last executing test programs: 9.385915351s ago: executing program 2 (id=5300): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x2cc}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000002c0)={0x0, 0x0, 0x6, "5c0ff63a33e8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="00eb20"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r7, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001b80)={'ip6_vti0\x00', &(0x7f0000001b00)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x1, 0x3, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x10, 0x40, 0x3, 0x2}}) sendmmsg$inet6(r0, &(0x7f00000026c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x103e, @empty, 0x80}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="02d1988d6340cd8c7d4b34f15694ab0fc8643a263f7635186bb0fd79294de18aeb69a76f26c448c16c0ef0d9d3e34a50e99c883f59bfa2ef24a1c35040362497ccac98913453bf6c2c41a8cc319dd071ce6b9799682a789b5e1e662d5a8e9de67c7fc4c20109f9983e2a647abfd4546f83865bf53ecc22042313caa43930f9ca4c3808ca3b8680a8a245f01252db3d6ac064ada9ef62dc50628ab87767a6e9018e85862509c6ad2a8aefd1323e672a6bff455512fd78f8ecfd5b7cd558e21322c36fa04b175f4a22d9fdf3a5a0d873183e8f361eab3f932cfe6c0b810992f6d3eb6fbb7e23e039fe81", 0xe9}, {&(0x7f0000000180)="c01634d10a8487320b021836b7974b086ec3ce2aea1fe3d1ee72d0d201e5f98a72704e0b165b7fae00f01076c430d8727fce554d03371b9c9f4344b24a4db6cea56734eb6f03ce6450cbd73bb511c801bd0749ac9b68d7cfa60e7b82e81d7965115dda0264833ce0df8a94c676f96ab78c26d9c43e048688643b3db604c72394827902a18fc918df27fe7f0b76e5d8373ebd22ef42b63fbc540a786cdb", 0x9d}, {&(0x7f0000000240)="9e1a73a106440552e9c6241c3b27ec406ed7a342598715aedef7a2ef6ef014a23016e85cceb4b7415131e22fe7492012ae51f70486bdae6c9ad532e4d53fcd24f015edf48c91dc5003d836b9b1bf560f0c89aa1c0c0e85dd223066b7f616db0595a056", 0x63}], 0x3}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x5, @private0, 0x1}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000380)="573456faadaae61de7fea8dde39343fa25ab326200177b7710c16b239e0152129873", 0x22}, {&(0x7f00000003c0)="ac30812ff2de2c6374f7f8c752462299c4229f3cc98018d835fd87df9830661e5268157d1e7fb504ad5279a747dcd3fd109f20ac171212aaebc14b3836a128792bc6fe9953a96701404ce16304ee0b36383ea370bfeb1967bfab1b890d0b8bcaf5987cf6fa9c0e9eea0599c2b1404e9ed639a5a933515ee3f31ede3f4972aef0207ed95792000dd51d6e30cefc64dc9376b94a4bca21594cc4e0e603c17a8ae2b2ec38bdd955f89fe30754e9df392c945b18d78381d8ffa2d2a9ea4af36a80b9b7753fff80", 0xc5}, {&(0x7f00000004c0)="8e42ab7fa2e4882f123e1f6cf57da7fe271153a0f10bda6eabdfd886b4fce159b593bb357af7c69bf9c145680ad7a6d088341b6e3eeac1981ec3ba0b3cbfd82e1f0ae5086c5f092443d010ba2e7494a101350e2d985ccbaaccd024b772801764e1a4c1560982504aef40dbe64f1f65af8e1fc3c8b25d3852ab11903122dc42ea1d6b90a18539d84315ca09434b9ef71dd0e5b3164e74f2d99a890a7aab75fce2687cb36435a974639a9ba6f778e2ba", 0xaf}, {&(0x7f0000000580)="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", 0xfc}, {&(0x7f0000000680)="f05b4b959cc8c6ccaf19c5772ee667da7da4aa519812d429a061dc4c8254378be6b97b592c01a1fb781e0dc17498087c4b04ed227bc26634160e77b570a8c6dd9f8cab147ece27621bfdf14e3853dac19c44d309d885546a8def124dffa1f309c180ca003b3d131541eeffe2fcc4d6c5828d55f7b7040ff9bbaf3a22f6298ca7f7d924c52f5a7c7513038e5f63291fb7d38f89e2569ce4bbc3801c54215e6aa6cbdfb0300b03b0bcb54074e803e263f5de344d2092445f7d9c70908119599178e018ac259d20a18de2e14b1f1faa16e6f83976ec729f29bc757532b135fe8b2c", 0xe0}], 0x5, &(0x7f00000007c0)=[@hopopts_2292={{0x9c, 0x29, 0x36, {0x21, 0x10, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x80, 0x3, [0x3, 0x3, 0x8, 0x6, 0x3]}}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x1, 0x54aa, [0xf2e, 0x0, 0x600000, 0xffff, 0x6b6, 0xa]}}]}}}, @rthdr={{0x24, 0x29, 0x39, {0x32, 0x2, 0x2, 0xff, 0x0, [@empty]}}}, @dstopts_2292={{0x101c, 0x29, 0x4, {0x2, 0x200, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x4, 0x1000, "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"}]}}}, @tclass={{0x10, 0x29, 0x43, 0xfffffffa}}, @hoplimit={{0x10, 0x29, 0x34, 0x5}}, @rthdr_2292={{0xfffffffffffffea9, 0x29, 0x39, {0x2b, 0x2, 0x1, 0x7, 0x0, [@local]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x7}}], 0x1130}}, {{&(0x7f0000001900)={0xa, 0x4e21, 0x9, @private0, 0x9}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001940)="fff4c0cbe1ed2ab23046618555826a5ccf1438c8d5e7373419d5bd40ecabebaab4b7e51a4785746abb0ef872f15c64d9d624c4ed356e028fa500921f18031905ade19def6bccabba23250a3f4b60f30a6a3dec39dca5cc779fff161128c1a72dd5b31b8774f257fa207086c37020e92e5709f801f7cf4da445b7205bfacbfc19c95dfd66f5fbb8", 0x87}, {&(0x7f0000001a00)="c3affe9bb0cd17cf09a9c5f6a9056210accb24727822818feb7965f0fc603e8c58dbca142cf401cd9f6cca7b4d250c67944e4036d50808a20aab141f0fef45150683a8331576542cf6cf27a05ab22c3fcd2b41c60316958f3053e304df404a1600987c6b214a091d2bfbb3c4df3a99dad022c9810d30208b335c67208b4e7ad8081d05c2f25075ca94a6d1", 0x8b}], 0x2, &(0x7f0000001bc0)=[@pktinfo={{0x20, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r8}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="a539ee8468b952f7e85dfcbaefb367bfda77fad68301e8fdb7bc469c75ea54480690d0bd533686cfc73ea1d32942dc8a29aa12e4dc2945e64169c9fc03baff556a5229fb24c9209feee9b7ac84f4cd29d24ccc34b53466c39e2149b9d6c4fd9e7d4f5e547512b9de09fadd44d88b2cbfdbbb0790a8c98d998b2cf10ac93d20bd95272b83f5d9e3fa779fed5a09dfffe9fe8fb14f6be8cc7ed61708bb1805590b05a100ecc68f06d76f72ac2236353473e4a64c985630afa44a", 0xb9}], 0x1, &(0x7f0000001d00)=[@tclass={{0x10, 0x29, 0x43, 0x10}}, @hopopts_2292={{0x3c, 0x29, 0x36, {0x3a, 0x4, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x4}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x833}}, @hopopts_2292={{0x10c, 0x29, 0x36, {0x21, 0x1e, '\x00', [@generic={0x8, 0xea, "f602e5b21878e3f95d41f9b87c62258d1ddab35fd36e5c1f08cbee2ebdb3f6556fac4b184095ff3be80bf20478a3b84e66b578045af5e72ec02920e141f3ec49e11e8936e6f566974cc081f5bd854180db24c4622c2a1e6eb17016201ac05e707a1da5ddfc80db44cd2c84810b095642a5b4a2c01668db4dc54a70ca40a195bd8d42743bfad7abc5b1559e7392fb9cd8bd2f3bb6423e2413a4e8e5d6433904f7c8251e0cf4eacc2e1d1ae735f18a3dab56fb4fdb6213a8abab00e69ff51c85792fcb6a4aaac7119c1cc0f68a62d189ac34307f28d3c7dd1717c8c85cc8a20fd61abafefa90fc170aa3b4"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr={{0x24, 0x29, 0x39, {0x88, 0x2, 0x0, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x7}}], 0x1ac}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x6b7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001f00)="f87a55fed27b85c337ee9adad99c32", 0xf}, {&(0x7f0000001f40)="3400c70badb672b52f3f47cb6499ac29da3305a88ad2a9cd08c9458d622e874f4e7d076619a2d76bc20d0877bd195f2e8464b7737ab1c8cf158239c74ff3b89009ebc6a7", 0x44}], 0x2, &(0x7f0000002000)=[@dstopts_2292={{0x5c, 0x29, 0x4, {0x89, 0x8, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x1, 0x2, [0x8, 0xa4]}}, @pad1, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}]}}}, @hopopts_2292={{0x34, 0x29, 0x36, {0x2b, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x4, [0x3, 0x8]}}, @jumbo={0xc2, 0x4, 0x1}]}}}, @dstopts_2292={{0x1c, 0x29, 0x4, {0x2, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xac}}, {{&(0x7f00000020c0)={0xa, 0x4e22, 0x80000000, @private1, 0x5}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000002100)="429eba1bf42d4763c9eaa2480545c15a4e4f91bee6d7b0810203cdf96f35e266624edef9a4060595eb57006f3676b510c5ca3bef37c2ed19822a7b4f1bb57e5565ede67bb13b877e7d3267a4d4e88ff4b55b9b92dcf3ace9a1e714a286852b6a1a80083aae22eb6485216ec5997fc1ffcc2cc5ab47c5fab6af62bdbbd38d25f216b5a8319463e0aed5f9c2c1dd12347ec92487700605f4cb3b365023cf580af57ba0bda0da5bbb3f041a904d8d2345239d6bcd219aefc7ba86852c68d38cb32b567aac25db0e5634fe37469187fb663dad870cc6f6f101d12b80f7e359e08bb26781c3b128927be20e9749f2c8", 0xed}, {&(0x7f0000002200)="5f5890fe07aed2c54fcb805dc1726b095cab2004d8f7ccb13a3968279109cb9967716925669ef459ffe6aa99d267174b07837f11e6b99f8d991acc955537d7f23d7d09dcf434021da08e0c6264cfc21eacbc06e9f225506893e53753f3964bfad94bada0de6eb8d8cb9588081b4f2eefcc4f8340f47731caf31ed0f18b17653db43ade1b46656542c5dff931ebdd70180fc5a71baa19407f7ae6505896ac2a58e121fadc315c6f8e6447aef10124dd9817764e61a40cad7f9ee40459ed15e56d2403ef0b1de2c1d5e1db85535b969a023dfc995286526341", 0xd8}], 0x2, &(0x7f0000002340)=[@rthdr={{0x74, 0x29, 0x39, {0x33, 0xc, 0x0, 0x8, 0x0, [@empty, @local, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast2]}}}, @hopopts={{0x44, 0x29, 0x36, {0x29, 0x5, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x81}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7}]}}}], 0xb8}}, {{&(0x7f0000002400)={0xa, 0x4e21, 0xfffff7f2, @loopback, 0x4}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002440)="cdf829e8f6dbdf7df5d04ea4b492eea50c7858299f665c1e78c2c4ed55b184161a8c422f80174361ba9ca1fbb3ded0d3d74b0306848e999466a1cd26d281c26ede8d4edd", 0x44}, {&(0x7f00000024c0)="5d0d6918a4f833cec0173f266e7ec88c933382214cfb509ac54f2fa8a1ee35e34ab4dedd9732c3aaf6356b0d14028f46c79dab17b8dbedc0ccec82da9019", 0x3e}], 0x2, &(0x7f0000002540)=[@dstopts_2292={{0x2c, 0x29, 0x4, {0x0, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0xe}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x33}}, @rthdr_2292={{0x34, 0x29, 0x39, {0x11, 0x4, 0x2, 0x6, 0x0, [@remote, @remote]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x6}}, @tclass={{0x10, 0x29, 0x43, 0x63}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x16, 0x5, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x1, 0x5, [0x7, 0x1c1, 0x1, 0x7]}}, @ra={0x5, 0x2, 0x101}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@empty, r8}}}, @rthdrdstopts={{0x7c, 0x29, 0x37, {0x2f, 0xc, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x38, {0x2, 0xc, 0xfa, 0x4, [0x5, 0x7fffffffffffffff, 0x8, 0x86, 0x0, 0x7]}}, @jumbo={0xc2, 0x4, 0x7}]}}}], 0x170}}], 0x7, 0x4000014) 7.98370803s ago: executing program 1 (id=5304): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000300)='exfat\x00', 0x1) fstat(r1, &(0x7f0000001ac0)) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0xd}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x81}}], 0x30}}], 0x1, 0x4044) 7.800551277s ago: executing program 1 (id=5305): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/mnt\x00') setns(r1, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r2, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x2f, 0x2023, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)) close(r3) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r9}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @multicast1}]}, 0x34}}, 0xea5bc50b6199d77e) getsockopt(r6, 0x400000000000003a, 0x4, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="09000000e700140000007ef52f555f2a0c67127025c1d97bfbf788a83baa4b1f", 0x20, 0x24004801, &(0x7f0000000080)={0x11, 0x2, r11, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="7dd2c86832721f46ac6cc0a546889e8dbd220c072724b3a080040f89699d08c1c943d2e1ed7591eacacf92e91d69d5c05007892bb7cfd375047b4085073a20124458e89cb8102f408d5406435c8b5210035142adc9b42d618d9580acb4c781bdfdee2b83267888cfa83beaad9421c1fbac2b50472f0f110fbff8908edec7897070c8b2cbace87265ff36cc2b3b793bbc65a77ad1c196eb08c527f249d0fe5033b95993d9061690", 0xa7}, {&(0x7f00000001c0)="082c9bee667ce4f3689817dd036ed6f4a6f1d69ef437427ffad6c0cee03a31e16e511bdc9a96047d7a155def7e3cadf4bf0b7a23f86d4214b4720ec9152b83000d446ec3996cbd795288bf9da10444bd29459e4f65e4ac6cb3016b04e12f5e715a6951dd0ed898a7842f4d2a980e8b8e1777d47d02d9af2e4694c084f6ee3c24700d7da688dfe33b2abf81513e7bb277bd4b5b99", 0x94}, {&(0x7f0000000000)="d78ae0d78929a7", 0x7}], 0x3, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000340)={0xeb, "9b037fcfad5cb4788e80253c8f04479358d63350e156dafd31b64806f9eef6da"}) 7.456327905s ago: executing program 4 (id=5308): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="1358b4ee3136f6172fc5b411d84a8b8e4ea548bea81eb1bee415ac1943b7aee186b55c72", 0x24}], 0xa, 0x1000, 0x206, 0x13) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) cachestat(r1, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) 7.405894945s ago: executing program 3 (id=5309): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xb, 0x4}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x8, 0x10001, 0x4, 0x8, 0x7fff]}, &(0x7f0000000100)=0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x2a, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) timer_create(0x1, &(0x7f0000000900)={0x0, 0x37, 0x4, @thr={&(0x7f0000000540)="50801a6a7b5902862c9f2c1bc003b6b30d576b6dad59894ebf309e57f3ff2a925c2e4b433f87a43375a774e9fdc3051f7d0ea69ddecfb4a685ccaec2f471e580db9b56f6f933a7dd3a33ed1654c63893df0431c7aa2b413781e6bb936320c74f8d8d2f73419a7cbe583a5ea42066dc8a476e09a7faef9a38f68957dc1f53dfdc9e3098b5f0b550ed3394354d93e96f0e31389b6f0a8c64f5cc6872885f46eb1b2a20eec0e070df835774c09cfa390f51a55add1d638f985f92898f1b6e44f15e182b4229d493bf0d61225164a75073000383f7870b", &(0x7f0000000440)="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"}}, &(0x7f00000008c0)) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x800) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) 7.365760765s ago: executing program 4 (id=5310): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000200)={0x1}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002000090002000000fedbdf2501000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x101040) 6.224594932s ago: executing program 2 (id=5312): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)=0x8000) 6.07969689s ago: executing program 2 (id=5313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x3, [@struct={0xe, 0x2, 0x0, 0x4, 0x0, 0x4, [{0x4, 0x1, 0x8001}, {0x0, 0x2, 0x5}]}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xe}}, @union={0x1, 0x9, 0x0, 0x5, 0x0, 0x8, [{0x9, 0x5, 0x80}, {0x9, 0x4, 0x5}, {0x4, 0x1, 0xa}, {0xe, 0x0, 0x4}, {0xa, 0x3, 0xf205}, {0xc, 0x4, 0x100}, {0xd, 0x5, 0x8}, {0x8, 0x2, 0xffff}, {0xa, 0x5, 0x702}]}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/108, 0xdb, 0x6c, 0x0, 0xff}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000280)=@bloom_filter={0x1e, 0x6, 0x6, 0x6, 0x80000, 0xffffffffffffffff, 0x2, '\x00', r2, r3, 0x4, 0x3, 0x5, 0xb}, 0x50) 5.994292758s ago: executing program 4 (id=5315): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) syz_usb_connect(0x5, 0x274, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) 5.892653094s ago: executing program 1 (id=5317): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) r1 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.6612917s ago: executing program 1 (id=5319): syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) r3 = socket(0x10, 0x80002, 0x0) bind$netlink(r3, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=@newtfilter={0x3c10, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x779f0574}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa8}}, @TCA_RATE={0x6, 0x5, {0xab, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x368, 0x6, 0x5, 0x5f, 0x81, 0xe6, 0x5, 0x10, 0x4, 0x2, 0x4, 0x84, 0x9, 0x7, 0x17ee, 0x8001, 0x2, 0x6, 0x1, 0x0, 0xb, 0x1, 0xffffffff, 0x35ab, 0x4, 0xddc, 0x1, 0xa, 0x0, 0x2, 0x1, 0xffffffff, 0x3, 0x72820263, 0x9, 0x7, 0x0, 0x5, 0x7, 0x0, 0xfffffff9, 0x4, 0x7, 0x6, 0xc, 0xfff, 0x5, 0x5a9, 0x7fff, 0x49d2, 0xa, 0x100, 0x1b, 0x0, 0x3, 0x9, 0x28000000, 0x0, 0x8, 0x6, 0xf, 0x2735, 0x7ff, 0x0, 0x80, 0x101, 0x7f, 0x8, 0x1, 0x8, 0x9d, 0x391, 0x7, 0x6, 0x7, 0x6, 0xc4, 0xb, 0xec0, 0x40, 0x8, 0x8001, 0x2, 0x40, 0x7, 0x8, 0x7566, 0xb, 0x1, 0x4, 0x6, 0x10, 0x9, 0xc054, 0x6, 0xfffffff9, 0x4, 0x4, 0x8, 0x4, 0xea, 0x3, 0x3, 0x0, 0x9843, 0xb9a, 0x40, 0x2, 0x3, 0x0, 0x4, 0x2, 0xa94, 0x7, 0x0, 0x6, 0x0, 0x8000c, 0x1, 0x3, 0x0, 0xfffffff8, 0xd7, 0x80000001, 0x40, 0xfff, 0x4, 0x9, 0x9, 0xaa, 0x7fffffff, 0x9, 0x0, 0x80, 0x3ff, 0x6, 0x3, 0x800, 0xc9, 0x1, 0x2, 0xe, 0x1, 0x8001, 0x7ff, 0x40, 0x4, 0x100, 0x8, 0x1, 0x1, 0xae0c, 0x1df, 0x6, 0x7, 0x1, 0x6, 0x0, 0x200, 0x7, 0x200, 0x9, 0xffff, 0x2f, 0x0, 0xffffffff, 0x7ff, 0x6, 0xb029, 0x8, 0x2, 0x2, 0x80, 0x100000, 0x2, 0x6, 0x20000, 0x10001, 0x5, 0x4, 0x400, 0x58a2, 0x1ff, 0xff, 0x8, 0x8, 0x7f, 0x8, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3, 0x81, 0xff, 0x6, 0xffffffff, 0x5, 0xfffffff8, 0x1, 0x10000, 0xd, 0x2, 0x0, 0x8, 0x5c8d, 0x5, 0x1385, 0x800, 0x9, 0x8, 0x80, 0x836, 0x8c66, 0x8, 0x1, 0x8, 0x3, 0xe8c, 0x47c4, 0x9f, 0x4, 0x2, 0x8, 0x7, 0xa6f, 0x9, 0x1, 0x2000000c, 0x5, 0x7, 0x40, 0x5, 0x4a5e, 0xd32c, 0x1000, 0x4c, 0xfffffffc, 0x1, 0x442, 0x1000, 0x1, 0x7, 0x8, 0x8, 0x9, 0x8000, 0x51c, 0x7, 0x3, 0x5, 0x3, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x874}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}, @filter_kind_options=@f_basic={{0xa}, {0x3748, 0x2, [@TCA_BASIC_POLICE={0x41c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x0, 0xfffffffc, 0x9, 0x1, 0x52, 0xa7b, 0x24, 0x8, 0x972, 0x3, 0x6, 0x6, 0x5, 0x401, 0x100, 0x8, 0x0, 0x5, 0x2, 0xc4, 0x2, 0x4, 0x6, 0x80000000, 0x8, 0x9, 0x8, 0x4, 0x3, 0x200, 0x8, 0x8001, 0xa8, 0x9, 0x2bb, 0xfff, 0x5, 0x4, 0x4, 0x10, 0x8, 0x9, 0x2, 0x7, 0x0, 0x7, 0x5, 0x5, 0x7, 0x100, 0x6, 0x1, 0x3, 0x10000, 0x7, 0x4, 0xffff5deb, 0x0, 0xb, 0x7ff, 0xf35b, 0x1, 0x9, 0x3, 0x7fffffff, 0xffff, 0x528, 0x6, 0x1000, 0x80000000, 0x4, 0x6, 0x5fd, 0x30, 0x0, 0x7, 0x3, 0xb, 0x6, 0x0, 0x2, 0xfff, 0xb7, 0x8, 0x8, 0x9, 0x8, 0x8, 0x4, 0x1, 0x7, 0x2, 0x5, 0xc1, 0x40, 0x74be, 0x4, 0x8, 0x7, 0x9, 0x9, 0x9, 0xa0c, 0x7fffffff, 0x1, 0x0, 0x5, 0x6, 0x9, 0x1, 0x9, 0x0, 0x1, 0xfffffffa, 0x0, 0x983d, 0xfffffff8, 0x1, 0x6, 0x2, 0x4, 0x89, 0xd, 0x40d, 0x3, 0xc, 0x5, 0x800, 0xfffffffb, 0x4, 0xe5e, 0x920, 0x5, 0x200, 0x6, 0x9, 0x4, 0x9, 0x3, 0x500000, 0x3, 0xf, 0x1, 0x5, 0x6, 0x5, 0x100, 0x3, 0x200, 0x6c, 0x8, 0x80000000, 0x7a000000, 0x229, 0x7, 0x3, 0x2, 0xb9, 0x3, 0x4, 0x0, 0x5, 0x3, 0x5034, 0xffffffff, 0x4e42, 0xda0, 0x4fa, 0x8a4a, 0x7ff, 0x9, 0x6, 0x2, 0x86fb, 0x7, 0x8, 0x78d8, 0x40, 0xf73, 0x101, 0x80000000, 0x2, 0xc29a, 0x56, 0x7fff, 0x2, 0xfffffffe, 0x5, 0x1, 0x2, 0xfffffff3, 0x7, 0x5, 0x1, 0x2, 0xea0b, 0x6, 0x9, 0x5, 0x200, 0x3, 0x5, 0x9, 0x5, 0x6, 0x7ff, 0x4, 0xe, 0x0, 0x5, 0x7, 0x9, 0x5, 0xffffff8f, 0x7, 0x1, 0x7, 0x9, 0x9, 0x4, 0x7, 0x4, 0x6, 0x0, 0x0, 0x2, 0x5, 0x5, 0xffffffff, 0x9, 0x7fffffff, 0x7f, 0x6, 0x22d2, 0x8, 0x10000, 0xe99b, 0x6, 0x9, 0x8000, 0xfffffff8, 0x4, 0xa7, 0x3, 0x9, 0x0, 0xb9d8, 0x488f, 0x4, 0x0, 0x4, 0x3, 0x400]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbcf}]}, @TCA_BASIC_POLICE={0x50, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x202000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff2, 0x5, 0xffffa45c, 0x401, 0x1, {0x7, 0x1, 0x8000, 0x4, 0xff80, 0x8000}, {0x10, 0x1, 0x9, 0x7, 0x5, 0x1}, 0x8, 0x6, 0x9}}]}, @TCA_BASIC_POLICE={0x10e0, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xffff, 0x5, 0x5, 0x3, 0x1, 0x4, 0x52a6, 0x9c9d, 0x8000, 0xf80f, 0x6, 0x5, 0xfffffff9, 0xd, 0x7fff, 0x8, 0x1, 0x6, 0x8, 0x5, 0x4, 0x2b, 0x5, 0xf, 0x9a9, 0xd, 0x56c, 0x6, 0x7fa, 0x800, 0x8000, 0x8, 0x9, 0x3, 0x9, 0x9, 0xfffffffe, 0xe, 0x7, 0xfffffffc, 0x4, 0x10000, 0x729, 0x8001, 0x1, 0x0, 0x8, 0x3, 0x3, 0xfffffc00, 0x8000800, 0xf92a, 0x100, 0x5, 0x2, 0x3, 0x5, 0x4, 0x4, 0xf, 0x1, 0x8, 0x8, 0x7, 0x7, 0xad4, 0x44bd, 0x1, 0xfffffff2, 0x7, 0x2, 0x4, 0x905, 0x380, 0x4, 0x100, 0x7, 0x0, 0x1bef, 0x15be, 0x4, 0xa8a5, 0x6, 0xfffffffa, 0x0, 0x2, 0x2, 0x1000, 0x8, 0x3, 0x100, 0x2, 0xcea, 0x8, 0x8, 0x0, 0xbfc6, 0x8, 0x7ff, 0x4, 0x6, 0x0, 0x4, 0x3ca2, 0xfffffffc, 0x7, 0x80000001, 0x4, 0x8000, 0x8, 0x3, 0x6, 0xccf, 0x400, 0xebc, 0x20, 0x1f9e, 0x101, 0x4, 0x101, 0x8, 0xa, 0x4, 0x6, 0xf, 0x9, 0x0, 0xf, 0xb, 0x7fff, 0x1, 0xb, 0x4, 0x1000, 0x101, 0x0, 0x7, 0x8, 0xffff, 0x7, 0xf, 0x2, 0x48, 0x7fffffff, 0xa, 0x3, 0x1000000, 0x10001, 0x8001, 0xffff7fff, 0x3, 0x3, 0x9, 0x2b864271, 0x3, 0x4, 0x53, 0x5, 0x5, 0x2, 0x8001, 0x4, 0x6fe7, 0x0, 0x8000, 0x0, 0xffffff32, 0x9d, 0x9, 0x6, 0x3, 0x26, 0x34a31964, 0xfffffaa8, 0x6, 0x9, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7, 0xf, 0x10001, 0xffffffff, 0x6, 0x5, 0xc, 0x4, 0xb, 0x2, 0xfffffffa, 0x4b7, 0x8, 0x89, 0x1000, 0x9, 0x8, 0x8, 0x2, 0x80000001, 0x6, 0xffffffff, 0x5, 0x1, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3e80, 0x5, 0x8, 0x10, 0x3, 0x9, 0x0, 0x6, 0x9, 0x400, 0x3, 0x1, 0x7fffffff, 0x101, 0x9, 0x0, 0x10001, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x10001, 0x0, 0x0, 0xd, 0x7, 0x5, 0xa11, 0x5, 0x692, 0x4, 0x116a, 0x7f, 0x0, 0x2, 0x2, 0x16, 0x4, 0x2, 0x7, 0x8, 0x6, 0x101]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x6, 0x6, 0x1, 0x1, {0xff, 0x1, 0x5, 0x3, 0x8, 0x81}, {0x6, 0x2, 0x40, 0x7f, 0x3ff, 0x4}, 0xcf5, 0x3, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x100, 0x5, 0xe541, 0xa7, 0x1ff, 0xa, 0x4, 0xbab3, 0x0, 0x5, 0x100, 0x8000, 0xfffffffe, 0x401, 0x0, 0xea, 0x800, 0x1ff, 0x2, 0x52be, 0x6, 0xff800000, 0x9, 0x8, 0xfffffffb, 0x4, 0xe5a2535, 0xcd2, 0x81, 0x9, 0xd359, 0x8, 0x7, 0x2, 0x7, 0x4, 0x7, 0x4, 0x2, 0x3401, 0x1, 0x1, 0x7ff, 0x7ff, 0x6, 0x8, 0x8, 0x1, 0x8, 0x8000, 0x2, 0x5, 0x0, 0x3ff, 0x0, 0x4, 0xb48, 0xb, 0x9e76, 0x0, 0x7, 0x9b, 0x7ff, 0x2a39, 0x40, 0x7, 0x4, 0x9, 0x8, 0xb, 0x7, 0x2, 0x7, 0x8, 0x2, 0x10000, 0xff, 0x0, 0x17, 0x6b1, 0x1, 0x0, 0x2, 0x1, 0x3, 0x2, 0x3, 0x0, 0xffff74ce, 0x3, 0x1, 0x1, 0xfffffffd, 0x0, 0xb, 0x0, 0x3, 0x0, 0x8, 0x5, 0xfff, 0x7, 0x4, 0x1, 0x400, 0xb, 0x1da00030, 0x9, 0x47d, 0x1a25cdb8, 0xfffffff9, 0xab, 0x0, 0x9, 0x6ee5, 0x4, 0x1, 0x80000001, 0x0, 0x7, 0xfffffffa, 0xfffffffc, 0x4, 0x3, 0x1, 0x2, 0x10001, 0x0, 0x6, 0x6, 0x20000, 0x4, 0xe39, 0x101, 0x3, 0xce, 0x4, 0x6, 0x4, 0x6, 0xe00000, 0x7fff, 0x401, 0xebe4, 0x1, 0x0, 0x40, 0x5189, 0x4b3b, 0xfff, 0x6, 0x3, 0x2, 0x9acc, 0x38d, 0x6, 0xffff, 0x0, 0x7, 0x7, 0x6, 0x4af6, 0xcc8, 0x9, 0x8, 0x1, 0x8, 0xfffffffc, 0x5, 0xf, 0x2, 0x3, 0x3, 0x5, 0x9, 0x8, 0x6, 0x1, 0x0, 0x31af, 0xc, 0x9, 0x80, 0xf49, 0x3, 0x7fffffff, 0x3f, 0x1, 0x1, 0x8, 0x5, 0x2, 0x9, 0x4, 0xf4b, 0x1000, 0x1, 0x3, 0x2d, 0x1, 0x1, 0xba6, 0x8, 0x2, 0x8, 0x3, 0x3, 0xe, 0x3, 0x7ff, 0xff, 0xfffffffd, 0x8, 0x10001, 0x3, 0x0, 0x7, 0x1, 0x80000001, 0x8, 0x9, 0x8, 0x9, 0x3, 0x10001, 0x4, 0x7, 0x6, 0x7, 0x5, 0x9, 0xd63, 0x4d49f8bc, 0x4, 0xffff, 0x4, 0x2, 0x4, 0xb9, 0xb, 0x7, 0x7, 0x10000, 0xd3d, 0x7, 0xc, 0x7e2bf64c, 0x4, 0x1, 0x12000000, 0x8, 0x1000, 0x5, 0xf5a6, 0x800]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x390e, 0x6, 0x3, 0xfffffff8, 0x9, 0x0, 0x8, 0x5, 0xfffffff9, 0x3ff, 0x3, 0x3411, 0x3, 0x939, 0x1, 0x1, 0x800, 0x400, 0xfffffffd, 0x5b6, 0x5, 0x6, 0x4, 0xab2, 0x8, 0x9, 0x7f3000, 0x8, 0x800, 0x7, 0x3, 0x0, 0x7, 0x528d222a, 0x6, 0x6, 0x1e, 0x6, 0x0, 0x1, 0x3ff, 0x3, 0xff, 0xee68f83, 0x6, 0x7, 0xe, 0x0, 0x40000000, 0x5, 0x401, 0xb82, 0x8001, 0x2440000, 0x1fe00, 0x7, 0x6, 0x3, 0x100, 0x8001, 0x2bb, 0x4, 0x3, 0x4a0, 0x63, 0xfffffffb, 0x3, 0x7, 0xa, 0x0, 0x101, 0x6, 0x4, 0x80, 0x2, 0x8000000, 0x1ff, 0x3, 0x2, 0x85ac, 0x0, 0x4, 0x4, 0x10, 0x1, 0x1000, 0xd, 0x1f, 0x7, 0x6fca, 0x4, 0x3, 0x9, 0x2, 0x5, 0xfff, 0x4, 0xd, 0x5, 0x23, 0xfff, 0x6, 0x3, 0x9f55, 0xbbc1, 0x5, 0x7d75, 0x6, 0x6, 0x6, 0x2, 0x2, 0x51de1db5, 0x8, 0x9, 0x4b3b8456, 0x3, 0x7, 0x4, 0x2, 0x2, 0x8, 0x4, 0x7, 0x99, 0x200, 0x400, 0x6, 0x6c, 0xec, 0x9, 0x5, 0x1, 0x8, 0x503, 0x3, 0x10001, 0x9, 0x7520, 0xd, 0x9, 0x392, 0x7, 0x7af, 0x0, 0x92d1, 0x6, 0x7, 0x0, 0x8000, 0x1000, 0x4, 0x4db4, 0x40, 0x3ebe704c, 0x2, 0x1, 0x0, 0x3, 0x0, 0x1, 0x7f, 0x3, 0x5, 0xb, 0x1000, 0x1, 0x7, 0x0, 0x5, 0x5, 0x0, 0x2, 0x51a22c71, 0x101, 0xffff, 0xac24, 0x4, 0xffff8000, 0x0, 0xfa8e, 0x4b, 0x7, 0x5, 0xfffffff7, 0x4, 0x8, 0x80, 0x7, 0x0, 0x10000, 0x7, 0x0, 0x4, 0x0, 0x4, 0x410eb408, 0x3, 0x7fffffff, 0x7fffffff, 0x7ff, 0xb, 0x82, 0x400, 0x7, 0x9, 0x80000001, 0x7, 0x5, 0x1, 0x5, 0x2, 0x5, 0x1, 0xdc35, 0xc83, 0x9, 0x6c, 0x3, 0x8, 0xd, 0x5, 0x3b, 0x0, 0x3, 0xe36, 0x5, 0x6, 0x8000, 0x7ff, 0x3ff, 0x5, 0x7, 0xfffffffb, 0x1, 0x7, 0x80000000, 0xfff, 0x4, 0x5, 0x1, 0x0, 0x6, 0x65, 0x6, 0x4, 0x80, 0x10, 0x6, 0x1a9f, 0x2, 0x2a, 0x3a8a, 0x8000, 0x6, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x20000000, 0x800, 0xc2, 0x10001, {0x3, 0x0, 0x8, 0xde, 0x400, 0x3}, {0x1, 0x1, 0x2, 0x5, 0x3, 0x1}, 0x7, 0x1000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x138bacdf, 0x8000, 0x5, {0x64, 0x1, 0x7, 0x4, 0x9, 0x3}, {0xc0, 0x1, 0xf8af, 0x8001, 0xf2, 0xffffc357}, 0x9, 0x7c, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x6, 0x81, 0x8, 0x4, 0x6f, 0x168b, 0x859, 0x8, 0x8, 0xc, 0x7, 0x3, 0x1, 0x80000001, 0x5, 0x7, 0x41cad068, 0x6, 0x4, 0x1, 0x1, 0x2, 0x4, 0x0, 0xf86, 0x1, 0x3, 0x7, 0x6, 0xfff, 0xeaf, 0x7, 0x4, 0x3, 0x6, 0x2, 0x689, 0x76, 0x7, 0x2, 0x1, 0x3, 0x7, 0x6, 0x7, 0x4, 0xfffffff7, 0x9, 0x1, 0x6c, 0x141, 0x88, 0x9, 0x9, 0x3, 0x4, 0x8000, 0x1, 0x9, 0x8edb, 0xaf, 0x8001, 0x914, 0x6, 0xf5, 0xdc6, 0x9, 0x1, 0xfffffffd, 0x100, 0x80000001, 0x8, 0xd3e, 0x58f, 0x2, 0xa29, 0xfffffffa, 0x3, 0x0, 0x7, 0x6, 0x6121, 0x3ff, 0x7fd7, 0x8, 0x7, 0x3, 0x1, 0x8, 0x7, 0x9, 0xc, 0x1, 0x0, 0x8, 0x0, 0x8, 0x6, 0x4, 0x6, 0x800, 0x0, 0x101, 0x7ff, 0x8, 0x4, 0xfffffffb, 0xd, 0x8, 0x8, 0x7fffffff, 0xc, 0x9, 0x8001, 0x90b, 0xb6b8, 0x71bc, 0x4, 0x2, 0x3, 0x1, 0x5, 0x3, 0x9, 0x587, 0x9, 0x5, 0x8, 0x4, 0x26, 0x9, 0x3, 0x2425, 0x4, 0xadad, 0x9, 0x0, 0x9, 0x9, 0x9, 0x1, 0x2, 0x9, 0x7ff, 0x28, 0xffffffff, 0x7ff, 0x4, 0x0, 0x81, 0x2, 0x4, 0x7, 0x1, 0x9, 0x0, 0x1, 0x4, 0x7ff, 0xfffffff8, 0x4, 0x3, 0xcb8, 0xb2, 0xb2c, 0x7, 0x28f96ab0, 0xffff, 0x7fff, 0x80, 0xb, 0xa, 0x3, 0x41, 0x0, 0x0, 0x6, 0x7, 0x40, 0x200, 0x0, 0x9, 0x16a, 0x80ab, 0x3, 0x9, 0x6, 0xffffffff, 0x80, 0x80000001, 0xc2, 0xd12, 0x34c9, 0x3, 0x100, 0x5, 0x6, 0x8000, 0x604, 0x0, 0x3, 0x80000000, 0x7, 0x0, 0x1000, 0x7, 0x4, 0x4, 0x7, 0x10000, 0x4, 0x1, 0x3b181066, 0xfff, 0xc1, 0x8f, 0x100, 0x2, 0xfff, 0x1, 0xe, 0x4e0, 0xffff, 0x6, 0xdef, 0x6, 0x8, 0x5, 0x4, 0x7, 0x1, 0x3, 0x1, 0x5, 0x6, 0x6, 0x3, 0xa, 0x9, 0xbf, 0x80000001, 0x6, 0x6, 0xffffffff, 0x9, 0xfffff000, 0x6, 0x0, 0x2cff, 0x6, 0x5, 0x0, 0x5, 0x1, 0x9]}]}, @TCA_BASIC_ACT={0x19e4, 0x3, [@m_simple={0x105c, 0x18, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x8001, 0x20000000, 0x3, 0x3}}, @TCA_DEF_DATA={0x9, 0x3, '{{\'!\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x9, 0xffffffffffffffff, 0xb, 0x7}}]}, {0xff4, 0x6, "96f73f3585d6b05c5724d19b15d789dcf9421b2bb9796c46feda2e3fc2a750c561b14d75f61c62be348de509d8563ded7516d45c55f6e0f1ff08a858857ac634b6bb49bab7da5197614a3a8604020cf8d3a921405062ab31298ecc6024f10664934f0fbe89ffcb320ad0326f030134abceec4db77136480e71e5fd072deb14ca4a80acab53f44ed1c42aef886ee04ec846a2fbf33858c53212bb2b24eccf9bf3034ca5ad1d6a97c65dc085da60a3c4f45c4bb8e0af147b26aec317fde9c3cc27780791f3cfd8cd9bd6cc0ce861a0baa12124d6b591c005f5b072c89dc10490c72b90b4f87f46a5c3437641a6a94e629893c2c172f3da47164708e5032c942b21ceda8fcb72c5787afcfb8d15b764eba9267791ef255ce967cc681f87e81b45ae02b158c0f7b07c72d8677c87786034480c43b48dfcf26282779af97d876161d6e54e9dfcd4982de91e5c310aa924caf55231bbc688f63d14f79795315ff26a77bcba407d62aeb7a0a7bd9781e20c40183aeff44fb10ed0c158765b3f9b3d18afe3f103660857e771c38584b8834ed8468eaf09a5c5e71ffa470f033c4b57bb99352daceeae35c5186206ef4c6d813ea127e75f645bab6fdc6d9d9f7d426aab13254fd6c9187e9e0aa5fa4182ac5a11ab2542c79237ff18db7a7a81250c515e167f273bb73877bef6a784028ca546424e3214a8306956e90c9a5e0e71d8d679c89562948225ebf911b0832371c1091598d1c2c96d43fb8c722b425cab9201b05c6c9ce1c868fc434446dee6af62ce7e1a440753d162e3ce8805f8591c394a4d3b0d9bbdece3a19de18d071917891e806cd0ab89aa158235eed68b3e0d7ffebb60ec9167409d39539438c932ab08e8cf64bad8e6faf7cff4b67bd6fd5a2933d2a1ca8864eb6b13cc054f3e7f3395d92a8ec5b84e585de948e6796cde0a324a838e02d76ac17f167e81458196083f58508f42566efd515967eea72f67133e74e6d2f136a6e86427de7aad9f0da27f76167aff72064700608d10f0a3016e6dc1255c2cd2ed1a8686d0dd066903ef055b19a5b87a1b730ffdaad0b2d3a8ee5c4039459bd8c2c69a001c46cd1f396f159dcad5144e424497a112a8d4c7810c348d318e9f62b699451196623f372abe4b4ca2d180435273896ef1f3b60e7ba7b3f395aaaaf900d31808a711fe479e036b9ce3e1fece0db0c72bb8e5e9720a45acb4404e466077fb6f8dfd31ea63a0f5726ba8e1d87e818d9d86a020fd57501bc64d97d1161298ddaa7341cd1df85d75ba5d7cdee57f1661ddce96449f48bb0795f7af10dc63b422f18ad26643aa76872ffc3fd6c0bd9df2b8bd2a7619dbb2f5fbaad00c4983d4d1ab08fa0eac3fb149207e8d21c2e68657f735e936f008dea8df9726f96c02d90f9ee8d15095745b85bc4607b30c3577b202a68118ec0aa64f47c1f44ed26569c9a9d4160dd7a11f16709be2612dfa3d1e720add89e46d9d7bd9c0b0ef24ea175bc335acb7a2154a2d66463956d066f4ee995eed11ddc05d370fa96222f8bcfa8aeb47659977b89b21eef642c8bf532969290115416f0db876d9e46579449351339cc03c68690de3cb4fc14d111110cebaf6fc002873470e32f622c8147eb946ea89e0cae6fee307b2ea4568dbd96ae4fbc079fc47c5771496c00899897aa36cf9037bb0234bb8604426156380bb660dc9a52679a8f181b7f686ea5d2c6728fe3a2b0b51633f4c86badeca0e8ae52f7ecba0a0bf75e4a999da7df32057a926d1f26bc43b3874703b74810a26ebb1ba5b36f8e7cf4bbd747f8ed040d5098a76f7f7c98027c6998213e5a7975036a44162ba2210c3bd3c3eb55d8a566dd498d3e3a24650848a29f1101cf1ef3bb0622b3118bc50459c5ba484b8ef8ca26528bd817b746a3cf37ae0b06292284e1b9c13300a889518176c20a7f761283bdda18119c46a4648e360a87ccd13a4ba79c786d7e8d5ae681030ea1918598050ec74c7a914cc8d5f3f609e055a7f99f44957d02dd0597bd481f57a8bbba67fef12d5d93dfc04678afb8f637a8033a3ea985788533325bb60999556fe0cf96764a9e133617d56a257630c92772a622ecb36aae9b59cc1cc2b4fbb8f674d08759c259c7e0d283fe26edd6d421e5437f9d105d7bf88afc00208da812f78d16b311a024e66dc4dc1cb4e13f533fbae8b101695c72869afb4f4f741a24b780e8f77a49aba79120ec31c1f6ffced87d6dc17782fba1e2bdad82f867593089af0b417e8a7b33b3ad0018ea1db11b72a41fef63fae9ba0708421f58228fe212ff7248776218005dddadf9ea2efb98c361793448968d8dfa08bcf47d02c50fe23558ec493de63dfe19b1d82660b267a187f5e93d7205369b54372b99e3c00bdd51403e2bbec05525b1818be144c3a919b79b1e847ae65fe4367fe19a9fa0847d95464981c2e2ba8bbf0f46124c9a679214ece467975b9afee587957cbcbab1ac56d4c2a434aeff1d33e7c8cb32a33c24251927051768f8179cea23c2a335482d9df5cd1824ba943b98b2a70255493e1749ee6ceb1d6685c3082733a733f94ad2a8299e93c7ebdc56295bb0658368d290656d99e018aca3844b2af8292031896c704c9fc6f21568b11969f1367fae6cf7c1cfada039a610e7233b7d0d95e4f9146fa81d3ffca2593973a0449bc1bab1106d78f74be1b63e2c000eba25cdf2d6eeac16e0018213cbb81e6db53d2fa1e601a1544c974f60a94f79deb631fc2b0ab33080c00f900ded5e42aadaead191db020683d52fd5800365de4ad30d5816ce188fda2ecc5e9307fc2adae46fd09a38415edf81e11e3b40291919e5d7255b4c0917acf1e33ed3d63c3bae5d8962c69b074440740739b1b1cc12cba510ea8a5be7ee8d18183264fcd7e7e362c37b997ce020c834669dad4fd77de478b0abbab92ee6e064a789209cad98724cb9e80d20bd78cb1641fe76773612462e75513c6f5760ecc76c39e08d76184951d5fff4537eafffd9b0247e1de3bd199a8eee82a5ea0e84d14dd52003e5c33fe05e3ce924b3fd10a9869c6f28f434c2ffc8a5f662420964e340f789476f1831d0a1259ccb545c7d8e630d24067965a1661c96502b950cf2d2d7127314564f82b8d3e3179dbec31fe4baf95a04f5905202fd7ab3a4da844efb4747d5ede103c8250208e0ea3f91b412b549dc8d00a92f47e734d08c7d9a4b18cfd74c2969dae13056998d0cd40f00ea63f8656f3a63674841597e93fc57826c22d79ee7635d9eace9d483940382fd0192fe92592347c98df273f01712366a4a075958290ed6b406b55b135cce0bcb57fc03241f82352deef97499b977924b7f4af0fd93bb2deb0151288d60946087f1eec532082a503c0bf51b4811e1746d180e7ac8b9b6a6542befd81ca9ffd86b7ffeb46ae31c0cf6d7245787cbdcdd8ba4716278c5525ff53873317886d7bf93550bedab0d929a006af0d2bef94ba0ec44808865e51fe356e7e5caf347fd54ba930c8d236a3781cc905ec8ec2bfd66e05fd16d528388a5e4edc4a83bd412538b9aecfd7601edefbdfdf2f4efdf864671c594d90594ab7e6e6c67892ae23dd1e6e25820809ba34891233c7194403d54cf107a71e5c3b1d54e4219d32470aa703cb241b2eaf4b5be30abf500a2ac23dda1c96025f68e83fe2c395e8cbc4165e1b85b584299813218cc8b2c00971c647afdbe96dfd9605b2092b741b00fa10db80652b90ca2c9b676c2fbebeb74754f1188902443c209e00dc30f878e883832b9a8d3b5abba90279b1f14d7aa813b80e03d12f91f51188b8e49a0cf21784534a7e3dda2f7e9aee7987e6a89bfa0cfe7c4770f8efc6b2125ebebd66ae5363d994b8aac78fe965992397dd5c67870dd467235f8783c91192d77721acd37ed90291e1066ec408656b85ba5ad83bb1a7ddd7736cc927644d51a2fb05f238fc0442c03d4d4c2c8df8efa5cd47af2b7b4bfff20a4cdf4db44d6eb36016516441f53135d498a09c476eb5403d83bcccd780f04f97b740a1790dc088de332b4e5ead23de7e067134ca30727a346136e2f1929ebb10a7832a46c036c23591324b91d7b1b655561a70c4f13c3b268d400b053fbf88024393a57e416175523acd07f8f78084c231b9eb6ace551b98bb57387959a6eacf3b02d0dd4b966eba1d46feaf74f475c4829161d3ed34da96d431568eaffd780173ece908b94ccc2a9cf83171035306fb655c4c0f4958151f7d0e1a30727a20653891731a84d0ff6656dade31260b5a1e224bcd31fad16245e967244f3ba7db4b281d95505e8a6ad8418ef0c31e22d70dc42ba3d83d76f1a9ab131d2790bf51848556d38bdff625134ba45e5ffa214a9c3b14b28458c58a7c6502df2600cb9f3ad1ae76c480f8138f1ace3f8a19a528094586170198ebbb67bd627a4b57128afbd853028d15e75960fbdac891146fbc2936298b3301f4bfd568594b8f94adfea75dfd39ccff0f9120482a73530fe7c354265ec254c99c4480128bd731bb355ba059341953520e38de2da422fc90b8c16f84bf2c68f06d22376cde507076bca450adef8ff7d99f3d050bf032509e8a7edd2d03b715a321b8fce95bb079c6f56b90fdaa996cae49344517f6f79db39d15aea1934c1c1dfe81f1b3d083f2ea340e2c4eb440deb9b2b6fd51dc7ea8a385261826589b2f3ed7115180dd88fcc19b6a4705b4f256ea9c35af0f596780012577fb4b143f3925028e0370b22b6c346244aa23beddc3172f3cac283881b92891aca6a896b6db3005b26e685680e767f01994d26ceb65533ae7c159f55e7e8e174fd84804e0fa7dbab4a00f265514900679090983ded8a2b454d626cd9a40c0c9819648f945a7813f4d14dd1502f3435f7e7a94c8d8cf14527a77ab60e984549ab361118dff49c6cc4399141095b59a4cc869f3af06ec9eb3a2b469b76f27222c12fb6b1db3813414c6ca4617f57210278dc270d281f8771973f3c9f053a7f94ab89d49e91468c2cae1ef9d4f6f50449e6d50b0717098b28bb89e37b17ff7e65ff891bdaf872d1394488b2fa76a2da61c8799050f61547c0b02ae4ab24e8b50c896cfa452c43baeffbbb2be2a8ad9fb218bb08dbe2fc4092468e4de4ee452778f8166f5f1f0d794797426144d88bd6103ddd5c33ee614669bddf4fc581a9f093efedec0764429dc45e492d4771def3edf9bd42e1b8fbff1a3cd00456e865035daa3b41dbb08369e2c31b9d906f49b0c60035344bfbec5a095ce67e31c9f1b996b68c401acca70bbd0b937da26ac4197df958bb4131a14301f2c3e74dda1a9245775fe937ee207e05e890b0eb54703d520d46ff9a4e9b390c5350ef5b96a0559d37bb42033264b94bb99867ea0210edc54ea11d1623c6676faa80e93c04b0009050df20fddda6105d5c3257c8822f5b48bb0a6814da761cd509a537b61f708b825f9b49dbc2505763408eb09fa2b1580bb58937a3dbf7284e245d2a8b5c83d7710cf2c43dada4cc38b151bb46140ce8686bbcf1a35d0aa894b77c50292f62c43871c042d5e6e25ec78ec5ed18454dc3a73860492b2cc2fc511f4f4ec3cf71e14b5dbe7e96e55b4c27fa73db370dbbab27a84c773fb7e2066dbd959f25ac01c2db806ace9fb9beecb530337be6304060cb3003a31ec121daba291132d38a53a58e6b7dd90950e98cfe5c03c64c9f231b09e607e82715784bc3535afd9a9f608cd56b61d693e4c6af2ddda1224f7adae64d84d107cf9023b9d0f3344e6682576a890b6fc9ed0ac03"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_vlan={0xfc, 0x14, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000001, 0xffffff7b, 0x10000000, 0x3, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x7aa0bb6a, 0x4, 0x2, 0x7}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7f, 0x8, 0x2, 0x80000001, 0x7fff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb18}]}, {0x59, 0x6, "ff3b9ce605abeb1a280c53537e398ba8f5b1edee0eb6cd440268d1a9fbdd2704edffc145bd2fc313461acc9c4ebc4669bd0c57470d6a93a9bc553e1c6b10b9e5dd225ff8089bc0d29a3dc2d0027f841daad89eb498"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xe4, 0x8, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0xaa, 0x6, "d5ef290eb3de2598c626033034d9265108657579c2427fbfdf3993291f39da30313c359160fd64bd6815c9725d73536d67e7b48d0410ccaa428065f6eaef4617e7cd6649d90503fbaf890d5c5e11a004809da85ba93d0fbb2959f5fd7976071984e4b53c81cb0e24737da4da00578321a282693c99f6dba4544ed4177ee3da997686a6cca2901ac77ab7ab0ed08b47e16976ea71ba6e7d92f67815d04003f8032033c91ffa1b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x328, 0xc8a, 0x0, 0x0, {{0x7}, {0x23c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x123, 0x6, {0x5, 'security\x00', 0x9, 0x8, "560f9873150f3046e8fcb1bc28d60fa2948e185466e181ea788627f22920ecc87d9285334bd53afae9cd940179c450ba91c2dc6ca5c0a9ac06de94d5b113470ab68ed36194caba9fe14c0e9606d8305676866df3907265906b5db50d3e71143d134b41f594c9f07e829e126d4c2f34b70d71413af025cb60234adc4326eca0ad183a95895a0cc4f6647a61f8d35bc40aa298b975a9dcff5f81bd87adae42e268663139d9f001830ad32a4dca45e8d278ee5c81980b7d48386962067a9f79890388dc22410f2a8bdcb84350bdc6a49504f5bf6df3e8f65ef315cc561d8d51a9e94748ebb5fed58d1d7ade1bcbbac7ce1c045a85da948d8516f2"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xb2, 0x6, {0xf94, 'mangle\x00', 0x7, 0xc78, "cf173e5460b29228b1836afca3d2cbc7d484aaa1820a98430bbabb95b6f3a32567615467380b4850bab14ab349de2d6983ef7db3fa52dcdf14e5a49a422b12eb4d96f8e49f7c06794ad6eee4722c70da12bb1203754fa873ee8944a8a243a2265586bf73e7bbfc33a48a3f5cdd066360c6d1de546f26ea5770825f7a43d35647ae3272894c467ab9"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}]}, {0xc6, 0x6, "5804f41580a2886c925fc2da38af4f35e82bbe1e27b7a77729aa8cdfd1034864a16d9c702b435fcdefb8578eef5497328a299c450eaf867a44f795030b170c6bdc943b1a96855920543b88baae71b3462180bd93cb15de76b8baf8d66fd89d75f49652c3252ce9cb47e2eb316905f641057db1d81562c682ce3ee6b358ab79c8ac912f1ee32e699bec1312700c31b3ea9d5237b865dafe152710620c26fde155576b02218ee1241039055e8764c25d16d79c4d5da3904e9837c124e26dd757d9aa1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xec, 0x1a, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x4, 0x1, 0x6}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x80, 0x4, 0x4, 0xffffffff}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffff8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8603}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x6, 0x10000000, 0x80000000, 0xffff15a7}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x87, 0x0, 0xfffff5e7, 0x8}}]}, {0x2e, 0x6, "8bbab6e884ef1e4892b3d851ccc4b76af0648ea97d9fc3e437f4d139cc3685c3cc2e0f0bcfbf01e8a264"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x98, 0xb, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xef, 0x6, 0x4, 0x38d}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8001, 0x10000000, 0xffff, 0x7}, 0x1}}]}, {0x2b, 0x6, "269b45b78910e5549801e29e36d317db928e67a78af4db243e9fc4e79c9d2fc2064c0a3e39fef6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_mirred={0x78, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4a, 0x6, "68279bcb109e05257fed2f427d7263c7d36646f2935936fa19fe22977d68aefd98150110c57e9a7b7a83a8cf000f8a835cdb16f11a9ffc6c249ebdd03b95ba99ea670b15fc05"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x154, 0x1f, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x542c, 0x0, 0x4, 0xfffffc00, 0x9}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7c, 0x8, 0x1, 0x5, 0x7}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x10001}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x671}]}, {0xd5, 0x6, "7c81bed61ce2fb9510adcca6b4a5e14547b36d6b4bc9153e4e18c3503b83a751b8cfa34cfeeb9dcbdfc4fee4972e537127c7ddcedc9fcff8c258bd40c27bac1e23bb91590b3984154132a78673f718c320274b7cf9131d84c31a709340f42c63dcf64da84d53b5deceacc4f55743fac64f70816f56295d8fb8c26a2a3d506849cef44887a12fd47b726d7d9112c7690f8cca158a861438717af2bf2dc4862aa68036513780925e281d87b2c065b012129ca6c233b1b26f9eb5feaf3265205837343b0ed41aeb384bee2a293664c5d753cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0xd8, 0x5, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8}]}, {0x9f, 0x6, "9e2a0231a6834926f76dc1c03c1a050dc08b03573c65e95d7bd94c68fceab9b14183d202785d6d2ca56e8c0a77b0c68bc46a7acf92ff0f63fc79c171a29ea616a342529ab4075572b4c0d985f197c9f43094674fc68a164aec2842381dcab479245e9c25b4bd93e276e66504ad0db7981d3a67c863b538b09a6dbac2cc10a25b8e7934890a768c6ba028902f180c24df179a4c93d2edf47667fdc4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x54, 0x12, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x80}]}, {0x23, 0x6, "e5b35efa283a644b85e07541bfc19a1cec6d2952515e2c6ae21fc0250be9b2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}, @TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x81, 0x40000000, 0x10000, 0x3, 0x0, 0x7, 0x182d8087, 0x4, 0x2, 0x4, 0xe, 0x1ff, 0x10, 0x8001, 0x5, 0x54bb, 0x4, 0xa, 0x3, 0x8000, 0x9, 0x27, 0x5, 0x3f115381, 0x9, 0xfffff0a8, 0x5b9cb8ed, 0x6, 0x2, 0x200, 0x8, 0x6, 0x6, 0x8, 0x1000, 0x0, 0x8, 0x4, 0x3, 0x9, 0x0, 0x5, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x9, 0xc00, 0x2, 0xb4, 0x3, 0x8, 0x2, 0xfff, 0x1, 0x0, 0x4ff, 0x1, 0x5, 0x3ff, 0xff, 0x1, 0x2, 0x3, 0xfffffa09, 0x6, 0x6b, 0xb, 0x0, 0x2, 0x493, 0x80, 0x9, 0x9, 0x6, 0xffffffff, 0x7ff, 0x38, 0x6, 0xa000, 0x4, 0x2, 0xfffffff1, 0x4, 0x7ff, 0x7fff, 0x2, 0x80000000, 0x80, 0x6, 0x4, 0x400, 0x35, 0x9, 0x7, 0x5, 0x0, 0xfffffffd, 0xa1b, 0xda, 0x0, 0x1, 0x10000, 0x39c, 0x0, 0x8ef, 0x4, 0x80, 0x9, 0x1000, 0x9, 0x4, 0x8000, 0x2, 0x2, 0x2, 0xd9, 0x0, 0xa, 0x6, 0x0, 0x5, 0x9, 0x5, 0x8, 0x3, 0xffffff5f, 0x9, 0x5, 0x9, 0x176f, 0x0, 0x1, 0xd1a, 0x0, 0x8, 0x9, 0x9, 0x7fff, 0x9, 0x4, 0xd, 0x65, 0x3ff, 0x3, 0xc3f2, 0xffffffff, 0xfffffffc, 0x9483, 0xffff, 0x2, 0x3, 0x6, 0x2, 0xa, 0x0, 0x9, 0xa4, 0x7, 0x3, 0x3, 0x0, 0x7, 0x2, 0x81, 0x9, 0x10, 0xff, 0xffffff6d, 0x8, 0x5, 0xd790, 0x7, 0x7, 0xf6, 0xffff, 0x8, 0x5, 0x8, 0xffffffff, 0xccee, 0x3, 0x2, 0x1, 0x7, 0x0, 0x4, 0xa3, 0x2000, 0x6, 0x62, 0x76, 0x9, 0x9, 0x485b, 0x0, 0x2, 0xf, 0x4, 0x7, 0x4, 0x7, 0x2, 0x1ff, 0x7, 0x6, 0xfffff9f7, 0x8000, 0x9, 0x44e6, 0x3, 0x1, 0xbe, 0x8, 0x7fff, 0x401, 0x1000, 0x4, 0x9c, 0x5, 0x3, 0x8, 0x5, 0x6, 0x0, 0x4, 0x5, 0x2000000, 0x9, 0x2, 0x6, 0x80, 0xc, 0x5, 0xc79c, 0x9, 0x5, 0x9, 0x7, 0xe0, 0x2, 0xd, 0xea9, 0x400, 0xfffffded, 0x0, 0x2, 0x902, 0x7f, 0x9, 0x800, 0x7ff, 0x2, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0xb3, 0x4, 0xffffffff, 0x4e, 0x4, 0x68de, 0x8, 0x1ff, 0x0, 0x200, 0x6, 0x81, 0x0, 0x1, 0x8, 0x19, 0x3, 0x3b21, 0x1d, 0x9, 0x4, 0xffffffff, 0x7, 0x3, 0x5, 0x8, 0xf, 0x7fffffff, 0x5, 0x0, 0x9, 0x476, 0x1422, 0x2, 0x80000001, 0x7fffffff, 0x0, 0xdf9, 0x3, 0x2, 0x8c, 0x9, 0x159c3cf8, 0x7, 0x7, 0x989983c, 0xfffffffe, 0x7, 0x4, 0x1, 0x6, 0xfffffff9, 0x4, 0x7, 0x10, 0x80000000, 0x18, 0x1, 0x1, 0x1ff, 0x2, 0x800, 0x8, 0x6, 0x80000001, 0x6, 0x16109562, 0x7fff, 0x80000000, 0x7, 0xaa, 0x7, 0x9, 0x20000000, 0x7, 0x9, 0x426, 0x6, 0x0, 0x80000001, 0x40, 0xf, 0x80000001, 0x40, 0x38349c9c, 0xffffff80, 0xffffffff, 0x80, 0x401, 0x6, 0xc, 0x3, 0x7, 0xbb61, 0x6, 0x9, 0x5, 0xfffffffe, 0x80000000, 0x93, 0x0, 0x2, 0xf81, 0x0, 0x73a6, 0xd, 0x4, 0x5, 0x7f, 0x2, 0x1, 0x3ff, 0x0, 0x10000, 0xe, 0x7, 0x7, 0xfffffff7, 0x62be, 0x207, 0xdf0, 0x6, 0x6, 0xf9dd, 0x8, 0xffffffff, 0x0, 0x1, 0xffffff4f, 0x1b60000, 0x5, 0x1, 0x0, 0x200, 0x7ff, 0x5, 0x920e, 0x3, 0x70ba, 0x1, 0x5, 0x4, 0x9, 0xf, 0x8, 0xe, 0x0, 0x2, 0xfffffc01, 0x2, 0xd, 0x0, 0x8, 0x0, 0x23c, 0x3, 0x4, 0xd, 0x9, 0x1ff, 0x4, 0x1, 0x9, 0x6, 0x1, 0x0, 0x5, 0x0, 0x6, 0x5, 0xfffffff7, 0x8, 0xf5f9, 0xf444, 0x6, 0xa, 0x6, 0xfff, 0x800, 0x6, 0x10000, 0xef1, 0x7, 0x3, 0x6, 0x2, 0x6, 0x7fff, 0x7, 0x1ff, 0xf, 0x6, 0x2, 0x9, 0x756, 0x7, 0x4, 0xc, 0x1e4e, 0x1, 0xfffffffd, 0x8001, 0x9, 0x92f, 0x8, 0xfffff5bf, 0xb949, 0x9, 0x8, 0x81, 0x0, 0xf54, 0x3, 0x4, 0xc, 0x5, 0x7, 0x8, 0x5, 0xfff, 0x4, 0x9, 0xfffffffe, 0x80, 0x3, 0x80000001, 0x1, 0x0, 0x9, 0xa, 0xadf, 0x0, 0x7, 0x3, 0x10000, 0x8, 0x9, 0x8, 0x5, 0x3fb, 0x2a7, 0x4, 0x800, 0x4, 0xffff8000, 0xde2c, 0x8, 0x6, 0x87de, 0x49b, 0x8, 0xe, 0x8000, 0xab9]}]}]}}]}, 0x3c10}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f00000000000000000000000010000000e00000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000db000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) 4.964421203s ago: executing program 2 (id=5320): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='up'], 0x1a, 0xffffffffffffffff) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40040) syz_emit_vhci(0x0, 0x15) 4.466726941s ago: executing program 1 (id=5321): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000c98a2620950b2b7e19eb010203010902240001000010472500090582020002000000b9cb5b7989c2e8ba7933e8174d89ce131660925f2bb646fd8b3f83ed2375e1e853e2b55eb2fd732c99cfb7b69a98c2ab3c511df5f94e87630509e3db58e0b540c2bae490d96a77ec9e52a3899f1539de0d9b31079a242cddf6c7789a8348560c9a00b2f2c1eadc50aa1b40bb46bd57604651b6a19106a109566cf245e2af49698fc4b9f8bdb4174aaad8df95f41ec0f438000000"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000300)={0x2, @win={{0x5, 0x6, 0x46, 0x1}, 0x5, 0x5, 0x0, 0xfffffeff, 0x0, 0x5f}}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e395292024042c011e710102030109022d000100001000090485000342e6440209050b02000486b20609050f022fb5"], 0x0) munmap(&(0x7f00004e7000/0x1000)=nil, 0x1000) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 4.21533216s ago: executing program 4 (id=5322): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40040) syz_emit_vhci(0x0, 0x15) 4.187986449s ago: executing program 0 (id=5323): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)=0x8000) 4.12805548s ago: executing program 3 (id=5324): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48aed3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) creat(&(0x7f0000000180)='./file0\x00', 0x2d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x240040c4) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @x25={0x2, 0x7, 0x0, "461feab5208b85041658f24f3ced66504f46ddb1b7d193f416c8ff23306016524eb51bbbb7e7c02078851faf8619c43af1476235557d4ea9ee68fab0651716be5c3e420af15b86c2f5f9f5f0320fccd41c7915d8cc0b2fd38fd9df62c9cca2b971e739ac66a1805cbfe890db2519370335972797558c90f4ea4722ef7b9c7482d812c16b266a4403b26156d9f5094a757f69d7c430035dc4a0fee87e11e481052f6e7336373df91bcc9f072d336d8fdeee5c8bc711b9baeee4c1b49d493fbee8846d96a7190575fe6841e9b145b55d86d9665ac67ee7c39e92f5de58302911c204d0fe158e07c63c8c8cefdca308eeb78c16751a1d0144"}}, 0x108) 3.950373149s ago: executing program 0 (id=5325): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x400caed0, &(0x7f0000000080)={0x2, r5, 0xffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x401}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40040) syz_emit_vhci(0x0, 0x15) 3.574394874s ago: executing program 3 (id=5326): sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x4, 0x6]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x53a4]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x8c4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000380)='k', 0x1, 0xc) syz_io_uring_setup(0x4bf3, &(0x7f0000000040)={0x0, 0xd47c, 0xf000, 0x5, 0x2cd}, 0x0, 0x0) 3.144569918s ago: executing program 2 (id=5327): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0), 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2, 0x400}, 0x1c) listen(r2, 0x100101) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)={0x2c}, 0x8) accept4(r2, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readlinkat(r6, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/65, 0x41) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000007000000bf09200000000000a5090100ffffff809500000000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000280)={0x18, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x5}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xde}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x68}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x2, 0x0, 0x2, {0xa, 0x4e21, 0x7, @loopback, 0xc6d}}}, 0x3a) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 3.023600917s ago: executing program 3 (id=5328): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffe09, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x3ff, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0x5}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bdef18fa78bcb9616de723023034"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000070000801b00000018000180140002007465616d5f736c6176655f3100000000e933c76a4be260543aa11f60b838cc40fcec98e631e11515142f18c43bacd32af7dedef43155ed4b94b0c61f2bd96f1ca154d3fd28c449a0e4f95070452f7d4fb8b6b03fa4382408e00c9d9e86c5787c0d689bff056b5c8f0abd9b91564a57f2979501d00f14cb7a5188510000000000000000007a803aec3d12e73b784d9ecb48ce0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040000) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x3}], 0x1, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="002500000000000014e100000000d5366bb31eb7f94eb5b64374ea7cadbcee9f"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) 2.475819165s ago: executing program 4 (id=5329): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0xe, 0x3, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x1da1, 0xfd, &(0x7f00000000c0)=""/253, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000280)=[{0x2, 0x3, 0x0, 0x1}, {0x4, 0x2, 0xb, 0x1a}, {0x2, 0x5, 0xd, 0x5}, {0x5, 0x1, 0x9, 0x5}, {0x2, 0x1, 0x9, 0x5}, {0x5, 0x4, 0xf, 0x1}, {0x5, 0x5, 0xb, 0xc}, {0x2, 0x2, 0x1, 0xb}], 0x10, 0x4}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0xe, 0x3, 0x0, 0x1}], &(0x7f0000000080)='GPL\x00', 0x1da1, 0xfd, &(0x7f00000000c0)=""/253, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000280)=[{0x2, 0x3, 0x0, 0x1}, {0x4, 0x2, 0xb, 0x1a}, {0x2, 0x5, 0xd, 0x5}, {0x5, 0x1, 0x9, 0x5}, {0x2, 0x1, 0x9, 0x5}, {0x5, 0x4, 0xf, 0x1}, {0x5, 0x5, 0xb, 0xc}, {0x2, 0x2, 0x1, 0xb}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0xe}, 0x10, 0x0, r0}, 0x94) 2.220593884s ago: executing program 4 (id=5330): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'netdevsim0\x00', @random="010000201000"}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f747d6864653d30303030303030ecfc7e8d9d2f70429b76e2303030305d7fd17c303030343030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_4={0x3, 0x0, 0xb, "09001d00"}, @main=@item_012={0x2, 0x0, 0xb, "d1f9"}, @local=@item_012={0x2, 0x2, 0x2, "8fe0"}, @global=@item_4={0x3, 0x1, 0x0, "0800be00"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x1, "09037a31"}, @local=@item_4={0x3, 0x2, 0x5, "c7b83395"}]}}, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', &(0x7f00000021c0)=""/122, 0x7a) r5 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r5) ptrace(0x4208, r5) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r5, 0x5, 0x4002) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) close(0x3) 2.008651629s ago: executing program 0 (id=5331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="419d0b94272e1d2500ffff", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="18005a801400018005000100300000000500020038000000"], 0x34}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x0, 0x1011, 0x0, @discrete={0x10}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b00009040000013624340009050803"], 0x0) 1.710426565s ago: executing program 3 (id=5332): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000005506000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) 1.605753956s ago: executing program 3 (id=5333): read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f0000000440)={0x90a4800, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x11}, &(0x7f0000000200)=""/193, 0xc1, &(0x7f0000000300)=""/226, &(0x7f0000002500)=[0x0, r0, 0x0, r0], 0x4}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x23, r2, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r3, &(0x7f0000000380)=""/144, 0x90) write$char_usb(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x3, 0x2]}, 0x8, 0x0) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r5}, &(0x7f0000000180), &(0x7f0000000200)) io_uring_enter(r6, 0x2def, 0x9566, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r10, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) 740.727133ms ago: executing program 1 (id=5334): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendto$inet6(r0, &(0x7f0000000180)="a17c0d2e6f5f06b3db6976740f40f73a1541e8de2c7d7ae6386c11c9f414b00415ac6072e176016e04191d7a2722a03c6226717373a4e9f4c9802816ef198cd8889724d255011db228d354f5fe604c4043512faef83ff5954be85d6c024fa474d26387ab74e3dd28c22e646438d69938e61ec97d083b5d0221e67e7f75a90b90f544bb9ed6e95cc7f818f7524a16f23a6f2a06866ad97e106a3994caa4dc8b6358", 0xa1, 0x50, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={r1}, &(0x7f0000000140)=0x8) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) 722.821176ms ago: executing program 0 (id=5335): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="1358b4ee3136f6172fc5b411d84a8b8e4ea548bea81eb1bee415ac1943b7aee186b55c72", 0x24}], 0xa, 0x1000, 0x206, 0x13) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1b4c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) 642.245416ms ago: executing program 0 (id=5336): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48aed3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) creat(&(0x7f0000000180)='./file0\x00', 0x2d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x240040c4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @x25={0x2, 0x7, 0x0, "461feab5208b85041658f24f3ced66504f46ddb1b7d193f416c8ff23306016524eb51bbbb7e7c02078851faf8619c43af1476235557d4ea9ee68fab0651716be5c3e420af15b86c2f5f9f5f0320fccd41c7915d8cc0b2fd38fd9df62c9cca2b971e739ac66a1805cbfe890db2519370335972797558c90f4ea4722ef7b9c7482d812c16b266a4403b26156d9f5094a757f69d7c430035dc4a0fee87e11e481052f6e7336373df91bcc9f072d336d8fdeee5c8bc711b9baeee4c1b49d493fbee8846d96a7190575fe6841e9b145b55d86d9665ac67ee7c39e92f5de58302911c204d0fe158e07c63c8c8cefdca308eeb78c16751a1d0144"}}, 0x108) 514.159085ms ago: executing program 0 (id=5337): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c4, 0x1f0, 0x1f0, 0x1f0, 0xb8, 0xb8, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@local, @private=0xa010100, 0xff, 0xff000000, 'syz_tun\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x65}, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'batadv_slave_1\x00', 'vxcan1\x00', {}, {}, 0x1, 0x0, 0x18}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @multicast1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x1, 0x1}, {0x1, 0x2, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2000000, @rand_addr=0x64010102}}}, {{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'syz_tun\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x1d, 0x0, 0x74}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x1, @private=0xa010100}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x420) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000080)=0x2, 0x4) bind$packet(r3, &(0x7f00000000c0), 0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @local}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e1c02, 0x0) r8 = syz_open_dev$video(&(0x7f0000000280), 0x80, 0x68c02) r9 = syz_io_uring_setup(0x1e20, &(0x7f0000000100)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r8, 0x3, 0x0, 0x0, 0x4}) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0xc) io_uring_enter(r9, 0x48ed, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81e8943c, &(0x7f00000012c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000002040)={{r8}, r12, 0x6, @unused=[0x3, 0xffffffff80000000, 0x2, 0x4], @subvolid=0x8}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000004040)) epoll_create1(0x0) r13 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r13, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) 0s ago: executing program 2 (id=5338): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000100)={0x66, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x15, 0x0, '/prnc/sys/net/ipv4/vs/secure_t\xa3^\x94'}}, 0x42) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xa, r2, &(0x7f0000000100)="8a510eb48dbdfcb4", 0x8, 0x9}]) io_getevents(r3, 0x3, 0x3, &(0x7f0000002a00)=[{}, {}, {}], 0x0) io_submit(r3, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r4, 0xfffffffffffffff5, 0x1) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406020504020002000a000900040a2404020104000000120924060502010600000924030303030505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) sendfile(r5, r5, 0x0, 0x7) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x130, 0x17, 0x1, 0xfffffffe, 0x0, {{@in=@private=0xa0100ff}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x84}, {{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x62}, {0x0, 0x0, 0x0, 0x4, 0x8000000, 0x9, 0x0, 0x200}, {0x10}, 0x9, 0x6e6bba, 0x2}, 0x400}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000bc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0xc, &(0x7f0000000080)={0x40, 0xc, 0x32, {0x32, 0x11, "7d1ea1edbea6b8447b017d6236edbe02e0f56c209fce59b302258817bed9871a093dd75de83a834c5637d98752f65b7b"}}, &(0x7f00000021c0)={0x0, 0x3, 0xad, @string={0xad, 0x3, "465dedfb1d41a9f384b63cbc6f1f1ecd9cc889716047e7be83ff37f5def5e95ea3fd872a87e5af714a18469a779d98a7950e22691a6943dfedf84d2175e080b388a403d9e7e26c2d52708f91a286981861b5e4c4f6359b0f31ae90c6ab46dc1d6c0241ff08cb026af4d331d0f7f23b226f1b191314b1db2c4c4463146c3ac9aec3bf0decd4bd3d8f63eee13f9d5aa83bc7c7e11c6b4eb1684bf79ff978c8a8ce833bdc5fa54f8d37c7e2d8"}}}, &(0x7f0000002540)={0x24, &(0x7f0000002280)={0x20, 0x31, 0xbd, "cdf092ccb96a96df5ec185840e50fad362e6f19b9516275a5421b3b8e6f84c9cd9d89cdb69c12d07a1f462d5c964efd489a4aab95033abc677e68577494b8f3521b4cee21ed15094934bb2ee2770a477d1fc8e5e88228e3c630f89d9b6db36d557281be7375af6b2097e2e9b662f9c40c0e3585f6ed8bb3792595e7ae577c288bf66bb48006a8352458da67a35ed713886e65243350c18ae9d56792c325433b41731fe3600f3beec25705bdadca39d289bf909ed1b50077848877edcda"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002400)={0x20, 0x81, 0x2, "4180"}, &(0x7f0000002440)={0x20, 0x82, 0x2, "ce8c"}, &(0x7f0000002480)={0x20, 0x83, 0x1, "d6"}, &(0x7f00000024c0)={0x20, 0x84, 0x1, '@'}, &(0x7f0000002500)={0x20, 0x85, 0x3, "1191e1"}}) kernel console output (not intermixed with test programs): 552760][T13291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 792.578848][T13291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 792.594560][T20340] usb 2-1: Using ep0 maxpacket: 8 [ 792.608986][T21105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5005'. [ 792.626882][T13291] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 792.630710][T20340] usb 2-1: unable to get BOS descriptor or descriptor too short [ 792.645022][T13291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.663536][T13291] usb 4-1: config 0 descriptor?? [ 792.672768][T19823] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 792.708539][T20340] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 792.742743][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 792.782722][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 792.817108][T20340] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 792.827604][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 792.838825][T20340] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 792.893525][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 792.919710][T21114] FAULT_INJECTION: forcing a failure. [ 792.919710][T21114] name failslab, interval 1, probability 0, space 0, times 0 [ 792.932763][T20340] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 792.939499][T21114] CPU: 0 UID: 0 PID: 21114 Comm: syz.2.5009 Not tainted syzkaller #0 PREEMPT(full) [ 792.939524][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 792.939535][T21114] Call Trace: [ 792.939543][T21114] [ 792.939552][T21114] dump_stack_lvl+0x189/0x250 [ 792.939580][T21114] ? __pfx____ratelimit+0x10/0x10 [ 792.939605][T21114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.939624][T21114] ? __pfx__printk+0x10/0x10 [ 792.939647][T21114] ? __pfx___might_resched+0x10/0x10 [ 792.939669][T21114] ? fs_reclaim_acquire+0x7d/0x100 [ 792.939694][T21114] should_fail_ex+0x414/0x560 [ 792.939724][T21114] should_failslab+0xa8/0x100 [ 792.939748][T21114] kmem_cache_alloc_node_noprof+0x77/0x710 [ 792.939767][T21114] ? __alloc_skb+0x112/0x2d0 [ 792.939795][T21114] __alloc_skb+0x112/0x2d0 [ 792.939821][T21114] alloc_skb_with_frags+0xca/0x890 [ 792.939849][T21114] ? rcu_is_watching+0x15/0xb0 [ 792.939874][T21114] ? cap_capable+0x11f/0x460 [ 792.939902][T21114] sock_alloc_send_pskb+0x84d/0x980 [ 792.939931][T21114] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 792.939948][T21114] ? sock_omalloc+0x126/0x1e0 [ 792.939974][T21114] ? msg_zerocopy_realloc+0x2b3/0x850 [ 792.939990][T21114] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 792.940010][T21114] ? __ip_append_data+0x4b1/0x40c0 [ 792.940037][T21114] __ip_append_data+0x2ce8/0x40c0 [ 792.940069][T21114] ? __ip_append_data+0x8c1/0x40c0 [ 792.940092][T21114] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 792.940132][T21114] ? __pfx___ip_append_data+0x10/0x10 [ 792.940150][T21114] ? ipv4_mtu+0x53b/0x650 [ 792.940171][T21114] ? ip_setup_cork+0x577/0x9a0 [ 792.940194][T21114] ip_make_skb+0x1de/0x3f0 [ 792.940219][T21114] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 792.940240][T21114] ? __pfx_ip_make_skb+0x10/0x10 [ 792.940278][T21114] udp_sendmsg+0x1925/0x2170 [ 792.940302][T21114] ? is_bpf_text_address+0x26/0x2b0 [ 792.940337][T21114] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 792.940360][T21114] ? __pfx_udp_sendmsg+0x10/0x10 [ 792.940395][T21114] ? __lock_acquire+0xab9/0xd20 [ 792.940437][T21114] ? __lock_acquire+0xab9/0xd20 [ 792.940466][T21114] udpv6_sendmsg+0xc1c/0x2510 [ 792.940490][T21114] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 792.940517][T21114] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 792.940541][T21114] ? __pfx___might_resched+0x10/0x10 [ 792.940565][T21114] ? get_page_from_freelist+0x2365/0x2440 [ 792.940599][T21114] ? aa_sk_perm+0x81e/0x950 [ 792.940628][T21114] ? inet_send_prepare+0x5c/0x270 [ 792.940655][T21114] ? inet6_sendmsg+0xe4/0x120 [ 792.940680][T21114] __sock_sendmsg+0xe5/0x270 [ 792.940704][T21114] ____sys_sendmsg+0x52d/0x830 [ 792.940734][T21114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.940774][T21114] ___sys_sendmsg+0x21f/0x2a0 [ 792.940793][T21114] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.940811][T21114] ? __lock_acquire+0xab9/0xd20 [ 792.940861][T21114] ? __fget_files+0x2a/0x420 [ 792.940881][T21114] ? __fget_files+0x3a0/0x420 [ 792.940911][T21114] __sys_sendmmsg+0x28e/0x430 [ 792.940933][T21114] ? __pfx___sys_sendmmsg+0x10/0x10 [ 792.940948][T21114] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 792.940997][T21114] ? ksys_write+0x22a/0x250 [ 792.941014][T21114] ? exc_page_fault+0x82/0x100 [ 792.941032][T21114] ? __pfx_ksys_write+0x10/0x10 [ 792.941057][T21114] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 792.941085][T21114] __do_fast_syscall_32+0xb6/0x2b0 [ 792.941104][T21114] ? lockdep_hardirqs_on+0x9c/0x150 [ 792.941125][T21114] do_fast_syscall_32+0x34/0x80 [ 792.941144][T21114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.941165][T21114] RIP: 0023:0xf70ad539 [ 792.941179][T21114] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 792.941194][T21114] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 792.941214][T21114] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003cc0 [ 792.941226][T21114] RDX: 0000000000000001 RSI: 0000000004001c00 RDI: 0000000000000000 [ 792.941238][T21114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.941248][T21114] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 792.941259][T21114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.941286][T21114] [ 793.459005][T13291] usbhid 4-1:0.0: can't add hid device: -71 [ 793.473621][T13291] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 793.518059][T13291] usb 4-1: USB disconnect, device number 54 [ 793.767200][T20340] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 793.789590][T20340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.797780][T20340] usb 2-1: Product: syz [ 793.801961][T20340] usb 2-1: Manufacturer: syz [ 793.811273][T20340] usb 2-1: SerialNumber: syz [ 793.839753][T20340] usb 2-1: config 0 descriptor?? [ 793.851105][T21069] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 793.870514][T20340] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 793.996753][T20340] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 794.221239][T18201] udevd[18201]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 794.252777][T13292] usb 2-1: USB disconnect, device number 67 [ 794.528657][T13291] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 794.696091][T13291] usb 4-1: Using ep0 maxpacket: 32 [ 794.702597][T13291] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 794.711082][T13291] usb 4-1: config 0 has no interface number 0 [ 794.741665][T13291] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 794.801386][T13291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.877709][T13291] usb 4-1: Product: syz [ 794.898620][T13291] usb 4-1: Manufacturer: syz [ 794.932719][T13291] usb 4-1: SerialNumber: syz [ 794.998307][T13291] usb 4-1: config 0 descriptor?? [ 795.040972][T13291] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 795.205359][T21133] FAULT_INJECTION: forcing a failure. [ 795.205359][T21133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.219146][T21133] CPU: 1 UID: 0 PID: 21133 Comm: syz.2.5013 Not tainted syzkaller #0 PREEMPT(full) [ 795.219162][T21133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 795.219168][T21133] Call Trace: [ 795.219173][T21133] [ 795.219178][T21133] dump_stack_lvl+0x189/0x250 [ 795.219194][T21133] ? __pfx____ratelimit+0x10/0x10 [ 795.219217][T21133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.219237][T21133] ? __pfx__printk+0x10/0x10 [ 795.219256][T21133] ? __might_fault+0xb0/0x130 [ 795.219286][T21133] should_fail_ex+0x414/0x560 [ 795.219307][T21133] _copy_from_user+0x2d/0xb0 [ 795.219321][T21133] memdup_user+0x5e/0xd0 [ 795.219335][T21133] udmabuf_ioctl+0x214/0x2c0 [ 795.219347][T21133] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 795.219362][T21133] ? __fget_files+0x2a/0x420 [ 795.219388][T21133] ? __fget_files+0x3a0/0x420 [ 795.219408][T21133] ? __fget_files+0x2a/0x420 [ 795.219432][T21133] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 795.219452][T21133] __ia32_compat_sys_ioctl+0x543/0x840 [ 795.219464][T21133] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 795.219474][T21133] ? __fget_files+0x3a0/0x420 [ 795.219488][T21133] ? fput+0xa0/0xd0 [ 795.219501][T21133] ? ksys_write+0x22a/0x250 [ 795.219518][T21133] ? exc_page_fault+0x82/0x100 [ 795.219538][T21133] ? __pfx_ksys_write+0x10/0x10 [ 795.219558][T21133] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 795.219578][T21133] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.219596][T21133] __do_fast_syscall_32+0xb6/0x2b0 [ 795.219607][T21133] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.219619][T21133] do_fast_syscall_32+0x34/0x80 [ 795.219629][T21133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.219641][T21133] RIP: 0023:0xf70ad539 [ 795.219650][T21133] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 795.219665][T21133] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 795.219685][T21133] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040087543 [ 795.219698][T21133] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.219710][T21133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.219721][T21133] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 795.219733][T21133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.219752][T21133] [ 795.476014][T13291] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 795.577543][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 795.592752][T20340] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 795.673166][T13291] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 795.724150][T21140] openvswitch: netlink: Tunnel attr 246 out of range max 16 [ 795.746491][T20340] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 795.755823][T20340] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 795.769541][T20340] usb 5-1: Product: syz [ 795.774897][T13291] usb 4-1: USB disconnect, device number 55 [ 795.797161][T20340] usb 5-1: Manufacturer: syz [ 795.801788][T20340] usb 5-1: SerialNumber: syz [ 795.855110][T20340] usb 5-1: config 0 descriptor?? [ 795.856156][T13291] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 795.900039][T21147] FAULT_INJECTION: forcing a failure. [ 795.900039][T21147] name failslab, interval 1, probability 0, space 0, times 0 [ 795.915702][T13291] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 795.926906][T21147] CPU: 1 UID: 0 PID: 21147 Comm: syz.0.5018 Not tainted syzkaller #0 PREEMPT(full) [ 795.926932][T21147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 795.926944][T21147] Call Trace: [ 795.926952][T21147] [ 795.926960][T21147] dump_stack_lvl+0x189/0x250 [ 795.926984][T21147] ? __pfx____ratelimit+0x10/0x10 [ 795.927010][T21147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.927029][T21147] ? __pfx__printk+0x10/0x10 [ 795.927050][T21147] ? __pfx___might_resched+0x10/0x10 [ 795.927074][T21147] ? fs_reclaim_acquire+0x7d/0x100 [ 795.927100][T21147] should_fail_ex+0x414/0x560 [ 795.927132][T21147] should_failslab+0xa8/0x100 [ 795.927156][T21147] __kmalloc_cache_noprof+0x6f/0x6f0 [ 795.927177][T21147] ? rtnl_newlink+0xfb/0x1c80 [ 795.927201][T21147] ? kasan_save_track+0x4f/0x80 [ 795.927222][T21147] rtnl_newlink+0xfb/0x1c80 [ 795.927243][T21147] ? netlink_deliver_tap+0x19c/0x1b0 [ 795.927264][T21147] ? netlink_unicast+0x7fa/0x9e0 [ 795.927283][T21147] ? netlink_sendmsg+0x805/0xb30 [ 795.927304][T21147] ? __sock_sendmsg+0x21c/0x270 [ 795.927323][T21147] ? ____sys_sendmsg+0x505/0x830 [ 795.927345][T21147] ? ___sys_sendmsg+0x21f/0x2a0 [ 795.927359][T21147] ? __sys_sendmsg+0x164/0x220 [ 795.927372][T21147] ? __do_fast_syscall_32+0xb6/0x2b0 [ 795.927390][T21147] ? do_fast_syscall_32+0x34/0x80 [ 795.927407][T21147] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.927433][T21147] ? __pfx_rtnl_newlink+0x10/0x10 [ 795.927477][T21147] ? kasan_quarantine_put+0xdd/0x220 [ 795.927496][T21147] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.927521][T21147] ? __pfx_do_softirq+0x10/0x10 [ 795.927550][T21147] ? __local_bh_enable_ip+0x12d/0x1c0 [ 795.927572][T21147] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.927590][T21147] ? __local_bh_enable_ip+0x12d/0x1c0 [ 795.927613][T21147] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 795.927640][T21147] ? __dev_queue_xmit+0x27b/0x3b50 [ 795.927657][T21147] ? __dev_queue_xmit+0x27b/0x3b50 [ 795.927673][T21147] ? __dev_queue_xmit+0x27b/0x3b50 [ 795.927700][T21147] ? __dev_queue_xmit+0x1d79/0x3b50 [ 795.927716][T21147] ? kasan_save_track+0x3e/0x80 [ 795.927733][T21147] ? __kasan_slab_alloc+0x6c/0x80 [ 795.927755][T21147] ? __lock_acquire+0xab9/0xd20 [ 795.927800][T21147] ? __pfx_rtnl_newlink+0x10/0x10 [ 795.927822][T21147] rtnetlink_rcv_msg+0x7cf/0xb70 [ 795.927848][T21147] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 795.927870][T21147] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 795.927890][T21147] ? ref_tracker_free+0x63a/0x7d0 [ 795.927909][T21147] ? __asan_memcpy+0x40/0x70 [ 795.927926][T21147] ? __pfx_ref_tracker_free+0x10/0x10 [ 795.927953][T21147] netlink_rcv_skb+0x208/0x470 [ 795.927977][T21147] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 795.928001][T21147] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 795.928035][T21147] ? netlink_deliver_tap+0x2e/0x1b0 [ 795.928065][T21147] netlink_unicast+0x82f/0x9e0 [ 795.928094][T21147] ? __pfx_netlink_unicast+0x10/0x10 [ 795.928118][T21147] ? netlink_sendmsg+0x642/0xb30 [ 795.928139][T21147] ? skb_put+0x11b/0x210 [ 795.928166][T21147] netlink_sendmsg+0x805/0xb30 [ 795.928198][T21147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.928224][T21147] ? __import_iovec+0x5d4/0x7f0 [ 795.928245][T21147] ? aa_sock_msg_perm+0xf1/0x1d0 [ 795.928266][T21147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 795.928287][T21147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.928312][T21147] __sock_sendmsg+0x21c/0x270 [ 795.928335][T21147] ____sys_sendmsg+0x505/0x830 [ 795.928366][T21147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.928406][T21147] ___sys_sendmsg+0x21f/0x2a0 [ 795.928426][T21147] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.928475][T21147] ? __fget_files+0x2a/0x420 [ 795.928495][T21147] ? __fget_files+0x3a0/0x420 [ 795.928525][T21147] __sys_sendmsg+0x164/0x220 [ 795.928544][T21147] ? __pfx___sys_sendmsg+0x10/0x10 [ 795.928577][T21147] ? __pfx_ksys_write+0x10/0x10 [ 795.928599][T21147] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 795.928619][T21147] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.928640][T21147] __do_fast_syscall_32+0xb6/0x2b0 [ 795.928659][T21147] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.928685][T21147] do_fast_syscall_32+0x34/0x80 [ 795.928705][T21147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.928725][T21147] RIP: 0023:0xf704d539 [ 795.928741][T21147] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 795.928757][T21147] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 795.928777][T21147] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 795.928790][T21147] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.928802][T21147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.928812][T21147] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 795.928823][T21147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.928850][T21147] [ 796.165438][T21132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.422849][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 796.422867][ T30] audit: type=1326 audit(1760505110.534:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 796.517837][T21132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.607647][ T30] audit: type=1326 audit(1760505110.534:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 796.666194][ T30] audit: type=1326 audit(1760505110.534:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 796.755510][T13291] quatech2 4-1:0.51: device disconnected [ 796.771362][ T30] audit: type=1326 audit(1760505110.534:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 796.866908][ T30] audit: type=1326 audit(1760505110.534:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 796.988518][ T30] audit: type=1326 audit(1760505110.534:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 797.084760][ T30] audit: type=1326 audit(1760505110.534:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 797.141427][ T30] audit: type=1326 audit(1760505110.534:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 797.163682][T13291] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 797.175385][T21168] netlink: 'syz.0.5024': attribute type 3 has an invalid length. [ 797.194285][T21168] sctp: [Deprecated]: syz.0.5024 (pid 21168) Use of int in max_burst socket option. [ 797.194285][T21168] Use struct sctp_assoc_value instead [ 797.239650][ T30] audit: type=1326 audit(1760505110.534:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 797.322116][ T30] audit: type=1326 audit(1760505110.534:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 797.426171][T13291] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 797.440259][T13291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 797.453782][T13291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 797.493614][T13291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 797.509760][T13291] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 797.519698][T13291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.558142][T13291] usb 4-1: config 0 descriptor?? [ 797.978364][T21177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5025'. [ 798.031778][T21181] netlink: 'syz.0.5025': attribute type 13 has an invalid length. [ 798.182890][T21181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 798.307128][T13291] usbhid 4-1:0.0: can't add hid device: -71 [ 798.319833][T13291] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 798.337085][T20340] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 798.375690][T13291] usb 4-1: USB disconnect, device number 56 [ 798.385750][T20340] peak_usb 5-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 798.513888][T20340] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 798.557903][T20340] usb 5-1: USB disconnect, device number 72 [ 799.192853][T19823] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 799.352988][T19823] usb 3-1: Using ep0 maxpacket: 8 [ 799.371321][T19823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 799.386010][T19823] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 799.400226][T19823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 799.413116][T19823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 799.425405][T19823] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 799.437354][T19823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 799.448102][T19823] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 799.462281][T19823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 799.473605][T19823] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 799.487394][T19823] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 799.498097][T19823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.509472][T19823] usb 3-1: Product: syz [ 799.514586][T19823] usb 3-1: Manufacturer: syz [ 799.521907][T19823] usb 3-1: SerialNumber: syz [ 799.531249][T19823] usb 3-1: config 0 descriptor?? [ 799.540181][T21186] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 799.562338][T19823] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 799.646484][T19823] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 799.718262][T18201] udevd[18201]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.836707][T13286] usb 3-1: USB disconnect, device number 49 [ 802.073029][T13292] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 802.082855][T13286] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 802.226547][T13292] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 802.244565][T13286] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 802.267386][T13292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 802.279261][T13286] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 802.313024][T13292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 802.325423][T13286] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 802.361182][T13292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 802.380914][T13286] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 802.410280][T13286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.433818][T13292] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 802.477377][T13292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.506290][T13286] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 802.528371][T13292] usb 3-1: config 0 descriptor?? [ 802.545440][T13286] usb 1-1: invalid MIDI out EP 0 [ 802.703507][T18195] udevd[18195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.745408][T13286] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 803.196879][T13292] usbhid 3-1:0.0: can't add hid device: -71 [ 803.210523][T13292] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 803.243114][T13292] usb 3-1: USB disconnect, device number 50 [ 803.480433][T21264] 8021q: VLANs not supported on ip6_vti0 [ 803.701301][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5046'. [ 803.712321][T21270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5046'. [ 803.975699][ T5842] Bluetooth: hci3: command 0x0419 tx timeout [ 804.452940][T20340] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 804.612854][T20340] usb 2-1: Using ep0 maxpacket: 8 [ 804.620070][T20340] usb 2-1: unable to get BOS descriptor or descriptor too short [ 804.639351][T20340] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 804.668307][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 804.703757][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 804.741758][T20340] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 804.759519][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 804.792992][T20340] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 804.824667][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 804.846543][T20340] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 804.860057][T20340] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 804.873292][T20340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.881472][T20340] usb 2-1: Product: syz [ 804.887386][T20340] usb 2-1: Manufacturer: syz [ 804.892453][T20340] usb 2-1: SerialNumber: syz [ 804.907263][T20340] usb 2-1: config 0 descriptor?? [ 804.916408][T21267] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 804.936255][T20340] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 805.052443][T20340] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 805.080441][T17908] udevd[17908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.138556][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 805.138573][ T30] audit: type=1326 audit(1760505119.264:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21266 comm="syz.1.5049" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 805.281896][T20340] usb 2-1: USB disconnect, device number 68 [ 805.592136][T21296] FAULT_INJECTION: forcing a failure. [ 805.592136][T21296] name failslab, interval 1, probability 0, space 0, times 0 [ 805.648272][T13290] usb 1-1: USB disconnect, device number 61 [ 805.681346][T21296] CPU: 0 UID: 0 PID: 21296 Comm: syz.2.5055 Not tainted syzkaller #0 PREEMPT(full) [ 805.681372][T21296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 805.681385][T21296] Call Trace: [ 805.681393][T21296] [ 805.681403][T21296] dump_stack_lvl+0x189/0x250 [ 805.681428][T21296] ? __pfx____ratelimit+0x10/0x10 [ 805.681454][T21296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.681474][T21296] ? __pfx__printk+0x10/0x10 [ 805.681495][T21296] ? __pfx___might_resched+0x10/0x10 [ 805.681519][T21296] ? fs_reclaim_acquire+0x7d/0x100 [ 805.681545][T21296] should_fail_ex+0x414/0x560 [ 805.681577][T21296] should_failslab+0xa8/0x100 [ 805.681601][T21296] kmem_cache_alloc_noprof+0x74/0x6e0 [ 805.681621][T21296] ? skb_clone+0x212/0x3a0 [ 805.681653][T21296] skb_clone+0x212/0x3a0 [ 805.681669][T21296] ? nfnetlink_rcv+0x4ba/0x2590 [ 805.681695][T21296] nfnetlink_rcv+0x4ec/0x2590 [ 805.681720][T21296] ? __dev_queue_xmit+0x27b/0x3b50 [ 805.681739][T21296] ? __dev_queue_xmit+0x1d79/0x3b50 [ 805.681755][T21296] ? kasan_save_track+0x3e/0x80 [ 805.681772][T21296] ? __kasan_slab_alloc+0x6c/0x80 [ 805.681797][T21296] ? __dev_queue_xmit+0x27b/0x3b50 [ 805.681828][T21296] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 805.681865][T21296] ? ref_tracker_free+0x63a/0x7d0 [ 805.681885][T21296] ? __asan_memcpy+0x40/0x70 [ 805.681902][T21296] ? __pfx_ref_tracker_free+0x10/0x10 [ 805.681937][T21296] ? skb_clone+0x246/0x3a0 [ 805.681958][T21296] ? __netlink_deliver_tap+0x807/0x850 [ 805.681982][T21296] ? netlink_deliver_tap+0x2e/0x1b0 [ 805.682023][T21296] netlink_unicast+0x82f/0x9e0 [ 805.682055][T21296] ? __pfx_netlink_unicast+0x10/0x10 [ 805.682079][T21296] ? netlink_sendmsg+0x642/0xb30 [ 805.682102][T21296] ? skb_put+0x11b/0x210 [ 805.682131][T21296] netlink_sendmsg+0x805/0xb30 [ 805.682164][T21296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.682191][T21296] ? __import_iovec+0x5d4/0x7f0 [ 805.682212][T21296] ? aa_sock_msg_perm+0xf1/0x1d0 [ 805.682232][T21296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 805.682254][T21296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.682280][T21296] __sock_sendmsg+0x21c/0x270 [ 805.682304][T21296] ____sys_sendmsg+0x505/0x830 [ 805.682336][T21296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 805.682377][T21296] ___sys_sendmsg+0x21f/0x2a0 [ 805.682397][T21296] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.682447][T21296] ? __fget_files+0x2a/0x420 [ 805.682469][T21296] ? __fget_files+0x3a0/0x420 [ 805.682501][T21296] __sys_sendmsg+0x164/0x220 [ 805.682522][T21296] ? __pfx___sys_sendmsg+0x10/0x10 [ 805.682557][T21296] ? __pfx_ksys_write+0x10/0x10 [ 805.682580][T21296] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 805.682602][T21296] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.682624][T21296] __do_fast_syscall_32+0xb6/0x2b0 [ 805.682655][T21296] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.682674][T21296] do_fast_syscall_32+0x34/0x80 [ 805.682692][T21296] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 805.682713][T21296] RIP: 0023:0xf70ad539 [ 805.682728][T21296] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 805.682743][T21296] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 805.682762][T21296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 805.682776][T21296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 805.682787][T21296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 805.682798][T21296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 805.682809][T21296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 805.682835][T21296] [ 806.055095][ T5842] Bluetooth: hci3: command 0x0419 tx timeout [ 806.176411][T21300] FAULT_INJECTION: forcing a failure. [ 806.176411][T21300] name failslab, interval 1, probability 0, space 0, times 0 [ 806.189654][T21300] CPU: 0 UID: 0 PID: 21300 Comm: syz.2.5059 Not tainted syzkaller #0 PREEMPT(full) [ 806.189678][T21300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 806.189689][T21300] Call Trace: [ 806.189698][T21300] [ 806.189706][T21300] dump_stack_lvl+0x189/0x250 [ 806.189731][T21300] ? __pfx____ratelimit+0x10/0x10 [ 806.189757][T21300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 806.189776][T21300] ? __pfx__printk+0x10/0x10 [ 806.189797][T21300] ? __pfx___might_resched+0x10/0x10 [ 806.189821][T21300] ? fs_reclaim_acquire+0x7d/0x100 [ 806.189846][T21300] should_fail_ex+0x414/0x560 [ 806.189876][T21300] should_failslab+0xa8/0x100 [ 806.189899][T21300] kmem_cache_alloc_noprof+0x74/0x6e0 [ 806.189927][T21300] ? skb_clone+0x212/0x3a0 [ 806.189949][T21300] skb_clone+0x212/0x3a0 [ 806.189966][T21300] ? nfnetlink_rcv+0x4ba/0x2590 [ 806.189990][T21300] nfnetlink_rcv+0x4ec/0x2590 [ 806.190014][T21300] ? __dev_queue_xmit+0x27b/0x3b50 [ 806.190033][T21300] ? __dev_queue_xmit+0x1d79/0x3b50 [ 806.190050][T21300] ? kasan_save_track+0x3e/0x80 [ 806.190067][T21300] ? __kasan_slab_alloc+0x6c/0x80 [ 806.190095][T21300] ? __dev_queue_xmit+0x27b/0x3b50 [ 806.190126][T21300] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 806.190163][T21300] ? ref_tracker_free+0x63a/0x7d0 [ 806.190183][T21300] ? __asan_memcpy+0x40/0x70 [ 806.190201][T21300] ? __pfx_ref_tracker_free+0x10/0x10 [ 806.190235][T21300] ? skb_clone+0x246/0x3a0 [ 806.190256][T21300] ? __netlink_deliver_tap+0x807/0x850 [ 806.190281][T21300] ? netlink_deliver_tap+0x2e/0x1b0 [ 806.190322][T21300] netlink_unicast+0x82f/0x9e0 [ 806.190356][T21300] ? __pfx_netlink_unicast+0x10/0x10 [ 806.190380][T21300] ? netlink_sendmsg+0x642/0xb30 [ 806.190402][T21300] ? skb_put+0x11b/0x210 [ 806.190430][T21300] netlink_sendmsg+0x805/0xb30 [ 806.190463][T21300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.190490][T21300] ? __import_iovec+0x5d4/0x7f0 [ 806.190510][T21300] ? aa_sock_msg_perm+0xf1/0x1d0 [ 806.190531][T21300] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 806.190551][T21300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.190562][T20340] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 806.190575][T21300] __sock_sendmsg+0x21c/0x270 [ 806.190600][T21300] ____sys_sendmsg+0x505/0x830 [ 806.190627][T21300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.190667][T21300] ___sys_sendmsg+0x21f/0x2a0 [ 806.190684][T21300] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.190733][T21300] ? __fget_files+0x2a/0x420 [ 806.190753][T21300] ? __fget_files+0x3a0/0x420 [ 806.190784][T21300] __sys_sendmsg+0x164/0x220 [ 806.190804][T21300] ? __pfx___sys_sendmsg+0x10/0x10 [ 806.190837][T21300] ? rcu_is_watching+0x15/0xb0 [ 806.190865][T21300] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 806.190885][T21300] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.190906][T21300] __do_fast_syscall_32+0xb6/0x2b0 [ 806.190932][T21300] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.190953][T21300] do_fast_syscall_32+0x34/0x80 [ 806.190972][T21300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.190994][T21300] RIP: 0023:0xf70ad539 [ 806.191014][T21300] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 806.191029][T21300] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 806.191049][T21300] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 806.191062][T21300] RDX: 0000000004040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 806.191074][T21300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 806.191084][T21300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 806.191096][T21300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 806.191123][T21300] [ 806.220744][T21302] FAULT_INJECTION: forcing a failure. [ 806.220744][T21302] name failslab, interval 1, probability 0, space 0, times 0 [ 806.372718][T20340] usb 4-1: Using ep0 maxpacket: 8 [ 806.388116][T21302] CPU: 0 UID: 0 PID: 21302 Comm: syz.0.5057 Not tainted syzkaller #0 PREEMPT(full) [ 806.388141][T21302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 806.388152][T21302] Call Trace: [ 806.388161][T21302] [ 806.388170][T21302] dump_stack_lvl+0x189/0x250 [ 806.388194][T21302] ? __pfx____ratelimit+0x10/0x10 [ 806.388221][T21302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 806.388240][T21302] ? __pfx__printk+0x10/0x10 [ 806.388263][T21302] ? __pfx___might_resched+0x10/0x10 [ 806.388286][T21302] ? fs_reclaim_acquire+0x7d/0x100 [ 806.388312][T21302] should_fail_ex+0x414/0x560 [ 806.388343][T21302] should_failslab+0xa8/0x100 [ 806.388367][T21302] kmem_cache_alloc_node_noprof+0x77/0x710 [ 806.388387][T21302] ? __alloc_skb+0x112/0x2d0 [ 806.388410][T21302] ? if_nlmsg_stats_size+0x346/0x580 [ 806.388434][T21302] __alloc_skb+0x112/0x2d0 [ 806.388461][T21302] rtnl_stats_get+0x433/0x6c0 [ 806.388490][T21302] ? __pfx_rtnl_stats_get+0x10/0x10 [ 806.388524][T21302] ? __pfx_rtnl_stats_get+0x10/0x10 [ 806.388546][T21302] rtnetlink_rcv_msg+0x77c/0xb70 [ 806.388573][T21302] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 806.388595][T21302] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 806.388616][T21302] ? ref_tracker_free+0x63a/0x7d0 [ 806.388634][T21302] ? __asan_memcpy+0x40/0x70 [ 806.388651][T21302] ? __pfx_ref_tracker_free+0x10/0x10 [ 806.388679][T21302] netlink_rcv_skb+0x208/0x470 [ 806.388705][T21302] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 806.388729][T21302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 806.388764][T21302] ? netlink_deliver_tap+0x2e/0x1b0 [ 806.388795][T21302] netlink_unicast+0x82f/0x9e0 [ 806.388826][T21302] ? __pfx_netlink_unicast+0x10/0x10 [ 806.388849][T21302] ? netlink_sendmsg+0x642/0xb30 [ 806.388876][T21302] ? skb_put+0x11b/0x210 [ 806.388904][T21302] netlink_sendmsg+0x805/0xb30 [ 806.388936][T21302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.388962][T21302] ? __import_iovec+0x5d4/0x7f0 [ 806.388983][T21302] ? aa_sock_msg_perm+0xf1/0x1d0 [ 806.389004][T21302] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 806.389025][T21302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.389050][T21302] __sock_sendmsg+0x21c/0x270 [ 806.389074][T21302] ____sys_sendmsg+0x505/0x830 [ 806.389106][T21302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.389147][T21302] ___sys_sendmsg+0x21f/0x2a0 [ 806.389167][T21302] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.389219][T21302] ? __fget_files+0x2a/0x420 [ 806.389239][T21302] ? __fget_files+0x3a0/0x420 [ 806.389269][T21302] __sys_sendmsg+0x164/0x220 [ 806.389289][T21302] ? __pfx___sys_sendmsg+0x10/0x10 [ 806.389323][T21302] ? __pfx_ksys_write+0x10/0x10 [ 806.389345][T21302] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 806.389365][T21302] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.389386][T21302] __do_fast_syscall_32+0xb6/0x2b0 [ 806.389406][T21302] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.389428][T21302] do_fast_syscall_32+0x34/0x80 [ 806.389447][T21302] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.389468][T21302] RIP: 0023:0xf704d539 [ 806.389484][T21302] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 806.389499][T21302] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 806.389519][T21302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 806.389532][T21302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 806.389543][T21302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 806.389553][T21302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 806.389564][T21302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 806.389591][T21302] [ 806.747875][T21314] FAULT_INJECTION: forcing a failure. [ 806.747875][T21314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.776602][T20340] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 806.785686][T21314] CPU: 0 UID: 0 PID: 21314 Comm: syz.1.5062 Not tainted syzkaller #0 PREEMPT(full) [ 806.785710][T21314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 806.785721][T21314] Call Trace: [ 806.785729][T21314] [ 806.785737][T21314] dump_stack_lvl+0x189/0x250 [ 806.785763][T21314] ? __pfx____ratelimit+0x10/0x10 [ 806.785789][T21314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 806.785807][T21314] ? __pfx__printk+0x10/0x10 [ 806.785825][T21314] ? __might_fault+0xb0/0x130 [ 806.785862][T21314] should_fail_ex+0x414/0x560 [ 806.785893][T21314] _copy_from_user+0x2d/0xb0 [ 806.785918][T21314] compat_drm_mode_addfb2+0xba/0x1e0 [ 806.785938][T21314] ? __pfx_compat_drm_mode_addfb2+0x10/0x10 [ 806.785967][T21314] ? __fget_files+0x2a/0x420 [ 806.785995][T21314] drm_compat_ioctl+0x243/0x330 [ 806.786023][T21314] ? __pfx_compat_drm_mode_addfb2+0x10/0x10 [ 806.786043][T21314] __ia32_compat_sys_ioctl+0x543/0x840 [ 806.786065][T21314] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 806.786084][T21314] ? __fget_files+0x3a0/0x420 [ 806.786110][T21314] ? fput+0xa0/0xd0 [ 806.786134][T21314] ? ksys_write+0x22a/0x250 [ 806.786151][T21314] ? exc_page_fault+0x82/0x100 [ 806.786170][T21314] ? __pfx_ksys_write+0x10/0x10 [ 806.786191][T21314] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 806.786211][T21314] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.786232][T21314] __do_fast_syscall_32+0xb6/0x2b0 [ 806.786252][T21314] ? lockdep_hardirqs_on+0x9c/0x150 [ 806.786273][T21314] do_fast_syscall_32+0x34/0x80 [ 806.786292][T21314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 806.786313][T21314] RIP: 0023:0xf702d539 [ 806.786329][T21314] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 806.786345][T21314] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 806.786365][T21314] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c06864b8 [ 806.786378][T21314] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 806.786389][T21314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 806.786400][T21314] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 806.786411][T21314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 806.786438][T21314] [ 807.201268][T20340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.257697][T20340] usb 4-1: Product: syz [ 807.269123][T20340] usb 4-1: Manufacturer: syz [ 807.276092][T20340] usb 4-1: SerialNumber: syz [ 807.403309][T13292] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 807.508866][T21295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.518928][T21295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.566965][T13292] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 807.580292][T13292] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 807.595747][T13292] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.609976][T13292] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 807.619966][T13292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.726771][T13292] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.736168][T13292] usb 3-1: invalid MIDI out EP 0 [ 807.979368][T13292] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 808.487021][T21295] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.499232][T20340] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 808.518980][T21335] netlink: 'syz.4.5066': attribute type 10 has an invalid length. [ 808.533842][T21335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5066'. [ 808.533902][T20340] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 808.551644][T21335] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 808.582472][T20340] usb 4-1: USB disconnect, device number 57 [ 808.687961][T21337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5066'. [ 808.785907][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.792234][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.849644][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5067'. [ 809.633285][T13292] usb 3-1: USB disconnect, device number 51 [ 809.942773][T20340] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 809.978533][T21361] fuse: root generation should be zero [ 810.459310][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5080'. [ 810.552794][T13292] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 810.693219][T13292] usb 2-1: device descriptor read/64, error -71 [ 810.934209][T13292] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 811.074744][T13292] usb 2-1: device descriptor read/64, error -71 [ 811.185023][T13292] usb usb2-port1: attempt power cycle [ 811.562949][T13292] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 811.623978][T13292] usb 2-1: device descriptor read/8, error -71 [ 811.773853][T21406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5085'. [ 811.812805][T20340] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 811.952752][T13292] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 811.966571][T20340] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 811.992043][T20340] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 812.027183][T21409] netlink: 'syz.0.5086': attribute type 1 has an invalid length. [ 812.038982][T20340] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 812.074474][T13292] usb 2-1: device descriptor read/8, error -71 [ 812.086092][T20340] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 812.098286][T21409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 812.105648][T20340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.150468][T20340] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 812.164276][T20340] usb 5-1: invalid MIDI out EP 0 [ 812.213742][T20340] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 812.253965][T13292] usb usb2-port1: unable to enumerate USB device [ 812.322547][T18201] udevd[18201]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.157516][T21425] binder: BINDER_SET_CONTEXT_MGR already set [ 813.170596][T21425] binder: 21424:21425 ioctl 4018620d 800000c0 returned -16 [ 813.190019][T21427] binder_alloc: binder_alloc_mmap_handler: 21424 80ffd000-81000000 already mapped failed -16 [ 813.215183][T21426] binder: BINDER_SET_CONTEXT_MGR already set [ 813.222907][T21426] binder: 21424:21426 ioctl 4018620d 80000040 returned -16 [ 813.244450][T21425] binder_alloc: 21424: binder_alloc_buf, no vma [ 813.740248][T21438] pim6reg: entered allmulticast mode [ 814.739439][T13290] usb 5-1: USB disconnect, device number 73 [ 815.352966][T21463] netlink: 'syz.3.5102': attribute type 10 has an invalid length. [ 815.364814][T21463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5102'. [ 815.374974][T21463] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 815.579713][T21467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5102'. [ 815.662366][T21472] tipc: Enabled bearer , priority 0 [ 815.679213][T21472] syzkaller0: entered promiscuous mode [ 815.686267][T21472] syzkaller0: entered allmulticast mode [ 815.723457][T21472] syzkaller0: mtu greater than device maximum [ 815.741774][T21471] tipc: Resetting bearer [ 815.753504][ T30] audit: type=1326 audit(1760505129.874:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21443 comm="syz.0.5096" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x0 [ 815.790891][T21471] tipc: Disabling bearer [ 815.812908][T13290] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 815.983360][T13290] usb 3-1: Using ep0 maxpacket: 32 [ 816.027654][T13290] usb 3-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 816.071432][T21482] tipc: Enabling of bearer rejected, failed to enable media [ 816.088503][T13290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.100394][T13290] usb 3-1: Product: syz [ 816.121755][T13290] usb 3-1: Manufacturer: syz [ 816.147134][T13290] usb 3-1: SerialNumber: syz [ 816.201606][T13290] usb 3-1: config 0 descriptor?? [ 816.488182][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5103'. [ 816.532862][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5103'. [ 816.629582][T19823] usb 3-1: USB disconnect, device number 52 [ 817.018129][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5112'. [ 817.262974][T19823] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 817.349908][ T30] audit: type=1326 audit(1760505131.474:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21498 comm="syz.2.5114" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad539 code=0x0 [ 817.424854][T19823] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 817.424883][T19823] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 817.424902][T19823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 817.424946][T19823] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 817.424975][T19823] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 817.427111][T19823] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 817.427129][T19823] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 817.427139][T19823] usb 4-1: Product: syz [ 817.427147][T19823] usb 4-1: Manufacturer: syz [ 817.432493][T19823] cdc_wdm 4-1:1.0: skipping garbage [ 817.432505][T19823] cdc_wdm 4-1:1.0: skipping garbage [ 817.457957][T19823] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 817.457982][T19823] cdc_wdm 4-1:1.0: Unknown control protocol [ 817.947896][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5117'. [ 817.963408][T21513] FAULT_INJECTION: forcing a failure. [ 817.963408][T21513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.978918][T21513] CPU: 0 UID: 0 PID: 21513 Comm: syz.4.5117 Not tainted syzkaller #0 PREEMPT(full) [ 817.978941][T21513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 817.978948][T21513] Call Trace: [ 817.978953][T21513] [ 817.978958][T21513] dump_stack_lvl+0x189/0x250 [ 817.978976][T21513] ? __pfx____ratelimit+0x10/0x10 [ 817.978991][T21513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.979001][T21513] ? __pfx__printk+0x10/0x10 [ 817.979012][T21513] ? __might_fault+0xb0/0x130 [ 817.979028][T21513] should_fail_ex+0x414/0x560 [ 817.979046][T21513] _copy_from_iter+0x1de/0x1790 [ 817.979061][T21513] ? rcu_is_watching+0x15/0xb0 [ 817.979076][T21513] ? kmalloc_reserve+0xbd/0x290 [ 817.979090][T21513] ? __pfx__copy_from_iter+0x10/0x10 [ 817.979102][T21513] ? __build_skb_around+0x262/0x3f0 [ 817.979117][T21513] ? netlink_sendmsg+0x642/0xb30 [ 817.979130][T21513] ? skb_put+0x11b/0x210 [ 817.979145][T21513] netlink_sendmsg+0x6b2/0xb30 [ 817.979162][T21513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.979177][T21513] ? __import_iovec+0x5d4/0x7f0 [ 817.979188][T21513] ? aa_sock_msg_perm+0xf1/0x1d0 [ 817.979201][T21513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 817.979215][T21513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.979228][T21513] __sock_sendmsg+0x21c/0x270 [ 817.979242][T21513] ____sys_sendmsg+0x505/0x830 [ 817.979259][T21513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 817.979281][T21513] ___sys_sendmsg+0x21f/0x2a0 [ 817.979292][T21513] ? __pfx____sys_sendmsg+0x10/0x10 [ 817.979319][T21513] ? __fget_files+0x2a/0x420 [ 817.979331][T21513] ? __fget_files+0x3a0/0x420 [ 817.979351][T21513] __sys_sendmsg+0x164/0x220 [ 817.979361][T21513] ? __pfx___sys_sendmsg+0x10/0x10 [ 817.979380][T21513] ? __pfx_ksys_write+0x10/0x10 [ 817.979393][T21513] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 817.979405][T21513] ? lockdep_hardirqs_on+0x9c/0x150 [ 817.979416][T21513] __do_fast_syscall_32+0xb6/0x2b0 [ 817.979428][T21513] ? lockdep_hardirqs_on+0x9c/0x150 [ 817.979439][T21513] do_fast_syscall_32+0x34/0x80 [ 817.979450][T21513] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 817.979462][T21513] RIP: 0023:0xf708d539 [ 817.979478][T21513] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 817.979487][T21513] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 817.979500][T21513] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 817.979508][T21513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 817.979514][T21513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 817.979520][T21513] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 817.979526][T21513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 817.979541][T21513] [ 818.673942][T13290] usb 4-1: USB disconnect, device number 58 [ 819.702790][T13290] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 819.887610][T13290] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 819.921032][T13290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 819.952505][T13290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 820.010025][T13290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 820.042764][T20340] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 820.151911][T13290] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 820.165964][T13290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.183156][T13290] usb 4-1: config 0 descriptor?? [ 820.304323][T20340] usb 3-1: Using ep0 maxpacket: 32 [ 820.369991][T20340] usb 3-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 820.412703][T20340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.463060][T20340] usb 3-1: Product: syz [ 820.518027][T20340] usb 3-1: Manufacturer: syz [ 820.539491][T20340] usb 3-1: SerialNumber: syz [ 820.575588][T20340] usb 3-1: config 0 descriptor?? [ 820.806956][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5125'. [ 820.818629][T13290] usbhid 4-1:0.0: can't add hid device: -71 [ 820.835829][T20340] usb 3-1: USB disconnect, device number 53 [ 820.850312][T13290] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 820.934542][T13290] usb 4-1: USB disconnect, device number 59 [ 821.316333][T21569] pim6reg: entered allmulticast mode [ 821.752809][T13290] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 821.766836][T19972] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 821.954298][T13290] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 821.963760][T13290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.978267][T13290] usb 3-1: config 0 descriptor?? [ 822.012478][T19972] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 822.035229][T19972] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 822.095898][T19972] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 822.164685][T19972] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 822.222094][T19972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.408421][T19972] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 822.494852][T19972] usb 1-1: invalid MIDI out EP 0 [ 822.603359][T13290] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 822.623191][T13290] asix 3-1:0.0: probe with driver asix failed with error -61 [ 822.815702][T19972] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 823.722865][T13290] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 823.875454][T13290] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 823.886225][T13290] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 823.900002][T13290] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 823.916578][T13290] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 823.926908][T13290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.952562][T13290] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 823.960652][T13290] usb 4-1: invalid MIDI out EP 0 [ 824.008645][T17908] udevd[17908]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 824.036054][T13290] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 824.510585][ T30] audit: type=1326 audit(1760505138.634:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21600 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 824.557939][ T30] audit: type=1326 audit(1760505138.644:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21600 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 824.672979][ T30] audit: type=1326 audit(1760505138.644:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21600 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 824.712100][ T30] audit: type=1326 audit(1760505138.644:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21600 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 824.822575][ T30] audit: type=1326 audit(1760505138.644:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21600 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 824.855371][ T30] audit: type=1326 audit(1760505138.644:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21600 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 824.909141][ T30] audit: type=1326 audit(1760505138.644:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21600 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 824.968686][ T30] audit: type=1326 audit(1760505138.644:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21600 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 825.031320][ T30] audit: type=1326 audit(1760505138.644:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21600 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 825.112250][ T30] audit: type=1326 audit(1760505138.644:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21600 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 825.597459][T19972] usb 1-1: USB disconnect, device number 63 [ 825.726703][T13287] usb 3-1: USB disconnect, device number 54 [ 825.980546][T21624] fuse: Unknown parameter '0x0000000000000008' [ 826.002203][T21624] fuse: Unknown parameter '' [ 826.074193][T19823] usb 4-1: USB disconnect, device number 60 [ 826.113052][T13287] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 826.371047][T13290] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 826.404273][T13287] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 826.416029][T13287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 826.432962][T13287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 826.432990][T13287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 826.433031][T13287] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 826.473046][T13287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.483507][T13287] usb 3-1: config 0 descriptor?? [ 826.552781][T13290] usb 1-1: Using ep0 maxpacket: 16 [ 826.565861][T13290] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.577306][T13290] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 826.587966][T13290] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 826.598476][T13290] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 826.609728][T13290] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 826.736001][T13290] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 826.783372][T13290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 826.804605][T13290] usb 1-1: SerialNumber: syz [ 826.878127][T21624] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 826.912129][T13290] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 826.963585][T13290] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 827.197010][T13287] usbhid 3-1:0.0: can't add hid device: -71 [ 827.267616][T13287] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 827.329819][T13287] usb 3-1: USB disconnect, device number 55 [ 827.936676][T21649] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5156'. [ 827.966333][T21649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5156'. [ 829.692741][T13290] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 829.905810][T13290] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 829.920790][T13286] usb 1-1: USB disconnect, device number 64 [ 829.929059][T13290] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 829.929094][T13290] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.929136][T13290] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 829.929157][T13290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.415544][T13290] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 830.461711][T13290] usb 2-1: invalid MIDI out EP 0 [ 830.946247][T17908] udevd[17908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.974901][T13290] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 831.325505][T21690] bond2: invalid ARP target 0.0.0.0 specified for addition [ 831.325628][T21693] netlink: 'syz.3.5165': attribute type 13 has an invalid length. [ 831.352699][T21690] bond2: option arp_ip_target: invalid value (0) [ 831.362892][T13286] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 831.387441][T21690] bond2 (unregistering): Released all slaves [ 831.487761][T21693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 831.541743][T21695] tipc: Enabled bearer , priority 0 [ 831.563087][T21695] syzkaller0: entered promiscuous mode [ 831.569801][T13286] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.612615][T21695] syzkaller0: entered allmulticast mode [ 831.624071][T13286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 831.641121][T13286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 831.641208][T21698] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 831.651223][T13286] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 831.679859][T13286] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 831.690336][T13286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.715652][T13286] usb 1-1: config 0 descriptor?? [ 831.762263][T21695] syzkaller0: mtu greater than device maximum [ 831.772981][T21694] tipc: Resetting bearer [ 831.817705][T21694] tipc: Disabling bearer [ 832.067764][T21702] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5169'. [ 832.077149][T21702] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5169'. [ 832.086830][T21702] netlink: 'syz.4.5169': attribute type 3 has an invalid length. [ 832.094964][T21702] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5169'. [ 832.367160][T21709] : renamed from bridge_slave_0 [ 832.457329][T13286] usbhid 1-1:0.0: can't add hid device: -71 [ 832.467685][T13286] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 832.505867][T13286] usb 1-1: USB disconnect, device number 65 [ 832.671117][T19972] usb 2-1: USB disconnect, device number 73 [ 834.676341][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5180'. [ 834.685492][T21750] FAULT_INJECTION: forcing a failure. [ 834.685492][T21750] name failslab, interval 1, probability 0, space 0, times 0 [ 834.698493][T21750] CPU: 1 UID: 0 PID: 21750 Comm: syz.3.5180 Not tainted syzkaller #0 PREEMPT(full) [ 834.698513][T21750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 834.698520][T21750] Call Trace: [ 834.698525][T21750] [ 834.698530][T21750] dump_stack_lvl+0x189/0x250 [ 834.698546][T21750] ? __pfx____ratelimit+0x10/0x10 [ 834.698562][T21750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.698572][T21750] ? __pfx__printk+0x10/0x10 [ 834.698586][T21750] ? __pfx___might_resched+0x10/0x10 [ 834.698598][T21750] ? fs_reclaim_acquire+0x7d/0x100 [ 834.698613][T21750] should_fail_ex+0x414/0x560 [ 834.698631][T21750] should_failslab+0xa8/0x100 [ 834.698645][T21750] __kvmalloc_node_noprof+0x158/0x910 [ 834.698658][T21750] ? xfrm_user_rcv_msg_compat+0x47d/0x1460 [ 834.698670][T21750] ? __nla_parse+0x40/0x60 [ 834.698683][T21750] xfrm_user_rcv_msg_compat+0x47d/0x1460 [ 834.698701][T21750] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 834.698732][T21750] ? xfrm_get_translator+0x1b/0x240 [ 834.698743][T21750] ? xfrm_get_translator+0x1b/0x240 [ 834.698755][T21750] xfrm_user_rcv_msg+0x285/0xab0 [ 834.698768][T21750] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 834.698796][T21750] ? __pfx___mutex_trylock_common+0x10/0x10 [ 834.698820][T21750] ? rcu_is_watching+0x15/0xb0 [ 834.698834][T21750] ? trace_contention_end+0x39/0x120 [ 834.698848][T21750] ? __mutex_lock+0x335/0x1350 [ 834.698863][T21750] netlink_rcv_skb+0x208/0x470 [ 834.698877][T21750] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 834.698888][T21750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 834.698909][T21750] ? netlink_deliver_tap+0x2e/0x1b0 [ 834.698922][T21750] ? netlink_deliver_tap+0x2e/0x1b0 [ 834.698936][T21750] xfrm_netlink_rcv+0x79/0x90 [ 834.698945][T21750] netlink_unicast+0x82f/0x9e0 [ 834.698962][T21750] ? __pfx_netlink_unicast+0x10/0x10 [ 834.698975][T21750] ? netlink_sendmsg+0x642/0xb30 [ 834.698987][T21750] ? skb_put+0x11b/0x210 [ 834.699002][T21750] netlink_sendmsg+0x805/0xb30 [ 834.699020][T21750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.699035][T21750] ? __import_iovec+0x5d4/0x7f0 [ 834.699046][T21750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 834.699060][T21750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 834.699073][T21750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.699087][T21750] __sock_sendmsg+0x21c/0x270 [ 834.699100][T21750] ____sys_sendmsg+0x505/0x830 [ 834.699118][T21750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.699140][T21750] ___sys_sendmsg+0x21f/0x2a0 [ 834.699151][T21750] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.699179][T21750] ? __fget_files+0x2a/0x420 [ 834.699190][T21750] ? __fget_files+0x3a0/0x420 [ 834.699207][T21750] __sys_sendmsg+0x164/0x220 [ 834.699218][T21750] ? __pfx___sys_sendmsg+0x10/0x10 [ 834.699237][T21750] ? __pfx_ksys_write+0x10/0x10 [ 834.699250][T21750] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 834.699261][T21750] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.699273][T21750] __do_fast_syscall_32+0xb6/0x2b0 [ 834.699284][T21750] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.699296][T21750] do_fast_syscall_32+0x34/0x80 [ 834.699306][T21750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.699318][T21750] RIP: 0023:0xf7f81539 [ 834.699328][T21750] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 834.699337][T21750] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 834.699348][T21750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 834.699355][T21750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 834.699361][T21750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 834.699367][T21750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 834.699373][T21750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 834.699388][T21750] [ 835.653044][T21733] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 835.659297][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 836.064737][T21765] QAT: failed to copy from user cfg_data. [ 837.057162][T21733] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 837.102127][T21774] fuse: Bad value for 'fd' [ 837.140207][T21733] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 837.167903][T21733] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 837.178592][T21733] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 837.543564][T19972] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 837.655583][T21795] netlink: 'syz.3.5187': attribute type 13 has an invalid length. [ 837.656266][T21786] bond2: invalid ARP target 0.0.0.0 specified for addition [ 837.706399][T21786] bond2: option arp_ip_target: invalid value (0) [ 837.733955][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 837.754858][T19972] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 837.795461][T21786] bond2 (unregistering): Released all slaves [ 837.853157][T19972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 837.881853][T21795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 837.932859][T19972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 837.942619][T19972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 837.987495][T19972] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 838.006670][T19972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.033198][T19972] usb 2-1: config 0 descriptor?? [ 838.081678][T21804] FAULT_INJECTION: forcing a failure. [ 838.081678][T21804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.117911][T21804] CPU: 0 UID: 0 PID: 21804 Comm: syz.0.5191 Not tainted syzkaller #0 PREEMPT(full) [ 838.117940][T21804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 838.117951][T21804] Call Trace: [ 838.117959][T21804] [ 838.117968][T21804] dump_stack_lvl+0x189/0x250 [ 838.117992][T21804] ? __pfx____ratelimit+0x10/0x10 [ 838.118018][T21804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 838.118036][T21804] ? __pfx__printk+0x10/0x10 [ 838.118054][T21804] ? __might_fault+0xb0/0x130 [ 838.118083][T21804] should_fail_ex+0x414/0x560 [ 838.118114][T21804] copy_fpstate_to_sigframe+0xa18/0xce0 [ 838.118140][T21804] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 838.118166][T21804] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 838.118185][T21804] ? kmem_cache_free+0x19b/0x690 [ 838.118204][T21804] ? get_signal+0xa4b/0x1340 [ 838.118224][T21804] ? arch_do_signal_or_restart+0xa0/0x790 [ 838.118244][T21804] ? irqentry_exit_to_user_mode+0x7e/0x110 [ 838.118261][T21804] ? exc_page_fault+0xab/0x100 [ 838.118275][T21804] ? asm_exc_page_fault+0x26/0x30 [ 838.118309][T21804] ? fpu__alloc_mathframe+0xad/0x130 [ 838.118330][T21804] get_sigframe+0x58d/0x7d0 [ 838.118353][T21804] ? __pfx_get_sigframe+0x10/0x10 [ 838.118382][T21804] ia32_setup_rt_frame+0x106/0xb70 [ 838.118404][T21804] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.118427][T21804] ? lockdep_hardirqs_on+0x9c/0x150 [ 838.118443][T21804] ? _raw_spin_unlock_irq+0x2e/0x50 [ 838.118464][T21804] ? get_signal+0x1150/0x1340 [ 838.118491][T21804] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 838.118516][T21804] ? arch_do_signal_or_restart+0x385/0x790 [ 838.118539][T21804] arch_do_signal_or_restart+0x429/0x790 [ 838.118563][T21804] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 838.118584][T21804] ? __bad_area_nosemaphore+0x3fb/0x780 [ 838.118616][T21804] ? local_irq_enable_exit_to_user+0x5/0x10 [ 838.118640][T21804] irqentry_exit_to_user_mode+0x7e/0x110 [ 838.118658][T21804] exc_page_fault+0xab/0x100 [ 838.118675][T21804] asm_exc_page_fault+0x26/0x30 [ 838.118690][T21804] RIP: 0023:0x80000006 [ 838.118710][T21804] Code: Unable to access opcode bytes at 0x7fffffdc. [ 838.118718][T21804] RSP: 002b:00000000f543d07c EFLAGS: 00010202 [ 838.118742][T21804] RAX: ffffffffffffffff RBX: 0000000000000003 RCX: 00000000f543d10c [ 838.118755][T21804] RDX: 00000000f543d08c RSI: 0000000000000000 RDI: 0000000000000000 [ 838.118767][T21804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.118777][T21804] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 838.118786][T21804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.118812][T21804] [ 838.853541][T13287] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 839.015311][T13287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.027493][T13287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.055753][T13287] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 839.078258][T13287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.161154][T13287] usb 5-1: config 0 descriptor?? [ 839.173571][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 839.188573][T19972] usbhid 2-1:0.0: can't add hid device: -71 [ 839.199131][T19972] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 839.231179][T19972] usb 2-1: USB disconnect, device number 74 [ 839.253078][ T5842] Bluetooth: hci3: command 0x0419 tx timeout [ 839.262838][ T5842] Bluetooth: hci0: command 0x0405 tx timeout [ 839.586874][T13287] elecom 0003:056E:010D.001F: item fetching failed at offset 5/8 [ 839.599011][T13287] elecom 0003:056E:010D.001F: probe with driver elecom failed with error -22 [ 839.803739][T21800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.825618][T21800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.835387][T21800] netlink: 'syz.4.5190': attribute type 4 has an invalid length. [ 839.905677][T13290] usb 5-1: USB disconnect, device number 74 [ 841.402776][T13290] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 841.573606][T13290] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 841.581626][T13290] usb 3-1: config 0 has no interface number 0 [ 841.614781][T13290] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.672781][T13290] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.712115][T13290] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 841.758359][T13290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.793583][T13290] usb 3-1: config 0 descriptor?? [ 842.236986][T21835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.264812][T21835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.302934][T21835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.334986][T21835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.220170][T21855] tipc: Started in network mode [ 843.225826][T21855] tipc: Node identity , cluster identity 4711 [ 843.235850][T21855] tipc: Failed to obtain node identity [ 843.243194][T21855] tipc: Enabling of bearer rejected, failed to enable media [ 843.342191][T21852] syzkaller0: entered promiscuous mode [ 843.348033][T21852] syzkaller0: entered allmulticast mode [ 843.425655][T19972] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 843.582803][T19972] usb 5-1: Using ep0 maxpacket: 8 [ 843.595246][T19972] usb 5-1: config 0 has no interfaces? [ 843.607505][T19972] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 843.617279][T19972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.632361][T19972] usb 5-1: config 0 descriptor?? [ 843.861228][T21853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.871293][T21853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.923350][T19972] usb 5-1: USB disconnect, device number 75 [ 844.482757][T13290] usbhid 3-1:0.1: can't add hid device: -71 [ 844.503646][T13290] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 844.533931][T13290] usb 3-1: USB disconnect, device number 56 [ 844.793225][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 844.793244][ T30] audit: type=1326 audit(1760505158.924:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.0.5209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 844.821571][T19972] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 844.853779][ T30] audit: type=1326 audit(1760505158.924:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.0.5209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 845.029109][T19972] usb 2-1: Using ep0 maxpacket: 32 [ 845.053466][T19972] usb 2-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 845.062981][T19972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.116727][T19972] usb 2-1: Product: syz [ 845.126666][T19972] usb 2-1: Manufacturer: syz [ 845.145333][T19972] usb 2-1: SerialNumber: syz [ 845.223560][T19972] usb 2-1: config 0 descriptor?? [ 845.279997][ T30] audit: type=1326 audit(1760505158.924:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.0.5209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 845.342782][ T30] audit: type=1326 audit(1760505158.924:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.0.5209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 845.395654][ T30] audit: type=1326 audit(1760505158.924:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.0.5209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 845.417723][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.522817][ T30] audit: type=1326 audit(1760505158.934:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.0.5209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 845.558868][T19972] usb 2-1: USB disconnect, device number 75 [ 845.564072][ T30] audit: type=1326 audit(1760505158.934:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.0.5209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 845.632292][ T30] audit: type=1326 audit(1760505158.934:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.0.5209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 845.654799][ T30] audit: type=1326 audit(1760505158.934:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.0.5209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 845.702797][ T30] audit: type=1326 audit(1760505158.934:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21874 comm="syz.0.5209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 847.153186][T21897] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0) [ 848.853773][T21914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.860195][T21937] FAULT_INJECTION: forcing a failure. [ 849.860195][T21937] name failslab, interval 1, probability 0, space 0, times 0 [ 849.897757][T21937] CPU: 1 UID: 0 PID: 21937 Comm: syz.2.5229 Not tainted syzkaller #0 PREEMPT(full) [ 849.897786][T21937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 849.897797][T21937] Call Trace: [ 849.897805][T21937] [ 849.897814][T21937] dump_stack_lvl+0x189/0x250 [ 849.897841][T21937] ? __pfx____ratelimit+0x10/0x10 [ 849.897868][T21937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.897887][T21937] ? __pfx__printk+0x10/0x10 [ 849.897913][T21937] ? __pfx___might_resched+0x10/0x10 [ 849.897936][T21937] ? fs_reclaim_acquire+0x7d/0x100 [ 849.897963][T21937] should_fail_ex+0x414/0x560 [ 849.897995][T21937] should_failslab+0xa8/0x100 [ 849.898020][T21937] __kmalloc_cache_noprof+0x6f/0x6f0 [ 849.898041][T21937] ? nft_netdev_hook_alloc+0x5a/0x570 [ 849.898071][T21937] nft_netdev_hook_alloc+0x5a/0x570 [ 849.898096][T21937] ? nft_pernet+0x23/0x240 [ 849.898121][T21937] nf_tables_parse_netdev_hooks+0x138/0x950 [ 849.898155][T21937] nft_chain_parse_hook+0xaf5/0x1410 [ 849.898189][T21937] ? __pfx_nft_chain_parse_hook+0x10/0x10 [ 849.898215][T21937] ? nft_pernet+0x23/0x240 [ 849.898243][T21937] nf_tables_newchain+0xf8f/0x2750 [ 849.898280][T21937] ? __pfx_nf_tables_newchain+0x10/0x10 [ 849.898341][T21937] ? nfnl_pernet+0x23/0x240 [ 849.898373][T21937] ? __nla_parse+0x40/0x60 [ 849.898399][T21937] nfnetlink_rcv+0x11d9/0x2590 [ 849.898456][T21937] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 849.898496][T21937] ? ref_tracker_free+0x63a/0x7d0 [ 849.898545][T21937] ? __netlink_deliver_tap+0x807/0x850 [ 849.898569][T21937] ? netlink_deliver_tap+0x2e/0x1b0 [ 849.898612][T21937] netlink_unicast+0x82f/0x9e0 [ 849.898644][T21937] ? __pfx_netlink_unicast+0x10/0x10 [ 849.898669][T21937] ? netlink_sendmsg+0x642/0xb30 [ 849.898692][T21937] ? skb_put+0x11b/0x210 [ 849.898720][T21937] netlink_sendmsg+0x805/0xb30 [ 849.898753][T21937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.898784][T21937] ? __import_iovec+0x5d4/0x7f0 [ 849.898806][T21937] ? aa_sock_msg_perm+0xf1/0x1d0 [ 849.898829][T21937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 849.898851][T21937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.898877][T21937] __sock_sendmsg+0x21c/0x270 [ 849.898902][T21937] ____sys_sendmsg+0x505/0x830 [ 849.898935][T21937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.898979][T21937] ___sys_sendmsg+0x21f/0x2a0 [ 849.899000][T21937] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.899056][T21937] ? __fget_files+0x2a/0x420 [ 849.899077][T21937] ? __fget_files+0x3a0/0x420 [ 849.899110][T21937] __sys_sendmsg+0x164/0x220 [ 849.899130][T21937] ? __pfx___sys_sendmsg+0x10/0x10 [ 849.899167][T21937] ? __pfx_ksys_write+0x10/0x10 [ 849.899190][T21937] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 849.899212][T21937] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.899234][T21937] __do_fast_syscall_32+0xb6/0x2b0 [ 849.899254][T21937] ? lockdep_hardirqs_on+0x9c/0x150 [ 849.899277][T21937] do_fast_syscall_32+0x34/0x80 [ 849.899296][T21937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 849.899323][T21937] RIP: 0023:0xf70ad539 [ 849.899339][T21937] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 849.899355][T21937] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 849.899375][T21937] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008000c2c0 [ 849.899389][T21937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 849.899400][T21937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 849.899412][T21937] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 849.899423][T21937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 849.899453][T21937] [ 850.793136][T21955] input: syz1 as /devices/virtual/input/input51 [ 851.110232][T21959] veth0_virt_wifi: mtu less than device minimum [ 851.600599][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5241'. [ 851.613335][T21971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.889321][T21971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.059587][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 852.059604][ T30] audit: type=1326 audit(1760505166.184:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 852.135253][ T30] audit: type=1326 audit(1760505166.184:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 852.168844][T21983] FAULT_INJECTION: forcing a failure. [ 852.168844][T21983] name failslab, interval 1, probability 0, space 0, times 0 [ 852.234773][T21983] CPU: 0 UID: 0 PID: 21983 Comm: syz.1.5245 Not tainted syzkaller #0 PREEMPT(full) [ 852.234794][T21983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 852.234801][T21983] Call Trace: [ 852.234806][T21983] [ 852.234811][T21983] dump_stack_lvl+0x189/0x250 [ 852.234827][T21983] ? __pfx____ratelimit+0x10/0x10 [ 852.234842][T21983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 852.234853][T21983] ? __pfx__printk+0x10/0x10 [ 852.234866][T21983] ? __pfx___might_resched+0x10/0x10 [ 852.234879][T21983] ? fs_reclaim_acquire+0x7d/0x100 [ 852.234900][T21983] should_fail_ex+0x414/0x560 [ 852.234928][T21983] should_failslab+0xa8/0x100 [ 852.234951][T21983] __kmalloc_cache_noprof+0x6f/0x6f0 [ 852.234971][T21983] ? cma_alloc_port+0xb9/0x610 [ 852.234995][T21983] cma_alloc_port+0xb9/0x610 [ 852.235015][T21983] rdma_bind_addr_dst+0xdfc/0x3410 [ 852.235028][T21983] ? do_raw_spin_lock+0x121/0x290 [ 852.235049][T21983] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 852.235077][T21983] rdma_resolve_addr+0x664/0x2030 [ 852.235096][T21983] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 852.235108][T21983] ? __mutex_lock+0x335/0x1350 [ 852.235125][T21983] ? ucma_resolve_ip+0x1a5/0x280 [ 852.235152][T21983] ucma_resolve_ip+0x1db/0x280 [ 852.235165][T21983] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 852.235185][T21983] ucma_write+0x249/0x2e0 [ 852.235198][T21983] ? __pfx_ucma_write+0x10/0x10 [ 852.235208][T21983] ? security_file_permission+0x75/0x290 [ 852.235224][T21983] ? rw_verify_area+0x255/0x4d0 [ 852.235234][T21983] ? __lock_acquire+0xab9/0xd20 [ 852.235245][T21983] ? __pfx_ucma_write+0x10/0x10 [ 852.235257][T21983] vfs_write+0x27e/0xb30 [ 852.235272][T21983] ? __pfx_vfs_write+0x10/0x10 [ 852.235283][T21983] ? __fget_files+0x2a/0x420 [ 852.235296][T21983] ? __fget_files+0x2a/0x420 [ 852.235307][T21983] ? __fget_files+0x3a0/0x420 [ 852.235318][T21983] ? __fget_files+0x2a/0x420 [ 852.235336][T21983] ksys_write+0x145/0x250 [ 852.235346][T21983] ? exc_page_fault+0x82/0x100 [ 852.235357][T21983] ? __pfx_ksys_write+0x10/0x10 [ 852.235369][T21983] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 852.235380][T21983] ? lockdep_hardirqs_on+0x9c/0x150 [ 852.235392][T21983] __do_fast_syscall_32+0xb6/0x2b0 [ 852.235403][T21983] ? lockdep_hardirqs_on+0x9c/0x150 [ 852.235415][T21983] do_fast_syscall_32+0x34/0x80 [ 852.235425][T21983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 852.235437][T21983] RIP: 0023:0xf702d539 [ 852.235449][T21983] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 852.235464][T21983] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 852.235483][T21983] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 852.235497][T21983] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 852.235504][T21983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 852.235510][T21983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 852.235516][T21983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 852.235532][T21983] [ 852.759362][ T30] audit: type=1326 audit(1760505166.184:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 852.781667][ T30] audit: type=1326 audit(1760505166.184:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 852.809692][ T30] audit: type=1326 audit(1760505166.184:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 852.832622][ T30] audit: type=1326 audit(1760505166.184:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 852.855816][ T30] audit: type=1326 audit(1760505166.184:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 852.882766][ T30] audit: type=1326 audit(1760505166.184:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 852.905718][ T30] audit: type=1326 audit(1760505166.184:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 852.967842][ T30] audit: type=1326 audit(1760505166.184:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21978 comm="syz.2.5244" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 853.013758][T21977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5243'. [ 854.123067][T19972] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 854.312818][T19972] usb 4-1: Using ep0 maxpacket: 16 [ 854.326921][T19972] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 854.363122][T19972] usb 4-1: config 254 has no interface number 0 [ 854.402924][T19972] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 854.456898][T22020] vimc link validate: Scaler:src:16x16 (0x33424752, 10, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 854.476199][T19972] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 854.609786][T19972] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 854.699912][T19972] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 854.746989][T19972] usb 4-1: config 254 interface 235 has no altsetting 0 [ 854.777788][T19972] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 854.787957][T19972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.803265][T19972] usb 4-1: Product: syz [ 854.815369][T19972] usb 4-1: Manufacturer: syz [ 854.822931][T19972] usb 4-1: SerialNumber: syz [ 854.850001][T22015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 855.087496][T19972] usbtest 4-1:254.235: couldn't get endpoints, -71 [ 855.133811][T19972] usbtest 4-1:254.235: probe with driver usbtest failed with error -71 [ 855.210966][T22037] bond3: invalid ARP target 0.0.0.0 specified for addition [ 855.218436][T22037] bond3: option arp_ip_target: invalid value (0) [ 855.234662][T22037] bond3 (unregistering): Released all slaves [ 855.254890][T22040] netlink: 'syz.4.5256': attribute type 13 has an invalid length. [ 855.272755][T19972] usb 4-1: USB disconnect, device number 61 [ 855.328914][T22040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 855.412923][T13287] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 855.583028][T13287] usb 1-1: Using ep0 maxpacket: 32 [ 855.592006][T13287] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 855.607029][T13287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.616222][T13287] usb 1-1: Product: syz [ 855.622549][T13287] usb 1-1: Manufacturer: syz [ 855.628034][T13287] usb 1-1: SerialNumber: syz [ 855.638494][T13287] usb 1-1: config 0 descriptor?? [ 855.733834][T22044] netlink: 'syz.1.5259': attribute type 10 has an invalid length. [ 855.741763][T22044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5259'. [ 855.754931][T22044] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 855.861708][T22052] input: syz0 as /devices/virtual/input/input52 [ 855.881319][T13287] snd-usb-6fire 1-1:0.0: unable to receive device firmware state. [ 855.905318][T13287] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 855.952154][T22055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5259'. [ 856.125594][T22036] syzkaller0: entered promiscuous mode [ 856.133505][T22036] syzkaller0: entered allmulticast mode [ 856.264880][T13287] usb 1-1: USB disconnect, device number 66 [ 856.622717][T19972] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 856.782933][T19972] usb 3-1: device descriptor read/64, error -71 [ 857.042798][T19972] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 857.192786][T19972] usb 3-1: device descriptor read/64, error -71 [ 857.424084][T19972] usb usb3-port1: attempt power cycle [ 857.772939][T19972] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 857.793465][T19972] usb 3-1: device descriptor read/8, error -71 [ 858.032802][T19972] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 858.064294][T19972] usb 3-1: device descriptor read/8, error -71 [ 858.175292][T19972] usb usb3-port1: unable to enumerate USB device [ 858.645990][T19972] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 858.844768][T19972] usb 5-1: Using ep0 maxpacket: 32 [ 858.854898][T19972] usb 5-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 858.948066][T19972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.971332][T19972] usb 5-1: Product: syz [ 858.983727][T19972] usb 5-1: Manufacturer: syz [ 858.988451][T19972] usb 5-1: SerialNumber: syz [ 859.009748][T19972] usb 5-1: config 0 descriptor?? [ 859.264265][T20340] usb 5-1: USB disconnect, device number 76 [ 859.790115][T19972] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 859.933395][T22103] binder: 22082:22103 ioctl 40046210 0 returned -14 [ 860.253680][T19972] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 860.284811][T19972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 860.298242][T19972] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 860.401156][T19972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 860.549720][T22117] netlink: 'syz.4.5274': attribute type 13 has an invalid length. [ 860.590585][T22112] bond3: invalid ARP target 0.0.0.0 specified for addition [ 860.605994][T22112] bond3: option arp_ip_target: invalid value (0) [ 860.615926][T22112] bond3 (unregistering): Released all slaves [ 860.714646][T22117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 860.858351][T19972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 860.929491][T22124] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5277'. [ 860.960007][T19972] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 861.006423][T19972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 861.032706][T19972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 861.080505][T19972] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 861.128179][T19972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 861.204350][T19972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 861.240568][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5279'. [ 861.269719][T19972] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 861.298432][T19972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 861.369057][T19972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 861.399965][T19972] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 861.455520][T19972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 861.470108][T19972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 861.512546][T19972] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 861.557999][T19972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 861.716615][T19972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 861.740420][T19972] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 861.784151][T19972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 861.827767][T19972] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 861.848697][T19972] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 861.883591][T19972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 861.915667][T19972] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 861.934390][T19972] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 861.984866][T19972] usb 2-1: Product: syz [ 862.009238][T19972] usb 2-1: Manufacturer: syz [ 862.045575][T19972] usb 2-1: SerialNumber: syz [ 862.078320][T19972] usb 2-1: config 0 descriptor?? [ 862.196948][T19972] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 862.309247][T19972] usb 2-1: USB disconnect, device number 76 [ 862.361030][T19972] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 862.680465][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 862.680482][ T30] audit: type=1326 audit(1760505176.804:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 862.711413][ T30] audit: type=1326 audit(1760505176.834:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 862.747579][ T30] audit: type=1326 audit(1760505176.864:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 862.790945][ T30] audit: type=1326 audit(1760505176.864:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 862.813515][ T30] audit: type=1326 audit(1760505176.864:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 862.836026][ T30] audit: type=1326 audit(1760505176.864:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 862.860566][ T30] audit: type=1326 audit(1760505176.864:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 862.887542][ T30] audit: type=1326 audit(1760505176.864:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 862.911927][ T30] audit: type=1326 audit(1760505176.864:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 862.936165][ T30] audit: type=1326 audit(1760505176.864:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22139 comm="syz.0.5281" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 864.060938][T22165] FAULT_INJECTION: forcing a failure. [ 864.060938][T22165] name failslab, interval 1, probability 0, space 0, times 0 [ 864.074056][T22165] CPU: 1 UID: 0 PID: 22165 Comm: syz.1.5287 Not tainted syzkaller #0 PREEMPT(full) [ 864.074081][T22165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 864.074094][T22165] Call Trace: [ 864.074104][T22165] [ 864.074113][T22165] dump_stack_lvl+0x189/0x250 [ 864.074139][T22165] ? __pfx____ratelimit+0x10/0x10 [ 864.074168][T22165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.074178][T22165] ? __pfx__printk+0x10/0x10 [ 864.074190][T22165] ? __pfx___might_resched+0x10/0x10 [ 864.074203][T22165] ? fs_reclaim_acquire+0x7d/0x100 [ 864.074219][T22165] should_fail_ex+0x414/0x560 [ 864.074237][T22165] should_failslab+0xa8/0x100 [ 864.074251][T22165] kmem_cache_alloc_noprof+0x74/0x6e0 [ 864.074261][T22165] ? __percpu_counter_compare+0xae/0x2e0 [ 864.074274][T22165] ? ep_insert+0x272/0x19e0 [ 864.074289][T22165] ep_insert+0x272/0x19e0 [ 864.074309][T22165] ? __pfx_ep_insert+0x10/0x10 [ 864.074320][T22165] ? __pfx___mutex_lock+0x10/0x10 [ 864.074331][T22165] ? __fget_files+0x2a/0x420 [ 864.074345][T22165] ? __fget_files+0x2a/0x420 [ 864.074356][T22165] ? __fget_files+0x3a0/0x420 [ 864.074366][T22165] ? __fget_files+0x2a/0x420 [ 864.074382][T22165] do_epoll_ctl+0x7f4/0xe80 [ 864.074399][T22165] __ia32_sys_epoll_ctl+0x15d/0x1a0 [ 864.074411][T22165] ? exc_page_fault+0x82/0x100 [ 864.074421][T22165] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 864.074435][T22165] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 864.074446][T22165] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.074457][T22165] __do_fast_syscall_32+0xb6/0x2b0 [ 864.074469][T22165] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.074481][T22165] do_fast_syscall_32+0x34/0x80 [ 864.074492][T22165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 864.074504][T22165] RIP: 0023:0xf702d539 [ 864.074515][T22165] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 864.074523][T22165] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 864.074535][T22165] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 864.074542][T22165] RDX: 0000000000000003 RSI: 0000000080000100 RDI: 0000000000000000 [ 864.074548][T22165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 864.074554][T22165] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 864.074560][T22165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 864.074575][T22165] [ 864.931847][T22179] netlink: 'syz.0.5289': attribute type 2 has an invalid length. [ 864.951587][T22179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5289'. [ 865.100217][T20340] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 865.163636][T13290] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 865.266742][T20340] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 865.277326][T20340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.307170][T20340] usb 2-1: Product: syz [ 865.318134][T20340] usb 2-1: Manufacturer: syz [ 865.325630][T13290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 865.351737][T20340] usb 2-1: SerialNumber: syz [ 865.359458][T13290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.391146][T20340] usb 2-1: config 0 descriptor?? [ 865.406825][T13290] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 865.440488][T20340] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 865.454662][T13290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.541983][T13290] usb 1-1: config 0 descriptor?? [ 865.830998][T22172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5289'. [ 865.848152][T20340] gspca_sunplus: reg_r err -32 [ 865.854519][T20340] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 865.876468][T22197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5297'. [ 865.948060][T22197] netlink: 'syz.4.5297': attribute type 3 has an invalid length. [ 866.238939][T13292] usb 2-1: USB disconnect, device number 77 [ 866.512771][T13286] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 866.734378][T13286] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 866.769829][T13286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.785668][T22224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5303'. [ 866.885744][T13286] usb 3-1: config 0 descriptor?? [ 866.898117][T13286] cp210x 3-1:0.0: cp210x converter detected [ 867.387059][T13286] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 867.612080][T13286] usb 3-1: cp210x converter now attached to ttyUSB0 [ 867.720084][T22224] bond0: option miimon: invalid value (18446744072422816261) [ 867.750876][T22224] bond0: option miimon: allowed values 0 - 2147483647 [ 867.767372][T13290] usbhid 1-1:0.0: can't add hid device: -71 [ 867.783059][T13290] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 867.836005][T13290] usb 1-1: USB disconnect, device number 67 [ 867.953251][T20340] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 868.135048][T20340] usb 2-1: Using ep0 maxpacket: 8 [ 868.143688][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 868.155299][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 868.165440][T20340] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 868.175583][T20340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 868.187606][T20340] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 868.199484][T20340] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 868.259077][T20340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.283162][T20340] usb 2-1: config 0 descriptor?? [ 868.303084][T22230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 868.574784][ C0] Bluetooth: hci1: Unexpected continuation: 1 bytes [ 868.583172][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.590721][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.598886][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.606120][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.613336][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.620176][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.627486][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.634638][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.641592][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.648866][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.656107][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.663194][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.670087][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.677312][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.684578][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.691840][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.699307][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.706471][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.713740][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.720576][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.727845][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.735009][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.741910][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.749195][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.756386][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.763499][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.770393][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.782077][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.789257][ T5838] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 868.885292][T20340] usb 2-1: USB disconnect, device number 78 [ 868.887423][ T5842] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 869.157487][T13287] usb 3-1: USB disconnect, device number 61 [ 869.234582][T13287] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 869.266080][T13287] cp210x 3-1:0.0: device disconnected [ 869.813044][T13287] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 869.970438][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 869.970456][ T30] audit: type=1326 audit(1760505184.094:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.1.5319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 870.000004][T13287] usb 5-1: Using ep0 maxpacket: 16 [ 870.009024][T13287] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 870.024543][T13287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.035627][ T30] audit: type=1326 audit(1760505184.134:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.1.5319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 870.058063][T13287] usb 5-1: config 0 has no interface number 0 [ 870.064422][T13287] usb 5-1: config 0 interface 204 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 870.077873][ T30] audit: type=1326 audit(1760505184.134:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.1.5319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 870.100086][T13287] usb 5-1: config 0 interface 204 altsetting 0 endpoint 0xC has an invalid bInterval 58, changing to 9 [ 870.112023][T13287] usb 5-1: config 0 interface 204 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 870.122485][ T30] audit: type=1326 audit(1760505184.134:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.1.5319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 870.145869][T13287] usb 5-1: config 0 interface 204 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 13 [ 870.178164][T13287] usb 5-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=1a.0e [ 870.191932][ T30] audit: type=1326 audit(1760505184.134:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.1.5319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 870.217695][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.225588][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.240037][T13287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.256483][T13287] usb 5-1: Product: syz [ 870.265367][T13287] usb 5-1: Manufacturer: syz [ 870.283583][T13287] usb 5-1: SerialNumber: syz [ 870.295413][ T30] audit: type=1326 audit(1760505184.134:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.1.5319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 870.329977][T13287] usb 5-1: config 0 descriptor?? [ 870.407178][ T30] audit: type=1326 audit(1760505184.134:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.1.5319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 870.463233][ T30] audit: type=1326 audit(1760505184.144:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.1.5319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 870.521517][ T30] audit: type=1326 audit(1760505184.144:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.1.5319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 870.578978][ T30] audit: type=1326 audit(1760505184.144:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.1.5319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 870.614364][T13287] usb 5-1: USB disconnect, device number 77 [ 871.942822][T13290] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 872.142829][T13290] usb 2-1: Using ep0 maxpacket: 32 [ 872.190190][T13290] usb 2-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 872.316557][T13290] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 872.374543][T13290] usb 2-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=eb.19 [ 872.398198][T13290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.494572][T13290] usb 2-1: Product: syz [ 872.519800][T13290] usb 2-1: Manufacturer: syz [ 872.712765][T13290] usb 2-1: SerialNumber: syz [ 872.722831][T20340] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 872.746337][T13290] usb 2-1: config 0 descriptor?? [ 872.870345][T22310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5328'. [ 872.892789][T20340] usb 3-1: Using ep0 maxpacket: 32 [ 872.899467][T20340] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 872.910611][T20340] usb 3-1: config 0 has no interface number 0 [ 872.930836][T20340] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 873.040143][T20340] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 873.058914][T20340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.081932][T20340] usb 3-1: Product: syz [ 873.112212][T20340] usb 3-1: Manufacturer: syz [ 873.129460][T20340] usb 3-1: SerialNumber: syz [ 873.173712][T20340] usb 3-1: config 0 descriptor?? [ 873.194183][T20340] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 873.212768][T22297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.240581][T20340] em28xx 3-1:0.132: Video interface 132 found: [ 873.287419][T22297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.321476][T22315] fuse: Unknown parameter 'root}hde' [ 873.593778][T13290] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 873.607976][T20340] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 873.723700][T13287] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 873.754081][T13290] usb 5-1: Using ep0 maxpacket: 16 [ 873.761767][T13290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.772888][T13290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.782744][T13290] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 873.800061][T13290] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 873.811074][T13290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.826271][T13290] usb 5-1: config 0 descriptor?? [ 873.883126][T13287] usb 1-1: Using ep0 maxpacket: 16 [ 873.891148][T13287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 873.902246][T13287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 873.915042][T13287] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 873.924567][T13287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.932568][T13287] usb 1-1: Product: syz [ 873.936776][T13287] usb 1-1: Manufacturer: syz [ 873.941392][T13287] usb 1-1: SerialNumber: syz [ 873.948380][T13287] usb 1-1: config 0 descriptor?? [ 874.039071][T20340] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 874.052629][T20340] em28xx 3-1:0.132: board has no eeprom [ 874.112834][T19823] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 874.161625][T13287] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 874.174826][T13287] usb 1-1: USB disconnect, device number 68 [ 874.260031][T13290] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 874.270222][T19823] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 874.284368][T13290] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0020/input/input53 [ 874.296407][T19823] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 874.307599][T19823] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 874.322583][T19823] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 874.333863][T19823] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 874.346577][T19823] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 874.354119][T19823] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 874.364859][T19823] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 874.385285][T19823] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 874.398553][T19823] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 874.418997][T19823] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 874.435491][T13290] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 874.447456][T19823] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 874.461409][T19823] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 874.535997][T19823] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 874.590600][T19823] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 874.645455][T19823] usb 4-1: string descriptor 0 read error: -22 [ 874.651825][T19823] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 874.673120][T19823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.678732][T19972] usb 2-1: USB disconnect, device number 79 [ 874.689601][T19823] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 874.978566][T22334] xt_TPROXY: Can be used only with -p tcp or -p udp [ 875.002718][T13290] usb 4-1: USB disconnect, device number 62 [ 875.162866][T20340] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 875.162895][T20340] em28xx 3-1:0.132: analog set to bulk mode. [ 875.163788][T19823] em28xx 3-1:0.132: Registering V4L2 extension [ 875.177633][T19972] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 875.263488][T19823] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 875.264099][T19823] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 875.264709][T19823] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 875.265606][T19823] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 875.310143][T13286] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 875.310332][T19972] usb 2-1: device descriptor read/64, error -71 [ 875.361128][T19823] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 875.376312][T19823] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 875.388454][T19823] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 875.408287][T19823] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 875.413133][T13292] usb 3-1: USB disconnect, device number 62 [ 875.426375][T13292] em28xx 3-1:0.132: Disconnecting em28xx [ 875.454628][T13286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 875.476130][T13286] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 875.516081][T13286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 875.529379][T19823] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 875.538591][T19823] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 875.551978][T19823] em28xx 3-1:0.132: No AC97 audio processor [ 875.561837][T13286] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 875.571540][T19972] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 875.583227][T13286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.600039][T19823] usb 3-1: Decoder not found [ 875.605295][T13290] usb 5-1: reset high-speed USB device number 78 using dummy_hcd [ 875.610864][T13286] usb 1-1: config 0 descriptor?? [ 875.631096][T19823] em28xx 3-1:0.132: failed to create media graph [ 875.646186][T13286] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 875.682227][T19823] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 875.722759][T19972] usb 2-1: device descriptor read/64, error -71 [ 875.724843][T19823] em28xx 3-1:0.132: Remote control support is not available for this card. [ 875.729326][T22343] ================================================================== [ 875.745678][T22343] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 875.753217][T22343] Read of size 8 at addr ffff88807e354740 by task v4l_id/22343 [ 875.760749][T22343] [ 875.763074][T22343] CPU: 0 UID: 0 PID: 22343 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 875.763089][T22343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 875.763097][T22343] Call Trace: [ 875.763106][T22343] [ 875.763114][T22343] dump_stack_lvl+0x189/0x250 [ 875.763137][T22343] ? __virt_addr_valid+0x1c8/0x5c0 [ 875.763156][T22343] ? rcu_is_watching+0x15/0xb0 [ 875.763180][T22343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.763192][T22343] ? rcu_is_watching+0x15/0xb0 [ 875.763204][T22343] ? lock_release+0x4b/0x3e0 [ 875.763216][T22343] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 875.763231][T22343] ? __virt_addr_valid+0x1c8/0x5c0 [ 875.763241][T22343] ? __virt_addr_valid+0x4a5/0x5c0 [ 875.763257][T22343] print_report+0xca/0x240 [ 875.763279][T22343] ? v4l2_fh_open+0xac/0x420 [ 875.763295][T22343] kasan_report+0x118/0x150 [ 875.763318][T22343] ? v4l2_fh_open+0xac/0x420 [ 875.763335][T22343] v4l2_fh_open+0xac/0x420 [ 875.763345][T22343] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 875.763356][T22343] em28xx_v4l2_open+0x157/0x9a0 [ 875.763373][T22343] v4l2_open+0x1bf/0x3a0 [ 875.763385][T22343] chrdev_open+0x4cc/0x5e0 [ 875.763401][T22343] ? __pfx_chrdev_open+0x10/0x10 [ 875.763423][T22343] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 875.763449][T22343] ? __pfx_chrdev_open+0x10/0x10 [ 875.763468][T22343] do_dentry_open+0x953/0x13f0 [ 875.763489][T22343] vfs_open+0x3b/0x340 [ 875.763501][T22343] ? path_openat+0x2ecd/0x3830 [ 875.763511][T22343] path_openat+0x2ee5/0x3830 [ 875.763527][T22343] ? __pfx_path_openat+0x10/0x10 [ 875.763539][T22343] do_filp_open+0x1fa/0x410 [ 875.763554][T22343] ? __lock_acquire+0xab9/0xd20 [ 875.763576][T22343] ? __pfx_do_filp_open+0x10/0x10 [ 875.763602][T22343] ? _raw_spin_unlock+0x28/0x50 [ 875.763624][T22343] ? alloc_fd+0x64c/0x6c0 [ 875.763640][T22343] do_sys_openat2+0x121/0x1c0 [ 875.763653][T22343] ? __pfx_do_sys_openat2+0x10/0x10 [ 875.763666][T22343] ? exc_page_fault+0x82/0x100 [ 875.763676][T22343] ? do_user_addr_fault+0xc85/0x1380 [ 875.763689][T22343] __x64_sys_openat+0x138/0x170 [ 875.763714][T22343] do_syscall_64+0xfa/0xfa0 [ 875.763733][T22343] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.763750][T22343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.763768][T22343] ? clear_bhb_loop+0x60/0xb0 [ 875.763783][T22343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.763792][T22343] RIP: 0033:0x7fe9f65cd407 [ 875.763809][T22343] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 875.763818][T22343] RSP: 002b:00007fffe5e4df30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 875.763830][T22343] RAX: ffffffffffffffda RBX: 00007fe9f6541880 RCX: 00007fe9f65cd407 [ 875.763839][T22343] RDX: 0000000000000000 RSI: 00007fffe5e4ff1b RDI: ffffffffffffff9c [ 875.763851][T22343] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 875.763862][T22343] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 875.763874][T22343] R13: 00007fffe5e4e180 R14: 00007fe9f6826000 R15: 0000561537b524d8 [ 875.763895][T22343] [ 875.763902][T22343] [ 876.066506][T22343] Allocated by task 19823: [ 876.070915][T22343] kasan_save_track+0x3e/0x80 [ 876.075587][T22343] __kasan_kmalloc+0x93/0xb0 [ 876.080179][T22343] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 876.085555][T22343] em28xx_v4l2_init+0x10b/0x2e70 [ 876.090491][T22343] em28xx_init_extension+0x120/0x1c0 [ 876.095760][T22343] process_scheduled_works+0xae1/0x17b0 [ 876.101298][T22343] worker_thread+0x8a0/0xda0 [ 876.105874][T22343] kthread+0x711/0x8a0 [ 876.109943][T22343] ret_from_fork+0x4bc/0x870 [ 876.114534][T22343] ret_from_fork_asm+0x1a/0x30 [ 876.119297][T22343] [ 876.121617][T22343] Freed by task 19823: [ 876.125673][T22343] kasan_save_track+0x3e/0x80 [ 876.130353][T22343] __kasan_save_free_info+0x46/0x50 [ 876.135532][T22343] __kasan_slab_free+0x5c/0x80 [ 876.140280][T22343] kfree+0x19a/0x6d0 [ 876.144154][T22343] em28xx_v4l2_init+0x1683/0x2e70 [ 876.149186][T22343] em28xx_init_extension+0x120/0x1c0 [ 876.154466][T22343] process_scheduled_works+0xae1/0x17b0 [ 876.160007][T22343] worker_thread+0x8a0/0xda0 [ 876.164597][T22343] kthread+0x711/0x8a0 [ 876.168672][T22343] ret_from_fork+0x4bc/0x870 [ 876.173268][T22343] ret_from_fork_asm+0x1a/0x30 [ 876.178036][T22343] [ 876.180344][T22343] The buggy address belongs to the object at ffff88807e354000 [ 876.180344][T22343] which belongs to the cache kmalloc-8k of size 8192 [ 876.194391][T22343] The buggy address is located 1856 bytes inside of [ 876.194391][T22343] freed 8192-byte region [ffff88807e354000, ffff88807e356000) [ 876.208366][T22343] [ 876.210694][T22343] The buggy address belongs to the physical page: [ 876.217100][T22343] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e350 [ 876.225868][T22343] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 876.234363][T22343] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 876.242257][T22343] page_type: f5(slab) [ 876.246243][T22343] raw: 00fff00000000040 ffff88813ffa7280 ffffea00017ae600 0000000000000003 [ 876.254828][T22343] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 876.263411][T22343] head: 00fff00000000040 ffff88813ffa7280 ffffea00017ae600 0000000000000003 [ 876.272087][T22343] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 876.280743][T22343] head: 00fff00000000003 ffffea0001f8d401 00000000ffffffff 00000000ffffffff [ 876.289422][T22343] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 876.298088][T22343] page dumped because: kasan: bad access detected [ 876.304501][T22343] page_owner tracks the page as allocated [ 876.310215][T22343] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22017, tgid 22016 (syz.0.5252), ts 854205837194, free_ts 853727118553 [ 876.331753][T22343] post_alloc_hook+0x240/0x2a0 [ 876.336515][T22343] get_page_from_freelist+0x2365/0x2440 [ 876.342051][T22343] __alloc_frozen_pages_noprof+0x181/0x370 [ 876.347849][T22343] alloc_pages_mpol+0x232/0x4a0 [ 876.352691][T22343] allocate_slab+0x96/0x3a0 [ 876.357187][T22343] ___slab_alloc+0xe94/0x18a0 [ 876.361856][T22343] __slab_alloc+0x65/0x100 [ 876.366263][T22343] __kmalloc_noprof+0x471/0x7f0 [ 876.371096][T22343] cache_create_net+0x92/0x260 [ 876.375843][T22343] gss_svc_init_net+0x58/0x570 [ 876.380601][T22343] ops_init+0x35c/0x5c0 [ 876.384748][T22343] setup_net+0xfe/0x320 [ 876.388891][T22343] copy_net_ns+0x34e/0x4e0 [ 876.393293][T22343] create_new_namespaces+0x3f3/0x720 [ 876.398576][T22343] copy_namespaces+0x438/0x4b0 [ 876.403414][T22343] copy_process+0x1733/0x3c00 [ 876.408078][T22343] page last free pid 13901 tgid 13901 stack trace: [ 876.414556][T22343] __free_frozen_pages+0xbc4/0xd30 [ 876.419658][T22343] __folio_put+0x21b/0x2c0 [ 876.424061][T22343] skb_release_data+0x49a/0x7c0 [ 876.428900][T22343] __kfree_skb+0x55/0x70 [ 876.433137][T22343] tcp_ack+0x2266/0x6950 [ 876.437365][T22343] tcp_rcv_established+0x93c/0x2670 [ 876.442591][T22343] tcp_v4_do_rcv+0xa23/0xce0 [ 876.447170][T22343] tcp_v4_rcv+0x252a/0x2dc0 [ 876.451657][T22343] ip_protocol_deliver_rcu+0x221/0x440 [ 876.457109][T22343] ip_local_deliver_finish+0x3bb/0x6f0 [ 876.462585][T22343] NF_HOOK+0x30c/0x3a0 [ 876.466727][T22343] ip_sublist_rcv_finish+0x221/0x2a0 [ 876.472000][T22343] ip_sublist_rcv+0x74c/0xa10 [ 876.476708][T22343] ip_list_rcv+0x3e2/0x430 [ 876.481115][T22343] __netif_receive_skb_list_core+0x7d2/0x800 [ 876.487081][T22343] netif_receive_skb_list_internal+0x96f/0xcb0 [ 876.493224][T22343] [ 876.495534][T22343] Memory state around the buggy address: [ 876.501147][T22343] ffff88807e354600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 876.509202][T22343] ffff88807e354680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 876.517251][T22343] >ffff88807e354700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 876.525292][T22343] ^ [ 876.531426][T22343] ffff88807e354780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 876.539469][T22343] ffff88807e354800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 876.547517][T22343] ================================================================== [ 876.555637][ C0] vkms_vblank_simulate: vblank timer overrun [ 876.562814][T13292] em28xx 3-1:0.132: Closing input extension [ 876.593875][T22343] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 876.601079][T22343] CPU: 1 UID: 0 PID: 22343 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 876.610072][T22343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 876.620100][T22343] Call Trace: [ 876.623358][T22343] [ 876.626264][T22343] dump_stack_lvl+0x99/0x250 [ 876.630831][T22343] ? __asan_memcpy+0x40/0x70 [ 876.635395][T22343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.640567][T22343] ? __pfx__printk+0x10/0x10 [ 876.645132][T22343] vpanic+0x237/0x6d0 [ 876.649092][T22343] ? __pfx_vpanic+0x10/0x10 [ 876.653575][T22343] ? preempt_schedule+0xae/0xc0 [ 876.658405][T22343] ? __pfx_preempt_schedule+0x10/0x10 [ 876.663755][T22343] panic+0xb9/0xc0 [ 876.667453][T22343] ? __pfx_panic+0x10/0x10 [ 876.671859][T22343] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 876.677739][T22343] ? is_module_address+0x17/0xf0 [ 876.682676][T22343] ? v4l2_fh_open+0xac/0x420 [ 876.687295][T22343] check_panic_on_warn+0x89/0xb0 [ 876.692250][T22343] ? v4l2_fh_open+0xac/0x420 [ 876.696837][T22343] end_report+0x78/0x160 [ 876.701063][T22343] kasan_report+0x129/0x150 [ 876.705548][T22343] ? v4l2_fh_open+0xac/0x420 [ 876.710115][T22343] v4l2_fh_open+0xac/0x420 [ 876.714508][T22343] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 876.720468][T22343] em28xx_v4l2_open+0x157/0x9a0 [ 876.725301][T22343] v4l2_open+0x1bf/0x3a0 [ 876.729522][T22343] chrdev_open+0x4cc/0x5e0 [ 876.733916][T22343] ? __pfx_chrdev_open+0x10/0x10 [ 876.738834][T22343] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 876.745147][T22343] ? __pfx_chrdev_open+0x10/0x10 [ 876.750061][T22343] do_dentry_open+0x953/0x13f0 [ 876.754804][T22343] vfs_open+0x3b/0x340 [ 876.758849][T22343] ? path_openat+0x2ecd/0x3830 [ 876.763594][T22343] path_openat+0x2ee5/0x3830 [ 876.768163][T22343] ? __pfx_path_openat+0x10/0x10 [ 876.773079][T22343] do_filp_open+0x1fa/0x410 [ 876.777554][T22343] ? __lock_acquire+0xab9/0xd20 [ 876.782383][T22343] ? __pfx_do_filp_open+0x10/0x10 [ 876.787391][T22343] ? _raw_spin_unlock+0x28/0x50 [ 876.792223][T22343] ? alloc_fd+0x64c/0x6c0 [ 876.796527][T22343] do_sys_openat2+0x121/0x1c0 [ 876.801181][T22343] ? __pfx_do_sys_openat2+0x10/0x10 [ 876.806357][T22343] ? exc_page_fault+0x82/0x100 [ 876.811096][T22343] ? do_user_addr_fault+0xc85/0x1380 [ 876.816358][T22343] __x64_sys_openat+0x138/0x170 [ 876.821187][T22343] do_syscall_64+0xfa/0xfa0 [ 876.825667][T22343] ? lockdep_hardirqs_on+0x9c/0x150 [ 876.830839][T22343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.836880][T22343] ? clear_bhb_loop+0x60/0xb0 [ 876.841536][T22343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.847402][T22343] RIP: 0033:0x7fe9f65cd407 [ 876.851794][T22343] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 876.871375][T22343] RSP: 002b:00007fffe5e4df30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 876.879764][T22343] RAX: ffffffffffffffda RBX: 00007fe9f6541880 RCX: 00007fe9f65cd407 [ 876.887717][T22343] RDX: 0000000000000000 RSI: 00007fffe5e4ff1b RDI: ffffffffffffff9c [ 876.895666][T22343] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 876.903613][T22343] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 876.911559][T22343] R13: 00007fffe5e4e180 R14: 00007fe9f6826000 R15: 0000561537b524d8 [ 876.919512][T22343] [ 876.922816][T22343] Kernel Offset: disabled [ 876.927124][T22343] Rebooting in 86400 seconds..