last executing test programs: 11m10.076647796s ago: executing program 4 (id=3650): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80d0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)}}], 0x1, 0x4004811) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xcew\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\x9b\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l\xb7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\x00R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x04\x00\x00\x00\x00\x00\x00\x00\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd821\x9e\v4Q\xc6{\xa0\xf7\xcd\x82 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xcd\xefx\x0f\xf5\x85M\x14\xbb\xab1)\x8e%\xb7\x89\x17/') mremap(&(0x7f0000d4d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 15) 11m9.388084284s ago: executing program 4 (id=3652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={{0x0, 0x2710}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000003c0)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x0, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10}}], 0x2, 0x600c802) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550c, &(0x7f00000011c0)) socket$unix(0x1, 0x1, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 11m6.776118638s ago: executing program 4 (id=3667): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000003c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipmr_newroute={0x2c, 0x18, 0x10, 0x70bd2a, 0x25dfdbfc, {0x80, 0x20, 0x0, 0xaa, 0x0, 0x2, 0xff, 0x3, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_UID={0x8, 0x19, r0}]}, 0x2c}}, 0x8041) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@local}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000003c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipmr_newroute={0x2c, 0x18, 0x10, 0x70bd2a, 0x25dfdbfc, {0x80, 0x20, 0x0, 0xaa, 0x0, 0x2, 0xff, 0x3, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_UID={0x8, 0x19, r0}]}, 0x2c}}, 0x8041) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x800) (async) 11m3.622927141s ago: executing program 4 (id=3682): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x50}, 0x1, 0x2}, 0x8318010000000000) 11m3.463384618s ago: executing program 4 (id=3684): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) r4 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1) r6 = dup2(r5, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000002b40)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@empty, @in6=@private2}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000003c0)) 11m1.623832539s ago: executing program 4 (id=3693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x2ac, 0x0, r4}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000240)={0x4, {0x2, 0x9, 0x5268, 0x3ff, 0x3, 0xb8}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$uac1(0x0, 0x71, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) syz_open_dev$sndmidi(0x0, 0x4, 0x20000) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xfffffff7}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x25, &(0x7f0000001500)={r10, @in6={{0xa, 0x4e20, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x28f9fed5}}, 0x4}, 0x90) 10m46.441530089s ago: executing program 32 (id=3693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x2ac, 0x0, r4}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000240)={0x4, {0x2, 0x9, 0x5268, 0x3ff, 0x3, 0xb8}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$uac1(0x0, 0x71, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) syz_open_dev$sndmidi(0x0, 0x4, 0x20000) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xfffffff7}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x25, &(0x7f0000001500)={r10, @in6={{0xa, 0x4e20, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x28f9fed5}}, 0x4}, 0x90) 1m41.076078793s ago: executing program 0 (id=5421): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r7, 0xf, &(0x7f0000000180)={0x1}) sendmmsg$unix(r6, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="e9", 0x1}], 0x1}}], 0x1, 0x40815) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 1m38.206001354s ago: executing program 0 (id=5425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 1m37.923285458s ago: executing program 0 (id=5427): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) unshare(0x22020600) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x600001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x4, 0x4, 0x1, 0x80000000, 0xf2, @empty, @private2, 0x40, 0x8000, 0x8, 0x200}}) sendmsg$nl_route_sched_retired(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000000580)={&(0x7f0000008c00)=@deltfilter={0x5ac8, 0x2d, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc, 0x1}, {0x5, 0xfff5}, {0xfff2, 0xe}}, [@f_rsvp6={{0xa}, {0x864, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x1fff8, 0x1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xffff8000, 0x2, 0xb}, {0x9, 0x0, 0x9}, 0x0, 0x7, 0x6}}, @TCA_RSVP_POLICE={0x410, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8, 0x8, 0x80000000, 0x401, 0x4, 0x5, 0x10000, 0x4, 0xff, 0x101, 0x6, 0x9, 0x22dd, 0x6, 0x8, 0x2, 0x93c, 0x5, 0x1, 0x4, 0x80000000, 0x1, 0x7ff, 0xfffffffa, 0x8, 0x883, 0x0, 0x0, 0x1, 0xf, 0x4, 0x9, 0x5, 0x80000001, 0x8001, 0x5, 0x3, 0x48000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x7, 0x1, 0x7, 0x5, 0x7, 0x4, 0x81, 0x2, 0x8000, 0x100, 0x6, 0x0, 0x9, 0xca, 0x5, 0x64f84484, 0x3, 0x9, 0x5, 0x2, 0x1ff, 0x9, 0x9, 0xd97, 0x5, 0x6, 0x6, 0x0, 0x4, 0xd, 0xb, 0xfb8, 0xac, 0x7fffffff, 0x3ff, 0x7, 0x7, 0x8, 0x1, 0x7, 0xb1, 0x5a9c, 0x1, 0x56bec5f, 0x0, 0x5, 0xffffff46, 0xfffffbff, 0x0, 0x9, 0x5, 0x1, 0x5, 0x6, 0x7fffffff, 0xd110, 0x7a47, 0x9, 0x0, 0x1c, 0x8, 0x9, 0x7fffffff, 0x9, 0x8, 0x0, 0x1, 0x7, 0x0, 0x9, 0x1, 0x2, 0x1, 0xd, 0xcab8, 0x7, 0xfffffff9, 0x400, 0x2, 0xb, 0x9, 0x6, 0x2, 0x9, 0xffffa3b7, 0x92de, 0x8, 0xceb, 0x9, 0x756f, 0xffffffff, 0x0, 0x5, 0x0, 0x100, 0xd7b, 0xf, 0x5, 0x100, 0x10001, 0x0, 0x7, 0x1, 0x3, 0x7, 0x8000, 0x3, 0x3ff, 0x2, 0x6, 0x1ff, 0x80000000, 0x0, 0x2, 0xe1d, 0x5f4, 0x9, 0x5, 0x1ff, 0x3, 0x2, 0x0, 0x78df, 0x3ff, 0x101, 0x5, 0xd, 0x8, 0x2, 0x4, 0x8, 0x5c44, 0x8, 0x9, 0x8, 0x4, 0x3, 0x5, 0xc, 0x1, 0x2, 0x8, 0xa, 0x2, 0x9, 0x2, 0x8, 0x8, 0x80000000, 0x7000, 0x8, 0x2da, 0x1, 0x10000, 0x4, 0x10000, 0x1ff, 0x3, 0x810, 0xffffffff, 0x10000, 0x40aa, 0x4, 0x8, 0x2, 0x922, 0x5, 0xf, 0x4cc, 0x1000, 0xfffffffa, 0x8, 0x1, 0xc39, 0x3, 0x2, 0x0, 0x81, 0x8, 0x81, 0x5, 0x0, 0x6e4, 0x9f, 0x0, 0x4, 0x8, 0x10001, 0x1, 0x3, 0x5, 0x2, 0x6, 0x5, 0x2, 0x0, 0x10001, 0xffff9e73, 0x7, 0xfffffff7, 0x1, 0x8e, 0x200, 0x7fff, 0x5, 0x0, 0x6, 0x7, 0xc7aa, 0xf56, 0x8001, 0xcd55]}, @TCA_POLICE_RESULT={0x8}]}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xa70, 0xffffffff, 0x80000001, 0xffffffff, 0x635, 0x9, 0x101, 0xffffffc1, 0x5, 0x80000000, 0x3, 0x2a3ff64e, 0x6bd, 0x3a, 0x6, 0x0, 0xf, 0x4, 0x9, 0x6, 0xd307, 0x7fffffff, 0xffff, 0x1, 0x6, 0x3, 0x88, 0x8000, 0x80000000, 0xad22, 0x7, 0x9, 0x0, 0x5d, 0x3, 0x1ff, 0x101, 0x2, 0x101, 0x6, 0x1, 0x5, 0x0, 0xe, 0x1, 0x5, 0xfff, 0x6, 0x2, 0x7fffffff, 0x9, 0x1, 0x9727, 0x6, 0x1, 0x1000, 0x8, 0x7, 0x4, 0x3f0, 0x2, 0x6, 0x7, 0x6, 0x5, 0x8, 0x73, 0xa6a6, 0x4943, 0x0, 0x7, 0xe89, 0x4, 0x3, 0x6, 0x1, 0x8001, 0xcfb7, 0x8, 0xffff, 0x6, 0xa, 0x1, 0xb, 0x5, 0x9, 0x81, 0x8, 0x6e, 0xff, 0x4, 0x40, 0x8, 0x9, 0x8000, 0x2, 0x900, 0x220b, 0x6, 0x8, 0x3, 0x5, 0x1, 0x80000000, 0x0, 0x10001, 0xad12, 0x0, 0x3, 0x1, 0x2, 0x401, 0x7, 0x10000, 0x8001, 0x4, 0x6, 0x4, 0xfffffffc, 0x5, 0x6, 0xdd, 0x1, 0xfffffff8, 0x3, 0xffffffff, 0x8000, 0x1800, 0x8, 0x8, 0x6, 0x643, 0x8, 0xd807, 0x101, 0xfffffff9, 0xc4c0, 0xfffffffa, 0xfffffffb, 0x5, 0xffff, 0x0, 0x400, 0x9, 0x9, 0x9, 0xb, 0xa4, 0x101, 0x5, 0x9, 0x4, 0x1000, 0x401, 0x3, 0x8, 0xff, 0x8, 0x7, 0xb43, 0x3, 0x8, 0x8001, 0x7fffffff, 0x0, 0xffff, 0x8, 0x9, 0x1000, 0x2, 0x2, 0x1, 0x8f, 0x6, 0xb, 0x2a7, 0x0, 0xd04, 0xffffff9e, 0x8, 0x6, 0x2, 0x7fff, 0xc, 0xedb9, 0x2, 0x9, 0x9, 0x8, 0x1ff, 0xfffffff8, 0x1000, 0x7, 0x3, 0x8, 0x2, 0x8, 0x0, 0x5, 0x50e, 0x7, 0x3, 0x0, 0xfffffff2, 0x4, 0x700, 0x80000001, 0x4, 0x0, 0x0, 0x6, 0xb699, 0x3ff, 0x0, 0x23, 0x9, 0x9, 0x2aa, 0x9, 0x6, 0x4, 0xfad4, 0xfffffffd, 0xffff92b9, 0x9, 0x3, 0x8, 0xa2, 0xfffffff7, 0xa294, 0x8, 0x4d3d, 0xc, 0x6, 0x96bdca7e, 0xffffffff, 0x6, 0x8000, 0x80000001, 0x8, 0x10, 0x1, 0x5, 0x2, 0xa, 0x9, 0x8, 0x6, 0x3, 0x1, 0x0, 0xffffffff, 0x1, 0x9, 0x40000000, 0x3]}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x101, 0xbd73}, {0x81, 0x1, 0xfffffff8}, 0x2f, 0x39, 0x4}}]}}, @f_rsvp6={{0xa}, {0x1964, 0x2, [@TCA_RSVP_ACT={0x4c8, 0x6, [@m_csum={0x118, 0x16, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x1, 0x2, 0xfff}, 0x49}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xca, 0x3, 0x7, 0x26, 0x6}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0xff, 0xfffffffffffffffa, 0x7, 0xfffffaee}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x3ff, 0x1, 0xe, 0xa54b}, 0x76}}]}, {0x7c, 0x6, "e178daef4384e8a481652021c12a8e890fcaa56bf0d7ccd9daa5e0ea2e3c6c7b40c7693ba26f998a8ab3305fbea4ab0c5352b2cf1f05d3239746e5832e776a4691bcad4d64f3c6e74a12114209b5ed7a19762e648d3b3cb5a467a946aa5963ae5a209215b7ec1bbafd2f21307db135613e49f69baa09b342"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x1c8, 0xa, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x9, 0x2, 0x31c, 0x2}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0xa, 0x7}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x400, 0x3, 0xb, 0x9}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0x3, 0x0, 0x7, 0x1ff}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x800, 0x0, 0x1, 0x8}, 0x4, r2}}]}, {0xfb, 0x6, "13b1f43b3a45cdbdb2f3ac2988434373a64510d309a2dae717d83188d1d91c355e784c6e9be38a03ecd933c8593adc330dafb2d6c490e1f13e8f678d0588bb8b7580e6ca592e8f0176ae5be88c7f8c90f349d4428a71d683ccb401c8b39753ffd0b3006aae53d9ef50b332d326fc355b5c0e202c1ffd41200cb67b21a6d6dcbde00b954a0833baa28228016b86641ded9d6e7754e49a3524c7e54f35f64258aedf445b9270e97243e2bd417396bee9e3860dbd5779f92f0cbaacaaa5b8f13ac74ed07caaf763b478ac12db22d27f602218db76a878f812973a41db0ca6623684ea55b371e1320509014ce07f52bd279d13b79eae70602b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x88, 0x0, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x40}]}, {0x29, 0x6, "d6de05240dffccb34f345b696c4de770cca29bb3c35663c523e9b0dc594cd07280756d8566"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x15c, 0x10, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x88, 0x6, {0x0, 'mangle\x00', 0x0, 0x3, "6da58fdf786db94cfa60871ba641165adfddbb300a7131746237516d74e0b0590278a01bdc204dcbf668b9a449eec9818655d295abf4d5f12a013cfea171395e21acca9e4b2b97ad647fef3849a004c2f874d5e8d0a52d84f3c684555408"}}]}, {0xac, 0x6, "ad9e5d122de5048eedfb29efd6ec84191624890f9b85b35e8a77fee7604f5982f7f880ab466d981aed04f70c578719ab787ddd78b1d30c59fb3e004b9fa18535420f4e26859747228bf82509b5486984c7878b9b04dd6180fedbab07e76871764a10efab2cf4500092e1458918486c7d2de09e65a142ccc8272efbf2b9950550920411723367cabe1c9fe174a29b507504f95eb8f94f8e58dcef43f17cec74991a824256afcbb923"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_RSVP_ACT={0x1484, 0x6, [@m_csum={0x210, 0x5, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffeff, 0x2, 0x7, 0x4, 0xc1c}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffff7, 0x0, 0x7, 0x7}, 0x23}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffb7a, 0x685b, 0x2, 0x9, 0x1}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3d1, 0x6, 0x7, 0xfffffffc}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x7, 0x0, 0xd}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffcffffffe, 0x1e33, 0xb696}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x179a, 0x7, 0xb12, 0x1000}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6be, 0xc, 0x6, 0xb3, 0xff}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x3, 0x7fffffff, 0x3}, 0x7f}}]}, {0xe8, 0x6, "68b9bd9be0ff3abe6d0f3999543f32efe832c49c3f5bfd56567b661b3a4c3d1ea77547c296dacc7aa30cbc46e5ce0001029b61188e11025c08fc332f013562a4b4f0329783e69c5174b0784716b78ce84ee997e78309aa6cdb49e257eafbe9f3fa1a257d122ab12bff3da66495e5e0f3b5b18f3ae9a31055be1286dad2225bc7184133d22f7bce59e6822a15764412e0c93db66894ba8ec13e456da948048f3874ba404491e07e1347526fa4b7c4dec2704edbd0c1cb3cbbb93a556e638ffe75e1e901931c7750d5a1744905ee2b9b117f075adc45704c92de60f4e9d83daf662482143d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x10ac, 0x1e, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x638a, 0x6, 0x7, 0xb1, 0x7fffffff}}, @TCA_DEF_DATA={0x6, 0x3, '}\x00'}, @TCA_DEF_DATA={0x8, 0x3, ':%&\x00'}, @TCA_DEF_DATA={0x6, 0x3, '.\x00'}, @TCA_DEF_DATA={0x19, 0x3, '/dev/bus/usb/00#/00#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x800, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x5, 0x3, 0x6, 0x80000000}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x8c, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x40, 0x6, "84426dc1844539575ca60fc82fb77e1dec7644cbe3f00c2d4c324f38662d4821525fdb45fc8b147e9fbc8bbf266786eeaf685bcd7f641589ace5e907"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x138, 0x16, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x29d60fe50054a54f}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc27}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7b4}]}, {0xe4, 0x6, "101948893cdfbe0ea23cd9681b68cae503eea7713d0d5c7de453c9af08c599d4a78f04f037702ed932830cf49685f70317648649bc76e6fabaeac4cbd4e2905106e62c8065c1e4bcf728e3cc485df9155cc024ddbc80f1da13c8bca48af0385946efb65c2603c91d7d95082054464b68b3ad4058b59e4a77b9e0189db6faa056bf944c9bc3b8e33383d71d31d9c077f25b4122ab969636cc1bce24a043a918988cdae682b5748571f7ad290721fef41bf70c20df816aa1218e69c092d13fa2e6f0da3e6a8528012b707de895f215c56a6eb6d103f0983cfc8435f00735a15432"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_RSVP_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}]}}, @f_rsvp={{0x9}, {0x38b8, 0x2, [@TCA_RSVP_ACT={0x3668, 0x6, [@m_ct={0xc8, 0x14, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_LABELS_MASK={0x14, 0x8, "025aec62b26db799628be447629fae59"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x7c, 0x6, "fc14f5523e7c808800d35f46a2665c5b082f3602ff7202ff49ace15ff926177ad523c6b5aab62b86e2f825088005365c665a9fcedf8cd87e90367fb7790d451ed3ba0f8890a8e57d00743f9ba21639349171e83b780df72e2b404d4745860cc98bf48069afbc1ee5be42a27b9a64d10c17b193cb4a68fa08"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x170, 0x6, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0xff2, 0xffffffffffffffff, 0x3, 0x7}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x77, 0x3, 0x9, 0x1}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0xfffffff7, 0x5, 0x3, 0x9}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x7, 0x7, 0x7f, 0x7fff}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x258, 0x3, 0x80, 0x2}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0xffffffffffffffff, 0x80, 0xba4}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xffffffff, 0x10000000, 0x4, 0x5}, 0x4, r2}}]}, {0x64, 0x6, "ea6f8a83ab10896026fdc524e20a7d0439888cab0195f47a1e17ceb6b2dd6f46656f9e5276ae8a4bee39c148aca399f1368e065c55252232881207635ecc9def783ee7b5b675fb7a07f97f4f33ec99b6618557f44dba8410e069683dd6a2b8a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x158, 0xa, 0x0, 0x0, {{0x7}, {0xdc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x82, 0x6, {0xe58c, 'mangle\x00', 0x2, 0x9419, "445f900e9ee1476a3680c4ada4de68aa77324af542cbf6cfa247f847d957ec46ea90a3b1e4c170d18fd0d79701c6564c4dffc4a24d08b66dd7b14102237d37e67547696c588887215dd9e88d54faff53c0c97968030db30c"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x43, 0x6, {0x4, 'mangle\x00', 0x6, 0xffff, "7cbe758bc828767265e4b177e43952c316fd3834529378f8a8"}}, @TCA_IPT_HOOK={0x8}]}, {0x58, 0x6, "9ac6e133e15a5de6cc099d5b57cfff00dfe69c52b4ea8a88927afee9efc48295b30e3eba68d3e29363049027a836a69f2047630e7f6b3910da03b68417835292c9e65be676a652336ad2c0ad1cdbe20a61942b63"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x106c, 0x10, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x6, 0xffffff00, 0x7}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc0000000, 0x7, 0x6, 0x7b5d}, 0x1000}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x1060, 0xe, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x16e6, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7, 0xe7f0, 0x2, 0x7, 0xb}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xc91, 0x5}}]}, {0x1004, 0x6, "49e2d608f3659013e9587d426af02491aedbf1fed79a3af1b60bfd8906d52a0b85ef5778ce997b4ab692827acbeedcc41b0b1bb89502e1b6e5361e3957cf1ec97f5f76fe8d8f7c41a46bbbbcee81d6e6f2863e1ffeba9c8ddd29a4dc065296cda7ffd55c2fe52977554691a19e8ba5a70f7e642216302cd82f4c1d94fe65d43ea626ca664555334ba92c612c2c0589d15d8a2ca518e89717589a5ffb9870fe14d140dd0368a460965fb10f0ff3c85f55d347d7815c7170f8af600375b5d9be95fa2ae4785d138a5772397f4e10005895d4ce4fcde941b2ff0de398d51a5b96557ae09aee04708f3f3c49ee68144145c1648049ed4a36fd7a90cc9ed274e6f2769e9888281bfd865578f8f4afe03b1f12c8bbd0e04cfef9bedee49410416b48eb0b20ac35e92401530d3575e0df35585efd91b84adcef6335ebcb4cef9e6c0e94ba1b3d097069b65b1b74b0cce1395fbf9f7d5d55858f413e18f10a01c51346c9878d657ed1abe13ff6c4e400b92adfd3a3893e4adbd56888f873c46520f4318b92de0a21f38a22d3fb8808a558af13941b77da5a34d1458b0a9e1630a732e6485c59dc19b0fc39bd36694f51ce30ba863171c6a232567a9180b336c6e442b975e38d346a7c9694d968f71e4a60c2be15ec7c71c79f7faab0610def11a2ab56b44c4b9d98f47ab533c1d91be7aba5de07be0b97882557786fbd5c9943bc500bac2ddd7edb5144c1ec86689b0a9f6ef6f44f7c48f26d0aa9fa0881f3b55de3e0e6e97a6ce81b5e86e6a7389e2191b84431f07001e57e043335f5d280549ae3bb8eb65606d1711b5f9062e2f175070377b4e49dc116139f1f5cd9df744d121ef8a8a1768550bb15a22b96953474f2e9a5f4a4788b3d190b9c974bf44dead6e33564c3fa020ce456201e1b7bee9053fcb84d96ae96a023d440070a19c16074777993f4917667e9b113eaf7c65b04b27e19d8cf9a79dbd44c8a16e6db4656a364fd618506cef5885ccecfd81154d55289eac8f448b04b9aa96ec425858b1caf3501653bb6e2b61cd3cb53dcc2391b172c7cb43f79f1b5818c920dce20d5b458aab9b0489c0fff2c85edd721cd6c8c0c1ba5def3045fda4cc13d704c89de50e45e03f01f33f5a606f8611b3387cf03b6b579b4b438475529ce5d93ca400db87c280ebf128a5f06560e436f7ee33a9495dfa41f0eff4351086e95f05d00b4655bf979154c6cc5dc139af59854cd8e54883130c0637257d24fb4d4800f2ba676e03ad5b01550ae74621b5ea9cdc1d42c1f2e4233f57b45dffc478b0bea676b8cfc62917368d3b80709d9305c7bbae6a39ad337191051e6fbf62aef2cdb01c72018f847a16634194a86b58c80dbcadc00808238a1ebc351a9caf0e4c7439d7774c984157ca6fe69a3d6bc7c694d2d2be4ccc3ca1cdd15111788615ed5f2f2f3e14efd74d90d1b92a1b2ba49c9771e71a3e41230eb210f3e4156a6176d8b589450cfc591896b286fdc70e19ba5676bd33f12a273f06c90fa9426b0a8c329239972af0d6ac6ff52d13cd0de021f6de528b85d5a2fcdcaa912845dce7e01cc1827f7e5a18cd2fd8dda9595c95b1c59f80b53d451eec891955f32e7bc94fd194883eb3868181a3acf5a7331d69b7cb9ad4c372e246cc52116352c799550547c4d156e10dbbdf889fc4db6fa5bd8eeeddcdd738f731675102ae9cca62836093cf007f8c1927cd98f96a2a111995686c20f76b90abdedeb19f1713255224dd77529b5b2e4b6e7fc9beed03500ea0fff42312dca7181d1ac2b3d9f8d7817c487830f8e9f5b4656bead537dfac89c4c569c4df7a65f68d6447487f766ee3dd12fa4bd751508e274b5f2ef04c79d2576f07fdf2de6dab98e85d11c740985dfa5c12bf28883741407aea74e461767f1048586633fb09e2cc1aa3ff10852c862ecd03f43998163170a7869d9a93f094ba6a0ce39a533138b7f7fd75c672756d33aa7a53848efb1d8410dfb873b652b49d8c885e94c39a1b21dcd52822584418f6a65bdc666c95f3de37e50801d8c3bbc05ce38b7e2ab4eb5facbf8cd4d5524904c36efa142386d098863e2d507fd669bc18bd7cb45902af152df4be769f156e51965b1688656f4df6e023cc866d34db4cb1a994a56d5e126e9dd77e0cdcc7d8cf6fa66aebe2a2d03f53980e344a867a874404169b22873925f670f934f7425b7c82758646e0f9fa70a3c788dd17d1c7abeacfa81bef597418360794399cfb881ecb98df654f76bef3634843bbf4ac60249f2ef56d654463f30e4c4b865cf79c6c7f6787a458eae1305cfc5d192ba0d112b63efb1e67e9393022c87a81b00e621b831f8628974f8a414eba84638d809f279a21379775b9224c8ae9df61b6115d30c01eb1e5cfb460c781d1f24bef56243aed84be57fc4238f0aae2863047a5bb9bed1e65faec74cda87f859d262e31f7faca62efaf5168a5bd11af84108eeb9fa98dad35ab77ef9430b8caea65a9ac8f161d213fea0b47b61a58f1972f5e0699d084868aeb966b09e1f73d9c496c828557ae3d744214e9d4478056469afebd19db2b030496273baf06ceffeb235610d7b3d8a37cf1d78cd8d93232eeabf279f6a5233d6b033a2ac7f3d1f4f4a789abac7812eebbbc0c6793c9c617223c837628a89cd017df6329b9dfdde3841b32e6bc51d63436f21a5f684577956bc3880f7de41d02164c6ef600849f41c8c6fb8255c1138112649642d862ae6071d50beb8aeb3a4959bfdec7099d370fde40e83531a5993652bcffb2808b6b70e277686584f14ed1be466e2dc2e087387d1a20ec501598c0a8b92c152cb5a5f55c1fab9b6592752de77eaa7efcc69cda134a6333791c31dc41f94583016105e0fd42a9c2932571f997ac700f15edff61036fe309d6e6c40ff4a59071bab6a1741271abb58758b6a84197d8e5726a75adb6b6715879228897b76da8d650ccfb7d667a48b4627e1eef2bd2612573b8fcfec95be0ddc6b85eb7d2c8514c9965db5ff1c16f526b0c2e8dda9e5eec96e761c44b6cc2fe0d6cacb37b4a56ac5fa040d7188b5d9e533ed75c7b17fc04c00c0d007283a55fbb58b3b51e05a5e30e469c238b65b273a11169e2e661db45463bbae21c76716c001a1a2fb6cef432ba07e972963b387491a10d10daab97d0f2ed77b89a0e2839884b3049f0262fa76de5b8f1ca2d1882f7e3352ef94008a6567b703a58e9903ab2ffc3acb56d27cccb77b07c4bd95bc074493af3c201adb64a8343082cdc98de0d70aa204183eeb8ffc0c075914b159ea5b4053a0ad12a6e2a3a3c3eaa30a393b041bba657a3007ea2941a09ce45920101f6dfbe432f4d3d071997e5e31016c7da8faf4ec9272a174fdcba941e17527abe5b3ed9a369335b3e809377996e53f4ba193992cfef883324274da86f4a29dcc9286fb1499275f5a31e902bfa7e9c25422be2444e5294c4ddf24efbbc74fd9bf4de961ec858207de6e03b80db05015efbc40025aef2c96f1f0c42dd2eafecaa149cea320f29e8be1297eb7d9dc911f4c677d53412e4fb00166a82d38c221da61d955d56965f1c303c0d3771c8b5bf6e540b6447838f92d11904dbf20f54c52b25fd491d5c94343169f2878ebd240e9d661d7f8da0b1b43e31a604257f95422dcf5c526876bfb1a1a987094d9fb22775a44e74ade326f65713d02f984e55dc1936357fa314f211fd453f6e3d4421891b1d43d321a788b24eae0d0a95289cd2b9ed5c7936eb492640053f3dbe03f1112961725b238f43eafe01dff4a5e94523db4d70b18b3a98d4fa9da9d4f45ed092930f51c0271ee268d6c2ae9c06a633230e93611b0e26bf88188ddae108479d42b454439668d719a4b9d3b2303d523a676c6b2a41dac3fddf604670c09e49e1adea06c140557c65c6485e636f03f8eb576533adc4405c0ef9cb1c237af5572171c8fec15a7b5c3c422a76c830b2d77b39608fbdfe5ab95ed4e91cc3e6f86880c0c535402cffdc50d6fe3953651db9f598a03e732e5a394882a71ba96eae3397deca690f96428ea6672f975278c37ab8452f68e96d7dfdfbdd5cc2941a8871ee809f0909e235004ccedd74f5bbaa06aff20d5458379523553f0cd1e1053761c16ad02a978ccacad9f22600d5b4df09198fb6dd66ac6604b9a215284e0eaee69ce8d42d0927192e3b17779eb7a39349e0d1a499df0003566c2f6fe06a847f16ccfb0d9e32bfe43550c6c7f5487f0f1faa17f10f932d49c20a74d34a7729d9aba63f117594bd11ba4c21038784192fd863be7712767299f7f25b7966fe8f69828510a99115e212a2f0d3d7cd6b1f376a54cd76a794e012c37caa291aa2590bc7d8da35248fd39d4d72cde3e56fa10598452ad5522f822c29c50ee98624c0f2e6dbfa6f2803a7314f3448a9119e8cfad0413dec6fc6562ca1aae6932cdec441893a16992acd20f0fd90dce6519e8619dd3709b68c52173ec9347e38dffc8478ce153d681ac3e5e856e78360a2e60684ccb3ef3a2c8d0ff38a8c8b9bad1a135481308f33f552149f8cfb00c5e557d64cf4b2a61f199cac3c1b40386cb6fce4f7c4c30bfee86d00a78c08bacd7ceaffad0bf976e86a1779ab2d6b90dbf732f672f030c379736ac6ac8dbcf876a34f1d131ecf817c92372fe7aa8f46cebd5c8867f07b06cdc8d29d918c50c92e17f305359cb593b41abc2418d22b1961b2ae7366c4bd0921ca3dfdb73c78368ddb4aefbb362f45355f765a978b2cd30454b60dfaf7363f2196a274fe81f01d6d4ce538c9ee3e412e0cfc54034048ff54cc9c93e42c421a3cbdba31a268e3d55d6b5d91abbcc29aa6472927da5fd279e9ba4896ee9a9e0c3f06a951f39f9032b78c451a4e6e66c56bdb491e1f20d99eaf0a11943a2c9b8e5839b2df8ea9e1ac12ee25dd9e0cc65fe81d62c0028b5a57c359ffe0582b8551bf28fbc1ac88da2dbd6262a6fb97b6d050572002240cbb058cae7212617e76c9a18fe6d234751f81a1a1bc020f9c8fe7a0d01fc0cb663fc220c4b1ee03aff7a3ae75b9405e22c206d57660efc258d22f90acc8d5e40dabc0b988ac721bf297b321e6ca90596998e30eaa21ad9300dcae18b4e787cfc1a14b70f505248b616540cada1c8804e3bc206a986de5e65eb5ad5198193c7cf0ed69745bdc4ebb5efee7d233ff1ef6f42410bccfebc3fe38f9c8b1d19dcd052f031cf00fc459598496f7cf262ab6655d1db66f596b4e2f33c5736e5e88d57bc8ae79b8ec5d47f11a68c5fd7f827a6d537972a03d971c648b6a87ee1e9fef81398084d8e1b26766c8235f8ab54e53cd935840a961e019bd9f253bde01303a9ae10702fda9e6db7510d52eeb143d08590b902bb872b4f6ef255db0e62e8fda6cc0f0ab3ecbb50093301bc3ecf2e4bf5dc66705a788aafee2c65616bd4b21f56bae6b2ebdd25b58a49554d117fdad7061fcb8693da488498e0569801d396065bdc50a64ea41a0a4adc3d45621838b94158cca27feb01218334ae2e1e2f20a0432942a7addb710d5e6515573663435bac8ddba1b81776101eb60e2a2f28e5807e1121d85c36b334298ab421b82ffcf55097d5580e83aef7f9f88c9dc574570c2418230221b155756456572f71a00d377676bd60bc6ae1517263f5b86d2e9c385caa642de4f4cd17b38b6a5a74598503248751eddf026735e242962c9a6a3dd28b3a00d420ae1f8deb45b9b6432875333da2b23ce9f32c42549ebd630fa24325c3932aa3f35da06ef137aa3b5eaa90e1e844e6d13996499430d599003e15fc2f73ab81e3a5fa768f32"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_vlan={0xf8, 0x13, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffd, 0xf8000000, 0x0, 0x5, 0xfffffffa}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x194}]}, {0xa6, 0x6, "9b8649e73a42de97d0483240499bd2eb1718a052c3ff518c65365595ad06a779f26aac8d685fd6f6ad104d984b663cd85a5fdb29aca890b3db4fb12c49f234d506854d55a6792fcd07625173dbac1f8ca89feb70f9e2b00cfa4227f5778e36555536d35f15f17de91c2cb2121efc15a4275c1666cab6630280279df09c2cb6ccefc78a4dcaaec7ab53fa2a1d3b08cae9fafa2a54a7ccce66b7a7e0281d47a988f580"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x94, 0x16, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xcb0}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x40, 0xe5, 0x7, 0x0, 0x303}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xb3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7f}]}, {0x17, 0x6, "056c1c8a4e83158d819bc12d9d9eca7848a7ac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x107c, 0x12, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xbbe, 0x3, 0x2, 0x8, 0xea4}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x8001, 0x21, 0xd, 0x9}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x3}}, @TCA_RSVP_ACT={0x244, 0x6, [@m_skbmod={0x130, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7a2}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xf1, 0x6, "19c0eece7ea3e4274b0d2ef70f1777fd4fde0258347eb2d2951f5e67f105991e5a3714805c6ab7c7fed1f58c39125ed308b0ddb9e2038dbafb9ea3ef25e452422c5d640034cf1f82a7d0b9cfd7ee94f81e678f902159216f01460dd2919331f99274e121c8c2e2ccbc6a0bcb71e502712b7902ba8b0da0cd1eff71d547873312e88ef1217a79b5b70b4be12bfbb36ff571138ed77b3bc725f905b9888292f8aecc3d5e5d0cc2ccb78ad8ca8c149dddc69e5a17257e8e26d78267bc0e35371f48f74c33fccac0c17cc176e632409735d5d20f0fd2ff1a2b211afa2bad5c2f6a1f5273bb6dbaa0180a51c79b8c48"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x110, 0x11, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x200}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x400}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0xa2, 0x6, "fb55390b6bf1f2aa2ec4503199c2c351e611badfefa827d72a2765b076e1a23f5e163ac87f5b36b7ff7dbff71a42bca19014fbdf1db3c05898d3358ad2350d972deab3cfa89f5e267a92b9c833c33183425f541700ea87143c8831ab102a792668fffa47edfd7731a691a03942b1d4f8d79ba3a4814a8730399f48df4b51f586cfdb589e20bf1809bcc87acbeeda5da75130a3464d2aaabe430594d2623e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x5ac8}, 0x1, 0x0, 0x0, 0x40801}, 0x40000000) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="66643d89a5f80214332ad95337e63b0939cb7cc4d082ebbf36d7f05b972ee87a82474c7d4b0c851f00da21dc11eeb1920e28626ee811afc324dd9341167cbfe866b72f7e40841367d5f584b23104c1f1adef94f79bdec69fbd16b7565622f1b10e00e917e3b6becd2270ce14aab9167535d179be6f193898cfc2e6646eec19b200a6f0b4158724926084f94cc9fd55866e7024fbb1b1a09f6cd904f08786bfaf", @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) pipe2$watch_queue(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(r9, 0xc0206434, &(0x7f0000000800)={0x8000, 0x0, 0x2}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) 1m37.681470724s ago: executing program 0 (id=5429): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYRES8=r1, @ANYRES32=r3, @ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="0a000200bb"], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') fchdir(r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x10}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0202}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f2a000/0x4000)=nil) readv(r5, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb9}, {0x0, 0x9}, @control={0x9, 0x5, 0xa}}, {0xfc, 0x0, 0x0, 0x0, @time={0xffffffff, 0x3ff}, {0x7, 0xfd}, {0x0, 0x3}, @addr={0x2f, 0xc}}], 0x38) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f0000000540)=0xc) r8 = fcntl$getown(r4, 0x9) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) syz_clone3(&(0x7f0000000780)={0x40100, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000340), {0x1b}, &(0x7f0000000400)=""/116, 0x74, &(0x7f0000000480)=""/175, &(0x7f0000000740)=[r7, r8, r9], 0x3, {r4}}, 0x58) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m37.343208985s ago: executing program 0 (id=5431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m37.057028986s ago: executing program 0 (id=5434): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001e00010d000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="8e3a35d3ff153cdd110201a0000001500400"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000091000040"]) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$inet_int(r6, 0x0, 0x19, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="b97d26bd7000fedb04254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x20000000000000bc, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r5, @ANYRESHEX=r4, @ANYRESHEX=r5, @ANYRES16=r0, @ANYBLOB="375978e6523d2cd226acde1a3d88b5e1bdb70369d7fb492b1ffd9ae982154b25668546811b6247dce290203d356bc6aeff706417b190cb8d8e6776f88dee35b2eb6a9f173538cac3a9f90da233f9242ad4100f54e3975dfd89d86a1842513658edaced9869de8d4c5630e1ad19e38131c0868cc4452372809b92fce7ca09a808b7f40a714d4e8d41be48152f74d32f44d5aab1acf599f260bfab105e0e32659d4846742661b994a0d5834d94cc4a6b207d7e715979285fb64b0d8d2101c5865d96227d93214bb0e6fd2d"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x28}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000120400000000000000", @ANYRES32=0x0, @ANYBLOB="c088010000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r9, @ANYBLOB="fd6d9d95254ed52586100c4bd5a300e117191facf7718cb4de6707e05084ad353127196df25a76d87a4c3e363bb7b38e2ebdda870566"], 0x3c}}, 0x0) 1m36.680645174s ago: executing program 33 (id=5434): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001e00010d000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="8e3a35d3ff153cdd110201a0000001500400"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000091000040"]) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$inet_int(r6, 0x0, 0x19, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="b97d26bd7000fedb04254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x20000000000000bc, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYRESHEX=r5, @ANYRESHEX=r4, @ANYRESHEX=r5, @ANYRES16=r0, @ANYBLOB="375978e6523d2cd226acde1a3d88b5e1bdb70369d7fb492b1ffd9ae982154b25668546811b6247dce290203d356bc6aeff706417b190cb8d8e6776f88dee35b2eb6a9f173538cac3a9f90da233f9242ad4100f54e3975dfd89d86a1842513658edaced9869de8d4c5630e1ad19e38131c0868cc4452372809b92fce7ca09a808b7f40a714d4e8d41be48152f74d32f44d5aab1acf599f260bfab105e0e32659d4846742661b994a0d5834d94cc4a6b207d7e715979285fb64b0d8d2101c5865d96227d93214bb0e6fd2d"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x28}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000120400000000000000", @ANYRES32=0x0, @ANYBLOB="c088010000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r9, @ANYBLOB="fd6d9d95254ed52586100c4bd5a300e117191facf7718cb4de6707e05084ad353127196df25a76d87a4c3e363bb7b38e2ebdda870566"], 0x3c}}, 0x0) 7.897120563s ago: executing program 3 (id=5755): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x1d000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="7ac8b2852c60ac24e03a2c072bab3422a80c1ff518be3d476f4613ac6966fe3d59eaa20ec88f677b15d700cd353f4e204732f26aa229fa8b1aedf5c4ea550aa6c5ca40178fde587d3ffcb3f72d9aa08a1cf5a4ead762672b35ab6c6857d8f2ea9f007085fc852af3b0a59e7f46ab8c3c41", 0x71}, {&(0x7f0000000340)="b92fc8d480737475599f9b3cec0ee7426057350194c5ce866b05f60343d526a746b201784a3ee55de873375a52dadc7e8ab9044dd2665909a0580519f5736b82fd6340430182bca17cdb83870fcaacfaa594fe99bdda44550228bc74ce84c8d72c5e942a69a7035d09a770e041a78a44ce", 0x71}], 0x2, 0x0, 0x0, 0x40000}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x9, 0x96, 0x0, 0x1, 0x2, 0x3, 0xe2, 0x0, 0x3, 0x2, 0xc1, 0x0, 0x3, 0x7, 0x4, 0x77, 0x3, 0x3a, '\x00', 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.026719559s ago: executing program 6 (id=5756): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x9, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000200)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffe3f, 0x0}, 0x8010) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = syz_io_uring_setup(0x2fa2, &(0x7f0000001740)={0x0, 0xb403, 0x40, 0x2, 0x1dc}, &(0x7f0000000040), &(0x7f0000001800)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r8, 0x19, &(0x7f00000018c0)={0x4000, 0x80, 0x8001}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r6, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 5.987358948s ago: executing program 3 (id=5762): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f00000000c0)={0x1, 0x5, 0x1, "2ac0749f7a436a9c7d843197dba300", 0x30313953}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x10080, 0x0) getdents(r2, &(0x7f00000000c0)=""/229, 0xe5) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc, &(0x7f0000000080)=ANY=[]) 4.908025689s ago: executing program 2 (id=5763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 4.555929754s ago: executing program 5 (id=5766): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b0001006272696467650000140002800500190006000000050018000100"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x404c3) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000380)=0x8) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61a6160a14a500"], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 4.201712484s ago: executing program 3 (id=5767): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r6, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x1, 0x9, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000, 0xa000, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_NMI(r8, 0xae9a) socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x18, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 3.887766912s ago: executing program 6 (id=5768): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000000)={0x0, 0x80fe, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000000000000e4010000000500070000000000080009000000004014002000fe8000000000000000000000000001bb08000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) socket$igmp(0x2, 0x3, 0x2) 3.643207613s ago: executing program 2 (id=5769): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) keyctl$join(0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x400, 0x70bd23, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x1450c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x2f0}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x9, 0x40000) mmap$snddsp(&(0x7f000075b000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, r4, 0x6000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x8, 0x28d662, 0x1096e}) 3.464259624s ago: executing program 2 (id=5770): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f00000022c0)=@can={0x1d, r2}, 0x80, 0x0, 0x0, 0x0, 0x8100}}, {{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}], 0x2, 0x0) 3.409063637s ago: executing program 2 (id=5771): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x20008010) 3.215694651s ago: executing program 2 (id=5772): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x1d000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="7ac8b2852c60ac24e03a2c072bab3422a80c1ff518be3d476f4613ac6966fe3d59eaa20ec88f677b15d700cd353f4e204732f26aa229fa8b1aedf5c4ea550aa6c5ca40178fde587d3ffcb3f72d9aa08a1cf5a4ead762672b35ab6c6857d8f2ea9f007085fc852af3b0a59e7f46ab8c3c41", 0x71}, {&(0x7f0000000340)="b92fc8d480737475599f9b3cec0ee7426057350194c5ce866b05f60343d526a746b201784a3ee55de873375a52dadc7e8ab9044dd2665909a0580519f5736b82fd6340430182bca17cdb83870fcaacfaa594fe99bdda44550228bc74ce84c8d72c5e942a69a7035d09a770e041a78a44ce", 0x71}], 0x2, 0x0, 0x0, 0x40000}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x9, 0x96, 0x0, 0x1, 0x2, 0x3, 0xe2, 0x0, 0x3, 0x2, 0xc1, 0x0, 0x3, 0x7, 0x4, 0x77, 0x3, 0x3a, '\x00', 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.272128291s ago: executing program 3 (id=5776): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0xffffffff, "0f6d00009000", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x541b, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0]) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0x2000002e, 0x7]) 2.271706379s ago: executing program 6 (id=5778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x11) 2.270564998s ago: executing program 6 (id=5779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1.431949576s ago: executing program 1 (id=5780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100049040000000000000000ffed0000", @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280080012"], 0x3c}}, 0x0) 1.343798995s ago: executing program 6 (id=5781): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="60050000", @ANYRES16=r2, @ANYBLOB="010026bd7400000000003b008e8808000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000003b05330000a81000080211000001080211"], 0x560}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.225036885s ago: executing program 1 (id=5782): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x20008010) 1.104212163s ago: executing program 6 (id=5783): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = msgget(0x3, 0x408) msgrcv(r0, 0x0, 0xfffffffffffffc6e, 0x1, 0x0) 1.068439847s ago: executing program 5 (id=5784): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, {0x3}, {0xf4ef, 0x1000}, {0x20, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 1.037414305s ago: executing program 1 (id=5785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x40) close(r2) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@code={0x1, 0x68, {"430f0134ce2e6666410f38819d00980000c4c1f9d7ea400f01cfb9ff0800000f32c744240000000080c744240200000000c7442406000000000f011c2442804aa50d460f79f9410f019d0000000066430ff9a300000000"}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0x9dc, 0xffff}}, @cpuid={0x2, 0x18, {0x0, 0x7}}, @cpuid={0x2, 0x18, {0x59bcee39, 0x101}}, @code={0x1, 0x71, {"f23666f36636430f017d7f66ba210066b8a6f066ef66410fd040e5640f72e320c744240064b30000c744240200000000c7442406000000000f011424480fc79912e862b53e66420f38805b9e0f001546b88703809ca24f000000bd66ba4200ec"}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0xf1cc}, @cpuid={0x2, 0x18, {0x200, 0x7}}, @cpuid={0x2, 0x18, {0x30000, 0xb}}, @code={0x1, 0x5b, {"d1c4440f20c0350f000000440f22c0b9800000c00f3235010000000f30c403dd6c2c0204dbf6440f07660fc7b500000000c4c3c97dac87f95000000066baa100b098eeb9930200000f32"}}, @cpuid={0x2, 0x18, {0x8, 0x6}}, @cpuid={0x2, 0x18, {0xa19, 0x4}}, @uexit={0x0, 0x18, 0xa}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x4, 0x9}}, @code={0x1, 0x4a, {"c4027d3ac2b9f20b00000f3236410f239166b89a008ec8c4617f701a3f0f07b9700500000f32f3440f09c401a05ead00680000c4c10bd07a00"}}, @code={0x1, 0x60, {"8e0ac744240016010000c74424020e000000ff1c2466b868008ed0430f0017c74424000a010000c744240250000000ff2c24c4e109fdcac482b1a64c77196736430f07b9330000000f3266ba4300ed"}}, @cpuid={0x2, 0x18, {0xc, 0x2}}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0x9, 0x1}}, @code={0x1, 0x66, {"66baf80cb8644ece8bef66bafc0cedc4217971d16166450f306566400f38810bc46209968f0d000000f4430f16f5c4a241986b0a65430f7837c744240000000000c744240200000000c7442406000000000f011424"}}, @cpuid={0x2, 0x18, {0x9, 0x3}}, @code={0x1, 0x56, {"f6500066b81b008ed02e3e0f79243d005800000f300f20d835080000000f22d8672e3e670fc7180f02cdc744240074000000c7442402ffffffffff2c24440f35654c0fc72b"}}], 0x462}) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f00000008c0)={'\x00', 0x0, 0x9, 0x50, 0x0, 0x5, 0xf000, 0x4, '\x00', 0x4}) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001540)={0x14, r5, 0x715, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x20008000) 796.118172ms ago: executing program 1 (id=5786): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x0, r3}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r3, @ANYBLOB="19"], 0x6c}}, 0x0) 795.829797ms ago: executing program 5 (id=5787): r0 = socket$kcm(0x10, 0x2, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000290005ac1414aa640101028677fffeffff000ce256b28c59881681fb520009020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc23f9ffffffa30900a301c84600000012c8f46976e79ea788f03d9d3205927e3d8606ff"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) keyctl$join(0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e}) 617.62227ms ago: executing program 3 (id=5788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c000280080014000000000008000700", @ANYRES32=0x0, @ANYBLOB="08001e00", @ANYRESDEC], 0x6c}, 0x1, 0xba01}, 0x0) (async) r1 = syz_clone3(&(0x7f00000009c0)={0x0, &(0x7f0000000780)=0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800), {0x3d}, &(0x7f0000000840)=""/38, 0x26, &(0x7f0000000880)=""/201, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) r3 = syz_clone3(&(0x7f0000000200)={0x1200000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x19}, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/3, &(0x7f00000001c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x4000040}, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sched_getattr(r3, &(0x7f00000002c0)={0x38}, 0x38, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r6) (async) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000680)={0x8, "0954a10c4e8f7f9666dab6a4727fb02755c6ac9b3d5ddf5103f3cb174defaff5db9349a318ec9d31b16cb41a1ff6c60da54d021dfea2ad51773b8dd60eb47e4a"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setsockopt$packet_int(r8, 0x107, 0x1b, &(0x7f0000000640)=0x7, 0x4) (async) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a0010000fe0512ffc0765656a28683722d49b270777a0b576174817ea64e9680327e701c99a0e48e3e1947945d3ebe753ad0381d66589fca30b738019ad5ac0545f6e819602a08b9ea724f30dbcde74b6552c843b7ee38626ab3c5da4b0d8efda26b5e98428a4dde05fe50c3a9dbe90b28dc671477d816bc053149e8c2a4142629eff8", @ANYRES16=r7, @ANYBLOB="02002abd7000ffdbdf2517000000740007800c00030001000000000000000c000300080000000000000008000100520100000c000300070000000000000008000200080000000c000400933f0000000000000c00040004000000000000000c00030007000000000000000c00040005000000000000000c000300d859000000000000b0000180440002800800030080000000080001001100000008000400f9ffffff0800010016000000080003000100ffff080003000200000008000200030000000800030000000100080003000600000024000280080001001500000008000200080000000800020022270000080001001c0000003c000280080004001000000008000100040000000800020006000000080002000c0000000800030001000000080001000700000008000400040000006800078008000200040000000c0004000b000000000000000c00030000020000000000000c000400000000000000000008000200080000000c0004000600000000000000080001000500000008000100ffff000008000100610000000c0003000100000000000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x84}, 0xc0) (async, rerun: 64) read(r2, &(0x7f0000000700)=""/52, 0x34) (async, rerun: 64) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000005c0)={0x8, 0x9, 0x4, 0x401, 0x13, "ed7bd2cc4cf3a56a822bc2acbb5b4a853a37bf"}) socket$alg(0x26, 0x5, 0x0) 540.305824ms ago: executing program 5 (id=5789): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f00000022c0)=@can={0x1d, r2}, 0x80, 0x0, 0x0, 0x0, 0x86dd}}, {{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}], 0x2, 0x0) 392.153207ms ago: executing program 1 (id=5790): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402023, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) pread64(r0, &(0x7f0000000040)=""/20, 0x14, 0x10) 255.034404ms ago: executing program 1 (id=5791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 195.9155ms ago: executing program 5 (id=5792): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x30000000, 0xf0}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x0, 0x1, 0x0, 0x0, 0x800}]}]}, 0x13c}}, 0x0) 84.111011ms ago: executing program 3 (id=5793): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x57c3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="3d4077e50823258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db1790111e7", 0x20}, {&(0x7f0000000240)="b28231adddba8ed6f23bf98ca8caa015ab797f57353ec4ceacbd4995a9a6", 0x1e}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000014c0)=0x55b7, 0xfffffffffffffca0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf34) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000c00060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvfrom$inet6(r3, &(0x7f00000004c0)=""/209, 0xd1, 0x100, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 28.0287ms ago: executing program 2 (id=5794): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000340)='net/igmp\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1, 0x67, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000080)}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r6, r5, r5, 0x1) prctl$PR_SET_MM_MAP(0x22, 0xe, 0x0, 0x9cfe2206cad4610) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000440)="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", 0x1000, r5) syz_clone(0x310db80, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=5795): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200340f140006000012627b8846552fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f620102c21880b00000000010040575625ef4c51d6350b000000880000000000000080", 0x56}, {&(0x7f0000001280)="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", 0xf13}], 0x2}, 0x20008010) kernel console output (not intermixed with test programs): ave_0 added [ 1490.172748][ T5943] usb 6-1: config 0 descriptor?? [ 1490.189034][T25755] team0: Port device team_slave_1 added [ 1490.189058][ T5943] usb-storage 6-1:0.236: USB Mass Storage device detected [ 1490.293449][T25755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.330111][T25755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.359319][T25755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.379007][ T30] audit: type=1804 audit(1751497156.043:7648): pid=25863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5457" name="/newroot/372/file1" dev="fuse" ino=1 res=1 errno=0 [ 1490.417167][ T977] usb 6-1: USB disconnect, device number 67 [ 1490.521432][T25755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.597753][T25755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.626161][T25755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.154775][T25755] hsr_slave_0: entered promiscuous mode [ 1491.180543][T25877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5459'. [ 1491.192024][T25755] hsr_slave_1: entered promiscuous mode [ 1491.265184][ T5833] Bluetooth: hci1: command tx timeout [ 1491.349633][T25887] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5461'. [ 1491.968414][T25900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5464'. [ 1492.041584][T25755] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1492.139800][T25755] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1492.287059][T25755] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1492.333534][T25755] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1492.974437][T25755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.198732][T25755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.223378][T21064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.230553][T21064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1493.254563][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.261724][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1493.592957][T25755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.796694][T25755] veth0_vlan: entered promiscuous mode [ 1493.835744][T25755] veth1_vlan: entered promiscuous mode [ 1493.994870][T25755] veth0_macvtap: entered promiscuous mode [ 1494.074694][T25755] veth1_macvtap: entered promiscuous mode [ 1494.177826][T25755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1494.241789][T25755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.290205][T25755] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.322872][T25755] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.350939][T25755] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.380428][T25755] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.395152][T11933] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1494.592422][T11933] usb 3-1: config 0 has no interfaces? [ 1494.606757][T11933] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1494.616742][T11933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.624748][T11933] usb 3-1: Product: syz [ 1494.635305][T11933] usb 3-1: Manufacturer: syz [ 1494.645674][T11933] usb 3-1: SerialNumber: syz [ 1494.671344][T11933] usb 3-1: config 0 descriptor?? [ 1494.747201][T25944] loop2: detected capacity change from 0 to 7 [ 1494.763500][T21060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.781630][T25944] loop2: [ 1494.788147][T25944] loop2: partition table partially beyond EOD, truncated [ 1494.807435][T21060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1494.907159][ T977] usb 3-1: USB disconnect, device number 28 [ 1494.922299][T21062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.947732][T25946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5471'. [ 1494.949939][T21062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.295410][ T5898] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1495.515371][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 1495.546823][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1495.572035][ T5898] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1495.689073][ T5898] usb 4-1: can't read configurations, error -71 [ 1495.754595][T25966] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5474'. [ 1496.745463][ T5898] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1496.875311][ T5898] usb 4-1: device descriptor read/64, error -71 [ 1496.989279][ T5898] usb usb4-port1: attempt power cycle [ 1497.395214][ T5898] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1497.418091][ T5898] usb 4-1: device descriptor read/8, error -71 [ 1497.588239][ T5943] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1497.605710][ T977] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1497.687825][ T5898] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1497.755408][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 1497.763841][ T5898] usb 4-1: device descriptor read/8, error -71 [ 1497.773676][ T5943] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1497.783770][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.823707][ T5943] usb 3-1: config 0 descriptor?? [ 1497.833303][ T5943] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1497.847465][ T977] usb 7-1: Using ep0 maxpacket: 8 [ 1497.859678][ T977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.873883][ T977] usb 7-1: config 0 has no interfaces? [ 1497.875795][ T5898] usb usb4-port1: unable to enumerate USB device [ 1497.943032][ T977] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1497.984033][ T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.023058][ T977] usb 7-1: config 0 descriptor?? [ 1498.260832][T26000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.276476][T26000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.359443][ T5898] usb 7-1: USB disconnect, device number 2 [ 1498.655211][ T5943] gspca_nw80x: reg_w err -71 [ 1498.659877][ T5943] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 1498.705302][ T5943] usb 3-1: USB disconnect, device number 29 [ 1498.794859][T26023] input: syz1 as /devices/virtual/input/input74 [ 1498.887267][ T30] audit: type=1326 audit(1751497164.553:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26019 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd15a92ab19 code=0x7ffc0000 [ 1499.054803][ T30] audit: type=1326 audit(1751497164.583:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26019 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd15a92ab19 code=0x7ffc0000 [ 1499.167111][ T30] audit: type=1326 audit(1751497164.583:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26019 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd15a92ab19 code=0x7ffc0000 [ 1499.293083][ T30] audit: type=1326 audit(1751497164.583:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26019 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd15a92ab19 code=0x7ffc0000 [ 1499.406801][ T30] audit: type=1326 audit(1751497164.583:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26019 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1499.566293][ T30] audit: type=1326 audit(1751497164.583:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26019 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1499.692509][ T30] audit: type=1326 audit(1751497164.583:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26019 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd15a92ab19 code=0x7ffc0000 [ 1499.789321][ T30] audit: type=1326 audit(1751497164.583:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26019 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd15a92ab19 code=0x7ffc0000 [ 1499.857721][T26041] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5486'. [ 1500.017918][ T30] audit: type=1326 audit(1751497164.603:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26019 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd15a92ab19 code=0x7ffc0000 [ 1500.224994][T26045] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5487'. [ 1500.280890][ T30] audit: type=1326 audit(1751497164.603:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26019 comm="syz.1.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1501.108489][T26058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5489'. [ 1501.184289][T26058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5489'. [ 1501.958362][T26073] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.5492'. [ 1502.261992][T26085] syz_tun: entered allmulticast mode [ 1502.349610][T26078] syz_tun: left allmulticast mode [ 1503.235194][ T5898] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1503.469187][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 1503.490061][ T5898] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1503.498800][ T5898] usb 3-1: config 0 has no interface number 0 [ 1503.536314][ T5898] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1503.580162][ T5898] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1503.589910][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.637225][ T5898] usb 3-1: Product: syz [ 1503.668994][ T5898] usb 3-1: Manufacturer: syz [ 1503.695290][ T5898] usb 3-1: SerialNumber: syz [ 1503.740373][ T5898] usb 3-1: config 0 descriptor?? [ 1503.778505][ T5898] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1503.823212][ T5898] em28xx 3-1:0.132: Video interface 132 found: [ 1504.179087][ T5898] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1504.589756][T26125] kvm: pic: non byte write [ 1505.165454][ T977] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1505.325842][ T977] usb 7-1: too many configurations: 98, using maximum allowed: 8 [ 1505.340807][ T977] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1505.346360][ T5898] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1505.354419][ T977] usb 7-1: can't read configurations, error -61 [ 1505.366237][ T5898] em28xx 3-1:0.132: board has no eeprom [ 1505.439841][ T5898] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1505.470114][ T5898] em28xx 3-1:0.132: analog set to bulk mode. [ 1505.477017][T21520] em28xx 3-1:0.132: Registering V4L2 extension [ 1505.491049][T26138] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5503'. [ 1505.545499][ T977] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1505.607879][T21520] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1505.701958][T21520] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1505.716451][ T977] usb 7-1: too many configurations: 98, using maximum allowed: 8 [ 1505.727139][T21520] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1505.741842][ T977] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1505.750422][ T977] usb 7-1: can't read configurations, error -61 [ 1505.757167][ T977] usb usb7-port1: attempt power cycle [ 1505.769782][T26141] loop2: detected capacity change from 0 to 7 [ 1505.789059][T21520] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1505.801995][T26141] loop2: [ 1505.836320][T26141] loop2: partition table partially beyond EOD, truncated [ 1506.048342][ T5898] usb 3-1: USB disconnect, device number 30 [ 1506.105494][ T977] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1506.157611][ T977] usb 7-1: too many configurations: 98, using maximum allowed: 8 [ 1506.170616][ T5898] em28xx 3-1:0.132: Disconnecting em28xx [ 1506.171127][ T977] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1506.215148][ T977] usb 7-1: can't read configurations, error -61 [ 1506.325620][T26154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5507'. [ 1506.355944][ T977] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1506.384404][T21520] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1506.398659][ T977] usb 7-1: too many configurations: 98, using maximum allowed: 8 [ 1506.419485][ T977] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1506.428713][ T977] usb 7-1: can't read configurations, error -61 [ 1506.439252][ T977] usb usb7-port1: unable to enumerate USB device [ 1506.445223][T21520] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1506.480686][T21520] em28xx 3-1:0.132: No AC97 audio processor [ 1506.500201][T21520] usb 3-1: Decoder not found [ 1506.515871][T21520] em28xx 3-1:0.132: failed to create media graph [ 1506.534341][T21520] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1506.536357][T11933] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1506.558311][T21520] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1506.579035][ T5898] em28xx 3-1:0.132: Closing input extension [ 1506.602149][ T5898] em28xx 3-1:0.132: Freeing device [ 1506.759874][T11933] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.780535][T11933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1506.813168][T26168] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1506.897368][T26166] syz_tun: entered allmulticast mode [ 1506.898762][T11933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1506.914202][T11933] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1506.967938][T11933] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1506.980101][T11933] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1507.005351][T11933] usb 6-1: Manufacturer: syz [ 1507.027110][T11933] usb 6-1: config 0 descriptor?? [ 1507.056712][T26161] syz_tun: left allmulticast mode [ 1507.295158][T11933] rc_core: IR keymap rc-hauppauge not found [ 1507.301148][T11933] Registered IR keymap rc-empty [ 1507.307945][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.337428][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.378079][T11933] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1507.410064][T11933] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input75 [ 1507.431617][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.440067][T26152] QAT: Invalid ioctl 21531 [ 1507.468278][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.495614][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.515206][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.545284][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.567359][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.596020][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.615802][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.647544][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.695576][T11933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1507.719688][T11933] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1507.731893][T11933] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1507.750691][T11933] usb 6-1: USB disconnect, device number 68 [ 1508.755989][T26193] fuse: Bad value for 'fd' [ 1508.787969][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 1508.787984][ T30] audit: type=1800 audit(1751497174.433:7800): pid=26193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5516" name="file1" dev="tmpfs" ino=2532 res=0 errno=0 [ 1509.907277][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1510.045185][ T9] usb 3-1: device descriptor read/64, error -71 [ 1510.126352][T26213] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5518'. [ 1510.375148][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1510.545781][ T9] usb 3-1: device descriptor read/64, error -71 [ 1510.667251][ T9] usb usb3-port1: attempt power cycle [ 1511.038122][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1511.071810][ T9] usb 3-1: device descriptor read/8, error -71 [ 1511.355342][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1511.388656][ T9] usb 3-1: device descriptor read/8, error -71 [ 1511.389416][T26245] input: syz0 as /devices/virtual/input/input76 [ 1511.495941][ T9] usb usb3-port1: unable to enumerate USB device [ 1512.025145][ T977] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 1512.188214][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.198138][ T977] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1512.207340][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.220786][ T977] usb 4-1: config 0 descriptor?? [ 1512.287346][T11933] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1512.482105][T11933] usb 7-1: config 0 has no interfaces? [ 1512.503175][T11933] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1512.522262][T11933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.537862][T11933] usb 7-1: Product: syz [ 1512.542352][T11933] usb 7-1: Manufacturer: syz [ 1512.550215][T11933] usb 7-1: SerialNumber: syz [ 1512.562289][T11933] usb 7-1: config 0 descriptor?? [ 1512.669369][ T977] sony 0003:1345:3008.0029: unknown main item tag 0x0 [ 1512.687007][ T977] sony 0003:1345:3008.0029: item fetching failed at offset 4/5 [ 1512.705352][ T977] sony 0003:1345:3008.0029: parse failed [ 1512.713076][ T977] sony 0003:1345:3008.0029: probe with driver sony failed with error -22 [ 1512.744229][T26276] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5532'. [ 1512.798076][T11933] usb 7-1: USB disconnect, device number 7 [ 1512.864730][ T977] usb 4-1: USB disconnect, device number 89 [ 1513.961498][T26303] netlink: 'syz.6.5538': attribute type 1 has an invalid length. [ 1514.138902][T26306] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5538'. [ 1514.284961][T26303] bond1 (unregistering): Released all slaves [ 1514.389882][T21520] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1514.585243][T21520] usb 6-1: Using ep0 maxpacket: 32 [ 1514.603238][T21520] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.626648][T21520] usb 6-1: config 0 has no interfaces? [ 1514.632263][T21520] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1514.704080][T21520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.798725][T21520] usb 6-1: config 0 descriptor?? [ 1515.026388][T26304] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1515.102040][T26305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.150138][T26305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.189296][T26305] loop2: detected capacity change from 0 to 7 [ 1515.245587][T26305] Dev loop2: unable to read RDB block 7 [ 1515.252692][T26305] loop2: AHDI p2 p3 [ 1515.259467][T26305] loop2: partition table partially beyond EOD, truncated [ 1515.271264][T26305] loop2: p3 start 335544320 is beyond EOD, truncated [ 1515.375415][T26338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5544'. [ 1515.855749][ T5200] Dev loop2: unable to read RDB block 7 [ 1515.895887][ T5200] loop2: AHDI p2 p3 [ 1515.918225][ T5200] loop2: partition table partially beyond EOD, truncated [ 1515.975683][ T5200] loop2: p3 start 335544320 is beyond EOD, truncated [ 1515.998669][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.315386][T21520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.371586][T26358] ptrace attach of "./syz-executor exec"[16724] was attempted by "./syz-executor exec"[26358] [ 1516.389674][T26358] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5546'. [ 1516.923759][T21520] usb 6-1: USB disconnect, device number 69 [ 1517.027037][T11933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.249741][T26375] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1517.597409][T26379] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5555'. [ 1518.066339][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.075044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.240118][T21520] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1518.684997][T21520] usb 2-1: config 0 has no interfaces? [ 1518.753263][T21520] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1518.789507][T21520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.817997][T21520] usb 2-1: Product: syz [ 1518.832946][T21520] usb 2-1: Manufacturer: syz [ 1518.846819][T21520] usb 2-1: SerialNumber: syz [ 1518.912051][T21520] usb 2-1: config 0 descriptor?? [ 1519.180108][T21520] usb 2-1: USB disconnect, device number 108 [ 1519.616998][T26411] syzkaller0: entered promiscuous mode [ 1519.622643][T26411] syzkaller0: entered allmulticast mode [ 1519.700880][T26416] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5559'. [ 1519.822221][T26419] netlink: 'syz.1.5561': attribute type 10 has an invalid length. [ 1519.835820][T26419] team0: Device veth1_macvtap failed to register rx_handler [ 1519.881360][T21520] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1520.045444][T21520] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1520.064057][T21520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.221475][T21520] usb 4-1: Product: syz [ 1520.485218][T21520] usb 4-1: Manufacturer: syz [ 1520.499778][T21520] usb 4-1: SerialNumber: syz [ 1520.516153][T21520] usb 4-1: config 0 descriptor?? [ 1521.426151][T21520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.485251][ T977] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1521.637824][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 1521.654451][ T977] usb 6-1: config 250 has an invalid interface number: 203 but max is 0 [ 1521.678237][ T977] usb 6-1: config 250 has no interface number 0 [ 1521.992166][ T977] usb 6-1: config 250 interface 203 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1522.056916][ T977] usb 6-1: config 250 interface 203 altsetting 128 endpoint 0x4 has invalid maxpacket 1032, setting to 1024 [ 1522.179002][ T977] usb 6-1: config 250 interface 203 has no altsetting 0 [ 1522.262780][ T977] usb 6-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=a5.e1 [ 1522.314495][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.374147][ T977] usb 6-1: Product: syz [ 1522.399052][ T977] usb 6-1: Manufacturer: syz [ 1522.403697][ T977] usb 6-1: SerialNumber: syz [ 1522.456413][T26441] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1522.464623][T21520] usb 4-1: USB disconnect, device number 90 [ 1522.705735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.773783][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.200562][ T977] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1523.441161][ T977] snd-usb-audio 6-1:250.203: probe with driver snd-usb-audio failed with error -2 [ 1523.502233][ T977] usb 6-1: USB disconnect, device number 70 [ 1523.850376][T26484] netlink: 'syz.3.5571': attribute type 4 has an invalid length. [ 1523.988970][T21066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.990893][T21300] udevd[21300]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:250.203/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1523.997317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.308749][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5577'. [ 1524.653454][T26509] input: syz0 as /devices/virtual/input/input78 [ 1524.672428][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.703052][T26510] FAULT_INJECTION: forcing a failure. [ 1524.703052][T26510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1524.788786][T26510] CPU: 1 UID: 0 PID: 26510 Comm: syz.6.5579 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1524.788824][T26510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1524.788842][T26510] Call Trace: [ 1524.788850][T26510] [ 1524.788858][T26510] dump_stack_lvl+0x189/0x250 [ 1524.788890][T26510] ? __pfx____ratelimit+0x10/0x10 [ 1524.788916][T26510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1524.788943][T26510] ? __pfx__printk+0x10/0x10 [ 1524.788962][T26510] ? __might_fault+0xb0/0x130 [ 1524.788990][T26510] should_fail_ex+0x414/0x560 [ 1524.789015][T26510] _copy_from_user+0x2d/0xb0 [ 1524.789034][T26510] input_event_from_user+0xb2/0x280 [ 1524.789056][T26510] ? __pfx_input_event_from_user+0x10/0x10 [ 1524.789082][T26510] ? input_event+0x8c/0xc0 [ 1524.789108][T26510] uinput_write+0x279/0xfc0 [ 1524.789138][T26510] ? __pfx_uinput_write+0x10/0x10 [ 1524.789161][T26510] ? bpf_lsm_file_permission+0x9/0x20 [ 1524.789185][T26510] ? security_file_permission+0x75/0x290 [ 1524.789205][T26510] ? rw_verify_area+0x258/0x650 [ 1524.789230][T26510] ? __pfx_uinput_write+0x10/0x10 [ 1524.789254][T26510] vfs_write+0x27e/0xa90 [ 1524.789288][T26510] ? __pfx_vfs_write+0x10/0x10 [ 1524.789316][T26510] ? __fget_files+0x2a/0x420 [ 1524.789339][T26510] ? __fget_files+0x2a/0x420 [ 1524.789357][T26510] ? __fget_files+0x3a0/0x420 [ 1524.789375][T26510] ? __fget_files+0x2a/0x420 [ 1524.789402][T26510] ksys_write+0x145/0x250 [ 1524.789420][T26510] ? __pfx_ksys_write+0x10/0x10 [ 1524.789441][T26510] ? __x64_sys_write+0x4f/0x90 [ 1524.789461][T26510] do_syscall_64+0xfa/0x3b0 [ 1524.789486][T26510] ? lockdep_hardirqs_on+0x9c/0x150 [ 1524.789510][T26510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.789527][T26510] ? clear_bhb_loop+0x60/0xb0 [ 1524.789548][T26510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.789566][T26510] RIP: 0033:0x7ff90f18e929 [ 1524.789582][T26510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1524.789597][T26510] RSP: 002b:00007ff90cff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1524.789616][T26510] RAX: ffffffffffffffda RBX: 00007ff90f3b6080 RCX: 00007ff90f18e929 [ 1524.789629][T26510] RDX: 000000000000045c RSI: 0000200000000a40 RDI: 0000000000000003 [ 1524.789641][T26510] RBP: 00007ff90cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.789652][T26510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1524.789663][T26510] R13: 0000000000000001 R14: 00007ff90f3b6080 R15: 00007ff90f4dfa28 [ 1524.789698][T26510] [ 1525.045110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.344393][T26520] netlink: 'syz.2.5580': attribute type 5 has an invalid length. [ 1525.369493][T26520] input: syz0 as /devices/virtual/input/input79 [ 1525.995258][T21520] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1526.509113][T21520] usb 7-1: Using ep0 maxpacket: 8 [ 1526.530546][T21520] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.596626][T21520] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1526.643009][T21520] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1526.685182][T21520] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1526.731300][T26554] fuse: Bad value for 'group_id' [ 1526.739374][T21520] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1526.765408][T26554] fuse: Bad value for 'group_id' [ 1526.791831][T21520] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1526.815162][T21520] usb 7-1: Product: syz [ 1526.820366][T21520] usb 7-1: Manufacturer: syz [ 1526.836114][T21520] usb 7-1: SerialNumber: syz [ 1526.878155][T21520] usb 7-1: config 0 descriptor?? [ 1527.135284][T21520] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1527.170173][T21520] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1527.332617][T21520] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 1527.362956][T21520] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1527.442555][T26570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5592'. [ 1527.544941][T21520] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1528.065431][T21520] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1528.111022][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.117675][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.124459][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.131154][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.137997][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.145195][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.153207][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.161149][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.169074][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.175731][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.182384][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.189043][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.195526][T21520] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 1528.203905][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.204291][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.210801][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.217304][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.223773][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.230756][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.237262][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.243736][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.250321][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.256960][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.263536][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.270158][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.276837][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.283378][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.289994][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.296567][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.303090][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.310097][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.316680][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.323215][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.329778][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.336381][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.342912][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.349492][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.356212][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.362749][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.369348][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.375931][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.382440][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.389014][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.395547][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.402071][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.408581][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.415413][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.421923][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.428485][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.435005][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.441546][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.448050][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.454551][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.461064][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.467693][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.474197][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.480727][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.487287][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.493846][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.500434][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.506963][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.513437][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.520372][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.526872][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.533365][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.539865][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.546381][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.552859][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.559358][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.565885][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.572367][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.578868][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.585358][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.591834][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.598324][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.604785][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.611288][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.618045][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.624520][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.631261][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.637788][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.644332][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.650872][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.657370][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.663929][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.670443][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.676952][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.683422][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.689943][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.696442][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.702959][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.709579][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.716092][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.729303][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.735935][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.742418][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.748938][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.755476][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.761975][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.768483][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.774965][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.781479][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.788087][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.794581][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.801135][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.807639][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.814123][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.820724][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.827514][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.833994][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.840554][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.847068][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.853569][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.860102][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.866615][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.873097][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.879605][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.886117][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.892655][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.899191][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.905704][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.912185][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.918702][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.925544][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.932051][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.938569][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.945040][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.951702][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.958284][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.964762][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.971320][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.977904][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.984381][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.990882][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1528.997388][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.003878][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.010394][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.016884][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.023348][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.030352][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.036851][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.043317][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.049811][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.056317][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.062906][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.069401][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.075891][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.082354][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.088843][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.095340][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.101819][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.108380][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.114841][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.121346][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.127836][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.134538][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.141177][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.147772][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.154375][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.161397][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.168058][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.174653][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.181312][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.187890][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.194507][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.201087][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.207665][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.214238][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.220819][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.230358][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.237036][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.243688][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.244065][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.250319][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.266016][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.272649][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.279287][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.285881][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.292469][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.299043][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.305642][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.312225][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.318821][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.325424][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.332079][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.338660][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.345257][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.351876][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.358451][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.365030][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.371625][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.378212][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.384818][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.391391][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.397976][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.404577][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.411180][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.417776][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.424396][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.431243][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.437845][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.444426][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.451010][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.457595][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.464177][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.470753][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.477328][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.483913][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.490493][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.497070][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.503660][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.510237][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.516830][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.523405][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.529983][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.536661][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.543240][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.549819][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.556391][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.562966][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.569568][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.576160][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.582736][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.589359][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.595957][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.602549][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.609219][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.615792][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.622367][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.629057][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.635739][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.642316][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.648897][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.655493][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.662185][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.668889][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.675521][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.682123][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.688738][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.695386][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.701971][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.708543][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.715130][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.721712][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.728308][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.734889][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.741596][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.748171][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.754773][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.761347][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.767943][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.774547][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.781128][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.787703][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.794286][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.800863][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.807437][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.814107][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.820689][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.827267][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.833763][ T2951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.841953][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.848609][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.855190][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.861815][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.868744][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.875326][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.882169][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.888741][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.895339][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.901974][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.908571][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.915154][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.921731][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.928332][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.934911][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.941615][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.948194][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.954832][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.961412][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.967991][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.974568][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.981138][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.987710][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1529.994287][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.000863][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.007441][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.014021][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.020601][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.027183][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.033768][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.040353][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.047038][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.053637][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.060219][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.066828][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.073406][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.079974][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.086544][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.093126][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.099699][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.106273][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.112844][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.119420][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.126018][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.132642][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.139229][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.146062][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.152673][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.159421][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.166096][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.172668][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.179242][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.185813][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.192410][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.198982][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.205573][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.212151][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.218724][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.225354][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.231937][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.238534][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.245125][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.251786][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.258371][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.264943][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.271513][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.278086][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.284677][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.291270][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.297845][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.304425][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.311403][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.317984][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.324567][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.331140][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.337711][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.344283][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.350986][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.357594][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.364175][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.370767][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.377339][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.383917][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.390628][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1530.398515][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.405110][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.411702][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.418265][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.424864][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.431433][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.438004][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.444581][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.451172][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.457853][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.464431][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.471008][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.477599][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.484191][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.490776][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.497378][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.503976][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.510559][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.517143][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.523731][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.530417][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.537025][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.543619][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.550304][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.557025][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.563612][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.570206][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.576779][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.583345][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.589939][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.596520][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.603090][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.609660][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.616233][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.622801][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.629498][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.636117][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.642698][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.649267][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.655861][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.662496][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.669073][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.675670][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.682262][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.688843][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.695437][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.702010][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.708633][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.715237][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.721830][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.728488][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.735128][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.741770][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.750278][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.756858][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.763471][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.770068][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.776649][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.783213][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.789808][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.796408][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.802973][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.809561][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.816136][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.822700][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.829274][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.835852][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.842419][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.848997][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.855583][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.862145][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.870318][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.876961][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.883549][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.890163][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.897719][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.905400][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.905772][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.912074][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.926508][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.933121][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.939761][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.946428][ C1] radio-si470x 7-1:0.0: non-zero urb status (-71) [ 1530.954547][T21520] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 1531.026578][T11933] usb 7-1: USB disconnect, device number 8 [ 1531.199382][T26530] syz.6.5584 (26530): drop_caches: 2 [ 1532.603044][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.648759][T11933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.075233][T21520] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1533.606096][T21520] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.629321][T26603] tipc: Enabling of bearer rejected, already enabled [ 1533.645369][T21520] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1533.677787][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.768947][T21520] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1533.807381][T11933] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1533.853167][T21520] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1533.888704][ T5930] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1533.923238][T21520] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.974244][T26611] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5600'. [ 1533.985649][T11933] usb 2-1: Using ep0 maxpacket: 8 [ 1533.995320][T11933] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1534.005425][T11933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.019695][T21520] usb 7-1: config 0 descriptor?? [ 1534.051808][T11933] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1534.067431][ T5930] usb 3-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60 [ 1534.077005][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.102062][T11933] pvrusb2: ********** [ 1534.117730][T11933] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1534.138684][ T5930] usb 3-1: config 0 descriptor?? [ 1534.167321][T11933] pvrusb2: Important functionality might not be entirely working. [ 1534.184223][ T5930] ums-cypress 3-1:0.0: USB Mass Storage device detected [ 1534.201344][T11933] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1534.230532][T26619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5602'. [ 1534.242420][T11933] pvrusb2: ********** [ 1534.270300][ T2342] pvrusb2: Invalid write control endpoint [ 1534.637403][T21520] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1534.658943][ T5898] usb 3-1: USB disconnect, device number 35 [ 1534.745734][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.794589][ T2342] pvrusb2: Invalid write control endpoint [ 1534.862690][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1534.905432][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1534.942728][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1535.054290][T26639] fuse: Bad value for 'fd' [ 1535.068654][ T2342] pvrusb2: Device being rendered inoperable [ 1535.088450][ T2342] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1535.110981][ T2342] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1535.156956][ T2342] pvrusb2: Attached sub-driver cx25840 [ 1535.245471][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1535.285989][T26590] veth1_to_batadv: entered promiscuous mode [ 1535.301613][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1535.826716][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.843375][ T30] audit: type=1800 audit(1751497201.513:7801): pid=26653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5608" name="file1" dev="tmpfs" ino=2641 res=0 errno=0 [ 1536.435258][ T5930] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1536.576736][T11933] usb 2-1: USB disconnect, device number 109 [ 1536.691112][ T5930] usb 3-1: config 3 has an invalid interface number: 168 but max is 0 [ 1536.712077][ T5930] usb 3-1: config 3 has no interface number 0 [ 1536.775134][ T5930] usb 3-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1536.802377][ T5930] usb 3-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 1536.860411][ T5930] usb 3-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1536.905020][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.905438][T21520] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1537.555479][ T5930] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1537.564698][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.589205][T26659] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1537.722127][ T5943] usb 7-1: USB disconnect, device number 9 [ 1537.869908][T26667] netlink: 'syz.1.5611': attribute type 4 has an invalid length. [ 1537.881118][T21520] usb 4-1: Using ep0 maxpacket: 32 [ 1537.888439][T21520] usb 4-1: config 0 interface 0 altsetting 181 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1537.891057][T26659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1537.901362][T21520] usb 4-1: config 0 interface 0 altsetting 181 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1537.910671][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.017609][T26659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.068983][T21066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.081257][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.090113][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1538.115508][T21520] usb 4-1: config 0 interface 0 altsetting 181 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1538.149979][T26673] netlink: 'syz.6.5612': attribute type 10 has an invalid length. [ 1538.150289][T21520] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1538.171567][T21520] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1538.184711][T21520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.194892][T21520] usb 4-1: Product: syz [ 1538.200949][T21520] usb 4-1: Manufacturer: syz [ 1538.210752][T21520] usb 4-1: SerialNumber: syz [ 1538.221197][T26673] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5612'. [ 1538.224925][T21520] usb 4-1: config 0 descriptor?? [ 1538.340530][T21520] usb 4-1: no audio or video endpoints found [ 1538.360105][ T5930] usb 3-1: string descriptor 0 read error: -71 [ 1538.408302][T26673] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1538.415966][ T5930] keyspan 3-1:3.168: Keyspan 2 port adapter converter detected [ 1538.423855][ T5930] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 1 [ 1538.442804][T26675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5612'. [ 1538.507530][T26673] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1538.560344][ T5930] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 84 [ 1538.602546][ T5930] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 2 [ 1538.612876][T21520] usb 4-1: USB disconnect, device number 91 [ 1538.630389][ T5930] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1538.665388][T26673] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1538.668370][T26678] input: syz0 as /devices/virtual/input/input81 [ 1538.680925][ T5930] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 88 [ 1538.693461][ T5930] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 6 [ 1538.732385][ T5930] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1538.743556][ T5930] usb 3-1: USB disconnect, device number 36 [ 1538.781630][T26680] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5612'. [ 1538.788521][ T5930] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1538.836057][ T5930] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1538.891369][ T5930] keyspan 3-1:3.168: device disconnected [ 1538.951259][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.098942][T26691] input: syz0 as /devices/virtual/input/input82 [ 1539.111215][T26680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.142930][T26680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.245605][T26680] bond0 (unregistering): Released all slaves [ 1539.399781][T26672] [U]  [ 1540.169784][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.185216][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.288132][T26724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.298762][T26724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.311548][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.325741][T26724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.455548][ T977] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1541.629392][T26724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.640297][T26724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.653690][T26724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.680321][T26724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1542.051456][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.104212][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.186434][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1542.264165][ T977] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1542.314744][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.337318][T26729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1542.368035][ T977] usb 2-1: config 0 descriptor?? [ 1542.598519][T26731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5623'. [ 1543.531002][T26739] loop2: detected capacity change from 0 to 7 [ 1543.564280][T21613] Dev loop2: unable to read RDB block 7 [ 1543.580367][T21613] loop2: unable to read partition table [ 1543.594562][T21613] loop2: partition table beyond EOD, truncated [ 1543.610423][T26739] Dev loop2: unable to read RDB block 7 [ 1543.617007][T26739] loop2: unable to read partition table [ 1543.623044][T26739] loop2: partition table beyond EOD, truncated [ 1543.637769][T26739] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1543.741480][ T5200] Dev loop2: unable to read RDB block 7 [ 1543.763580][ T5200] loop2: unable to read partition table [ 1543.790173][ T5200] loop2: partition table beyond EOD, truncated [ 1544.115242][T11933] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1544.300147][T11933] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1544.309782][T11933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.318533][T11933] usb 3-1: Product: syz [ 1544.319443][T26749] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.5631'. [ 1544.335218][T21520] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1544.339495][T11933] usb 3-1: Manufacturer: syz [ 1544.356605][T11933] usb 3-1: SerialNumber: syz [ 1544.377254][T11933] usb 3-1: config 0 descriptor?? [ 1544.409638][T11933] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1544.495243][T21520] usb 7-1: Using ep0 maxpacket: 32 [ 1544.504966][T21520] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1544.530714][T21520] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1544.579862][T21520] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1544.594781][T21520] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1544.604216][T26751] ptrace attach of "./syz-executor exec"[19334] was attempted by "./syz-executor exec"[26751] [ 1544.618091][T21520] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.645467][T26751] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5630'. [ 1544.655337][T21520] usb 7-1: config 0 descriptor?? [ 1544.663768][T26745] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1544.676481][T21520] hub 7-1:0.0: USB hub found [ 1544.858873][ T977] usbhid 2-1:0.0: can't add hid device: -71 [ 1544.900546][ T977] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1544.932020][ T977] usb 2-1: USB disconnect, device number 110 [ 1545.515525][ T977] net_ratelimit: 105 callbacks suppressed [ 1545.515544][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.635557][T11933] gspca_sunplus: reg_r err -71 [ 1545.640673][T11933] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1545.651250][T11933] usb 3-1: USB disconnect, device number 37 [ 1545.681388][ T5943] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1545.751064][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.758013][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.014806][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 1546.034174][ T5943] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1546.044373][ T5943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.057586][ T5943] usb 4-1: config 0 has no interface number 0 [ 1546.063754][ T5943] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1546.080254][ T5943] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1546.090935][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.101609][ T5943] usb 4-1: Product: syz [ 1546.109101][ T5943] usb 4-1: Manufacturer: syz [ 1546.113876][ T5943] usb 4-1: SerialNumber: syz [ 1546.158682][ T5943] usb 4-1: config 0 descriptor?? [ 1546.159026][T26763] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.5635'. [ 1546.179211][ T5943] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1546.190473][ T5943] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 1546.383005][T26758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.415337][T26758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.441444][T21520] hub 7-1:0.0: 2 ports detected [ 1546.488712][T26767] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1546.503025][T26769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5637'. [ 1546.555553][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.564969][ T5943] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1546.614030][ T5943] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 1546.647681][ T5943] usb 4-1: USB disconnect, device number 92 [ 1546.941857][T21520] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 1546.954743][T21520] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 1546.962765][T14950] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1546.985298][T21520] usbhid 7-1:0.0: can't add hid device: -71 [ 1546.991316][T21520] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1547.035890][T21520] usb 7-1: USB disconnect, device number 10 [ 1547.115144][T14950] usb 6-1: Using ep0 maxpacket: 16 [ 1547.122307][T14950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.245415][T14950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.266207][T14950] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1547.275695][T14950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.309964][T14950] usb 6-1: config 0 descriptor?? [ 1547.527242][T26786] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1547.560997][ T977] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1547.588514][T11933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.600121][T14950] playstation 0003:054C:05C4.002B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 1547.672601][T11933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.718492][ T977] usb 2-1: config 0 has no interfaces? [ 1547.732101][ T977] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1547.757258][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.769749][ T977] usb 2-1: Product: syz [ 1547.774317][ T977] usb 2-1: Manufacturer: syz [ 1547.779876][ T977] usb 2-1: SerialNumber: syz [ 1547.792093][ T977] usb 2-1: config 0 descriptor?? [ 1547.802593][T14950] playstation 0003:054C:05C4.002B: Failed to retrieve feature with reportID 18: -71 [ 1547.822508][T14950] playstation 0003:054C:05C4.002B: Failed to retrieve DualShock4 pairing info: -71 [ 1547.872160][T14950] playstation 0003:054C:05C4.002B: Failed to get MAC address from DualShock4 [ 1547.894388][T14950] playstation 0003:054C:05C4.002B: Failed to create dualshock4. [ 1547.966464][T14950] playstation 0003:054C:05C4.002B: probe with driver playstation failed with error -71 [ 1548.021463][T14950] usb 6-1: USB disconnect, device number 71 [ 1548.123462][T21520] usb 2-1: USB disconnect, device number 111 [ 1548.705769][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.815392][T14950] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1548.955166][T14950] usb 6-1: device descriptor read/64, error -71 [ 1549.275648][T14950] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1549.405128][T14950] usb 6-1: device descriptor read/64, error -71 [ 1549.515781][T14950] usb usb6-port1: attempt power cycle [ 1549.748227][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.763322][T26813] input: syz0 as /devices/virtual/input/input83 [ 1549.855424][T14950] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1549.888888][T14950] usb 6-1: device descriptor read/8, error -71 [ 1550.135178][T14950] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1550.226235][T14950] usb 6-1: device descriptor read/8, error -71 [ 1550.262415][T26824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5653'. [ 1550.295208][T26824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5653'. [ 1550.346444][T14950] usb usb6-port1: unable to enumerate USB device [ 1550.511661][T26832] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5655'. [ 1550.579586][T26834] netlink: 1276 bytes leftover after parsing attributes in process `syz.6.5654'. [ 1550.785459][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.133919][T26844] FAULT_INJECTION: forcing a failure. [ 1551.133919][T26844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.193535][T26844] CPU: 1 UID: 0 PID: 26844 Comm: syz.2.5657 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1551.193565][T26844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1551.193579][T26844] Call Trace: [ 1551.193588][T26844] [ 1551.193598][T26844] dump_stack_lvl+0x189/0x250 [ 1551.193636][T26844] ? __pfx____ratelimit+0x10/0x10 [ 1551.193667][T26844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1551.193699][T26844] ? __pfx__printk+0x10/0x10 [ 1551.193722][T26844] ? __might_fault+0xb0/0x130 [ 1551.193755][T26844] should_fail_ex+0x414/0x560 [ 1551.193786][T26844] _copy_from_iter+0x1db/0x16f0 [ 1551.193820][T26844] ? rcu_is_watching+0x15/0xb0 [ 1551.193853][T26844] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1551.193876][T26844] ? __pfx__copy_from_iter+0x10/0x10 [ 1551.193907][T26844] ? __build_skb_around+0x257/0x3e0 [ 1551.193933][T26844] ? netlink_sendmsg+0x642/0xb30 [ 1551.193954][T26844] ? skb_put+0x11b/0x210 [ 1551.193981][T26844] netlink_sendmsg+0x6b2/0xb30 [ 1551.194014][T26844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1551.194042][T26844] ? aa_sock_msg_perm+0x94/0x160 [ 1551.194070][T26844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1551.194096][T26844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1551.194121][T26844] __sock_sendmsg+0x21c/0x270 [ 1551.194155][T26844] ____sys_sendmsg+0x505/0x830 [ 1551.194186][T26844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1551.194221][T26844] ? import_iovec+0x74/0xa0 [ 1551.194244][T26844] ___sys_sendmsg+0x21f/0x2a0 [ 1551.194272][T26844] ? __pfx____sys_sendmsg+0x10/0x10 [ 1551.194335][T26844] ? __fget_files+0x2a/0x420 [ 1551.194358][T26844] ? __fget_files+0x3a0/0x420 [ 1551.194400][T26844] __x64_sys_sendmsg+0x19b/0x260 [ 1551.194429][T26844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1551.194465][T26844] ? __pfx_ksys_write+0x10/0x10 [ 1551.194481][T26844] ? rcu_is_watching+0x15/0xb0 [ 1551.194518][T26844] ? do_syscall_64+0xbe/0x3b0 [ 1551.194553][T26844] do_syscall_64+0xfa/0x3b0 [ 1551.194582][T26844] ? lockdep_hardirqs_on+0x9c/0x150 [ 1551.194611][T26844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.194632][T26844] ? clear_bhb_loop+0x60/0xb0 [ 1551.194658][T26844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.194678][T26844] RIP: 0033:0x7f586098e929 [ 1551.194706][T26844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1551.194721][T26844] RSP: 002b:00007f58617d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1551.194740][T26844] RAX: ffffffffffffffda RBX: 00007f5860bb5fa0 RCX: 00007f586098e929 [ 1551.194750][T26844] RDX: 0000000000008190 RSI: 0000200000000300 RDI: 0000000000000003 [ 1551.194759][T26844] RBP: 00007f58617d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.194767][T26844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.194774][T26844] R13: 0000000000000000 R14: 00007f5860bb5fa0 R15: 00007f5860cdfa28 [ 1551.194793][T26844] [ 1551.477445][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.825620][T11933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.847774][T26852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.871702][T26852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.914745][T26852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.945573][T26852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.035129][T21520] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1552.215191][T21520] usb 6-1: Using ep0 maxpacket: 16 [ 1552.216761][T11933] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1552.237415][T21520] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.247419][T21520] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1552.265480][T21520] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1552.443536][T11933] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1552.452927][T11933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.455141][T21520] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1552.501047][T21520] usb 6-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 1552.516624][T21520] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.537457][T11933] usb 4-1: Product: syz [ 1552.537477][T11933] usb 4-1: Manufacturer: syz [ 1552.537493][T11933] usb 4-1: SerialNumber: syz [ 1552.627203][T26862] netlink: 'syz.6.5663': attribute type 4 has an invalid length. [ 1552.647784][T11933] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1552.677661][ T977] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1552.702281][T21520] usb 6-1: config 0 descriptor?? [ 1552.866418][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.929696][T21520] usbhid 6-1:0.0: can't add hid device: -71 [ 1552.935836][T21520] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1553.085035][T21520] usb 6-1: USB disconnect, device number 76 [ 1553.120289][ T5930] usb 4-1: USB disconnect, device number 93 [ 1553.425745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.464594][T26874] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5667'. [ 1553.534078][T26876] loop2: detected capacity change from 0 to 7 [ 1553.602714][T26876] Dev loop2: unable to read RDB block 7 [ 1553.615231][T26876] loop2: unable to read partition table [ 1553.638078][T26876] loop2: partition table beyond EOD, truncated [ 1553.674702][T26876] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1553.745760][ T977] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1553.761294][ T977] ath9k_htc: Failed to initialize the device [ 1553.793932][ T5930] usb 4-1: ath9k_htc: USB layer deinitialized [ 1553.935528][T22114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.040773][T11933] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1554.156523][T26888] input: syz0 as /devices/virtual/input/input84 [ 1554.212065][T11933] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1554.297811][T11933] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1554.372652][T11933] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1554.382082][T11933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.397503][T26880] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1554.466740][T11933] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1554.617897][T26898] netlink: 1272 bytes leftover after parsing attributes in process `syz.5.5672'. [ 1554.683385][T11933] usb 7-1: USB disconnect, device number 11 [ 1554.712077][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.754445][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.800537][T26910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1556.285311][T21520] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1556.653505][T26929] netlink: 'syz.2.5679': attribute type 4 has an invalid length. [ 1556.748753][T26932] FAULT_INJECTION: forcing a failure. [ 1556.748753][T26932] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.763032][T21520] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1556.776455][T21520] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.784594][T21520] usb 7-1: Product: syz [ 1556.789459][T21520] usb 7-1: Manufacturer: syz [ 1556.794169][T21520] usb 7-1: SerialNumber: syz [ 1556.801772][T21520] usb 7-1: config 0 descriptor?? [ 1556.810835][T21520] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1556.825196][T26932] CPU: 1 UID: 0 PID: 26932 Comm: syz.5.5681 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1556.825221][T26932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1556.825233][T26932] Call Trace: [ 1556.825240][T26932] [ 1556.825248][T26932] dump_stack_lvl+0x189/0x250 [ 1556.825278][T26932] ? __pfx____ratelimit+0x10/0x10 [ 1556.825304][T26932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1556.825331][T26932] ? __pfx__printk+0x10/0x10 [ 1556.825357][T26932] ? ref_tracker_alloc+0x318/0x460 [ 1556.825383][T26932] should_fail_ex+0x414/0x560 [ 1556.825409][T26932] should_failslab+0xa8/0x100 [ 1556.825430][T26932] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1556.825457][T26932] ? skb_clone+0x212/0x3a0 [ 1556.825484][T26932] skb_clone+0x212/0x3a0 [ 1556.825509][T26932] __netlink_deliver_tap+0x404/0x850 [ 1556.825540][T26932] ? netlink_deliver_tap+0x2e/0x1b0 [ 1556.825561][T26932] netlink_deliver_tap+0x19c/0x1b0 [ 1556.825582][T26932] netlink_unicast+0x72f/0x8d0 [ 1556.825609][T26932] netlink_sendmsg+0x805/0xb30 [ 1556.825637][T26932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1556.825660][T26932] ? aa_sock_msg_perm+0x94/0x160 [ 1556.825684][T26932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1556.825706][T26932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1556.825727][T26932] __sock_sendmsg+0x21c/0x270 [ 1556.825755][T26932] ____sys_sendmsg+0x505/0x830 [ 1556.825782][T26932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1556.825811][T26932] ? import_iovec+0x74/0xa0 [ 1556.825831][T26932] ___sys_sendmsg+0x21f/0x2a0 [ 1556.825859][T26932] ? __pfx____sys_sendmsg+0x10/0x10 [ 1556.825925][T26932] ? __fget_files+0x2a/0x420 [ 1556.825945][T26932] ? __fget_files+0x3a0/0x420 [ 1556.825972][T26932] __x64_sys_sendmsg+0x19b/0x260 [ 1556.825996][T26932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1556.826024][T26932] ? __pfx_ksys_write+0x10/0x10 [ 1556.826038][T26932] ? rcu_is_watching+0x15/0xb0 [ 1556.826068][T26932] ? do_syscall_64+0xbe/0x3b0 [ 1556.826098][T26932] do_syscall_64+0xfa/0x3b0 [ 1556.826120][T26932] ? lockdep_hardirqs_on+0x9c/0x150 [ 1556.826149][T11933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.826142][T26932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.826166][T26932] ? clear_bhb_loop+0x60/0xb0 [ 1556.826186][T26932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.826204][T26932] RIP: 0033:0x7ff78ab8e929 [ 1556.826223][T26932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1556.826242][T26932] RSP: 002b:00007ff78b98f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1556.826265][T26932] RAX: ffffffffffffffda RBX: 00007ff78adb5fa0 RCX: 00007ff78ab8e929 [ 1556.826280][T26932] RDX: 0000000000008190 RSI: 0000200000000300 RDI: 0000000000000003 [ 1556.826294][T26932] RBP: 00007ff78b98f090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.826305][T26932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.826318][T26932] R13: 0000000000000000 R14: 00007ff78adb5fa0 R15: 00007ff78aedfa28 [ 1556.826349][T26932] [ 1556.918436][ T5898] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 1557.455604][ T5898] usb 2-1: device descriptor read/64, error -71 [ 1557.665415][T14950] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1557.737481][ T5898] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 1557.825479][T14950] usb 6-1: Using ep0 maxpacket: 16 [ 1557.839053][T14950] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1557.848577][T14950] usb 6-1: config 0 has no interface number 0 [ 1557.858170][T14950] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1557.871279][T14950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.879847][T14950] usb 6-1: Product: syz [ 1557.884207][T14950] usb 6-1: Manufacturer: syz [ 1557.889513][T14950] usb 6-1: SerialNumber: syz [ 1557.901072][T14950] usb 6-1: config 0 descriptor?? [ 1557.906690][ T5898] usb 2-1: device descriptor read/64, error -71 [ 1557.906760][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.921449][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.942027][T14950] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1558.035631][ T5898] usb usb2-port1: attempt power cycle [ 1558.145793][T26938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.164436][T26938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.415322][ T5898] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 1558.457754][ T5898] usb 2-1: device descriptor read/8, error -71 [ 1558.523648][T26947] netlink: 'syz.3.5686': attribute type 1 has an invalid length. [ 1558.554842][T26947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1558.584649][T26947] bond2: (slave gretap2): making interface the new active one [ 1558.595790][T26947] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1558.705378][ T5898] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 1558.724836][ T30] audit: type=1326 audit(1751497224.393:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f778e929 code=0x7ffc0000 [ 1558.751221][ T30] audit: type=1326 audit(1751497224.393:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f778e929 code=0x7ffc0000 [ 1558.774419][ T5898] usb 2-1: device descriptor read/8, error -71 [ 1558.780939][ T30] audit: type=1326 audit(1751497224.423:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88f778e929 code=0x7ffc0000 [ 1558.804428][ T30] audit: type=1326 audit(1751497224.423:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f778e929 code=0x7ffc0000 [ 1558.833891][ T30] audit: type=1326 audit(1751497224.423:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f778e929 code=0x7ffc0000 [ 1558.868620][ T30] audit: type=1326 audit(1751497224.443:7807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f88f778e929 code=0x7ffc0000 [ 1558.891464][ T5898] usb usb2-port1: unable to enumerate USB device [ 1558.901157][ T30] audit: type=1326 audit(1751497224.443:7808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f778e929 code=0x7ffc0000 [ 1558.907694][T26954] loop2: detected capacity change from 0 to 7 [ 1558.927426][ T30] audit: type=1326 audit(1751497224.443:7809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f778e929 code=0x7ffc0000 [ 1558.932953][T26954] Dev loop2: unable to read RDB block 7 [ 1558.962259][T26954] loop2: unable to read partition table [ 1558.968214][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.970926][ T30] audit: type=1326 audit(1751497224.453:7810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f88f778e929 code=0x7ffc0000 [ 1558.977409][T26954] loop2: partition table beyond EOD, truncated [ 1559.001264][ T30] audit: type=1326 audit(1751497224.453:7811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26951 comm="syz.3.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f778e929 code=0x7ffc0000 [ 1559.007094][T26954] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1559.028830][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.273728][T26959] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5690'. [ 1559.351334][T14950] gspca_spca1528: reg_w err -71 [ 1559.356465][T14950] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1559.379575][T14950] usb 6-1: USB disconnect, device number 77 [ 1559.406350][T21520] gspca_sunplus: reg_r err -110 [ 1559.412204][T21520] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1559.460291][T26962] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5691'. [ 1560.139697][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.613460][ T977] usb 7-1: USB disconnect, device number 12 [ 1560.905517][T14950] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1560.924263][T26989] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5700'. [ 1561.173469][T26997] fuse: Unknown parameter 'group_id00000000000000000000' [ 1561.265311][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.274808][T14950] usb 6-1: Using ep0 maxpacket: 16 [ 1561.310026][T14950] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1561.324220][T14950] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.338823][T14950] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1561.366546][T14950] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1561.376175][T14950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.384406][T14950] usb 6-1: Product: syz [ 1561.393855][T14950] usb 6-1: Manufacturer: syz [ 1561.399471][T14950] usb 6-1: SerialNumber: syz [ 1561.578670][T27004] netlink: 'syz.1.5698': attribute type 4 has an invalid length. [ 1561.781600][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.891171][T21057] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1562.043178][T14950] usb 6-1: 0:2 : does not exist [ 1562.806138][T14950] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1562.868015][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.922337][T14950] usb 6-1: USB disconnect, device number 78 [ 1562.958863][T27013] netlink: 'syz.6.5703': attribute type 10 has an invalid length. [ 1562.959321][T21304] udevd[21304]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1563.023658][T21613] udevd[21613]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1563.266412][T27019] netlink: 428 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1563.326390][T27019] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1563.823657][T27028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5711'. [ 1563.834831][T27028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5711'. [ 1563.895255][T27034] FAULT_INJECTION: forcing a failure. [ 1563.895255][T27034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1563.916099][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.279862][T27034] CPU: 0 UID: 0 PID: 27034 Comm: syz.5.5709 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1564.279891][T27034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1564.279903][T27034] Call Trace: [ 1564.279911][T27034] [ 1564.279920][T27034] dump_stack_lvl+0x189/0x250 [ 1564.279953][T27034] ? __pfx____ratelimit+0x10/0x10 [ 1564.279981][T27034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1564.280010][T27034] ? __pfx__printk+0x10/0x10 [ 1564.280031][T27034] ? __might_fault+0xb0/0x130 [ 1564.280060][T27034] should_fail_ex+0x414/0x560 [ 1564.280087][T27034] _copy_from_user+0x2d/0xb0 [ 1564.280107][T27034] iommufd_fops_ioctl+0x3f9/0x520 [ 1564.280139][T27034] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1564.280178][T27034] ? __fget_files+0x3a0/0x420 [ 1564.280198][T27034] ? __fget_files+0x2a/0x420 [ 1564.280221][T27034] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1564.280248][T27034] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1564.280276][T27034] __se_sys_ioctl+0xf9/0x170 [ 1564.280305][T27034] do_syscall_64+0xfa/0x3b0 [ 1564.280332][T27034] ? lockdep_hardirqs_on+0x9c/0x150 [ 1564.280359][T27034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.280377][T27034] ? clear_bhb_loop+0x60/0xb0 [ 1564.280400][T27034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.280419][T27034] RIP: 0033:0x7ff78ab8e929 [ 1564.280435][T27034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1564.280452][T27034] RSP: 002b:00007ff78b98f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1564.280472][T27034] RAX: ffffffffffffffda RBX: 00007ff78adb5fa0 RCX: 00007ff78ab8e929 [ 1564.280487][T27034] RDX: 0000200000002d40 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1564.280499][T27034] RBP: 00007ff78b98f090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.280511][T27034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.280534][T27034] R13: 0000000000000000 R14: 00007ff78adb5fa0 R15: 00007ff78aedfa28 [ 1564.280563][T27034] [ 1564.483285][ C0] vkms_vblank_simulate: vblank timer overrun [ 1564.946694][T11933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.012586][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5717'. [ 1565.199106][T27058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5719'. [ 1565.993883][T27073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5724'. [ 1566.004444][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.657007][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1566.657022][ T30] audit: type=1400 audit(1751497232.333:7822): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1567.036151][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.175686][T27088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5729'. [ 1567.387349][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 1567.444248][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5730'. [ 1567.462469][ T5943] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.502818][ T5943] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1567.531559][T27093] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5731'. [ 1567.592555][ T5943] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1567.649158][ T5943] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1567.659057][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1567.680734][ T5943] usb 4-1: SerialNumber: syz [ 1567.977507][ T5943] usb 4-1: USB disconnect, device number 94 [ 1568.026283][ T30] audit: type=1326 audit(1751497233.703:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.1.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1568.067012][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.090337][ T30] audit: type=1326 audit(1751497233.703:7824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.1.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1568.114162][ T30] audit: type=1326 audit(1751497233.703:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.1.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1568.137895][T27111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.150417][ T30] audit: type=1326 audit(1751497233.703:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.1.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1568.224631][ T30] audit: type=1326 audit(1751497233.703:7827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.1.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1568.260668][ T30] audit: type=1326 audit(1751497233.703:7828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.1.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1568.323283][ T30] audit: type=1326 audit(1751497233.703:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.1.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1568.347918][ T30] audit: type=1326 audit(1751497233.703:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.1.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1568.388873][ T30] audit: type=1326 audit(1751497233.703:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27105 comm="syz.1.5736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd15a98e929 code=0x7ffc0000 [ 1568.491800][T27122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5741'. [ 1568.511045][T27124] fuse: Unknown parameter 'sroup_id' [ 1568.558517][T27122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.595387][T27122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.775183][ T5943] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1568.786246][T11933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.980198][ T5943] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1568.989351][ T5943] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1568.999675][ T5943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1569.029529][ T5943] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 1569.060134][ T5943] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1569.078047][ T5943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1569.088442][ T5943] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1569.097763][ T5943] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1569.109042][ T5943] usb 4-1: Product: syz [ 1569.120161][ T5943] usb 4-1: Manufacturer: syz [ 1569.130765][ T5943] usb 4-1: SerialNumber: syz [ 1569.151051][ T5943] usb 4-1: config 0 descriptor?? [ 1569.205173][T14950] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1569.268368][T27137] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.5745'. [ 1569.368173][ T5943] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1569.375558][T14950] usb 6-1: config 0 has no interfaces? [ 1569.387921][T14950] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1569.397702][ T5943] usb 4-1: selecting invalid altsetting 0 [ 1569.419097][T14950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.454586][T14950] usb 6-1: Product: syz [ 1569.469784][ T5943] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1569.478727][T14950] usb 6-1: Manufacturer: syz [ 1569.483761][T14950] usb 6-1: SerialNumber: syz [ 1569.496998][ T5943] usb 4-1: USB disconnect, device number 95 [ 1569.501586][T21613] udevd[21613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1569.522546][T14950] usb 6-1: config 0 descriptor?? [ 1569.756196][ T5943] usb 6-1: USB disconnect, device number 79 [ 1569.825384][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.142026][T27152] netlink: 'syz.3.5752': attribute type 10 has an invalid length. [ 1570.165421][T14950] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1570.337190][T14950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1570.345961][T14950] usb 3-1: not running at top speed; connect to a high speed hub [ 1570.356767][T11933] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1570.366686][T14950] usb 3-1: config 24 has an invalid interface number: 219 but max is 0 [ 1570.387038][T14950] usb 3-1: config 24 has no interface number 0 [ 1570.393952][T14950] usb 3-1: config 24 interface 219 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1570.408885][T14950] usb 3-1: config 24 interface 219 has no altsetting 0 [ 1570.431246][T14950] usb 3-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=2f.c7 [ 1570.441127][T14950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.450395][T14950] usb 3-1: Product: syz [ 1570.454772][T14950] usb 3-1: Manufacturer: syz [ 1570.460781][T14950] usb 3-1: SerialNumber: syz [ 1570.472042][T27139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1570.515156][T11933] usb 2-1: Using ep0 maxpacket: 32 [ 1570.524535][T11933] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 1570.534701][T11933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.543668][T11933] usb 2-1: Product: syz [ 1570.548437][T11933] usb 2-1: Manufacturer: syz [ 1570.553165][T11933] usb 2-1: SerialNumber: syz [ 1570.561707][T11933] usb 2-1: config 0 descriptor?? [ 1570.572497][T11933] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 1570.615201][ T5930] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1570.775348][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 1570.783771][ T5930] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1570.793146][ T5930] usb 4-1: config 0 has no interface number 0 [ 1570.794017][T27150] syz_tun: entered allmulticast mode [ 1570.800132][ T5930] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1570.822244][ T5930] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1570.832736][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.842020][ T5930] usb 4-1: Product: syz [ 1570.846896][ T5930] usb 4-1: Manufacturer: syz [ 1570.851592][ T5930] usb 4-1: SerialNumber: syz [ 1570.861674][ T5930] usb 4-1: config 0 descriptor?? [ 1570.868574][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.886561][ T5930] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1570.896954][ T5930] em28xx 4-1:0.132: Video interface 132 found: [ 1571.042519][T11933] gspca_sunplus: reg_w_riv err -71 [ 1571.052483][T11933] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1571.075428][T11933] usb 2-1: USB disconnect, device number 116 [ 1571.295438][ T5930] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1571.508091][T27168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.517279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.527804][T27168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.540397][T21064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.555302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.574655][T27166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1571.593345][T27166] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1571.613230][T27166] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1571.638532][ T5930] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1571.673199][ T5930] em28xx 4-1:0.132: board has no eeprom [ 1571.736983][ T5930] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1571.748132][ T5930] em28xx 4-1:0.132: analog set to bulk mode. [ 1571.754414][T11933] em28xx 4-1:0.132: Registering V4L2 extension [ 1571.780892][ T5930] usb 4-1: USB disconnect, device number 96 [ 1571.813728][ T5930] em28xx 4-1:0.132: Disconnecting em28xx [ 1572.017658][T11933] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1572.024888][T11933] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1572.033969][T11933] em28xx 4-1:0.132: No AC97 audio processor [ 1572.042749][T11933] usb 4-1: Decoder not found [ 1572.048118][T11933] em28xx 4-1:0.132: failed to create media graph [ 1572.054539][T11933] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1572.063813][T11933] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1572.073199][ T5930] em28xx 4-1:0.132: Closing input extension [ 1572.084869][ T5930] em28xx 4-1:0.132: Freeing device [ 1572.605433][ T5930] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1572.759340][ T5930] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1572.778846][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.788704][ T5930] usb 4-1: Product: syz [ 1572.794244][ T5930] usb 4-1: Manufacturer: syz [ 1572.814789][ T5930] usb 4-1: SerialNumber: syz [ 1573.015731][ T5930] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1573.031781][T11933] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1573.235701][T14950] usb 3-1: Could not find all expected endpoints [ 1573.292174][T14950] usb 3-1: USB disconnect, device number 38 [ 1573.444159][ T5943] usb 4-1: USB disconnect, device number 97 [ 1573.506435][T25750] Bluetooth: hci1: command 0x0405 tx timeout [ 1573.563003][T27192] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1573.875107][T14950] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1573.901893][T27201] bridge3: entered promiscuous mode [ 1574.078494][ T5930] net_ratelimit: 5 callbacks suppressed [ 1574.078511][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.237290][T27194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.275462][T27166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.284238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.315079][T27194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.342370][T11933] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1574.381631][T11933] ath9k_htc: Failed to initialize the device [ 1574.417360][ T5943] usb 4-1: ath9k_htc: USB layer deinitialized [ 1574.513695][T27214] fuse: Unknown parameter 'group_id00000000000000000000' [ 1574.572560][T14950] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1574.598837][T14950] usb 2-1: no configurations [ 1574.609985][T14950] usb 2-1: can't read configurations, error -22 [ 1574.675216][ T5930] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1574.838620][ T5930] usb 7-1: config 0 has no interfaces? [ 1574.848916][ T5930] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1574.858944][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.871863][ T5930] usb 7-1: Product: syz [ 1574.882072][ T5930] usb 7-1: Manufacturer: syz [ 1574.888861][ T5930] usb 7-1: SerialNumber: syz [ 1575.020924][ T5930] usb 7-1: config 0 descriptor?? [ 1575.116810][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.196720][T27225] ucma_write: process 1956 (syz.1.5773) changed security contexts after opening file descriptor, this is not allowed. [ 1575.309212][ T977] usb 7-1: USB disconnect, device number 13 [ 1575.386149][ T5930] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1575.545130][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 1575.552407][ T5930] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1575.568387][ T5930] usb 3-1: config 0 has no interface number 0 [ 1575.574571][ T5930] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1575.585492][T25750] Bluetooth: hci1: command 0x0405 tx timeout [ 1575.616621][ T5930] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1575.644548][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.658995][ T5930] usb 3-1: Product: syz [ 1575.681415][ T5930] usb 3-1: Manufacturer: syz [ 1575.694418][ T5930] usb 3-1: SerialNumber: syz [ 1575.714540][ T5930] usb 3-1: config 0 descriptor?? [ 1575.738366][ T5930] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1575.761262][ T5930] em28xx 3-1:0.132: Video interface 132 found: [ 1575.826734][T21062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.936747][T27238] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5777'. [ 1575.995838][T14950] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1576.145471][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.154839][ T5930] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1576.164870][T14950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.177021][T14950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1576.188094][T14950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1576.197895][T14950] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1576.212185][T14950] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1576.221413][T14950] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1576.230094][T14950] usb 4-1: Manufacturer: syz [ 1576.241574][T14950] usb 4-1: config 0 descriptor?? [ 1576.421202][T27223] kvm: pic: non byte write [ 1576.517265][T14950] rc_core: IR keymap rc-hauppauge not found [ 1576.523405][T14950] Registered IR keymap rc-empty [ 1576.528717][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.555195][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.576242][T14950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1576.591999][T14950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input86 [ 1576.610065][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.635250][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.655275][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.665544][T27232] QAT: Invalid ioctl 21531 [ 1576.675787][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.705339][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.735211][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.778103][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.815713][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.865197][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.900026][T14950] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1576.967979][T14950] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1577.013027][T14950] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1577.062287][T14950] usb 4-1: USB disconnect, device number 98 [ 1577.195630][T11933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.230457][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1577.230473][ T30] audit: type=1326 audit(1751497242.903:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.6.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90f18e929 code=0x7ffc0000 [ 1577.287507][ T5930] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1577.287538][ T5930] em28xx 3-1:0.132: board has no eeprom [ 1577.322636][ T30] audit: type=1326 audit(1751497242.903:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.6.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90f18e929 code=0x7ffc0000 [ 1577.395108][ T30] audit: type=1326 audit(1751497242.943:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.6.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff90f18e929 code=0x7ffc0000 [ 1577.417656][ C0] vkms_vblank_simulate: vblank timer overrun [ 1577.424169][ T5930] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1577.437434][ T5930] em28xx 3-1:0.132: analog set to bulk mode. [ 1577.443499][T11933] em28xx 3-1:0.132: Registering V4L2 extension [ 1577.462528][ T30] audit: type=1326 audit(1751497242.943:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.6.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90f18e929 code=0x7ffc0000 [ 1577.507226][T27261] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.5787'. [ 1577.535614][ T30] audit: type=1326 audit(1751497242.943:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.6.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90f18e929 code=0x7ffc0000 [ 1577.570155][T27263] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5786'. [ 1577.611223][T11933] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1577.628788][ T30] audit: type=1326 audit(1751497242.943:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.6.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff90f18e929 code=0x7ffc0000 [ 1577.655938][T11933] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1577.665277][T25750] Bluetooth: hci1: command 0x0405 tx timeout [ 1577.687083][ T30] audit: type=1326 audit(1751497242.943:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.6.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff90f12ab19 code=0x7ffc0000 [ 1577.711073][T11933] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1577.745592][T27265] netlink: 'syz.3.5788': attribute type 30 has an invalid length. [ 1577.753466][T27265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5788'. [ 1577.763608][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.773931][T11933] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1577.804204][ T30] audit: type=1326 audit(1751497242.943:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.6.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90f18e929 code=0x7ffc0000 [ 1577.828635][T11933] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1577.870972][T11933] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1577.885501][ T30] audit: type=1326 audit(1751497242.943:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.6.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff90f12ab19 code=0x7ffc0000 [ 1577.892553][T11933] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1577.945223][ T30] audit: type=1326 audit(1751497242.943:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27253 comm="syz.6.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90f18e929 code=0x7ffc0000 [ 1577.998230][T11933] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1578.170933][ T5930] usb 3-1: USB disconnect, device number 39 [ 1578.178507][ T5930] em28xx 3-1:0.132: Disconnecting em28xx [ 1578.225612][T22114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.241296][T11933] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1578.277647][T11933] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1578.315479][T11933] em28xx 3-1:0.132: No AC97 audio processor [ 1578.362592][T11933] usb 3-1: Decoder not found [ 1578.364177][T27284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5794'. [ 1578.432681][T27284] vlan3: entered promiscuous mode [ 1578.474644][T27284] ip6gretap0: entered promiscuous mode [ 1578.516773][T11933] em28xx 3-1:0.132: failed to create media graph [ 1578.554345][T11933] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1578.599858][T27287] ================================================================== [ 1578.601245][T11933] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1578.607939][T27287] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 1578.607974][T27287] Read of size 8 at addr ffff88807c4ec738 by task v4l_id/27287 [ 1578.607990][T27287] [ 1578.608003][T27287] CPU: 1 UID: 0 PID: 27287 Comm: v4l_id Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1578.608032][T27287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1578.608046][T27287] Call Trace: [ 1578.608055][T27287] [ 1578.608064][T27287] dump_stack_lvl+0x189/0x250 [ 1578.608100][T27287] ? __virt_addr_valid+0x1c8/0x5c0 [ 1578.608121][T27287] ? rcu_is_watching+0x15/0xb0 [ 1578.608152][T27287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1578.608183][T27287] ? rcu_is_watching+0x15/0xb0 [ 1578.608212][T27287] ? lock_release+0x4b/0x3e0 [ 1578.608243][T27287] ? __virt_addr_valid+0x1c8/0x5c0 [ 1578.608263][T27287] ? __virt_addr_valid+0x4a5/0x5c0 [ 1578.608284][T27287] print_report+0xd2/0x2b0 [ 1578.608310][T27287] ? v4l2_fh_open+0xc7/0x430 [ 1578.608337][T27287] kasan_report+0x118/0x150 [ 1578.608360][T27287] ? v4l2_fh_open+0xc7/0x430 [ 1578.608393][T27287] v4l2_fh_open+0xc7/0x430 [ 1578.608422][T27287] ? __pfx___mutex_lock+0x10/0x10 [ 1578.608455][T27287] em28xx_v4l2_open+0x157/0x9a0 [ 1578.608490][T27287] v4l2_open+0x20c/0x360 [ 1578.608510][T27287] chrdev_open+0x4c9/0x5e0 [ 1578.608534][T27287] ? __pfx_chrdev_open+0x10/0x10 [ 1578.608561][T27287] ? __pfx_chrdev_open+0x10/0x10 [ 1578.608582][T27287] do_dentry_open+0xdf0/0x1970 [ 1578.608615][T27287] vfs_open+0x3b/0x340 [ 1578.608638][T27287] ? path_openat+0x2ecd/0x3830 [ 1578.608668][T27287] path_openat+0x2ee5/0x3830 [ 1578.608695][T27287] ? arch_stack_walk+0xfc/0x150 [ 1578.608732][T27287] ? __pfx_path_openat+0x10/0x10 [ 1578.608759][T27287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.608790][T27287] do_filp_open+0x1fa/0x410 [ 1578.608818][T27287] ? __lock_acquire+0xab9/0xd20 [ 1578.608845][T27287] ? __pfx_do_filp_open+0x10/0x10 [ 1578.608885][T27287] ? _raw_spin_unlock+0x28/0x50 [ 1578.608910][T27287] ? alloc_fd+0x64c/0x6c0 [ 1578.608936][T27287] do_sys_openat2+0x121/0x1c0 [ 1578.608963][T27287] ? __pfx_do_sys_openat2+0x10/0x10 [ 1578.608990][T27287] ? exc_page_fault+0x76/0xf0 [ 1578.609026][T27287] ? do_user_addr_fault+0xc8a/0x1390 [ 1578.609055][T27287] __x64_sys_openat+0x138/0x170 [ 1578.609084][T27287] do_syscall_64+0xfa/0x3b0 [ 1578.609115][T27287] ? lockdep_hardirqs_on+0x9c/0x150 [ 1578.609143][T27287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.609163][T27287] ? clear_bhb_loop+0x60/0xb0 [ 1578.609186][T27287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.609206][T27287] RIP: 0033:0x7f77832a7407 [ 1578.609226][T27287] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1578.609244][T27287] RSP: 002b:00007ffc7b822410 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1578.609265][T27287] RAX: ffffffffffffffda RBX: 00007f7783943880 RCX: 00007f77832a7407 [ 1578.609281][T27287] RDX: 0000000000000000 RSI: 00007ffc7b823f1a RDI: ffffffffffffff9c [ 1578.609296][T27287] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1578.609308][T27287] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1578.609322][T27287] R13: 00007ffc7b822660 R14: 00007f7783aaa000 R15: 0000565113d5b4d8 [ 1578.609346][T27287] [ 1578.609354][T27287] [ 1578.670422][ T5930] em28xx 3-1:0.132: Closing input extension [ 1578.671594][T27287] Allocated by task 11933: [ 1578.671607][T27287] kasan_save_track+0x3e/0x80 [ 1578.671637][T27287] __kasan_kmalloc+0x93/0xb0 [ 1578.671653][T27287] __kmalloc_cache_noprof+0x230/0x3d0 [ 1578.962998][T27287] em28xx_v4l2_init+0x10b/0x2e70 [ 1578.967955][T27287] em28xx_init_extension+0x120/0x1c0 [ 1578.973250][T27287] process_scheduled_works+0xade/0x17b0 [ 1578.978826][T27287] worker_thread+0x8a0/0xda0 [ 1578.983436][T27287] kthread+0x70e/0x8a0 [ 1578.987518][T27287] ret_from_fork+0x3fc/0x770 [ 1578.992136][T27287] ret_from_fork_asm+0x1a/0x30 [ 1578.996908][T27287] [ 1578.999240][T27287] Freed by task 11933: [ 1579.003310][T27287] kasan_save_track+0x3e/0x80 [ 1579.008002][T27287] kasan_save_free_info+0x46/0x50 [ 1579.013040][T27287] __kasan_slab_free+0x62/0x70 [ 1579.017806][T27287] kfree+0x18e/0x440 [ 1579.021719][T27287] em28xx_v4l2_init+0x1683/0x2e70 [ 1579.026756][T27287] em28xx_init_extension+0x120/0x1c0 [ 1579.032050][T27287] process_scheduled_works+0xade/0x17b0 [ 1579.037611][T27287] worker_thread+0x8a0/0xda0 [ 1579.042213][T27287] kthread+0x70e/0x8a0 [ 1579.046300][T27287] ret_from_fork+0x3fc/0x770 [ 1579.050902][T27287] ret_from_fork_asm+0x1a/0x30 [ 1579.055677][T27287] [ 1579.058018][T27287] The buggy address belongs to the object at ffff88807c4ec000 [ 1579.058018][T27287] which belongs to the cache kmalloc-8k of size 8192 [ 1579.072073][T27287] The buggy address is located 1848 bytes inside of [ 1579.072073][T27287] freed 8192-byte region [ffff88807c4ec000, ffff88807c4ee000) [ 1579.086053][T27287] [ 1579.088388][T27287] The buggy address belongs to the physical page: [ 1579.094810][T27287] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c4e8 [ 1579.103615][T27287] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1579.112114][T27287] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1579.119661][T27287] page_type: f5(slab) [ 1579.123656][T27287] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 1579.132243][T27287] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1579.140828][T27287] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000 [ 1579.149505][T27287] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1579.158182][T27287] head: 00fff00000000003 ffffea0001f13a01 00000000ffffffff 00000000ffffffff [ 1579.166862][T27287] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1579.175531][T27287] page dumped because: kasan: bad access detected [ 1579.181946][T27287] page_owner tracks the page as allocated [ 1579.187660][T27287] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27254, tgid 27253 (syz.6.5783), ts 1577287283787, free_ts 1577116147677 [ 1579.209374][T27287] post_alloc_hook+0x240/0x2a0 [ 1579.214146][T27287] get_page_from_freelist+0x21e4/0x22c0 [ 1579.219707][T27287] __alloc_frozen_pages_noprof+0x181/0x370 [ 1579.225520][T27287] alloc_pages_mpol+0x232/0x4a0 [ 1579.230373][T27287] allocate_slab+0x8a/0x3b0 [ 1579.234883][T27287] ___slab_alloc+0xbfc/0x1480 [ 1579.239561][T27287] __kmalloc_cache_noprof+0x296/0x3d0 [ 1579.244934][T27287] audit_log_d_path+0xb5/0x190 [ 1579.249727][T27287] audit_log_d_path_exe+0x42/0x70 [ 1579.254753][T27287] audit_log_task+0x2b3/0x3c0 [ 1579.259432][T27287] audit_seccomp+0x86/0x190 [ 1579.263941][T27287] __seccomp_filter+0x9aa/0x1a40 [ 1579.268906][T27287] syscall_trace_enter+0xaa/0x160 [ 1579.273943][T27287] do_syscall_64+0xd3/0x3b0 [ 1579.278456][T27287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.284345][T27287] page last free pid 21304 tgid 21304 stack trace: [ 1579.290841][T27287] __free_frozen_pages+0xc71/0xe70 [ 1579.295955][T27287] __put_partials+0x161/0x1c0 [ 1579.300638][T27287] put_cpu_partial+0x17c/0x250 [ 1579.305414][T27287] __slab_free+0x2f7/0x400 [ 1579.309832][T27287] qlist_free_all+0x97/0x140 [ 1579.314424][T27287] kasan_quarantine_reduce+0x148/0x160 [ 1579.319894][T27287] __kasan_slab_alloc+0x22/0x80 [ 1579.324770][T27287] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1579.330232][T27287] getname_flags+0xb8/0x540 [ 1579.334747][T27287] do_readlinkat+0xbc/0x500 [ 1579.339254][T27287] __x64_sys_readlink+0x7f/0x90 [ 1579.344115][T27287] do_syscall_64+0xfa/0x3b0 [ 1579.348632][T27287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.354533][T27287] [ 1579.356862][T27287] Memory state around the buggy address: [ 1579.362488][T27287] ffff88807c4ec600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1579.370549][T27287] ffff88807c4ec680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1579.378617][T27287] >ffff88807c4ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1579.386669][T27287] ^ [ 1579.392555][T27287] ffff88807c4ec780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1579.400621][T27287] ffff88807c4ec800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1579.408686][T27287] ================================================================== [ 1579.451950][T11933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.472252][T27287] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1579.479473][T27287] CPU: 1 UID: 0 PID: 27287 Comm: v4l_id Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1579.491181][T27287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1579.501232][T27287] Call Trace: [ 1579.504517][T27287] [ 1579.507454][T27287] dump_stack_lvl+0x99/0x250 [ 1579.512053][T27287] ? __asan_memcpy+0x40/0x70 [ 1579.516648][T27287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1579.521853][T27287] ? __pfx__printk+0x10/0x10 [ 1579.526453][T27287] panic+0x2db/0x790 [ 1579.530363][T27287] ? __pfx_panic+0x10/0x10 [ 1579.534795][T27287] ? check_panic_on_warn+0x75/0xb0 [ 1579.539921][T27287] ? v4l2_fh_open+0xc7/0x430 [ 1579.544524][T27287] check_panic_on_warn+0x89/0xb0 [ 1579.549472][T27287] ? v4l2_fh_open+0xc7/0x430 [ 1579.554077][T27287] end_report+0x78/0x160 [ 1579.558325][T27287] kasan_report+0x129/0x150 [ 1579.562828][T27287] ? v4l2_fh_open+0xc7/0x430 [ 1579.567427][T27287] v4l2_fh_open+0xc7/0x430 [ 1579.571866][T27287] ? __pfx___mutex_lock+0x10/0x10 [ 1579.576903][T27287] em28xx_v4l2_open+0x157/0x9a0 [ 1579.581784][T27287] v4l2_open+0x20c/0x360 [ 1579.586043][T27287] chrdev_open+0x4c9/0x5e0 [ 1579.590470][T27287] ? __pfx_chrdev_open+0x10/0x10 [ 1579.595417][T27287] ? __pfx_chrdev_open+0x10/0x10 [ 1579.600356][T27287] do_dentry_open+0xdf0/0x1970 [ 1579.605138][T27287] vfs_open+0x3b/0x340 [ 1579.609227][T27287] ? path_openat+0x2ecd/0x3830 [ 1579.614002][T27287] path_openat+0x2ee5/0x3830 [ 1579.618603][T27287] ? arch_stack_walk+0xfc/0x150 [ 1579.623465][T27287] ? __pfx_path_openat+0x10/0x10 [ 1579.628436][T27287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.634517][T27287] do_filp_open+0x1fa/0x410 [ 1579.639034][T27287] ? __lock_acquire+0xab9/0xd20 [ 1579.643894][T27287] ? __pfx_do_filp_open+0x10/0x10 [ 1579.648964][T27287] ? _raw_spin_unlock+0x28/0x50 [ 1579.653830][T27287] ? alloc_fd+0x64c/0x6c0 [ 1579.658173][T27287] do_sys_openat2+0x121/0x1c0 [ 1579.662859][T27287] ? __pfx_do_sys_openat2+0x10/0x10 [ 1579.668060][T27287] ? exc_page_fault+0x76/0xf0 [ 1579.672776][T27287] ? do_user_addr_fault+0xc8a/0x1390 [ 1579.678077][T27287] __x64_sys_openat+0x138/0x170 [ 1579.682940][T27287] do_syscall_64+0xfa/0x3b0 [ 1579.687451][T27287] ? lockdep_hardirqs_on+0x9c/0x150 [ 1579.692684][T27287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.698752][T27287] ? clear_bhb_loop+0x60/0xb0 [ 1579.703541][T27287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.709441][T27287] RIP: 0033:0x7f77832a7407 [ 1579.713864][T27287] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1579.733480][T27287] RSP: 002b:00007ffc7b822410 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1579.741919][T27287] RAX: ffffffffffffffda RBX: 00007f7783943880 RCX: 00007f77832a7407 [ 1579.749899][T27287] RDX: 0000000000000000 RSI: 00007ffc7b823f1a RDI: ffffffffffffff9c [ 1579.757880][T27287] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1579.765858][T27287] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1579.773837][T27287] R13: 00007ffc7b822660 R14: 00007f7783aaa000 R15: 0000565113d5b4d8 [ 1579.781827][T27287] [ 1579.785204][T27287] Kernel Offset: disabled [ 1579.789536][T27287] Rebooting in 86400 seconds..