last executing test programs: 5m56.596083339s ago: executing program 2 (id=1367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x41, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 5m55.595086062s ago: executing program 2 (id=1368): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000006c43270000408010400000000000000000000000006000240e7f700000500030021000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r2, 0xffffffffffffffff, {0x1, 0x1}, 0x2}, 0xfffffffffffffda6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 5m53.595214394s ago: executing program 2 (id=1374): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) (async, rerun: 64) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) fchdir(r1) (async) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000200)=""/184, 0x11a) (async) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e20005e8d545bfe264878000000000000000000e100000000000000000000000000000000000000c7dd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000100000001"], 0x110) (async) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x7, 0x9, 0x3}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000100)={0xb, {{0xa, 0x4e20, 0x6, @remote}}}, 0x90) (rerun: 32) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"}) r5 = fanotify_init(0x200, 0x0) writev(r5, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) read(r4, &(0x7f0000000280)=""/4096, 0x1000) (async) syz_open_pts(r4, 0x4300) 5m52.955250126s ago: executing program 2 (id=1381): syz_emit_ethernet(0x76, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fa0a6b", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [@fragment={0x2c}, @srh]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00fffc00fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 5m52.735915599s ago: executing program 2 (id=1384): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x10000, 0x200000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000140)=""/18) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x144, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xf4, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x144}}, 0x0) 5m51.280945915s ago: executing program 2 (id=1392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001900)=ANY=[], 0x4354}, 0x1, 0x0, 0x0, 0x10}, 0x40841) (async) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0xd30, 0x400, 0x4, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m36.132861618s ago: executing program 32 (id=1392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001900)=ANY=[], 0x4354}, 0x1, 0x0, 0x0, 0x10}, 0x40841) (async) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0xd30, 0x400, 0x4, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 22.13901262s ago: executing program 4 (id=2775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800e0010500000020000000740000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f837974fd76b540a8d000000b7030010a4160000850000000600000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 21.646492418s ago: executing program 4 (id=2778): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)="01bb", 0x2}, {0x0, 0x16}], 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800034000e90001080001400000000305000200020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 8.739781937s ago: executing program 3 (id=2835): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x11e, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$video(&(0x7f0000000040), 0x85, 0x20000) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000c40)=@multiplanar_overlay={0xfffffff7, 0x8, 0x4, 0x0, 0x2ea9, {0x0}, {0x7, 0x8, 0x4, 0x0, 0x6, 0x0, "2f64952d"}, 0x101, 0x3, {0x0}, 0x9}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, 0x70bd2a, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'cts(ctr(camellia))\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e20}}]}, 0x170}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e06, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000002900000043"], 0x18}, 0x20040081) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000680)=""/239, 0xef}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x2000000}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r4], 0x34}}, 0x24004) 8.224375163s ago: executing program 0 (id=2838): execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000400)={[&(0x7f0000000180)='+-&-},.{\x00']}, 0x0, 0x1000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000010000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) 8.067068252s ago: executing program 3 (id=2839): r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x6, 0x60100) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000100)={0x1010, 0x453, 0x4, 0x70bd25, 0x25dfdbfe, "06bcddfdd5934bcb9b47dbea13e81cf3be84257e0328e28dd0e2f65a67204e5fb2128caf4d96bb73486255a92719fe544c70dfd40d49d059329c4c0899231bed6a9cb95b7d87b50eadc0a6c18e37ed511fc864a94c839b42c28017ea67fbe841a19775e5efe54fab88dc7099ca2c35184f720e8e13edfe9e80da130e17d7042101983f22d8e634e18ba81aa2c9ddbb306f571a6e2beb0e276a091e1ef4d0721b232f421cda82837a4b5e423d03b53da3d9a75a42669746bb3c5fbff4faaf06e358424ebd85173e95d34eea35b48d043a146bdb2938c0cf15632afd1f2d425fc242d85f532c4478d61518294256050404342249a8b68c81846d818cc08f26e1c40c95c3c0038b2fc9f9e05ae8146658b8b46c2ef30e313eac4d3cc5b97f79fa6bf41511a7bbdca1b9f84aea4302aa789120d1e5499f25ffae36c5a8136a8f0e7bcaaebb729e83fd1da924c615229ae48e37b22cbd1f504b84068e5d1c28bed038a052924aa392bc4642d978a3b0b42320557e390b743a505317bc389afff2f9af5274d65f385333ad4d7140b02f67d8ef8c7678edd993c893907b1957843e8abaf80ffc164d7b52da9818cd0e7378e684c94c6a9a5a039179cffd822b4104c3c3ac6b0890fe698cd0dbec28141a6b8eba5076a96c4bd3f769ebc2f8c4181cbd2f87b9d7c7f289c55181ea5b5d5e82c511c8785c785c4f5342c4982219ec35ed17f7f0bdf42624ce436549215957b69172de6d0864f8488884c02c7751f8923adb1ec4692a2dda60925489cec7624f5ec546aff3113f6c202466a4914fc70a5a12d845c57bc1d0cda27b1992008d065cd3080793947c6d13b0621c9de741cfaeea4a15b002506a1be6cce278700444b28ebdc6d19573861f8c283934e0c4fe14d633e12e87a12fae99b56c6660b3fe4646203149e3a808ad65499979d9d34b55428c46d2f6758ea17554363da88e7190a9825cb9489ae8be155aaf0335095cba881c3f32597faaaf195640964d58761c1235baf91b7dfc080dabeffa3fec1e8c90538f98815380b483120664c1a2d44c2d87a12703b301b1305a9f08502ed09de9410a9537fbe0ca9ea107d626ce2ad9c7bf5133238b6de00aa3253e1b085e9aeab42d2b8e7c36de5bd2ab612bdffdcc4e46faeea2ebfcf0c4bd51a9fc09c212a09ea5022056b743353d8fe6e854cb0f8e3421ee7b0842543a2407d922276fca6969ccc79620ab360c90bd05b24d9a8762577908be338f166823919bf8eaffb0a6a4ce6d8c71153f18d7137c378b3c8f34a7192bcdaca0dee45f5d80d0f0c27910f4dba4e767a626568a10af9c73b7d98df5b803f146c013a804b15266675faa30fc15a75cdb562e00efd353b3e92d7d0f06554aa694d0fdc6d58eda953f51266f870b1a316fb0aa557eeb9f2aa7c40d1907cb7d72141c1444ff2b5de9002c8e443c83b8747e06db494928ad7cc915556636aba4ef3b8c59999b2432172a91ed8533c8e1328c183ebcf7cb3a58869719ea615e9a776174a0c91dcb6f7a489c2d53081ec1e12cb04e71ae18af077ecfd3db19fa1d5f6fa9fa07cd60a9d31e42e3067ff21614a0d686ba84456031d9b8e1a9d77231c0dfa82ff739070efe448875a527c1a3369893216af2f259fe4848c5f65698e0adf9913aa5bc68624341e54e677a6c94ec9e7a4359fdf25d0dd64c968218887020547a56887228f7f16b21a224a3a5ba545b61a7e08a7d2157ab19ee67f7cdaa1be3fae3573a24b317b1fd04b1f135ddecd6426ab2323bee8d93869847a1d0efc33a1d16f4eff8c47275fd07995fd9c2f201b691687b3cd4ec5a90d611a1f5cc525d3c1c35f94c5db7d8839d71a668052499eaa5b0d932718b8e46a323402ce35e2e9425e9abf20b267713286c7afadfeef716f7b2cf828d114e94c9b4f52f2174e2dde1a911b669ddd81cb915e5ae32193f39489b0ea48677fdf70aa257b215a18281e129e0c361698f73a396d70200adf6bd0302a29b33edfb11d6bba015638e328957debc9bee63c05be8639c59b836643cc67835a351b70f5074838968e89c2ef3b56760d715847da1b5ff4ee01e90cc8b87e64577da448bf284f99dac63eee372cacb7226750c565bc09236655a1b302213ba6ab65b3f534132abca1c028a8db527c910b20bde500d978d2245b756696174a1049e94382a4f8bfd5262cb08b3145e961acea33c4b04c1d3264852a7a98c3d0b084c0047e45692a4c7f00f9af597b07a3fb4c8b0ddb4b62b2f5a5e530fd9eaa4d44a1cb3eb852c3037f76cf40a0b5bf6de2c6b8d3eddd90538aea49f7bbd272ad2be3232f22e83efc08a9e6da599d3e4bf41bcb009ea7c3d6a38e4a2b9c03ed8f51a1be800a85d05f471796222968621ce12167b892865deda61f68f3f81fb06f76ba36d339436025dbab828e05f4494d8de776ff9f257f3759f7d8973b5ae39adc108ee3d5e4b8d7180a0fd38fb83c1ee53751fcc0098abba41e2fc8105dcbcbdcb24be541b52172b161253ac6ac8d023cdfa9c24a2a8ac185e09a104d00e24bc6ec0e22be690af1592660cd1bfe9e6cafb8fff5acc742ea30db6266a5af5e9133b254e56396cb8a1d16435a28ce3772fbc64b244e80783d9a5dde5dd5f49e3b62e425c3775fb57fb1e1d997026cdd99c99bd92b1f21f8b0afaea6daa9b74d633b218c61e15ef7afb040101dc97f3207730760bb58f9f2957c6ae38574a49ad1631cd4af7ac0ebd694e971337dfa9e9cb014093fb2915d8ffd45f7178194855a45b24651053dc5b0efbd6d86c202a0cbd61487b89eca91bb08fd3f76128fb53385f5674660395aea68b41ff0b54de8efd0e2a9861e1f5228f722e96bb3bfe265c21417130a3bc38c11dd01486d9e49958ac2fe4193d7eef70e34c779073e2fe7375840aed9825311501fb3894ba376ffcd1f33e83e1e6df8f3323329859a62f5ea4401bf2dec611da07fb9a983426670f89487baa17cca21dfbec9458b5474e2e8afcb8f37794d2a0dc2f6a9a04295a96c20c9269ce021e9db37587fae4c8d17831d1e8e23cef71edd5029e8209318ea5d6ef64cae0e816c34dacaa8d19a2fc6d77775b624733671a6660a4cf08c58861dee2aaffadd73d17c8a2a6ed22837e34e7b42b1828594dd06bc8697dd31027820fe96343e9581509b29b5195944bfccbf0933ba90ddc6aa64efd7891350cbb94f40f5f5fe340ffe78b2efac0492dd4a819f72a41bfe6e99409d4502d415dcc38739dcb999582979ab7ad109681e0db04fb196278503fdca9290c2dd6d407bbdceae47dfc448c9bd1928b6eed43f4e53004bf319cce6e585f2f315b2e1b1a9483d4c30d1b8a8a8053bc047d9f75f1e33333479d97fd2ef8b8304f99ff20866b1b2927205a9b23ad31a97d333aa928e5c857a43879fa7d18b104c04746e4cb92cd08302cb4566b927fa4fb6cf978f245caca25459e36988ae727834f367191d2b8d229bc436acb0d0cf74c3d0318eb7cb6a33a1920fa05d35c356213ccbafc1f17f27a661e37b46347bad97205f1aa44da9bd50778326453190ab478e988b4c22c41fc49ca49363330558655c3dae223ec613f070c6da1aa4e7e9f65da6932f8d5e9acf3535697e6bef37a4d69769701275dd8ae1e76f09193718f1a31c08d9d3d4d77a34f226cf06c7c206d56d1273f1a335f4b8191f33327129296c3ccd1f1f45a9d211292f1fdcb8dc6ed972d4177b6c446f4b0d8c24b9e24d18a56830e4a90621861da15ec9edc05a7df0ce21efae09f3314b980cd38ae2de212ed721924b6bb95271960d90d4cd43758a1ed142a370e23220b7a68459a7a3e93a11fdf02ce1246cf5c6ad8b685d4bcdb057dc0bf5db48a1d33d83c6be93b61e7412c72813ec336a4e72319a387d2bc5cf8948c7450e9da5ca20ea9a13849595c7c377f4f1ac9ffa0e7614928a1c6b442928b84223aa49c5e91feb1509a90f9565d88634401ce0c3eb5e4abb973f0258c885de767e08a15c41bada36752865df8217a9d1a1111c01b98768bfa442ec325ae7cbd588dd08821b02b8c123f69f4b1a2638cbc342a92be2fc291dabf550d52dff0a07a0aeb85dee0f97c8507a0ddf42ff4f97aea548fe08a336f5d034b34670b365f1346a9c591b21af295c7e8327db4139dfbe5c41d2f59461c9ecb399bcf55e1574a2976ec32f687b9393d7e306574bc8197fffb1b3fad95fbbb029ef7de099303123616afddcc8a6391e7d56dbbfc8be8dce884d5e5b957856e15676f9b906a113bd9e2fcb09e653bcba7471a0341c3275a7c81158fb30da1284634b652d46f7c491a400e9dd780eb314f2515ebb3235e3df46460e0c85c0cbe47e7cefc6f49041ae83ce82d39bab708eed504f147847dff595af034fccf11ea222bf963e9cbbe77b5e718384efccaa505f8a7acae623fea9a8919536ae75ebc68c6bfb78c8586781e73319e2cd06ce0595ebbe7bc12e87664b6ded93577df3a7982ed476ac6f521d7c202ad577bc402ce9365652899d49c60bd4d14b31e0b5e11e855884fdc53b82e44109fc14c7943b05ecf5f9c27d34ba5c797fec4e78584c6046bc793b633375c45efcc1770e199dfd3284e6117dd93754e778af3b9293f968eb4799e1b85c97c1b998e658690339bf77a5d0eaa8fc8f66e0915107872889fde9fbbf055ee5e68a0a4200a1b533ba385c85871b3714b5b600f6a08b03771060c001a6874e2bbf27e8193b805c8f5faa9ce0f28e2cb43de1ee0cf50525d3edaab32fc86d3f8cee833b79342a6714a347b88759a681bd940b587009a97246c6cb93a39383385798e37e7ab521c37f94d611c1c40efc988472bb1e682d789e0d17eeb4344a479c901797bfa87d8df31c0d77a0ec108e1063297de9b24e275083191b913e2e6f2616de8defe3f40314ac8059af8ebdb9987e2c1033f6152273998bdb0af4f3da1dd362aa577f8406d8c24a4f89abb8d301e8ceb2579ff87cde4e5143b3485c12a233d3be029a5e54ef127c90c698d3c166a8e994bf2d582255b6d37c7d03f65f4b93ee2a0009dc9b1b006cf44147771eced5984df52b605d655d99b63d1eb74c6a8610b3ddcf56b411e4673c7fda65150ca40c8633aea3e74dd5d69455f7a3a1da425dace7f358c1d0585f4ae73bfad2e7550fec26aa1e3cfb87eeace5ce417b235194f535f8186c9749181a4ee5c967179deee17b0075eda7fe01b5e8b66450ab1c42f58eaa13adf78b5d57032c7c2a3d223f2ae78ca98c3025db93a63da808097ed4bd02c97ef887a01d93d677621d08cea873c49e59efd991187bd277e7254b7fb135f2f10ce33809753a56dc138b406941504daefd77be60f12eb6361b1ae08e18e997cf5c48a9b774b7963cd595d8be18a4f9348b0445fda7d525b45e0f445ae9e380d3e4fc5d6b93c9663f712b09980d5e165e8234e77b47197d7caaaa948324950f7c2989fb62901e9c4e9c9083cf6d89631951eabd8adfbed66182b1bcce6da57c9c17a720fd5d7c75309090213122ff0def8a814bde425af9fc9ae0c9716f51ecc85f41e723d46433f1056620e9628ba5c0fb8f8cf80929c0d623e5264f86082d0b6d053d428af2b866d3188e8d0a4ffa93dff78ba23e8d1f706c0918c06db86f01e3ce2f77ee52fd5ccf659c14c754c6bc4bc5bf4343b12759bfb9b5ec3d2328e651c984afa2ea4fd1747fa9ce3adfae20799ae04ff8397ea113b01b6800f108bb3cf093bbd8920ad6c42b8e19fbf2abe5f6accbc2d305e5c4abfbbcb74bf898ed479fb0c6575763e37de68d606b1de996065885e", ["", "", "", "", "", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x20004001}, 0x1) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000011c0), &(0x7f0000001200)=0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000001280)={0x7, 0x80, 0x8, 0x6, 0x8, 0x1}) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f00000012c0)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000001300)=0x3, 0x4) fdatasync(r2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001340)=0x0) getpgrp(r4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r2, 0xffffffffffffffff}, &(0x7f0000001380), &(0x7f00000013c0)='%pS \x00'}, 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) shutdown(r1, 0x0) syz_open_dev$sndmidi(&(0x7f0000001480), 0x9, 0x8000) write$char_usb(r2, &(0x7f00000014c0)="93e620b239d8ad1f549f84fdc9003db1213cbf8507106c041303aac5ced4b814092bf4d044c803c9e39ecfd0c66a4bec5b43ea4ff415aa5b967445489f3f0b7b11be901cdeff9f1969974216d71817b0f7210d8c240004d1bbfeceb06ced096d711372f9f76501f8", 0x68) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001540)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)={0x1b, 0x0, 0x0, 0xff, 0x0, r5, 0x0, '\x00', r6, r2, 0x0, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001640), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x38, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg0\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "421e7e6728"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x34}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000001880)=0xf, 0x4) open_tree(r2, &(0x7f00000018c0)='./file0\x00', 0x8100) 7.947901047s ago: executing program 0 (id=2840): timer_create(0x3, 0x0, &(0x7f0000001400)=0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x52b242d) timer_gettime(r0, &(0x7f0000000200)) keyctl$search(0xa, r1, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x40000000) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x20000000002, r2, 0x2}) timerfd_settime(r3, 0x3, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c0e243", 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000100)={r4}) timer_gettime(0x0, &(0x7f0000000240)) unshare(0x6010800) 7.771383652s ago: executing program 3 (id=2842): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r1, &(0x7f0000000780)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000080)=""/9, &(0x7f00000000c0)=0x9) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="0090000000000000002c0012800b00010062726964676500001c0002800c00230000000040000000000c0022000000000000000000f43371e6af"], 0x4c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.860841408s ago: executing program 0 (id=2847): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b68090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800095802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 6.253889989s ago: executing program 0 (id=2849): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, &(0x7f0000000f00)="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", 0x101, 0x21894, &(0x7f0000000000)={0x2, 0x0, @broadcast, 0x4}, 0x10) syz_usb_ep_write(r0, 0x0, 0x60, &(0x7f0000000080)="08426aca59b7408b01c9dc75f12bcb3ea0c56b10e61b5ea0e5a749cd5766b3221f2db4e1d6c0e65a1fe569a49a0a91ead160cde6c22cb3f84121a451148916c314ba05934f39512462ff4b8f652c1bdf59be8e3fe95c8ed5f5f15069856450b9") r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000280)={&(0x7f0000000240)=[{0x7, 0x211, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) 6.078021885s ago: executing program 1 (id=2850): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000600)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100030a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005002000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) 6.075626835s ago: executing program 3 (id=2851): writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x401fc, 0x2) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f00000029c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}], 0x20}, 0xfdffffff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000900)="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", 0xf1b}, {0x0}], 0x2}}], 0x2, 0x2004c040) 5.957544379s ago: executing program 1 (id=2852): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000080)=0x5) mremap(&(0x7f00005a9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000292000/0x4000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x28, 0x2, 0x5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x24, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{r3}, 0x0, 0x4, @unused=[0x2, 0x0, 0x3], @subvolid=0x9}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_open_dev$sndctrl(&(0x7f0000000040), 0xddcd, 0xc4000) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r8, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 5.309913387s ago: executing program 5 (id=2853): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xff80, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3f4, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x779b, &(0x7f0000000380)={0x0, 0xf5a5, 0x0, 0xffffffff, 0x2028a}, &(0x7f0000000280), &(0x7f0000000200)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) 4.124044147s ago: executing program 4 (id=2783): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x10, 0xab, 0x44, @dev={0xfe, 0x80, '\x00', 0x3f}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x4}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x20}}}, 0xb8}}, 0x4000000) 3.67919508s ago: executing program 3 (id=2854): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001000810000000000008000fc00000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 3.557365351s ago: executing program 0 (id=2855): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000004000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 2.732319658s ago: executing program 1 (id=2856): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x1d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sync() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000240000000030900010073797a30000000000900020073797a32"], 0xa0}}, 0x40880) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c00000015fb0000fdffffff0000000002189bb6", @ANYRES32=r8, @ANYBLOB="14000300766574683000"/20], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xf9, 0xd4, 0x21, @loopback, @mcast2, 0x8, 0x10, 0x6a, 0x1}}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)=@newtaction={0x3b38, 0x30, 0x1e2d55ba49c2abbf, 0x70bd26, 0x25dfdbfe, {}, [{0x159c, 0x1, [@m_connmark={0x134, 0xa, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xfffffffc, 0x3}, 0xf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x9ba, 0x4, 0x400, 0x2}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x3, 0x7ff}, 0xfffc}}]}, {0xae, 0x6, "10fc70849b28e07017a48cc48952f2d2839c364ab00db7b6df25c4bc5cd7f746ba94fd88854e60fc467021a6546fb371f7784ceb318e540b728bba1983a54d3028f49686ee1a428a278a84d46ca890aa4e047d782da989f21eff5352e5eab3b4d4e06602e407dd5d5256c962c0bf7ea3c2b7a71a88364fa525faf7c1d56240f6bea28d52ea384dff5f6fa2abc2cc834548ea2885015c005509bcaeee0ef7c929908f40f060146492e986"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0xe4, 0x2, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8c3}]}, {0xa8, 0x6, "734caf10349628215ac0e16f1c513a4eef33ffc45d072ad60610767b38b5b9bb7ba69997eeb2d37108067fa2f92c7e8ac15a28f9562a01e47bbeb879743dbe80fd37b13d1f3da0e504ef015203fab8b35a214284f93f1aa0557c6f292839a4ae2a153673b4b9f0a872ea19d5963096b18b6e02ec63b9d900073bf5e4b45a27075b15c66976df2bce28ecd5ef980aaa6c26ece4c9497d233065346c42a51c3da0f27d9400"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x1a4, 0x11, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xee, 0x4, 0x1, 0x8, 0xd79}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x10000000, 0x1ff, 0xf}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7fffffff, 0x6, 0x4, 0x9}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2f, 0x8, 0x1, 0x1}, 0x1be}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8a, 0x5, 0x7, 0x3ff, 0x5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x8, 0x1ff}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x4, 0xa0000, 0x9f}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x5, 0x5, 0xfffffffc}, 0x3}}]}, {0x91, 0x6, "62c8fc8e27fb045bc73d706bb683a5233c04b8fabbe69950d5ea08720b041999a212db1efde89a08ce9522687cea5536a5a7fd187f3d605e5699310f4541ff628f7a8b8f32ec07cbff030a8099a5797758bf8aaae8e1c84ac445fe0829ee3ec07d1ebc59a9a4c562a61bba1e05ce0f7711bdbaa8a86e718b4242c0bde53928fd86e96866b0bbeffe2be63a3f97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x18c, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2d37, 0x20000000, 0xfffffff7, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x1, 0x8}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa0, 0x0, 0xffffffffffffffff, 0x5, 0xf}, 0x17}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x10000000, 0x8, 0x401}}}]}, {0xeb, 0x6, "7740a83ef1ac4de7e5bd2d7dcc675ccd245396f5a2af18cf54d8bc820e8ca7b8a4c1f46ec92ab14fa7216c8793ecad0dae2a88e2cb441e38910fa989307d2bb9387bd559e610c9acfb3ec26fb7150d8dcc4517dee1214d21d72f7d38040af2bfbef8210b3a660ef837d5f0a6668e7cdeecdce15bd57faa9a6ccc3b0f45bdffe186079e26e012c3d8f27a10fe14f1175505c42b529ab12dc551988b20bdc98883375a3afe3f954acf691e79ad497718f59672c7841c125d621185a0116327e4fefdbb5576263a4d5b25f6f085fd715b5872f0caf041c77d8402dad2eaecd60743e583b852c1193c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x1050, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0xc, 0x20000000, 0x10001, 0x2}, 0x4, r8}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0xc8, 0x1, [@m_nat={0xc4, 0x9, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x401, 0x5, 0x6, 0x5}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x6, 0xcad387747489ed30, 0x8000, 0xffff}, @loopback, @multicast2, 0x0, 0x1}}]}, {0x4a, 0x6, "d1869559e35e73c889831320ff2df9d62752c018d42cef6ac0cd339037b872aeabbefd89acef1f8e72da5ebce7b13b637abbacd4c04199749dfae38efd6682ff11bad856c666"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x24c0, 0x1, [@m_mpls={0x180, 0x13, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xc5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x6, 0x8595, 0x9}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x86dd}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfd99d}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffa7d, 0x5, 0x6, 0x80000001, 0x9}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8884}]}, {0xe2, 0x6, "5a701c17d3ee4b2ad97592b59598ba15048e75069849fbfa0f73d00ef3bfc715c283a9cdf8a722e3475c495fd1ee35b61b48abda64fcc9f1f737fa11b25bf5295284923782c86f0b6ffa915e9b4b199c441c3d5cfccc166cd526f07044d51143da8c85faa94338101e8c69dfada7ad7071d1fce9267022b6f5151b80f0c875b670bd7a6fa1213c2924ba9dacba26c093335d72b6c17c6e9b786a0b13da7e5d201f24da12db7a5c4cbd9f90f57703632333ed457277991b7f9924696087484e0b732b0d09e55f6af0d18be8a3f378bd636c0cbfdee7ae64298daecc1001ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x124, 0x0, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x1, 0x0, 0x428, 0x8}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x5, 0x6, 0x674}, 0x4}}]}, {0xc0, 0x6, "35fb47004e2d2c864da6554832cf6984d284bb864d6eaa0d306f828bd43fedd7cdebafedfebe25cfcb4dd7fe2ac61e4fe3b6cee1d919e634f456e5cd2e111171fb79ed059d4a6ec2fbc7c4122ac11adfad986c00c54108960935a25bd1bad0db3b0b6bd763e23d1412b6ebfdf58accdea2603578d54cfc176d282477b8e535e2853f4154baa1209ebd66a2d6c9e8e289af6aa15a4a0e292ec2c7316bbab5dc7e1df30fb6c43f93ebb64065989eddfa11d53a053d797d1f7fc71df763"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x124, 0x1c, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x84f1, 0xfffffff9, 0x10000000, 0x1, 0x80000001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0xff, 0x20000000, 0x8, 0xb}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb4, 0x3, 0x2, 0x1000, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x3, 0xab29, 0xac}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x184, 0x10000, 0x0, 0x800, 0x1858}, 0x3e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x4, 0x7, 0x4}, 0x4}}]}, {0x4c, 0x6, "eae36123a931f13a83ecd4dcd64a17eefa3ee1c200f4df7a6013a438200a7b616d65fccebd8fe5ac0e3e286003d9c6fe40fdc7734af3f4bb61a7bdae5f7c62810764fc34bf540bf3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x170, 0x5, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xa, 0x10000001, 0x7fffffff, 0x100}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0xffffffffffffffff, 0x1, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x8, 0xa7e6, 0x7}, 0x5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x4, 0x9, 0xb26}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffc00, 0x6, 0x10000000, 0x4, 0xd}, 0x1}}]}, {0xa1, 0x6, "1942bac7b26628915f817b466abfa33bc782d39fbe0b7a3922d225587c80369eea74a68609ee1413e50d3bb756ea31d8a01a57c4a051fd3edc353788d5e1970325e895a620ef9f31546870540a66f989b371ffdd88ded172f52788cd4816fa825db337fc8434cbfc984319cc4bb92c36323a4d810ff40b7810e5efa1c39945fd4ab54f532a77b999a2e38d9ca929844dc4345719d90cd4f22c3d159e4b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_pedit={0x1f84, 0x15, 0x0, 0x0, {{0xa}, {0x1ec4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xf10, 0x2, {{{0xc, 0x1ff, 0x8, 0x200, 0x10000}, 0x4, 0x0, [{0x3, 0x9, 0xe, 0x2, 0xfffffffb, 0x5}, {0x4, 0x1, 0x7, 0x0, 0xe6}, {0x0, 0x10000, 0x10000, 0x0, 0x2, 0x2}, {0x5, 0x9, 0x0, 0x0, 0xfa7e, 0xffffffff}, {0x6f9c, 0x2, 0x8001, 0xfffffff9, 0x8, 0x896a}, {0x9, 0x912a, 0x1, 0xb6c, 0x80000000, 0x5}, {0x2, 0x6, 0x7ff, 0x2, 0x64, 0xffff111c}, {0x4, 0xba, 0x1000, 0xb, 0x7fffffff, 0x8}, {0x3, 0x5, 0xca51, 0x0, 0xffff, 0x1ff}, {0x0, 0x5, 0xf6d5, 0xa, 0xa2, 0x80000000}]}, [{0xfff, 0x80000000, 0x9, 0x7e, 0x80000000, 0x6}, {0x0, 0x5, 0x0, 0x9, 0x7fffffff, 0x4}, {0x2, 0x3, 0x8, 0x81, 0x2, 0x7}, {0x8, 0x9, 0x6, 0x7, 0x81, 0xfffffff8}, {0xffffffff, 0x9, 0x616, 0x8, 0xffffffff, 0x4}, {0x1, 0x1000, 0x5, 0xa1, 0x2, 0x7}, {0x101, 0x3, 0x401, 0x6, 0xd6ea625, 0x9}, {0x7, 0x7, 0x6, 0x5, 0xfffff000, 0xa}, {0x0, 0x10001, 0x2, 0x3, 0x101, 0x960}, {0x0, 0x9, 0x5b, 0x200, 0x9, 0x9}, {0x6, 0x3, 0x8, 0xe, 0x8}, {0x3, 0x1, 0xfffffff8, 0x9d2e, 0x5, 0x665}, {0x1000, 0x4, 0xaa0, 0x80, 0x2, 0x9}, {0x1000, 0x5d96, 0x2, 0x11, 0xc00, 0xb}, {0x253f, 0x23d9090b, 0xd5e2, 0x5, 0x10, 0x5}, {0x8001, 0x118f, 0x7fffffff, 0xa0, 0x3, 0x4}, {0x5, 0x7ff, 0xf, 0x2, 0x47e2279b, 0xd}, {0x6, 0x0, 0x81, 0x2, 0x9, 0x4}, {0xfffffff3, 0x20000000, 0x7, 0x5, 0x5, 0x7}, {0x6, 0x18000000, 0x5, 0x10, 0x100, 0x1}, {0xffffffff, 0x4, 0xfffffffd, 0x3, 0x0, 0x9}, {0xfffffffd, 0xd8c6, 0x4, 0x1, 0x1, 0x80000000}, {0x8be, 0xad, 0x80, 0x2, 0x10, 0xd}, {0x200000, 0x6, 0x0, 0x3, 0xfffffffb, 0x7}, {0x0, 0x0, 0x0, 0xc9ce, 0x10001, 0xb}, {0xc483, 0x7, 0x2, 0xcd5, 0x0, 0xa5}, {0x1, 0x100, 0x0, 0x0, 0xedbf, 0x4000000}, {0x335, 0x100, 0x100, 0x1ff, 0x9cf, 0x5}, {0x8, 0x101, 0x7, 0x10000, 0x0, 0x6}, {0x7fffffff, 0x6, 0x3, 0x3, 0x1ff, 0x81}, {0x7f, 0x7, 0x7, 0x7, 0xa, 0x4}, {0x800, 0x44b, 0x8, 0xb, 0x5, 0x6}, {0x9, 0x4, 0x80, 0x1, 0x0, 0x80000000}, {0xb, 0x2, 0x6, 0xeb3, 0x2375, 0x7fffffff}, {0x4, 0x7, 0xa, 0xe, 0x9a47, 0x9}, {0x2, 0x4, 0x1ff, 0x7, 0x8, 0x7fffffff}, {0x4, 0x458, 0x3, 0x4, 0x0, 0x8}, {0x8, 0x0, 0x2, 0x8, 0x6, 0x6}, {0x5, 0xc00, 0x7d5, 0x6, 0x24, 0xd}, {0x0, 0xff, 0x8001, 0x8, 0x9, 0x7}, {0xab9, 0x7fffffff, 0x400, 0x8000, 0xfffffff7, 0xb4}, {0x8001, 0x4, 0x4, 0xcb5a, 0x4e9c, 0x9ceb}, {0xe, 0x1, 0x8, 0x83, 0x5, 0xfffff9c3}, {0x2, 0xd45, 0x6, 0x7, 0x566}, {0x5, 0x2, 0x101, 0x4, 0x3, 0x8}, {0x64, 0xf3c2, 0x3, 0x6, 0x2, 0x9}, {0xf, 0x1cc7, 0x7, 0x80000001, 0x7, 0x100}, {0x2, 0x7, 0x7, 0x8, 0x5a54, 0x131}, {0x1000, 0x2, 0x4, 0xfc, 0x81, 0x1}, {0x5, 0x10000, 0x6, 0x8, 0x7, 0x5}, {0x9, 0x0, 0x9, 0xb, 0x1ff, 0x1}, {0x0, 0x9, 0x3, 0x1, 0x8, 0x10001}, {0x2, 0x9, 0x200, 0x1, 0x9c2, 0x5}, {0x8, 0xa, 0x9c, 0x4c, 0x80, 0x5}, {0xff800, 0x80000001, 0x3ff, 0x5, 0x80000000, 0x13}, {0x5, 0x22, 0x5, 0x1, 0x16, 0x9fac}, {0x81, 0x6, 0x9, 0x7, 0x8001, 0x5}, {0x100, 0xa, 0xa, 0x0, 0x7, 0xf800}, {0x40, 0x6eba, 0x7ba, 0x8, 0xfffffffc, 0xc}, {0x8, 0x7, 0xfffffffd, 0x6, 0x1000, 0x1}, {0x3, 0x502a, 0x870, 0x9, 0x6fad8933, 0x9}, {0x0, 0xe7f, 0x0, 0x22, 0x1, 0x6e2c0ff5}, {0x3c70, 0x6, 0x0, 0xc78, 0xa92f, 0x7f}, {0x4, 0x48, 0x7, 0x6, 0x9, 0x6}, {0x3, 0x7, 0x9be9, 0x1, 0x9}, {0x6, 0x6, 0x8, 0x1, 0x8, 0xb}, {0x3, 0x6, 0x0, 0x1, 0xb6, 0x4}, {0x4, 0xa, 0x80, 0x55e, 0x5, 0x3}, {0x7, 0x5, 0xff, 0x6, 0x3ff, 0xf1da}, {0x0, 0xfffffff8, 0x3, 0x9, 0x9, 0x3}, {0x3, 0x4, 0x6, 0xfffffffc, 0x3ff}, {0x8, 0x6e800000, 0xbf85, 0x401, 0x8, 0x6}, {0x8, 0x3, 0x3, 0x4, 0xdeea, 0x70686b69}, {0x0, 0x6, 0x4, 0x7f, 0x0, 0x7ff}, {0x0, 0x3, 0x9, 0x2, 0x3, 0x4}, {0x4000, 0xfffffff8, 0x0, 0x200, 0x6, 0x8}, {0x0, 0x5, 0x6, 0x1, 0xe, 0x4}, {0x8001, 0xd, 0x5, 0x0, 0x1, 0xfffffffc}, {0xfffff801, 0xed6b, 0x1, 0xffffffff, 0xfff, 0x4}, {0xc0000000, 0xe69, 0x157, 0x4, 0x7, 0x10000}, {0xffff, 0x2, 0x10001, 0x7f, 0xff, 0x7}, {0x6, 0xee, 0x83, 0x7fff, 0x0, 0xfff}, {0x7, 0x6, 0x8, 0x9, 0xf}, {0x0, 0x1000, 0x101, 0xfff00000, 0xfff, 0xd6}, {0x5, 0x1, 0x8, 0x88, 0x7, 0x6}, {0xffffffff, 0x499, 0x2, 0x8f, 0x2e, 0xfffffab6}, {0x6, 0x2, 0x401, 0x7ff, 0x1, 0x6}, {0x9, 0x2, 0xb8, 0x1ff, 0x10, 0x8b}, {0xf0f4, 0x100, 0x1, 0x8, 0x101, 0x5}, {0x2, 0xfffffffb, 0x2, 0xb40, 0x2, 0x8001}, {0x40b, 0xffff, 0xfff, 0x0, 0x7, 0x2}, {0x80000001, 0x8, 0x5, 0x80000000, 0x8, 0x80}, {0x7, 0x3, 0x1ff, 0x2, 0x8001, 0x9}, {0x9, 0xa, 0xfef, 0x8000, 0x7f, 0x10}, {0x400, 0x1ff, 0x9, 0x5, 0x2, 0x7}, {0xa, 0x1ff, 0x3, 0x200, 0x7, 0x8}, {0x126, 0x8, 0x7, 0xa7, 0x4, 0x8}, {0xa5b, 0x4b, 0xfffffffb, 0x8001, 0x7fff, 0x7}, {0x8, 0x7, 0x7, 0xd3a, 0x0, 0x3}, {0x7, 0x0, 0x6, 0x4, 0x9, 0x4}, {0x7, 0x99, 0x37, 0x4, 0xec, 0x2}, {0x29ce, 0x3, 0xb2, 0x5, 0x8, 0x3}, {0x80000001, 0xc, 0x80000000, 0x0, 0x5, 0x4}, {0x1, 0x7, 0x4, 0xfda6, 0x7f, 0x8}, {0x0, 0x6, 0x8312, 0x2, 0x4}, {0x10, 0x0, 0x6, 0x8d13, 0x838}, {0x2, 0x8, 0x0, 0x8, 0x6, 0x4}, {0x5, 0x8, 0x8, 0x5, 0x7, 0x2}, {0x3, 0xffffff81, 0x9, 0x800, 0x3, 0x81}, {0x2, 0x9, 0x18, 0xa8, 0x3, 0x7}, {0xfffffff0, 0x780, 0x348, 0x7fffffff, 0xc, 0x8}, {0x1ff, 0xd, 0x97bc, 0xa, 0x1, 0x4}, {0x3, 0xf, 0x8, 0x9, 0x6, 0xb37f}, {0x9, 0x5, 0x7, 0x0, 0xf, 0x6}, {0x5, 0x0, 0xf, 0xb, 0x6, 0x1}, {0x6, 0x6, 0x30, 0x1d9c, 0x7, 0xd}, {0x80000001, 0xc, 0x41, 0x2b, 0x8, 0xe}, {0x8, 0x0, 0x3, 0x5, 0x5, 0x8}, {0x80, 0xb5e3, 0x8000, 0x2, 0x5}, {0x100, 0x0, 0x38, 0x58f, 0x0, 0x9}, {0x83e, 0xb2, 0x68, 0x80, 0x8, 0x3}, {0x400, 0x0, 0x1, 0x4, 0x6, 0xfffffff4}, {0x9183, 0xb1e, 0x1000, 0x2, 0x0, 0x46b}, {0x1, 0x200, 0x8, 0x1, 0x8, 0x4}, {0x1000, 0x1ff, 0x3, 0xffffff00, 0x9, 0x9d05}, {0xd, 0x1, 0x2, 0x2, 0x3, 0x76}, {0x5, 0x6, 0x0, 0xe16, 0x8}, {0x200, 0x2, 0x2147, 0x8, 0x2, 0x1b}], [{0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x5, 0x1}, {0x4}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x6}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x429fe64ce1147995}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x21052e59e5f239b8}, {0x4, 0x1}, {}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x2, 0x0, 0xffffffffffffffff, 0x1, 0x80000001}, 0x3, 0x40, [{0x6, 0x8, 0x8, 0x1, 0xdb5, 0x4}, {0x6e1f, 0x8, 0xf4000000, 0x1, 0x800, 0x7}, {0x8, 0x7, 0x0, 0x2, 0x2f7, 0x800}, {0x42, 0x5, 0x7, 0x5, 0x6, 0x4}, {0x6, 0x54, 0xfff, 0xe2e, 0x6, 0xd011}, {0xd, 0x8, 0x5, 0xff, 0x10, 0x2}, {0xd23f, 0x200, 0x3, 0x4, 0x864, 0x2}, {0x39, 0x2, 0xd, 0x91, 0x5, 0x7}, {0x46, 0xffff3f62, 0xd, 0x3, 0x9, 0x80f3}, {0x7, 0x1, 0x54ca, 0x1000, 0x8, 0x9}]}, [{0x6, 0x1, 0x3ff, 0x2, 0xb, 0x6}, {0x7ff, 0x4aeb, 0x8, 0x1b9, 0x80, 0x1}, {0x0, 0x652, 0x5, 0x4, 0x1, 0x8}, {0x4d, 0x7, 0x0, 0x8, 0x7, 0x24000000}, {0x8, 0x9, 0xc04, 0x3ff, 0xfffffff8}, {0x5, 0x3, 0x6, 0x9, 0x9, 0x1a76a989}, {0x4, 0x1454, 0xfffffff7, 0x8, 0x285b, 0x4}, {0xffff, 0x6, 0x7fff, 0x8, 0x2, 0x8}, {0x5, 0x8, 0x0, 0x2c, 0xfff, 0x1}, {0x7, 0x2, 0x401, 0x6, 0x1, 0x3}, {0x10000, 0x6, 0xf, 0x1, 0x2, 0x100}, {0x7, 0x7, 0x80, 0x49000000, 0x7, 0xfff}, {0x6, 0x4, 0xd5c2, 0xfffff807, 0x9, 0x2}, {0x2, 0x2, 0xa, 0xb3, 0x9, 0xff}, {0x10, 0x4, 0xc, 0x6, 0xfff00000, 0x2}, {0x6, 0x201, 0x101, 0xced, 0x2, 0xfff}, {0x2f3e, 0x2, 0xffffffff, 0x7, 0x8, 0x6}, {0x2, 0x7fff, 0x8, 0x4, 0x6d61, 0x100}, {0x3, 0x1, 0x10, 0x6, 0x6}, {0xfffffffd, 0xffffff54, 0x3, 0x3, 0x8a0, 0x1}, {0x1000, 0x1, 0x0, 0xbb, 0x1, 0x4}, {0x0, 0x0, 0x7, 0x6, 0x100, 0x9}, {0x8131, 0x400, 0x479, 0x3, 0x6, 0x8}, {0x3, 0xe0c3, 0x2, 0x0, 0x6, 0x2}, {0xff, 0x9, 0x10001, 0x6, 0x7e3, 0x3}, {0xa, 0x1, 0x5, 0x5, 0x100, 0x16}, {0x81, 0x2, 0xfad2, 0x9, 0x5, 0x3}, {0x0, 0x6, 0x2104, 0x7, 0x7, 0x80000000}, {0x5, 0x1000006, 0x8, 0x0, 0x0, 0x4}, {0x8, 0x7fff, 0x2, 0x8, 0xfffff469, 0x31}, {0xa15, 0x10, 0x101, 0x0, 0xba, 0x3}, {0xffffb068, 0xf, 0xfc7, 0x0, 0x7, 0x8a}, {0x8, 0x8, 0x8, 0x3ff, 0xd3d9, 0x4}, {0x0, 0x6, 0x4e, 0xdb, 0x0, 0x2}, {0x3, 0x1, 0xffff8000, 0x6, 0x7, 0x81}, {0x0, 0x5, 0x6, 0x6, 0x0, 0x7df82096}, {0x7, 0x10, 0x9, 0x3, 0xffffffff, 0x5}, {0x7, 0x1, 0x800, 0x5, 0xf, 0x189}, {0x82292a15, 0x3, 0x6299, 0x3, 0x7, 0x1}, {0x7, 0xa, 0x6, 0x4, 0x401, 0x5}, {0x6, 0x559bb780, 0x5, 0x5, 0xbc1, 0x4}, {0x1899, 0x0, 0x300, 0xcbe, 0x6, 0xdde2}, {0x9, 0x1, 0x2, 0x8, 0x8, 0x6}, {0x6856, 0x3, 0x4, 0xd0, 0x6, 0x3}, {0x4, 0x80, 0x80, 0x5, 0xf, 0x8001}, {0x2, 0x100, 0x7f, 0x7fffffff, 0x2, 0x9}, {0x1, 0x52ca, 0x6, 0x1000, 0x2, 0x32f1}, {0x9, 0x5, 0x9, 0x9, 0x5, 0x4e9}, {0x8, 0x14000000, 0x300000, 0x400, 0x40, 0x9}, {0x6, 0x10001, 0x2, 0x9, 0xfd52, 0x9}, {0x9, 0x4, 0x7f, 0x5, 0x6, 0x4}, {0xba2b, 0x1, 0xffc00000, 0xb, 0x1, 0x1}, {0x6a8b, 0x7fffffff, 0x2, 0x0, 0x7, 0x81}, {0x400, 0xb37, 0x0, 0x9, 0x3, 0x2}, {0x6, 0x6, 0x8001, 0xffffffff, 0x7, 0x8}, {0x4, 0x3, 0x1, 0xfff, 0xbd7c, 0x6}, {0xfffffff9, 0xff, 0x2, 0x9, 0xff, 0x4}, {0xb, 0xcf, 0xb3, 0x8001, 0x0, 0x5}, {0x5, 0x2, 0x40008, 0x5, 0x5, 0xe148}, {0x1000, 0x4, 0x2, 0x3, 0x6a, 0x1}, {0x0, 0x100, 0x3, 0x7, 0xdf6e, 0x4}, {0x2, 0x4, 0x70191485, 0xc2, 0x3, 0xa}, {0x0, 0x9, 0xfffffffe, 0x800, 0x1, 0x670}, {0x4, 0xde5c, 0x0, 0x3, 0x7c, 0x8}, {0x6, 0x7fffffff, 0x81, 0x6, 0x7}, {0x5, 0x10000, 0x7fffffff, 0x4028, 0x9, 0x8}, {0x7, 0xffffffff, 0x5, 0x9, 0x4b, 0x200}, {0x0, 0x39, 0xe, 0x8, 0x3, 0x3a0}, {0x7, 0xd180f07, 0x7512498e, 0x7ff, 0x6, 0x100}, {0xf4, 0x5, 0x4, 0x7, 0x0, 0x7fe}, {0x5, 0x2, 0x40, 0x8, 0x3, 0x8}, {0x7, 0x8, 0x3ff, 0x9, 0x6, 0x4}, {0x1, 0x0, 0x3, 0xc, 0x2, 0x8}, {0xffff, 0x7ff, 0x4, 0x200, 0x5}, {0x8b6, 0x80000000, 0x200, 0x5, 0x3, 0x7}, {0x1, 0x9, 0x75, 0x1ff, 0x8, 0x1}, {0x3, 0xfffffffb, 0x8, 0x72, 0x9, 0x8}, {0x8, 0x8, 0x0, 0xfffffff9, 0x3, 0x5}, {0x3ff, 0x1, 0xf, 0x8, 0x2}, {0x3, 0x5, 0x2, 0xe, 0xfffffffd, 0x1}, {0x1, 0x2, 0x5, 0x4, 0x7, 0xd79}, {0x34c14495, 0x1, 0x1, 0x7f, 0x707d, 0x7}, {0x401, 0x7, 0x1, 0x7, 0x1, 0x3}, {0x0, 0xc8, 0x3, 0x7, 0x100000, 0x100}, {0x2, 0x1ff, 0x2, 0x6, 0x7fffffff, 0x5}, {0x1000, 0x7, 0x6, 0x1, 0x9, 0x7}, {0x8001, 0x3, 0x7fffffff, 0x10000, 0x80000000, 0xff}, {0x6, 0x8001, 0x6, 0x80000001, 0xec9, 0x7f}, {0x2, 0x1, 0x2, 0xff, 0x2, 0x8}, {0x7, 0x3, 0x1, 0x8, 0x3005, 0x400}, {0x3841, 0x10, 0xfffffffc, 0xffff, 0x9, 0xc7}, {0xffffffff, 0x9, 0x3, 0x6, 0x6, 0x1000}, {0xfa2, 0x101, 0x80000000, 0x6f, 0x7, 0x4}, {0x1, 0x7f, 0x8000, 0x1, 0x1600000, 0x5}, {0x8, 0x9, 0x6, 0x833, 0x8, 0x400}, {0x1, 0x5, 0x2, 0x5, 0x4, 0xa}, {0x3ff, 0xffff, 0x65, 0x3, 0xfffffff6, 0x53d22103}, {0x6f494acd, 0x4, 0x5, 0x361, 0x3, 0x329f9fbc}, {0x28ae, 0x7f, 0x0, 0x3, 0x9, 0x3}, {0x16e, 0x4, 0x1000000, 0x3, 0xfffffffb, 0x9}, {0xd, 0x80000000, 0x2bfe7b3d, 0x2, 0x9, 0x8}, {0x6, 0x8fe0, 0x5, 0x6, 0x3}, {0x1, 0x1ff, 0x5, 0x1, 0x3}, {0x9, 0x2, 0x57d, 0x7fff, 0x4dd}, {0x35e1, 0x2, 0x9, 0x2, 0x1000, 0x5}, {0x72d659e4, 0x7, 0x9, 0x1, 0xffffffff, 0x5}, {0xffffffff, 0x400, 0x4, 0x3, 0x1, 0x7}, {0xfff, 0x8001, 0x1, 0xfffffffc, 0x3, 0x1}, {0x1, 0x10001, 0x0, 0x4, 0xef, 0x4}, {0x8, 0x7, 0x160b, 0x1, 0x8, 0xffffffff}, {0xb, 0x9, 0x3, 0x9, 0x8, 0xfffffffb}, {0xe, 0xaeb, 0x8, 0x0, 0x2, 0x9}, {0x9135, 0x7, 0x9, 0x5, 0x6, 0xac}, {0x0, 0x10001, 0x9, 0x2, 0x3, 0x1000}, {0x2, 0x5, 0x3, 0x4, 0xe8d9}, {0x7fffffff, 0x4, 0x0, 0x99, 0x3ff, 0xbd}, {0x3, 0x5, 0x0, 0x1, 0x0, 0x2000200}, {0x3, 0x54fa, 0x5, 0xba3, 0xd, 0x2c}, {0xdca, 0x40, 0xc, 0x2, 0x4c, 0xffff}, {0x7, 0x0, 0x80000000, 0x1, 0x8}, {0x1, 0x63f, 0x2, 0x7fff, 0xfffffffe, 0xf}, {0xd, 0x6, 0x893d, 0x7, 0x282, 0x7}, {0x8, 0x7fff, 0x0, 0xd31, 0x7ff, 0xd}, {0x3, 0x1f6, 0x2000, 0x4, 0xffff0da4, 0x40}, {0x5, 0x9, 0x3e, 0x1, 0x7, 0xe45}, {0x6, 0x7, 0x1, 0x7, 0xfffffffc}, {0x7d26, 0x101, 0x1, 0x8, 0x5c3, 0x2}, {0x977, 0x9, 0x4, 0x7ff, 0x5, 0x3}], [{0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {}, {0x2}, {0x2}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x1}, {0x3, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {0x4}, {0x2}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x5}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1, 0x3}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x3}, {0x3}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x1}, {0x7}, {0x4, 0x1}, {}, {0x3}, {0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}], 0x1}}]}, {0x97, 0x6, "749da7a67c412b08948aec8a76027e5cd8c7ee7fa6735bcf703cc98fc333492be8d06f28dbb7e403cb3d3f3e6aed1c3f8c6f9343b66abc93555ebae275a06547adcfe43754a45d2d293e5793dc4a86497e04ae0a4d3630a41ca458782fe4f2b0ffa7572d85277641149f6414df1ff9ff8ec4917dd5cb84937905e1bd62c6a5877f9bc594923c59829701b757be3134c547ac22"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x3b38}}, 0x20000000) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r14 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') setns(r14, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0x0, 0xfff1}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xa, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x4}, "42153e239760d771e2472195aaf3e892db2b840bf17f634dc42cf0729c419febd0a5a82778c7eb2d9c1979dd25bf7dd6de46319de3df7c13ff7ab2726c065c16aa7ae22eafbb29e3e676cd8a7fa5f0ec9c232816cc73174e60c504719a808208bc7deee8c2eecf3989cecc7a96c6c92cbaa364d41d647a72561f8e8b9836268efda14bc2d9438283d85d7d0cc1e4e37fcee94c704abc22ee5cab8be5d53dd44f3a91b5a7974ab11ea9b902a13c521d528117ed2223a4581936523cd8"}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xf, 0xe}, {}, {0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r15 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r15, r3, 0xcf) close_range(r0, 0xffffffffffffffff, 0x0) 2.667116739s ago: executing program 3 (id=2857): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) (async, rerun: 64) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007040016", 0x1f, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r3, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0x1, 0xf7, 0x2, 0x2d}, {0x10, 0x1, 0xe, 0x9}, {0x3, 0x40, 0x1, 0x100}, {0xd815, 0x8, 0x3, 0x6}, {0x3, 0x3, 0x2, 0x7}, {0x8, 0x6, 0x4, 0x9}, {0x6, 0xf7, 0x7f, 0xc}]}, 0x10) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x208400, 0x10) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4], 0x20) (async) r5 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x7, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) ptrace(0x4211, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000140)) close_range(r1, 0xffffffffffffffff, 0x0) 2.49286707s ago: executing program 4 (id=2858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@broadcast]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) fanotify_init(0x4, 0x1000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x5, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@broadcast, @multicast, @void, {@arp={0x806, @generic={0x6, 0x85f0, 0x6, 0x4, 0x4, @multicast, "6d3de1bc", @empty, "4e1e8d72"}}}}, 0x0) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.478216065s ago: executing program 0 (id=2859): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004d4200884901020301090212000100000000090400000077e4f900"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="200b00000000ed098cc2a66f7a33c0ac5d29c1fc1ace36493d4458106d19368e646143110f1452c084ff62480be9c9f04202780172b1c3ab9a30ea721f036a7b39cf05dd3b3e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000000000) ioctl$FS_IOC_GETVERSION(r4, 0x40015b0b, &(0x7f0000000040)) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) r5 = syz_usbip_server_init(0x1) write$usbip_server(r5, &(0x7f0000000080)=ANY=[], 0x35) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, &(0x7f0000000140)) setxattr$trusted_overlay_upper(0xfffffffffffffffd, &(0x7f0000000080), &(0x7f0000000380)={0x0, 0xfb, 0x94, 0x1, 0x2, "b1e96cd1d14ef137f4f9f4419b6253b9", "9b1dd20da0e1255de874618e5158cdb7a9541fa9a1292d4e967485176f60dac2727d21e7f93196244d7f7a4ac7920c21f0b0b0fe19deae6fc6342d49edcfb06b8e05cc0dae896669c788e0f159dbc7aa19856371b3cb34e1152ff44fbc67685e986602f4b40ab32cfbc0d5c91b5441aa5844590408638eb7d791a7a1f23c4a"}, 0x94, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) syz_io_uring_setup(0x497, &(0x7f00000005c0)={0x0, 0xc16, 0x4000, 0x4, 0x288}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.204935005s ago: executing program 1 (id=2861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x400a0) 2.05619622s ago: executing program 5 (id=2862): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x1c8, 0x2b8, 0x2b8, 0x130, 0x2b8, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0xffffffff, 0xffffffff, 'bond_slave_0\x00', 'bridge0\x00', {}, {0xc10c421ca43f3e7e}, 0x88, 0x3, 0xb3}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x29}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0xff, 'wg2\x00', 'macvlan0\x00', {}, {}, 0xff, 0x0, 0x41}, 0x0, 0x70, 0x98, 0x0, {0x4000000000000000}}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x0, 'veth0_to_bond\x00', 'gre0\x00', {}, {}, 0x89, 0x1, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x44}, 0xffffff00, 0xffffff00, 'batadv0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x2f, 0x7, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 1.971812893s ago: executing program 1 (id=2863): getitimer(0xe, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60120008001a3afffe8000000000000000000055240000bbff020000000000000000000000000001880090780d000000fc01f80000000000ce0000000000000118006d396ac36a3aff17a97d2cf45e20318600f0c988c9a3099fa1f2ff4bc54d51bc5bde959f18c3c845541ac46c0d2032c9f58120868ce5d6ee9b5ad17ffef5fad1c7549d2ecf67e5afe0af49d99240d3"], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40800, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1.627495219s ago: executing program 4 (id=2864): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x80ffffffffffffff}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}]}, 0xd8}}, 0x0) 1.170945048s ago: executing program 4 (id=2865): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) move_mount(r0, 0x0, r0, 0x0, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1330, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x31, r0, 0x8d75f000) r3 = userfaultfd(0x800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa08, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) madvise(&(0x7f0000b32000/0x3000)=nil, 0x3000, 0x11) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001000010800000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000061040008001b000000000004002b80bd34717a4e59f0d37b85819ff7df6ffc37c4628a5e11481de454a7b91f2415f651047f3696662cb02a6ea56d2c497a91ca36a1d94a34956dbebfc207ab44134167a2682139f22e99be8fa7d91d39bd1588298f7451db683e4e2a61d83709632278e7bc44caf03c06e7adbf18a11273612e0381e458ee0270a04bc56585c952594648f0ca1a97dde36529e7ecdfc55cc1dbee578362b67ceaf6cb8992b808c0c4c900d169"], 0x2c}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/175, 0xaf}], 0x1, &(0x7f0000001fc0)=""/54, 0x36}, 0x43}], 0x1, 0x40002023, 0x0) sendmsg$tipc(r5, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x2}}, 0x10, 0x0}, 0x4004000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="f88a33bcad22fd982be99ceeb099ddb6918893c10094892d0dd164d900d08aa7c7164cfeb3e69bae6c06eaedadcbea73f8b7015c06a07f98b2d078916347fd907a1bbbe255e513ed1a47990c02fd1cbea19d96dcb59a51bcaa13e7863bb66a8ea753f498c1cbb602ca9f1b4312307c9a3604887aa2beeec7831100940881416e762fcb4dd590e5a2641b64823085bae3f3aac3b54339937fc2a26a605799af1b8be8a9feddc0d6e4dff6d4823f24a9e4b175dadcfa624e8de8eee3cde8"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) 988.046221ms ago: executing program 1 (id=2866): creat(&(0x7f0000000380)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6000000000383a00fe880000200001ff02000000000000000000000000000101039078000000006000b29500003a00fe80000000000000000000000000001d20010000000000000000000000000001caa7c1b7f4c336af000000000000000000"], 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r2, &(0x7f0000000040), 0x2) close(r2) mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) mlock(&(0x7f00001b5000/0x400000)=nil, 0x400000) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@multicast2, 0x0, 0x0, 0x60, 0x0, [{@initdev}, {@remote}, {@remote}, {@empty}, {}, {@multicast1}]}}) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x10000, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x6e3, @mcast1, 0x5}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x5c) socket$nl_route(0x10, 0x3, 0x0) gettid() openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card2/oss_mixer\x00', 0x400402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000480)={0x2, 0x0, @ioapic={0x2, 0x8, 0x2, 0x9, 0x0, [{0x15, 0x2, 0x5, '\x00', 0xbe}, {0x1, 0xfe, 0x4, '\x00', 0x1}, {0x40, 0x6, 0x9, '\x00', 0x6}, {0x7, 0x3, 0x80, '\x00', 0xb}, {0x7f, 0x4, 0x5, '\x00', 0x5}, {0x1, 0x2, 0x7, '\x00', 0x2}, {0x3, 0xde, 0x1, '\x00', 0x40}, {0x6, 0x3, 0x2, '\x00', 0x7}, {0xf9, 0xc, 0xb, '\x00', 0x8}, {0x8, 0x2, 0x0, '\x00', 0x8}, {0x6, 0x8a, 0x1e, '\x00', 0x5}, {0x0, 0x10, 0x5, '\x00', 0x7}, {0x5, 0x9, 0x2, '\x00', 0x7}, {0x3, 0x2a, 0x2, '\x00', 0x3}, {0xfb, 0xf, 0x2, '\x00', 0x18}, {0x4, 0x6, 0x6, '\x00', 0x1}, {0x3, 0x8d, 0x3, '\x00', 0x9}, {0x1, 0x1, 0x1, '\x00', 0x1}, {0xfc, 0xfa, 0x4, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x6}, {0x13, 0x80, 0xa3, '\x00', 0x6}, {0x2, 0x1, 0x1, '\x00', 0x3}, {0x8, 0x4, 0x6, '\x00', 0x9}, {0x80, 0x4, 0x5, '\x00', 0x6}]}}) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f00000006c0)="9900b22458e685703727189c544ff567888dc6e7653cd14824c7befb05c313f5c49d8ffe2c613bb0bfc84da4a854c3e7905ed60f22230f85bd360c9c139784728d8ecaf3b3f7518d6a4638eea50cd13edcd206cdb1cb407825bd8fc289df57afb554aa3321797ed8", 0x68) socket$inet6_udp(0xa, 0x2, 0x0) 764.582969ms ago: executing program 5 (id=2867): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000002002001b0008000000e900000000000000030006000000000002000000000000000000000000000000020001000000000000000316ff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 495.677713ms ago: executing program 5 (id=2868): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x4) getpgid(0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x6e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1f0, 0x940c, 0x3002, 0x0, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0x0, 0xff, 0xff000000, 0xff], [0xffffffff, 0x0, 0x0, 0xffffffff], 'bond_slave_0\x00', 'tunl0\x00', {0xff}, {}, 0x6, 0x9, 0x3, 0x69}, 0x0, 0x1c8, 0x1f0, 0x4001, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x6, 0x3}}}, {{@ipv6={@loopback={0x700000000000000}, @local, [0xffffffff, 0xff, 0xff000000], [0xffffff00, 0x0, 0xff, 0xffffffff], 'vlan1\x00', 'lo\x00', {0xff}, {0xff}, 0x84, 0x7, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0xa, 0x2006, 0x6, 'snmp_trap\x00', 'syz1\x00', {0xfffffffffffffff2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 361.017887ms ago: executing program 5 (id=2869): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000380)=[@code={0x1, 0x44, {"66ba610066ed360fa80f01cbf20faef566b87c008ec867447800f20f2cfe420f0766420f0016b805000000b9000000000f01d9"}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x7b, {"48b800000080000000000f23d00f21f835200000030f23f8410f38f07004c7442400c7000000c744240228000000ff2c2466baf80cb8e024018bef66bafc0c66edc40179d7e5b9050b00000f32b972050000b806000000ba000000000f30ded266bad004ecc422adab0b"}}], 0xef}) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r0, 0x3000008, 0x80010, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x50, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x149}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}]}]}, 0x50}}, 0x0) 0s ago: executing program 5 (id=2870): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2, 0x2}}}}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000000020100c0"]) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x6d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x2, 0xf0, 0x10, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x81, {{0x6, 0x24, 0x6, 0x0, 0x0, "0f"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x8, 0x7ff, 0xf}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0xa73, 0x8, 0x3, 0x0, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x2, 0x4, 0x1}, @obex={0x5, 0x24, 0x15, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x4, 0x8, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xec, 0x3}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x0, 0x8, 0x2, 0x40, 0x6}, 0xb1, &(0x7f0000000140)={0x5, 0xf, 0xb1, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "1c9889654bf3e65c9e81a9f26e9c1874"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x0, 0xf00, 0x65, [0xc0, 0xcf, 0xc000, 0x7f8000]}, @generic={0x37, 0x10, 0x4, "4ab7fca4c1c8a18977c9037315e82d3149b3782f8807b9c99a6399b98a56cb44af4636a05738c3a4c8444519cc992cba9607a1f7"}, @generic={0x3e, 0x10, 0x3, "f846813cae2b73c01eebb5cd18902adca89f3e664d699659440293dfcb0cad695ab77c531ecae56285116d92ee0d0b4991465a9f719933f39917bd"}]}, 0x3, [{0x4e, &(0x7f0000000200)=@string={0x4e, 0x3, "d143a3f59c3f44ba5231cc733617bbc4742890d8ae2f4e77312739bc0a78c53bc001cac9bf42478788832fa155baeab963b1d3f32e71e3857ef56ced903e9b5c02d8ee23fb171b0df5d54aa3"}}, {0xac, &(0x7f0000000280)=@string={0xac, 0x3, "2c8e83c3b53eb8cd865cea1c1b9f99ea26fdd555769576492de003b2c771f16f0803c2c483c37c64d33dc2ae58b711361ccc16a4fa8e399d57ebd19cee3fe3aa7eda5399b1600f57588ef80f05b2a41505c5eb383b5b3a4fdf3d7e6d6183d8776a994be3b3822de648854f5c70f983f51752863029fcdbff39d2a76f404be292ce8ccbb36741ae5beab38316c1c83050107556da65612f5f5afb91a9dea6c64f608e8dde696c9589d7c8"}}, {0xad, &(0x7f0000000400)=@string={0xad, 0x3, "dfc9aff1cefa423d24ba0e2b74fc9d31815006a2763eaff0d3f0617786318c9602bac7b60ac5400a2ed9d84376fa626872d9928506b8f1b81f4e2692349239e4d360d522fe6215e62a0a36cdd381f3a026b10926aa0fe960b96916d29edc376ec444a27cea9225d6a45cd47883a680ea8dd0839b57ff69041262a134704d3fe471001694b13121a47ce02f92895203314199402d61321d30e7afb98d55344f05de571919b935a34cb83ec2"}}]}) kernel console output (not intermixed with test programs): ing 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 661.273279][T14199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.308675][T11807] usb 4-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 661.318606][T11807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.335339][T11807] usb 4-1: Product: syz [ 661.339583][T11807] usb 4-1: Manufacturer: syz [ 661.344245][T11807] usb 4-1: SerialNumber: syz [ 661.376723][T11807] usb 4-1: config 0 descriptor?? [ 661.398985][T11807] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 661.415405][T11807] dw2102: su3000_power_ctrl: 1, initialized 0 [ 661.421575][T11807] dvb-usb: bulk message failed: -22 (2/0) [ 661.458983][T11807] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 661.500948][T11807] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 661.618253][T14194] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2330'. [ 661.633892][T14194] IPv4: Oversized IP packet from 127.202.26.0 [ 661.667067][T11807] usb 4-1: USB disconnect, device number 111 [ 661.915366][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 662.007763][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2333'. [ 662.025341][T14204] openvswitch: netlink: Flow actions attr not present in new flow. [ 662.107117][ T10] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 662.121655][ T10] usb 2-1: config 0 has no interface number 0 [ 662.148424][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 662.173802][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.208043][ T10] usb 2-1: Product: syz [ 662.212310][ T10] usb 2-1: Manufacturer: syz [ 662.235312][ T10] usb 2-1: SerialNumber: syz [ 662.258080][ T10] usb 2-1: config 0 descriptor?? [ 662.307090][ T6319] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 662.359031][ T6319] usbhid 6-1:0.0: can't add hid device: -71 [ 662.376884][ T6319] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 662.421168][ T6319] usb 6-1: USB disconnect, device number 32 [ 662.696130][T11807] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 662.825335][T11804] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 662.848798][T11807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.873222][T11807] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 662.910439][T11807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.954745][T11807] usb 1-1: config 0 descriptor?? [ 663.005341][T11804] usb 4-1: Using ep0 maxpacket: 16 [ 663.051120][T11804] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 663.089466][T11804] usb 4-1: config 0 has no interface number 0 [ 663.105734][T11804] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 663.124758][T11804] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 663.146482][T11804] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 663.201434][T11804] usb 4-1: Manufacturer: syz [ 663.272658][T11804] usb 4-1: SerialNumber: syz [ 663.314157][T11804] usb 4-1: config 0 descriptor?? [ 663.390840][T11807] razer 0003:1532:010E.001E: unknown main item tag 0x0 [ 663.404070][T11807] razer 0003:1532:010E.001E: unknown main item tag 0x0 [ 663.419665][T11807] razer 0003:1532:010E.001E: unknown main item tag 0x0 [ 663.483178][T11807] razer 0003:1532:010E.001E: unknown main item tag 0x0 [ 663.518501][T11807] razer 0003:1532:010E.001E: unknown main item tag 0x0 [ 663.586531][T11807] razer 0003:1532:010E.001E: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 663.798961][T14210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.851169][T14210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.049676][T11807] usb 1-1: USB disconnect, device number 101 [ 664.817807][T14240] openvswitch: netlink: Key 6 has unexpected len 57 expected 2 [ 664.864925][ T10] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 664.871761][ T10] usb 2-1: No valid video chain found. [ 664.884130][ T10] usb 2-1: USB disconnect, device number 98 [ 665.408298][T11804] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 665.430165][T11804] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 665.520285][T11804] usb 4-1: USB disconnect, device number 112 [ 665.660522][T14248] tipc: Can't bind to reserved service type 2 [ 665.763333][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2347'. [ 666.032422][T14255] kvm: kvm [14247]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 666.078078][T14255] kvm: kvm [14247]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x80 [ 666.106545][T11804] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 666.177259][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2348'. [ 666.187105][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 666.187120][ T30] audit: type=1326 audit(1749930693.715:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8371b8e929 code=0x7ffc0000 [ 666.535317][ T30] audit: type=1326 audit(1749930693.715:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f8371b8e929 code=0x7ffc0000 [ 666.639539][ T30] audit: type=1326 audit(1749930693.715:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8371b8e929 code=0x7ffc0000 [ 666.641351][T11804] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 666.807740][ T30] audit: type=1326 audit(1749930693.715:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8371b8e929 code=0x7ffc0000 [ 666.815593][T11804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.946281][T11804] usb 4-1: config 0 descriptor?? [ 666.967832][ T30] audit: type=1326 audit(1749930693.715:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8371b8e929 code=0x7ffc0000 [ 667.115318][ T30] audit: type=1326 audit(1749930693.715:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8371b8e929 code=0x7ffc0000 [ 667.219594][ T30] audit: type=1326 audit(1749930693.755:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8371b8e929 code=0x7ffc0000 [ 667.221928][T11804] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 667.271158][T14279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2354'. [ 667.331049][ T30] audit: type=1326 audit(1749930693.755:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8371b8e929 code=0x7ffc0000 [ 667.368281][ T30] audit: type=1326 audit(1749930693.755:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8371b8e929 code=0x7ffc0000 [ 667.413999][T11804] [drm:udl_init] *ERROR* Selecting channel failed [ 667.483295][T11804] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 667.502499][T11804] [drm] Initialized udl on minor 2 [ 667.627004][T11814] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 667.670776][T11804] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 667.684963][ T30] audit: type=1326 audit(1749930693.755:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.1.2348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8371b8e929 code=0x7ffc0000 [ 667.744765][T11804] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 667.779997][T11807] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 667.795469][T11814] usb 2-1: Using ep0 maxpacket: 32 [ 667.803276][T11814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.803713][T11804] usb 4-1: USB disconnect, device number 113 [ 667.829317][T11807] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 667.865928][T11814] usb 2-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 667.890036][T11814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.053611][T11814] usb 2-1: Product: syz [ 668.073896][T11814] usb 2-1: Manufacturer: syz [ 668.092821][T11814] usb 2-1: SerialNumber: syz [ 668.139716][T11814] usb 2-1: config 0 descriptor?? [ 668.660918][T11814] mos7840 2-1:0.0: required endpoints missing [ 668.752352][T11814] usb 2-1: USB disconnect, device number 99 [ 669.481163][T11804] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 669.622116][T11804] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 669.705499][T11807] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 669.880230][T11807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.891457][T11807] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 669.908304][T11807] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 669.939206][T11807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.987328][T11807] usb 4-1: config 0 descriptor?? [ 670.042558][T11807] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 670.081687][T11807] dvb-usb: bulk message failed: -22 (3/0) [ 670.112782][T11807] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 670.135862][T11807] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 670.143287][T11807] usb 4-1: media controller created [ 670.203776][T11807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 670.734149][T14304] netlink: 'syz.3.2358': attribute type 13 has an invalid length. [ 670.818337][T11807] dvb-usb: bulk message failed: -22 (6/0) [ 670.852321][T14304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.882789][T11807] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 670.961618][T11807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53 [ 671.003721][T11807] dvb-usb: schedule remote query interval to 150 msecs. [ 671.036602][T14330] FAULT_INJECTION: forcing a failure. [ 671.036602][T14330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.050097][T11807] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 671.062217][T14330] CPU: 0 UID: 0 PID: 14330 Comm: syz.1.2368 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 671.062248][T14330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 671.062260][T14330] Call Trace: [ 671.062269][T14330] [ 671.062278][T14330] dump_stack_lvl+0x189/0x250 [ 671.062315][T14330] ? __pfx____ratelimit+0x10/0x10 [ 671.062344][T14330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.062373][T14330] ? __pfx__printk+0x10/0x10 [ 671.062410][T14330] should_fail_ex+0x414/0x560 [ 671.062441][T14330] _copy_from_user+0x2d/0xb0 [ 671.062464][T14330] __copy_msghdr+0x3c5/0x5b0 [ 671.062495][T14330] ___sys_sendmsg+0x1a5/0x2a0 [ 671.062523][T14330] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.062587][T14330] ? __fget_files+0x2a/0x420 [ 671.062610][T14330] ? __fget_files+0x3a0/0x420 [ 671.062653][T14330] __x64_sys_sendmsg+0x19b/0x260 [ 671.062684][T14330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.062721][T14330] ? __pfx_ksys_write+0x10/0x10 [ 671.062748][T14330] ? do_syscall_64+0xbe/0x3b0 [ 671.062772][T14330] do_syscall_64+0xfa/0x3b0 [ 671.062792][T14330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.062812][T14330] ? asm_sysvec_call_function_single+0x1a/0x20 [ 671.062832][T14330] ? clear_bhb_loop+0x60/0xb0 [ 671.062859][T14330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.062879][T14330] RIP: 0033:0x7f8371b8e929 [ 671.062899][T14330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.062917][T14330] RSP: 002b:00007f83729e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.062947][T14330] RAX: ffffffffffffffda RBX: 00007f8371db5fa0 RCX: 00007f8371b8e929 [ 671.062963][T14330] RDX: 0000000020040081 RSI: 0000200000000380 RDI: 0000000000000003 [ 671.062976][T14330] RBP: 00007f83729e0090 R08: 0000000000000000 R09: 0000000000000000 [ 671.062989][T14330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.063002][T14330] R13: 0000000000000000 R14: 00007f8371db5fa0 R15: 00007f8371edfa28 [ 671.063035][T14330] [ 671.315833][T11804] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 671.333603][T11807] dvb-usb: bulk message failed: -22 (1/0) [ 671.339480][T11807] dvb-usb: error while querying for an remote control event. [ 671.346193][T14334] netlink: 'syz.1.2369': attribute type 10 has an invalid length. [ 671.368636][T14334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.469846][T14334] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 671.505320][ T6319] dvb-usb: bulk message failed: -22 (1/0) [ 671.512852][ T6319] dvb-usb: error while querying for an remote control event. [ 671.542139][T11804] usb 6-1: config index 0 descriptor too short (expected 32804, got 36) [ 671.559661][T11804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 671.640361][T11804] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 671.671816][T11804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 671.681816][T11807] dvb-usb: bulk message failed: -22 (1/0) [ 671.687782][T11807] dvb-usb: error while querying for an remote control event. [ 671.798905][T11804] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 671.808259][T11804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.823724][T11804] usb 6-1: Product: syz [ 671.828142][T11804] usb 6-1: Manufacturer: syz [ 671.833018][T11804] usb 6-1: SerialNumber: syz [ 671.855303][T11807] dvb-usb: bulk message failed: -22 (1/0) [ 671.926673][T11807] dvb-usb: error while querying for an remote control event. [ 671.960997][T11804] usb 6-1: config 0 descriptor?? [ 671.967115][T14319] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 671.978052][T11804] usb 6-1: ucan: probing device on interface #0 [ 671.984453][T11804] usb 6-1: ucan: invalid endpoint configuration [ 671.991488][T11804] usb 6-1: ucan: probe failed; try to update the device firmware [ 672.027834][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 672.040457][T14345] Cannot find add_set index 1 as target [ 672.129645][T11804] dvb-usb: bulk message failed: -22 (1/0) [ 672.148523][T11804] dvb-usb: error while querying for an remote control event. [ 672.236381][T11812] usb 4-1: USB disconnect, device number 114 [ 672.387348][T11812] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 673.038828][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'. [ 673.210075][T11812] usb 6-1: USB disconnect, device number 33 [ 673.316571][T14362] netlink: 'syz.1.2375': attribute type 7 has an invalid length. [ 673.360580][T14362] netlink: 'syz.1.2375': attribute type 8 has an invalid length. [ 673.705565][T11812] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 673.721177][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'. [ 673.741674][T14379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2380'. [ 673.753470][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'. [ 673.753782][T14375] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2380'. [ 673.831784][T11813] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 673.848853][T11813] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 673.865962][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 673.890320][T11812] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 673.912641][T11812] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 673.935058][T11812] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 673.957210][T11812] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 673.983887][T11812] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 674.013741][T11812] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 674.028346][T11812] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 674.044638][T11812] usb 6-1: Product: syz [ 674.054644][T11812] usb 6-1: Manufacturer: syz [ 674.077975][T11812] cdc_wdm 6-1:1.0: skipping garbage [ 674.085307][T11812] cdc_wdm 6-1:1.0: skipping garbage [ 674.107814][T11812] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 674.132647][T11812] cdc_wdm 6-1:1.0: Unknown control protocol [ 674.244493][T14386] fuse: Invalid rootmode [ 674.635353][T11804] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 674.644274][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 674.872593][T11812] usb 6-1: USB disconnect, device number 34 [ 675.095295][T11804] usb 1-1: Using ep0 maxpacket: 16 [ 675.104607][T11804] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 675.113813][T11804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.122047][T11804] usb 1-1: Product: syz [ 675.126401][T11804] usb 1-1: Manufacturer: syz [ 675.131161][T11804] usb 1-1: SerialNumber: syz [ 675.240113][T11804] usb 1-1: config 0 descriptor?? [ 675.310697][T11804] as10x_usb: device has been detected [ 675.318987][T11804] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 675.410772][T11804] usb 1-1: DVB: registering adapter 10 frontend 0 (Sky IT Digital Key (green led))... [ 675.471811][T14391] random: crng reseeded on system resumption [ 675.505910][T11804] as10x_usb: error during firmware upload part1 [ 675.512607][T11804] Registered device Sky IT Digital Key (green led) [ 675.642874][T14410] Cannot find set identified by id 0 to match [ 675.712628][T11804] usb 1-1: USB disconnect, device number 102 [ 675.803731][T11804] Unregistered device Sky IT Digital Key (green led) [ 675.840843][T11804] as10x_usb: device has been disconnected [ 676.289023][T14424] netlink: 'syz.1.2394': attribute type 8 has an invalid length. [ 677.325543][T11804] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 677.385565][T14440] trusted_key: encrypted_key: insufficient parameters specified [ 677.555709][T11804] usb 2-1: Using ep0 maxpacket: 16 [ 677.564992][T11804] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 677.580399][T11804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.591624][T11804] usb 2-1: config 0 has no interfaces? [ 677.603521][T11804] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 677.618006][T11804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.626255][T11804] usb 2-1: Product: syz [ 677.630417][T11804] usb 2-1: Manufacturer: syz [ 677.635089][T11804] usb 2-1: SerialNumber: syz [ 677.775458][T11812] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 677.843872][T11812] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 677.960364][T11804] usb 2-1: config 0 descriptor?? [ 679.329266][T11812] usb 2-1: USB disconnect, device number 100 [ 679.521916][T14457] fuse: Bad value for 'fd' [ 679.745420][ T6319] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 679.800120][T14467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2408'. [ 679.886111][ T6319] usb 6-1: device descriptor read/64, error -71 [ 679.919537][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.932214][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.940526][T11812] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 680.085412][T11812] usb 1-1: device descriptor read/64, error -71 [ 680.135470][ T6319] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 680.147894][T14471] sctp: [Deprecated]: syz.4.2409 (pid 14471) Use of int in maxseg socket option. [ 680.147894][T14471] Use struct sctp_assoc_value instead [ 680.288025][ T6319] usb 6-1: device descriptor read/64, error -71 [ 680.325333][T11812] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 680.345378][T11804] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 680.405798][ T6319] usb usb6-port1: attempt power cycle [ 680.485379][T11812] usb 1-1: device descriptor read/64, error -71 [ 680.497788][T11804] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 680.519282][T11804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.531764][T11804] usb 2-1: config 0 descriptor?? [ 680.547431][T11804] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54 [ 680.596841][T11812] usb usb1-port1: attempt power cycle [ 680.743791][T14474] fuse: Bad value for 'group_id' [ 680.748997][ T6319] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 680.756854][T14474] fuse: Bad value for 'group_id' [ 680.767569][T14474] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 680.775012][T14474] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 680.783426][ T6319] usb 6-1: device descriptor read/8, error -71 [ 680.794320][ T5188] bcm5974 2-1:0.0: could not read from device [ 680.803698][ T5188] bcm5974 2-1:0.0: could not read from device [ 680.815558][ T5188] bcm5974 2-1:0.0: could not read from device [ 680.825504][ T5188] bcm5974 2-1:0.0: could not read from device [ 680.829696][T11804] usb 2-1: USB disconnect, device number 101 [ 680.848105][ T5188] bcm5974 2-1:0.0: could not read from device [ 680.863328][ T5984] bcm5974 2-1:0.0: could not read from device [ 680.900223][ T5984] udevd[5984]: Error opening device "/dev/input/event4": No such file or directory [ 680.909807][ T5984] udevd[5984]: Unable to EVIOCGABS device "/dev/input/event4" [ 680.919864][ T5984] udevd[5984]: Unable to EVIOCGABS device "/dev/input/event4" [ 680.927888][ T5984] udevd[5984]: Unable to EVIOCGABS device "/dev/input/event4" [ 680.937254][ T5984] udevd[5984]: Unable to EVIOCGABS device "/dev/input/event4" [ 680.944871][ T5984] udevd[5984]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 680.965495][T11812] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 681.015545][ T5203] udevd[5203]: worker [5984] terminated by signal 6 (Aborted) [ 681.023164][ T5203] udevd[5203]: worker [5984] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54/event4' [ 681.035935][ T6319] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 681.041598][T11812] usb 1-1: device descriptor read/8, error -71 [ 681.115633][ T6319] usb 6-1: device descriptor read/8, error -71 [ 681.231769][ T6319] usb usb6-port1: unable to enumerate USB device [ 681.306854][T11812] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 681.352233][T11812] usb 1-1: device descriptor read/8, error -71 [ 681.475040][T14485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.484212][T14485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.492192][T11812] usb usb1-port1: unable to enumerate USB device [ 683.061491][T11813] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 683.091727][T11813] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 684.770735][T14528] xt_hashlimit: max too large, truncated to 1048576 [ 684.826607][T14528] netlink: 'syz.0.2421': attribute type 16 has an invalid length. [ 684.943518][T14528] netlink: 'syz.0.2421': attribute type 17 has an invalid length. [ 685.080329][T14528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.157591][T14528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.332134][T14535] netlink: 'syz.3.2423': attribute type 4 has an invalid length. [ 685.600549][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2426'. [ 685.631018][T14542] netlink: 'syz.3.2426': attribute type 5 has an invalid length. [ 685.673155][T14542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2426'. [ 685.763696][T14542] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 256 - 0 [ 685.800592][T14542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 685.839065][T14542] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 685.870690][T14542] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 685.897930][T14542] geneve2: entered promiscuous mode [ 685.911818][T14542] geneve2: entered allmulticast mode [ 685.934798][T14544] team0: left allmulticast mode [ 685.941594][T14544] team_slave_0: left allmulticast mode [ 685.993132][T14544] team_slave_1: left allmulticast mode [ 686.033700][T14544] team0: left promiscuous mode [ 686.079389][T14544] team_slave_0: left promiscuous mode [ 686.101133][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.107650][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.146995][T14544] team_slave_1: left promiscuous mode [ 686.216379][T14544] bridge0: port 3(team0) entered disabled state [ 686.251753][T14544] bond0: (slave batadv0): Releasing backup interface [ 686.303440][T14544] bridge_slave_0: left allmulticast mode [ 686.340279][T14544] bridge_slave_0: left promiscuous mode [ 686.366223][T14544] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.380106][T14544] bridge_slave_1: left allmulticast mode [ 686.387878][T14544] bridge_slave_1: left promiscuous mode [ 686.393907][T14544] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.407827][T14544] bond0: (slave bond_slave_0): Releasing backup interface [ 686.427282][T14544] bond0: (slave bond_slave_1): Releasing backup interface [ 686.450763][T14544] team0: Port device team_slave_0 removed [ 686.461933][T14544] team0: Port device team_slave_1 removed [ 686.484607][T14564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.510187][T14544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.567541][T14544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.352562][T14567] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 687.367890][T14567] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 687.439309][T11813] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 687.488530][T14567] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 687.505989][T11813] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 687.558174][T14575] binder: BINDER_SET_CONTEXT_MGR already set [ 687.564264][T14575] binder: 14572:14575 ioctl 4018620d 200000000040 returned -16 [ 687.821984][T14583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.869919][T14583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.374860][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2437'. [ 688.471706][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2437'. [ 688.475274][T11813] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 688.656601][T11813] usb 4-1: Using ep0 maxpacket: 8 [ 688.697733][T11813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 688.765531][T11813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 688.837208][T11813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 688.905546][T11813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 689.005296][T11813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 689.051730][T11813] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 689.095262][T11813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.179943][T11813] usb 4-1: config 0 descriptor?? [ 689.208046][T14594] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 689.415414][ T6319] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 689.462904][T14592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.522219][T14592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.560229][ T5841] Bluetooth: hci5: unexpected event 0x12 length: 1 < 8 [ 689.569092][ T5841] Bluetooth: hci5: Malformed Event: 0x02 [ 689.575098][ T5841] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 689.575120][ T5841] Bluetooth: unknown link type 170 [ 689.588020][T11804] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 689.596672][ T5841] Bluetooth: hci5: connection err: -111 [ 689.611992][ T6319] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 689.621011][ T6319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.637297][ T6319] usb 1-1: config 0 has no interface number 0 [ 689.644533][ T6319] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 689.658180][ T6319] usb 1-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 689.671407][ T6319] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 689.685014][ T6319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.703068][ T6319] usb 1-1: config 0 descriptor?? [ 689.722017][ T6319] ttusbir 1-1:0.83: cannot find expected altsetting [ 689.765898][T11804] usb 2-1: Using ep0 maxpacket: 16 [ 689.787913][T11804] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 689.812436][T11804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.815929][T11813] usb 4-1: USB disconnect, device number 115 [ 689.829320][ T5153] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 689.864545][T11804] usb 2-1: config 0 has no interfaces? [ 689.920669][T11814] usb 1-1: USB disconnect, device number 107 [ 689.941538][T11804] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 689.991477][T11804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.058352][T11804] usb 2-1: Product: syz [ 690.064790][T11804] usb 2-1: Manufacturer: syz [ 690.070907][T11804] usb 2-1: SerialNumber: syz [ 690.080153][T11804] usb 2-1: config 0 descriptor?? [ 690.748390][T14627] netlink: 'syz.3.2452': attribute type 8 has an invalid length. [ 690.953867][T11804] usb 2-1: USB disconnect, device number 102 [ 691.213937][T14636] netlink: 'syz.0.2457': attribute type 4 has an invalid length. [ 691.443439][T11813] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 691.494368][T11813] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 691.556430][T14643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.723725][T14646] FAULT_INJECTION: forcing a failure. [ 691.723725][T14646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.787700][T14646] CPU: 0 UID: 0 PID: 14646 Comm: syz.1.2460 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 691.787722][T14646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.787730][T14646] Call Trace: [ 691.787736][T14646] [ 691.787742][T14646] dump_stack_lvl+0x189/0x250 [ 691.787767][T14646] ? __pfx____ratelimit+0x10/0x10 [ 691.787788][T14646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.787808][T14646] ? __pfx__printk+0x10/0x10 [ 691.787822][T14646] ? __might_fault+0xb0/0x130 [ 691.787841][T14646] should_fail_ex+0x414/0x560 [ 691.787860][T14646] _copy_from_user+0x2d/0xb0 [ 691.787874][T14646] snd_pcm_oss_write+0x84f/0x11a0 [ 691.787906][T14646] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 691.787926][T14646] ? bpf_lsm_file_permission+0x9/0x20 [ 691.787943][T14646] ? security_file_permission+0x75/0x290 [ 691.787958][T14646] ? rw_verify_area+0x258/0x650 [ 691.787976][T14646] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 691.787996][T14646] vfs_write+0x27b/0xa90 [ 691.788020][T14646] ? __pfx_vfs_write+0x10/0x10 [ 691.788041][T14646] ? __fget_files+0x2a/0x420 [ 691.788057][T14646] ? __fget_files+0x2a/0x420 [ 691.788070][T14646] ? __fget_files+0x3a0/0x420 [ 691.788082][T14646] ? __fget_files+0x2a/0x420 [ 691.788101][T14646] ksys_write+0x145/0x250 [ 691.788114][T14646] ? __pfx_ksys_write+0x10/0x10 [ 691.788123][T14646] ? rcu_is_watching+0x15/0xb0 [ 691.788146][T14646] ? do_syscall_64+0xbe/0x3b0 [ 691.788160][T14646] do_syscall_64+0xfa/0x3b0 [ 691.788170][T14646] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.788188][T14646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.788200][T14646] ? clear_bhb_loop+0x60/0xb0 [ 691.788215][T14646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.788227][T14646] RIP: 0033:0x7f8371b8e929 [ 691.788239][T14646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.788250][T14646] RSP: 002b:00007f83729e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 691.788266][T14646] RAX: ffffffffffffffda RBX: 00007f8371db5fa0 RCX: 00007f8371b8e929 [ 691.788275][T14646] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000008 [ 691.788283][T14646] RBP: 00007f83729e0090 R08: 0000000000000000 R09: 0000000000000000 [ 691.788294][T14646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 691.788302][T14646] R13: 0000000000000000 R14: 00007f8371db5fa0 R15: 00007f8371edfa28 [ 691.788321][T14646] [ 692.037146][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.428756][T14651] program syz.3.2462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.408989][T14672] netlink: 'syz.5.2461': attribute type 10 has an invalid length. [ 693.445955][T14672] veth0_vlan: left promiscuous mode [ 693.464355][T14672] veth0_vlan: entered promiscuous mode [ 693.518579][T14672] team0: Device veth0_vlan failed to register rx_handler [ 693.910217][T14682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.919901][T14682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.296432][T14682] netlink: 'syz.4.2469': attribute type 13 has an invalid length. [ 694.632855][T14682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.708020][T14682] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.775084][T14682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 695.375547][ T6319] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 695.561556][ T6319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 695.627379][ T6319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.656610][ T6319] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 695.678882][ T6319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.746950][ T6319] usb 4-1: config 0 descriptor?? [ 695.763109][ T6319] hub 4-1:0.0: USB hub found [ 695.964694][ T6319] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 695.979556][ T6319] usbhid 4-1:0.0: can't add hid device: -71 [ 695.996564][ T6319] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 696.076677][ T6319] usb 4-1: USB disconnect, device number 116 [ 696.143628][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2474'. [ 696.174296][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2474'. [ 696.441377][ T6319] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 696.484745][ T6319] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 696.826585][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 696.920309][T14715] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 696.934756][T14715] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 20000 - 0 [ 696.942948][T14715] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 696.955533][T14715] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 696.964492][T14715] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 696.998169][T14715] geneve3: entered promiscuous mode [ 697.003587][T14715] geneve3: entered allmulticast mode [ 697.017929][T14715] netdevsim netdevsim3 : unset [1, 1] type 2 family 0 port 20000 - 0 [ 697.043267][T14715] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 697.064331][T14715] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 697.075508][T14719] netlink: 'syz.4.2481': attribute type 1 has an invalid length. [ 697.113206][T14715] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 697.127131][T14722] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2481'. [ 697.287486][T14727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.327386][T14727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.372010][T14719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 697.927996][T14738] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2484'. [ 698.308162][T14755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.434246][T14757] loop8: detected capacity change from 0 to 7 [ 698.463105][T14757] Dev loop8: unable to read RDB block 7 [ 698.499057][T14757] loop8: unable to read partition table [ 698.521653][T14757] loop8: partition table beyond EOD, truncated [ 698.538184][T14757] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 698.636940][T11813] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 699.014053][T11813] usb 4-1: Using ep0 maxpacket: 32 [ 699.031334][T11813] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 699.057605][T11813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.090388][T11813] usb 4-1: config 0 descriptor?? [ 699.117747][T11813] gspca_main: sunplus-2.14.0 probing 041e:400b [ 699.765429][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 699.815617][T11813] gspca_sunplus: reg_w_riv err -110 [ 699.827972][T11813] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 699.927958][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.947054][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 699.958448][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.969462][ T10] usb 6-1: config 0 descriptor?? [ 700.013508][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 700.550568][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 700.569501][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 700.582000][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 700.600646][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 700.629890][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 700.654553][T14796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.665733][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 700.678295][T14796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.869204][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 701.009056][ T6319] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 701.167806][ T6319] usb 2-1: config 0 has no interfaces? [ 701.179741][ T6319] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 701.190639][ T6319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.201670][ T6319] usb 2-1: Product: syz [ 701.206249][ T6319] usb 2-1: Manufacturer: syz [ 701.211936][ T6319] usb 2-1: SerialNumber: syz [ 701.241949][ T6319] usb 2-1: config 0 descriptor?? [ 701.328304][ T6319] usb 4-1: USB disconnect, device number 117 [ 702.405566][T11814] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 702.567038][T11814] usb 4-1: Using ep0 maxpacket: 16 [ 702.587462][T11814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.634530][T11814] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 702.681117][T11814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.727527][T11814] usb 4-1: config 0 descriptor?? [ 702.974639][T11814] usbhid 4-1:0.0: can't add hid device: -71 [ 702.995137][T11814] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 703.055619][T11814] usb 4-1: USB disconnect, device number 118 [ 703.349171][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 703.370632][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 703.441382][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 703.441675][T11814] usb 2-1: USB disconnect, device number 103 [ 703.515388][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 703.552766][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 703.599718][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 703.616089][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2513'. [ 703.655515][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 703.683993][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 703.694479][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 703.719888][ T10] pwc: Registered as video103. [ 703.773581][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input57 [ 703.860722][ T10] usb 6-1: USB disconnect, device number 39 [ 704.025783][T14832] netlink: 'syz.4.2508': attribute type 13 has an invalid length. [ 704.048020][T14832] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2508'. [ 704.832012][T14845] loop8: detected capacity change from 0 to 7 [ 704.848834][T14845] Dev loop8: unable to read RDB block 7 [ 704.854637][T14845] loop8: unable to read partition table [ 704.862957][T14845] loop8: partition table beyond EOD, truncated [ 704.871077][T14845] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 704.978392][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.040349][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.135454][T14856] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 705.556306][ T6319] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 705.715329][ T6319] usb 2-1: Using ep0 maxpacket: 8 [ 705.728359][ T6319] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 705.738149][ T6319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.751787][ T6319] usb 2-1: Product: syz [ 705.760581][ T6319] usb 2-1: Manufacturer: syz [ 705.850475][ T6319] usb 2-1: SerialNumber: syz [ 705.923078][ T6319] usb 2-1: config 0 descriptor?? [ 705.934408][ T6319] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 706.121675][ T10] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 706.186916][ T6319] gspca_sn9c2028: read1 error -71 [ 706.210137][ T6319] gspca_sn9c2028: read1 error -71 [ 706.223821][ T6319] gspca_sn9c2028: read1 error -71 [ 706.236865][ T6319] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 706.274272][ T6319] usb 2-1: USB disconnect, device number 104 [ 706.422074][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 706.457547][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 706.490824][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 706.595464][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 706.603712][ T10] usb 1-1: SerialNumber: syz [ 706.631350][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 706.693785][ T10] usb-storage 1-1:1.0: USB Mass Storage device detected [ 706.737999][ T10] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 706.751767][ T10] scsi host1: usb-storage 1-1:1.0 [ 707.365306][T11812] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 707.515392][T11812] usb 2-1: Using ep0 maxpacket: 16 [ 707.524574][T11812] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 707.533021][T11812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.544498][T11812] usb 2-1: config 0 has no interfaces? [ 707.565044][T11812] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 707.609748][T11812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.659065][T11812] usb 2-1: Product: syz [ 707.732110][T11812] usb 2-1: Manufacturer: syz [ 708.014015][T11812] usb 2-1: SerialNumber: syz [ 708.044370][T11812] usb 2-1: config 0 descriptor?? [ 708.258230][T14885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.655576][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 708.803385][T11814] usb 2-1: USB disconnect, device number 105 [ 709.395897][T14904] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 709.403408][T14904] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 709.420240][T14904] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 709.739707][T14911] program syz.4.2534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 709.762326][T14912] fuse: Bad value for 'group_id' [ 709.772268][T14912] fuse: Bad value for 'group_id' [ 709.848056][T14914] netlink: 'syz.5.2535': attribute type 2 has an invalid length. [ 709.871185][T14914] netlink: 'syz.5.2535': attribute type 8 has an invalid length. [ 709.895401][T14914] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2535'. [ 710.088134][ T6319] usb 1-1: USB disconnect, device number 108 [ 710.255906][T14919] syzkaller1: entered promiscuous mode [ 710.269899][T14919] syzkaller1: entered allmulticast mode [ 710.945620][ T6319] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 711.123815][ T6319] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 711.135599][ T6319] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.146524][ T6319] usb 6-1: config 0 interface 0 has no altsetting 0 [ 711.165562][ T6319] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 711.172094][T14945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.189761][ T6319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.198992][T14945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.214932][ T6319] usb 6-1: config 0 descriptor?? [ 711.528095][T14945] netlink: 'syz.4.2544': attribute type 4 has an invalid length. [ 711.572039][T14945] netlink: 'syz.4.2544': attribute type 4 has an invalid length. [ 711.708364][T14932] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2541'. [ 711.722643][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2541'. [ 712.329896][ T6319] hid-steam 0003:28DE:1102.0026: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 712.618720][T11814] usb 6-1: USB disconnect, device number 40 [ 712.686294][T14952] fido_id[14952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 712.940162][T14961] netlink: 'syz.1.2549': attribute type 10 has an invalid length. [ 713.590136][T14980] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2553'. [ 714.144672][T14993] FAULT_INJECTION: forcing a failure. [ 714.144672][T14993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.184473][T14993] CPU: 0 UID: 0 PID: 14993 Comm: syz.3.2558 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 714.184507][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 714.184521][T14993] Call Trace: [ 714.184530][T14993] [ 714.184540][T14993] dump_stack_lvl+0x189/0x250 [ 714.184577][T14993] ? __pfx____ratelimit+0x10/0x10 [ 714.184607][T14993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.184638][T14993] ? __pfx__printk+0x10/0x10 [ 714.184662][T14993] ? __might_fault+0xb0/0x130 [ 714.184695][T14993] should_fail_ex+0x414/0x560 [ 714.184727][T14993] _copy_from_user+0x2d/0xb0 [ 714.184750][T14993] snd_pcm_oss_write+0x84f/0x11a0 [ 714.184804][T14993] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 714.184836][T14993] ? bpf_lsm_file_permission+0x9/0x20 [ 714.184863][T14993] ? security_file_permission+0x75/0x290 [ 714.184888][T14993] ? rw_verify_area+0x258/0x650 [ 714.184918][T14993] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 714.184950][T14993] vfs_write+0x27b/0xa90 [ 714.184991][T14993] ? __pfx_vfs_write+0x10/0x10 [ 714.185024][T14993] ? __fget_files+0x2a/0x420 [ 714.185049][T14993] ? __fget_files+0x2a/0x420 [ 714.185070][T14993] ? __fget_files+0x3a0/0x420 [ 714.185090][T14993] ? __fget_files+0x2a/0x420 [ 714.185120][T14993] ksys_write+0x145/0x250 [ 714.185147][T14993] ? __pfx_ksys_write+0x10/0x10 [ 714.185162][T14993] ? rcu_is_watching+0x15/0xb0 [ 714.185197][T14993] ? do_syscall_64+0xbe/0x3b0 [ 714.185220][T14993] do_syscall_64+0xfa/0x3b0 [ 714.185237][T14993] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.185265][T14993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.185285][T14993] ? clear_bhb_loop+0x60/0xb0 [ 714.185316][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.185336][T14993] RIP: 0033:0x7f4bb5f8e929 [ 714.185355][T14993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.185373][T14993] RSP: 002b:00007f4bb6ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.185397][T14993] RAX: ffffffffffffffda RBX: 00007f4bb61b5fa0 RCX: 00007f4bb5f8e929 [ 714.185412][T14993] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000008 [ 714.185424][T14993] RBP: 00007f4bb6ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 714.185438][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 714.185450][T14993] R13: 0000000000000000 R14: 00007f4bb61b5fa0 R15: 00007f4bb62dfa28 [ 714.185483][T14993] [ 714.426689][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.793344][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2562'. [ 714.836103][ T10] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 715.007033][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 715.019723][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.041288][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.054695][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 715.067982][ T6319] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 715.071236][T15010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.079123][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 715.085598][T15010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.095609][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.116000][ T10] usb 2-1: config 0 descriptor?? [ 715.236665][T11814] usb 1-1: new low-speed USB device number 109 using dummy_hcd [ 715.255692][ T6319] usb 6-1: Using ep0 maxpacket: 8 [ 715.262425][ T6319] usb 6-1: config index 0 descriptor too short (expected 30768, got 18) [ 715.271058][ T6319] usb 6-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 715.280080][ T6319] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 715.290608][ T6319] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 715.300024][ T6319] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 715.309131][ T6319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.375776][T11814] usb 1-1: device descriptor read/64, error -71 [ 715.533146][ T6319] usb 6-1: string descriptor 0 read error: -22 [ 715.615406][T11814] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 715.697031][ T10] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 715.704581][ T10] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 715.718452][ T10] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 715.730161][ T10] microsoft 0003:045E:07DA.0027: No inputs registered, leaving [ 715.744548][T11812] usb 6-1: USB disconnect, device number 41 [ 715.789955][ T10] microsoft 0003:045E:07DA.0027: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 715.795339][T11814] usb 1-1: device descriptor read/64, error -71 [ 715.807779][ T10] microsoft 0003:045E:07DA.0027: no inputs found [ 715.814368][ T10] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway [ 715.990493][T15017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.999679][T15017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.009159][T11814] usb usb1-port1: attempt power cycle [ 716.200369][ T10] usb 2-1: USB disconnect, device number 106 [ 716.375508][T11814] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 716.406240][T11814] usb 1-1: device descriptor read/8, error -71 [ 716.536054][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2569'. [ 716.562106][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2569'. [ 716.645546][T11814] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 716.687252][T11814] usb 1-1: device descriptor read/8, error -71 [ 716.723778][T15024] netlink: 'syz.4.2570': attribute type 27 has an invalid length. [ 716.805678][T11814] usb usb1-port1: unable to enumerate USB device [ 716.890874][T15024] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 716.898618][T15024] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 719.658560][T15056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2580'. [ 719.690086][T15056] openvswitch: netlink: Flow key attr not present in new flow. [ 719.945948][T15056] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2580'. [ 719.972175][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.136185][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.237756][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2580'. [ 720.238344][T15072] netlink: 'syz.4.2581': attribute type 4 has an invalid length. [ 720.365918][T15068] netlink: 'syz.4.2581': attribute type 4 has an invalid length. [ 721.266122][T15086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.275891][T15086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.415397][ T10] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 722.858366][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 722.883433][ T10] usb 1-1: config 0 has no interface number 0 [ 722.898490][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 722.909306][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.019066][ T10] usb 1-1: Product: syz [ 723.023447][ T10] usb 1-1: Manufacturer: syz [ 723.028683][ T10] usb 1-1: SerialNumber: syz [ 723.047453][ T10] usb 1-1: config 0 descriptor?? [ 723.259622][ T10] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 723.288421][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 723.325739][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 723.373096][ T10] usb 1-1: media controller created [ 723.420399][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 723.461250][T15096] openvswitch: netlink: Port 1722892156 exceeds max allowable 65535 [ 723.560372][ T10] i2c i2c-10: ec100: i2c rd failed=-71 reg=33 [ 723.641518][ T10] usb 1-1: USB disconnect, device number 113 [ 724.159810][T15118] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2596'. [ 724.849920][T15130] netlink: 'syz.4.2600': attribute type 4 has an invalid length. [ 725.371880][T15135] loop8: detected capacity change from 0 to 7 [ 725.399558][T15135] Dev loop8: unable to read RDB block 7 [ 725.427230][T15135] loop8: unable to read partition table [ 725.625357][ T10] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 725.635585][T15135] loop8: partition table beyond EOD, truncated [ 725.642216][T15135] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 725.975308][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.986428][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 726.004084][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 726.014085][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.025845][ T10] usb 1-1: config 0 descriptor?? [ 726.037488][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 726.085481][ T2155] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 726.362992][T15137] netlink: 'syz.0.2598': attribute type 13 has an invalid length. [ 726.799377][ T2155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 726.839619][T15137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.846401][ T2155] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 726.865757][ T2155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 726.875663][ T2155] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 726.888491][ T2155] usb 6-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 726.897677][ T2155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.905879][ T2155] usb 6-1: Product: syz [ 726.933299][ T2155] usb 6-1: Manufacturer: syz [ 726.938764][ T2155] usb 6-1: SerialNumber: syz [ 726.965922][ T2155] usb 6-1: config 0 descriptor?? [ 726.975062][ T2155] ti_usb_3410_5052 6-1:0.0: TI USB 3410 1 port adapter converter detected [ 727.005011][ T2155] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 727.080862][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 727.118670][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 727.163349][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 727.196094][T15149] netlink: 'syz.4.2605': attribute type 10 has an invalid length. [ 727.204321][ T10] usb 1-1: media controller created [ 727.210520][T15149] veth0_vlan: left promiscuous mode [ 727.222157][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.240069][T15149] veth0_vlan: entered promiscuous mode [ 727.270008][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 727.280009][T15149] team0: Device veth0_vlan failed to register rx_handler [ 727.295769][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 727.320162][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 727.363022][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 727.371156][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 727.527307][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 727.548548][ T10] dvb-usb: error while querying for an remote control event. [ 727.569844][ T2155] usb 6-1: USB disconnect, device number 42 [ 727.592690][T15154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.606097][T15154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.628527][ T2155] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 727.664391][ T2155] ti_usb_3410_5052 6-1:0.0: device disconnected [ 727.725365][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 727.734771][ T10] dvb-usb: error while querying for an remote control event. [ 727.905376][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 727.923436][ T10] dvb-usb: error while querying for an remote control event. [ 728.085389][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 728.093277][ T10] dvb-usb: error while querying for an remote control event. [ 728.265871][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 728.271704][ T10] dvb-usb: error while querying for an remote control event. [ 728.564620][T15167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.685407][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 728.691352][ T10] dvb-usb: error while querying for an remote control event. [ 728.770503][ T6319] usb 1-1: USB disconnect, device number 114 [ 728.928697][ T6319] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 729.230292][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 729.230315][ T30] audit: type=1326 audit(1749930756.765:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 729.365805][ T30] audit: type=1326 audit(1749930756.765:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 729.458887][ T30] audit: type=1326 audit(1749930756.765:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 729.495052][ T30] audit: type=1326 audit(1749930756.765:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 729.548156][ T30] audit: type=1326 audit(1749930756.765:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 729.686182][ T30] audit: type=1326 audit(1749930756.765:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 729.715621][ T30] audit: type=1326 audit(1749930756.765:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 729.749900][ T30] audit: type=1326 audit(1749930756.765:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fab06b8d33c code=0x7ffc0000 [ 729.780564][ T30] audit: type=1326 audit(1749930756.765:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 729.927715][ T30] audit: type=1326 audit(1749930756.765:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15177 comm="syz.0.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fab06b8d33c code=0x7ffc0000 [ 730.925338][T11819] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 730.971005][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 731.081441][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 731.096015][T11819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.114443][T11819] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.126991][T11819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.136123][T11819] usb 4-1: Product: syz [ 731.140460][T11819] usb 4-1: Manufacturer: syz [ 731.145116][T11819] usb 4-1: SerialNumber: syz [ 731.155876][T11819] cdc_ether 4-1:1.0: skipping garbage [ 731.161533][T11819] usb 4-1: bad CDC descriptors [ 731.317137][ T6319] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 731.376000][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.389762][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.495616][ T6319] usb 6-1: Using ep0 maxpacket: 16 [ 731.506604][ T6319] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 731.555313][T11819] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 731.589165][ T6319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.600220][T11804] usb 4-1: USB disconnect, device number 119 [ 731.719906][T11819] usb 1-1: config 0 has no interfaces? [ 731.735385][T11819] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 731.744891][T11819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.754162][T11819] usb 1-1: Product: syz [ 731.760846][T11819] usb 1-1: Manufacturer: syz [ 731.772776][T11819] usb 1-1: SerialNumber: syz [ 731.792074][T11819] usb 1-1: config 0 descriptor?? [ 731.845437][ T6319] usb 6-1: config 0 has no interfaces? [ 731.891353][ T6319] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 731.904899][ T6319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.915589][ T6319] usb 6-1: Product: syz [ 731.920202][ T6319] usb 6-1: Manufacturer: syz [ 731.927293][ T6319] usb 6-1: SerialNumber: syz [ 731.941725][ T6319] usb 6-1: config 0 descriptor?? [ 732.457051][T11819] usb 6-1: USB disconnect, device number 43 [ 732.641820][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2635'. [ 732.654629][T15239] openvswitch: netlink: Unknown nsh attribute 0 [ 732.662506][T15239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.683641][T15241] loop8: detected capacity change from 0 to 7 [ 732.692424][T15241] Dev loop8: unable to read RDB block 7 [ 732.701967][T15241] loop8: unable to read partition table [ 732.708868][T15241] loop8: partition table beyond EOD, truncated [ 732.727559][ T6319] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 732.743206][T15241] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 732.875371][ T6319] usb 4-1: device descriptor read/64, error -71 [ 733.172891][ T6319] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 733.206347][T15254] FAULT_INJECTION: forcing a failure. [ 733.206347][T15254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.220408][T15254] CPU: 0 UID: 0 PID: 15254 Comm: syz.4.2639 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 733.220439][T15254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 733.220451][T15254] Call Trace: [ 733.220460][T15254] [ 733.220469][T15254] dump_stack_lvl+0x189/0x250 [ 733.220506][T15254] ? __pfx____ratelimit+0x10/0x10 [ 733.220536][T15254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.220566][T15254] ? __pfx__printk+0x10/0x10 [ 733.220589][T15254] ? __might_fault+0xb0/0x130 [ 733.220621][T15254] should_fail_ex+0x414/0x560 [ 733.220653][T15254] _copy_from_user+0x2d/0xb0 [ 733.220675][T15254] snd_pcm_oss_write+0x84f/0x11a0 [ 733.220729][T15254] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 733.220762][T15254] ? bpf_lsm_file_permission+0x9/0x20 [ 733.220789][T15254] ? security_file_permission+0x75/0x290 [ 733.220814][T15254] ? rw_verify_area+0x258/0x650 [ 733.220842][T15254] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 733.220874][T15254] vfs_write+0x27b/0xa90 [ 733.220918][T15254] ? __pfx_vfs_write+0x10/0x10 [ 733.220948][T15254] ? __fget_files+0x2a/0x420 [ 733.220973][T15254] ? __fget_files+0x2a/0x420 [ 733.220993][T15254] ? __fget_files+0x3a0/0x420 [ 733.221012][T15254] ? __fget_files+0x2a/0x420 [ 733.221045][T15254] ksys_write+0x145/0x250 [ 733.221066][T15254] ? __pfx_ksys_write+0x10/0x10 [ 733.221082][T15254] ? rcu_is_watching+0x15/0xb0 [ 733.221118][T15254] ? do_syscall_64+0xbe/0x3b0 [ 733.221142][T15254] do_syscall_64+0xfa/0x3b0 [ 733.221159][T15254] ? lockdep_hardirqs_on+0x9c/0x150 [ 733.221196][T15254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.221216][T15254] ? clear_bhb_loop+0x60/0xb0 [ 733.221240][T15254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.221260][T15254] RIP: 0033:0x7f91e898e929 [ 733.221279][T15254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.221295][T15254] RSP: 002b:00007f91e98d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 733.221316][T15254] RAX: ffffffffffffffda RBX: 00007f91e8bb5fa0 RCX: 00007f91e898e929 [ 733.221331][T15254] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000008 [ 733.221345][T15254] RBP: 00007f91e98d1090 R08: 0000000000000000 R09: 0000000000000000 [ 733.221358][T15254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 733.221370][T15254] R13: 0000000000000000 R14: 00007f91e8bb5fa0 R15: 00007f91e8cdfa28 [ 733.221401][T15254] [ 733.549778][ T6319] usb 4-1: device descriptor read/64, error -71 [ 733.675832][ T6319] usb usb4-port1: attempt power cycle [ 734.073099][ T6319] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 734.096024][ T6319] usb 4-1: device descriptor read/8, error -71 [ 734.279337][T11804] usb 1-1: USB disconnect, device number 115 [ 734.345463][ T6319] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 734.414429][ T6319] usb 4-1: device descriptor read/8, error -71 [ 734.596870][ T6319] usb usb4-port1: unable to enumerate USB device [ 734.995362][ T6328] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 735.175654][ T6328] usb 2-1: Using ep0 maxpacket: 16 [ 735.224786][ T6328] usb 2-1: config index 0 descriptor too short (expected 1828, got 36) [ 735.277606][ T6328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.339903][ T6328] usb 2-1: config 0 has no interfaces? [ 735.342649][ T6328] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 735.342674][ T6328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.342688][ T6328] usb 2-1: Product: syz [ 735.342698][ T6328] usb 2-1: Manufacturer: syz [ 735.342708][ T6328] usb 2-1: SerialNumber: syz [ 735.349730][ T6328] usb 2-1: config 0 descriptor?? [ 735.411113][T15289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2651'. [ 735.691529][T15293] netlink: 'syz.5.2653': attribute type 10 has an invalid length. [ 735.699962][T15293] veth0_vlan: left promiscuous mode [ 735.701178][T15293] veth0_vlan: entered promiscuous mode [ 735.718819][T15293] team0: Device veth0_vlan failed to register rx_handler [ 735.771055][T11819] usb 2-1: USB disconnect, device number 107 [ 735.895546][ T6328] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 736.004652][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2656'. [ 736.014427][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 736.156468][ T6328] usb 4-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 736.179381][ T6328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.189365][T15304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2656'. [ 736.216223][ T6328] usb 4-1: config 0 descriptor?? [ 736.243231][ T6328] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input60 [ 736.257527][T15306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.281665][T15306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.307423][T15306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.316884][T15306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.431152][T15291] fuse: Bad value for 'group_id' [ 736.442147][T15291] fuse: Bad value for 'group_id' [ 736.466452][T15291] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 736.493280][T15291] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 736.526883][ T5188] bcm5974 4-1:0.0: could not read from device [ 736.553253][ T6328] usb 4-1: USB disconnect, device number 124 [ 736.564536][ T5880] bcm5974 4-1:0.0: could not read from device [ 736.580634][ T5188] bcm5974 4-1:0.0: could not read from device [ 736.591693][ T5188] bcm5974 4-1:0.0: could not read from device [ 736.612002][ T5188] bcm5974 4-1:0.0: could not read from device [ 736.621426][ T5188] bcm5974 4-1:0.0: could not read from device [ 736.666123][ T5188] bcm5974 4-1:0.0: could not read from device [ 736.679322][ T5188] bcm5974 4-1:0.0: could not read from device [ 736.701670][ T5880] bcm5974 4-1:0.0: could not read from device [ 736.712876][ T5880] udevd[5880]: Error opening device "/dev/input/event4": Input/output error [ 736.724565][ T5880] udevd[5880]: Unable to EVIOCGABS device "/dev/input/event4" [ 736.742307][ T5880] udevd[5880]: Unable to EVIOCGABS device "/dev/input/event4" [ 736.754180][ T5880] udevd[5880]: Unable to EVIOCGABS device "/dev/input/event4" [ 736.765356][ T5880] udevd[5880]: Unable to EVIOCGABS device "/dev/input/event4" [ 736.773235][ T5880] udevd[5880]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 736.802356][ T5203] udevd[5203]: worker [5880] terminated by signal 6 (Aborted) [ 736.810562][ T5203] udevd[5203]: worker [5880] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input60/event4' [ 736.875566][ T6319] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 737.047274][ T6319] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 737.056017][T15312] netlink: 'syz.0.2659': attribute type 27 has an invalid length. [ 737.071463][ T6319] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 737.081079][ T6319] usb 2-1: can't read configurations, error -61 [ 737.227040][ T6319] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 737.239068][T15316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2661'. [ 737.413517][T15321] fuse: Bad value for 'fd' [ 737.422283][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 737.422303][ T30] audit: type=1326 audit(1749930764.955:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 737.473626][ T30] audit: type=1326 audit(1749930765.005:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 737.486030][ T6319] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 737.522644][ T30] audit: type=1326 audit(1749930765.005:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 737.551738][ T30] audit: type=1326 audit(1749930765.005:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 737.578409][ T6319] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 737.580940][ T30] audit: type=1326 audit(1749930765.005:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 737.595336][ T6319] usb 2-1: can't read configurations, error -61 [ 737.623575][ T6319] usb usb2-port1: attempt power cycle [ 737.648892][ T30] audit: type=1326 audit(1749930765.005:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 737.673767][ T30] audit: type=1326 audit(1749930765.005:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 737.702001][ T30] audit: type=1326 audit(1749930765.005:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 737.730055][ T30] audit: type=1326 audit(1749930765.005:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fab06b8d33c code=0x7ffc0000 [ 737.787781][T15331] netlink: 'syz.0.2668': attribute type 10 has an invalid length. [ 737.799023][T15331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.814535][T15331] batadv0: entered promiscuous mode [ 737.821345][T15331] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 737.834610][ T30] audit: type=1326 audit(1749930765.005:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15319 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab06b8e929 code=0x7ffc0000 [ 738.041937][ T6319] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 738.078536][ T6319] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 738.088979][T15340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2672'. [ 738.103036][ T6319] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 738.111936][ T6319] usb 2-1: can't read configurations, error -61 [ 738.259389][ T6319] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 738.300656][ T6319] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 738.324206][ T6319] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 738.333191][ T6319] usb 2-1: can't read configurations, error -61 [ 738.345040][ T6319] usb usb2-port1: unable to enumerate USB device [ 738.394360][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2678'. [ 738.405049][T15353] openvswitch: netlink: Unknown nsh attribute 0 [ 738.412288][T15353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.021468][T15390] netlink: 'syz.1.2691': attribute type 2 has an invalid length. [ 740.085655][T15390] netlink: 'syz.1.2691': attribute type 8 has an invalid length. [ 740.097865][T15390] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2691'. [ 740.455566][T11804] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 740.595557][T15405] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2697'. [ 740.666874][T11804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.706182][T11804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.740171][T11804] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 740.764600][T11804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.811780][T11804] usb 6-1: config 0 descriptor?? [ 741.044465][T11804] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 741.071722][T11804] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 741.241126][T11804] cp2112 0003:10C4:EA90.0028: error requesting version [ 741.279925][T11804] cp2112 0003:10C4:EA90.0028: probe with driver cp2112 failed with error -5 [ 741.421305][T11804] usb 6-1: USB disconnect, device number 44 [ 741.475539][ T6328] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 741.685660][ T6328] usb 2-1: Using ep0 maxpacket: 8 [ 741.725051][ T6328] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 741.761993][ T6328] usb 2-1: config 179 has no interface number 0 [ 741.776723][ T6328] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 741.908645][T15443] netlink: 'syz.4.2709': attribute type 10 has an invalid length. [ 741.935811][ T6328] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 741.945318][T11804] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 741.948648][T15443] veth0_vlan: left promiscuous mode [ 742.002714][ T6328] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 742.060339][ T6328] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 742.073241][T15443] veth0_vlan: entered promiscuous mode [ 742.124794][T15443] team0: Device veth0_vlan failed to register rx_handler [ 742.158728][T11804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 742.159032][ T6328] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 742.261736][T11804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.302530][T11804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 742.306149][ T6328] usb 2-1: config 179 interface 65 has no altsetting 0 [ 742.359839][T11804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 742.390425][T11804] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 742.408859][ T6328] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 742.433252][T11804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.455391][ T6328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.492933][T11804] usb 6-1: config 0 descriptor?? [ 742.548995][T15436] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 742.644471][ T6328] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input61 [ 742.856018][ T5188] input input61: unable to receive magic message: -110 [ 742.908220][ T6319] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 742.976646][ T6319] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 743.011076][T11804] hid-u2fzero 0003:10C4:8ACF.002A: unknown main item tag 0x0 [ 743.048581][ T5188] input input61: unable to receive magic message: -32 [ 743.073880][T11804] hid-u2fzero 0003:10C4:8ACF.002A: unknown main item tag 0x0 [ 743.115461][T11804] hid-u2fzero 0003:10C4:8ACF.002A: unknown main item tag 0x0 [ 743.180604][T11804] hid-u2fzero 0003:10C4:8ACF.002A: unknown main item tag 0x0 [ 743.229844][ T5188] input input61: unable to receive magic message: -32 [ 743.315442][T11804] hid-u2fzero 0003:10C4:8ACF.002A: unknown main item tag 0x0 [ 743.369256][T11804] hid-u2fzero 0003:10C4:8ACF.002A: hidraw1: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.5-1/input0 [ 743.403326][ T5188] input input61: unable to receive magic message: -32 [ 743.523079][ T5188] input input61: unable to receive magic message: -32 [ 743.549753][T11804] hid-u2fzero 0003:10C4:8ACF.002A: U2F Zero LED initialised [ 743.611042][T11804] hid-u2fzero 0003:10C4:8ACF.002A: U2F Zero RNG initialised [ 743.663507][T11804] usb 6-1: USB disconnect, device number 45 [ 743.848951][T15460] fido_id[15460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 744.193328][T11804] usb 2-1: USB disconnect, device number 112 [ 744.193406][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 744.222019][T11804] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 744.895348][T11804] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 745.055350][T11804] usb 2-1: Using ep0 maxpacket: 16 [ 745.091513][T11804] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 745.142639][T11804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.195304][T11804] usb 2-1: Product: syz [ 745.199602][T11804] usb 2-1: Manufacturer: syz [ 745.221322][T11804] usb 2-1: SerialNumber: syz [ 745.248723][T11804] usb 2-1: config 0 descriptor?? [ 745.305765][T11804] as10x_usb: device has been detected [ 745.325021][T11804] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 745.335427][T11819] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 745.384854][T11804] usb 2-1: DVB: registering adapter 10 frontend 0 (Sky IT Digital Key (green led))... [ 745.452476][T11804] as10x_usb: error during firmware upload part1 [ 745.472308][T15469] random: crng reseeded on system resumption [ 745.473022][T11804] Registered device Sky IT Digital Key (green led) [ 745.493306][T15485] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 745.525249][T11819] usb 6-1: Using ep0 maxpacket: 32 [ 745.574387][T11819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.599959][T11819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 745.637690][ T6328] usb 2-1: USB disconnect, device number 113 [ 745.643818][T11819] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 745.662043][T11819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.739410][ T6328] Unregistered device Sky IT Digital Key (green led) [ 745.762554][T11819] usb 6-1: config 0 descriptor?? [ 745.782004][ T6328] as10x_usb: device has been disconnected [ 745.842198][T15495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.240945][T11819] usbhid 6-1:0.0: can't add hid device: -71 [ 746.248574][T11819] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 746.339234][T15509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2725'. [ 746.351863][T11819] usb 6-1: USB disconnect, device number 46 [ 746.392656][T15509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2725'. [ 746.465010][T15509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2725'. [ 746.580029][T11804] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 746.756292][T11804] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 746.872775][T15509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2725'. [ 746.882893][T15509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2725'. [ 746.909797][T15509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2725'. [ 747.545913][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.555534][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.716119][T15525] ip6gre1: entered allmulticast mode [ 748.353293][T15534] netlink: 'syz.5.2732': attribute type 8 has an invalid length. [ 748.608863][T15540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.649633][T15540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.775331][T11804] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 748.915473][ T6319] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 748.945369][T11804] usb 2-1: Using ep0 maxpacket: 16 [ 748.956391][T11804] usb 2-1: config 0 has no interfaces? [ 748.967133][T11804] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 748.976643][T11804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.984919][T11804] usb 2-1: Product: syz [ 748.989578][T11804] usb 2-1: Manufacturer: syz [ 748.994275][T11804] usb 2-1: SerialNumber: syz [ 749.005848][T11804] usb 2-1: config 0 descriptor?? [ 749.080133][ T6319] usb 6-1: Using ep0 maxpacket: 16 [ 749.085428][ T6328] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 749.103147][ T6319] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 749.117227][ T6319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.130285][ T6319] usb 6-1: Product: syz [ 749.134626][ T6319] usb 6-1: Manufacturer: syz [ 749.139839][ T6319] usb 6-1: SerialNumber: syz [ 749.148706][ T6319] usb 6-1: config 0 descriptor?? [ 749.167394][ T6319] as10x_usb: device has been detected [ 749.173815][ T6319] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 749.200296][ T6319] usb 6-1: DVB: registering adapter 10 frontend 0 (Sky IT Digital Key (green led))... [ 749.213705][ T6319] as10x_usb: error during firmware upload part1 [ 749.220647][ T6319] Registered device Sky IT Digital Key (green led) [ 749.247957][ T6328] usb 4-1: Using ep0 maxpacket: 8 [ 749.270358][ T6328] usb 4-1: config 239 has an invalid interface number: 204 but max is 0 [ 749.279684][ T6328] usb 4-1: config 239 has no interface number 0 [ 749.289412][ T6328] usb 4-1: New USB device found, idVendor=1498, idProduct=9206, bcdDevice=a8.6b [ 749.299094][ T6328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.308275][ T6328] usb 4-1: Product: syz [ 749.312585][ T6328] usb 4-1: Manufacturer: syz [ 749.317772][ T6328] usb 4-1: SerialNumber: syz [ 749.366703][T15542] random: crng reseeded on system resumption [ 749.415695][ T6319] usb 6-1: USB disconnect, device number 47 [ 749.460293][ T6319] Unregistered device Sky IT Digital Key (green led) [ 749.472861][ T6319] as10x_usb: device has been disconnected [ 749.659221][ T6328] usb 4-1: USB disconnect, device number 125 [ 749.880444][ T2155] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 749.907043][ T2155] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 750.005282][ T6328] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 750.165408][ T6328] usb 4-1: Using ep0 maxpacket: 16 [ 750.172827][ T6328] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 750.184528][ T6328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 750.197842][ T6328] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 750.207175][ T6328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.216203][ T6328] usb 4-1: Product: syz [ 750.238215][ T6328] usb 4-1: Manufacturer: syz [ 750.248904][ T6328] usb 4-1: SerialNumber: syz [ 750.309553][T15570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.345376][T11819] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 750.355790][T15570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.399701][ T6328] usb 4-1: config 0 descriptor?? [ 750.414170][T15570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.427185][ T6328] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 750.436605][ T6328] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 750.443697][T15570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.555299][T11819] usb 6-1: Using ep0 maxpacket: 16 [ 750.588160][T11819] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 750.603492][T11819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.619754][T11819] usb 6-1: Product: syz [ 750.651214][T11819] usb 6-1: Manufacturer: syz [ 750.656816][T11819] usb 6-1: SerialNumber: syz [ 750.756147][T11819] usb 6-1: config 0 descriptor?? [ 750.775814][T11819] as10x_usb: device has been detected [ 750.782071][T11819] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 750.840793][T11819] usb 6-1: DVB: registering adapter 10 frontend 0 (Sky IT Digital Key (green led))... [ 750.864177][T11819] as10x_usb: error during firmware upload part1 [ 750.870833][T11819] Registered device Sky IT Digital Key (green led) [ 750.976142][T15567] random: crng reseeded on system resumption [ 751.040661][ T6328] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 751.067342][ T6328] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 751.087243][T15578] netlink: 'syz.0.2746': attribute type 27 has an invalid length. [ 751.178053][T15580] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2747'. [ 751.531707][ T6319] usb 2-1: USB disconnect, device number 114 [ 751.604322][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 751.697969][T15586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2750'. [ 751.739860][ T6328] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 751.889046][T15593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.916192][T15593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.938791][T15594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.948742][T15594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.968957][ T6328] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 751.987285][ T6328] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 751.995619][ T6328] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 752.005552][ T6328] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 752.005679][ T6319] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 752.012746][ T6328] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 752.032075][ T6328] usb 4-1: USB disconnect, device number 126 [ 752.197133][ T6319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.207785][ T6319] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 752.219498][ T6319] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 752.228945][ T6319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.237251][ T6319] usb 2-1: Product: syz [ 752.241913][ T6319] usb 2-1: Manufacturer: syz [ 752.246666][ T6319] usb 2-1: SerialNumber: syz [ 752.256319][ T6319] usb 2-1: config 0 descriptor?? [ 752.345504][ T2155] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 752.471263][ T6319] usb 2-1: USB disconnect, device number 115 [ 752.519077][ T2155] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 752.540777][ T2155] usb 1-1: config 0 has no interface number 0 [ 752.570992][ T2155] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d [ 752.591999][ T2155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.620614][ T2155] usb 1-1: Product: syz [ 752.629885][ T2155] usb 1-1: Manufacturer: syz [ 752.634685][ T2155] usb 1-1: SerialNumber: syz [ 752.643172][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.645098][ T2155] usb 1-1: config 0 descriptor?? [ 752.681970][ T2155] usbtest 1-1:0.85: Linux gadget zero [ 752.687059][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.701884][ T2155] usbtest 1-1:0.85: high-speed {control in/out int-out} tests (+alt) [ 752.883728][ T2155] usb 1-1: USB disconnect, device number 116 [ 753.058832][ T6319] usb 6-1: USB disconnect, device number 48 [ 753.114268][ T6319] Unregistered device Sky IT Digital Key (green led) [ 753.124184][ T6319] as10x_usb: device has been disconnected [ 753.455110][T15616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.477767][T15616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.526195][T15616] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2758'. [ 753.535629][T11804] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 753.815319][T11804] usb 2-1: Using ep0 maxpacket: 16 [ 753.858883][T11804] usb 2-1: config 0 has no interfaces? [ 753.885349][T11804] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 753.894748][T11804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.904684][T11804] usb 2-1: Product: syz [ 753.910392][T11804] usb 2-1: Manufacturer: syz [ 753.915786][T11804] usb 2-1: SerialNumber: syz [ 753.938846][T11804] usb 2-1: config 0 descriptor?? [ 754.289332][T15623] veth1_vlan: left allmulticast mode [ 754.306675][T15623] macvlan0: left allmulticast mode [ 754.326447][T15623] netlink: 'syz.3.2762': attribute type 1 has an invalid length. [ 754.334991][T15623] netlink: 'syz.3.2762': attribute type 2 has an invalid length. [ 754.483970][T15630] netlink: 'syz.3.2765': attribute type 8 has an invalid length. [ 754.785440][T11804] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 754.895400][ T6319] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 754.946003][T11804] usb 1-1: too many configurations: 80, using maximum allowed: 8 [ 754.959644][T11804] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 754.974538][T11804] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.006881][T11804] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 755.017381][T11804] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.038223][T11804] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 755.054354][T11804] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.073656][T11804] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 755.084077][ T6319] usb 4-1: Using ep0 maxpacket: 16 [ 755.093371][ T6319] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 755.103537][ T6319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.112914][T11804] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.126135][ T6319] usb 4-1: Product: syz [ 755.130328][ T6319] usb 4-1: Manufacturer: syz [ 755.138588][ T6319] usb 4-1: SerialNumber: syz [ 755.143455][T11804] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 755.167406][ T6319] usb 4-1: config 0 descriptor?? [ 755.173089][T11804] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.198932][T11804] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 755.213746][ T6319] as10x_usb: device has been detected [ 755.228425][ T6319] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 755.228659][T15643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.251499][T15643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.279951][T11804] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.454756][T15639] random: crng reseeded on system resumption [ 755.490712][T11804] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 755.503689][ T6319] usb 4-1: DVB: registering adapter 10 frontend 0 (Sky IT Digital Key (green led))... [ 755.514721][T11804] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.541269][ T6319] as10x_usb: error during firmware upload part1 [ 755.549260][T15643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.565618][ T6319] Registered device Sky IT Digital Key (green led) [ 755.574979][ T6319] usb 4-1: USB disconnect, device number 127 [ 755.590466][T15643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.618543][T11804] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 755.639225][T11804] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.675875][T11804] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 755.701711][ T6319] Unregistered device Sky IT Digital Key (green led) [ 755.726538][ T6319] as10x_usb: device has been disconnected [ 755.753655][T11804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.798247][T15647] input: syz1 as /devices/virtual/input/input64 [ 755.833571][ T2155] hid-generic 00A0:0006:0003.002D: unknown main item tag 0x0 [ 755.857074][T15647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.869234][ T2155] hid-generic 00A0:0006:0003.002D: unknown main item tag 0x0 [ 755.878043][T11804] usb 1-1: Product: syz [ 755.878076][ T2155] hid-generic 00A0:0006:0003.002D: unknown main item tag 0x0 [ 755.882234][T11804] usb 1-1: Manufacturer: syz [ 755.882253][T11804] usb 1-1: SerialNumber: syz [ 755.904826][T15647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.958568][ T2155] hid-generic 00A0:0006:0003.002D: unknown main item tag 0x0 [ 755.961317][T11804] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 755.972752][ T2155] hid-generic 00A0:0006:0003.002D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 756.195547][T15648] fido_id[15648]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 757.123496][ T6319] usb 2-1: USB disconnect, device number 116 [ 757.549054][ T2155] usb 1-1: USB disconnect, device number 117 [ 757.584027][T15676] misc userio: Invalid payload size [ 759.132220][ T10] usb 5-1: USB disconnect, device number 42 [ 759.307975][ T6319] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 759.455476][ T6319] usb 2-1: device descriptor read/64, error -71 [ 759.706395][ T6319] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 759.884903][ T6319] usb 2-1: device descriptor read/64, error -71 [ 760.029145][ T6319] usb usb2-port1: attempt power cycle [ 760.505241][ T6319] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 760.586020][ T6319] usb 2-1: device descriptor read/8, error -71 [ 760.715804][T11819] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 760.738505][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 760.751505][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 760.774691][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 760.805409][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 760.813706][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 760.869314][ T6319] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 760.909383][T11819] usb 4-1: Using ep0 maxpacket: 16 [ 760.915961][ T6319] usb 2-1: device descriptor read/8, error -71 [ 760.930835][T11819] usb 4-1: config 0 has no interfaces? [ 760.939856][T11819] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 761.033024][ T6319] usb usb2-port1: unable to enumerate USB device [ 761.051593][T11819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.085381][T11819] usb 4-1: Product: syz [ 761.089622][T11819] usb 4-1: Manufacturer: syz [ 761.115292][T11819] usb 4-1: SerialNumber: syz [ 761.172412][T11819] usb 4-1: config 0 descriptor?? [ 762.107858][T15720] netlink: 'syz.1.2790': attribute type 8 has an invalid length. [ 762.508549][T15726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.525840][T15726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.638155][T15726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.652410][T15726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.903541][ T5841] Bluetooth: hci2: command tx timeout [ 763.061815][T12625] bond0 (unregistering): Released all slaves [ 763.464960][T12625] bond1 (unregistering): Released all slaves [ 763.659067][T15706] chnl_net:caif_netlink_parms(): no params data found [ 763.727189][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'. [ 763.786032][T11819] usb 4-1: USB disconnect, device number 2 [ 764.093599][T15748] FAULT_INJECTION: forcing a failure. [ 764.093599][T15748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.185341][T15748] CPU: 1 UID: 0 PID: 15748 Comm: syz.3.2797 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 764.185371][T15748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.185385][T15748] Call Trace: [ 764.185393][T15748] [ 764.185403][T15748] dump_stack_lvl+0x189/0x250 [ 764.185439][T15748] ? __pfx____ratelimit+0x10/0x10 [ 764.185471][T15748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.185502][T15748] ? __pfx__printk+0x10/0x10 [ 764.185526][T15748] ? __might_fault+0xb0/0x130 [ 764.185558][T15748] should_fail_ex+0x414/0x560 [ 764.185589][T15748] _copy_from_user+0x2d/0xb0 [ 764.185610][T15748] dev_ethtool+0xd0/0x1990 [ 764.185642][T15748] ? __lock_acquire+0xab9/0xd20 [ 764.185673][T15748] ? __pfx_dev_ethtool+0x10/0x10 [ 764.185711][T15748] ? dev_load+0x21/0x1f0 [ 764.185734][T15748] ? dev_load+0x21/0x1f0 [ 764.185755][T15748] dev_ioctl+0x392/0x1150 [ 764.185781][T15748] sock_do_ioctl+0x22c/0x300 [ 764.185815][T15748] ? __pfx_sock_do_ioctl+0x10/0x10 [ 764.185842][T15748] ? __lock_acquire+0xab9/0xd20 [ 764.185887][T15748] sock_ioctl+0x576/0x790 [ 764.185926][T15748] ? __pfx_sock_ioctl+0x10/0x10 [ 764.185954][T15748] ? __fget_files+0x2a/0x420 [ 764.185974][T15748] ? __fget_files+0x3a0/0x420 [ 764.185994][T15748] ? __fget_files+0x2a/0x420 [ 764.186015][T15748] ? bpf_lsm_file_ioctl+0x9/0x20 [ 764.186034][T15748] ? __pfx_sock_ioctl+0x10/0x10 [ 764.186052][T15748] __se_sys_ioctl+0xf9/0x170 [ 764.186072][T15748] do_syscall_64+0xfa/0x3b0 [ 764.186083][T15748] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.186101][T15748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.186113][T15748] ? clear_bhb_loop+0x60/0xb0 [ 764.186128][T15748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.186140][T15748] RIP: 0033:0x7f4bb5f8e929 [ 764.186152][T15748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.186163][T15748] RSP: 002b:00007f4bb6ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.186178][T15748] RAX: ffffffffffffffda RBX: 00007f4bb61b5fa0 RCX: 00007f4bb5f8e929 [ 764.186187][T15748] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 764.186195][T15748] RBP: 00007f4bb6ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 764.186203][T15748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.186211][T15748] R13: 0000000000000000 R14: 00007f4bb61b5fa0 R15: 00007f4bb62dfa28 [ 764.186228][T15748] [ 764.603516][T15706] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.610740][T15706] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.617951][T15706] bridge_slave_0: entered allmulticast mode [ 764.625048][T15706] bridge_slave_0: entered promiscuous mode [ 764.632636][T15706] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.639820][T15706] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.647038][T15706] bridge_slave_1: entered allmulticast mode [ 764.654106][T15706] bridge_slave_1: entered promiscuous mode [ 764.682078][T15706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.693631][T15706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.739053][ T10] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 764.787704][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 764.787723][ T30] audit: type=1326 audit(1749930792.315:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe854d8e929 code=0x7ffc0000 [ 764.852395][ T10] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 764.965439][T12625] hsr_slave_0: left promiscuous mode [ 764.977232][ T5841] Bluetooth: hci2: command tx timeout [ 764.985510][ T30] audit: type=1326 audit(1749930792.315:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe854d8e929 code=0x7ffc0000 [ 765.013642][ T30] audit: type=1326 audit(1749930792.355:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe854d8e929 code=0x7ffc0000 [ 765.036760][T12625] hsr_slave_1: left promiscuous mode [ 765.049711][T15771] loop8: detected capacity change from 0 to 7 [ 765.057687][ T30] audit: type=1326 audit(1749930792.355:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe854d8e929 code=0x7ffc0000 [ 765.080606][T15771] Dev loop8: unable to read RDB block 7 [ 765.087347][T15771] loop8: unable to read partition table [ 765.093430][T15771] loop8: partition table beyond EOD, truncated [ 765.102651][T15771] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 765.150413][ T30] audit: type=1326 audit(1749930792.355:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe854d8d3df code=0x7ffc0000 [ 765.271492][ T30] audit: type=1326 audit(1749930792.355:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe854d8e929 code=0x7ffc0000 [ 765.372138][ T30] audit: type=1326 audit(1749930792.355:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe854d90847 code=0x7ffc0000 [ 765.465345][ T30] audit: type=1326 audit(1749930792.355:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe854d8e929 code=0x7ffc0000 [ 765.578465][ T30] audit: type=1326 audit(1749930792.385:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe854d8e929 code=0x7ffc0000 [ 765.686184][ T30] audit: type=1326 audit(1749930792.385:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe854d8e929 code=0x7ffc0000 [ 766.962708][T15706] team0: Port device team_slave_0 added [ 767.055221][ T5841] Bluetooth: hci2: command tx timeout [ 767.122443][T15706] team0: Port device team_slave_1 added [ 767.295993][T15706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.325896][T15706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.432966][T15706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.505391][T15706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.536841][T15706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.536922][T15706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.846047][T15813] netlink: 'syz.5.2816': attribute type 10 has an invalid length. [ 767.911627][T15706] hsr_slave_0: entered promiscuous mode [ 767.948785][T15706] hsr_slave_1: entered promiscuous mode [ 767.972002][T15706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 768.010257][T15706] Cannot create hsr debugfs directory [ 768.035500][T15813] veth0_vlan: left promiscuous mode [ 768.042513][T15813] veth0_vlan: entered promiscuous mode [ 768.062110][T15819] Cannot find set identified by id 0 to match [ 768.076438][T15813] team0: Device veth0_vlan failed to register rx_handler [ 768.311162][ T5841] Bluetooth: hci1: unexpected event for opcode 0x200f [ 768.413360][T15832] netlink: 'syz.0.2820': attribute type 2 has an invalid length. [ 768.865378][T15845] netlink: 'syz.0.2824': attribute type 27 has an invalid length. [ 769.135438][ T5841] Bluetooth: hci2: command tx timeout [ 769.276888][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 769.486675][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 769.511593][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 769.555294][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 769.564416][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 769.573398][ T10] usb 6-1: SerialNumber: syz [ 769.861490][ T10] usb 6-1: 0:2 : does not exist [ 769.884301][T15868] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 770.041008][ T10] usb 6-1: USB disconnect, device number 49 [ 770.215748][ T6065] udevd[6065]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.507498][T15879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2836'. [ 770.508410][T15706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 770.543739][T15879] openvswitch: netlink: Flow key attr not present in new flow. [ 770.554697][T15706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 770.584750][T15882] netlink: 'syz.3.2835': attribute type 32 has an invalid length. [ 770.616585][T15706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 770.656661][T15706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 771.338900][T15706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.415788][ T6328] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 771.544513][T15706] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.587740][ T6328] usb 4-1: Using ep0 maxpacket: 32 [ 771.614824][ T6328] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.642547][ T6328] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.669355][ T6328] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 771.693720][T12625] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.701002][T12625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.723190][ T6328] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 771.732166][ T6328] usb 4-1: Product: syz [ 771.742671][ T6328] usb 4-1: Manufacturer: syz [ 771.783312][ T6328] hub 4-1:4.0: USB hub found [ 771.795881][ T2155] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 771.817015][T15920] netlink: 'syz.1.2845': attribute type 8 has an invalid length. [ 771.838158][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.845441][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.970370][ T2155] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 771.985505][ T2155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.993740][ T2155] usb 6-1: Product: syz [ 771.998380][ T6328] hub 4-1:4.0: 2 ports detected [ 772.011946][ T2155] usb 6-1: Manufacturer: syz [ 772.021421][ T2155] usb 6-1: SerialNumber: syz [ 772.102840][ T2155] usb 6-1: config 0 descriptor?? [ 772.220229][T15908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2842'. [ 772.238431][ T6328] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 772.238546][ T6328] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 772.306841][ T6328] usb 4-1: USB disconnect, device number 3 [ 772.341670][ T5841] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 772.341920][ T5841] Bluetooth: hci1: Injecting HCI hardware error event [ 772.343878][ T5153] Bluetooth: hci1: hardware error 0x00 [ 772.472142][T15706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.530283][T15916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.540946][T15916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.579421][T11819] usb 6-1: USB disconnect, device number 50 [ 772.625173][T15706] veth0_vlan: entered promiscuous mode [ 772.693415][T15706] veth1_vlan: entered promiscuous mode [ 772.809658][T15706] veth0_macvtap: entered promiscuous mode [ 772.848964][T15706] veth1_macvtap: entered promiscuous mode [ 772.920737][T15706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.960940][T15706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.985342][ T6328] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 772.997522][T15706] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.063106][T15706] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.072515][T15706] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.115920][T15706] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.535393][ T6328] usb 1-1: Using ep0 maxpacket: 32 [ 773.544119][ T6328] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 773.555291][ T6328] usb 1-1: config 0 has no interface number 0 [ 773.571754][ T6328] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 773.618902][ T6328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.661873][ T6328] usb 1-1: Product: syz [ 773.672578][ T6328] usb 1-1: Manufacturer: syz [ 773.768255][ T6328] usb 1-1: SerialNumber: syz [ 773.777938][ T6328] usb 1-1: config 0 descriptor?? [ 773.789164][ T6328] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 773.802989][ T6328] usb 1-1: selecting invalid altsetting 1 [ 773.815311][ T6328] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 773.860828][ T6328] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 773.949008][ T6328] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 774.106549][ T6328] usb 1-1: media controller created [ 774.243477][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.316701][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.454976][ T5153] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 774.471645][ T6328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.503400][T12625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.515761][T12625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.761796][ T6328] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 774.825350][ T6328] zl10353_read_register: readreg error (reg=127, ret==-32) [ 774.883982][ T6328] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 775.112642][ T6328] usb 1-1: USB disconnect, device number 118 [ 775.125478][T11807] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 775.337668][T15976] netlink: 'syz.3.2854': attribute type 27 has an invalid length. [ 775.346266][T11807] usb 5-1: Using ep0 maxpacket: 16 [ 775.409874][T11807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.527667][T11807] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 775.569346][T11807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.587042][T11807] usb 5-1: config 0 descriptor?? [ 775.626955][T15976] bridge0: port 3(dummy0) entered disabled state [ 775.812913][T15976] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 256 - 0 [ 775.831846][T11807] usbhid 5-1:0.0: can't add hid device: -71 [ 775.840880][T11807] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 775.850098][T15976] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 775.868901][T15976] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 775.890054][T15976] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 775.913931][T11807] usb 5-1: USB disconnect, device number 43 [ 775.969799][T15976] geneve2: left promiscuous mode [ 776.023201][T15976] geneve2: left allmulticast mode [ 776.651142][T16000] tipc: Started in network mode [ 776.669610][T16000] tipc: Node identity d237f931592f, cluster identity 4711 [ 776.697917][T16000] tipc: Enabled bearer , priority 0 [ 776.730967][T16003] syzkaller0: entered promiscuous mode [ 776.746774][T16003] syzkaller0: entered allmulticast mode [ 776.817048][T16000] tipc: Resetting bearer [ 776.828717][T16005] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2861'. [ 776.845397][T11807] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 776.898481][T15997] tipc: Resetting bearer [ 776.997601][T15997] tipc: Disabling bearer [ 777.026258][T11807] usb 1-1: device descriptor read/64, error -71 [ 777.049522][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 777.049542][ T30] audit: type=1326 audit(1749930804.575:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16010 comm="syz.1.2863" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8371b8e929 code=0x0 [ 777.285343][T11807] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 777.445299][T11807] usb 1-1: device descriptor read/64, error -71 [ 777.579112][T11807] usb usb1-port1: attempt power cycle [ 777.671370][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 777.698278][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 777.707484][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 777.735603][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 777.753509][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 777.945883][T11807] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 777.986035][T11807] usb 1-1: device descriptor read/8, error -71 [ 778.035397][ T6327] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 778.213676][ T6327] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 778.225453][T11807] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 778.253959][ T6327] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 778.266795][T11807] usb 1-1: device descriptor read/8, error -71 [ 778.274386][ T6327] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.399938][T11807] usb usb1-port1: unable to enumerate USB device [ 779.014946][T12625] dummy0: left allmulticast mode [ 779.027102][T12625] dummy0: left promiscuous mode [ 779.044799][T12625] bridge0: port 3(dummy0) entered disabled state [ 779.071057][T12625] bridge_slave_1: left allmulticast mode [ 779.079514][T12625] bridge_slave_1: left promiscuous mode [ 779.086051][T12625] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.098397][T12625] bridge_slave_0: left allmulticast mode [ 779.104134][T12625] bridge_slave_0: left promiscuous mode [ 779.110635][ C0] ------------[ cut here ]------------ [ 779.116876][ C0] ODEBUG: free active (active state 0) object: ffff888055e82a78 object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x20 [ 779.131745][ C0] WARNING: CPU: 0 PID: 15 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 779.141136][ C0] Modules linked in: [ 779.145858][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 779.157836][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.168079][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 779.173956][ C0] Code: 4c 89 ff e8 17 37 5c fd 4d 8b 0f 48 c7 c7 a0 90 e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 4a 6a bc fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 9d d9 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 779.193718][ C0] RSP: 0000:ffffc90000147758 EFLAGS: 00010282 [ 779.199877][ C0] RAX: bfb6a7e7ba7ad600 RBX: dffffc0000000000 RCX: ffff88801cef3c00 [ 779.207934][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 779.215970][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 779.223975][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa9e4 R12: ffffffff8a423ca0 [ 779.232038][ C0] R13: ffffffff8be29220 R14: ffff888055e82a78 R15: ffffffff8b8ce020 [ 779.240078][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 779.249105][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 779.255752][ C0] CR2: 00007f8371b71d60 CR3: 000000005b468000 CR4: 00000000003526f0 [ 779.263799][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 779.271876][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 779.279918][ C0] Call Trace: [ 779.283236][ C0] [ 779.286235][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 779.291855][ C0] ? kobject_put+0x22b/0x480 [ 779.296522][ C0] kfree+0x112/0x440 [ 779.300469][ C0] kobject_put+0x22b/0x480 [ 779.304924][ C0] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 779.310291][ C0] ? rcu_core+0xc34/0x1710 [ 779.314753][ C0] rcu_core+0xca5/0x1710 [ 779.319079][ C0] ? __lock_acquire+0xab9/0xd20 [ 779.323994][ C0] ? __pfx_rcu_core+0x10/0x10 [ 779.328762][ C0] ? rcu_qs+0xc4/0x170 [ 779.332890][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 779.337477][ C0] ? sched_clock_cpu+0x74/0x430 [ 779.342425][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 779.347270][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 779.352529][ C0] handle_softirqs+0x286/0x870 [ 779.357372][ C0] ? schedule+0x165/0x360 [ 779.361757][ C0] ? run_ksoftirqd+0x9b/0x100 [ 779.366552][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 779.371904][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 779.377108][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 779.382179][ C0] run_ksoftirqd+0x9b/0x100 [ 779.386752][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 779.391929][ C0] smpboot_thread_fn+0x53f/0xa60 [ 779.396950][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 779.402044][ C0] kthread+0x70e/0x8a0 [ 779.406192][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 779.411808][ C0] ? __pfx_kthread+0x10/0x10 [ 779.416498][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 779.421829][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.427142][ C0] ? __pfx_kthread+0x10/0x10 [ 779.431789][ C0] ret_from_fork+0x3fc/0x770 [ 779.436474][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 779.441643][ C0] ? __switch_to_asm+0x39/0x70 [ 779.446494][ C0] ? __switch_to_asm+0x33/0x70 [ 779.451302][ C0] ? __pfx_kthread+0x10/0x10 [ 779.455981][ C0] ret_from_fork_asm+0x1a/0x30 [ 779.460818][ C0] [ 779.463884][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 779.471200][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 779.483137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.493244][ C0] Call Trace: [ 779.496572][ C0] [ 779.499548][ C0] dump_stack_lvl+0x99/0x250 [ 779.504196][ C0] ? __asan_memcpy+0x40/0x70 [ 779.508838][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.514094][ C0] ? __pfx__printk+0x10/0x10 [ 779.518752][ C0] panic+0x2db/0x790 [ 779.522704][ C0] ? __pfx_panic+0x10/0x10 [ 779.527175][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 779.532164][ C0] __warn+0x31b/0x4b0 [ 779.536195][ C0] ? debug_print_object+0x16b/0x1e0 [ 779.541440][ C0] ? debug_print_object+0x16b/0x1e0 [ 779.546677][ C0] report_bug+0x2be/0x4f0 [ 779.551056][ C0] ? debug_print_object+0x16b/0x1e0 [ 779.556296][ C0] ? debug_print_object+0x16b/0x1e0 [ 779.561513][ C0] ? debug_print_object+0x16d/0x1e0 [ 779.566738][ C0] handle_bug+0x84/0x160 [ 779.571001][ C0] exc_invalid_op+0x1a/0x50 [ 779.575521][ C0] asm_exc_invalid_op+0x1a/0x20 [ 779.580413][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 779.586232][ C0] Code: 4c 89 ff e8 17 37 5c fd 4d 8b 0f 48 c7 c7 a0 90 e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 4a 6a bc fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 9d d9 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 779.605852][ C0] RSP: 0000:ffffc90000147758 EFLAGS: 00010282 [ 779.611931][ C0] RAX: bfb6a7e7ba7ad600 RBX: dffffc0000000000 RCX: ffff88801cef3c00 [ 779.619919][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 779.627900][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 779.635893][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa9e4 R12: ffffffff8a423ca0 [ 779.643872][ C0] R13: ffffffff8be29220 R14: ffff888055e82a78 R15: ffffffff8b8ce020 [ 779.651857][ C0] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 779.658913][ C0] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 779.665960][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 779.671535][ C0] ? kobject_put+0x22b/0x480 [ 779.676140][ C0] kfree+0x112/0x440 [ 779.680059][ C0] kobject_put+0x22b/0x480 [ 779.684488][ C0] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 779.689792][ C0] ? rcu_core+0xc34/0x1710 [ 779.694225][ C0] rcu_core+0xca5/0x1710 [ 779.698485][ C0] ? __lock_acquire+0xab9/0xd20 [ 779.703365][ C0] ? __pfx_rcu_core+0x10/0x10 [ 779.708060][ C0] ? rcu_qs+0xc4/0x170 [ 779.712146][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 779.716669][ C0] ? sched_clock_cpu+0x74/0x430 [ 779.721545][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 779.726324][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 779.731549][ C0] handle_softirqs+0x286/0x870 [ 779.736328][ C0] ? schedule+0x165/0x360 [ 779.740681][ C0] ? run_ksoftirqd+0x9b/0x100 [ 779.745379][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 779.750684][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 779.755727][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 779.760768][ C0] run_ksoftirqd+0x9b/0x100 [ 779.765293][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 779.770431][ C0] smpboot_thread_fn+0x53f/0xa60 [ 779.775399][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 779.780448][ C0] kthread+0x70e/0x8a0 [ 779.784537][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 779.790019][ C0] ? __pfx_kthread+0x10/0x10 [ 779.794623][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 779.799843][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.805058][ C0] ? __pfx_kthread+0x10/0x10 [ 779.809664][ C0] ret_from_fork+0x3fc/0x770 [ 779.814274][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 779.819410][ C0] ? __switch_to_asm+0x39/0x70 [ 779.824188][ C0] ? __switch_to_asm+0x33/0x70 [ 779.828961][ C0] ? __pfx_kthread+0x10/0x10 [ 779.833567][ C0] ret_from_fork_asm+0x1a/0x30 [ 779.838357][ C0] [ 779.841555][ C0] Kernel Offset: disabled [ 779.845880][ C0] Rebooting in 86400 seconds..