last executing test programs: 11.268955599s ago: executing program 2 (id=4443): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) socket(0x15, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x2}}, 0x8}) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x10c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x8c, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'syzkaller0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x160}, 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) 9.821765101s ago: executing program 1 (id=4447): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000780), 0x2000) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 9.718073048s ago: executing program 1 (id=4448): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0xfffffffe}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40400) fchmod(r2, 0x129) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x100000000000f7) r6 = socket$igmp(0x2, 0x3, 0x2) unshare(0x20040600) flistxattr(r6, &(0x7f00000001c0)=""/245, 0xf5) read$watch_queue(r4, &(0x7f00000000c0)=""/16, 0x10) keyctl$revoke(0x3, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x2, 0xe4, 0x40, 0x9, 0x0, 0x2e, 0xd}, {0x41000, 0x1, 0xf, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x1, 0x3, 0x1}, {0xddde1000, 0x200000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x60000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0xff}, {0x40000, 0x2, 0x4, 0x5, 0x7, 0x2, 0x5, 0x0, 0x1, 0x82, 0xff, 0x70}, {0xd000, 0x1000, 0xa, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42024, 0xb, 0x0, 0x3000, [0x6840000000000000, 0xd, 0x5e, 0xff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) accept4(r7, 0x0, 0x0, 0x0) 8.691072431s ago: executing program 2 (id=4449): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9, 0xfe800000}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0}], 0x2}, 0x20000884) 8.413096719s ago: executing program 2 (id=4450): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) eventfd2(0x4, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20000840) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f2, 0x0, 0x3ff000000}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) unshare(0x2a020400) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x9, 0xe000, 0x1, r8, 0x1fff}) recvmmsg(r3, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}], 0x5}}], 0x3ffffffffffff61, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 7.825017226s ago: executing program 1 (id=4453): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004043554d00000000000001090224000100003000090410907f03000000092100000001220a000905810300"], 0x0) unshare(0x24060400) r5 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20210b0000000b0d186bb32a8969a6360d844d0f92e5033a33841dad51ed73d54470d48feb2a46009c6ce9d46e1938510e4e56e7a3e5933569382bc81fd303f1d010b69d63bae77c92782506"], 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r9, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000810) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000}, 0x1c) r11 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r11, 0xc02c564a, &(0x7f0000000100)={0x7, 0x32315659, 0x2, @stepwise={0x0, 0x2, 0x7, 0x0, 0x40000000, 0x5}}) 7.353102038s ago: executing program 2 (id=4455): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000300), 0x0, 0x4000000) socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x1, @multicast1}, {0x1, @remote}, 0x4a, {0x2, 0x4e23, @broadcast}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40010000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0xcd5, &(0x7f0000000380)={0x0, 0x8f12, 0x80, 0xfffffffd, 0xffeffc00}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './mnt\x00'}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3b) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x4) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x43, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) 6.81128936s ago: executing program 3 (id=4458): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000780), 0x2000) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 6.565035263s ago: executing program 3 (id=4459): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xff00}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x1d}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 6.563987281s ago: executing program 4 (id=4460): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc", 0x55}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000080004400000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x943103, 0x103, 0x11}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0xfffffec8, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4004) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xa3020000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x200003, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb, 0x800000000, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x200, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x4, 0x801, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x20000000000000, 0x0, 0x5, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 6.105927163s ago: executing program 0 (id=4461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x1c, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xc1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x78) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000240)={{{0x3, 0x1}}, 0x0, 0x6, 0x0}) sched_getscheduler(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 5.501316005s ago: executing program 3 (id=4462): fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/56}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x15, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB="ec0000070a7b3be2139d015e79344e8348865dc92a8a148a1aff9dba5de216cc004dffef5e04d4d1268195ae6a07da7cc45c4bd2b163952a5ef0884ed2dbc349e280cd9e384786f1a7d04fbe44434714bcc474834b1001738907647dc6f50553943b6855e83ae0c88edf84036dedd74b1423367678b01322871ed26e6a06bb010190ce7072738c", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x104) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x60, 0x0, 0x4, {{0x3, 0x557e, 0x4381, 0x40, 0x7, 0x9, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x201, 0x4800003e, r8, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.152068745s ago: executing program 2 (id=4463): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000040)={0x14, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], &(0x7f0000000540)=ANY=[@ANYBLOB="0c000000000000000000f3485c275b2b73cf6871331a3e2a9c6fc651a8bd0e804ee74dbb2f1069c7ba5232efb48da62f1bbede2658232a3450333a00003774f02004010c3aa775434bf029275f5194f50a0000000000002e8100"/112]}, &(0x7f0000000340)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="001836000000d057e177108c8708ae2f20808ca1c40e0a00935911017fff3396eb1558947313813dd8969ae4daeb69f273fef09d6936d939398cc45dddadba1193f8e6ed3274ffa5fe3dfb1d028e6672c1d144e847be5f2932ebad74d39c5f01e22784cfdd97db46370b306a96228486b57263b70c01eb37c7796c4738"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000240)={0x20, 0x0, 0x5f, {0x5d, "cf52a8ed0465fc2194314c3d96f204cddd92a2c5269cd52abe4d800140a1e469ccfa95c06a06211041dd499a7540a40fa969ed23e6cc5c2b44edc7b380db15743b7776179b944bb507b96d9e938add445ae7b3a58ae7df3556c090205f"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x5}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000500)={0x9, 0x1, 0x2, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000002c0)=0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = socket(0x40000000021, 0x2, 0x3) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @remote}, 0xfffffffffffffe46) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x7, 0xb60, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x1, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) close_range(r5, r5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) 4.022687183s ago: executing program 4 (id=4464): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000007000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="140005003f0000"], 0x3c}, 0x1, 0x11}, 0x0) 3.845070339s ago: executing program 1 (id=4465): socket$inet6_sctp(0xa, 0x1, 0x84) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x422, &(0x7f0000000240)={0x0, 0x6b90, 0x80, 0x8000, 0x2a8}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a69bbc104f9599a10900000203010902"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x80001, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB, @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3.488988449s ago: executing program 4 (id=4466): socket$inet6_sctp(0xa, 0x1, 0x84) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x422, &(0x7f0000000240)={0x0, 0x6b90, 0x80, 0x8000, 0x2a8}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a69bbc104f9599a10900000203010902"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x80001, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r1, 0x0, 0x4000) 3.485598235s ago: executing program 3 (id=4467): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x28503, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(r0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x6}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x2, 0x3, 0x0, 0x7ff}, {0x2, 0x99, 0xe, 0x4}, {0x0, 0x4, 0x7, 0xffffffff}, {0x8000, 0x3, 0x5, 0x4}, {0x2, 0x1, 0x8, 0x4}, {0x1, 0x6, 0x3, 0x7}, {0x101, 0x4, 0x7d, 0xd}, {0x8, 0x2f, 0x34, 0xfffff001}, {0x1, 0x6, 0x9, 0x9}]}, 0x10) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0xa0000, 0x0, {[0x7c, 0x3ff, 0x0, 0x80000001, 0x5, 0xfffffffffffffffb, 0x7f, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x10}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x6000, 0x0, 0xa, 0x7, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x1, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x2, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0xdddd0000, 0x40, 0x7, 0x2100, 0xdddd0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x8882, 0x174) 2.895717658s ago: executing program 0 (id=4468): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x108d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r2, 0x0, 0x0, 0x0, 0x80800, 0x0, {0x0, r6}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) io_uring_enter(r3, 0x47f8, 0x8000, 0x0, 0x0, 0xffffffffffffff00) 2.526511008s ago: executing program 3 (id=4469): socket$inet6_sctp(0xa, 0x1, 0x84) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x422, &(0x7f0000000240)={0x0, 0x6b90, 0x80, 0x8000, 0x2a8}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x80001, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r1], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 2.377621307s ago: executing program 1 (id=4470): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4, 0xfe000000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 2.314412925s ago: executing program 4 (id=4471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f00000005c0)={0x18, 0x4, 0x2, 0xffffffff}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) read$sequencer(r2, &(0x7f0000000040)=""/41, 0x29) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r6, 0x9a4c7000) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030001000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044044) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044055}, 0x40) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x274, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "90"}, @main=@item_4={0x3, 0x0, 0xb, "cd504abf"}]}}, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) 2.099663806s ago: executing program 1 (id=4472): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) memfd_secret(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, 0x0, 0x4048043) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x2d68, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x10, 0xfff1}, {0xd}, {0x7, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2d38, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x2c0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x6}, {0x4, 0x4, 0xa, 0x3}}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_VAR="02db77feed14a1ad", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="08d2e83e2667eaa73e", @TCF_META_TYPE_VAR="24748f6e3ffe44", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="03fc7a72"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x7, 0x2}, {0x4215, 0x3}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3e3, 0x7, 0x1}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x8, 0x9, 0xf}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0xffb7}, {0x1, 0x5, 0xffffffc0, 0x401}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4}, {0x0, 0x5}}}, @TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0x1, 0x9, 0xfff}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xffff, 0x7, 0x5}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xa0, 0x2, 0x0, 0x0, {{0x7f}, "165c77ccba7e675fe49eed410a2e2e4716cd407fc646343209513d7b325d42fc02d6aa9f50d053fe7e5713fa7437ad6fba8569fd1385de57a7f6190470b34ecd7309585e09484f2becc072983f084f6d72fef9a22e5851e647e7f67ee29ff9ad5e2c410f1584f651e20d1c969f9078006c1f7e0c1be07036c4b645cdf008702944ad88fccd7e74190d1ecd2c96686681e5f4ce"}}, @TCF_EM_IPT={0x3c, 0x2, 0x0, 0x0, {{0x2326, 0x9, 0x6000}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x1ff}, {0x80000000, 0x3, 0x8479, 0x1, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x9}, {0x8, 0x1, 0x0, '!'}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x800, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x6}, {0x7, 0x9d}}}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xf41a, 0x2, 0x185}, {0x6, 0x5, 0x1, "3d4984b771"}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x10}, {0x7, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 0x4}, {0x1, 0xfffffff8, 0x4, 0x4, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x7ff}, {0x4, 0x5, 0x6}}}]}]}, @TCA_CGROUP_POLICE={0x1470, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x7b, 0x9, 0x1, 0xdc8, 0x2, 0x2, 0x8, 0x0, 0x5, 0x200, 0x1000, 0xb5, 0xf14, 0x0, 0x4, 0x5b, 0x8, 0x2, 0x0, 0x29e7, 0x4, 0x4, 0x6, 0x3, 0x9, 0x0, 0x4, 0x9, 0x0, 0x81, 0x0, 0x1, 0x6, 0x5, 0xb, 0x8, 0x200, 0xffffff80, 0x2, 0xfffffff8, 0xfffffffa, 0x4e, 0x130, 0xc65, 0x7, 0x9, 0x9, 0x2, 0x1, 0x6, 0x2141, 0x8, 0x4, 0x4, 0x100, 0x5, 0x3, 0xf, 0x9d81, 0x6, 0x5, 0x0, 0x3a, 0x1, 0xfff, 0x5, 0x634, 0x1, 0x0, 0x6ae5, 0x2, 0x5, 0x10001, 0x75, 0x81, 0xfffffff9, 0x5, 0xfffffffd, 0xc10d, 0x101, 0x7, 0xfff, 0x3fc, 0x7, 0x8001, 0x1, 0x80000000, 0x9, 0x2, 0x7f, 0xb, 0x3, 0x2, 0x8, 0x200, 0xfffffc00, 0x172, 0x80000000, 0x0, 0x0, 0xe80, 0x7, 0x3ff, 0xea4, 0xa, 0xfffffe01, 0x8, 0x3, 0x8, 0xa47, 0x0, 0x5f99, 0x7, 0x2, 0x8001, 0x4, 0x8, 0x9, 0x1, 0xe36, 0xba, 0x0, 0x6, 0x7, 0x5, 0x0, 0x9, 0x7, 0x8001, 0x0, 0x0, 0x9, 0x800, 0xaf8e, 0xffffffc6, 0x2e, 0x5, 0x3, 0x81e4, 0x325, 0x3, 0x10, 0xfd0, 0x2, 0x2, 0x4, 0x2, 0x5, 0x2, 0x2, 0xffff, 0x2, 0x1, 0x255c, 0x4, 0x5, 0xc, 0x80000000, 0x80000000, 0x7, 0x0, 0x100, 0x1f, 0x7002, 0x5, 0xee, 0xe, 0xa59, 0x4, 0x9, 0x401, 0x200, 0x5, 0x6, 0x3, 0x7, 0x35b, 0x8000, 0xc, 0x2d459b57, 0x10000, 0xa62, 0x6, 0x7, 0x7cd, 0x6, 0xe54, 0x4, 0x7, 0xfffffffa, 0x2, 0x4, 0x5, 0x52e7, 0x2, 0x47, 0xf65, 0xffffffff, 0x4, 0x680, 0x0, 0x3, 0x8, 0x4f, 0x5, 0x80000001, 0x80, 0x0, 0x1ff, 0x7, 0x4, 0x9, 0xfffffe01, 0x0, 0x2, 0x1, 0x6, 0x80000001, 0x4, 0x5, 0x81, 0x2, 0xffffffff, 0x1, 0x40, 0x4, 0x200, 0x8, 0x1, 0x6, 0xe, 0x8, 0x4, 0x5, 0xfff, 0x9, 0x1, 0x0, 0x80, 0x1000, 0xfffff80d, 0x6, 0x8, 0x3, 0xfffffffc, 0x1, 0x7c, 0x3ff, 0x5b7924ef, 0xd104, 0x6, 0x0, 0x1, 0x7, 0x136, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x0, 0x8, 0x81, 0xa, 0xdc, 0x7, 0x9, 0x6, 0xfffffffa, 0x1, 0x4, 0xfffffffe, 0x10001, 0x8, 0x7, 0x9, 0xe, 0xff, 0x3, 0x7fffffff, 0x3, 0x1, 0x4, 0xc0, 0x3, 0x7, 0x8, 0x100, 0x3, 0x9, 0x8, 0x9, 0x5, 0x6, 0x6, 0x6, 0x1, 0x5, 0x6, 0x2, 0x1, 0x7c, 0x7, 0x6, 0x7, 0x2, 0x75, 0xffffff8a, 0x0, 0x9, 0x8000, 0x400, 0x9, 0x200, 0x2, 0xa, 0x2, 0xa4e, 0x40, 0x2, 0x0, 0x9, 0x4, 0xfff, 0x5, 0x200, 0x7, 0x6, 0x0, 0x4, 0x2, 0x1, 0x1, 0x6, 0x8, 0x5, 0x3, 0x2, 0x8, 0x0, 0x39f7bc20, 0x8, 0x6, 0x9, 0x81, 0x2, 0x431, 0xb5, 0x200, 0x9, 0xff, 0x8, 0x92, 0x5, 0x75b, 0x1, 0x200, 0x1ff, 0x3, 0x3, 0x81, 0x7, 0x3ff, 0x10200, 0x800, 0x84, 0xa660, 0x3, 0x3, 0xfffffffe, 0x40, 0x4, 0x2, 0x2, 0x1, 0x3, 0x7eb, 0x7, 0x1, 0x1, 0x81, 0x5, 0xbb, 0x40, 0x6, 0xffffffff, 0x3, 0xe, 0x9, 0x4, 0x7ff, 0x4, 0x70000000, 0x9, 0x7ff, 0x3, 0xbf, 0x4, 0x4, 0x3, 0x401, 0x2, 0x1ff, 0x40, 0x101, 0x80000001, 0x9c, 0xde8, 0x0, 0x10000, 0x9b, 0x0, 0x2, 0x2, 0x100, 0x0, 0xa, 0x7ff, 0x1, 0x8, 0x7fffffff, 0x0, 0x3, 0x7, 0x2, 0x3, 0x2000, 0x80000001, 0xe2a0, 0x800, 0xac5, 0x6, 0x9, 0x539, 0x8, 0x3, 0x0, 0x4568, 0x80, 0xe5, 0x80, 0x7fffffff, 0x1, 0x100, 0x0, 0x10, 0x7ff, 0x4, 0x12, 0x6, 0x5, 0x5c63, 0x4, 0x64, 0x4, 0x1, 0x61, 0x4, 0x10, 0x36, 0xffffffff, 0x6, 0xfb6, 0x0, 0x9, 0xa081, 0x3, 0x43e, 0x2, 0x7, 0x4, 0xfffffff8, 0x8000, 0x7, 0xffff, 0x10001, 0x6, 0xc, 0x4, 0xffff, 0x0, 0x3, 0x5, 0x7, 0x10001, 0x8001, 0xb, 0x2, 0x0, 0xf, 0x6, 0x6, 0x1ff, 0x0, 0x80000001, 0x6, 0x6, 0x3, 0x9, 0xb, 0xb, 0xf, 0xffffffff, 0xcdc, 0x9, 0x829b, 0x8, 0x1, 0x8, 0x129, 0x2, 0x93d8, 0x774d, 0x9, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x2, 0x800, 0xfd1, 0x0, 0xa928, 0x1, 0x0, 0x6, 0x4, 0x2d90, 0x6, 0xff, 0xfff, 0x7, 0x0, 0x0, 0x0, 0x9, 0x6, 0x4, 0x1f4, 0xfffffff7, 0xb, 0xb, 0xfffffff9, 0x0, 0x2, 0x2, 0x101, 0x6, 0x3, 0x5, 0x6, 0x100, 0xd1, 0xffffffff, 0x80, 0x6, 0xfffffffa, 0x10000, 0x5, 0x7fff, 0x5, 0x8, 0x4, 0x5, 0x22a, 0x5, 0x8, 0xffff0001, 0x2f, 0x2000, 0xfffffffb, 0x0, 0x1, 0xd, 0x3, 0x9, 0x2c5d, 0x8, 0x2d, 0x8, 0xfffffc4c, 0x5, 0x3, 0xff, 0x6, 0x6, 0xd, 0x6, 0x6, 0x5, 0x5, 0x1, 0x8, 0x9, 0x2c6, 0x9, 0x3, 0x401, 0x7, 0x9, 0x2, 0x7, 0x1, 0xb7, 0xfffffff8, 0x6, 0x40, 0x401, 0x8, 0x4, 0x9, 0x80000000, 0x5, 0xfffff000, 0x5b, 0x7ff, 0x2, 0x9ea, 0x4, 0xc, 0xff, 0x97, 0xa3c7, 0x6, 0x0, 0xf, 0x5, 0x6, 0x6, 0x9, 0x5, 0x200, 0x800, 0xb9, 0x5, 0x101, 0x4, 0x1, 0x5f, 0x2, 0x3, 0x1000, 0x8f34, 0x7, 0x5, 0x2, 0x8, 0x3, 0x5, 0x8, 0x9, 0x80000000, 0x64ea, 0x1, 0x4, 0x5, 0x6, 0xe, 0x8, 0x6, 0x7, 0x44e2b63, 0x1, 0x40, 0x3, 0x9, 0xa5a7, 0x2, 0x0, 0x7, 0x8, 0xf87e, 0x30cd, 0x34, 0x1ff, 0x5, 0xac, 0x1, 0x6, 0x803, 0x1, 0xcec2, 0x7, 0x0, 0x9e, 0x9, 0x80, 0x8, 0x7, 0x5, 0x9, 0x0, 0x6a, 0x8000, 0x5, 0x7fffffff, 0x7, 0x5, 0x2, 0xf, 0xfffffffd, 0x3, 0x5, 0xb, 0xfffffffb, 0x4, 0x2, 0x74b, 0x3, 0xc5a1, 0xa24, 0x6, 0xb, 0xf1b, 0x7fffffff, 0x80000001, 0xfffffffd, 0xffff8001, 0x6, 0x100, 0x1, 0xa, 0xffffff69, 0x7, 0x4, 0x5, 0x7ff, 0x4, 0x1800, 0x0, 0xff, 0x8, 0x10, 0x2616, 0x800, 0x101, 0x9, 0x3, 0x2, 0x3, 0x53, 0x6, 0xfff, 0x8, 0xac, 0xf0, 0x9, 0x0, 0x7512, 0x6, 0x10, 0x3, 0x10, 0x200, 0x0, 0xd71, 0x5, 0x7, 0x18000, 0x5, 0x7, 0x8, 0x8, 0x7, 0x7, 0x2, 0x8bbd, 0xae7, 0x7, 0x3ff, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x4, 0x8, 0x2, {0x2, 0x1, 0x6, 0x1d9, 0x4, 0x7ff}, {0x7, 0x2, 0x2, 0x200, 0x8, 0x9}, 0x8, 0x400000, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffff000, 0x3, 0x9, 0x0, 0x2, 0xd, 0x2, 0x8, 0x0, 0x40, 0xc24d, 0x400, 0xffffff01, 0x4, 0x7, 0x1, 0x8, 0x1, 0x800, 0x70, 0x7, 0x8, 0x81, 0x6, 0x7fff, 0x5, 0x5, 0x6, 0x7, 0x2, 0x4, 0xfffffff4, 0x0, 0x800, 0x5, 0x3, 0x2, 0x1, 0x5, 0xd7e9, 0x8, 0x4, 0x3, 0x1, 0x1, 0xd0, 0x1000, 0xfff, 0x3, 0x7, 0xca, 0x2, 0xfff, 0x8, 0xf, 0xffffffff, 0x3, 0x7, 0x0, 0xc0000000, 0x7, 0x10001, 0x7, 0x0, 0x9, 0x8, 0x6, 0x2, 0xa, 0x8, 0x2, 0xc, 0x9, 0x7, 0xffff8000, 0x4, 0x8, 0x7, 0x4, 0xfffffffa, 0xffffff96, 0x0, 0x4, 0x2, 0x7, 0x8001, 0x8, 0x0, 0x9, 0xe64a, 0x5, 0x6, 0xffffffd1, 0x8c, 0x5, 0xff, 0x6, 0xe1, 0x203, 0xfffeffff, 0x5, 0x4, 0x5, 0x2, 0x24a, 0x1, 0x10000, 0xfff, 0x9, 0x18c0, 0xe, 0x2eec, 0xaa4c, 0x6, 0x10001, 0x7, 0x4, 0x1, 0x0, 0x1, 0x6, 0x9, 0x200, 0x940b, 0x9, 0xffffffff, 0x5, 0x9, 0x6, 0x5147, 0x94df, 0xfffffff8, 0x6ef, 0x3, 0x800, 0x6, 0x9, 0x3, 0x4, 0x6, 0x4, 0x8, 0x2, 0x9, 0xfffffff8, 0x0, 0x456, 0x81, 0x8, 0xfffffff7, 0x2, 0x1, 0x0, 0x1, 0x1, 0x7af, 0x6, 0x66839548, 0x1, 0x9, 0x2, 0x10, 0xe0000000, 0x101, 0x1, 0x7, 0x6, 0x10000, 0x2, 0x9, 0x7, 0x0, 0x80, 0xfffffff8, 0x7f, 0x1, 0x2, 0x8, 0x2, 0x7, 0x0, 0xf, 0x3, 0x5, 0xffff, 0x8, 0x81, 0x0, 0x5, 0x9, 0x7, 0x6, 0x0, 0xf, 0x1000, 0x9f24, 0x5, 0x5, 0x200, 0x4, 0x2000000, 0x3, 0x1, 0x5, 0x120000, 0x1, 0x4, 0x7, 0x2, 0x6, 0x5, 0x2, 0xfffffffb, 0x1000, 0x6, 0xffffffff, 0x7b3e, 0x0, 0x200, 0xf7, 0xa, 0x18, 0xab9, 0x6, 0x5, 0x0, 0x10001, 0xc3b, 0x0, 0xb008, 0x800, 0xfffffd95, 0x4, 0x3, 0x3, 0x51, 0x8, 0x1000, 0x662, 0x5, 0x2, 0x0, 0x5, 0x7, 0x0, 0x200, 0xee, 0x4, 0x2, 0xa4e, 0x4, 0x4, 0x800, 0x8, 0x1000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x958, 0x0, 0x8000, 0x1, 0x5, 0x8c0, 0xffff0000, 0x2, 0x6, 0x87, 0x0, 0x0, 0x722, 0xffffffff, 0xd, 0x8, 0xfffffffb, 0x2, 0xa5, 0x4, 0x80000000, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x0, 0x7, 0xfffffffe, 0x7, 0x0, 0x4, 0x2, 0x0, 0x7f, 0x0, 0x6, 0x10000, 0x8, 0xafe, 0x8, 0x4, 0x7, 0x20000000, 0x5, 0x200800, 0x1, 0x1ed, 0x2, 0x1, 0x3, 0x9, 0x3, 0x101, 0x9, 0xfffff800, 0x9, 0xd, 0xfe, 0x2, 0xb, 0x10001, 0x9, 0x0, 0x0, 0x6, 0x9, 0x0, 0x100, 0x1000, 0xf, 0x9, 0x5, 0x7f, 0x7, 0x3, 0x3, 0x2, 0xfffffffe, 0x80000000, 0xfffffff9, 0x4, 0x6, 0x9, 0x7f, 0x32, 0x6, 0x3, 0x0, 0x7, 0x8001, 0x2, 0x8, 0xffff, 0xfffffffb, 0x800, 0x512, 0x8a, 0x2, 0x0, 0x1, 0xa, 0x80000000, 0xd517, 0x0, 0xfffffffc, 0x9, 0x8, 0x5, 0xf6, 0x9d, 0x0, 0x10000, 0xfffff42f, 0x10001, 0x7, 0x9, 0x1, 0x3, 0x8, 0x9, 0x739, 0x1, 0x0, 0x20, 0x8, 0x60000000, 0x2, 0xffffff95, 0x8, 0x8, 0x3, 0x5d81, 0x7fffffff, 0x3, 0x6, 0x5, 0x81, 0xfff, 0x40, 0x7fff, 0x6, 0x100, 0x9, 0xffffffff, 0x4, 0x1000, 0x1, 0x8, 0x0, 0xcf, 0x2, 0x3, 0x4, 0xf, 0x7ff, 0xf, 0x6, 0x5, 0x7f, 0x2, 0x40000000, 0x3ff, 0xb, 0x3e86, 0x6, 0x7, 0xb, 0x0, 0x8, 0x1f5, 0x4, 0x5, 0xfffffd3c, 0xff, 0xd, 0x0, 0xffffffff, 0x3, 0x4, 0xc38, 0x2, 0x2, 0x5, 0xfff, 0x4, 0x0, 0x18000, 0x80000000, 0xda7, 0x4, 0x9, 0x200, 0x3, 0x80000001, 0x8000, 0x6, 0x4, 0x4, 0x0, 0x306, 0x2, 0x0, 0x0, 0xc1, 0x9, 0x2, 0xb, 0x7ff, 0x80000001, 0x8, 0x3, 0x2, 0x4, 0x9cde, 0xf97, 0x1, 0xffffffc0, 0xffff, 0x8, 0x5, 0x401, 0x0, 0x7f, 0x4b62, 0xef, 0x9, 0x98, 0x6d, 0x40, 0x80000001, 0xfffffffe, 0x8000, 0x1, 0x7, 0xcae, 0x27, 0x9, 0x81, 0x7, 0x800, 0x8000, 0x0, 0x6, 0x7c, 0x8, 0x8, 0x7, 0x7, 0x3, 0x200, 0x7, 0x1, 0x7, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}]}, @TCA_CGROUP_POLICE={0x468, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x1, 0x1, 0x8, 0x2, 0x10000, 0x2, 0x9, 0x10000, 0xbf7, 0x800, 0xfffffffe, 0x1000, 0x2, 0x1, 0x0, 0x4, 0x8000, 0x9, 0xfff, 0x3, 0x407, 0x5, 0x7, 0x4, 0x2e, 0x1, 0x0, 0x86, 0x4, 0xfffffff9, 0x7ff, 0x0, 0x8, 0x80000000, 0x0, 0x7, 0x200, 0x1000, 0x200, 0x4, 0x8, 0xc1df, 0x3, 0xfffffff9, 0x3ff, 0x5, 0x7, 0x6, 0x3, 0x9, 0x3, 0x1, 0x1, 0x6d6ad700, 0xe8, 0x2, 0x2, 0x9, 0x1, 0x10000, 0x2a607710, 0xfffffff7, 0x0, 0xffd1, 0x2, 0xee, 0x8, 0x0, 0x5, 0x2, 0x69a, 0x3, 0x47d51252, 0x2, 0x7, 0x7fffffff, 0x3, 0x8b6, 0xfff, 0xfe000000, 0xfffffff1, 0xffffffff, 0xf77, 0x5, 0x3, 0x1, 0x8, 0x8, 0x5, 0x3, 0x8, 0x200, 0x9, 0x6, 0x1f, 0x8fdd, 0xfffffffd, 0x10000, 0x9, 0x4, 0x3, 0x279, 0x7, 0xfffffff8, 0x88f7, 0x5, 0x7, 0x2, 0x7, 0x1, 0x7, 0x9f5f, 0x7fff, 0xfffffffc, 0x6f0, 0xfffffffa, 0x1, 0x6, 0x473f675d, 0x911f, 0x1d6451e9, 0x4, 0x0, 0x1, 0xb83, 0x8, 0x4, 0x0, 0x9, 0x8, 0x1ff, 0x8, 0x6, 0x3, 0x2, 0x0, 0x7fffffff, 0x6, 0xe6, 0x0, 0x80000000, 0x9, 0x0, 0x34f, 0x5, 0x8, 0xf, 0x6, 0x5, 0xf7, 0x0, 0x3f8e, 0x0, 0xfff, 0x10001, 0x7, 0x1, 0xfffffff5, 0x2, 0x3, 0x1d, 0xff, 0x4, 0x7ff, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x2, 0x7ff, 0xcad, 0x1, 0x5, 0x76ec, 0x4, 0x8, 0xf, 0x1, 0x6, 0xb, 0x9, 0x5, 0x4b3a, 0x0, 0x0, 0x5b9, 0x7, 0x7fffffff, 0x4800, 0xaf64, 0x6, 0x8, 0x9, 0xff, 0x5, 0x81, 0x80000001, 0x80, 0x9, 0x4, 0x80000000, 0x0, 0x1, 0xffff, 0x3, 0x7ec2, 0x6, 0xfffffffa, 0x5000000, 0x5, 0x1, 0x6, 0x6, 0x0, 0xb, 0x2, 0xc4, 0xfffff90a, 0x8, 0x4, 0x92, 0x6b9, 0x6, 0x8001, 0x7, 0xffffd26b, 0x2, 0x0, 0x2, 0x9, 0x1000, 0xd, 0x800, 0x2, 0xd, 0x0, 0x7, 0x3, 0x6, 0x9, 0x2, 0x0, 0xfffffeff, 0xc, 0x6908, 0x4, 0x1, 0x200000, 0xb2d, 0x6, 0x2, 0x7ff, 0x400]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5e43d6bc}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x592bb5aa, 0x8, 0x3, 0xf7, 0x0, {0x1, 0x0, 0x5, 0xd4d, 0x7, 0x5}, {0xc, 0x1, 0x5, 0x0, 0x3, 0x8}, 0x1, 0x8, 0x8000}}]}, @TCA_CGROUP_POLICE={0x818, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf6f, 0x5, 0x1000, 0x5, 0x4, 0x6, 0x4, 0xfce, 0xffff, 0x9, 0x7, 0xb41d, 0x1, 0x0, 0x2, 0xd10e, 0x8000, 0x70f, 0x3, 0x9, 0xa2b, 0x6, 0x5, 0xffffffff, 0x9, 0x7, 0x4, 0x2, 0x8, 0x3, 0x6, 0x8, 0x10001, 0x9, 0x8, 0x6, 0x0, 0x2, 0x10000, 0x0, 0x6, 0x9, 0x7, 0x3, 0x8, 0x401, 0x1216, 0x6, 0x3, 0x4, 0x8, 0x9, 0x9, 0x9, 0xc, 0x3, 0xfffffa88, 0x5, 0x4, 0x4, 0x3, 0x7, 0xa, 0x9, 0xc, 0xa2c6, 0xd321, 0x1000, 0x3, 0x2, 0x2f48, 0x1167, 0x9, 0x600, 0x1000, 0xfff, 0x5, 0xf, 0x0, 0x9, 0x8, 0x9, 0x1, 0x7, 0x4, 0xfffffff9, 0x3a, 0x3, 0xc5, 0x100, 0x0, 0x9, 0x92, 0x5, 0x0, 0x9, 0xabc2, 0x7f, 0x1, 0xe4, 0x80000001, 0x80, 0xfa3, 0xffff69e4, 0x3, 0x1, 0x8, 0x6, 0x3, 0xfffffffd, 0x9, 0x401, 0x7, 0x4, 0xd0f, 0x100, 0x1, 0x5, 0x6, 0x7, 0x1, 0x4, 0x7, 0x9, 0x6, 0x419d, 0x4, 0x2, 0x6, 0x5, 0x9, 0x0, 0x400, 0x8c, 0x1, 0x1, 0x4, 0x6, 0x4, 0xb4c7, 0x39, 0x208, 0x4, 0x2, 0x8, 0x5, 0x5eb, 0x1, 0x8, 0x5, 0xbd9, 0x7, 0x6, 0x3, 0x2, 0x100, 0x3, 0x200, 0x9, 0x0, 0x800, 0x0, 0x80, 0x5, 0x0, 0x81, 0xe, 0x0, 0x1f23, 0x5, 0x3ff, 0x6, 0xd7b7, 0x6, 0x7f, 0x7, 0x8, 0x8, 0x2, 0x5, 0x1, 0x40, 0x80000000, 0x7, 0x61ee, 0xe, 0xfffffff8, 0x6, 0x40, 0x2, 0x5, 0x80000001, 0x7fffffff, 0xf, 0x1000, 0x7, 0xc720, 0x2, 0x9, 0xe, 0x3, 0x9, 0x9, 0xc, 0x6, 0x0, 0x8, 0x2, 0x7, 0x3, 0x0, 0x7, 0xdfe1, 0x8000, 0xfffff8f8, 0x4, 0x4, 0x6, 0x89, 0x2, 0x1, 0x3f800000, 0x4, 0xfff, 0x6, 0x1, 0x9, 0xd, 0x1, 0x9, 0xfffffff2, 0x10000, 0x1, 0x9, 0x3, 0x3, 0x7, 0x95, 0x6447, 0xfffffffb, 0x4, 0x2, 0x7ff, 0xffffff37, 0x9, 0x1d, 0x5, 0x0, 0xfffff75a, 0x81, 0x3, 0x80, 0x6048, 0x7, 0x0, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1, 0x8001, 0xe679, 0x8, 0xf4, 0x1, 0x3ff, 0xe, 0xfffffffc, 0x200, 0xce40, 0x2, 0x3, 0x49, 0x3ff, 0x8001, 0xbad9, 0x1, 0x84, 0x800, 0x0, 0x0, 0x0, 0x823e4a7, 0x7, 0x2, 0xfffffffa, 0x87e, 0x4, 0x4a8b, 0xe, 0x2, 0x9, 0x7, 0x4, 0x5, 0x77a, 0x2, 0x96, 0xb25, 0x7fffffff, 0x6, 0x1, 0x80000000, 0x2, 0x1, 0x6, 0x6, 0x0, 0x6b6c, 0x4, 0xffff, 0x65f, 0x6, 0x1, 0x3, 0x2, 0x4, 0xc9f1, 0x3, 0xce, 0x0, 0x81, 0xd3b, 0xffffffff, 0x88, 0x7, 0x4aa, 0x7, 0x9, 0x6, 0x44472ca6, 0xc, 0x3, 0x93a, 0x8, 0xfb3, 0x3, 0x9, 0x5, 0x8, 0x8, 0x0, 0xa, 0x3, 0x8, 0xfffffffd, 0x6, 0x823c, 0x8, 0x7, 0xfffffffc, 0x80000001, 0x9, 0x9, 0x7, 0x7a, 0x7, 0x6, 0xb28, 0x6, 0x9, 0x6, 0x6, 0xf1e, 0x2, 0x7fff, 0xc, 0x4e9, 0x9, 0x3, 0x8, 0xff, 0x1, 0x7, 0x6, 0x8000, 0x4, 0x9, 0xc, 0x6, 0xc543, 0xffffffff, 0x91, 0xeb, 0x1, 0x1, 0xfffffff1, 0xc, 0x3ff, 0xfffffe01, 0x2a7, 0x3, 0x2, 0x25, 0x2, 0x6, 0x3, 0x500000, 0x8, 0x0, 0x7, 0xfffffffd, 0xfffffeff, 0x2, 0x80000000, 0x8001, 0x101, 0x1, 0x4, 0x8, 0x80000001, 0xfffffff9, 0xc, 0xd, 0x8, 0x0, 0xf, 0x6, 0x4, 0x8dfe, 0x7, 0x4, 0x7f, 0x6, 0x4, 0x0, 0x62f, 0x7, 0x2, 0x0, 0x0, 0xa, 0x9, 0x5, 0x9, 0x1827, 0x1, 0x3, 0x10000, 0xacf7, 0x6, 0x8000, 0x9, 0x5, 0xe, 0xb9, 0x6, 0xef9a, 0x10000, 0x200, 0x80000001, 0x6, 0x10000, 0x8000, 0x1, 0x0, 0xe, 0xcdc, 0x25af, 0x10001, 0x81, 0xa, 0x3, 0x81, 0x3, 0xbb7, 0x9, 0x9, 0x6e98, 0x2, 0x0, 0xfffffffb, 0x9, 0x9, 0x81e, 0x50b7, 0x9, 0x3, 0x2, 0x0, 0xffffffff, 0x1, 0x7, 0x7, 0x1, 0x80000001, 0x9, 0x6, 0x6, 0x6, 0x9, 0x8, 0x5, 0x8, 0x8, 0x2, 0x10001, 0x1000, 0xdc5, 0x8, 0x3, 0x3, 0x767d, 0x1, 0x3, 0xfff, 0x3, 0x6, 0x7, 0x7, 0x4, 0x51b1, 0x5, 0x200df176]}]}, @TCA_CGROUP_ACT={0x388, 0x1, [@m_xt={0x138, 0x4, 0x0, 0x0, {{0x7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x434}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x98}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x51, 0x6, {0xef9d, 'mangle\x00', 0x38, 0x1, "05bee9bb8b3c074504bcd08f59899ea3d9ca2566c53400b6160076334165959bf121822c4a59d8"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x70, 0x6, "dc25a1f0c4fdd61abf4d7ab55c78186fd68f8756a639e8bb2ed1027e4b71adeb3a3e9b39307a7a7e58ccdebd9f8212aef11fe9389e5c3926615f0e1cfb55e20e4120e719de2b68b0a6f0e80348dd82126939138198a2c50133e582994edcd2087cf4f072b9bc2d2e806d17d3"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x16c, 0xb, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffffffff, 0x18ca, 0x0, 0x8, 0x3}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9ad3}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x7ff, 0x10000000, 0xffffa253}}}, @TCA_IFE_DMAC={0xa, 0x3, @random="232878b298b7"}, @TCA_IFE_DMAC={0xa}]}, {0xd5, 0x6, "7a4b0185f6398ca56e452765439e9339cb94349fb1e53d98fb4f9fc8a2a49d6137b4b4d4e2a470e59de69b6dc2cbafae63eb64bb440cfa28a5a54bc36d2bc524ec35513324bd271cdad964b1cc4a8a1d3d8aa95c85d4083215b29028be5fff25bfb6bd6182a0bbe443f55db44feaa84396a8556313f51a4b486a1936f1a92286037e603f7b037e7a49e5d2730bac71e8d58cdb3398301d6ba3a57c738b48190175b1cd318dbf4adb3b4ebf80a9106f67e344c924938491fb3228a46af69f28d09f670e0c123e9cc6de62d822f1a70f34ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xe0, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x1, 0x4, 0xfffffff7, 0x2}}]}, {0x9a, 0x6, "5e4a2b3e642bb87521f08f8c9f7ab821852e69305bbce0bb2d6ef213fcb46bdd35ede307b5b9e563e34184f3e8a5437cb9140ed3a6d0d60df9c29c502883b17e9c98c657dbb61774369aa906e9c8afcbb09ec1a96022cd4d7d08df4cf2b0a9767b2aeeb1efc722c73d5a8bf0aed75106709534b98f95ccdb77cf1a27aaf7d8395282de40b25d5c27f01062d239a09ee56fc1b4c85db9"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_POLICE={0x50c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x2, 0x2, 0x6, 0xf, {0x7, 0x0, 0xf5, 0x42a, 0x400, 0x1200}, {0x8, 0x0, 0xd, 0x3, 0xffff, 0xb}, 0xb, 0x3, 0xb}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x9, 0x100000, 0x7, {0xe9, 0x1, 0xcc0, 0x3, 0x5481, 0xc10}, {0x4, 0x2, 0x3ff, 0xff, 0x68, 0x8}, 0x101, 0xd8b8, 0xf3e3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x6, 0x6, {0x0, 0x2, 0x5, 0x1, 0x3}, {0x0, 0x2, 0x1, 0x0, 0x3, 0x7}, 0xfff, 0x4cc3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3, 0x2, 0x7, 0x2, 0x7, 0x0, 0xb1, 0x2, 0x5, 0x2, 0x4, 0x9, 0x1000, 0x6, 0x1, 0x2, 0x6, 0x3, 0x8000, 0x140000, 0x5, 0xc764, 0xc2, 0xc, 0x10000000, 0x3, 0x2, 0x3, 0x1, 0x5, 0x7, 0x1ff, 0x81, 0xfd75, 0xa, 0x3, 0x2, 0x5e9d, 0x836, 0x1, 0x3, 0xffffff80, 0x9, 0x1000, 0xb, 0x1, 0x6, 0x3, 0x5, 0x4, 0x62, 0xff, 0x80000000, 0x5, 0x3, 0xd, 0x9, 0x8, 0x1, 0xe6a7, 0x9, 0x1, 0x7f, 0x0, 0x0, 0x5, 0x35ed, 0x4, 0x4, 0x5, 0x3, 0x7, 0x5, 0x80000000, 0x5, 0x9, 0x26f, 0x80000000, 0x7, 0x3c, 0x4, 0x1000, 0x7a, 0xa, 0x9, 0x2, 0x8000, 0x3, 0x642d, 0x2, 0x0, 0x5, 0x33, 0x8, 0x3, 0x140000, 0x8000, 0x5, 0x0, 0x5, 0x8, 0x4, 0x1, 0xeaa, 0x7, 0x2, 0xc, 0x4, 0x101, 0x7f, 0x0, 0x2, 0x8, 0x755, 0x2, 0x9, 0x1000, 0x6, 0x3, 0x101, 0x3, 0x6, 0x1, 0xb45a, 0x7, 0x0, 0x2, 0x5, 0x8, 0xf937, 0x3, 0x7, 0x7, 0x8, 0xee, 0x2, 0x8001, 0x7fffffff, 0x288ff004, 0x9, 0x4, 0xfffffff8, 0x8001, 0x1, 0x60, 0xdba, 0x20, 0x8, 0x4, 0x1347, 0x42, 0x71, 0x7, 0xfffffc00, 0x3, 0x8, 0x8, 0x8c, 0x0, 0x40, 0xffffffff, 0x6, 0x5, 0x7fffffff, 0xfffff001, 0x5, 0x6, 0x0, 0x7ff, 0xa258, 0x3, 0x2, 0x58, 0x1, 0x5d8ba99e, 0xf561, 0x2, 0x2, 0x3854, 0x9c7f, 0x2, 0xffff8983, 0x11f5, 0x431, 0x8000, 0xfffffffd, 0x9, 0x8, 0x9, 0x3, 0x81, 0x100, 0x4515, 0x5, 0x4, 0x1ff, 0x9, 0x80000000, 0x3, 0x2, 0x10001, 0x80, 0x100, 0x200, 0x585, 0xa, 0x9, 0xaf6, 0x7, 0x4, 0x4, 0x7fffffff, 0x200, 0xdf, 0x10000, 0x800, 0x5, 0xc23, 0xfffffff8, 0x4, 0x7, 0x5, 0x88f, 0x6ace6ca5, 0x33f5, 0x92, 0xf1, 0x4, 0x3, 0xda77, 0xa, 0xe6, 0x88b, 0x3, 0x4, 0x3, 0x7ff, 0x7, 0x81, 0x6, 0xffff, 0x7, 0xde, 0x740, 0xde, 0x4, 0x2, 0xffff, 0xe3, 0xb9800, 0x0, 0x7, 0x401, 0x8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x20000000, 0x2f16, 0x6f87ab7e, 0x8a54, {0x1, 0x2, 0xfffa, 0x3ff, 0x2, 0x2}, {0x2b, 0x2, 0xa, 0x45, 0x80, 0x6}, 0x6, 0x1c, 0xb086}}]}, @TCA_CGROUP_EMATCHES={0xec, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x100, 0x2, 0xe4f}, {0xfb4, 0x3, 0x0, "2eac64"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x8000}, {0x3, 0x2, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x88, 0x3, 0x0, 0x0, {{0x200, 0x0, 0x3000}, "4fe8179fee373284fcdf72d247565ba004d8853ef37d7e6680969ed00979af0e6086df880ea01184e97667343a785ac774d0fcc1eb23d2c7ce0160cfbcd054138889b623a039c878daae31249543b38f88c454789fc52296eafc433e9015649be11b97dc2910a34d7c328bc5f4769981eb6115a56c77caac486f8dfb"}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7ff, 0x1, 0x6}, {0x4, 0x0, 0x0, 0xc, 0x5, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x6}, {0x9, 0x5, 0x1, "d74abdfc88"}}}]}]}]}}]}, 0x2d68}}, 0x24044094) 1.907024586s ago: executing program 3 (id=4473): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000300), 0x0, 0x4000000) socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x1, @multicast1}, {0x1, @remote}, 0x4a, {0x2, 0x4e23, @broadcast}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40010000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0xcd5, &(0x7f0000000380)={0x0, 0x8f12, 0x80, 0xfffffffd, 0xffeffc00}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './mnt\x00'}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3b) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x4) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x43, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) 1.892653556s ago: executing program 0 (id=4474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x400000000000000, 0x4000000}, 0x880) 1.77263552s ago: executing program 0 (id=4475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x200, 0x3}}, './file0\x00'}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000200)={0x10, 0x0, r4}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x80000008, 0x0, 0xf, 0x39ac, 0x400, 0xd97, 0x3}]}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, r7, {0x7, 0x2b, 0x7ff, 0x4004800, 0x1, 0xf0ca, 0x3, 0x9, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x1, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x200, 0x3}}, './file0\x00'}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r3}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x0, 0x0}) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000200)={0x10, 0x0, r4}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x80000008, 0x0, 0xf, 0x39ac, 0x400, 0xd97, 0x3}]}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, r7, {0x7, 0x2b, 0x7ff, 0x4004800, 0x1, 0xf0ca, 0x3, 0x9, 0x0, 0x0, 0x20, 0x6}}, 0x50) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x1, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x6}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) 1.223788449s ago: executing program 0 (id=4476): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r7, r7], 0x2, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000080)={0xaf, 0x100, 0x65, 0x70, &(0x7f0000000180)=""/112, 0xf0, &(0x7f0000000340)=""/240, 0xfa, &(0x7f0000000440)=""/250}) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0}], 0x2}, 0x20000884) 1.046141374s ago: executing program 0 (id=4477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syslog(0x3, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket(0x10, 0x803, 0x0) clock_getres(0xd6360619310ef359, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f0000000180), &(0x7f0000000000)=0x30) 853.431492ms ago: executing program 2 (id=4478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x1c, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xc1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x78) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000240)={{{0x3, 0x1}}, 0x0, 0x6, 0x0}) sched_getscheduler(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 257.098103ms ago: executing program 4 (id=4479): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = open$dir(0x0, 0x8000, 0x65) renameat2(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000002140)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [], [0x0, 0x0, 0xfffffffe, 0x4], [0x10000], [0x8000000000000000, 0x0, 0x4000]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x82000001, 0xff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x82000001, 0xff) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 4 (id=4480): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x29cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x14a0000, 0x800, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xbc, 0x0, 0x71, 0x2a82, 0x6, 0x2, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x3, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x0, 0x1, 0x2], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x313, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x9, 0x1, 0x2000002, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x8, 0x2, 0x7f, 0x9, 0x401, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x802, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0x19bd, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0xfffffffe, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x5, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000070000000000000808000400", @ANYRES32=r0], 0x38}}, 0x10) kernel console output (not intermixed with test programs): 1, idProduct=1021, bcdDevice=86.66 [ 1241.848276][ T130] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1242.116813][ T5985] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1242.159042][ T130] usb 5-1: Product: syz [ 1242.164231][ T130] usb 5-1: Manufacturer: syz [ 1242.175431][ T130] usb 5-1: SerialNumber: syz [ 1242.180623][ T5985] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1242.195371][ T5985] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1242.208264][ T130] usb 5-1: config 0 descriptor?? [ 1242.218943][ T5985] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1242.298280][ T5985] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1242.309454][ T5985] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1242.391287][ T5985] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1242.408630][ T5985] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1242.429036][ T5985] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.455644][T20346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.469358][T20346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.486244][ T5985] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1242.505653][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.522395][ T5985] usb 2-1: Product: syz [ 1242.532552][ T5985] usb 2-1: Manufacturer: syz [ 1242.534946][ T5843] Bluetooth: hci1: adv larger than maximum supported [ 1242.537314][ T5843] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1242.548360][ T130] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1242.557960][ T5913] usb 5-1: USB disconnect, device number 19 [ 1242.574502][ T5985] usb 2-1: SerialNumber: syz [ 1242.596992][ T5985] usb 2-1: config 0 descriptor?? [ 1242.613044][T20349] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1242.627992][T20349] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1242.638877][T20361] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1242.659258][ T5985] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1242.696642][ T5985] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1242.729996][ T130] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1242.738103][ T5985] scsi host1: microtekX6 [ 1242.747621][ T130] usb 3-1: can't read configurations, error -61 [ 1242.960449][ T130] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1243.136858][ T130] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1243.147536][ T130] usb 3-1: can't read configurations, error -61 [ 1243.245836][ T130] usb usb3-port1: attempt power cycle [ 1243.257777][ T5913] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1243.409560][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 1243.416368][ T5913] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1243.436334][ T5913] usb 4-1: config 0 has no interface number 0 [ 1243.447434][ T5913] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1243.461647][T20376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1243.468956][T20376] IPv6: NLM_F_CREATE should be set when creating new route [ 1243.486186][ T5913] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1243.533225][ T5913] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1243.569906][ T5913] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1243.598946][ T5913] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1243.617914][ T130] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1243.626434][ T5913] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1243.643683][ T130] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1243.654870][ T130] usb 3-1: can't read configurations, error -61 [ 1243.662153][ T5913] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1243.676108][ T5913] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1243.697512][ T5913] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1243.715655][ T5913] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1243.744095][ T5913] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1243.754628][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.762872][ T5913] usb 4-1: Product: syz [ 1243.769118][ T5913] usb 4-1: Manufacturer: syz [ 1243.780102][ T5913] usb 4-1: SerialNumber: syz [ 1243.797290][ T5913] usb 4-1: config 0 descriptor?? [ 1243.808221][ T130] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1243.823317][T20372] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1243.832998][T20372] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1243.842390][ T130] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1243.855095][ T5913] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1243.862741][ T130] usb 3-1: can't read configurations, error -61 [ 1243.886067][ T5913] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1243.908912][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.915400][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.924150][ T130] usb usb3-port1: unable to enumerate USB device [ 1243.953364][ T5913] scsi host2: microtekX6 [ 1244.027513][ T30] audit: type=1326 audit(1767612467.259:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c9b8f749 code=0x7ffc0000 [ 1244.050701][ T30] audit: type=1326 audit(1767612467.289:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c9b8f749 code=0x7ffc0000 [ 1244.087965][ T30] audit: type=1326 audit(1767612467.319:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f11c9b8f749 code=0x7ffc0000 [ 1244.119446][ T30] audit: type=1326 audit(1767612467.329:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c9b8f749 code=0x7ffc0000 [ 1244.247289][ T30] audit: type=1326 audit(1767612467.329:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f11c9b8f749 code=0x7ffc0000 [ 1244.288205][ T30] audit: type=1326 audit(1767612467.389:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c9b8f749 code=0x7ffc0000 [ 1244.321524][ T30] audit: type=1326 audit(1767612467.409:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c9b8f749 code=0x7ffc0000 [ 1244.627894][ T30] audit: type=1326 audit(1767612467.469:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f11c9b8f749 code=0x7ffc0000 [ 1244.650790][ T30] audit: type=1326 audit(1767612467.469:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c9b8f749 code=0x7ffc0000 [ 1244.674372][ T30] audit: type=1326 audit(1767612467.469:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20377 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f11c9b8f749 code=0x7ffc0000 [ 1245.399585][ T5913] usb 2-1: USB disconnect, device number 3 [ 1245.767764][ T5906] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1245.920641][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 1245.942084][ T5906] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1245.951295][ T5906] usb 1-1: config 1 has no interface number 1 [ 1245.957444][ T5906] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1245.973188][ T5906] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1245.989511][ T5906] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1246.005162][ T5906] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1246.014945][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.065993][ T5906] usb 1-1: Product: syz [ 1246.078235][ T5906] usb 1-1: Manufacturer: syz [ 1246.094405][ T5906] usb 1-1: SerialNumber: syz [ 1246.118719][ T5913] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1246.298759][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 1246.305800][ T5913] usb 2-1: config 0 has no interfaces? [ 1246.326373][ T5913] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1246.343261][ T5913] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1246.354626][ T5913] usb 2-1: Product: syz [ 1246.359516][ T5913] usb 2-1: Manufacturer: syz [ 1246.360770][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.369086][ T5913] usb 2-1: SerialNumber: syz [ 1246.412017][ T5913] usb 2-1: config 0 descriptor?? [ 1246.417420][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.454869][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.486809][T20405] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1246.514319][T20405] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1246.524837][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.542740][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.555256][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.629204][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.648454][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.656544][T20397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.666420][T20397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.677034][ T5843] Bluetooth: hci0: adv larger than maximum supported [ 1246.677056][ T5843] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1246.694927][T20405] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1246.714800][T20406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.725535][ T5922] usb 2-1: USB disconnect, device number 4 [ 1246.750594][T20406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.808976][T20407] tipc: Enabling of bearer rejected, failed to enable media [ 1246.855252][ T5906] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 1246.873011][ T5906] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1246.892040][ T130] usb 4-1: USB disconnect, device number 97 [ 1246.974799][ T5906] usb 1-1: USB disconnect, device number 113 [ 1247.047565][T19908] udevd[19908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1248.248128][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1248.267815][ T130] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1248.439744][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1248.439782][ T130] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.493930][ T5906] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1248.507896][ T130] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1248.547829][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.572749][ T5906] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1248.582576][ T130] usb 3-1: config 0 descriptor?? [ 1248.609622][ T130] pwc: Askey VC010 type 2 USB webcam detected. [ 1248.626003][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.676012][ T5906] usb 2-1: Product: syz [ 1248.690478][ T5906] usb 2-1: Manufacturer: syz [ 1248.695147][ T5906] usb 2-1: SerialNumber: syz [ 1248.743907][ T5906] usb 2-1: config 0 descriptor?? [ 1249.057765][ T5913] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1249.113606][ T130] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1249.127841][ T130] pwc: recv_control_msg error -32 req 02 val 2700 [ 1249.145022][ T130] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1249.168144][ T130] pwc: recv_control_msg error -32 req 04 val 1000 [ 1249.190365][ T130] pwc: recv_control_msg error -32 req 04 val 1300 [ 1249.243182][ T130] pwc: recv_control_msg error -32 req 04 val 1400 [ 1249.270243][ T130] pwc: recv_control_msg error -32 req 02 val 2000 [ 1249.284214][ T130] pwc: recv_control_msg error -32 req 02 val 2100 [ 1249.302437][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.315047][ T5913] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1249.324999][ T130] pwc: recv_control_msg error -32 req 04 val 1500 [ 1249.338152][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.350590][ T130] pwc: recv_control_msg error -32 req 02 val 2500 [ 1249.363251][ T130] pwc: recv_control_msg error -32 req 02 val 2400 [ 1249.376348][ T5913] usb 4-1: config 0 descriptor?? [ 1249.382271][ T130] pwc: recv_control_msg error -32 req 02 val 2600 [ 1249.408447][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 1249.592369][ T130] pwc: recv_control_msg error -71 req 02 val 2800 [ 1249.599653][ T130] pwc: recv_control_msg error -71 req 04 val 1100 [ 1249.609557][ T130] pwc: recv_control_msg error -71 req 04 val 1200 [ 1249.628273][ T130] pwc: Registered as video103. [ 1249.659554][ T130] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input148 [ 1249.723254][ T130] usb 3-1: USB disconnect, device number 116 [ 1249.844692][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1249.853386][T20451] ALSA: seq fatal error: cannot create timer (-16) [ 1249.872062][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 1249.888875][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1249.905554][ T5913] pwc: recv_control_msg error -32 req 04 val 1000 [ 1249.924817][ T5913] pwc: recv_control_msg error -32 req 04 val 1300 [ 1249.945692][ T5913] pwc: recv_control_msg error -32 req 04 val 1400 [ 1249.959097][ T5913] pwc: recv_control_msg error -32 req 02 val 2000 [ 1249.979869][ T5913] pwc: recv_control_msg error -32 req 02 val 2100 [ 1250.984038][T20437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1251.040803][T20437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1251.068016][T20437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1251.076718][T20437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1251.094962][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 1251.146438][T20437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1251.305117][ T5913] pwc: recv_control_msg error -32 req 04 val 1500 [ 1251.328800][ T5913] pwc: recv_control_msg error -32 req 02 val 2500 [ 1251.429780][ T5906] usb 2-1: USB disconnect, device number 5 [ 1251.487880][ T130] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1251.707752][ T130] usb 1-1: Using ep0 maxpacket: 32 [ 1251.738462][ T130] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1251.768035][ T130] usb 1-1: config 0 has no interface number 0 [ 1251.779573][ T130] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1251.813675][ T130] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1251.847759][ T130] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1251.860021][ T5985] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1251.890311][ T130] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1251.907990][ T130] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1251.927738][ T130] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1251.951171][ T130] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1251.971579][ T130] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1252.048544][ T130] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1252.059308][ T130] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.094698][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.118444][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.118501][ T5985] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1252.118529][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.161178][ T5985] usb 5-1: config 0 descriptor?? [ 1252.270611][ T130] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1252.270645][ T130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.270692][ T130] usb 1-1: Product: syz [ 1252.270709][ T130] usb 1-1: Manufacturer: syz [ 1252.270727][ T130] usb 1-1: SerialNumber: syz [ 1252.274561][ T130] usb 1-1: config 0 descriptor?? [ 1252.278014][T20455] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1252.278361][T20455] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1252.297808][ T130] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1252.297831][ T130] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1252.309918][ T130] scsi host1: microtekX6 [ 1253.093905][ T5985] usb 5-1: string descriptor 0 read error: -71 [ 1253.094533][ T5985] uclogic 0003:256C:006D.005F: failed retrieving string descriptor #200: -71 [ 1253.094590][ T5985] uclogic 0003:256C:006D.005F: failed retrieving pen parameters: -71 [ 1253.094605][ T5985] uclogic 0003:256C:006D.005F: failed probing pen v2 parameters: -71 [ 1253.094672][ T5985] uclogic 0003:256C:006D.005F: failed probing parameters: -71 [ 1253.094770][ T5985] uclogic 0003:256C:006D.005F: probe with driver uclogic failed with error -71 [ 1253.099407][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 1253.099444][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 1253.099477][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 1253.150405][ T5985] usb 5-1: USB disconnect, device number 20 [ 1253.170082][T12321] Bluetooth: hci4: command 0x0c1a tx timeout [ 1253.598418][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 1253.638135][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 1253.660353][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 1253.689038][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 1253.743752][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 1253.762283][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 1253.788094][ T5913] pwc: Registered as video103. [ 1253.838901][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input149 [ 1253.915721][ T5913] usb 4-1: USB disconnect, device number 98 [ 1254.051966][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1254.683735][T20492] kvm: kvm [20490]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x224e0000 [ 1254.705375][T20492] kvm: kvm [20490]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x224e0000 [ 1255.096159][ T5985] usb 1-1: USB disconnect, device number 114 [ 1255.431667][T20516] futex_wake_op: syz.2.4179 tries to shift op by 32; fix this program [ 1255.827824][ T5985] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1255.955940][T20529] loop2: detected capacity change from 0 to 7 [ 1255.963047][T20529] loop2: [POWERTEC] p1 [ 1255.991213][T20529] loop2: p1 size 1818361856 extends beyond EOD, truncated [ 1256.007878][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 1256.029052][ T5985] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 1256.062561][ T5985] usb 5-1: config 0 has no interface number 0 [ 1256.077305][ T5985] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1256.129963][ T5985] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1256.163594][T19907] udevd[19907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1256.163610][ T5985] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1256.268139][ T5985] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1256.312060][ T5985] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1256.365244][ T5985] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1256.384869][ T5985] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1256.407810][ T5985] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1256.441201][ T5985] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1256.466621][ T5985] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1256.490307][ T5985] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1256.502974][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.520148][ T5985] usb 5-1: Product: syz [ 1256.526266][ T5985] usb 5-1: Manufacturer: syz [ 1256.533625][ T5985] usb 5-1: SerialNumber: syz [ 1256.558125][T20544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1256.587826][ T130] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1256.601543][ T5985] usb 5-1: config 0 descriptor?? [ 1256.628433][T20523] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1256.635931][T20523] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1256.652887][ T5985] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1256.664199][ T5985] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1256.715641][ T5985] scsi host1: microtekX6 [ 1256.757916][ T130] usb 4-1: Using ep0 maxpacket: 16 [ 1256.767548][ T130] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 1256.787083][ T130] usb 4-1: config 4 has no interface number 0 [ 1256.810094][ T130] usb 4-1: config 4 interface 51 has no altsetting 0 [ 1256.834488][ T130] usb 4-1: New USB device found, idVendor=954f, idProduct=a199, bcdDevice= 0.09 [ 1256.859321][ T130] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1256.877239][ T130] usb 4-1: Product: syz [ 1257.021446][ T130] usb 4-1: SerialNumber: syz [ 1257.067902][ T5985] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1257.176385][ T130] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 1257.325830][T20539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4189'. [ 1257.336504][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1257.359449][ T5985] usb 1-1: config 6 has an invalid interface number: 4 but max is 0 [ 1257.391312][ T5985] usb 1-1: config 6 has no interface number 0 [ 1257.408220][ T5985] usb 1-1: config 6 interface 4 has no altsetting 0 [ 1257.438746][ T5985] usb 1-1: New USB device found, idVendor=16d8, idProduct=7003, bcdDevice=d0.3e [ 1257.451907][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.461061][ T130] usb 4-1: USB disconnect, device number 99 [ 1257.474707][ T5985] usb 1-1: Product: syz [ 1257.494194][ T5985] usb 1-1: Manufacturer: syz [ 1257.513123][ T5985] usb 1-1: SerialNumber: syz [ 1257.736923][T20551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.753762][T20551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.812157][ T5985] usb 1-1: USB disconnect, device number 115 [ 1257.928161][ T130] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1258.105887][ T130] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1258.115824][ T130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.125907][ T130] usb 3-1: Product: syz [ 1258.131325][ T130] usb 3-1: Manufacturer: syz [ 1258.136983][ T130] usb 3-1: SerialNumber: syz [ 1258.287775][ T5906] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1258.459210][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 1258.469732][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1258.489015][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1258.501752][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 1258.570855][ T130] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1258.668408][ T130] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1258.682617][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1258.743125][ T5906] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1258.752752][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.762480][ T5906] usb 4-1: Product: syz [ 1258.767151][ T5906] usb 4-1: Manufacturer: syz [ 1258.773942][ T5906] usb 4-1: SerialNumber: syz [ 1258.784261][ T5985] usb 5-1: USB disconnect, device number 21 [ 1258.804572][ T5906] usb 4-1: config 0 descriptor?? [ 1258.899717][T20567] FAULT_INJECTION: forcing a failure. [ 1258.899717][T20567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.915141][T20567] CPU: 0 UID: 0 PID: 20567 Comm: syz.4.4198 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.915171][T20567] Tainted: [L]=SOFTLOCKUP [ 1258.915179][T20567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1258.915190][T20567] Call Trace: [ 1258.915199][T20567] [ 1258.915208][T20567] dump_stack_lvl+0xe8/0x150 [ 1258.915239][T20567] should_fail_ex+0x414/0x560 [ 1258.915275][T20567] _copy_from_user+0x2d/0xb0 [ 1258.915301][T20567] __copy_msghdr+0x3c5/0x5b0 [ 1258.915328][T20567] ___sys_sendmsg+0x1a5/0x2a0 [ 1258.915353][T20567] ? __pfx____sys_sendmsg+0x10/0x10 [ 1258.915410][T20567] ? __fget_files+0x2a/0x420 [ 1258.915434][T20567] ? __fget_files+0x3a0/0x420 [ 1258.915466][T20567] __x64_sys_sendmsg+0x19b/0x260 [ 1258.915502][T20567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1258.915534][T20567] ? __pfx_ksys_write+0x10/0x10 [ 1258.915563][T20567] do_syscall_64+0xec/0xf80 [ 1258.915584][T20567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.915603][T20567] ? trace_irq_disable+0x37/0x100 [ 1258.915628][T20567] ? clear_bhb_loop+0x60/0xb0 [ 1258.915652][T20567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.915673][T20567] RIP: 0033:0x7f11c9b8f749 [ 1258.915691][T20567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1258.915708][T20567] RSP: 002b:00007f11ca9fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1258.915728][T20567] RAX: ffffffffffffffda RBX: 00007f11c9de5fa0 RCX: 00007f11c9b8f749 [ 1258.915744][T20567] RDX: 0000000020000884 RSI: 0000200000000000 RDI: 0000000000000003 [ 1258.915757][T20567] RBP: 00007f11ca9fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.915769][T20567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.915799][T20567] R13: 00007f11c9de6038 R14: 00007f11c9de5fa0 R15: 00007f11c9f0fa28 [ 1258.915836][T20567] [ 1259.178557][ T5913] usb 4-1: USB disconnect, device number 100 [ 1259.827853][ T130] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1259.908540][ T130] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1259.938424][ T130] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1260.130256][ T130] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1260.663367][ T5913] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1260.832846][ T5913] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1260.842059][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.865725][ T5913] usb 2-1: Product: syz [ 1260.883757][ T5913] usb 2-1: Manufacturer: syz [ 1260.896277][ T5913] usb 2-1: SerialNumber: syz [ 1260.957907][ T5906] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1261.021750][T14607] usb 3-1: USB disconnect, device number 117 [ 1261.151588][ T5906] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 1261.169364][ T5906] usb 5-1: config 0 has no interface number 0 [ 1261.175713][ T5906] usb 5-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 1261.205807][ T5906] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.238553][ T5906] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.261231][ T5906] usb 5-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1261.278314][ T5906] usb 5-1: config 0 interface 16 has no altsetting 0 [ 1261.285244][ T5906] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1261.295794][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.323991][ T5906] usb 5-1: config 0 descriptor?? [ 1261.390587][ T5913] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1261.402653][ T5913] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1261.779724][ T5906] uclogic 0003:5543:004D.0060: interface is invalid, ignoring [ 1261.808206][ T130] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1261.971930][ T130] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1261.992169][ T130] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1262.009914][ T130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.083119][ T130] usb 4-1: config 0 descriptor?? [ 1262.337960][ T5906] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1262.500531][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.515033][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.525251][ T5906] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1262.554255][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.584703][ T5906] usb 1-1: config 0 descriptor?? [ 1262.701230][ T130] usb 4-1: USB disconnect, device number 101 [ 1263.010985][ T5906] hid_parser_main: 1 callbacks suppressed [ 1263.011008][ T5906] playstation 0003:054C:0DF2.0061: unknown main item tag 0x0 [ 1263.031850][ T5906] playstation 0003:054C:0DF2.0061: unknown main item tag 0x0 [ 1263.047961][ T5906] playstation 0003:054C:0DF2.0061: unknown main item tag 0x0 [ 1263.063125][ T5906] playstation 0003:054C:0DF2.0061: unknown main item tag 0x0 [ 1263.084905][ T5906] playstation 0003:054C:0DF2.0061: unknown main item tag 0x0 [ 1263.107802][ T130] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1263.122509][ T5906] playstation 0003:054C:0DF2.0061: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 1263.277765][ T130] usb 4-1: Using ep0 maxpacket: 16 [ 1263.285483][ T130] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 1263.294743][ T130] usb 4-1: config 4 has no interface number 0 [ 1263.301490][ T5906] playstation 0003:054C:0DF2.0061: Invalid byte count transferred, expected 20 got 0 [ 1263.347734][ T130] usb 4-1: config 4 interface 51 has no altsetting 0 [ 1263.357103][ T5906] playstation 0003:054C:0DF2.0061: Failed to retrieve DualSense pairing info: -22 [ 1263.370538][ T130] usb 4-1: New USB device found, idVendor=954f, idProduct=a199, bcdDevice= 0.09 [ 1263.415410][ T130] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1263.453486][ T5906] playstation 0003:054C:0DF2.0061: Failed to get MAC address from DualSense [ 1263.462563][ T130] usb 4-1: Product: syz [ 1263.476546][ T130] usb 4-1: SerialNumber: syz [ 1263.483964][ T5906] playstation 0003:054C:0DF2.0061: Failed to create dualsense. [ 1263.509617][ T130] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 1263.526923][ T5906] playstation 0003:054C:0DF2.0061: probe with driver playstation failed with error -22 [ 1263.618290][ T5906] usb 1-1: USB disconnect, device number 116 [ 1263.708716][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4214'. [ 1263.753762][ T130] usb 5-1: USB disconnect, device number 22 [ 1263.817065][ T5985] usb 4-1: USB disconnect, device number 102 [ 1264.258512][ T5906] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1264.315401][ T5913] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1264.328492][ T5913] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1264.378951][ T5913] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1264.411388][ T5913] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1264.437432][ T5906] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1264.470501][ T5913] usb 2-1: USB disconnect, device number 6 [ 1264.477893][T14607] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1264.490773][ T5906] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1264.517760][ T5906] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1264.528377][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.541039][T20628] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1264.554769][T20628] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1264.574531][ T5906] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1264.661652][T14607] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1264.681175][T14607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.697749][T14607] usb 3-1: Product: syz [ 1264.707506][T14607] usb 3-1: Manufacturer: syz [ 1264.722269][T14607] usb 3-1: SerialNumber: syz [ 1264.777927][ T5913] usb 5-1: USB disconnect, device number 23 [ 1264.957817][ T5985] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1265.121248][ T5985] usb 4-1: Using ep0 maxpacket: 16 [ 1265.139620][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1265.157901][T14607] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1265.178188][ T130] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1265.199165][ T5985] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1265.208276][T14607] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1265.242866][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.276936][ T5985] usb 4-1: Product: syz [ 1265.331279][ T5985] usb 4-1: Manufacturer: syz [ 1265.335954][ T5985] usb 4-1: SerialNumber: syz [ 1265.359505][ T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.379079][ T5985] usb 4-1: config 0 descriptor?? [ 1265.405025][ T5985] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1265.417033][ T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.442135][ T130] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1265.452707][ T5985] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1265.468131][ T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.481788][ T130] usb 2-1: config 0 descriptor?? [ 1265.497857][T19480] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1265.675365][T19480] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 1265.683851][T19480] usb 1-1: config 0 has no interface number 0 [ 1265.699462][T19480] usb 1-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 1265.711154][T19480] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.744487][T19480] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.760928][T19480] usb 1-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1265.775812][T19480] usb 1-1: config 0 interface 16 has no altsetting 0 [ 1265.783196][T19480] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1265.793553][T19480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.830607][T19480] usb 1-1: config 0 descriptor?? [ 1265.961393][T20650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.974765][T20650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.002362][ T5985] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1266.154519][ T130] playstation 0003:054C:0DF2.0062: unknown main item tag 0x0 [ 1266.167470][ T130] playstation 0003:054C:0DF2.0062: unknown main item tag 0x0 [ 1266.176055][ T130] playstation 0003:054C:0DF2.0062: unknown main item tag 0x0 [ 1266.184061][ T130] playstation 0003:054C:0DF2.0062: unknown main item tag 0x0 [ 1266.195845][ T130] playstation 0003:054C:0DF2.0062: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 1266.198305][ T5913] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1266.246572][T14607] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1266.268196][T14607] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1266.299662][T14607] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1266.312577][T19480] uclogic 0003:5543:004D.0063: interface is invalid, ignoring [ 1266.369383][T14607] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1266.380995][T20650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4224'. [ 1266.397840][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 1266.405869][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.440922][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.460592][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1266.489461][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.497787][ T5985] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1266.543529][ T5985] em28xx 4-1:0.0: board has no eeprom [ 1266.565500][ T5913] usb 5-1: config 0 descriptor?? [ 1266.585152][ T130] playstation 0003:054C:0DF2.0062: Failed to retrieve feature with reportID 9: -71 [ 1266.607593][ T5913] hub 5-1:0.0: USB hub found [ 1266.612720][ T130] playstation 0003:054C:0DF2.0062: Failed to retrieve DualSense pairing info: -71 [ 1266.630539][ T130] playstation 0003:054C:0DF2.0062: Failed to get MAC address from DualSense [ 1266.656287][ T130] playstation 0003:054C:0DF2.0062: Failed to create dualsense. [ 1266.680154][ T130] playstation 0003:054C:0DF2.0062: probe with driver playstation failed with error -71 [ 1266.708845][ T130] usb 2-1: USB disconnect, device number 7 [ 1266.793379][T20672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.814061][T20672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.826264][ T5913] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1266.857939][ T5985] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1266.873735][ T5985] em28xx 4-1:0.0: dvb set to bulk mode. [ 1266.882790][T19480] em28xx 4-1:0.0: Binding DVB extension [ 1266.914337][ T5985] usb 4-1: USB disconnect, device number 103 [ 1266.943004][ T5985] em28xx 4-1:0.0: Disconnecting em28xx [ 1266.969003][T19480] em28xx 4-1:0.0: Registering input extension [ 1266.981415][ T5985] em28xx 4-1:0.0: Closing input extension [ 1267.025560][ T5985] em28xx 4-1:0.0: Freeing device [ 1267.235649][ T5913] hid-generic 0003:046D:C31C.0064: unknown main item tag 0x0 [ 1267.296167][T14607] usb 3-1: USB disconnect, device number 118 [ 1267.375095][ T5913] hid-generic 0003:046D:C31C.0064: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 1268.066369][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1268.066387][ T30] audit: type=1400 audit(1767612491.279:2001): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20680 comm="syz.2.4233" [ 1268.127874][T20679] netlink: set zone limit has 4 unknown bytes [ 1268.543078][T20672] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 1268.845055][T20698] futex_wake_op: syz.1.4236 tries to shift op by 32; fix this program [ 1268.872074][T19480] usb 1-1: USB disconnect, device number 117 [ 1269.014735][T20672] usbhid 5-1:0.0: reset_resume error -1 [ 1269.262677][T19480] usb 5-1: USB disconnect, device number 24 [ 1269.399895][T20710] loop2: detected capacity change from 0 to 7 [ 1269.416756][T20710] loop2: [POWERTEC] p1 [ 1269.423965][T20710] loop2: p1 size 1818361856 extends beyond EOD, truncated [ 1269.979853][T19907] udevd[19907]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1269.992062][T20717] syzkaller0: entered promiscuous mode [ 1269.997585][T20717] syzkaller0: entered allmulticast mode [ 1270.011955][T20716] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4241'. [ 1270.022222][T20716] caif0: mtu less than device minimum [ 1270.543712][T20727] xt_HMARK: spi-set and port-set can't be combined [ 1270.835834][T20731] FAULT_INJECTION: forcing a failure. [ 1270.835834][T20731] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.884010][T20731] CPU: 0 UID: 0 PID: 20731 Comm: syz.2.4244 Tainted: G L syzkaller #0 PREEMPT(full) [ 1270.884046][T20731] Tainted: [L]=SOFTLOCKUP [ 1270.884055][T20731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1270.884070][T20731] Call Trace: [ 1270.884079][T20731] [ 1270.884089][T20731] dump_stack_lvl+0xe8/0x150 [ 1270.884124][T20731] should_fail_ex+0x414/0x560 [ 1270.884165][T20731] should_failslab+0xa8/0x100 [ 1270.884195][T20731] kmem_cache_alloc_noprof+0x88/0x710 [ 1270.884230][T20731] ? skb_clone+0x212/0x3a0 [ 1270.884275][T20731] skb_clone+0x212/0x3a0 [ 1270.884305][T20731] __netlink_deliver_tap+0x404/0x850 [ 1270.884345][T20731] ? netlink_deliver_tap+0x2e/0x1b0 [ 1270.884375][T20731] netlink_deliver_tap+0x19c/0x1b0 [ 1270.884405][T20731] netlink_sendskb+0x68/0x140 [ 1270.884441][T20731] netlink_unicast+0x397/0x9e0 [ 1270.884476][T20731] ? __pfx_netlink_unicast+0x10/0x10 [ 1270.884505][T20731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1270.884546][T20731] ovs_ct_limit_cmd_del+0x60e/0x770 [ 1270.884598][T20731] genl_family_rcv_msg_doit+0x215/0x300 [ 1270.884624][T20731] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1270.884655][T20731] ? bpf_lsm_capable+0x9/0x20 [ 1270.884696][T20731] ? security_capable+0x7e/0x2e0 [ 1270.884741][T20731] genl_rcv_msg+0x60e/0x790 [ 1270.884783][T20731] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1270.884814][T20731] ? __pfx_ovs_ct_limit_cmd_del+0x10/0x10 [ 1270.884842][T20731] ? __asan_memcpy+0x40/0x70 [ 1270.884873][T20731] ? __pfx_ref_tracker_free+0x10/0x10 [ 1270.884901][T20731] netlink_rcv_skb+0x208/0x470 [ 1270.884927][T20731] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1270.884960][T20731] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1270.884983][T20731] ? genl_rcv+0x19/0x40 [ 1270.885029][T20731] ? down_read+0x274/0x2e0 [ 1270.885050][T20731] ? genl_rcv+0xd/0x40 [ 1270.885081][T20731] genl_rcv+0x28/0x40 [ 1270.885109][T20731] netlink_unicast+0x82f/0x9e0 [ 1270.885138][T20731] ? __pfx_netlink_unicast+0x10/0x10 [ 1270.885163][T20731] ? netlink_sendmsg+0x642/0xb30 [ 1270.885187][T20731] ? skb_put+0x11b/0x210 [ 1270.885212][T20731] netlink_sendmsg+0x805/0xb30 [ 1270.885247][T20731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1270.885277][T20731] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1270.885318][T20731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1270.885334][T20731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1270.885357][T20731] __sock_sendmsg+0x21c/0x270 [ 1270.885384][T20731] ____sys_sendmsg+0x505/0x820 [ 1270.885435][T20731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1270.885465][T20731] ? import_iovec+0x74/0xa0 [ 1270.885491][T20731] ___sys_sendmsg+0x21f/0x2a0 [ 1270.885514][T20731] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.885568][T20731] ? __fget_files+0x2a/0x420 [ 1270.885590][T20731] ? __fget_files+0x3a0/0x420 [ 1270.885621][T20731] __x64_sys_sendmsg+0x19b/0x260 [ 1270.885646][T20731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1270.885677][T20731] ? __pfx_ksys_write+0x10/0x10 [ 1270.885710][T20731] do_syscall_64+0xec/0xf80 [ 1270.885732][T20731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.885752][T20731] ? trace_irq_disable+0x37/0x100 [ 1270.885780][T20731] ? clear_bhb_loop+0x60/0xb0 [ 1270.885806][T20731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.885837][T20731] RIP: 0033:0x7f156bf8f749 [ 1270.885855][T20731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1270.885874][T20731] RSP: 002b:00007f156a1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1270.885894][T20731] RAX: ffffffffffffffda RBX: 00007f156c1e6090 RCX: 00007f156bf8f749 [ 1270.885908][T20731] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1270.885921][T20731] RBP: 00007f156a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.885933][T20731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1270.885944][T20731] R13: 00007f156c1e6128 R14: 00007f156c1e6090 R15: 00007f156c30fa28 [ 1270.885974][T20731] [ 1271.357206][T20730] netlink: set zone limit has 4 unknown bytes [ 1271.967778][ T5913] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1272.762911][ T5913] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1272.772163][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.780311][ T5913] usb 4-1: Product: syz [ 1272.784505][ T5913] usb 4-1: Manufacturer: syz [ 1272.795625][ T5913] usb 4-1: SerialNumber: syz [ 1273.226452][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1273.265360][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1273.369898][T20764] xt_hashlimit: size too large, truncated to 1048576 [ 1273.399844][T20764] xt_hashlimit: max too large, truncated to 1048576 [ 1273.748106][T20771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1274.049497][T14607] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1274.219782][T14607] usb 5-1: Using ep0 maxpacket: 16 [ 1274.236633][T14607] usb 5-1: config 0 has no interfaces? [ 1274.255954][T14607] usb 5-1: New USB device found, idVendor=954f, idProduct=a199, bcdDevice= 0.09 [ 1274.274713][T14607] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1274.287824][T14607] usb 5-1: Product: syz [ 1274.292047][T14607] usb 5-1: SerialNumber: syz [ 1274.305318][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1274.325308][T14607] usb 5-1: config 0 descriptor?? [ 1274.344992][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1274.366720][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1274.380624][T20782] vlan0: entered promiscuous mode [ 1274.410847][ T5913] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1274.445293][ T5913] usb 4-1: USB disconnect, device number 104 [ 1274.581226][T14607] usb 5-1: USB disconnect, device number 25 [ 1275.727868][T14607] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1275.808609][T20813] netlink: 'syz.4.4272': attribute type 10 has an invalid length. [ 1275.816595][T20813] syz_tun: entered promiscuous mode [ 1275.829540][T20813] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1275.852857][T19480] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1275.906873][T14607] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.922522][T14607] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1275.937778][T14607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.951396][T14607] usb 4-1: config 0 descriptor?? [ 1275.962486][T14607] pwc: Askey VC010 type 2 USB webcam detected. [ 1276.018391][T19480] usb 1-1: Using ep0 maxpacket: 16 [ 1276.028779][T19480] usb 1-1: config 0 has no interfaces? [ 1276.039484][T19480] usb 1-1: New USB device found, idVendor=954f, idProduct=a199, bcdDevice= 0.09 [ 1276.070707][T19480] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1276.090546][T19480] usb 1-1: Product: syz [ 1276.097887][ T130] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1276.106695][T19480] usb 1-1: SerialNumber: syz [ 1276.123225][T19480] usb 1-1: config 0 descriptor?? [ 1276.147982][ T5913] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1276.267758][ T130] usb 2-1: Using ep0 maxpacket: 16 [ 1276.274960][ T130] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1276.290537][ T130] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1276.305599][ T130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.329007][ T130] usb 2-1: Product: syz [ 1276.333250][ T130] usb 2-1: Manufacturer: syz [ 1276.347199][T20801] netlink: 'syz.0.4268': attribute type 25 has an invalid length. [ 1276.357789][ T130] usb 2-1: SerialNumber: syz [ 1276.360145][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 1276.367600][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1276.388662][T20801] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1276.389816][T14607] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1276.407031][T14607] pwc: recv_control_msg error -32 req 02 val 2700 [ 1276.416690][ T5913] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 1276.417000][ T130] usb 2-1: config 0 descriptor?? [ 1276.427857][ T5906] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1276.437461][T20816] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1276.453339][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.462562][T19480] usb 1-1: USB disconnect, device number 118 [ 1276.484612][T14607] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1276.485533][ T130] mcba_usb 2-1:0.0: Can't find endpoints [ 1276.495258][ T5913] usb 3-1: config 0 has no interface number 0 [ 1276.497289][ T5913] usb 3-1: config 0 interface 24 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1276.520190][T14607] pwc: recv_control_msg error -32 req 04 val 1000 [ 1276.526982][ T5913] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1276.536497][T14607] pwc: recv_control_msg error -32 req 04 val 1300 [ 1276.546992][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.555592][T14607] pwc: recv_control_msg error -32 req 04 val 1400 [ 1276.564523][T14607] pwc: recv_control_msg error -32 req 02 val 2000 [ 1276.592466][T14607] pwc: recv_control_msg error -32 req 02 val 2100 [ 1276.603992][ T5913] usb 3-1: config 0 descriptor?? [ 1276.620148][T14607] pwc: recv_control_msg error -32 req 04 val 1500 [ 1276.635714][ T5913] usbhid 3-1:0.24: couldn't find an input interrupt endpoint [ 1276.644142][T14607] pwc: recv_control_msg error -32 req 02 val 2500 [ 1276.667558][ T5906] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1276.679425][T14607] pwc: recv_control_msg error -32 req 02 val 2400 [ 1276.686725][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.689598][T20816] fuse: Bad value for 'group_id' [ 1276.708825][T14607] pwc: recv_control_msg error -32 req 02 val 2600 [ 1276.717792][T20816] fuse: Bad value for 'group_id' [ 1276.725719][ T5906] usb 5-1: Product: syz [ 1276.736040][T20816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.749833][ T5906] usb 5-1: Manufacturer: syz [ 1276.754527][ T5906] usb 5-1: SerialNumber: syz [ 1276.760620][T20816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.786420][ T5913] usb 2-1: USB disconnect, device number 8 [ 1276.935396][T14607] pwc: recv_control_msg error -71 req 02 val 2800 [ 1276.942859][T14607] pwc: recv_control_msg error -71 req 04 val 1100 [ 1276.950450][T14607] pwc: recv_control_msg error -71 req 04 val 1200 [ 1276.959186][T14607] pwc: Registered as video103. [ 1276.967460][T14607] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input156 [ 1276.999845][T14607] usb 4-1: USB disconnect, device number 105 [ 1277.161486][T20823] netlink: set zone limit has 4 unknown bytes [ 1277.183240][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1277.211364][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1277.763177][T20844] program syz.1.4278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1277.824283][T20846] FAULT_INJECTION: forcing a failure. [ 1277.824283][T20846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.839346][T20846] CPU: 1 UID: 0 PID: 20846 Comm: syz.3.4281 Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.839383][T20846] Tainted: [L]=SOFTLOCKUP [ 1277.839392][T20846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1277.839406][T20846] Call Trace: [ 1277.839416][T20846] [ 1277.839426][T20846] dump_stack_lvl+0xe8/0x150 [ 1277.839461][T20846] should_fail_ex+0x414/0x560 [ 1277.839502][T20846] _copy_from_iter+0x3b0/0x1630 [ 1277.839538][T20846] ? __pfx__copy_from_iter+0x10/0x10 [ 1277.839566][T20846] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 1277.839599][T20846] ? skb_put+0x11b/0x210 [ 1277.839627][T20846] rawv6_send_hdrinc+0x861/0x17a0 [ 1277.839677][T20846] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 1277.839709][T20846] ? txopt_get+0x335/0x3f0 [ 1277.839741][T20846] ? aa_label_sk_perm+0x4c4/0x610 [ 1277.839767][T20846] ? __pfx_txopt_get+0x10/0x10 [ 1277.839817][T20846] rawv6_sendmsg+0x12ee/0x1830 [ 1277.839851][T20846] ? tomoyo_check_inet_address+0x275/0x8c0 [ 1277.839895][T20846] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1277.839952][T20846] ? __pfx_aa_sk_perm+0x10/0x10 [ 1277.839983][T20846] ? sock_rps_record_flow+0x19/0x410 [ 1277.840016][T20846] ? inet_sendmsg+0x2f4/0x370 [ 1277.840043][T20846] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1277.840069][T20846] __sock_sendmsg+0x19c/0x270 [ 1277.840104][T20846] ____sys_sendmsg+0x505/0x820 [ 1277.840138][T20846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1277.840178][T20846] ? import_iovec+0x74/0xa0 [ 1277.840208][T20846] ___sys_sendmsg+0x21f/0x2a0 [ 1277.840237][T20846] ? __pfx____sys_sendmsg+0x10/0x10 [ 1277.840300][T20846] ? __fget_files+0x2a/0x420 [ 1277.840328][T20846] ? __fget_files+0x3a0/0x420 [ 1277.840367][T20846] __x64_sys_sendmsg+0x19b/0x260 [ 1277.840398][T20846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1277.840435][T20846] ? __pfx_ksys_write+0x10/0x10 [ 1277.840469][T20846] do_syscall_64+0xec/0xf80 [ 1277.840492][T20846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.840514][T20846] ? trace_irq_disable+0x37/0x100 [ 1277.840544][T20846] ? clear_bhb_loop+0x60/0xb0 [ 1277.840571][T20846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.840593][T20846] RIP: 0033:0x7f058b98f749 [ 1277.840613][T20846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1277.840634][T20846] RSP: 002b:00007f058c86e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1277.840658][T20846] RAX: ffffffffffffffda RBX: 00007f058bbe5fa0 RCX: 00007f058b98f749 [ 1277.840675][T20846] RDX: 0000000020000884 RSI: 0000200000000000 RDI: 0000000000000003 [ 1277.840691][T20846] RBP: 00007f058c86e090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.840706][T20846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.840720][T20846] R13: 00007f058bbe6038 R14: 00007f058bbe5fa0 R15: 00007f058bd0fa28 [ 1277.840755][T20846] [ 1278.539102][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1278.781017][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 1278.832788][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1278.896392][T14607] usb 3-1: USB disconnect, device number 119 [ 1278.913702][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1278.920282][T20859] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4285'. [ 1278.955333][T20861] netlink: 'syz.0.4286': attribute type 62 has an invalid length. [ 1278.998051][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1279.022632][ T5906] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1279.136226][ T5906] usb 5-1: USB disconnect, device number 26 [ 1279.239633][T20866] 8021q: VLANs not supported on gre0 [ 1279.490076][T14607] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1279.572277][T20876] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4291'. [ 1279.667712][T14607] usb 3-1: Using ep0 maxpacket: 16 [ 1279.675032][T14607] usb 3-1: config 6 has an invalid interface number: 152 but max is 3 [ 1279.697923][ T5906] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1279.708128][T14607] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.726471][T14607] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 1279.749971][T14607] usb 3-1: config 6 has no interface number 0 [ 1279.764290][T14607] usb 3-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 1279.802062][T14607] usb 3-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1279.842166][T14607] usb 3-1: config 6 interface 152 has no altsetting 0 [ 1279.868413][T14607] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 1279.885046][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1279.909846][T14607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.930080][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1279.940794][T14607] usb 3-1: Product: syz [ 1279.952173][T14607] usb 3-1: Manufacturer: syz [ 1279.973729][T14607] usb 3-1: SerialNumber: syz [ 1279.983933][ T5906] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1280.012643][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.033509][ T5906] usb 2-1: Product: syz [ 1280.041207][ T5906] usb 2-1: Manufacturer: syz [ 1280.049608][ T5906] usb 2-1: SerialNumber: syz [ 1280.080508][ T5906] usb 2-1: config 0 descriptor?? [ 1280.104760][ T5906] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 1280.216601][T20864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.477264][T20864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.555419][T14607] ushc 3-1:6.152: probe with driver ushc failed with error -71 [ 1280.624493][T14607] usb 3-1: USB disconnect, device number 120 [ 1281.394693][T20895] netlink: 'syz.2.4296': attribute type 4 has an invalid length. [ 1282.405677][T20903] can: request_module (can-proto-0) failed. [ 1283.142140][ T5985] usb 2-1: USB disconnect, device number 9 [ 1283.165182][T20919] 8021q: VLANs not supported on gre0 [ 1283.317775][ T130] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1283.327404][T20924] FAULT_INJECTION: forcing a failure. [ 1283.327404][T20924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.343582][T20924] CPU: 0 UID: 0 PID: 20924 Comm: syz.1.4308 Tainted: G L syzkaller #0 PREEMPT(full) [ 1283.343616][T20924] Tainted: [L]=SOFTLOCKUP [ 1283.343624][T20924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1283.343637][T20924] Call Trace: [ 1283.343645][T20924] [ 1283.343655][T20924] dump_stack_lvl+0xe8/0x150 [ 1283.343688][T20924] should_fail_ex+0x414/0x560 [ 1283.343726][T20924] _copy_from_user+0x2d/0xb0 [ 1283.343754][T20924] ___sys_recvmsg+0x12e/0x510 [ 1283.343787][T20924] ? __pfx____sys_recvmsg+0x10/0x10 [ 1283.343818][T20924] ? __fget_files+0x2a/0x420 [ 1283.343871][T20924] do_recvmmsg+0x307/0x770 [ 1283.343908][T20924] ? __pfx_do_recvmmsg+0x10/0x10 [ 1283.343946][T20924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1283.343990][T20924] __x64_sys_recvmmsg+0x190/0x240 [ 1283.344019][T20924] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1283.344056][T20924] do_syscall_64+0xec/0xf80 [ 1283.344077][T20924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.344096][T20924] ? trace_irq_disable+0x37/0x100 [ 1283.344129][T20924] ? clear_bhb_loop+0x60/0xb0 [ 1283.344154][T20924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.344177][T20924] RIP: 0033:0x7f529cf8f749 [ 1283.344195][T20924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1283.344214][T20924] RSP: 002b:00007f529ddee038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1283.344236][T20924] RAX: ffffffffffffffda RBX: 00007f529d1e5fa0 RCX: 00007f529cf8f749 [ 1283.344252][T20924] RDX: 03ffffffffffff61 RSI: 0000200000000740 RDI: 0000000000000003 [ 1283.344266][T20924] RBP: 00007f529ddee090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.344281][T20924] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1283.344304][T20924] R13: 00007f529d1e6038 R14: 00007f529d1e5fa0 R15: 00007f529d30fa28 [ 1283.344338][T20924] [ 1283.498297][ T130] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1283.614656][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.627089][ T130] usb 5-1: Product: syz [ 1283.806331][ T130] usb 5-1: Manufacturer: syz [ 1283.817771][ T130] usb 5-1: SerialNumber: syz [ 1283.943329][T20934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4311'. [ 1283.964436][T20934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4311'. [ 1284.283452][ T130] rtl8150 5-1:1.0: couldn't reset the device [ 1284.290286][ T130] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1284.386414][ T130] usb 5-1: USB disconnect, device number 27 [ 1284.498434][T12321] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1284.928367][T14607] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1285.034189][T14597] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.045525][T14597] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.067300][T14597] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.098458][T14597] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.131015][T14607] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1285.147864][T14607] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1285.151268][T19480] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1285.173018][T14607] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1285.200360][T14607] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1285.218275][T14607] usb 3-1: Product: syz [ 1285.228050][T14607] usb 3-1: Manufacturer: syz [ 1285.232699][T14607] usb 3-1: SerialNumber: syz [ 1285.268763][T14607] usb 3-1: config 0 descriptor?? [ 1285.283198][T14607] usb 3-1: selecting invalid altsetting 0 [ 1285.337806][T19480] usb 2-1: Using ep0 maxpacket: 16 [ 1285.356955][T19480] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1285.414859][T19480] usb 2-1: config 2 has an invalid interface number: 251 but max is 0 [ 1285.435123][T19480] usb 2-1: config 2 has no interface number 0 [ 1285.450228][T19480] usb 2-1: config 2 interface 251 altsetting 156 bulk endpoint 0xA has invalid maxpacket 8 [ 1285.486035][T19480] usb 2-1: config 2 interface 251 altsetting 156 endpoint 0x3 has an invalid bInterval 241, changing to 7 [ 1285.533477][T19480] usb 2-1: config 2 interface 251 altsetting 156 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1285.545011][T19480] usb 2-1: config 2 interface 251 has no altsetting 0 [ 1285.561668][T19480] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=ea.ae [ 1285.575536][T19480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.592126][T19480] usb 2-1: Product: syz [ 1285.606189][T19480] usb 2-1: Manufacturer: syz [ 1285.611232][T19480] usb 2-1: SerialNumber: syz [ 1285.631022][T20951] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1286.213625][T20971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.227512][T20971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.266877][T20977] FAULT_INJECTION: forcing a failure. [ 1286.266877][T20977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1286.280416][T20977] CPU: 0 UID: 0 PID: 20977 Comm: syz.0.4323 Tainted: G L syzkaller #0 PREEMPT(full) [ 1286.280442][T20977] Tainted: [L]=SOFTLOCKUP [ 1286.280449][T20977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1286.280478][T20977] Call Trace: [ 1286.280488][T20977] [ 1286.280498][T20977] dump_stack_lvl+0xe8/0x150 [ 1286.280531][T20977] should_fail_ex+0x414/0x560 [ 1286.280570][T20977] _copy_from_user+0x2d/0xb0 [ 1286.280591][T20977] ___sys_recvmsg+0x12e/0x510 [ 1286.280616][T20977] ? __pfx____sys_recvmsg+0x10/0x10 [ 1286.280658][T20977] ? __fget_files+0x2a/0x420 [ 1286.280716][T20977] do_recvmmsg+0x307/0x770 [ 1286.280752][T20977] ? __pfx_do_recvmmsg+0x10/0x10 [ 1286.280804][T20977] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1286.280848][T20977] __x64_sys_recvmmsg+0x190/0x240 [ 1286.280878][T20977] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1286.280913][T20977] do_syscall_64+0xec/0xf80 [ 1286.280930][T20977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.280946][T20977] ? trace_irq_disable+0x37/0x100 [ 1286.280985][T20977] ? clear_bhb_loop+0x60/0xb0 [ 1286.281011][T20977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.281032][T20977] RIP: 0033:0x7fd221b8f749 [ 1286.281053][T20977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.281067][T20977] RSP: 002b:00007fd222a0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1286.281084][T20977] RAX: ffffffffffffffda RBX: 00007fd221de5fa0 RCX: 00007fd221b8f749 [ 1286.281096][T20977] RDX: 03ffffffffffff61 RSI: 0000200000000740 RDI: 0000000000000003 [ 1286.281122][T20977] RBP: 00007fd222a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.281136][T20977] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1286.281150][T20977] R13: 00007fd221de6038 R14: 00007fd221de5fa0 R15: 00007fd221f0fa28 [ 1286.281183][T20977] [ 1286.488633][ T5985] usb 3-1: USB disconnect, device number 121 [ 1287.685012][T19480] redrat3 2-1:2.251: Couldn't find all endpoints [ 1287.748292][T19480] usb 2-1: USB disconnect, device number 10 [ 1288.509319][T20999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4328'. [ 1288.547783][T20999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4328'. [ 1289.330538][ T5985] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1289.354485][T21009] netlink: set zone limit has 4 unknown bytes [ 1289.589157][ T5985] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1289.599882][ T5985] usb 5-1: config 0 has no interface number 0 [ 1289.614332][ T5985] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1289.648181][ T5985] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1289.669439][ T5985] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1289.678066][T21025] netlink: 'syz.3.4337': attribute type 62 has an invalid length. [ 1289.729514][ T5985] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1289.738754][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.748100][ T5985] usb 5-1: Product: syz [ 1289.756851][ T5985] usb 5-1: Manufacturer: syz [ 1289.761622][ T5985] usb 5-1: SerialNumber: syz [ 1289.769652][ T5985] usb 5-1: config 0 descriptor?? [ 1289.802544][ C1] usb 5-1: NFC: Urb failure (status -71) [ 1289.831632][ T5985] usb 5-1: NFC: Unable to get FW version [ 1289.842041][ T5985] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 1290.017024][T21033] futex_wake_op: syz.1.4338 tries to shift op by 32; fix this program [ 1291.297865][ T5985] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1291.437916][ T5985] usb 1-1: device descriptor read/64, error -71 [ 1291.677815][ T5985] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1291.794979][T21052] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4342'. [ 1291.824764][ T5985] usb 1-1: device descriptor read/64, error -71 [ 1291.938180][ T5985] usb usb1-port1: attempt power cycle [ 1292.061997][ T130] usb 5-1: USB disconnect, device number 28 [ 1292.168095][T19480] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1292.258090][ T5922] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1292.292692][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1292.308049][ T5985] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1292.317416][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1292.329389][T19480] usb 4-1: Using ep0 maxpacket: 32 [ 1292.335959][ T5985] usb 1-1: device descriptor read/8, error -71 [ 1292.344216][T19480] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1292.352762][T19480] usb 4-1: config 0 has no interface number 0 [ 1292.359293][T19480] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1292.372576][T19480] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1292.384522][T19480] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1292.397342][T19480] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1292.407992][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 1292.415224][T19480] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1292.427481][T19480] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1292.438973][ T5922] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1292.447219][ T5922] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1292.458494][T19480] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1292.468820][ T5922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1292.479014][T19480] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1292.493379][ T5922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1292.503891][T19480] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1292.517929][ T5922] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1292.532499][T19480] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1292.548216][ T130] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1292.556883][ T5922] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1292.566267][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.576710][T19480] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1292.585977][T19480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.594835][ T5985] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1292.604743][T19480] usb 4-1: Product: syz [ 1292.609641][T19480] usb 4-1: Manufacturer: syz [ 1292.619267][T19480] usb 4-1: SerialNumber: syz [ 1292.627979][T19480] usb 4-1: config 0 descriptor?? [ 1292.634073][T21054] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1292.642019][ T5985] usb 1-1: device descriptor read/8, error -71 [ 1292.648833][T21054] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1292.658056][T19480] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1292.666536][T19480] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1292.678091][T19480] scsi host1: microtekX6 [ 1292.720314][ T130] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1292.728886][ T130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.740784][ T130] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1292.750167][ T130] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1292.758658][ T5985] usb usb1-port1: unable to enumerate USB device [ 1292.765170][ T130] usb 3-1: Manufacturer: syz [ 1292.773160][ T130] usb 3-1: config 0 descriptor?? [ 1292.798190][ T5906] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1292.903967][ T130] rc_core: IR keymap rc-hauppauge not found [ 1292.912579][ T130] Registered IR keymap rc-empty [ 1292.919986][ T130] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1292.947851][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 1292.955192][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1292.966790][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1293.028084][ T130] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input160 [ 1293.063556][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1293.078218][ T5906] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1293.094377][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1293.116584][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1293.138375][ T5906] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1293.175234][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1293.214802][ T5906] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 1293.224846][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.244173][ T5906] usb 5-1: Product: syz [ 1293.249434][ T5906] usb 5-1: Manufacturer: syz [ 1293.260309][ T5906] usb 5-1: SerialNumber: syz [ 1293.301520][ T5906] usb 5-1: config 0 descriptor?? [ 1293.308569][T21066] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1293.319702][ T5906] usb 5-1: NFC: Reader power on cmd error -90 [ 1293.325961][ T5906] pn533_usb 5-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 1293.415750][ T5906] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 1293.536274][ T130] usb 5-1: USB disconnect, device number 29 [ 1294.467874][T14607] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1294.627893][T14607] usb 5-1: Using ep0 maxpacket: 16 [ 1294.633519][ T5906] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1294.646212][T14607] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1294.658085][T14607] usb 5-1: config 0 has no interface number 0 [ 1294.669047][T14607] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1294.680925][T14607] usb 5-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1294.697210][T14607] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1294.724790][T14607] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1294.734627][T14607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.743990][T14607] usb 5-1: Product: syz [ 1294.748866][T14607] usb 5-1: Manufacturer: syz [ 1294.753733][T14607] usb 5-1: SerialNumber: syz [ 1294.765865][T14607] usb 5-1: config 0 descriptor?? [ 1294.784846][ T5922] usb 2-1: usb_control_msg returned -71 [ 1294.792003][ T5922] usbtmc 2-1:16.0: can't read capabilities [ 1294.798757][T21085] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1294.816727][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.828167][T21085] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1294.839952][ T5906] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1294.853619][ T5922] usb 2-1: USB disconnect, device number 11 [ 1294.862452][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.903847][ T5906] usb 1-1: config 0 descriptor?? [ 1295.038995][T21083] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1295.046422][T21083] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1295.082329][T14607] asix 5-1:0.34: probe with driver asix failed with error -71 [ 1295.106419][T14607] usb 5-1: USB disconnect, device number 30 [ 1295.269244][ T10] usb 3-1: USB disconnect, device number 122 [ 1295.360116][ T5906] a4tech 0003:09DA:022B.0065: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.0-1/input0 [ 1295.856055][ T5922] usb 4-1: USB disconnect, device number 106 [ 1295.889426][T21106] ªªªªªª: renamed from vlan0 [ 1295.980740][T21108] loop9: detected capacity change from 0 to 7 [ 1296.001083][T21108] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1296.010922][T21108] loop9: partition table partially beyond EOD, truncated [ 1296.025759][T21108] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1296.122391][T19907] udevd[19907]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1296.168711][ T130] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1296.347707][ T130] usb 5-1: Using ep0 maxpacket: 8 [ 1296.390578][ T130] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1296.422152][ T130] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 1296.439980][ T130] usb 5-1: config 7 has no interface number 0 [ 1296.460489][ T130] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1296.474482][ T130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.485272][T21112] fuse: Bad value for 'fd' [ 1296.596583][ T130] usb 5-1: Product: 㯑 [ 1296.868826][ T130] usb 5-1: USB disconnect, device number 31 [ 1296.907749][ T5922] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1297.081826][ T5922] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1297.091465][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.100575][ T5922] usb 3-1: Product: syz [ 1297.180021][T19480] usb 1-1: USB disconnect, device number 123 [ 1297.196262][ T5922] usb 3-1: Manufacturer: syz [ 1297.228377][ T5922] usb 3-1: SerialNumber: syz [ 1297.271113][ T5922] usb 3-1: config 0 descriptor?? [ 1297.290071][ T5922] hub 3-1:0.0: bad descriptor, ignoring hub [ 1297.301676][ T5922] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1297.514186][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4364'. [ 1297.543712][ T5922] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1297.569084][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1297.645511][ T5922] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1297.688071][ T5922] usb 3-1: media controller created [ 1297.694753][T21114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.713841][T21114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.743549][T21114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.778026][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1297.907728][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1297.922671][T21114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.013586][ T5922] DVB: Unable to find symbol dib7000p_attach() [ 1298.027496][ T5922] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1298.094479][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1298.105705][ T10] usb 5-1: config 0 has no interface number 0 [ 1298.141588][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1298.159252][T21114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.185478][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.194976][ T10] usb 5-1: Product: syz [ 1298.199297][ T10] usb 5-1: Manufacturer: syz [ 1298.208567][ T10] usb 5-1: SerialNumber: syz [ 1298.237776][ T5922] rc_core: IR keymap rc-dib0700-rc5 not found [ 1298.243659][ T10] usb 5-1: config 0 descriptor?? [ 1298.249033][T21114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.310293][ T5906] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1298.327092][ T5922] Registered IR keymap rc-empty [ 1298.348097][ T5922] dvb-usb: could not initialize remote control. [ 1298.358655][ T5922] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1298.531109][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 1298.543280][ T5906] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 1298.576568][ T5906] usb 4-1: config 4 has no interface number 0 [ 1298.583543][ T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1298.607814][ T5906] usb 4-1: config 4 interface 51 has no altsetting 0 [ 1298.625749][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1298.642707][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1298.652621][ T5906] usb 4-1: New USB device found, idVendor=954f, idProduct=a199, bcdDevice= 0.09 [ 1298.667406][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1298.676358][ T10] usb 5-1: media controller created [ 1298.686225][ T5906] usb 4-1: Product: syz [ 1298.706457][ T5906] usb 4-1: SerialNumber: syz [ 1298.740639][ T5906] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 1298.749786][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1298.947760][ T5906] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1298.959375][T21134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4366'. [ 1298.986713][ T5922] usb 4-1: USB disconnect, device number 107 [ 1299.082981][T21130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.093402][T21130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.112231][T19480] usb 5-1: USB disconnect, device number 32 [ 1299.130304][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 1299.141577][ T5906] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1299.155898][T21114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.159224][ T5906] usb 1-1: config 0 has no interface number 0 [ 1299.166826][T21114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.188670][ T5906] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1299.205629][ T5906] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1299.222754][ T5906] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1299.235032][ T5906] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1299.244298][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.253587][ T5906] usb 1-1: Product: syz [ 1299.257917][ T5906] usb 1-1: Manufacturer: syz [ 1299.262533][ T5906] usb 1-1: SerialNumber: syz [ 1299.269697][ T5906] usb 1-1: config 0 descriptor?? [ 1299.275667][T21140] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 1299.283205][T21140] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 1299.407300][T19480] usb 3-1: USB disconnect, device number 123 [ 1299.482528][T19480] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1299.503283][T21139] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 1299.519269][T21139] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 1299.540536][ T5906] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1299.594284][ T5906] asix 1-1:0.34: probe with driver asix failed with error -71 [ 1299.633051][ T5906] usb 1-1: USB disconnect, device number 124 [ 1299.866784][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4371'. [ 1299.997484][T21150] netlink: 'syz.3.4369': attribute type 12 has an invalid length. [ 1300.035531][ T30] audit: type=1400 audit(1767612523.269:2002): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=21146 comm="syz.3.4369" [ 1300.239068][T21162] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1300.245653][T21162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1300.275557][T21162] vhci_hcd vhci_hcd.0: Device attached [ 1300.297335][T21163] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 1300.316071][ T366] vhci_hcd vhci_hcd.4: stop threads [ 1300.322694][ T366] vhci_hcd vhci_hcd.4: release socket [ 1300.337553][ T366] vhci_hcd vhci_hcd.4: disconnect device [ 1300.362073][ T5906] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1300.542191][ T5906] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1300.554183][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.577506][ T5906] usb 3-1: Product: syz [ 1300.596154][ T5906] usb 3-1: Manufacturer: syz [ 1300.606261][ T5906] usb 3-1: SerialNumber: syz [ 1300.642248][ T5906] usb 3-1: config 0 descriptor?? [ 1300.893792][ T5906] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1300.909030][T21173] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4378'. [ 1300.947889][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1301.083680][T21156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.093478][T21161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4374'. [ 1301.102989][T21156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.119115][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1301.128885][ T30] audit: type=1326 audit(1767612524.359:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf8f749 code=0x7ffc0000 [ 1301.168936][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.181209][T21161] syzkaller1: entered promiscuous mode [ 1301.187056][T21161] syzkaller1: entered allmulticast mode [ 1301.190147][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1301.207478][ T30] audit: type=1326 audit(1767612524.359:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf8f749 code=0x7ffc0000 [ 1301.239075][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.259611][ T30] audit: type=1326 audit(1767612524.359:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf8f749 code=0x7ffc0000 [ 1301.283425][ T10] usb 2-1: config 0 descriptor?? [ 1301.345814][ T30] audit: type=1326 audit(1767612524.359:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f156bf8f749 code=0x7ffc0000 [ 1301.405967][ T30] audit: type=1326 audit(1767612524.359:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf8f749 code=0x7ffc0000 [ 1301.467788][ T30] audit: type=1326 audit(1767612524.359:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf8f749 code=0x7ffc0000 [ 1301.557750][ T30] audit: type=1326 audit(1767612524.359:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf8f749 code=0x7ffc0000 [ 1301.631558][ T30] audit: type=1326 audit(1767612524.359:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f156bf8f749 code=0x7ffc0000 [ 1301.725296][ T30] audit: type=1326 audit(1767612524.369:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156bf8f749 code=0x7ffc0000 [ 1301.820902][ T10] kye 0003:0458:5011.0066: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1301.821717][ T10] kye 0003:0458:5011.0066: unknown main item tag 0x7 [ 1301.843126][ T10] kye 0003:0458:5011.0066: hidraw0: USB HID v0.0b Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 1301.843190][ T10] kye 0003:0458:5011.0066: tablet-enabling feature report not found [ 1301.843208][ T10] kye 0003:0458:5011.0066: tablet enabling failed [ 1301.882338][ T5922] IPVS: starting estimator thread 0... [ 1301.886787][T21180] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 1301.977817][T21182] IPVS: using max 28 ests per chain, 67200 per kthread [ 1302.132073][ T5906] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1302.197814][T19480] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1302.338080][ T5906] usb 2-1: USB disconnect, device number 12 [ 1302.394687][T19480] usb 5-1: not running at top speed; connect to a high speed hub [ 1302.407405][T19480] usb 5-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 1302.630350][T21190] netlink: 'syz.3.4382': attribute type 12 has an invalid length. [ 1302.690270][T19480] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1302.711159][T19480] usb 5-1: config 1 has no interface number 1 [ 1302.728812][T19480] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1302.786324][T19480] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1302.910138][T19480] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1302.921004][T19480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.931101][T19480] usb 5-1: Product: syz [ 1302.936011][T19480] usb 5-1: Manufacturer: syz [ 1302.941050][T19480] usb 5-1: SerialNumber: syz [ 1303.214208][T19480] usb 5-1: USB disconnect, device number 33 [ 1303.264592][T19907] udevd[19907]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1303.314407][T21197] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1303.320996][T21197] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1303.332189][T21197] vhci_hcd vhci_hcd.0: Device attached [ 1303.577745][ T10] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 1303.597826][ T5906] usb 36-1: SetAddress Request (14) to port 0 [ 1303.603981][ T5906] usb 36-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1303.741820][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.754732][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1303.797835][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1303.808172][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.821674][ T10] usb 2-1: config 0 descriptor?? [ 1303.891730][T21207] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1303.943187][T14607] usb 3-1: USB disconnect, device number 124 [ 1304.039569][ T10] usb 2-1: string descriptor 0 read error: -71 [ 1304.047549][T21198] vhci_hcd: connection reset by peer [ 1304.071870][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input162 [ 1304.081346][T11948] vhci_hcd vhci_hcd.1: stop threads [ 1304.086918][T11948] vhci_hcd vhci_hcd.1: release socket [ 1304.094984][ T5186] bcm5974 2-1:0.0: could not read from device [ 1304.109659][T11948] vhci_hcd vhci_hcd.1: disconnect device [ 1304.150384][ T5186] bcm5974 2-1:0.0: could not read from device [ 1304.155226][ T10] usb 2-1: USB disconnect, device number 13 [ 1304.166936][T19480] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1304.242211][T21213] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1304.248801][T21213] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1304.258902][T21213] vhci_hcd vhci_hcd.0: Device attached [ 1304.270763][T21214] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 1304.278503][ T5960] vhci_hcd vhci_hcd.0: stop threads [ 1304.283820][ T5960] vhci_hcd vhci_hcd.0: release socket [ 1304.291145][ T5960] vhci_hcd vhci_hcd.0: disconnect device [ 1304.332627][T19480] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1304.341209][T19480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.376147][T19480] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1304.392272][T19480] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1304.400717][T19480] usb 5-1: Manufacturer: syz [ 1304.413905][T19480] usb 5-1: config 0 descriptor?? [ 1304.507788][T19480] rc_core: IR keymap rc-hauppauge not found [ 1304.513836][T19480] Registered IR keymap rc-empty [ 1304.521610][T19480] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1304.533495][T19480] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input163 [ 1304.616853][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1304.647161][T14607] usb 5-1: USB disconnect, device number 34 [ 1304.813491][ T10] usb 4-1: config 0 has an invalid interface number: 82 but max is 0 [ 1304.822099][ T10] usb 4-1: config 0 has no interface number 0 [ 1304.829383][ T10] usb 4-1: config 0 interface 82 has no altsetting 0 [ 1304.842746][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=22.6d [ 1304.853923][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.862691][ T10] usb 4-1: Product: syz [ 1304.868270][ T10] usb 4-1: Manufacturer: syz [ 1304.873588][ T10] usb 4-1: SerialNumber: syz [ 1304.886993][ T10] usb 4-1: config 0 descriptor?? [ 1304.899678][ T10] quatech2 4-1:0.82: Quatech 2nd gen USB to Serial Driver converter detected [ 1305.099344][T21217] tipc: Enabling of bearer rejected, failed to enable media [ 1305.120547][ T10] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1305.133691][T19480] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1305.150867][ T10] quatech2 4-1:0.82: probe with driver quatech2 failed with error -71 [ 1305.198165][ T10] usb 4-1: USB disconnect, device number 108 [ 1305.290981][T19480] usb 2-1: device descriptor read/64, error -71 [ 1305.345414][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.352574][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.678169][T19480] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1305.827793][ T5922] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1305.835704][T19480] usb 2-1: device descriptor read/64, error -71 [ 1305.947999][T19480] usb usb2-port1: attempt power cycle [ 1305.983264][T21249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1305.990615][T21249] IPv6: NLM_F_CREATE should be set when creating new route [ 1305.999173][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 1306.027173][ T5922] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1306.066160][ T5922] usb 1-1: config 2 has no interface number 0 [ 1306.085474][ T5922] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1306.095237][ T5922] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1306.145845][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.154719][ T5922] usb 1-1: Product: syz [ 1306.159405][ T5922] usb 1-1: Manufacturer: syz [ 1306.164173][ T5922] usb 1-1: SerialNumber: syz [ 1306.297789][T19480] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1306.318788][T19480] usb 2-1: device descriptor read/8, error -71 [ 1306.488282][T21256] kvm: user requested TSC rate below hardware speed [ 1306.503012][T21256] program syz.2.4404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1306.579820][T19480] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1306.648546][T19480] usb 2-1: device descriptor read/8, error -71 [ 1306.783688][T19480] usb usb2-port1: unable to enumerate USB device [ 1306.872451][T21266] vivid-000: ================= START STATUS ================= [ 1306.883010][T21266] vivid-000: Test Pattern: 75% Colorbar [ 1306.889364][T21266] vivid-000: Fill Percentage of Frame: 4 [ 1306.895600][T21266] vivid-000: Horizontal Movement: Move Left Slow [ 1306.989245][T21266] vivid-000: Vertical Movement: No Movement [ 1307.013230][T21266] vivid-000: OSD Text Mode: All [ 1307.024912][T21266] vivid-000: Show Border: true [ 1307.038465][T21266] vivid-000: Show Square: false [ 1307.047875][T21266] vivid-000: Sensor Flipped Horizontally: false [ 1307.071947][T21266] vivid-000: Sensor Flipped Vertically: false [ 1307.137701][T21266] vivid-000: Insert SAV Code in Image: false [ 1307.157897][T21266] vivid-000: Insert EAV Code in Image: false [ 1307.175819][T21266] vivid-000: Insert Video Guard Band: false [ 1307.193894][T21266] vivid-000: Reduced Framerate: false [ 1307.212566][T21266] vivid-000: HDMI 000-0 Is Connected To: None [ 1307.228358][T21266] vivid-000: S-Video 000-0 Is Connected To: None [ 1307.245748][T21266] vivid-000: Enable Capture Cropping: true [ 1307.266038][T21266] vivid-000: Enable Capture Composing: true [ 1307.280481][T21266] vivid-000: Enable Capture Scaler: true [ 1307.352910][T21266] vivid-000: Timestamp Source: End of Frame [ 1307.420289][T21266] vivid-000: Colorspace: SMPTE 170M [ 1307.446450][T21266] vivid-000: Transfer Function: Default [ 1307.459390][T21266] vivid-000: Y'CbCr Encoding: Default [ 1307.468256][T21266] vivid-000: HSV Encoding: Hue 0-179 [ 1307.488221][T21266] vivid-000: Quantization: Default [ 1307.508122][T21266] vivid-000: Apply Alpha To Red Only: false [ 1307.549197][T21266] vivid-000: Standard Aspect Ratio: 4x3 [ 1307.555006][T21266] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1307.570682][T21270] Cannot find set identified by id 3 to match [ 1307.586366][ T5922] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1307.595173][T21266] vivid-000: DV Timings: 640x480p59 inactive [ 1307.650793][T21266] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1307.715506][T21266] vivid-000: Maximum EDID Blocks: 2 [ 1307.733941][T21266] vivid-000: Limited RGB Range (16-235): true [ 1307.759142][T21266] vivid-000: Rx RGB Quantization Range: Automatic [ 1307.834925][T21266] vivid-000: Power Present: 0x00000000 [ 1307.863779][T21266] tpg source WxH: 720x576 (R'G'B) [ 1307.911186][T21266] tpg field: 4 [ 1307.932354][T21266] tpg crop: (0,8)/16x16 [ 1308.012311][T21266] tpg compose: (0,0)/64x64 [ 1308.054023][T21266] tpg colorspace: 1 [ 1308.163636][T21266] tpg transfer function: 0/1 [ 1308.212886][T21266] tpg quantization: 0/1 [ 1308.217083][T21266] tpg RGB range: 0/1 [ 1308.241914][T21266] vivid-000: ================== END STATUS ================== [ 1308.454285][T19480] usb 1-1: USB disconnect, device number 125 [ 1308.542373][T21274] netlink: set zone limit has 4 unknown bytes [ 1308.688046][ T5906] usb 36-1: device descriptor read/8, error -110 [ 1308.958832][T21284] netlink: set zone limit has 4 unknown bytes [ 1309.239021][ T5906] usb usb36-port1: attempt power cycle [ 1309.799000][ T5906] usb usb36-port1: unable to enumerate USB device [ 1309.934040][T21306] vivid-000: ================= START STATUS ================= [ 1309.946776][T21306] vivid-000: Test Pattern: 75% Colorbar [ 1309.955437][T21306] vivid-000: Fill Percentage of Frame: 4 [ 1309.967865][T21306] vivid-000: Horizontal Movement: Move Left Slow [ 1309.978356][T21306] vivid-000: Vertical Movement: No Movement [ 1309.988964][T21306] vivid-000: OSD Text Mode: All [ 1309.999940][T21306] vivid-000: Show Border: true [ 1310.008999][T21306] vivid-000: Show Square: false [ 1310.023111][T21306] vivid-000: Sensor Flipped Horizontally: false [ 1310.030646][T21306] vivid-000: Sensor Flipped Vertically: false [ 1310.040531][T21306] vivid-000: Insert SAV Code in Image: false [ 1310.051197][T21306] vivid-000: Insert EAV Code in Image: false [ 1310.058157][T21306] vivid-000: Insert Video Guard Band: false [ 1310.065800][T21306] vivid-000: Reduced Framerate: false [ 1310.076110][T21306] vivid-000: HDMI 000-0 Is Connected To: None [ 1310.082586][ T5906] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1310.095961][T21306] vivid-000: S-Video 000-0 Is Connected To: None [ 1310.103455][T21306] vivid-000: Enable Capture Cropping: true [ 1310.115216][T21306] vivid-000: Enable Capture Composing: true [ 1310.125445][T21306] vivid-000: Enable Capture Scaler: true [ 1310.135507][T21306] vivid-000: Timestamp Source: End of Frame [ 1310.147245][T21306] vivid-000: Colorspace: SMPTE 170M [ 1310.157376][T21306] vivid-000: Transfer Function: Default [ 1310.167130][T21306] vivid-000: Y'CbCr Encoding: Default [ 1310.173450][T21306] vivid-000: HSV Encoding: Hue 0-179 [ 1310.179370][T21306] vivid-000: Quantization: Default [ 1310.184754][T21306] vivid-000: Apply Alpha To Red Only: false [ 1310.192332][T21306] vivid-000: Standard Aspect Ratio: 4x3 [ 1310.212876][T21306] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1310.220819][ T5906] usb 4-1: device descriptor read/64, error -71 [ 1310.236727][T21306] vivid-000: DV Timings: 640x480p59 inactive [ 1310.243951][T21306] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1310.251711][T21306] vivid-000: Maximum EDID Blocks: 2 [ 1310.257012][T21306] vivid-000: Limited RGB Range (16-235): true [ 1310.263698][T21306] vivid-000: Rx RGB Quantization Range: Automatic [ 1310.270509][T21306] vivid-000: Power Present: 0x00000000 [ 1310.276097][T21306] tpg source WxH: 720x576 (R'G'B) [ 1310.281685][T21306] tpg field: 4 [ 1310.285104][T21306] tpg crop: (0,8)/16x16 [ 1310.287201][T21309] tipc: Bearer : already 2 bearers with priority 10 [ 1310.290784][T21306] tpg compose: (0,0)/64x64 [ 1310.301728][T21306] tpg colorspace: 1 [ 1310.305636][T21306] tpg transfer function: 0/1 [ 1310.311527][T21306] tpg quantization: 0/1 [ 1310.311803][T21309] tipc: Bearer : trying with adjusted priority [ 1310.316001][T21306] tpg RGB range: 0/1 [ 1310.326884][T21309] tipc: Enabling of bearer rejected, failed to enable media [ 1310.336001][T21306] vivid-000: ================== END STATUS ================== [ 1310.390696][T21309] netlink: set zone limit has 4 unknown bytes [ 1310.398550][T21309] netlink: zone id is out of range [ 1310.403777][T21309] netlink: zone id is out of range [ 1310.410685][T21309] netlink: zone id is out of range [ 1310.462549][T21311] IPv6: NLM_F_CREATE should be specified when creating new route [ 1310.470973][ T5906] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1310.608933][ T5906] usb 4-1: device descriptor read/64, error -71 [ 1310.718522][ T5906] usb usb4-port1: attempt power cycle [ 1310.767795][ T10] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1310.931059][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1310.946690][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1310.957265][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.965436][ T10] usb 1-1: Product: syz [ 1310.970206][ T10] usb 1-1: Manufacturer: syz [ 1310.974904][ T10] usb 1-1: SerialNumber: syz [ 1310.986317][ T10] usb 1-1: config 0 descriptor?? [ 1310.996760][ T10] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1311.078060][ T5906] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1311.099708][ T5906] usb 4-1: device descriptor read/8, error -71 [ 1311.209684][T21313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.227180][T21313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.240767][T21313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.260950][T21313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.294379][T21313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4424'. [ 1311.336879][T21313] macvtap2: entered promiscuous mode [ 1311.350143][ T5906] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1311.361852][T21313] macvtap2: entered allmulticast mode [ 1311.374700][T21313] bond0: entered allmulticast mode [ 1311.385996][T21313] bond_slave_0: entered allmulticast mode [ 1311.393921][ T5906] usb 4-1: device descriptor read/8, error -71 [ 1311.406683][T21313] bond_slave_1: entered allmulticast mode [ 1311.427021][T21313] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1311.452225][T21330] bond0: left allmulticast mode [ 1311.459544][T21330] bond_slave_0: left allmulticast mode [ 1311.493264][T21330] bond_slave_1: left allmulticast mode [ 1311.511207][ T5906] usb usb4-port1: unable to enumerate USB device [ 1311.563399][ T10] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 1311.573520][ T10] visor 1-1:0.0: probe with driver visor failed with error -71 [ 1311.614604][ T10] usb 1-1: USB disconnect, device number 126 [ 1311.938012][ T5906] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1312.109908][T21344] vivid-002: disconnect [ 1312.122456][ T5906] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1312.138040][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.146276][ T5906] usb 5-1: Product: syz [ 1312.164462][ T5906] usb 5-1: Manufacturer: syz [ 1312.171178][ T5906] usb 5-1: SerialNumber: syz [ 1312.377841][T19480] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1312.541302][T19480] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1312.551729][T19480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.562079][T19480] usb 2-1: Product: syz [ 1312.566435][T19480] usb 2-1: Manufacturer: syz [ 1312.571309][T19480] usb 2-1: SerialNumber: syz [ 1312.660777][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1312.686689][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1312.991540][T19480] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1313.028156][T19480] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1313.163385][T21357] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1313.169966][T21357] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1313.212890][T21357] vhci_hcd vhci_hcd.0: Device attached [ 1313.256460][T21358] vhci_hcd: connection closed [ 1313.256683][ T60] vhci_hcd vhci_hcd.3: stop threads [ 1313.277938][ T60] vhci_hcd vhci_hcd.3: release socket [ 1313.315412][ T60] vhci_hcd vhci_hcd.3: disconnect device [ 1313.717808][ T10] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1313.902901][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1313.915259][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1313.937726][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.968335][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1314.062638][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1314.098112][ T10] usb 1-1: Manufacturer: syz [ 1314.144294][ T10] usb 1-1: config 0 descriptor?? [ 1314.169443][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 1314.203908][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1314.238397][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1314.283408][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1314.286066][T19480] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1314.321377][ T5906] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1314.362390][ T5906] usb 5-1: USB disconnect, device number 35 [ 1314.372247][ T10] rc_core: IR keymap rc-hauppauge not found [ 1314.387731][ T10] Registered IR keymap rc-empty [ 1314.404960][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1314.424506][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input164 [ 1314.517817][ T5985] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1314.531421][T19480] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 1314.543340][T21342] vivid-002: reconnect [ 1314.570240][T19480] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1314.590204][T19480] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1314.639234][T19480] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1314.659176][T19480] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1314.675623][T19480] usb 2-1: USB disconnect, device number 18 [ 1314.719961][ T5985] usb 4-1: Using ep0 maxpacket: 32 [ 1314.729837][ T5985] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1314.741414][ T5985] usb 4-1: config 0 has no interface number 0 [ 1314.747714][ T5985] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1314.775562][ T5985] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1314.803942][ T5985] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1314.851963][ T5985] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1314.873412][ T5985] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1314.890260][ T5985] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1314.901636][ T5985] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1314.925205][ T5985] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1314.942654][ T5985] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1314.954203][ T5985] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1314.980927][ T5985] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1314.990551][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.002470][ T5985] usb 4-1: Product: syz [ 1315.008878][ T5985] usb 4-1: Manufacturer: syz [ 1315.013810][ T5985] usb 4-1: SerialNumber: syz [ 1315.052569][ T5985] usb 4-1: config 0 descriptor?? [ 1315.067414][T21373] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1315.098087][T21373] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1315.122392][ T5985] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1315.136492][ T5985] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1315.189130][ T5985] scsi host1: microtekX6 [ 1316.534717][ T5985] usb 1-1: USB disconnect, device number 127 [ 1317.562505][T21405] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4454'. [ 1317.797743][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1317.989669][ T10] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 1318.019305][ T10] usb 2-1: config 0 has no interface number 0 [ 1318.043917][ T10] usb 2-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 1318.075123][ T10] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.137302][ T10] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.176112][ T5906] usb 4-1: USB disconnect, device number 113 [ 1318.194129][ T10] usb 2-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1318.234610][ T10] usb 2-1: config 0 interface 16 has no altsetting 0 [ 1318.256944][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1318.320156][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.355319][ T10] usb 2-1: config 0 descriptor?? [ 1318.853049][ T10] uclogic 0003:5543:004D.0067: interface is invalid, ignoring [ 1318.980551][T21427] futex_wake_op: syz.4.4460 tries to shift op by 32; fix this program [ 1319.337937][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1319.512470][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1319.553655][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.610447][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1319.626785][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1319.666495][ T10] usb 1-1: Manufacturer: syz [ 1319.682721][ T10] usb 1-1: config 0 descriptor?? [ 1319.890044][ T10] rc_core: IR keymap rc-hauppauge not found [ 1319.924472][T21438] fuse: Unknown parameter 'ì' [ 1319.942524][ T10] Registered IR keymap rc-empty [ 1319.975357][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1320.019317][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input165 [ 1321.103830][T19480] usb 2-1: USB disconnect, device number 19 [ 1321.127561][T21445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1321.278449][ T5985] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1321.422303][T21451] netlink: zone id is out of range [ 1321.427517][T21451] netlink: zone id is out of range [ 1321.436859][T21451] netlink: zone id is out of range [ 1321.442315][ T5985] usb 3-1: device descriptor read/64, error -71 [ 1321.449054][T21451] netlink: zone id is out of range [ 1321.454287][T21451] netlink: zone id is out of range [ 1321.460454][T21451] netlink: zone id is out of range [ 1321.465749][T21451] netlink: zone id is out of range [ 1321.471792][T21451] netlink: zone id is out of range [ 1321.477171][T21451] netlink: zone id is out of range [ 1321.483836][T21451] netlink: zone id is out of range [ 1321.557784][T19480] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1321.602318][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1321.687803][ T5985] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1321.717736][T19480] usb 2-1: Using ep0 maxpacket: 16 [ 1321.725612][T19480] usb 2-1: config 0 has no interfaces? [ 1321.733819][T19480] usb 2-1: New USB device found, idVendor=954f, idProduct=a199, bcdDevice= 0.09 [ 1321.743912][T19480] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1321.752005][T19480] usb 2-1: Product: syz [ 1321.756202][T19480] usb 2-1: SerialNumber: syz [ 1321.767814][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1321.769073][T19480] usb 2-1: config 0 descriptor?? [ 1321.787212][ T10] usb 5-1: config 0 has no interfaces? [ 1321.811483][ T10] usb 5-1: New USB device found, idVendor=954f, idProduct=a199, bcdDevice= 0.09 [ 1321.818474][ T5985] usb 3-1: device descriptor read/64, error -71 [ 1321.841518][ T10] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1321.850143][ T10] usb 5-1: Product: syz [ 1321.854443][ T10] usb 5-1: SerialNumber: syz [ 1321.863370][ T10] usb 5-1: config 0 descriptor?? [ 1321.928636][ T5985] usb usb3-port1: attempt power cycle [ 1321.997961][T21447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1322.044366][ T10] usb 2-1: USB disconnect, device number 20 [ 1322.067284][ T5922] usb 1-1: USB disconnect, device number 2 [ 1322.139980][T14607] usb 5-1: USB disconnect, device number 36 [ 1322.287787][ T5985] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1322.319486][ T5985] usb 3-1: device descriptor read/8, error -71 [ 1322.512160][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4469'. [ 1322.588188][ T5985] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1322.618653][ T5985] usb 3-1: device descriptor read/8, error -71 [ 1322.640505][T21463] netlink: 'syz.1.4470': attribute type 1 has an invalid length. [ 1322.696609][T21465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4470'. [ 1322.738079][ T5985] usb usb3-port1: unable to enumerate USB device [ 1322.745448][T21463] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1322.763938][T21465] bond7: entered promiscuous mode [ 1322.779018][T21465] bond7: entered allmulticast mode [ 1322.804273][T21468] dummy0: left allmulticast mode [ 1322.826932][T21468] bridge0: port 3(dummy0) entered disabled state [ 1322.846093][T21468] bond7: (slave dummy0): making interface the new active one [ 1322.855374][T21468] dummy0: entered allmulticast mode [ 1322.866701][T21468] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1323.048104][ T5985] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1323.167911][T19480] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1323.197786][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 1323.207155][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.224838][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.235474][ T5985] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 1323.247576][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.289352][ T5985] usb 5-1: config 0 descriptor?? [ 1323.317842][T19480] usb 2-1: Using ep0 maxpacket: 32 [ 1323.325723][T19480] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1323.352385][T19480] usb 2-1: config 0 has no interface number 0 [ 1323.366395][T19480] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1323.383034][T19480] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1323.395946][T19480] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1323.412137][T19480] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1323.432148][T19480] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1323.444720][T19480] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1323.467752][T19480] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1323.483027][T19480] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1323.501252][T19480] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1323.512523][T19480] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1323.573493][T19480] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1323.588199][T19480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.604271][T19480] usb 2-1: Product: syz [ 1323.614210][T19480] usb 2-1: Manufacturer: syz [ 1323.622527][T19480] usb 2-1: SerialNumber: syz [ 1323.662235][T19480] usb 2-1: config 0 descriptor?? [ 1323.674929][T21471] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1323.685695][T21471] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1323.697315][T19480] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1323.712941][ T5985] apple 0003:05AC:0274.0068: item fetching failed at offset 2/5 [ 1323.724014][T19480] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1323.735106][ T5985] apple 0003:05AC:0274.0068: parse failed [ 1323.749105][ T5985] apple 0003:05AC:0274.0068: probe with driver apple failed with error -22 [ 1323.782815][T19480] scsi host1: microtekX6 [ 1323.918244][T19480] usb 5-1: USB disconnect, device number 37 [ 1324.159166][T21492] netlink: 'syz.0.4477': attribute type 1 has an invalid length. [ 1324.433659][T21492] bond6: entered promiscuous mode [ 1324.473321][T21492] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1324.597718][T21495] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1324.618738][T21495] bond6: (slave bond7): making interface the new active one [ 1324.626636][T21495] bond7: entered promiscuous mode [ 1324.637332][T21495] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1324.667720][T19480] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1324.702923][T21498] bond6: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1324.772151][T21498] bond6: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 1324.829618][T19480] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1324.845306][T19480] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.882807][T19480] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1324.949159][T19480] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1324.990667][T19480] usb 3-1: Manufacturer: syz [ 1325.010431][ T5985] ------------[ cut here ]------------ [ 1325.016474][ T5985] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1325.023921][ T5985] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#1: kworker/1:9/5985 [ 1325.035201][ T5985] Modules linked in: [ 1325.039664][ T5985] CPU: 1 UID: 0 PID: 5985 Comm: kworker/1:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.050723][ T5985] Tainted: [L]=SOFTLOCKUP [ 1325.055416][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1325.065909][ T5985] Workqueue: events drm_fb_helper_damage_work [ 1325.072112][ T5985] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 1325.078108][ T5985] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 1a bc eb fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1325.097931][ T5985] RSP: 0018:ffffc900050df860 EFLAGS: 00010246 [ 1325.104047][ T5985] RAX: 1ffff11028edec00 RBX: ffffffff8f8d2670 RCX: 0000000000000000 [ 1325.112148][ T5985] RDX: ffffffff8be71c40 RSI: ffffffff8be8ca60 RDI: ffffffff8f8d2670 [ 1325.120315][ T5985] RBP: ffffc900050df948 R08: ffffffff8f822577 R09: 1ffffffff1f044ae [ 1325.128339][ T5985] R10: dffffc0000000000 R11: fffffbfff1f044af R12: ffffffff8be8ca60 [ 1325.136314][ T5985] R13: ffff8881476f6000 R14: 1ffff92000a1bf10 R15: ffffffff8be71c40 [ 1325.144352][ T5985] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1325.153313][ T5985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1325.160167][ T5985] CR2: 00007f11c9db7f18 CR3: 00000000264be000 CR4: 00000000003526f0 [ 1325.168484][ T5985] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1325.176462][ T5985] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1325.184511][ T5985] Call Trace: [ 1325.187937][ T5985] [ 1325.190894][ T5985] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1325.196571][ T5985] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1325.202743][ T5985] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1325.208644][ T5985] ? lockdep_hardirqs_on+0x7b/0x110 [ 1325.213855][ T5985] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1325.219772][ T5985] ? drm_vblank_get+0x150/0x270 [ 1325.224640][ T5985] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1325.230953][ T5985] drm_fb_helper_damage_work+0xc9/0x710 [ 1325.236563][ T5985] ? process_scheduled_works+0x9ef/0x1770 [ 1325.242399][ T5985] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1325.248649][ T5985] ? process_scheduled_works+0x9ef/0x1770 [ 1325.254398][ T5985] ? process_scheduled_works+0x9ef/0x1770 [ 1325.260489][ T5985] process_scheduled_works+0xad1/0x1770 [ 1325.266080][ T5985] ? __pfx_process_scheduled_works+0x10/0x10 [ 1325.272584][ T5985] worker_thread+0x8a0/0xda0 [ 1325.277223][ T5985] ? __kthread_parkme+0x7b/0x200 [ 1325.282229][ T5985] kthread+0x711/0x8a0 [ 1325.286330][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 1325.291509][ T5985] ? __pfx_kthread+0x10/0x10 [ 1325.296117][ T5985] ? _raw_spin_unlock_irq+0x23/0x50 [ 1325.301396][ T5985] ? __pfx_kthread+0x10/0x10 [ 1325.306025][ T5985] ret_from_fork+0x510/0xa50 [ 1325.310675][ T5985] ? __pfx_ret_from_fork+0x10/0x10 [ 1325.315808][ T5985] ? __switch_to+0xc9e/0x1480 [ 1325.320572][ T5985] ? __pfx_kthread+0x10/0x10 [ 1325.325190][ T5985] ret_from_fork_asm+0x1a/0x30 [ 1325.330091][ T5985] [ 1325.333116][ T5985] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1325.340403][ T5985] CPU: 1 UID: 0 PID: 5985 Comm: kworker/1:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.351345][ T5985] Tainted: [L]=SOFTLOCKUP [ 1325.355669][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1325.365725][ T5985] Workqueue: events drm_fb_helper_damage_work [ 1325.371806][ T5985] Call Trace: [ 1325.375088][ T5985] [ 1325.378054][ T5985] vpanic+0x1e0/0x670 [ 1325.382099][ T5985] panic+0xb9/0xc0 [ 1325.385831][ T5985] ? __pfx_panic+0x10/0x10 [ 1325.390286][ T5985] ? ret_from_fork_asm+0x1a/0x30 [ 1325.395269][ T5985] __warn+0x317/0x4b0 [ 1325.399281][ T5985] ? drm_wait_one_vblank+0x39a/0x5c0 [ 1325.404606][ T5985] ? drm_wait_one_vblank+0x39a/0x5c0 [ 1325.409930][ T5985] __report_bug+0x288/0x500 [ 1325.414431][ T5985] ? drm_wait_one_vblank+0x39a/0x5c0 [ 1325.419735][ T5985] ? __pfx___report_bug+0x10/0x10 [ 1325.424783][ T5985] ? drm_wait_one_vblank+0x58c/0x5c0 [ 1325.430066][ T5985] ? drm_wait_one_vblank+0x587/0x5c0 [ 1325.435439][ T5985] report_bug_entry+0x19a/0x290 [ 1325.440308][ T5985] ? drm_wait_one_vblank+0x587/0x5c0 [ 1325.445627][ T5985] ? drm_wait_one_vblank+0x58c/0x5c0 [ 1325.450937][ T5985] handle_bug+0xca/0x200 [ 1325.455179][ T5985] exc_invalid_op+0x1a/0x50 [ 1325.459675][ T5985] asm_exc_invalid_op+0x1a/0x20 [ 1325.464534][ T5985] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 1325.470546][ T5985] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 1a bc eb fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1325.490148][ T5985] RSP: 0018:ffffc900050df860 EFLAGS: 00010246 [ 1325.496210][ T5985] RAX: 1ffff11028edec00 RBX: ffffffff8f8d2670 RCX: 0000000000000000 [ 1325.504175][ T5985] RDX: ffffffff8be71c40 RSI: ffffffff8be8ca60 RDI: ffffffff8f8d2670 [ 1325.512149][ T5985] RBP: ffffc900050df948 R08: ffffffff8f822577 R09: 1ffffffff1f044ae [ 1325.520118][ T5985] R10: dffffc0000000000 R11: fffffbfff1f044af R12: ffffffff8be8ca60 [ 1325.528170][ T5985] R13: ffff8881476f6000 R14: 1ffff92000a1bf10 R15: ffffffff8be71c40 [ 1325.536152][ T5985] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1325.541797][ T5985] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1325.547875][ T5985] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1325.553699][ T5985] ? lockdep_hardirqs_on+0x7b/0x110 [ 1325.558897][ T5985] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1325.564706][ T5985] ? drm_vblank_get+0x150/0x270 [ 1325.569568][ T5985] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1325.575814][ T5985] drm_fb_helper_damage_work+0xc9/0x710 [ 1325.581369][ T5985] ? process_scheduled_works+0x9ef/0x1770 [ 1325.587101][ T5985] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1325.593370][ T5985] ? process_scheduled_works+0x9ef/0x1770 [ 1325.599120][ T5985] ? process_scheduled_works+0x9ef/0x1770 [ 1325.604887][ T5985] process_scheduled_works+0xad1/0x1770 [ 1325.610460][ T5985] ? __pfx_process_scheduled_works+0x10/0x10 [ 1325.616459][ T5985] worker_thread+0x8a0/0xda0 [ 1325.621056][ T5985] ? __kthread_parkme+0x7b/0x200 [ 1325.626012][ T5985] kthread+0x711/0x8a0 [ 1325.630083][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 1325.635191][ T5985] ? __pfx_kthread+0x10/0x10 [ 1325.639801][ T5985] ? _raw_spin_unlock_irq+0x23/0x50 [ 1325.644999][ T5985] ? __pfx_kthread+0x10/0x10 [ 1325.649594][ T5985] ret_from_fork+0x510/0xa50 [ 1325.654177][ T5985] ? __pfx_ret_from_fork+0x10/0x10 [ 1325.659282][ T5985] ? __switch_to+0xc9e/0x1480 [ 1325.663980][ T5985] ? __pfx_kthread+0x10/0x10 [ 1325.668577][ T5985] ret_from_fork_asm+0x1a/0x30 [ 1325.673395][ T5985] [ 1325.677009][ T5985] Kernel Offset: disabled [ 1325.681341][ T5985] Rebooting in 86400 seconds..