, device number 79 [ 947.760472][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 947.767823][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.789741][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.815183][ T24] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 947.917748][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.057874][ T24] usb 3-1: config 0 descriptor?? [ 948.200839][T20027] FAULT_INJECTION: forcing a failure. [ 948.200839][T20027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.406510][T20027] CPU: 0 UID: 0 PID: 20027 Comm: syz.4.4278 Tainted: G L syzkaller #0 PREEMPT(full) [ 948.406537][T20027] Tainted: [L]=SOFTLOCKUP [ 948.406543][T20027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 948.406554][T20027] Call Trace: [ 948.406561][T20027] [ 948.406569][T20027] dump_stack_lvl+0xe8/0x150 [ 948.406598][T20027] should_fail_ex+0x412/0x560 [ 948.406629][T20027] _copy_from_user+0x2d/0xb0 [ 948.406651][T20027] kstrtouint_from_user+0xd6/0x180 [ 948.406670][T20027] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 948.406704][T20027] proc_fail_nth_write+0x8e/0x210 [ 948.406730][T20027] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 948.406761][T20027] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 948.406788][T20027] vfs_write+0x29a/0xb90 [ 948.406817][T20027] ? __pfx_vfs_write+0x10/0x10 [ 948.406838][T20027] ? __fget_files+0x2a/0x420 [ 948.406860][T20027] ? __fget_files+0x3a0/0x420 [ 948.406875][T20027] ? __fget_files+0x2a/0x420 [ 948.406898][T20027] ksys_write+0x150/0x270 [ 948.406919][T20027] ? __pfx_ksys_write+0x10/0x10 [ 948.406950][T20027] do_syscall_64+0x14d/0xf80 [ 948.406970][T20027] ? trace_irq_disable+0x3b/0x150 [ 948.406985][T20027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.407003][T20027] ? clear_bhb_loop+0x40/0x90 [ 948.407026][T20027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.407042][T20027] RIP: 0033:0x7f0d69b5d04e [ 948.407058][T20027] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 948.407073][T20027] RSP: 002b:00007f0d6ab1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 948.407090][T20027] RAX: ffffffffffffffda RBX: 00007f0d6ab206c0 RCX: 00007f0d69b5d04e [ 948.407104][T20027] RDX: 0000000000000001 RSI: 00007f0d6ab200a0 RDI: 0000000000000004 [ 948.407115][T20027] RBP: 00007f0d6ab20090 R08: 0000000000000000 R09: 0000000000000000 [ 948.407126][T20027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.407138][T20027] R13: 00007f0d69e16128 R14: 00007f0d69e16090 R15: 00007f0d69f3fa48 [ 948.407165][T20027] [ 948.637482][ T29] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 948.685544][ T5933] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 948.829684][ T29] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 948.867532][ T24] ntrig 0003:1B96:0008.0036: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0 [ 948.898686][ T29] usb 6-1: USB disconnect, device number 10 [ 949.118157][ T5933] usb 1-1: config 0 has no interfaces? [ 949.186901][ T5933] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 949.208427][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.244059][ T5933] usb 1-1: Product: syz [ 949.253942][ T5933] usb 1-1: Manufacturer: syz [ 949.269480][ T24] usb 3-1: USB disconnect, device number 57 [ 949.277731][ T5933] usb 1-1: SerialNumber: syz [ 949.290653][ T5933] usb 1-1: config 0 descriptor?? [ 949.328463][T20036] fido_id[20036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 949.877585][T20047] can: request_module (can-proto-0) failed. [ 950.179577][T20052] blktrace: Concurrent blktraces are not allowed on sg0 [ 950.565432][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 950.727561][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.749999][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.770287][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 950.789680][ T29] usb 1-1: USB disconnect, device number 77 [ 950.816850][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 950.834257][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.868659][ T24] usb 5-1: config 0 descriptor?? [ 951.290089][ T24] plantronics 0003:047F:FFFF.0037: invalid report_count -1457737183 [ 951.298781][ T24] plantronics 0003:047F:FFFF.0037: item 0 4 1 9 parsing failed [ 951.307710][ T24] plantronics 0003:047F:FFFF.0037: parse failed [ 951.314418][ T24] plantronics 0003:047F:FFFF.0037: probe with driver plantronics failed with error -22 [ 951.335443][ T2154] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 951.487005][ T2154] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 951.498778][ T2154] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 951.504106][ T24] usb 5-1: USB disconnect, device number 80 [ 951.512905][ T2154] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 951.529651][ T2154] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 951.539024][ T2154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.553488][T20064] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 951.674182][T20066] fuse: Bad value for 'fd' [ 951.763812][ T30] audit: type=1326 audit(1775964263.641:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20063 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 951.792990][ T30] audit: type=1326 audit(1775964263.671:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20063 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 951.834255][ T30] audit: type=1326 audit(1775964263.671:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20063 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f894eb9c4ab code=0x7ffc0000 [ 951.860658][ T30] audit: type=1326 audit(1775964263.671:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20063 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f894eb9c4ab code=0x7ffc0000 [ 951.883577][ T30] audit: type=1326 audit(1775964263.671:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20063 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f894eb5d04e code=0x7ffc0000 [ 952.147047][ T2154] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 952.318880][ T29] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 952.401031][ T2154] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input104 [ 952.420136][ T30] audit: type=1326 audit(1775964263.891:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20063 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 952.495528][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 952.508836][ T29] usb 1-1: config 0 has no interfaces? [ 952.518195][ T29] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 952.573911][ T29] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 952.604328][ T30] audit: type=1326 audit(1775964263.891:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20063 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 952.642051][ T2154] usb 3-1: USB disconnect, device number 58 [ 952.648174][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 952.658952][ T29] usb 1-1: Manufacturer: syz [ 952.682818][T20082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4293'. [ 952.686490][ T29] usb 1-1: config 0 descriptor?? [ 952.739184][ T30] audit: type=1326 audit(1775964263.891:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20063 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 952.779576][ T30] audit: type=1326 audit(1775964263.891:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20063 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 952.845140][ T30] audit: type=1326 audit(1775964263.891:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20063 comm="syz.2.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 952.930313][T20086] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4294'. [ 953.237128][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 953.546420][ T29] usb 6-1: device descriptor read/64, error -71 [ 953.618591][ T2154] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 953.855651][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 953.860023][ T2154] usb 3-1: config index 0 descriptor too short (expected 43536, got 18) [ 953.871782][ T2154] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.882187][ T2154] usb 3-1: config 0 has no interfaces? [ 953.890098][ T2154] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 953.899370][ T2154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.914916][ T2154] usb 3-1: config 0 descriptor?? [ 953.985514][ T29] usb 6-1: device descriptor read/64, error -71 [ 954.105920][ T29] usb usb6-port1: attempt power cycle [ 954.455557][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 954.606989][ T29] usb 6-1: device descriptor read/8, error -71 [ 954.845635][ T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 955.266531][ T29] usb 6-1: device descriptor read/8, error -71 [ 955.376448][ T29] usb usb6-port1: unable to enumerate USB device [ 955.425311][ T10] usb 1-1: USB disconnect, device number 78 [ 955.578579][ T9] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 955.757857][ T9] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 955.769030][ T2154] usb 3-1: string descriptor 0 read error: -71 [ 955.775539][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.814494][ T2154] usb 3-1: USB disconnect, device number 59 [ 955.820953][ T9] usb 5-1: config 0 has no interface number 0 [ 955.831097][ T9] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 955.853019][ T9] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 955.866657][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 955.887190][ T9] usb 5-1: config 0 interface 52 has no altsetting 0 [ 955.906115][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 955.906879][T20124] FAULT_INJECTION: forcing a failure. [ 955.906879][T20124] name failslab, interval 1, probability 0, space 0, times 0 [ 955.922789][ T9] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 955.942282][ T9] usb 5-1: Manufacturer: syz [ 955.960037][ T9] usb 5-1: config 0 descriptor?? [ 955.975983][T20124] CPU: 1 UID: 0 PID: 20124 Comm: syz.2.4305 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.975997][ T9] hub 5-1:0.52: bad descriptor, ignoring hub [ 955.976012][T20124] Tainted: [L]=SOFTLOCKUP [ 955.976019][T20124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 955.976030][T20124] Call Trace: [ 955.976037][T20124] [ 955.976043][T20124] dump_stack_lvl+0xe8/0x150 [ 955.976078][T20124] should_fail_ex+0x412/0x560 [ 955.976110][T20124] should_failslab+0xa8/0x100 [ 955.976133][T20124] ? __anon_vma_prepare+0xcb/0x4a0 [ 955.976153][T20124] kmem_cache_alloc_noprof+0x87/0x650 [ 955.976179][T20124] __anon_vma_prepare+0xcb/0x4a0 [ 955.976197][T20124] ? __pte_alloc+0x15e/0x1a0 [ 955.976220][T20124] do_pte_missing+0x2dd1/0x3490 [ 955.976257][T20124] handle_mm_fault+0x1bec/0x3310 [ 955.976282][T20124] ? mt_find+0x186/0x630 [ 955.976316][T20124] ? handle_mm_fault+0xee/0x3310 [ 955.976353][T20124] ? __pfx_handle_mm_fault+0x10/0x10 [ 955.976404][T20124] __get_user_pages+0x165b/0x29d0 [ 955.976454][T20124] get_user_pages_remote+0x2f6/0xab0 [ 955.976487][T20124] ? __pfx_get_user_pages_remote+0x10/0x10 [ 955.976511][T20124] ? mmap_read_lock_maybe_expand+0xb0/0x3a0 [ 955.976533][T20124] ? mmap_read_lock_maybe_expand+0xc6/0x3a0 [ 955.976563][T20124] copy_string_kernel+0x2f9/0x5f0 [ 955.976592][T20124] ? __pfx_copy_string_kernel+0x10/0x10 [ 955.976614][T20124] ? alloc_bprm+0x508/0x5c0 [ 955.976631][T20124] ? count+0x1cb/0x230 [ 955.976651][T20124] do_execveat_common+0x38b/0x690 [ 955.976679][T20124] __x64_sys_execveat+0xc7/0xf0 [ 955.976703][T20124] do_syscall_64+0x14d/0xf80 [ 955.976725][T20124] ? trace_irq_disable+0x3b/0x150 [ 955.976740][T20124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.976757][T20124] ? clear_bhb_loop+0x40/0x90 [ 955.976778][T20124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.976795][T20124] RIP: 0033:0x7f894eb9c819 [ 955.976812][T20124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.976827][T20124] RSP: 002b:00007f894fa74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 955.976846][T20124] RAX: ffffffffffffffda RBX: 00007f894ee15fa0 RCX: 00007f894eb9c819 [ 955.976858][T20124] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 955.976868][T20124] RBP: 00007f894fa74090 R08: 0000000000001000 R09: 0000000000000000 [ 955.976880][T20124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 955.976890][T20124] R13: 00007f894ee16038 R14: 00007f894ee15fa0 R15: 00007f894ef3fa48 [ 955.976919][T20124] [ 956.240025][ T9] hub 5-1:0.52: probe with driver hub failed with error -5 [ 956.249010][ T9] usb 5-1: Can not set alternate setting to 1, error: -71 [ 956.256670][ T9] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 956.286080][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 956.294140][ T10] usb 1-1: config 0 has no interface number 0 [ 956.304260][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 956.314926][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.329873][ T10] usb 1-1: Product: syz [ 956.334071][ T10] usb 1-1: Manufacturer: syz [ 956.339420][ T10] usb 1-1: SerialNumber: syz [ 956.353649][ T10] usb 1-1: config 0 descriptor?? [ 956.362513][ T9] usb 5-1: USB disconnect, device number 81 [ 956.368526][ T5884] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 956.528586][T20141] blktrace: Concurrent blktraces are not allowed on sg0 [ 956.614167][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 956.633054][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.671227][ T5884] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 956.684345][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 956.701525][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.719976][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 956.739285][ T5884] usb 6-1: config 0 descriptor?? [ 956.748442][ T10] usb 1-1: media controller created [ 956.821658][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 957.005890][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 957.066650][ T10] usb 1-1: USB disconnect, device number 79 [ 957.216275][ T5884] keytouch 0003:0926:3333.0038: fixing up Keytouch IEC report descriptor [ 957.346666][ T5884] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0038/input/input105 [ 957.572386][ T5884] keytouch 0003:0926:3333.0038: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 957.605081][T20156] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4315'. [ 957.621174][ T5884] usb 6-1: USB disconnect, device number 15 [ 957.724742][T20157] fido_id[20157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 957.881250][T20163] binder: 20158:20163 ioctl c0306201 200000004a40 returned -22 [ 958.143819][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 958.143838][ T30] audit: type=1326 audit(1775964270.021:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 958.214042][ T30] audit: type=1326 audit(1775964270.061:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 958.237656][ T30] audit: type=1326 audit(1775964270.061:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 958.271528][ T30] audit: type=1326 audit(1775964270.061:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 958.310494][ T30] audit: type=1326 audit(1775964270.061:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 958.618478][ T30] audit: type=1326 audit(1775964270.061:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 958.641272][ T30] audit: type=1326 audit(1775964270.061:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 958.664601][ T30] audit: type=1326 audit(1775964270.061:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 958.687958][ T30] audit: type=1326 audit(1775964270.061:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 958.713623][ T30] audit: type=1326 audit(1775964270.061:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f894eb9c819 code=0x7ffc0000 [ 958.958554][T20195] Invalid option length (1040122) for dns_resolver key [ 959.055501][ T5884] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 959.205452][ T5884] usb 3-1: device descriptor read/64, error -71 [ 959.455441][ T9] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 959.463402][ T5884] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 959.520839][T20201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4330'. [ 959.566763][T20203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4331'. [ 959.576061][T20203] netlink: 30616 bytes leftover after parsing attributes in process `syz.4.4331'. [ 959.595625][ T5884] usb 3-1: device descriptor read/64, error -71 [ 959.617140][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 959.624939][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 959.641063][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 959.655179][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 959.667147][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 959.679426][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 959.696569][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 959.716899][ T5884] usb usb3-port1: attempt power cycle [ 959.725608][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 959.755740][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 959.771095][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4332'. [ 959.781197][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 959.797642][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 959.805073][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 959.833250][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 959.850625][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 959.862105][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 959.877938][ T9] usb 6-1: string descriptor 0 read error: -22 [ 959.884597][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 959.907866][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.932044][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 959.969194][T20213] FAULT_INJECTION: forcing a failure. [ 959.969194][T20213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.982607][T20213] CPU: 0 UID: 0 PID: 20213 Comm: syz.4.4334 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.982635][T20213] Tainted: [L]=SOFTLOCKUP [ 959.982642][T20213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 959.982652][T20213] Call Trace: [ 959.982659][T20213] [ 959.982667][T20213] dump_stack_lvl+0xe8/0x150 [ 959.982696][T20213] should_fail_ex+0x412/0x560 [ 959.982727][T20213] _copy_from_iter+0x1d3/0x1670 [ 959.982749][T20213] ? rcu_is_watching+0x15/0xb0 [ 959.982777][T20213] ? __pfx__copy_from_iter+0x10/0x10 [ 959.982800][T20213] ? netlink_sendmsg+0x650/0xb40 [ 959.982818][T20213] ? skb_put+0x11b/0x210 [ 959.982841][T20213] netlink_sendmsg+0x6c0/0xb40 [ 959.982868][T20213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 959.982889][T20213] ? aa_sock_msg_perm+0xf1/0x1b0 [ 959.982916][T20213] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 959.982940][T20213] ____sys_sendmsg+0x972/0x9f0 [ 959.982970][T20213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 959.982999][T20213] ? import_iovec+0x73/0xa0 [ 959.983021][T20213] ___sys_sendmsg+0x2a5/0x360 [ 959.983048][T20213] ? __pfx____sys_sendmsg+0x10/0x10 [ 959.983097][T20213] ? __fget_files+0x2a/0x420 [ 959.983111][T20213] ? __fget_files+0x3a0/0x420 [ 959.983135][T20213] __x64_sys_sendmsg+0x1bd/0x2a0 [ 959.983160][T20213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 959.983188][T20213] ? __pfx_ksys_write+0x10/0x10 [ 959.983217][T20213] do_syscall_64+0x14d/0xf80 [ 959.983240][T20213] ? trace_irq_disable+0x3b/0x150 [ 959.983255][T20213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.983273][T20213] ? clear_bhb_loop+0x40/0x90 [ 959.983295][T20213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.983312][T20213] RIP: 0033:0x7f0d69b9c819 [ 959.983329][T20213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.983343][T20213] RSP: 002b:00007f0d6ab41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 959.983363][T20213] RAX: ffffffffffffffda RBX: 00007f0d69e15fa0 RCX: 00007f0d69b9c819 [ 959.983375][T20213] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 959.983387][T20213] RBP: 00007f0d6ab41090 R08: 0000000000000000 R09: 0000000000000000 [ 959.983398][T20213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.983408][T20213] R13: 00007f0d69e16038 R14: 00007f0d69e15fa0 R15: 00007f0d69f3fa48 [ 959.983434][T20213] [ 960.251337][T20215] binder: 20214:20215 ioctl c0306201 2000000003c0 returned -14 [ 960.260487][ T9] usb 6-1: USB disconnect, device number 16 [ 960.276016][ T5884] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 960.298868][ T5884] usb 3-1: device descriptor read/8, error -71 [ 960.626386][ T5884] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 960.655425][ T5884] usb 3-1: device descriptor read/8, error -71 [ 960.766411][ T5884] usb usb3-port1: unable to enumerate USB device [ 961.235430][T20247] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4343'. [ 961.335478][ T5898] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 961.603108][ T5898] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 961.622862][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.632081][ T5898] usb 6-1: Product: syz [ 961.636750][ T5898] usb 6-1: Manufacturer: syz [ 961.645790][T20257] usb usb1: usbfs: process 20257 (syz.1.4347) did not claim interface 2 before use [ 961.658551][ T5898] usb 6-1: SerialNumber: syz [ 961.684731][ T5898] usb 6-1: config 0 descriptor?? [ 961.694304][ T5898] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 961.710593][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 961.735876][ T5898] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 961.746801][ T5898] usb 6-1: media controller created [ 961.772144][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 962.667175][ T5898] DVB: Unable to find symbol mt352_attach() [ 962.871339][T14864] Bluetooth: hci3: unexpected event for opcode 0x2068 [ 963.045485][ T5898] DVB: Unable to find symbol nxt6000_attach() [ 963.074849][ T5898] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 963.131728][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input106 [ 963.152781][ T5898] dvb-usb: schedule remote query interval to 1000 msecs. [ 963.165459][ T5898] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 963.193215][ T5898] dvb-usb: bulk message failed: -22 (7/0) [ 963.216295][ T5898] dvb-usb: bulk message failed: -22 (7/0) [ 964.075681][ T5898] usb 6-1: USB disconnect, device number 17 [ 964.172492][ T5898] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 965.170772][T20315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.228787][T20315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.251899][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.272018][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.406593][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4358'. [ 965.779346][T20331] fuse: Bad value for 'fd' [ 966.045796][T20343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 966.502868][ T5898] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 966.714837][ T5898] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 966.748216][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.795775][ T5898] usb 1-1: Product: syz [ 966.807793][ T5898] usb 1-1: Manufacturer: syz [ 966.822585][ T5898] usb 1-1: SerialNumber: syz [ 966.837460][ T5898] usb 1-1: config 0 descriptor?? [ 966.864373][ T5898] hub 1-1:0.0: bad descriptor, ignoring hub [ 966.870686][ T5898] hub 1-1:0.0: probe with driver hub failed with error -5 [ 966.948694][T14864] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 966.958920][T14864] Bluetooth: hci3: Injecting HCI hardware error event [ 966.968217][ T5828] Bluetooth: hci3: hardware error 0x00 [ 967.025547][ T29] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 967.058706][T20348] FAULT_INJECTION: forcing a failure. [ 967.058706][T20348] name failslab, interval 1, probability 0, space 0, times 0 [ 967.102820][T20348] CPU: 0 UID: 0 PID: 20348 Comm: syz.4.4365 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.102841][T20348] Tainted: [L]=SOFTLOCKUP [ 967.102845][T20348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 967.102852][T20348] Call Trace: [ 967.102858][T20348] [ 967.102863][T20348] dump_stack_lvl+0xe8/0x150 [ 967.102884][T20348] should_fail_ex+0x412/0x560 [ 967.102915][T20348] should_failslab+0xa8/0x100 [ 967.102941][T20348] __kmalloc_cache_noprof+0x88/0x660 [ 967.102963][T20348] ? alloc_mnt_ns+0xb3/0x2c0 [ 967.102985][T20348] alloc_mnt_ns+0xb3/0x2c0 [ 967.103000][T20348] copy_mnt_ns+0x1af/0x990 [ 967.103015][T20348] ? kmem_cache_alloc_noprof+0x307/0x650 [ 967.103024][T20348] ? create_new_namespaces+0x33/0x6a0 [ 967.103049][T20348] create_new_namespaces+0xcf/0x6a0 [ 967.103075][T20348] ? bpf_lsm_capable+0x9/0x20 [ 967.103100][T20348] ? security_capable+0x7e/0x2c0 [ 967.103126][T20348] unshare_nsproxy_namespaces+0x11a/0x160 [ 967.103141][T20348] ksys_unshare+0x51d/0x930 [ 967.103160][T20348] ? __pfx_ksys_unshare+0x10/0x10 [ 967.103175][T20348] ? __pfx_ksys_write+0x10/0x10 [ 967.103196][T20348] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 967.103219][T20348] __x64_sys_unshare+0x38/0x50 [ 967.103246][T20348] do_syscall_64+0x14d/0xf80 [ 967.103268][T20348] ? trace_irq_disable+0x3b/0x150 [ 967.103278][T20348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.103288][T20348] ? clear_bhb_loop+0x40/0x90 [ 967.103301][T20348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.103312][T20348] RIP: 0033:0x7f0d69b9c819 [ 967.103323][T20348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.103335][T20348] RSP: 002b:00007f0d6ab41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 967.103355][T20348] RAX: ffffffffffffffda RBX: 00007f0d69e15fa0 RCX: 00007f0d69b9c819 [ 967.103369][T20348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 967.103380][T20348] RBP: 00007f0d6ab41090 R08: 0000000000000000 R09: 0000000000000000 [ 967.103391][T20348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.103402][T20348] R13: 00007f0d69e16038 R14: 00007f0d69e15fa0 R15: 00007f0d69f3fa48 [ 967.103423][T20348] [ 967.525613][ T5898] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 967.545659][T20351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.554400][T20351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.595461][ T29] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 967.608357][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 967.608696][T20351] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4366'. [ 967.625378][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.640603][T20353] kAFS: unable to lookup cell '' [ 967.650349][ T5898] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 967.656699][T20351] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4366'. [ 967.674834][ T29] usb 6-1: Product: syz [ 967.683415][T20351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.689983][ T29] usb 6-1: Manufacturer: syz [ 967.700377][ T5898] usb 1-1: media controller created [ 967.719457][T20351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.725391][ T29] usb 6-1: SerialNumber: syz [ 967.750408][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.765758][ T2154] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 967.767735][ T29] usb 6-1: config 0 descriptor?? [ 967.826114][T20351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4366'. [ 967.835856][T20358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4366'. [ 967.847052][T20351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4366'. [ 967.867345][T20351] gre0: entered promiscuous mode [ 967.872097][ T5898] DVB: Unable to find symbol dib7000p_attach() [ 967.872319][T20351] gre0: entered allmulticast mode [ 967.873419][T20351] ------------[ cut here ]------------ [ 967.879614][ T5898] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 967.884009][T20351] usb 1-1: BOGUS control dir, pipe 80005080 doesn't match bRequestType c0 [ 967.884038][T20351] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.4.4366/20351 [ 967.884077][T20351] Modules linked in: [ 967.924273][T20351] CPU: 0 UID: 0 PID: 20351 Comm: syz.4.4366 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.935387][T20351] Tainted: [L]=SOFTLOCKUP [ 967.939759][T20351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 967.950831][T20351] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 967.955548][ T5898] rc_core: IR keymap rc-dib0700-rc5 not found [ 967.956912][T20351] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 967.962904][ T5898] Registered IR keymap rc-empty [ 967.982350][T20351] RSP: 0018:ffffc9000c9bf948 EFLAGS: 00010246 [ 967.982380][T20351] RAX: 0000000000000000 RBX: ffff888030615000 RCX: 0000000080005080 [ 967.982393][T20351] RDX: ffff8880212de4c0 RSI: ffffffff8c7f2a80 RDI: ffffffff901f1940 [ 967.982406][T20351] RBP: 1ffff11004b2c3f4 R08: 00000000000000c0 R09: 0000000000000000 [ 967.982418][T20351] R10: ffffc9000c9bfa40 R11: fffff52001937f54 R12: ffff88807c622100 [ 967.982432][T20351] R13: ffff888025961fa0 R14: 0000000080005080 R15: ffff8880212de4c0 [ 967.982445][T20351] FS: 00007f0d6ab206c0(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 967.982461][T20351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.004502][ T29] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 968.010619][T20351] CR2: 0000000000000000 CR3: 000000005b84a000 CR4: 00000000003526f0 [ 968.010645][T20351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 968.010657][T20351] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 968.010669][T20351] Call Trace: [ 968.010685][T20351] [ 968.010701][T20351] ? __init_swait_queue_head+0xa9/0x150 [ 968.010731][T20351] usb_start_wait_urb+0x13f/0x5b0 [ 968.010759][T20351] ? rcu_is_watching+0x15/0xb0 [ 968.010785][T20351] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 968.010808][T20351] ? trace_kmalloc+0x2a/0x110 [ 968.010848][T20351] usb_control_msg+0x234/0x3e0 [ 968.010878][T20351] dib0700_i2c_xfer+0xbb2/0xf80 [ 968.010917][T20351] __i2c_transfer+0x79a/0x2020 [ 968.010941][T20351] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 968.135920][T20351] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 968.141753][T20351] ? i2c_transfer+0xc8/0x2d0 [ 968.146522][T20351] i2c_transfer+0x1cc/0x2d0 [ 968.151050][T20351] i2cdev_ioctl_rdwr+0x460/0x740 [ 968.156096][T20351] i2cdev_ioctl+0x6a5/0x880 [ 968.160615][T20351] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 968.165739][T20351] ? __fget_files+0x3a0/0x420 [ 968.170429][T20351] ? __fget_files+0x2a/0x420 [ 968.175415][T20351] ? bpf_lsm_file_ioctl+0x9/0x20 [ 968.180598][T20351] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 968.185861][T20351] __se_sys_ioctl+0xfc/0x170 [ 968.190483][T20351] do_syscall_64+0x14d/0xf80 [ 968.195166][T20351] ? trace_irq_disable+0x3b/0x150 [ 968.200372][T20351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.206486][T20351] ? clear_bhb_loop+0x40/0x90 [ 968.211159][T20351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.217134][T20351] RIP: 0033:0x7f0d69b9c819 [ 968.221624][T20351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.241371][T20351] RSP: 002b:00007f0d6ab20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.249831][T20351] RAX: ffffffffffffffda RBX: 00007f0d69e16090 RCX: 00007f0d69b9c819 [ 968.257866][T20351] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 000000000000000e [ 968.265892][T20351] RBP: 00007f0d69c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 968.273864][T20351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.281894][T20351] R13: 00007f0d69e16128 R14: 00007f0d69e16090 R15: 00007f0d69f3fa48 [ 968.289919][T20351] [ 968.292937][T20351] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 968.300214][T20351] CPU: 0 UID: 0 PID: 20351 Comm: syz.4.4366 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.311131][T20351] Tainted: [L]=SOFTLOCKUP [ 968.315436][T20351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 968.325650][T20351] Call Trace: [ 968.328926][T20351] [ 968.331853][T20351] vpanic+0x56c/0xa60 [ 968.335840][T20351] ? __pfx__printk+0x10/0x10 [ 968.340503][T20351] ? __pfx_vpanic+0x10/0x10 [ 968.344995][T20351] ? is_bpf_text_address+0x292/0x2b0 [ 968.350356][T20351] ? is_bpf_text_address+0x26/0x2b0 [ 968.355546][T20351] panic+0xc5/0xd0 [ 968.359257][T20351] ? __pfx_panic+0x10/0x10 [ 968.363676][T20351] __warn+0x315/0x4f0 [ 968.367656][T20351] ? usb_submit_urb+0x1053/0x18b0 [ 968.372686][T20351] ? usb_submit_urb+0x1053/0x18b0 [ 968.377717][T20351] __report_bug+0x29a/0x540 [ 968.382237][T20351] ? usb_submit_urb+0x1053/0x18b0 [ 968.387251][T20351] ? __pfx___report_bug+0x10/0x10 [ 968.392269][T20351] ? lockdep_hardirqs_on+0x7a/0x110 [ 968.397493][T20351] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 968.403291][T20351] report_bug_entry+0x19a/0x290 [ 968.408156][T20351] ? usb_submit_urb+0x1115/0x18b0 [ 968.413169][T20351] ? usb_submit_urb+0x111a/0x18b0 [ 968.418178][T20351] handle_bug+0xce/0x200 [ 968.422422][T20351] exc_invalid_op+0x1a/0x50 [ 968.426938][T20351] asm_exc_invalid_op+0x1a/0x20 [ 968.431795][T20351] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 968.437429][T20351] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 968.457028][T20351] RSP: 0018:ffffc9000c9bf948 EFLAGS: 00010246 [ 968.463189][T20351] RAX: 0000000000000000 RBX: ffff888030615000 RCX: 0000000080005080 [ 968.471143][T20351] RDX: ffff8880212de4c0 RSI: ffffffff8c7f2a80 RDI: ffffffff901f1940 [ 968.479111][T20351] RBP: 1ffff11004b2c3f4 R08: 00000000000000c0 R09: 0000000000000000 [ 968.487070][T20351] R10: ffffc9000c9bfa40 R11: fffff52001937f54 R12: ffff88807c622100 [ 968.495042][T20351] R13: ffff888025961fa0 R14: 0000000080005080 R15: ffff8880212de4c0 [ 968.503011][T20351] ? usb_submit_urb+0x10a4/0x18b0 [ 968.508030][T20351] ? __init_swait_queue_head+0xa9/0x150 [ 968.513561][T20351] usb_start_wait_urb+0x13f/0x5b0 [ 968.518575][T20351] ? rcu_is_watching+0x15/0xb0 [ 968.523324][T20351] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 968.528853][T20351] ? trace_kmalloc+0x2a/0x110 [ 968.533521][T20351] usb_control_msg+0x234/0x3e0 [ 968.538289][T20351] dib0700_i2c_xfer+0xbb2/0xf80 [ 968.543135][T20351] __i2c_transfer+0x79a/0x2020 [ 968.547899][T20351] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 968.553709][T20351] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 968.559512][T20351] ? i2c_transfer+0xc8/0x2d0 [ 968.564088][T20351] i2c_transfer+0x1cc/0x2d0 [ 968.568578][T20351] i2cdev_ioctl_rdwr+0x460/0x740 [ 968.573551][T20351] i2cdev_ioctl+0x6a5/0x880 [ 968.578044][T20351] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 968.583067][T20351] ? __fget_files+0x3a0/0x420 [ 968.587729][T20351] ? __fget_files+0x2a/0x420 [ 968.592317][T20351] ? bpf_lsm_file_ioctl+0x9/0x20 [ 968.597242][T20351] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 968.602252][T20351] __se_sys_ioctl+0xfc/0x170 [ 968.606836][T20351] do_syscall_64+0x14d/0xf80 [ 968.611417][T20351] ? trace_irq_disable+0x3b/0x150 [ 968.616439][T20351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.622491][T20351] ? clear_bhb_loop+0x40/0x90 [ 968.627154][T20351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.633027][T20351] RIP: 0033:0x7f0d69b9c819 [ 968.637436][T20351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.657025][T20351] RSP: 002b:00007f0d6ab20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.665432][T20351] RAX: ffffffffffffffda RBX: 00007f0d69e16090 RCX: 00007f0d69b9c819 [ 968.673399][T20351] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 000000000000000e [ 968.681350][T20351] RBP: 00007f0d69c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 968.689475][T20351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.697427][T20351] R13: 00007f0d69e16128 R14: 00007f0d69e16090 R15: 00007f0d69f3fa48 [ 968.705402][T20351] [ 968.708799][T20351] Kernel Offset: disabled [ 968.713110][T20351] Rebooting in 86400 seconds..