last executing test programs: 21m32.555946746s ago: executing program 32 (id=478): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f00000000c0)=ANY=[], 0xfe, 0x4fb, &(0x7f0000000b00)="$eJzs3N1rJWcZAPDnnZyTPUmX9vRru9qCQZFdW7sk2bS7GpFuu8YKQcE0Bb1Q0nysoflYklSa4kdBFEFB8EILXveiRWQVQekf4IXXKkJvxAsvJUjBCxFlJnM+kpxuoicn2Wx+P8g575l5Zs7McJ533vfNzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEPHsZ64Nj6Tj3goA4Ch9fuqLw6PO/wBwqryg/w8AAKdFiiw+ESnG/7qVLhSft9UmF1deeXX6+kTnxQZSsWRfEZ//1UZGL4899fSVq4332y9/2D4QX5h64drQc6vLN9fm19fn54amVxZnV+fmD7yGbpff7fHiAAwtv/zK3MLC+tDopcs7Zr9a/9uZe87Vx6+OPTXbiJ2+PjEx1RZTqf7f376HHh6d9EcWv4oUb3zyF+liRGTRfS7sU3f02kBU8vwrdmL6+kSxI0uLMysb+czUSITKzpzob+TIEeRiVy5GPJlva7+MpnvVyOJapPhQbKWPRURfIw+eKP4xuP8KKkewkR3k23klIp6PE5CzcIc6E1n8NlIs31eLx48vnYFjUIksvh8pLnx6Kz1RtAfy82nebJ58cehzKwurbbEplWfUk94/OEp72iZ9xau2CXeCWmRxsWjxb6WPH/fGAEdqILL4cqT40x+/XowrRTEufd/41a8+M9w+wvTIPuvJYy9FxOgB++TVxlhjvmx2uPsEAAAAAAAAAAAAd7tayuLnkeKbj9aKz8+XF8hXIuI/uePeQKB3Uhb/jhQv/nKruDW+/bkUfW3P92g66ff+9Hb7B2rPrd7cXFu88bWNjvMHa9deWt9Ym5ntPDsGota6Lrqw33MMoAvVlMWHI8Wjk7dav7t6ysvlrcCtH9qbn2r9Nmtp19yi3rh3+3k2jXsIvjLx0fZyx5/s/3Dvfr38XvcoA0B3Usri95Hisy+dL86rKQZjTxu0jDsTKd77+2NlXNafFxqn6XrxWltYXJofzmN/HSkGvteIjSJ2sIx9sBU7ksc+Gyl+/IOdsfeUsQ+1Ykfz2O9Eit+90Tn24Vbs5Tz2p3m7ZmqoETuYFx4uY8+1Yi/Nri7N9ewAwx0sb/+/FSmW7h1KjVwu86VsZvc1Y9/8Rqu9//ruFb1Pm7/b9n+9bdrrZT2U1xcL75wv6p6ivqp0rq/+HCl+86/HyrjtuqK/nH9/8dqqr96OFG+9uzO28aCQB1qxIwc+sHAC5Pl/NlL8YfNWMzfK/C8zsK3/35b/Hyxrh9aYQW/y//62afXye88czq7Dqbe++drLM0tL82sKCgoKzcJx10xAr+Xt//cixc+W3m32d8v2/9ntT63+/z+/1Wr/j+9eUY/a/w+0TRsveyPVSkRtY/lm9ZGI2vrma08uLs/cmL8xvzI2PPL06MjY2OiVan+jc98qdX2s4G6T5/93I8Xql95ujs/v7P93Hv8b3L2iHuX/g23TBnf0V7redTj18vyfjBQ/+cet5v/Rbjf+1xjvu/iR7ffmw7R7lP8PtU2rl9979nB2HQAAAAAAAAAAAE6sasriR5HiLz+spMazMQ5y/e+eB2b06Pq/c23T5o7ofsWuDyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO8riyxWI8U7z2ylb+cTzkdcaH8H7lr/DQAA///MyCp6") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x11d) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='utf8=0,nonumtail=0,iocharset=iso8859-14,check=strict,uni_xlate=1,shortname=lower,shoru~ame=winnt,flush,\x00'], 0x0, 0x21e, &(0x7f000001fc00)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000001900)='./bus\x00', 0x0, 0x21002, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) 20m47.440626266s ago: executing program 33 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x10001, 0x20000) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x7, 0xfffffffffffffff2}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) 17m16.105570348s ago: executing program 34 (id=1193): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) 17m14.522618057s ago: executing program 35 (id=1195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde"}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\b'], 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 16m56.098074008s ago: executing program 36 (id=1233): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x11) landlock_restrict_self(0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$unix(0x1, 0x1, 0x0) getpid() r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m4.64729365s ago: executing program 8 (id=1989): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 13m3.741170323s ago: executing program 8 (id=1991): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x83a}]}) accept4(r0, 0x0, 0x0, 0x800) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, 0x0, 0xb) fcntl$setpipe(r4, 0x407, 0x0) write$char_usb(r4, &(0x7f0000000440)="93", 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) dup2(r2, r1) 13m2.227003648s ago: executing program 8 (id=1996): r0 = syz_usb_connect(0x0, 0x38, &(0x7f0000000500)=ANY=[@ANYRESOCT=0x0], 0x0) syz_usb_connect(0x1, 0x8b8, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0xa7, 0x65, 0x9, 0x40, 0x1266, 0x100f, 0x3def, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a6, 0x4, 0x0, 0x7f, 0x60, 0x7f, [{{0x9, 0x4, 0x27, 0xb, 0x10, 0xff, 0xf, 0x90, 0x1, [], [{{0x9, 0x5, 0x0, 0xc, 0x20, 0x5, 0x81, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x81, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x7ff}, @generic={0xf, 0xb, "d953b8f43bdc460a579220b9ab"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xc3, 0x5, 0x6, [@generic={0x10, 0x977640e6ace340d6, "51b0867616ae7f2e3f1a1b8b011b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xc818}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x0, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x66, 0xc29}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x6, 0x5, 0x5}}, {{0x9, 0x5, 0xc, 0x1, 0x200, 0x6, 0x7, 0x6}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x2, 0x3, 0x6, [@generic={0x4d, 0xc, "9a3d157c7270a7a2a6d97f74889307ccd1ad2b57763de0f805dd307ad045b49af6c4807149907a28c120379901df8876c8cfc08837bda788bbad029589e4a212ad87073ae323e870678b4b"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0xff, 0x98, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x38, 0x4}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0xff, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x100}]}}, {{0x9, 0x5, 0x9, 0x10, 0x28, 0xcc, 0x3, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x9, 0x7, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x9, 0x9, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x101}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0xc, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb3, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x15, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x5, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0x4c, 0x3, [@generic={0xbe, 0xb, "af958b294f4e763f2634b1e1b1400a09fe76029c51a0ff8d41f743b9c495280bd731361859a7d0974315b3a640fae65b0d264d2766819847f8261c9630e943a3cde70fd6c96a2b687fdcbf8664f30f766f4515dc526b50d981f77f8dc791e6d59518682e018ded225f7f841a8e445bf2797fc1d57b97f815eb40c0671b2844881048582dde612bf1b73b9431b5ce5467a6ab2ed5af0e6d8fec26768c6c47e36807ad7de80cff8dd405463949c1ab09a1d811d22f1b767293184dd2e4"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xc, 0x7, 0x0, [@generic={0x43, 0xe, "89c23e1df0ac29bed288e0070d2d24ec7c8e168a4d89ffea532fd4b9b86097f04655362d650666ba0d2e76521e189401a747f8ecfc338d281c941b22703bda74b1"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x8}]}}]}}, {{0x9, 0x4, 0x5, 0x18, 0x8, 0x22, 0xa, 0x5e, 0x8, [@hid_hid={0x9, 0x21, 0xfe00, 0x5, 0x1, {0x22, 0x5bd}}], [{{0x9, 0x5, 0xb, 0x1, 0x20, 0x6, 0x76, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x9, 0x1, 0x2, [@generic={0x75, 0x31, "634402b55e4dc9e50269d16925c3d44326a03a38e44493651e5003d8dd84e9312cb8511466ade777e188e5e76c88d8376644b83b135f967749e383879ca4f8e151957bba3f714223b06eacc07e22597482d4fb52347a9635371f84eaf9f016328dc3ee340eef7976ab4e740ef5a4b69a3430de"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x628}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x1, 0x1, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x85}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x4, 0xe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x1}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x1, 0x3, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x6, 0x1, 0x1, [@generic={0x1b, 0x21, "70ded076c2e4b38e5c3375834b4a0fa618ed52851dba2d0e0f"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xff, 0xc, 0x1, [@generic={0xa8, 0x3, "5621f4a8bde7dd28766a89d203029311968646e23531d5394d2edfe36d88b65e1a95307cf8ab6146726c6d22ac52172e3479f2813ade46b6e1c74c55d3d5a1d1575d8bd80dc44c2cc8ed5474ef30fba153cfc6f7c265bd9bd6058d99ab533fd2880c7b9a008dff2ea3e5db1b7c637987e5b7ce2298812afae681da48e15e2250611af6c69c129f514c9131300d59fa0c57e5c5a72d502735b76a74c032acec79c1b45f2a5cdc"}, @generic={0x102, 0x22, "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"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x4, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x6}]}}]}}, {{0x9, 0x4, 0x14, 0xa3, 0x6, 0xfe, 0x27, 0x58, 0xb, [@hid_hid={0x9, 0x21, 0x76, 0x27, 0x1, {0x22, 0x2ab}}, @generic={0x25, 0x3, "58e770b8f2a906d5be3d0fdd23df6e10f343b5f5c81d7ce82ba1adcb577f0fab750f01"}], [{{0x9, 0x5, 0x8, 0x2, 0x200, 0x7, 0x5, 0xa}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x55, 0x7, 0xa9}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x0, 0xc, 0x7}}, {{0x9, 0x5, 0xf, 0x12, 0x40, 0x7, 0x3, 0x1}}, {{0x9, 0x5, 0xb, 0x10, 0x3a7, 0xa, 0x4, 0x40}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x9, 0x9, 0x8}}]}}, {{0x9, 0x4, 0x4, 0x1, 0x9, 0x75, 0x17, 0x1b, 0x4, [@hid_hid={0x9, 0x21, 0x7, 0xf, 0x1, {0x22, 0x260}}], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0xf, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x1a}, @generic={0xbc, 0x4, "8e18d11f4d90d75f7ba7b8f15debf05b2eb7d41ea4acf2d3f7662347200bbd1d3778d9551629e7a32e9d12f4bd34e2ece91601818e53bb8886518cd7138580bc5d5f80cc6738692d54d7006cfc9fa46750ae8669cc9c65bf5493749becc23508577c42c8b80a88a1faa08fcb7615dea48b830a77866ab30ff81256eb340a8453d9654b7edfff849299cdcda8286800a3984dc0072edf7120d66f9cb65b8421b40a5a040dc495077f63f068bd7abfa2c0051794459ce9c0fb88f5"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x3, 0x3, 0x7f}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0xe4, 0x1, 0x5b, [@generic={0xe2, 0x1, "b27f173650a2daf3a7e48d78f93ef248a2db825b871416ad5447a64865bcb56b0006a3c7d5f3a14b025ecaf50ec6fe9ea8b52f358640a9505484750b76ced81dbd7314da02fb48ff2942da74d88181aeb10cfc683e72ee2e8726cc638908d9675bb98465d58d495dbd3acff51af1e9cfe7912dd8c9ddb9a180dc5d1d45bd5c5deda8ff70c031ef3244882d8d7c7d2a67ce53b763d2e19132f1fe13a98c7366fb6265af9f9ea8834e2936fe95840f1453714fa17f00548946bf89b979e1ee6149a481e6e0897e60e1d01d616e3d0e00d540f130b5bc6026f475c7eecfa043bca8"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x7ff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xf7, 0x0, 0x76}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x9, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}, @generic={0x97, 0x22, "088be522ecd5b6dc0b52fec24c9c57cd642c3b4441b54c3cc9de1bb6ce494ea92fdfbdc174f83496128da30a81801c54235e161625af0606606a82eff2c45dcf1def52da7aa0494704a980ff13ec78b9951405a102fee6c42dd383cb0a4bbf87c8ff80a52c17cd4c11ec186c3a0d42a3bcab998147451cabee9269380bdd2b40601984f0f6cc05d5278c5e66f3316fdae2734ca248"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x1, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7}, @generic={0x5d, 0xa, "eab18b01961dad076349a196ceb8b4796d771e5f5d1671b5f5c0107179fcbe2aa0cec2dc750d015b13bbd2b19dbc81faea30e02e483e9fd88fb793804542f1786be07b72d35b69e3ffb92b1fb69b7a8836f341a2a19c3f433b5add"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2, 0x81, 0xeb}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xff, 0x1e, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xb2, 0x19a}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xcb, 0x7}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x5, 0x1, 0x9}}]}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x7, 0x3, 0x6, 0x10, 0x9}, 0x11f, &(0x7f0000001300)={0x5, 0xf, 0x11f, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x720a4ba, 0xf00, 0xfffd, [0x50, 0xffc000, 0xc030, 0x3f00, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x1, 0x80, 0x0, 0xc}, @generic={0xcf, 0x10, 0x8, "b64e0b4f7b7bf7f058d9e3979bbe5855975f7dcfe00b0b0d12f3c9b3758f7ae9d419dbe6769fb721914f222b52b8b109c938359bb8cff61feebd5c3806b98a1865f48f29a62f476878954a1c99dca12ff808b267d86098125a2838223b9aa74dc297a53c9829127b88bbf996e6eb2b974b6e3d7f4540a16d6e5d453aca80c897538a47122fc9ecf0a7c7feab123cfb2a72cd0de79a06749f62a376cab6b4aa4c80f15fde4eea5ec59f781b65d949951f60921a0bf6adda514b3930205c3e671cee26f85c2096b0b10381eb50"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x0, 0x8, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x9, 0xa413}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3e, 0xd, 0x1, 0x9, 0x6}]}, 0x5, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x810}}, {0x10, &(0x7f0000000940)=@string={0x10, 0x3, "e65f57a0ec3145ada6abc5ea04cb"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x44}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00030400e54eab32cfd631bd80409c2400000403f804"]}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000470000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000001880)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000002400000008000200", @ANYRES32=r5], 0x1c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0, 0x10042}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2e22, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x36f}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x9, 0x1}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0xa, 0xad, 0x9c, 0x10, 0x2}, 0x9d, &(0x7f0000000980)={0x5, 0xf, 0x9d, 0x3, [@generic={0x27, 0x10, 0x2, "8020631f86aedbd0041d83ed3f103a1316166255be9176b5472f59dd77b050d32f1565ca"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xa, 0xff, 0x1000}, @generic={0x67, 0x10, 0x3, "4fdeb7ab85015d59392b5980d0c2461a81a6ea67b6145f7b7ee6da3b41d74762e1d8ecdaebe9f654f03f4e0f7d44456aa3780e2c4a73be3e6ab5220f309a74508b8b2150f884664768cff441cac9f9cdb75e224998dddd42aeff30640e43c326031700cf"}]}, 0x6, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x861}}, {0xd9, &(0x7f00000007c0)=@string={0xd9, 0x3, "23adb73674414974a6a4b586d193d30f59ec9237a91fe8236ca0af46947a366aac9a041793460eb86f7123be133ca45f88d0b9c0ac89036d2ebf39d168ae65f693a8c3d287443f79bb79b0b952f2fabc57eea08c4d942e204df231d48f4b12aad6ed53941e2d6e3473710fd2bdda1c998474f9c4302b3d7b23e629fde7f7efd9ff44efcc6e74c06c1d71c77d0eb4331d6a8d16e055af38d9965b1b0544eb4fc46fa59c054a9aa8a20bc693a02d1d3028100a6496f42e41fe868005a40c7aa2880673095ebeaf7cbe69e7c2ba544544ce0860438324148f"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xa8769568f35494db}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x100a}}]}) io_uring_enter(r2, 0x92, 0x0, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="340500000000000061105100000000000400000000000000950000000000000049a8004fe35d297f7a710be239462f2990694bbb9bc21c932d18d9778b5ed7ccda7703161d618363411f87e8a3dc588bfd63fd77146f713a6eb554e7b0f9"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) syz_clone(0x4020140, &(0x7f00000002c0)="96d12588ad723c721f1e8ee60e8c246ba000816c0ab3d1bd16501caa72eda8ba42aacdc65dd87ec8bb48164d6a892c50c211c83f6aec4c4169d3c3f021c86c58385f", 0x42, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000240)="b95b24c11a81e46f03bf5f1a1e2d41b2803f90aef05483af597eca82421c37b0364bbb137310e0c51127") 12m58.640703676s ago: executing program 8 (id=2006): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x1, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@noload}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') lstat(&(0x7f0000009f40)='./file2\x00', 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x2, 0x0, "e661094a2cd20e8612edd3bed9d220ff6cc5fba70000058d5f65cc4fc605c3e5"}) 12m56.099329062s ago: executing program 8 (id=2016): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) (fail_nth: 1) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) 12m54.149584222s ago: executing program 8 (id=2017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r6, 0x1, 0x800000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80000001, 0x0]}]}]}, 0x34}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0), 0x0) r8 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, 0x0, 0x0) 12m52.276904368s ago: executing program 37 (id=2017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r6, 0x1, 0x800000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80000001, 0x0]}]}]}, 0x34}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0), 0x0) r8 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, 0x0, 0x0) 11m14.552172515s ago: executing program 4 (id=2288): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$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") r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46e, 0x5577, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0x9f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x0, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0x9, 0x1}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xe9, 0x0, 0x1, 0x8, 0x6}, 0x101, &(0x7f00000002c0)={0x5, 0xf, 0x101, 0x6, [@ptm_cap={0x3}, @generic={0xdf, 0x10, 0x4, "a597edc8629e169772e70a7e2e851fbabcfdb605487040ffb41e02b6d6bbae5c837cf9f4fb6ccfe16f196bbf06e67f73a41ea0b6ed038a60565929f7d81d3b3268ebd93cadd1a917e145032613b7f527dd347e1fc16aed0c2330b8cc107bd370639105b15c67ecc5c838374cd31cc5e9bf2b2d6eebd2caa33c07c90973d2254a5094709fd97b220e5384b75e2fabe46ade6841f627643973bb4298c987179c4146b0c4e0ee27f51147d203e184f927ab7022df9f80c86e54774c566618c626433d6e32599ea4ff1b8572c8625c8bab5a9e231a391e8e2d4d37cf112e"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0xce}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xf8, 0x6, 0x40}]}, 0x2, [{0x13, &(0x7f0000000100)=@string={0x13, 0x3, "8ebcd92660b3939897f2a96fabf5b29f28"}}, {0x54, &(0x7f0000000500)=@string={0x54, 0x3, "c57f3c839987816f6f57847a38caa49553e88a1185a47bd747a9237554e0fb52b6c0aa158458f873d0946314141adc5d3e2f344cc3a7cce1f0281322058bf418965bc34332e0b59d79734b467ab076b5d148"}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f00000006c0)) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m10.270761152s ago: executing program 4 (id=2298): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c757466383d302c757365667265652c73686f72746e616d653d77696e6e742c757466383d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c756e695f786c6174653d30e68b4ceca068b2d28ccc0507a9e72b3c33e66b203785e0edd043ce3e5c677b0f696cfc2a022bbd920e87f79c528f922aab32393900032c5433b29eaa93cbbfe378d43a5b9b44b83f62cf518dd1d327db25f918f6051b4cdc3b31d1cedcf4"], 0x0, 0x274, &(0x7f0000000280)="$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") r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x6) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000900)) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) ppoll(&(0x7f0000000000)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) unshare(0x4040600) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3a00014, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES8], 0x0, 0x61f, &(0x7f00000001c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) fsync(r5) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) signalfd(r6, &(0x7f00000006c0), 0x8) statfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)=""/66) 11m7.131298804s ago: executing program 4 (id=2309): openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getegid() getresgid(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x180, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@mcast1, @empty, [], [], 'xfrm0\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000700)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000006c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r5, &(0x7f0000000280)="02042800ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) r8 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xa, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r8, &(0x7f0000000a00)={0x14, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="00039b00000000000000"]}, 0x0) syz_usb_control_io(r8, &(0x7f0000000fc0)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, 0x0, 0x0, 0x0}, 0x0) timer_create(0x6, &(0x7f0000000600)={0x0, 0x9, 0x1, @thr={&(0x7f0000000500)="589adfa2d6b4dfea520a9c31bd7aeca4fc91b3a364bbd34d79b251acbae1e3cde357e6f826f592e1726c96ce805cb2177d776eafac7d0096a3181e883570e4443b38de256893ae91e30d43f260d8e8dedba5827b938d105a060984c9d5e013e1c69628376d1a018aec4b5f263dd8cff0d6df9187c1e8b12c4498a25edda310a548c0e98087cd4f4ac7b5237f12729f70b6e6c9a567b12a7c0c27ea9ec66986d9c94f13ba4b4db0d75ee421d3944cb4f03d15e1017c4f4ddcaa7e3486d1a4cc76905b04a226dc7cdf233f", &(0x7f0000000380)="4c42da0b36bcc756a87222ca815c5a5e1c0d8bc6e611ee0146f21196dc759d047733b8389210fb6f1f872645e276340be22841b3e165847374b4fec0b2c39811367084eaf2f431670b6cc3736466d1aecb7b06186335f50b07dd763d7a736faa6a108092c180bf458f7aeddd2d1f897b1b145b3b1e0a725f9997bc81d3e961e6ffa437db3dc09d60465caa188607c246fd41b18f2934ad4e9a34ee9009cd141ecc"}}, &(0x7f0000000640)) 11m3.347640449s ago: executing program 4 (id=2316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000470000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x4000}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) 11m2.29043405s ago: executing program 4 (id=2320): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10m56.538502286s ago: executing program 4 (id=2333): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x43, 0x4a, 0x50, 0x40, 0x4e8, 0xff30, 0x6c67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb7, 0x0, 0x2, 0xc3, 0x27, 0x56, 0xb, [], [{{0x9, 0x5, 0xc, 0x3, 0x40, 0xf2, 0x7, 0x14}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x0, 0x80}}]}}]}}]}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010065727370616e0000280002800400120005001600b900"], 0x60}, 0x1, 0x0, 0x0, 0x20044091}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000100000000000000000000000000000000000000000900010073797a30000000002c000000160a00000000000000000000000000000900010073797a30000020000900020073797a30000000002c000000180a0800000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) 10m40.650834219s ago: executing program 38 (id=2333): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x43, 0x4a, 0x50, 0x40, 0x4e8, 0xff30, 0x6c67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb7, 0x0, 0x2, 0xc3, 0x27, 0x56, 0xb, [], [{{0x9, 0x5, 0xc, 0x3, 0x40, 0xf2, 0x7, 0x14}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x0, 0x80}}]}}]}}]}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010065727370616e0000280002800400120005001600b900"], 0x60}, 0x1, 0x0, 0x0, 0x20044091}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000100000000000000000000000000000000000000000900010073797a30000000002c000000160a00000000000000000000000000000900010073797a30000020000900020073797a30000000002c000000180a0800000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) 9m59.727381977s ago: executing program 5 (id=2445): r0 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x10, 0x0, 0x0, r1}, 0xc) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2) getsockname(r3, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00'}) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 9m57.115502032s ago: executing program 5 (id=2450): set_mempolicy(0x4005, &(0x7f0000000180)=0x10000000005, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000001bc0)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x3, 0xa73, &(0x7f0000003cc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) truncate(&(0x7f0000000340)='./file2\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fstatfs(r5, &(0x7f0000000200)=""/18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r5}, 0x10) ioctl(r4, 0x7fffffff, 0x0) 9m53.80945225s ago: executing program 5 (id=2459): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008000c00004e07006c001a"], 0x94}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = eventfd2(0x55, 0x80800) r5 = dup2(r3, r4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000016c0)={0x0}, &(0x7f0000001700)=0xc) r7 = geteuid() r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000001c80)={0x0, 0x9, 0x3, r5, 0x0, &(0x7f0000001c40)={0x990a67, 0xd9, '\x00', @ptr=0x7}}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f0000001780), 0x5, 0x12403) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000017c0), 0x214000, 0x0) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001800)={0xffffffffffffffff}, 0x4) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001840), 0x40, 0x0) r15 = gettid() tkill(r15, 0x12) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001880)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000001980)=0xe8) lstat(&(0x7f00000019c0)='./file0/file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000001c00)={&(0x7f0000001180)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001200)="61d216f5301d3105243697995060a25d3ae22c9fec72dd151e0a06d88f9198e29269c47f133764909062e085a2f9973ec342a45754d413027c7f2ffafaa159f515744845ac7ad684", 0x48}, {&(0x7f0000001280)="2c826e3f5df80e7585d16496dda6e737f5ffd43361e5fa8ca685de4d90b276f4849eb54e527937044b08ef2884a090a762c75f017be8c8004fdfadabd7a4abc88af4047a44bb39bbe0ff78f037626c9b6a7fd8d85cdde4", 0x57}, {&(0x7f0000001300)="6133b2b386b5c73e0b96288f1342d3e8c817eee34890599b97000c871db7252f67ebde959e6f7e1f425202333b14fa8d3602497a62e712bdc4713a5957324651d853ac4d7901559cb03c447c0487c97a392d45585783f7f1e7877bde8b5a976f58733a151ac59d702e87c4bbc25f587bc1567f3702c0f69247845e7280452bf1d78523ca84e970fa39fdafef8bf7d1dbdefd7b7c8274c1b26474755d6bf20a554a7a77ec3aedf53a536f874385eb234dd2018f06a1be01f9e7b9b4a4461bef804c147f8b5836fd0b1ee209fe158cf3bdc0ddcce79037600ed13451e8875be9923ad3dff7bbb16344bde1a6192f89", 0xee}, {&(0x7f0000001400)="e0bd1c53de8b9ea5ae7f6a4b62423992d2bad17b8cb2033804df81b59dd6c1d18974aab89f254a085c2fab4c4179debfa3007b2cc43117cb746b846d328cae8bc0e18338767e2b02f3bfab5d2aa85566440b69f941b484d7ed59edefa5f9ac3430e72306fb9578bf7da4b44c100d00dfc8ccd10d4c", 0x75}, {&(0x7f0000001480)="e7ea22ac41784798fb6ac7ae43db39838dfd2160835616ee0d56be01a13a607651fc08d82f8217e2e06adf5bd05abb8c6a1460868efdf1d5dff0e2005ff4ae77f82b433420b9f6f021a41c39b867eefc9bd059597a1c417ed825c59d3b0f619b44f497d1e508615d62338a9131c58fa3007472c2949f2b22506e2ec716d959a510f8938ddeafbea63d4f5f26b6ac049eb3f71a617435f59af9086d737f61fadd02a68d", 0xa3}, {&(0x7f0000001100)="a7cf6f78a108708c873699eada0d5b23b50f613cea9e3c3ddb985bd667af98496806434390228f8c9018465c3384bc1139596365", 0x34}, {&(0x7f0000001540)="6b82a647aef9663d2921459ea6780564c08d5c33ca3dab92945bdfe6e46dd9ce3aa00ee80cb8f720f9d518ceac156167e85531b06f08d9d171e033779008372d631d8c86c038365a118c183787b9a5135ffed1b1aa533b1e815a6b8f2ee4e1b06c0bf7d1e618e74f09371f1a384866f850db35f2d6b69ecb8f126a2b36bee2d7299676c05793b9b2f6de97fd0f288593cd57e5fab674ddfcd7e0e7802cb773012bfe8d53f0006a94707e289ecdf0a289c83ece1a6d63859734fa381d2a8a4d1cf0ff73", 0xc3}], 0x7, &(0x7f0000001a80)=[@rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r2, r2, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r17}}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, r0]}}, @rights={{0x20, 0x1, 0x1, [r8, r2, r0, r2]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r9, r2, r10, r2, r11, r12]}}, @rights={{0x28, 0x1, 0x1, [r13, r0, r0, r0, r0, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r0, r0, r18]}}], 0x160, 0x240408c0}, 0x14) 9m50.182943022s ago: executing program 5 (id=2465): socket$kcm(0x29, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000780), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f00000007c0)=ANY=[@ANYRESOCT], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140)="fd470fb36a61127504caaf80bd7dabd440aab7c954a872635e7bf3e826406617bc5309cb2ed7", 0x0, 0x2}, 0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x4}]}}]}, 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010000010a0103000000000000000005000005b500060043f87bc552c96fbbd0d50e7b43df7d7401aaa39e36776a6966238cdf3abf67f88a010236126523fa5709dd3d1039b203da88142e1aad5d9d622a0d6c11ade2273cf9657a8a3aaf323838b7ba3bd191b25465b2bf5e1202a3005309946d12fd260eff67452422d4b7683c0f39b6b8f6f7dda4f8a43515dc609f09d0de84d4355d9a4a2f6665774b1cbc2022c03e8c136df23680142d4733e09c1e4d243a96a22e4a4c942b2d0000000900010073797a31000000000c000440000000000000000408000240000000020c0004400000000000000005080002400000000100"/256], 0x100}, 0x1, 0x0, 0x0, 0x20044010}, 0xc058) 9m48.042868407s ago: executing program 5 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x9, "04030e01000000"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x1, 0x7}]}, 0xc, 0x3) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000400)={[{@journal_async_commit}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x5}}, {@localflocks}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffa}}, {@noacl}], [{@uid_lt={'uid<', r3}}, {@smackfshat={'smackfshat', 0x3d, '\x1b'}}, {@dont_appraise}, {@hash}, {@measure}]}, 0x1, 0x4701, &(0x7f0000008f40)="$eJzs222IHGcBB/BnNqe5pMn1XtImafqySQQPLceln6r1QzyrNpo2L9pWU+Xcu1wvp3u3592uFgxSgyAKghIEFV+oCqVfakEM9EstQsEXpFUoFUXrF5FCFfxg0AZ6srszuZ3Zvc5mN2lp+/tBOzfPzPPMs/e/eWaemU0hVj21sFpcWC2WloqV2ftXbyl+rlKuLc6FwqvktT4+3bkSOcn+tXPkfR/4yD23hPCHY1/70Nra2lqoGw4dHWj5+fy/T8+2LhODmTr1dju31vTH2iMv/fwtr7RHnhMhhB1t/arbFEL42C9C2BxCGInLRuPllhDCthBCFEJ49Df/+nG23706e+8Lzx07c3jfmanHH3vmwvzRDXeMQvhueffN84sv7t902/PvuEyHBwCAV/TB40fuPjp5IDwZhaFzA+336zvjZXJ/fOfbPnXXwwPr29fozqZXMVQAAADIWJ//D0cvd3hfl7xZS14JPvHAibufita3m9i+vh2668jt7588EL//jdq23xoX/fO9mxrvULPvfbPvf0cy9Tu//10/zsNfffaXS2/tvf9J/5LjDoeoMJFaLxQmJkI4NtVc3xVtLZQrq9V33l+pLZ3s/bhvFOn8C+07xEXd5j+aqZ73/n/3Jz7/sy0D/XyCsZD9q62vF9v/lOkgnf/GY/lPvhR1lf9Ypl5e/nc8vf38rzb38wmyR+RSpPNvnoj7WncoNgeAev7fHMjPf0em/bz8vz917tETPXz/pz7ODEf1vg6mRoCX4/INvsJERjr/ZhCpoTP+RW50/v8vk/81mfbz8r+z8o/f/a2P6/9G4//4VD9tvnmk828GUUztsX7+jxTyz/9rM+3n5f/bU39+9pN9Xavb86/3f9z1vyvp/OMLcXrwbPwmux3/d2baz8t/19h9Dy300O8Pb4n7ORSFsbB+33qufgkbWn9f3ZjS1Dcv93CQN4F0/s3fWurUGWouGuf/cP74vyvTfl7+D+35+ntO9/X9387j/6Txvyvp/Lc0yi4l/5cy+e/OtJ+X/w9P//0v913m8b++flD+XUnnv7Vt+/rzn0JX87/rMvXznv/sG33qkb/2Mf9P+pccN3n+kzyHGI+az3/oLJ3/VRvu1+31f0+mXt75/63/PP/0/n7G/2jQE4A+pPPf1izsMAHsNv/rM+3n5f+Fe7788T/1MP9r3PENJvm3zP83N8uPGv+7ks5/e7Mw9Y+hHmz8v3H9j9pz/28m/xsy7eflf+HQxMBXLvP1v97/8Q6PsmmXzn9ow/3q+f++i+v/jZl6efl/ce9PX7y5r/v/ECbN9XuWzv/qDfdrnP+D+fnflKmXl/93vvHrJx7so/9v76Mu2fyb1/rU6RTfm3c7/y9m2s/L/0fj58/uvwLzv1td/7uSzr/51vxS8s/O//dm2s/L/3tHfrAycAWe/9whfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ6MxsvhEBUmUuuFwsRECGPx+q6wNZopnZyeKVdmP7Mawo64vBhGo/lyZaZUnl5Yqpycmy6Vy5XZEK6Jt+8Ig9FquVKdXiwtX3uxrS3RqbnSSnVmrlQNIeyMy68P25O2Zhaqi6Xlxr5Jnaui0mdrlWpporY6txJ2XyzflpTPr1Rqy9ddbOvqQmVl+VRpafrkwsq7JycnJ8Oei30eieYeqM4tVZu9bW6t10nqDkctH6ax+YaW4326UltZKpUb5Te21ClXZkvlljo3tRyvulJbmi1V56bLlfnkeMWWui2frbF5b7xtPIykPl9SN+tgvLz90PGPHj98oG17MUrnvVRbnJvc3vlvAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3ridve9e3QwgDzbVCCOFg8kMU/5dy9t4Xnjt25vC+M1OPP/bMhfmjnfYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2Lmflyq6OA7AZ8b3vhZIKW2EXAaGiOhOwoJ+EUnlNbJlm9ZBrRIyKAoMI1oWBEFQu6ggaBVU/gVRC5etqk0tWhhEUDE6k5c7wg0vdMx5HhjODHPvmS8M3DtzPocDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+nF2x2JX1l7atXlp6+4PoTM/938IYTRZ3v+8tyP0hBC+fpk5HVZpCz1N/b+ZnBsvXzX5vbd//OH10WTt9RffLa7bHZJ0qOF4Z5KmQ0Nr73+jujP4bHowCSGNXQhRLIw9OVMLIXTELoQofn6cv5j9vv8XuxCi6P9wtyu7/7XYhRDF1t2f+mr5Mx7Vc75+YbDxv7/VI3gbj+isQ29PXnmXuqmV9zJ//0/yzftgNcyeOPL+eewiiGZ2bupo7BoAAIC/61yL/D9sWd6/fzkJPd3l3P9bU/7f29T/6vn/invbb4zNtBVCbCuNTWbHw/va6XPjOzVw9fbrmvGeqpL/V5v8v9rk/9Um/682+X+1yf/JvJL/V9Ljm3sWX8Qugmjk/wAAUD2Hjk9M1YdHspf/TT86y3l9X97W8zz9wa3pgUcN40byw3/b4WMTBw4Oj+T3vTwguLL+Q7p09ns+36O5LUw2zbtotf5D79OF+Wud5U/U/3D+RlFfcV3rPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL3bnnoZBMArD6HdbEbXRqmjCwk+CDzQwIgApzGhABxMGYCAEFDCQc5Z7k2d5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7vX+V18f2lMdJrjUhT2WXX/jmeZj9z3w7L++xx41YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2duBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnAgAA//8DyctB") 9m47.273011834s ago: executing program 5 (id=2477): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000470000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0xff1f}, 0x10) 9m44.970164672s ago: executing program 39 (id=2477): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000470000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0xff1f}, 0x10) 9m21.503085846s ago: executing program 7 (id=2531): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 9m16.941297443s ago: executing program 7 (id=2542): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)) io_setup(0x9, &(0x7f0000000080)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x40, r0, &(0x7f00000000c0)="152649d8636b2c0c5b1da5c0d410808332e3b134064a76541cff9dc077343ee779bc412d473cfd1cab293362f924c92048c7d21e2ab8ed79f9300f7feb33c11a72fa329fbc93c32c2f3236e55b1076dc6ebc6f751f936c64f835bb9216748ceb37d7d524074ec03c6516f7d635c9703e5bc0", 0x72, 0x8, 0x0, 0x1, r2}, &(0x7f0000000180)) 9m16.202972541s ago: executing program 7 (id=2545): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008000c00004e07006c001a"], 0x94}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f00004c7000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00004c8000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000140)=0x7, 0x9, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = eventfd2(0x55, 0x80800) r5 = dup2(r3, r4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000016c0)={0x0}, &(0x7f0000001700)=0xc) r7 = geteuid() r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000001c80)={0x0, 0x9, 0x3, r5, 0x0, &(0x7f0000001c40)={0x990a67, 0xd9, '\x00', @ptr=0x7}}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f0000001780), 0x5, 0x12403) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000017c0), 0x214000, 0x0) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001800)={0xffffffffffffffff}, 0x4) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001840), 0x40, 0x0) r15 = gettid() tkill(r15, 0x12) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001880)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000001980)=0xe8) lstat(&(0x7f00000019c0)='./file0/file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001c00)={&(0x7f0000001180)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001200)="61d216f5301d3105243697995060a25d3ae22c9fec72dd151e0a06d88f9198e29269c47f133764909062e085a2f9973ec342a45754d413027c7f2ffafaa159f515744845ac7ad684", 0x48}, {&(0x7f0000001280)="2c826e3f5df80e7585d16496dda6e737f5ffd43361e5fa8ca685de4d90b276f4849eb54e527937044b08ef2884a090a762c75f017be8c8004fdfadabd7a4abc88af4047a44bb39bbe0ff78f037626c9b6a7fd8d85cdde4", 0x57}, {&(0x7f0000001300)="6133b2b386b5c73e0b96288f1342d3e8c817eee34890599b97000c871db7252f67ebde959e6f7e1f425202333b14fa8d3602497a62e712bdc4713a5957324651d853ac4d7901559cb03c447c0487c97a392d45585783f7f1e7877bde8b5a976f58733a151ac59d702e87c4bbc25f587bc1567f3702c0f69247845e7280452bf1d78523ca84e970fa39fdafef8bf7d1dbdefd7b7c8274c1b26474755d6bf20a554a7a77ec3aedf53a536f874385eb234dd2018f06a1be01f9e7b9b4a4461bef804c147f8b5836fd0b1ee209fe158cf3bdc0ddcce79037600ed13451e8875be9923ad3dff7bbb16344bde1a6192f89", 0xee}, {&(0x7f0000001400)="e0bd1c53de8b9ea5ae7f6a4b62423992d2bad17b8cb2033804df81b59dd6c1d18974aab89f254a085c2fab4c4179debfa3007b2cc43117cb746b846d328cae8bc0e18338767e2b02f3bfab5d2aa85566440b69f941b484d7ed59edefa5f9ac3430e72306fb9578bf7da4b44c100d00dfc8ccd10d4c", 0x75}, {&(0x7f0000001480)="e7ea22ac41784798fb6ac7ae43db39838dfd2160835616ee0d56be01a13a607651fc08d82f8217e2e06adf5bd05abb8c6a1460868efdf1d5dff0e2005ff4ae77f82b433420b9f6f021a41c39b867eefc9bd059597a1c417ed825c59d3b0f619b44f497d1e508615d62338a9131c58fa3007472c2949f2b22506e2ec716d959a510f8938ddeafbea63d4f5f26b6ac049eb3f71a617435f59af9086d737f61fadd02a68d", 0xa3}, {&(0x7f0000001100)="a7cf6f78a108708c873699eada0d5b23b50f613cea9e3c3ddb985bd667af98496806434390228f8c9018465c3384bc1139596365", 0x34}, {&(0x7f0000001540)="6b82a647aef9663d2921459ea6780564c08d5c33ca3dab92945bdfe6e46dd9ce3aa00ee80cb8f720f9d518ceac156167e85531b06f08d9d171e033779008372d631d8c86c038365a118c183787b9a5135ffed1b1aa533b1e815a6b8f2ee4e1b06c0bf7d1e618e74f09371f1a384866f850db35f2d6b69ecb8f126a2b36bee2d7299676c05793b9b2f6de97fd0f288593cd57e5fab674ddfcd7e0e7802cb773012bfe8d53f0006a94707e289ecdf0a289c83ece1a6d63859734fa381d2a8a4d1cf0ff73", 0xc3}], 0x7, &(0x7f0000001a80)=[@rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r2, r2, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r17}}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, r0]}}, @rights={{0x20, 0x1, 0x1, [r8, r2, r0, r2]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r9, r2, r10, r2, r11, r12]}}, @rights={{0x28, 0x1, 0x1, [r13, r0, r0, r0, r0, r14]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r0, r0, 0xffffffffffffffff]}}], 0x160, 0x240408c0}, 0x14) 9m15.275233988s ago: executing program 7 (id=2549): syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x1103, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000001f80)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000"], 0x54}}, 0x0) writev(r3, &(0x7f0000000040), 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000005000000010000000700000004a80100", @ANYRES32, @ANYBLOB="0100000000000000000036eeec586a00"/25, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="01000000050000000100"/20, @ANYRES32, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x85) 9m12.935670129s ago: executing program 7 (id=2557): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) 9m11.698755306s ago: executing program 7 (id=2561): socket$inet6(0xa, 0x5, 0x78a) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x6) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}]}, 0xc0}}, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_pts(r0, 0x0) r6 = dup3(r5, r0, 0x0) ioctl$TCSETSW2(r6, 0x5437, 0x0) 9m11.349877749s ago: executing program 40 (id=2561): socket$inet6(0xa, 0x5, 0x78a) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x6) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}]}, 0xc0}}, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_pts(r0, 0x0) r6 = dup3(r5, r0, 0x0) ioctl$TCSETSW2(r6, 0x5437, 0x0) 8m46.327706713s ago: executing program 9 (id=2616): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 8m41.996135659s ago: executing program 9 (id=2624): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x9b, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x25}}, {@dev={0xac, 0x14, 0x14, 0x43}}, {@dev, 0x10000000}]}]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xffff}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) 8m40.632997392s ago: executing program 9 (id=2626): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 8m39.806390923s ago: executing program 9 (id=2628): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES64, @ANYRES16, @ANYBLOB="b1f3b5a7d180c8c0739a939e1f4dcc821681d0da1c6c4dff7301b70a8fedb2a303e2261e0df8f7362d40f96521d2b1c77fc15c8e836f7c0cf68beab5222ac785a87c77e4a733c479b0c7aedd836033a381e2a16692a64882a1afc99d0e521d8923f2bb46d1ec6b91eeea16b315a26643d97a9b98d84f8ca55cf834c56935994bfa678e3bd63c201fd04be72989618a9f92f7", @ANYRESDEC=0x0], 0x1, 0xadb, &(0x7f0000000d00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850b0000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x5) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r1) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x1, 0x5004) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@default_permissions}, {@nfs_export_on}]}) ptrace$getregset(0x4204, r1, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r1, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) 8m35.455512849s ago: executing program 9 (id=2639): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008000c00004e07006c001a"], 0x94}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f00004c7000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00004c8000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000140)=0x7, 0x9, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = eventfd2(0x55, 0x80800) r5 = dup2(r3, r4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000016c0)={0x0}, &(0x7f0000001700)=0xc) r7 = geteuid() r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000001c80)={0x0, 0x9, 0x3, r5, 0x0, &(0x7f0000001c40)={0x990a67, 0xd9, '\x00', @ptr=0x7}}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev, 0x0, 0x2b}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0x9}]}, 0x10c}}, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f0000001780), 0x5, 0x12403) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000017c0), 0x214000, 0x0) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001800)={0xffffffffffffffff}, 0x4) r14 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001840), 0x40, 0x0) tkill(0x0, 0x12) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001880)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000001980)=0xe8) lstat(&(0x7f00000019c0)='./file0/file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000001c00)={&(0x7f0000001180)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001200)="61d216f5301d3105243697995060a25d3ae22c9fec72dd151e0a06d88f9198e29269c47f133764909062e085a2f9973ec342a45754d413027c7f2ffafaa159f515744845ac7ad684", 0x48}, {&(0x7f0000001280)="2c826e3f5df80e7585d16496dda6e737f5ffd43361e5fa8ca685de4d90b276f4849eb54e527937044b08ef2884a090a762c75f017be8c8004fdfadabd7a4abc88af4047a44bb39bbe0ff78f037626c9b6a7fd8d85cdde4", 0x57}, {&(0x7f0000001300)="6133b2b386b5c73e0b96288f1342d3e8c817eee34890599b97000c871db7252f67ebde959e6f7e1f425202333b14fa8d3602497a62e712bdc4713a5957324651d853ac4d7901559cb03c447c0487c97a392d45585783f7f1e7877bde8b5a976f58733a151ac59d702e87c4bbc25f587bc1567f3702c0f69247845e7280452bf1d78523ca84e970fa39fdafef8bf7d1dbdefd7b7c8274c1b26474755d6bf20a554a7a77ec3aedf53a536f874385eb234dd2018f06a1be01f9e7b9b4a4461bef804c147f8b5836fd0b1ee209fe158cf3bdc0ddcce79037600ed13451e8875be9923ad3dff7bbb16344bde1a6192f89", 0xee}, {&(0x7f0000001400)="e0bd1c53de8b9ea5ae7f6a4b62423992d2bad17b8cb2033804df81b59dd6c1d18974aab89f254a085c2fab4c4179debfa3007b2cc43117cb746b846d328cae8bc0e18338767e2b02f3bfab5d2aa85566440b69f941b484d7ed59edefa5f9ac3430e72306fb9578bf7da4b44c100d00dfc8ccd10d4c", 0x75}, {&(0x7f0000001480)="e7ea22ac41784798fb6ac7ae43db39838dfd2160835616ee0d56be01a13a607651fc08d82f8217e2e06adf5bd05abb8c6a1460868efdf1d5dff0e2005ff4ae77f82b433420b9f6f021a41c39b867eefc9bd059597a1c417ed825c59d3b0f619b44f497d1e508615d62338a9131c58fa3007472c2949f2b22506e2ec716d959a510f8938ddeafbea63d4f5f26b6ac049eb3f71a617435f59af9086d737f61fadd02a68d", 0xa3}, {&(0x7f0000001100)="a7cf6f78a108708c873699eada0d5b23b50f613cea9e3c3ddb985bd667af98496806434390228f8c9018465c3384bc1139596365", 0x34}, {&(0x7f0000001540)="6b82a647aef9663d2921459ea6780564c08d5c33ca3dab92945bdfe6e46dd9ce3aa00ee80cb8f720f9d518ceac156167e85531b06f08d9d171e033779008372d631d8c86c038365a118c183787b9a5135ffed1b1aa533b1e815a6b8f2ee4e1b06c0bf7d1e618e74f09371f1a384866f850db35f2d6b69ecb8f126a2b36bee2d7299676c05793b9b2f6de97fd0f288593cd57e5fab674ddfcd7e0e7802cb773012bfe8d53f0006a94707e289ecdf0a289c83ece1a6d63859734fa381d2a8a4d1cf0ff73", 0xc3}], 0x7, &(0x7f0000001a80)=[@rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r2, r2, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r16}}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, r0]}}, @rights={{0x20, 0x1, 0x1, [r8, r2, r0, r2]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r9, r2, r10, r2, r11, r12]}}, @rights={{0x28, 0x1, 0x1, [r13, r0, r0, r0, r0, r14]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r16}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r0, r0, r17]}}], 0x160, 0x240408c0}, 0x14) 8m34.060830235s ago: executing program 9 (id=2642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4810) 8m31.958814487s ago: executing program 41 (id=2642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4810) 6.606316175s ago: executing program 0 (id=4156): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x7ffffff5, 0x2000000, 0x886, 0x1, 0x100, 0x4009}) 6.603470007s ago: executing program 2 (id=4157): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 6.379192101s ago: executing program 0 (id=4159): prlimit64(0x0, 0xf, &(0x7f0000000140)={0x3, 0xd}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {r1, r2+60000000}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100001"], 0x3c}}, 0x0) 5.649632788s ago: executing program 0 (id=4162): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) write$P9_RLERRORu(r0, &(0x7f0000000240)={0x23, 0x7, 0x2, {{0x16, 'cpuset.effective_mems\x00'}, 0x885e}}, 0x23) 5.365159977s ago: executing program 2 (id=4165): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22701, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_setup(0x340b, &(0x7f0000000480)={0x0, 0x6cff, 0x1000, 0x0, 0x1002}, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 4.738514796s ago: executing program 2 (id=4167): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.412527364s ago: executing program 0 (id=4169): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x7ffffff5, 0x2000000, 0x886, 0x1, 0x100, 0x4009}) 4.211835535s ago: executing program 6 (id=4172): prlimit64(0x0, 0xf, &(0x7f0000000140)={0x3, 0xd}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {r1, r2+60000000}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100001"], 0x3c}}, 0x0) 3.843683963s ago: executing program 6 (id=4174): r0 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3f, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000080)=""/104) 3.55239459s ago: executing program 0 (id=4175): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 3.305569821s ago: executing program 3 (id=4176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x780a, 0x3d18, 0x0, 0x0, 0x0) 3.002334485s ago: executing program 1 (id=4177): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22701, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_setup(0x340b, &(0x7f0000000480)={0x0, 0x6cff, 0x1000, 0x0, 0x1002}, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 2.659446333s ago: executing program 0 (id=4178): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000840)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.653417586s ago: executing program 1 (id=4179): syz_io_uring_setup(0x38bb, &(0x7f0000000000)={0x0, 0x8001, 0x40, 0x0, 0x202}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100004800c000380"], 0x34}}, 0x0) 2.615538295s ago: executing program 3 (id=4180): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002b00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) r2 = socket$unix(0x1, 0x93f1a92a38d6e932, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, 0x0, 0x0) pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xe0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) read(r5, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xab, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="00000000f800", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}) dup3(r4, r5, 0x80000) r6 = socket(0x2b, 0x1, 0x1) dup2(r3, r5) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x8) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000b40)={0x55, 0xa32d, 0x1, {0x402, 0x1}, {0x46, 0x4}, @ramp={0x4, 0xfff7, {0x3, 0x9, 0x6, 0x7}}}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) r8 = syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000002480), &(0x7f00000024c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, 0x0, &(0x7f0000000240)) 2.491775374s ago: executing program 6 (id=4181): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x2, 0x0, &(0x7f0000000000)) 2.149757351s ago: executing program 1 (id=4182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[], 0x34c}}, 0x0) 2.014285761s ago: executing program 6 (id=4183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000800)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x1, 0x24, 0x67, 0x0, 0x5, 0x21, 0x0, @remote, @broadcast}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x9, 0x7, "704a9c", 0x6, 'LfH'}}}}}}, 0x0) 1.810740949s ago: executing program 2 (id=4184): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300)='@', 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r0, &(0x7f0000000400), 0x20000000}, 0x20) 1.671338631s ago: executing program 1 (id=4185): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x7ffffff5, 0x2000000, 0x886, 0x1, 0x100, 0x4009}) 1.352129117s ago: executing program 6 (id=4186): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) 1.337486521s ago: executing program 3 (id=4187): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r0) 1.135760942s ago: executing program 2 (id=4188): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 1.135465424s ago: executing program 1 (id=4189): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22701, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x1e, 0x21, 0x70bd2a, 0x3, {0x1c, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = syz_io_uring_setup(0x416f, 0x0, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_setup(0x340b, &(0x7f0000000480)={0x0, 0x6cff, 0x1000, 0x0, 0x1002}, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 793.760895ms ago: executing program 3 (id=4190): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x780a, 0x3d18, 0x0, 0x0, 0x0) 492.374211ms ago: executing program 1 (id=4191): r0 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3f, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000080)=""/104) 443.448191ms ago: executing program 3 (id=4192): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}]}, 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 319.702757ms ago: executing program 6 (id=4193): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) 150.992337ms ago: executing program 2 (id=4194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @generic={0x0, 0x2}]}}, {"6cce80206dc3fe0c10b881ce12bde0d45d"}}}}}, 0x4f) 0s ago: executing program 3 (id=4195): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) write$sndseq(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x8}) kernel console output (not intermixed with test programs): device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1476.231720][T11456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.252838][T18617] usb 4-1: Using ep0 maxpacket: 16 [ 1476.271650][T11456] usb 7-1: config 0 descriptor?? [ 1476.295251][T15220] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1476.305242][T15220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.314001][T15220] usb 2-1: Product: syz [ 1476.318427][T15220] usb 2-1: Manufacturer: syz [ 1476.323489][T15220] usb 2-1: SerialNumber: syz [ 1476.331625][T18617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.342248][T18617] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1476.360977][T11456] hub 7-1:0.0: USB hub found [ 1476.372944][T15220] usb 2-1: config 0 descriptor?? [ 1476.389320][T18617] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=e0.0d [ 1476.399071][T18617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.404825][T19403] FAULT_INJECTION: forcing a failure. [ 1476.404825][T19403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1476.407479][T18617] usb 4-1: Product: syz [ 1476.421396][T19403] CPU: 0 UID: 0 PID: 19403 Comm: syz.0.3448 Tainted: G W 6.12.0-rc5-syzkaller #0 [ 1476.425441][T18617] usb 4-1: Manufacturer: syz [ 1476.435928][T19403] Tainted: [W]=WARN [ 1476.435982][T19403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1476.436064][T19403] Call Trace: [ 1476.436119][T19403] [ 1476.440929][T18617] usb 4-1: SerialNumber: syz [ 1476.444561][T19403] dump_stack_lvl+0x216/0x2d0 [ 1476.471181][T19403] dump_stack+0x1e/0x30 [ 1476.475660][T19403] should_fail_ex+0x748/0x7f0 [ 1476.480667][T19403] should_fail+0x2a/0x40 [ 1476.485215][T19403] should_fail_usercopy+0x2e/0x40 [ 1476.490565][T19403] _copy_to_user+0x34/0x120 [ 1476.495385][T19403] simple_read_from_buffer+0x199/0x340 [ 1476.501171][T19403] proc_fail_nth_read+0x1e5/0x2c0 [ 1476.506525][T19403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1476.512384][T19403] vfs_read+0x29d/0xf50 [ 1476.516837][T19403] ? kmsan_get_metadata+0x13e/0x1c0 [ 1476.522367][T19403] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1476.529044][T19403] ksys_read+0x24f/0x4c0 [ 1476.530210][T18617] usb 4-1: config 0 descriptor?? [ 1476.533492][T19403] __x64_sys_read+0x93/0xe0 [ 1476.543325][T19403] x64_sys_call+0x3055/0x3ba0 [ 1476.548322][T19403] do_syscall_64+0xcd/0x1e0 [ 1476.553140][T19403] ? clear_bhb_loop+0x25/0x80 [ 1476.558111][T19403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.564301][T19403] RIP: 0033:0x7f764ff7d15c [ 1476.568971][T19403] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1476.588886][T19403] RSP: 002b:00007f7650d7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1476.597623][T19403] RAX: ffffffffffffffda RBX: 00007f7650135f80 RCX: 00007f764ff7d15c [ 1476.605853][T19403] RDX: 000000000000000f RSI: 00007f7650d7f0a0 RDI: 0000000000000004 [ 1476.614066][T19403] RBP: 00007f7650d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.622282][T19403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.630504][T19403] R13: 0000000000000000 R14: 00007f7650135f80 R15: 00007ffef6d05aa8 [ 1476.638746][T19403] [ 1476.669752][T11456] hub 7-1:0.0: 1 port detected [ 1476.868557][T19392] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1476.875391][T19392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1476.884086][T19392] vhci_hcd vhci_hcd.0: Device attached [ 1476.956517][ T1602] usb 4-1: USB disconnect, device number 69 [ 1476.987340][T19404] usbip_core: unknown command [ 1476.992426][T19404] vhci_hcd: unknown pdu 1877526959 [ 1476.997912][T19404] usbip_core: unknown command [ 1477.055706][T15100] vhci_hcd: stop threads [ 1477.060174][T15100] vhci_hcd: release socket [ 1477.069086][T15100] vhci_hcd: disconnect device [ 1477.202474][T11456] usb 7-1: USB disconnect, device number 60 [ 1477.295513][T15220] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:5d:4f:6b:ba:92 [ 1477.324145][T15220] rtl8150 2-1:0.0: eth5: rtl8150 is detected [ 1477.343704][T15220] usb 2-1: USB disconnect, device number 3 [ 1477.477473][T19410] vlan3: entered promiscuous mode [ 1479.404376][T19431] loop3: detected capacity change from 0 to 512 [ 1479.666150][T19431] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3457: bad orphan inode 13 [ 1479.685884][T15220] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1479.793057][T19431] ext4_test_bit(bit=12, block=4) = 1 [ 1479.798609][T19431] is_bad_inode(inode)=0 [ 1479.803209][T19431] NEXT_ORPHAN(inode)=0 [ 1479.807463][T19431] max_ino=32 [ 1479.810998][T19431] i_nlink=1 [ 1479.815928][T19431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1479.991348][T15220] usb 3-1: Using ep0 maxpacket: 8 [ 1480.077680][T15220] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1480.086956][T15220] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1480.097654][T15220] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1480.388137][T19431] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.3457: Unrecognised inode hash code 20 [ 1480.400401][T19431] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3457: Corrupt directory, running e2fsck is recommended [ 1480.474458][T15220] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1480.484301][T15220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.492891][T15220] usb 3-1: Product: syz [ 1480.497303][T15220] usb 3-1: Manufacturer: syz [ 1480.502358][T15220] usb 3-1: SerialNumber: syz [ 1480.584908][T19424] loop0: detected capacity change from 0 to 32768 [ 1480.596345][T19431] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.3457: Unrecognised inode hash code 20 [ 1480.608297][T19431] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3457: Corrupt directory, running e2fsck is recommended [ 1480.624992][T19431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3457'. [ 1480.725625][T19424] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1480.993550][T15099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.748723][T19450] loop1: detected capacity change from 0 to 1024 [ 1481.804737][T15220] usb 3-1: 0:2 : does not exist [ 1482.025681][T15896] ocfs2: Unmounting device (7,0) on (node local) [ 1482.032874][T15220] usb 3-1: USB disconnect, device number 64 [ 1482.544781][T19450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1482.557651][T19450] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1482.605196][T19464] Cannot find add_set index 0 as target [ 1482.959449][T19450] vlan3: entered promiscuous mode [ 1483.020920][ T1602] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1483.172049][T11456] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1483.240938][ T1602] usb 7-1: Using ep0 maxpacket: 32 [ 1483.358271][ T1602] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1483.368388][ T1602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.377430][ T1602] usb 7-1: Product: syz [ 1483.381943][ T1602] usb 7-1: Manufacturer: syz [ 1483.386792][ T1602] usb 7-1: SerialNumber: syz [ 1483.449494][T11456] usb 4-1: config 0 has an invalid interface descriptor of length 4, skipping [ 1483.461161][T11456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.473274][T11456] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1483.482914][T11456] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1483.491532][ T1602] usb 7-1: config 0 descriptor?? [ 1483.492844][T11456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.753799][T18986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.783754][T11456] usb 4-1: config 0 descriptor?? [ 1484.085846][ T29] audit: type=1326 audit(1730146501.660:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19453 comm="syz.3.3460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f127417e719 code=0x0 [ 1484.311980][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'. [ 1484.449689][ T1602] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7a:a2:44:d3:83:99 [ 1484.474659][ T1602] rtl8150 7-1:0.0: eth5: rtl8150 is detected [ 1484.637508][ T1602] usb 7-1: USB disconnect, device number 61 [ 1484.681319][T11456] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1484.881241][T11456] usb 3-1: Using ep0 maxpacket: 32 [ 1484.909850][T19482] loop1: detected capacity change from 0 to 2048 [ 1484.944346][T11456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.958130][T11456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.968677][T11456] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1484.978179][T11456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.080934][T19487] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1485.126320][T11456] usb 3-1: config 0 descriptor?? [ 1485.207916][T11456] hub 3-1:0.0: USB hub found [ 1485.226877][T19486] loop0: detected capacity change from 0 to 512 [ 1485.477273][T11456] hub 3-1:0.0: 1 port detected [ 1485.726824][T19486] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.3470: bad orphan inode 13 [ 1486.015764][T19486] ext4_test_bit(bit=12, block=4) = 1 [ 1486.021514][T19486] is_bad_inode(inode)=0 [ 1486.026084][T19486] NEXT_ORPHAN(inode)=0 [ 1486.030534][T19486] max_ino=32 [ 1486.033917][T19486] i_nlink=1 [ 1486.038989][T19486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1486.241906][T10190] hub 3-1:0.0: activate --> -90 [ 1486.567124][T11456] usb 3-1: USB disconnect, device number 65 [ 1486.611405][T10190] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1486.648740][T19486] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.3470: Unrecognised inode hash code 20 [ 1486.664338][T19486] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3470: Corrupt directory, running e2fsck is recommended [ 1487.039019][T11456] usb 4-1: USB disconnect, device number 70 [ 1487.302254][T19504] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3470'. [ 1487.700039][T19486] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz.0.3470: path /155/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1487.752645][T19486] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.3470: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1488.182755][T19511] ip6t_srh: unknown srh match flags 744E [ 1488.476748][T19513] loop2: detected capacity change from 0 to 256 [ 1488.537491][T15896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.583154][T11456] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1488.749858][T19513] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x11a70bd0) [ 1488.761860][T19513] exFAT-fs (loop2): invalid boot region [ 1488.767623][T19513] exFAT-fs (loop2): failed to recognize exfat type [ 1488.821069][T11456] usb 4-1: Using ep0 maxpacket: 32 [ 1489.083341][T11456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.093958][T11456] usb 4-1: config 0 has no interfaces? [ 1489.351285][T11456] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1489.364343][T11456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.373143][T11456] usb 4-1: Product: syz [ 1489.377555][T11456] usb 4-1: Manufacturer: syz [ 1489.382553][T11456] usb 4-1: SerialNumber: syz [ 1489.471676][T11456] usb 4-1: config 0 descriptor?? [ 1489.520789][T10190] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1489.685528][T10190] usb 1-1: Using ep0 maxpacket: 8 [ 1489.753301][T10190] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1489.765339][T10190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.774076][T10190] usb 1-1: Product: syz [ 1489.778474][T10190] usb 1-1: Manufacturer: syz [ 1489.783489][T10190] usb 1-1: SerialNumber: syz [ 1489.907590][T10190] usb 1-1: config 0 descriptor?? [ 1489.934104][T10190] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1490.071944][T11456] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1490.224226][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3480'. [ 1490.243399][T11456] usb 7-1: Using ep0 maxpacket: 32 [ 1490.315017][T11456] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1490.324862][T11456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.335833][T11456] usb 7-1: Product: syz [ 1490.340565][T11456] usb 7-1: Manufacturer: syz [ 1490.345595][T11456] usb 7-1: SerialNumber: syz [ 1490.401337][T11456] usb 7-1: config 0 descriptor?? [ 1490.541571][ T1602] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1490.766778][ T1602] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1490.821599][ T1602] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.832543][ T1602] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1490.842045][ T1602] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1490.977720][ T1602] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1490.987474][ T1602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.999953][ T1602] usb 2-1: Product: syz [ 1491.005205][ T1602] usb 2-1: Manufacturer: syz [ 1491.010065][ T1602] usb 2-1: SerialNumber: syz [ 1491.331829][T11456] (unnamed net_device) (uninitialized): Assigned a random MAC address: d2:e7:6f:33:93:f3 [ 1491.349529][ T1602] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1491.357054][ T1602] cdc_ncm 2-1:1.0: bind() failure [ 1491.393286][T11456] rtl8150 7-1:0.0: eth5: rtl8150 is detected [ 1491.482472][T11456] usb 7-1: USB disconnect, device number 62 [ 1491.602340][ T1602] usb 2-1: USB disconnect, device number 4 [ 1491.747037][T15220] usb 4-1: USB disconnect, device number 71 [ 1492.135851][T10190] gspca_sonixj: reg_r err -32 [ 1492.153055][T19552] netlink: 'syz.3.3484': attribute type 21 has an invalid length. [ 1492.161609][T19552] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1492.416830][T10190] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 1492.543930][T19555] syz.6.3486: attempt to access beyond end of device [ 1492.543930][T19555] loop6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1492.557968][T19555] syz.6.3486: attempt to access beyond end of device [ 1492.557968][T19555] loop6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1492.573162][T19555] syz.6.3486: attempt to access beyond end of device [ 1492.573162][T19555] loop6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1492.587052][T19555] syz.6.3486: attempt to access beyond end of device [ 1492.587052][T19555] loop6: rw=0, sector=18, nr_sectors = 2 limit=0 [ 1492.600656][T19555] syz.6.3486: attempt to access beyond end of device [ 1492.600656][T19555] loop6: rw=0, sector=30, nr_sectors = 2 limit=0 [ 1492.614203][T19555] syz.6.3486: attempt to access beyond end of device [ 1492.614203][T19555] loop6: rw=0, sector=36, nr_sectors = 2 limit=0 [ 1492.627536][T19555] VFS: unable to find oldfs superblock on device loop6 [ 1492.807576][T19555] syz.6.3486: attempt to access beyond end of device [ 1492.807576][T19555] loop6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1492.820991][T19555] syz.6.3486: attempt to access beyond end of device [ 1492.820991][T19555] loop6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1492.838426][T19555] syz.6.3486: attempt to access beyond end of device [ 1492.838426][T19555] loop6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1492.853165][T19555] syz.6.3486: attempt to access beyond end of device [ 1492.853165][T19555] loop6: rw=0, sector=18, nr_sectors = 2 limit=0 [ 1492.867300][T19555] VFS: unable to find oldfs superblock on device loop6 [ 1492.967638][T19555] VFS: unable to find oldfs superblock on device loop6 [ 1492.981815][T19555] VFS: unable to find oldfs superblock on device loop6 [ 1493.012675][ T1602] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1493.033813][T19555] VFS: unable to find oldfs superblock on device loop6 [ 1493.062833][T19558] loop3: detected capacity change from 0 to 512 [ 1493.118315][T19555] VFS: unable to find oldfs superblock on device loop6 [ 1493.136810][T19555] VFS: unable to find oldfs superblock on device loop6 [ 1493.177474][T19558] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.3487: bad orphan inode 13 [ 1493.202047][T19555] VFS: unable to find oldfs superblock on device loop6 [ 1493.231798][T19558] ext4_test_bit(bit=12, block=4) = 1 [ 1493.237354][T19558] is_bad_inode(inode)=0 [ 1493.242161][T19558] NEXT_ORPHAN(inode)=0 [ 1493.251099][T19558] max_ino=32 [ 1493.253611][T19555] VFS: unable to find oldfs superblock on device loop6 [ 1493.254402][T19558] i_nlink=1 [ 1493.256171][T19558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1493.293092][ T1602] usb 3-1: Using ep0 maxpacket: 8 [ 1493.298832][T19555] VFS: unable to find oldfs superblock on device loop6 [ 1493.360794][ T1602] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.373230][ T1602] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.377025][T19563] loop1: detected capacity change from 0 to 1024 [ 1493.395800][ T1602] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 1493.405427][ T1602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.414206][ T1602] usb 3-1: Product: syz [ 1493.418609][ T1602] usb 3-1: Manufacturer: syz [ 1493.423598][ T1602] usb 3-1: SerialNumber: syz [ 1493.443946][T11456] usb 1-1: USB disconnect, device number 59 [ 1493.444604][T19568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3487'. [ 1493.549488][T19558] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.3487: Unrecognised inode hash code 20 [ 1493.566227][T19558] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3487: Corrupt directory, running e2fsck is recommended [ 1493.661192][T19558] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 13: comm syz.3.3487: path /211/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1493.865938][T19558] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.3487: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1493.892473][ T1602] usbhid 3-1:1.0: can't add hid device: -71 [ 1493.899089][ T1602] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1494.012388][ T1602] usb 3-1: USB disconnect, device number 66 [ 1494.088140][T19563] loop1: detected capacity change from 0 to 512 [ 1494.140034][T19576] FAULT_INJECTION: forcing a failure. [ 1494.140034][T19576] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.153188][T19576] CPU: 0 UID: 0 PID: 19576 Comm: syz.6.3490 Tainted: G W 6.12.0-rc5-syzkaller #0 [ 1494.164027][T19576] Tainted: [W]=WARN [ 1494.168034][T19576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1494.178336][T19576] Call Trace: [ 1494.181822][T19576] [ 1494.184936][T19576] dump_stack_lvl+0x216/0x2d0 [ 1494.189941][T19576] dump_stack+0x1e/0x30 [ 1494.194409][T19576] should_fail_ex+0x748/0x7f0 [ 1494.199419][T19576] should_failslab+0x17f/0x210 [ 1494.204473][T19576] kmem_cache_alloc_noprof+0xe2/0xb20 [ 1494.210162][T19576] ? skb_clone+0x303/0x550 [ 1494.214883][T19576] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1494.221033][T19576] skb_clone+0x303/0x550 [ 1494.225589][T19576] dev_queue_xmit_nit+0x4d0/0x12a0 [ 1494.230980][T19576] ? __dev_queue_xmit+0xac/0x56d0 [ 1494.236301][T19576] ? kmsan_get_metadata+0x13e/0x1c0 [ 1494.241849][T19576] dev_hard_start_xmit+0x17d/0xa20 [ 1494.247276][T19576] __dev_queue_xmit+0x3562/0x56d0 [ 1494.252602][T19576] ? kmsan_get_metadata+0x13e/0x1c0 [ 1494.258132][T19576] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1494.264791][T19576] ? kmsan_get_metadata+0x13e/0x1c0 [ 1494.270320][T19576] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1494.276469][T19576] ? __dev_queue_xmit+0x355/0x56d0 [ 1494.281906][T19576] __netlink_deliver_tap+0x84c/0xc90 [ 1494.287512][T19576] ? kmsan_get_metadata+0x13e/0x1c0 [ 1494.293063][T19576] netlink_unicast+0x1103/0x1260 [ 1494.298321][T19576] netlink_sendmsg+0x10da/0x11e0 [ 1494.303596][T19576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1494.309195][T19576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1494.314795][T19576] __sock_sendmsg+0x30f/0x380 [ 1494.319754][T19576] ____sys_sendmsg+0x877/0xb60 [ 1494.324844][T19576] ___sys_sendmsg+0x28d/0x3c0 [ 1494.329821][T19576] ? kmsan_get_metadata+0x13e/0x1c0 [ 1494.335378][T19576] ? __rcu_read_unlock+0x7b/0xe0 [ 1494.340619][T19576] ? __fget_files+0x4f5/0x5c0 [ 1494.345605][T19576] ? kmsan_get_metadata+0x13e/0x1c0 [ 1494.351123][T19576] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1494.357275][T19576] __x64_sys_sendmsg+0x300/0x4a0 [ 1494.362551][T19576] x64_sys_call+0x2da0/0x3ba0 [ 1494.367535][T19576] do_syscall_64+0xcd/0x1e0 [ 1494.372334][T19576] ? clear_bhb_loop+0x25/0x80 [ 1494.377303][T19576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.383500][T19576] RIP: 0033:0x7f3108b7e719 [ 1494.388159][T19576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.408073][T19576] RSP: 002b:00007f31099f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1494.416786][T19576] RAX: ffffffffffffffda RBX: 00007f3108d35f80 RCX: 00007f3108b7e719 [ 1494.424997][T19576] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1494.433193][T19576] RBP: 00007f31099f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.441405][T19576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.449607][T19576] R13: 0000000000000000 R14: 00007f3108d35f80 R15: 00007ffc1cb61f18 [ 1494.457828][T19576] [ 1494.529536][T19573] loop0: detected capacity change from 0 to 2048 [ 1494.564873][T19563] ext4: Unknown parameter 'óY”G±xaÑ›ç€yåÝ{ܳn1¬ÞH4—g__ô¿Â/‰²ëŽ}d1»Þ®ùjO+ÎdµÏ§lã¢Ä0#t¼U5×âëû.]X£{~7ƒemôÊØ%ÏÙï^ÿ' [ 1494.605234][T15099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.773540][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3493'. [ 1496.831140][T11456] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1497.030560][T11456] usb 4-1: Using ep0 maxpacket: 32 [ 1497.173400][T11456] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1497.183060][T11456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.191646][T11456] usb 4-1: Product: syz [ 1497.196064][T11456] usb 4-1: Manufacturer: syz [ 1497.201106][T11456] usb 4-1: SerialNumber: syz [ 1497.323413][T11456] usb 4-1: config 0 descriptor?? [ 1497.510944][ T1602] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1497.607555][T19620] loop1: detected capacity change from 0 to 512 [ 1497.645323][T19620] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.3501: bad orphan inode 13 [ 1497.697819][T19620] ext4_test_bit(bit=12, block=4) = 1 [ 1497.703747][T19620] is_bad_inode(inode)=0 [ 1497.708282][T19620] NEXT_ORPHAN(inode)=0 [ 1497.712713][T19620] max_ino=32 [ 1497.716111][T19620] i_nlink=1 [ 1497.721255][T19620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1497.783658][ T9450] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1497.808980][ T1602] usb 3-1: Using ep0 maxpacket: 32 [ 1497.933451][T19620] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.3501: Unrecognised inode hash code 20 [ 1497.946018][T19620] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3501: Corrupt directory, running e2fsck is recommended [ 1498.024339][T19627] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1498.060913][T19620] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz.1.3501: path /16/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1498.115058][T19620] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.3501: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1498.115709][T11456] rtl8150 4-1:0.0: eth5: rtl8150 is detected [ 1498.162807][T15220] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1498.173183][ T1602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.185023][ T1602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.197054][ T1602] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1498.206686][ T1602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.242634][ T1602] usb 3-1: config 0 descriptor?? [ 1498.248452][ T9450] usb 1-1: Using ep0 maxpacket: 8 [ 1498.264905][ T1602] hub 3-1:0.0: USB hub found [ 1498.349744][ T9450] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1498.359397][ T9450] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.372051][ T9450] usb 1-1: Product: syz [ 1498.376467][ T9450] usb 1-1: Manufacturer: syz [ 1498.382503][ T9450] usb 1-1: SerialNumber: syz [ 1498.421552][T15220] usb 7-1: Using ep0 maxpacket: 8 [ 1498.453693][T15220] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.465673][T15220] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.497323][ T1602] hub 3-1:0.0: 1 port detected [ 1498.543448][T11456] usb 4-1: USB disconnect, device number 72 [ 1498.562753][ T9450] usb 1-1: config 0 descriptor?? [ 1498.619490][ T9450] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1498.630891][T15220] usb 7-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 1498.641163][T15220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.649442][T15220] usb 7-1: Product: syz [ 1498.656264][T15220] usb 7-1: Manufacturer: syz [ 1498.661446][T15220] usb 7-1: SerialNumber: syz [ 1498.760007][T18986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.151298][T15220] usbhid 7-1:1.0: can't add hid device: -71 [ 1499.158026][T15220] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1499.163760][ T1602] hub 3-1:0.0: activate --> -90 [ 1499.303746][T15220] usb 7-1: USB disconnect, device number 63 [ 1499.404171][ T1602] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1499.422045][T10411] usb 3-1: USB disconnect, device number 67 [ 1500.513238][ T9450] gspca_sonixj: reg_r err -32 [ 1500.655186][ T9450] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 1501.389417][T19637] loop3: detected capacity change from 0 to 2048 [ 1501.598233][T19640] loop1: detected capacity change from 0 to 32768 [ 1501.686837][T19640] [ 1501.686837][T19640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1501.686837][T19640] [ 1501.729762][T19640] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 1501.729762][T19640] [ 1501.740751][T19640] ERROR: (device loop1): remounting filesystem as read-only [ 1502.011599][ T9450] usb 1-1: USB disconnect, device number 60 [ 1503.473864][T19665] FAULT_INJECTION: forcing a failure. [ 1503.473864][T19665] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.491307][T19665] CPU: 0 UID: 0 PID: 19665 Comm: syz.2.3511 Tainted: G W 6.12.0-rc5-syzkaller #0 [ 1503.502181][T19665] Tainted: [W]=WARN [ 1503.506177][T19665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1503.516475][T19665] Call Trace: [ 1503.519977][T19665] [ 1503.523106][T19665] dump_stack_lvl+0x216/0x2d0 [ 1503.528124][T19665] dump_stack+0x1e/0x30 [ 1503.532583][T19665] should_fail_ex+0x748/0x7f0 [ 1503.537596][T19665] should_failslab+0x17f/0x210 [ 1503.542665][T19665] __kmalloc_noprof+0x175/0xf30 [ 1503.547832][T19665] ? __se_sys_memfd_create+0x604/0x1260 [ 1503.553697][T19665] __se_sys_memfd_create+0x604/0x1260 [ 1503.559378][T19665] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1503.565542][T19665] ? kmsan_get_metadata+0x13e/0x1c0 [ 1503.571091][T19665] __x64_sys_memfd_create+0x6c/0xa0 [ 1503.576590][T19665] x64_sys_call+0x31cf/0x3ba0 [ 1503.581588][T19665] do_syscall_64+0xcd/0x1e0 [ 1503.586407][T19665] ? clear_bhb_loop+0x25/0x80 [ 1503.591384][T19665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.597576][T19665] RIP: 0033:0x7ff4f7b7e719 [ 1503.602229][T19665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1503.622122][T19665] RSP: 002b:00007ff4f89ace18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1503.630832][T19665] RAX: ffffffffffffffda RBX: 0000000000000223 RCX: 00007ff4f7b7e719 [ 1503.639039][T19665] RDX: 00007ff4f89acef0 RSI: 0000000000000000 RDI: 00007ff4f7bf1b9a [ 1503.647246][T19665] RBP: 0000000020000280 R08: 00007ff4f89acbb7 R09: 00007ff4f89ace40 [ 1503.655460][T19665] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000180 [ 1503.663666][T19665] R13: 00007ff4f89acef0 R14: 00007ff4f89aceb0 R15: 00000000200000c0 [ 1503.671886][T19665] [ 1503.873031][T19645] loop6: detected capacity change from 0 to 4096 [ 1504.194545][T19645] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1504.237083][T19671] loop3: detected capacity change from 0 to 128 [ 1504.260696][T19645] ntfs3(loop6): Failed to load $Extend (-22). [ 1504.267055][T19645] ntfs3(loop6): Failed to initialize $Extend. [ 1504.345610][T19671] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1504.652199][T15220] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1504.824831][T15220] usb 1-1: Using ep0 maxpacket: 32 [ 1504.848450][T11456] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1504.925467][T15220] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1504.935200][T15220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.943612][T15220] usb 1-1: Product: syz [ 1504.948020][T15220] usb 1-1: Manufacturer: syz [ 1504.953034][T15220] usb 1-1: SerialNumber: syz [ 1505.081507][T11456] usb 3-1: Using ep0 maxpacket: 8 [ 1505.107020][T15220] usb 1-1: config 0 descriptor?? [ 1505.143424][T11456] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.154829][T11456] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.271475][T11456] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 1505.281287][T11456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.289946][T11456] usb 3-1: Product: syz [ 1505.295064][T11456] usb 3-1: Manufacturer: syz [ 1505.300089][T11456] usb 3-1: SerialNumber: syz [ 1505.673254][ T9450] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1505.729119][T11456] usbhid 3-1:1.0: can't add hid device: -71 [ 1505.739656][T11456] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1505.803404][T15220] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3a:55:06:55:ea:01 [ 1505.869749][T11456] usb 3-1: USB disconnect, device number 68 [ 1505.903877][ T9450] usb 7-1: Using ep0 maxpacket: 8 [ 1505.939432][T15220] rtl8150 1-1:0.0: eth5: rtl8150 is detected [ 1505.969068][ T9450] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1505.978582][ T9450] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1505.989290][ T9450] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1506.017137][T15220] usb 1-1: USB disconnect, device number 61 [ 1506.137002][ T9450] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1506.150797][ T9450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.159087][ T9450] usb 7-1: Product: syz [ 1506.164496][ T9450] usb 7-1: Manufacturer: syz [ 1506.169351][ T9450] usb 7-1: SerialNumber: syz [ 1506.277375][T19688] loop1: detected capacity change from 0 to 128 [ 1506.376540][T19688] ufs: You didn't specify the type of your ufs filesystem [ 1506.376540][T19688] [ 1506.376540][T19688] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1506.376540][T19688] [ 1506.376540][T19688] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1506.529647][T19688] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1507.141810][ T9450] usb 7-1: 0:2 : does not exist [ 1507.269154][ T9450] usb 7-1: USB disconnect, device number 64 [ 1507.463335][T19327] udevd[19327]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1507.512470][T10411] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1507.669183][T19693] loop2: detected capacity change from 0 to 2048 [ 1507.730531][T10411] usb 4-1: Using ep0 maxpacket: 8 [ 1507.759862][T10411] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1507.768982][T10411] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1507.784923][T10411] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1507.965192][T10411] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1507.975860][T10411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.984442][T10411] usb 4-1: Product: syz [ 1507.993005][T10411] usb 4-1: Manufacturer: syz [ 1507.997852][T10411] usb 4-1: SerialNumber: syz [ 1508.530029][T19708] loop6: detected capacity change from 0 to 256 [ 1508.595533][T19708] exfat: Deprecated parameter 'namecase' [ 1508.601771][T19708] exfat: Bad value for 'dmask' [ 1508.991588][T19705] loop0: detected capacity change from 0 to 2048 [ 1509.238663][T10411] usb 4-1: 0:2 : does not exist [ 1509.331635][T19705] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1509.393756][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1509.400791][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1509.666644][T19705] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3524'. [ 1509.739376][T10411] usb 4-1: USB disconnect, device number 73 [ 1510.270059][T19327] udevd[19327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1512.251602][T10411] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1512.490623][T10411] usb 1-1: Using ep0 maxpacket: 16 [ 1512.522397][T10411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.532757][T10411] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1512.542215][T10411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.794117][T10411] usb 1-1: config 0 descriptor?? [ 1513.529438][T19775] loop6: detected capacity change from 0 to 1024 [ 1513.720726][T10411] logitech-djreceiver 0003:046D:C71B.0023: unknown main item tag 0x0 [ 1514.181901][T10411] usb 1-1: USB disconnect, device number 62 [ 1514.894398][ T5808] Bluetooth: hci4: unexpected event for opcode 0x200a [ 1516.521136][T11456] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1516.609359][T19821] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3564'. [ 1516.910532][T10411] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1517.073258][T11456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.084672][T11456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.095057][T11456] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1517.106701][T11456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.141141][T10411] usb 2-1: Using ep0 maxpacket: 32 [ 1517.193853][T10411] usb 2-1: config 0 has no interfaces? [ 1517.199824][T10411] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1517.213461][T10411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.292704][T11456] usb 1-1: config 0 descriptor?? [ 1517.325161][T10411] usb 2-1: config 0 descriptor?? [ 1517.620674][T15220] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1517.793703][T11456] hid-multitouch 0003:0EEF:72D0.0024: unbalanced collection at end of report description [ 1517.810930][T15220] usb 3-1: Using ep0 maxpacket: 8 [ 1517.826032][T15220] usb 3-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 1517.835540][T15220] usb 3-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.846508][T15220] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 1517.892685][T11456] hid-multitouch 0003:0EEF:72D0.0024: probe with driver hid-multitouch failed with error -22 [ 1518.011622][T15220] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1518.021304][T15220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.031792][T15220] usb 3-1: Product: syz [ 1518.036216][T15220] usb 3-1: Manufacturer: syz [ 1518.041768][T15220] usb 3-1: SerialNumber: syz [ 1518.049612][T11456] usb 1-1: USB disconnect, device number 63 [ 1518.377347][T10411] usb 2-1: USB disconnect, device number 5 [ 1519.296933][T15220] usb 3-1: USB disconnect, device number 69 [ 1520.260821][T11456] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1520.315992][T10411] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1520.764205][T11456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1520.775557][T11456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1520.785658][T11456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1520.799288][T11456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1520.811217][T10411] usb 2-1: Using ep0 maxpacket: 8 [ 1520.850831][ T9450] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1521.013418][T10411] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1521.023057][T10411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.031607][T10411] usb 2-1: Product: syz [ 1521.036019][T10411] usb 2-1: Manufacturer: syz [ 1521.040932][T10411] usb 2-1: SerialNumber: syz [ 1521.073777][ T9450] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1521.083249][ T9450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.152026][ T9450] usb 3-1: config 0 descriptor?? [ 1521.160722][T11456] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1521.170181][T11456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.179353][T11456] usb 7-1: Product: syz [ 1521.183909][T11456] usb 7-1: Manufacturer: syz [ 1521.188760][T11456] usb 7-1: SerialNumber: syz [ 1521.193188][T10411] usb 2-1: config 0 descriptor?? [ 1521.313288][T11456] usb 7-1: config 0 descriptor?? [ 1521.481615][T10411] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1521.761467][T15220] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1521.851990][T11456] adutux 7-1:0.0: Could not retrieve serial number [ 1521.859324][T11456] adutux 7-1:0.0: probe with driver adutux failed with error -5 [ 1522.014065][T15220] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1522.026298][T15220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.079516][T11456] usb 7-1: USB disconnect, device number 65 [ 1522.156489][T15220] usb 1-1: config 0 descriptor?? [ 1522.243547][T15220] cp210x 1-1:0.0: cp210x converter detected [ 1522.314823][ T9450] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 1522.422530][ T9450] usb 3-1: USB disconnect, device number 70 [ 1522.690917][T15220] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1522.873437][ T9450] usb 1-1: USB disconnect, device number 64 [ 1522.953909][ T9450] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1523.082835][ T9450] cp210x 1-1:0.0: device disconnected [ 1523.211869][T10411] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1523.301430][T10411] usb 2-1: USB disconnect, device number 6 [ 1526.317711][T19943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3601'. [ 1526.860660][T10411] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1527.041232][T10411] usb 7-1: Using ep0 maxpacket: 32 [ 1527.085631][T10411] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1527.094172][T10411] usb 7-1: config 0 has no interface number 0 [ 1527.194735][T10411] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1527.204672][T10411] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.213123][T10411] usb 7-1: Product: syz [ 1527.217640][T10411] usb 7-1: Manufacturer: syz [ 1527.222587][T10411] usb 7-1: SerialNumber: syz [ 1527.392644][T10411] usb 7-1: config 0 descriptor?? [ 1527.470015][T10411] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1527.479203][T10411] usb 7-1: selecting invalid altsetting 1 [ 1527.485397][T10411] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1527.624059][T10411] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1527.635321][T10411] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1527.643965][T10411] usb 7-1: media controller created [ 1527.751018][ T29] audit: type=1326 audit(1730146545.340:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127417e719 code=0x7ffc0000 [ 1527.778359][ T29] audit: type=1326 audit(1730146545.340:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127417e719 code=0x7ffc0000 [ 1527.847466][T10411] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1528.042492][ T29] audit: type=1326 audit(1730146545.400:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f127417e719 code=0x7ffc0000 [ 1528.070986][ T29] audit: type=1326 audit(1730146545.400:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127417e719 code=0x7ffc0000 [ 1528.094885][ T29] audit: type=1326 audit(1730146545.400:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19964 comm="syz.3.3607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127417e719 code=0x7ffc0000 [ 1528.740802][T10411] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1529.461393][T19992] pim6reg: entered allmulticast mode [ 1529.574912][T19992] pim6reg: left allmulticast mode [ 1529.784599][T10411] usb 7-1: USB disconnect, device number 66 [ 1532.850670][T10411] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1533.342083][T10411] usb 2-1: Using ep0 maxpacket: 16 [ 1533.901910][T10411] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1534.120522][T10411] usb 2-1: config 3 has an invalid interface number: 167 but max is 0 [ 1534.129001][T10411] usb 2-1: config 3 has no interface number 0 [ 1534.135534][T10411] usb 2-1: config 3 interface 167 has no altsetting 0 [ 1534.461404][T10411] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0004, bcdDevice=50.4f [ 1534.470984][T10411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.479261][T10411] usb 2-1: Product: syz [ 1534.483754][T10411] usb 2-1: Manufacturer: syz [ 1534.488598][T10411] usb 2-1: SerialNumber: syz [ 1535.273094][T20065] bond0: option use_carrier: invalid value (10) [ 1535.656519][T10411] usb 2-1: Found UVC 0.00 device syz (0e8d:0004) [ 1535.663428][T10411] usb 2-1: No valid video chain found. [ 1535.751892][T10411] usb 2-1: USB disconnect, device number 7 [ 1535.880556][T15220] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1536.056084][T15220] usb 1-1: Using ep0 maxpacket: 16 [ 1536.147782][T15220] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1536.163198][T15220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1536.238932][T15220] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1536.249462][T15220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.260982][T15220] usb 1-1: Product: syz [ 1536.265415][T15220] usb 1-1: Manufacturer: syz [ 1536.272042][T15220] usb 1-1: SerialNumber: syz [ 1536.361905][T15220] usb 1-1: config 0 descriptor?? [ 1536.389470][T15220] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1536.390664][T10411] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1536.399812][T15220] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1536.718173][T10411] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1536.728020][T10411] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.736389][T10411] usb 7-1: Product: syz [ 1536.740891][T10411] usb 7-1: Manufacturer: syz [ 1536.747551][T10411] usb 7-1: SerialNumber: syz [ 1536.833742][T10411] usb 7-1: config 0 descriptor?? [ 1537.325202][T10411] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1537.484058][T15220] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1537.650948][T15220] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1537.759417][T10411] usb 7-1: USB disconnect, device number 67 [ 1539.127654][T15220] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1539.148375][T15220] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1539.159878][T15220] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1539.180807][T15220] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1539.362559][T11456] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1539.410731][T15220] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 1539.419977][T15220] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1539.557916][T11456] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.568695][T11456] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1539.578250][T11456] usb 4-1: config 1 has no interface number 0 [ 1539.584890][T11456] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1539.629771][T15220] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1539.737441][T15220] usb 1-1: USB disconnect, device number 65 [ 1539.856340][T11456] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1539.865993][T11456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.874425][T11456] usb 4-1: Product: syz [ 1539.878826][T11456] usb 4-1: Manufacturer: syz [ 1539.883832][T11456] usb 4-1: SerialNumber: syz [ 1539.974199][T11456] cdc_ncm 4-1:1.1: skipping garbage [ 1539.979786][T11456] usb 4-1: selecting invalid altsetting 1 [ 1540.883670][T11456] cdc_ncm 4-1:1.1: SET_CRC_MODE failed [ 1540.900800][T11456] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 1540.920652][T11456] usb 4-1: selecting invalid altsetting 1 [ 1540.926766][T11456] cdc_ncm 4-1:1.1: bind() failure [ 1541.247545][T11456] usb 4-1: USB disconnect, device number 74 [ 1542.590680][T11456] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1542.778050][T11456] usb 7-1: Using ep0 maxpacket: 16 [ 1542.825071][T11456] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1542.837328][T11456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1543.196764][T11456] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1543.206403][T11456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.217676][T11456] usb 7-1: Product: syz [ 1543.222921][T11456] usb 7-1: Manufacturer: syz [ 1543.227780][T11456] usb 7-1: SerialNumber: syz [ 1543.259116][T11456] usb 7-1: config 0 descriptor?? [ 1543.281665][T11456] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1543.296316][T11456] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1543.908604][T11456] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1543.934871][T11456] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1544.783222][T11456] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1544.947140][T11456] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1544.979907][T11456] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1545.014361][T11456] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1545.293082][T11456] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1545.301431][T11456] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1545.553915][T11456] usb 7-1: USB disconnect, device number 68 [ 1548.190734][T10411] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1548.601395][T10411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1548.612695][T10411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1548.622743][T10411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1548.634036][T10411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1548.901154][T10411] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1548.911008][T10411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.919293][T10411] usb 3-1: Product: syz [ 1548.923880][T10411] usb 3-1: Manufacturer: syz [ 1548.928721][T10411] usb 3-1: SerialNumber: syz [ 1549.008959][T10411] usb 3-1: config 0 descriptor?? [ 1549.243223][T10411] adutux 3-1:0.0: Could not retrieve serial number [ 1549.250465][T10411] adutux 3-1:0.0: probe with driver adutux failed with error -5 [ 1549.436506][T11456] usb 3-1: USB disconnect, device number 71 [ 1550.192546][T11456] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1550.526791][T11456] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.758382][T11456] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1550.768683][T11456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.777681][T11456] usb 4-1: Product: syz [ 1550.782258][T11456] usb 4-1: Manufacturer: syz [ 1550.787095][T11456] usb 4-1: SerialNumber: syz [ 1552.409938][T11456] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1552.417039][T11456] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1552.424836][T11456] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1552.591602][T10190] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1552.784088][T10190] usb 3-1: Using ep0 maxpacket: 32 [ 1552.823471][T10190] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 1552.832492][T10190] usb 3-1: config 0 has no interface number 0 [ 1552.893392][T11456] cdc_ncm 4-1:1.0 eth5: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1552.986400][T10190] usb 3-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 1552.996087][T10190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.004587][T10190] usb 3-1: Product: syz [ 1553.008998][T10190] usb 3-1: Manufacturer: syz [ 1553.013949][T10190] usb 3-1: SerialNumber: syz [ 1553.076417][T11456] usb 4-1: USB disconnect, device number 75 [ 1553.084212][T11456] cdc_ncm 4-1:1.0 eth5: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1553.101892][T10190] usb 3-1: config 0 descriptor?? [ 1553.118723][T10190] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 1553.453529][T15220] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1553.697101][T15220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1553.708677][T15220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1553.719020][T15220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1553.730716][T15220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1553.836415][T15220] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1553.846095][T15220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.854823][T15220] usb 1-1: Product: syz [ 1553.859393][T15220] usb 1-1: Manufacturer: syz [ 1553.867271][T15220] usb 1-1: SerialNumber: syz [ 1554.141301][T15220] usb 1-1: config 0 descriptor?? [ 1554.234424][T10190] gspca_sunplus: reg_w_riv err -71 [ 1554.240719][T10190] sunplus 3-1:0.250: probe with driver sunplus failed with error -71 [ 1554.282519][T10190] usb 3-1: USB disconnect, device number 72 [ 1554.368657][T15220] adutux 1-1:0.0: Could not retrieve serial number [ 1554.379797][T15220] adutux 1-1:0.0: probe with driver adutux failed with error -5 [ 1554.753182][T10411] usb 1-1: USB disconnect, device number 66 [ 1556.950802][T10190] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1557.151967][T10190] usb 4-1: Using ep0 maxpacket: 16 [ 1557.204525][T10190] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1557.216811][T10190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1557.355875][T10190] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1557.365920][T10190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.375877][T10190] usb 4-1: Product: syz [ 1557.380844][T10190] usb 4-1: Manufacturer: syz [ 1557.385684][T10190] usb 4-1: SerialNumber: syz [ 1557.522510][T10190] usb 4-1: config 0 descriptor?? [ 1557.540794][T10190] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1557.554272][T10190] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1557.851083][T10411] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1558.321106][ T9450] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1558.387740][T10411] usb 1-1: Using ep0 maxpacket: 8 [ 1558.411270][T10411] usb 1-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 1558.420891][T10411] usb 1-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.431592][T10411] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 1558.531753][T10411] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1558.542559][T10411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.551135][T10411] usb 1-1: Product: syz [ 1558.555556][T10411] usb 1-1: Manufacturer: syz [ 1558.560555][T10411] usb 1-1: SerialNumber: syz [ 1558.581178][ T29] audit: type=1326 audit(1730146576.100:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20346 comm="syz.1.3745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb7197e719 code=0x0 [ 1558.655583][T10190] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1558.682453][T10190] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1558.719982][ T9450] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1558.731613][ T9450] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1558.741705][ T9450] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1558.753055][ T9450] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1559.064779][ T9450] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1559.074551][ T9450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.083143][ T9450] usb 7-1: Product: syz [ 1559.092592][ T9450] usb 7-1: Manufacturer: syz [ 1559.097498][ T9450] usb 7-1: SerialNumber: syz [ 1559.243446][ T9450] usb 7-1: config 0 descriptor?? [ 1559.321027][T10190] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1559.351174][T10190] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1559.386942][T10411] usb 1-1: USB disconnect, device number 67 [ 1559.401102][T10190] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1559.585462][ T9450] adutux 7-1:0.0: Could not retrieve serial number [ 1559.592860][ T9450] adutux 7-1:0.0: probe with driver adutux failed with error -5 [ 1559.619419][T10190] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1559.631938][T10190] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1559.686635][T10190] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1559.733048][T10190] usb 4-1: USB disconnect, device number 76 [ 1559.795260][ T9450] usb 7-1: USB disconnect, device number 69 [ 1562.101236][T20394] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1562.660971][T20371] Bluetooth: hci6: command 0x0406 tx timeout [ 1562.881200][ T9450] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1562.901764][ T1602] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1563.100928][ T9450] usb 7-1: Using ep0 maxpacket: 16 [ 1563.120748][ T1602] usb 1-1: Using ep0 maxpacket: 8 [ 1563.260676][T15220] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1563.317232][ T9450] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1563.329701][ T9450] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1563.359499][ T1602] usb 1-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 1563.369135][ T1602] usb 1-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.379876][ T1602] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 1563.409693][ T9450] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1563.419725][ T9450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.428146][ T9450] usb 7-1: Product: syz [ 1563.432708][ T9450] usb 7-1: Manufacturer: syz [ 1563.437545][ T9450] usb 7-1: SerialNumber: syz [ 1563.449508][ T9450] usb 7-1: config 0 descriptor?? [ 1563.467466][ T9450] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1563.477192][ T9450] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1563.499573][ T1602] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1563.509275][ T1602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.518239][ T1602] usb 1-1: Product: syz [ 1563.523099][ T1602] usb 1-1: Manufacturer: syz [ 1563.528141][ T1602] usb 1-1: SerialNumber: syz [ 1563.684769][T15220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1563.701216][T15220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1563.711329][T15220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1563.722690][T15220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1563.846007][T15220] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1563.857387][T15220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.866218][T15220] usb 3-1: Product: syz [ 1563.870735][T15220] usb 3-1: Manufacturer: syz [ 1563.875574][T15220] usb 3-1: SerialNumber: syz [ 1563.992592][T15220] usb 3-1: config 0 descriptor?? [ 1564.155687][ T9450] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1564.191743][ T1602] usb 1-1: USB disconnect, device number 68 [ 1564.238728][T15220] adutux 3-1:0.0: Could not retrieve serial number [ 1564.242561][ T9450] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1564.245989][T15220] adutux 3-1:0.0: probe with driver adutux failed with error -5 [ 1564.493604][T15220] usb 3-1: USB disconnect, device number 73 [ 1564.851839][ T1602] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1564.875227][ T9450] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1564.896087][ T9450] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1564.958438][ T9450] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1565.164285][ T1602] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1565.176343][ T1602] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1565.187728][ T1602] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1565.260090][ T9450] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1565.279458][ T9450] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1565.300966][ T9450] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1565.327993][ T1602] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1565.342656][ T1602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.352130][ T1602] usb 2-1: Product: syz [ 1565.356551][ T1602] usb 2-1: Manufacturer: syz [ 1565.361510][ T1602] usb 2-1: SerialNumber: syz [ 1565.417204][ T9450] usb 7-1: USB disconnect, device number 70 [ 1565.428874][T19327] udevd[19327]: setting mode of /dev/bus/usb/007/070 to 020664 failed: No such file or directory [ 1565.488003][T19327] udevd[19327]: setting owner of /dev/bus/usb/007/070 to uid=0, gid=0 failed: No such file or directory [ 1565.814934][T20419] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1565.891844][T20419] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1566.585350][ T1602] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1566.592599][ T1602] cdc_ncm 2-1:1.0: bind() failure [ 1566.609132][ T1602] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1566.616391][ T1602] cdc_ncm 2-1:1.1: bind() failure [ 1567.860802][T15220] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1568.030821][T15220] usb 4-1: Using ep0 maxpacket: 8 [ 1568.077635][ T1602] usb 2-1: USB disconnect, device number 8 [ 1568.221294][ T9450] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1568.283606][T15220] usb 4-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 1568.292979][T15220] usb 4-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.306473][T15220] usb 4-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 1568.463956][ T9450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1568.475316][ T9450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1568.485492][ T9450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1568.496781][ T9450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1568.625269][T15220] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1568.635298][T15220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.643749][T15220] usb 4-1: Product: syz [ 1568.648160][T15220] usb 4-1: Manufacturer: syz [ 1568.653179][T15220] usb 4-1: SerialNumber: syz [ 1568.807965][ T9450] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1568.822857][ T9450] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.832082][ T9450] usb 1-1: Product: syz [ 1568.836490][ T9450] usb 1-1: Manufacturer: syz [ 1568.841430][ T9450] usb 1-1: SerialNumber: syz [ 1568.942580][ T9450] usb 1-1: config 0 descriptor?? [ 1569.173295][ T9450] adutux 1-1:0.0: Could not retrieve serial number [ 1569.180636][ T9450] adutux 1-1:0.0: probe with driver adutux failed with error -5 [ 1569.372223][ T9450] usb 1-1: USB disconnect, device number 69 [ 1569.387483][T15220] usb 4-1: USB disconnect, device number 77 [ 1569.423272][ T1602] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1569.691213][ T1602] usb 7-1: Using ep0 maxpacket: 16 [ 1569.729068][ T1602] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1569.746130][ T1602] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1569.852846][ T1602] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1569.862793][ T1602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.871202][ T1602] usb 7-1: Product: syz [ 1569.875611][ T1602] usb 7-1: Manufacturer: syz [ 1569.880605][ T1602] usb 7-1: SerialNumber: syz [ 1569.993709][ T1602] usb 7-1: config 0 descriptor?? [ 1570.025228][ T1602] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1570.034916][ T1602] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1570.709147][ T1602] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1570.756787][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1570.765767][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1570.772576][ T1602] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1571.585794][ T1602] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1571.599703][ T1602] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1571.632444][ T1602] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1571.852110][ T1602] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1571.878443][ T1602] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1571.907265][ T1602] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1572.038372][ T1602] usb 7-1: USB disconnect, device number 71 [ 1572.362106][ T9450] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1572.450815][T10411] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1572.592172][ T9450] usb 1-1: device descriptor read/64, error -71 [ 1572.730535][T10411] usb 4-1: Using ep0 maxpacket: 16 [ 1572.963642][T10411] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1572.972233][T10411] usb 4-1: config 0 has no interface number 0 [ 1572.978612][T10411] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1572.990919][T10411] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1573.067649][T10411] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1573.077302][T10411] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1573.085744][T10411] usb 4-1: Product: syz [ 1573.090139][T10411] usb 4-1: SerialNumber: syz [ 1573.111342][ T9450] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1573.178173][T10411] usb 4-1: config 0 descriptor?? [ 1573.208445][T10411] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1573.281709][ T9450] usb 1-1: device descriptor read/64, error -71 [ 1573.303668][T10411] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input26 [ 1573.396108][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1573.403948][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1573.412433][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1573.420061][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1573.432765][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1573.446629][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1573.457131][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1573.465320][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1573.473041][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1573.480689][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1573.522677][ T9450] usb usb1-port1: attempt power cycle [ 1573.547129][T10411] usb 4-1: USB disconnect, device number 78 [ 1573.547374][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1573.647118][T15220] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1573.912188][ T1602] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1573.922496][ T9450] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1574.026266][ T9450] usb 1-1: device descriptor read/8, error -71 [ 1574.164357][T10411] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1574.190553][ T1602] usb 3-1: Using ep0 maxpacket: 8 [ 1574.248947][T15220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1574.262055][T15220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1574.272528][T15220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1574.285039][T15220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1574.383129][ T9450] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1574.409427][ T1602] usb 3-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 1574.419584][ T1602] usb 3-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.431088][ T1602] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 1574.454625][ T9450] usb 1-1: device descriptor read/8, error -71 [ 1574.559915][ T1602] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1574.564591][T15220] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1574.570182][ T1602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.580218][T15220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.589587][ T1602] usb 3-1: Product: syz [ 1574.595235][T15220] usb 7-1: Product: syz [ 1574.599101][ T1602] usb 3-1: Manufacturer: syz [ 1574.603451][T15220] usb 7-1: Manufacturer: syz [ 1574.603562][T15220] usb 7-1: SerialNumber: syz [ 1574.619179][ T1602] usb 3-1: SerialNumber: syz [ 1574.627034][ T9450] usb usb1-port1: unable to enumerate USB device [ 1574.883506][T15220] usb 7-1: config 0 descriptor?? [ 1574.945789][ T1602] usb 3-1: USB disconnect, device number 74 [ 1575.123823][T15220] adutux 7-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1575.213758][T15220] usb 7-1: USB disconnect, device number 72 [ 1577.100899][T15220] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1577.312556][T20567] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3809'. [ 1577.352061][T15220] usb 1-1: Using ep0 maxpacket: 32 [ 1577.405877][T15220] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1577.415433][T15220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.483830][T15220] usb 1-1: config 0 descriptor?? [ 1577.523446][T15220] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1579.091207][T11456] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1579.301551][T11456] usb 3-1: Using ep0 maxpacket: 8 [ 1579.322782][T20554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.368211][T11456] usb 3-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 1579.377689][T11456] usb 3-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.388436][T11456] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 1579.392082][T20554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.497265][T15220] gspca_vc032x: reg_w err -71 [ 1579.502382][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.507978][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.513891][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.519386][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.525182][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.530837][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.536322][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.542023][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.547501][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.553135][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.558614][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.564296][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.574890][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.582296][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.587785][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.593409][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.598991][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.604630][T15220] gspca_vc032x: I2c Bus Busy Wait 00 [ 1579.610133][T15220] gspca_vc032x: Unknown sensor... [ 1579.621864][T15220] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1579.726553][T11456] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1579.736226][T11456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.744751][T11456] usb 3-1: Product: syz [ 1579.749159][T11456] usb 3-1: Manufacturer: syz [ 1579.754164][T11456] usb 3-1: SerialNumber: syz [ 1579.851544][T15220] usb 1-1: USB disconnect, device number 74 [ 1579.936546][ T1602] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1580.128807][T11456] usb 3-1: USB disconnect, device number 75 [ 1580.151127][ T1602] usb 2-1: Using ep0 maxpacket: 16 [ 1580.221435][ T1602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.232979][ T1602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1580.243607][ T1602] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1580.256933][ T1602] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1580.266404][ T1602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.368498][ T1602] usb 2-1: config 0 descriptor?? [ 1581.230127][ T1602] usbhid 2-1:0.0: can't add hid device: -71 [ 1581.242765][ T1602] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1581.485607][ T1602] usb 2-1: USB disconnect, device number 9 [ 1582.510766][ T29] audit: type=1326 audit(1730146600.090:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.1.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7197e719 code=0x7ffc0000 [ 1582.700546][ T29] audit: type=1326 audit(1730146600.160:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.1.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7feb7197e719 code=0x7ffc0000 [ 1582.723680][ T29] audit: type=1326 audit(1730146600.160:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20631 comm="syz.1.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7197e719 code=0x7ffc0000 [ 1583.261628][T11456] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1583.420854][T15220] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1583.450540][T11456] usb 1-1: Using ep0 maxpacket: 32 [ 1583.486339][T11456] usb 1-1: config 0 has an invalid interface number: 144 but max is 0 [ 1583.495148][T11456] usb 1-1: config 0 has no interface number 0 [ 1583.594283][T11456] usb 1-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=a0.fe [ 1583.604070][T11456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.612501][T11456] usb 1-1: Product: syz [ 1583.616905][T11456] usb 1-1: Manufacturer: syz [ 1583.621981][T11456] usb 1-1: SerialNumber: syz [ 1583.651192][T15220] usb 4-1: Using ep0 maxpacket: 8 [ 1583.685935][T15220] usb 4-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 1583.695332][T15220] usb 4-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.705990][T15220] usb 4-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 1583.781574][T11456] usb 1-1: config 0 descriptor?? [ 1583.829214][T11456] gspca_main: tv8532-2.14.0 probing 0923:010f [ 1583.884849][T15220] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1583.894707][T15220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.903257][T15220] usb 4-1: Product: syz [ 1583.907841][T15220] usb 4-1: Manufacturer: syz [ 1583.912960][T15220] usb 4-1: SerialNumber: syz [ 1584.977100][T10190] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1585.184048][T11456] usb 1-1: USB disconnect, device number 75 [ 1585.261021][T10190] usb 2-1: Using ep0 maxpacket: 16 [ 1585.326409][T10190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.337931][T10190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1585.348102][T10190] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1585.361614][T10190] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1585.372621][T10190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.653282][T10190] usb 2-1: config 0 descriptor?? [ 1585.859122][T15220] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1586.640781][T15220] usb 7-1: Using ep0 maxpacket: 32 [ 1586.722865][T10190] usbhid 2-1:0.0: can't add hid device: -71 [ 1586.729880][T10190] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1586.851862][T15220] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1586.860173][T15220] usb 7-1: config 0 has no interface number 0 [ 1586.923660][ T1602] usb 4-1: USB disconnect, device number 79 [ 1586.979120][T10190] usb 2-1: USB disconnect, device number 10 [ 1587.273664][T15220] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1587.283318][T15220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.291852][T15220] usb 7-1: Product: syz [ 1587.296268][T15220] usb 7-1: Manufacturer: syz [ 1587.301303][T15220] usb 7-1: SerialNumber: syz [ 1587.315641][T15220] usb 7-1: config 0 descriptor?? [ 1587.335428][T15220] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1587.344855][T15220] usb 7-1: selecting invalid altsetting 1 [ 1587.355966][T15220] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1587.374786][T15220] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1587.386096][T15220] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1587.394746][T15220] usb 7-1: media controller created [ 1587.445452][T15220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1588.054568][T15220] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1588.062210][T15220] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1588.103045][T15220] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1588.146060][T20697] syz.1.3854 (20697): attempted to duplicate a private mapping with mremap. This is not supported. [ 1588.922264][T15220] usb 7-1: USB disconnect, device number 73 [ 1588.940868][ T1602] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1589.187938][ T1602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.205060][ T1602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.216621][ T1602] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1589.226201][ T1602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.336332][ T1602] usb 1-1: config 0 descriptor?? [ 1590.135689][ T1602] hid (null): invalid report_count 7116909 [ 1590.161214][ T1602] asus 0003:0B05:17E0.0025: invalid report_count 7116909 [ 1590.168538][ T1602] asus 0003:0B05:17E0.0025: item 0 4 1 9 parsing failed [ 1590.202524][T15220] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1590.204552][ T1602] asus 0003:0B05:17E0.0025: Asus hid parse failed: -22 [ 1590.227349][ T1602] asus 0003:0B05:17E0.0025: probe with driver asus failed with error -22 [ 1590.407015][T15220] usb 4-1: Using ep0 maxpacket: 8 [ 1590.569164][T15220] usb 4-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 1590.569666][ T1602] usb 1-1: USB disconnect, device number 76 [ 1590.578392][T15220] usb 4-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.578536][T15220] usb 4-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 1590.838425][T15220] usb 4-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1590.848001][T15220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.856430][T15220] usb 4-1: Product: syz [ 1590.861526][T15220] usb 4-1: Manufacturer: syz [ 1590.866372][T15220] usb 4-1: SerialNumber: syz [ 1591.091477][ T9450] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1591.307625][ T9450] usb 3-1: Using ep0 maxpacket: 16 [ 1591.390233][ T9450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.402275][ T9450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.412404][ T9450] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1591.426087][ T9450] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1591.435628][ T9450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.841440][ T9450] usb 3-1: config 0 descriptor?? [ 1592.080591][T10190] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1592.253937][T10190] usb 2-1: Using ep0 maxpacket: 32 [ 1592.274244][T10190] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1592.283007][T10190] usb 2-1: config 0 has no interface number 0 [ 1592.290116][T11456] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1592.340161][T10190] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1592.350507][T10190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.358777][T10190] usb 2-1: Product: syz [ 1592.363775][T10190] usb 2-1: Manufacturer: syz [ 1592.372388][T10190] usb 2-1: SerialNumber: syz [ 1592.475891][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1592.522350][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 1592.578562][ T9450] usbhid 3-1:0.0: can't add hid device: -32 [ 1592.585386][ T9450] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1592.624968][T10190] usb 2-1: config 0 descriptor?? [ 1592.652430][ T9450] usb 3-1: USB disconnect, device number 76 [ 1592.737195][T10190] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1592.746986][T10190] usb 2-1: selecting invalid altsetting 1 [ 1592.753292][T10190] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1592.768212][ T5808] Bluetooth: hci1: Unknown advertising packet type: 0x33 [ 1592.768344][ T5808] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1592.808935][T11456] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1592.817290][T11456] usb 7-1: no configurations [ 1592.822277][T11456] usb 7-1: can't read configurations, error -22 [ 1592.935678][T10190] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1592.947507][T10190] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1592.956270][T10190] usb 2-1: media controller created [ 1593.180857][T10190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1593.541691][T10190] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1593.549031][T10190] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1593.589531][ T1602] usb 4-1: USB disconnect, device number 80 [ 1593.644926][T10190] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1593.781238][ T9450] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1593.942471][ T9450] usb 1-1: Using ep0 maxpacket: 32 [ 1593.987726][ T9450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.999688][ T9450] usb 1-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.00 [ 1594.014375][ T9450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.120894][T10411] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1594.230596][ T9450] usb 1-1: config 0 descriptor?? [ 1594.361381][T10411] usb 3-1: Using ep0 maxpacket: 32 [ 1594.371010][T10190] usb 2-1: USB disconnect, device number 11 [ 1594.460835][T10411] usb 3-1: config 0 has an invalid interface number: 250 but max is 0 [ 1594.469445][T10411] usb 3-1: config 0 has no interface number 0 [ 1594.570837][T10411] usb 3-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 1594.580217][T10411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.588699][T10411] usb 3-1: Product: syz [ 1594.593905][T10411] usb 3-1: Manufacturer: syz [ 1594.598734][T10411] usb 3-1: SerialNumber: syz [ 1594.832968][T10411] usb 3-1: config 0 descriptor?? [ 1594.855140][T10411] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 1595.177654][ T9450] usbhid 1-1:0.0: can't add hid device: -71 [ 1595.184857][ T9450] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1595.316236][ T9450] usb 1-1: USB disconnect, device number 77 [ 1595.755774][T10411] gspca_sunplus: reg_w_riv err -71 [ 1595.762875][T10411] sunplus 3-1:0.250: probe with driver sunplus failed with error -71 [ 1595.886726][T10411] usb 3-1: USB disconnect, device number 77 [ 1595.954558][T20599] udevd[20599]: setting owner of /dev/bus/usb/003/077 to uid=0, gid=0 failed: No such file or directory [ 1596.840891][T10411] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1597.186931][T10411] usb 1-1: Using ep0 maxpacket: 16 [ 1597.365160][T10411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.377604][T10411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.394374][T10411] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1597.411707][T10411] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1597.422232][T10411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.439573][T10411] usb 1-1: config 0 descriptor?? [ 1597.892185][T10411] usbhid 1-1:0.0: can't add hid device: -71 [ 1597.906690][T10411] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1597.981771][T10411] usb 1-1: USB disconnect, device number 78 [ 1599.681100][T10190] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1599.747305][T10411] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1599.870865][T10190] usb 1-1: Using ep0 maxpacket: 32 [ 1599.892794][T10190] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 1599.901569][T10190] usb 1-1: config 0 has no interface number 0 [ 1599.939240][T10190] usb 1-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 1599.952166][T10411] usb 3-1: Using ep0 maxpacket: 8 [ 1599.952242][T10190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.966853][T10190] usb 1-1: Product: syz [ 1599.971341][T10190] usb 1-1: Manufacturer: syz [ 1599.976185][T10190] usb 1-1: SerialNumber: syz [ 1600.030650][T10411] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.083931][T10411] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1600.093755][T10411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.096440][T10190] usb 1-1: config 0 descriptor?? [ 1600.102000][T10411] usb 3-1: Product: syz [ 1600.102116][T10411] usb 3-1: Manufacturer: syz [ 1600.102229][T10411] usb 3-1: SerialNumber: syz [ 1600.183284][T10411] usb 3-1: config 0 descriptor?? [ 1600.199279][T10190] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 1600.258609][T10411] cdc_acm 3-1:0.0: skipping garbage [ 1600.499650][T10411] usb 3-1: USB disconnect, device number 78 [ 1600.960061][T10190] gspca_sunplus: reg_w_riv err -71 [ 1600.965823][T10190] sunplus 1-1:0.250: probe with driver sunplus failed with error -71 [ 1601.053065][T10190] usb 1-1: USB disconnect, device number 79 [ 1601.841165][T10190] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1602.041030][T10190] usb 3-1: Using ep0 maxpacket: 16 [ 1602.074275][T10190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.086012][T10190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.099655][T10190] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1602.113974][T10190] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1602.123456][T10190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.296151][T10190] usb 3-1: config 0 descriptor?? [ 1602.752249][T10190] usbhid 3-1:0.0: can't add hid device: -71 [ 1602.758891][T10190] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1602.873192][T10190] usb 3-1: USB disconnect, device number 79 [ 1603.003172][ T5808] Bluetooth: hci1: unexpected event for opcode 0x000a [ 1603.830545][T20878] vlan2: entered promiscuous mode [ 1603.842219][T20878] syz_tun: entered promiscuous mode [ 1603.980917][T20878] syz_tun: left promiscuous mode [ 1604.445415][T10411] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1604.593484][T20894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3922'. [ 1605.188423][ T5808] Bluetooth: hci5: unexpected event for opcode 0x000a [ 1605.292787][T10411] usb 7-1: Using ep0 maxpacket: 32 [ 1605.309940][T10411] usb 7-1: config 0 has an invalid interface number: 250 but max is 0 [ 1605.319152][T10411] usb 7-1: config 0 has no interface number 0 [ 1605.528708][T10411] usb 7-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 1605.541720][T10411] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.549995][T10411] usb 7-1: Product: syz [ 1605.555197][T10411] usb 7-1: Manufacturer: syz [ 1605.560054][T10411] usb 7-1: SerialNumber: syz [ 1605.908232][T10411] usb 7-1: config 0 descriptor?? [ 1605.963475][T20911] binder: 20903:20911 ioctl c0306201 20000080 returned -14 [ 1605.996096][T10411] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 1606.161337][T11456] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1606.347387][T11456] usb 1-1: Using ep0 maxpacket: 16 [ 1606.388285][T11456] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1606.401515][T11456] usb 1-1: config 0 has no interface number 0 [ 1606.407927][T11456] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1606.419310][T11456] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1606.584744][T11456] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1606.594603][T11456] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1606.607170][T11456] usb 1-1: Product: syz [ 1606.612666][T11456] usb 1-1: SerialNumber: syz [ 1606.688790][T11456] usb 1-1: config 0 descriptor?? [ 1606.738817][T11456] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1606.749129][T11456] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input27 [ 1606.841901][T10411] gspca_sunplus: reg_w_riv err -71 [ 1606.847590][T10411] sunplus 7-1:0.250: probe with driver sunplus failed with error -71 [ 1606.904994][ C1] cm109_urb_ctl_callback: 137 callbacks suppressed [ 1606.905068][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.923325][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.931609][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.939164][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.946725][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.954209][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.961676][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.969037][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.976456][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1606.988204][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1607.076858][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1607.086307][T11456] usb 1-1: USB disconnect, device number 80 [ 1607.118913][T11456] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1607.235880][T10411] usb 7-1: USB disconnect, device number 76 [ 1608.290204][T20933] SET target dimension over the limit! [ 1609.518895][ T9450] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1609.690643][T11456] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1609.739500][ T9450] usb 7-1: Using ep0 maxpacket: 32 [ 1609.796501][ T9450] usb 7-1: config 0 has an invalid interface number: 250 but max is 0 [ 1609.805241][ T9450] usb 7-1: config 0 has no interface number 0 [ 1609.882091][T11456] usb 1-1: Using ep0 maxpacket: 16 [ 1609.926240][T11456] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1609.926317][ T9450] usb 7-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 1609.936477][T11456] usb 1-1: config 0 has no interface number 0 [ 1609.936618][T11456] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1609.936794][T11456] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1609.975121][ T9450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.988695][ T9450] usb 7-1: Product: syz [ 1609.989192][T11456] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1609.994181][ T9450] usb 7-1: Manufacturer: syz [ 1610.002719][T11456] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1610.006994][ T9450] usb 7-1: SerialNumber: syz [ 1610.020692][T11456] usb 1-1: Product: syz [ 1610.025160][T11456] usb 1-1: SerialNumber: syz [ 1610.215311][T11456] usb 1-1: config 0 descriptor?? [ 1610.293567][T11456] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1610.305515][T11456] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input28 [ 1610.385678][ T9450] usb 7-1: config 0 descriptor?? [ 1610.464961][T11456] usb 1-1: USB disconnect, device number 81 [ 1610.465189][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1610.501254][T11456] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1610.548901][ T9450] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 1610.780580][T20972] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3950'. [ 1611.756764][ T9450] gspca_sunplus: reg_w_riv err -71 [ 1611.762558][ T9450] sunplus 7-1:0.250: probe with driver sunplus failed with error -71 [ 1611.860857][ T9450] usb 7-1: USB disconnect, device number 77 [ 1613.651567][T21010] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1614.081570][T10190] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1614.271762][T10190] usb 1-1: Using ep0 maxpacket: 16 [ 1614.318631][T10190] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1614.327292][T10190] usb 1-1: config 0 has no interface number 0 [ 1614.333867][T10190] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1614.345332][T10190] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1614.387980][T10190] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1614.397514][T10190] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1614.406116][T10190] usb 1-1: Product: syz [ 1614.410652][T10190] usb 1-1: SerialNumber: syz [ 1614.517361][T10190] usb 1-1: config 0 descriptor?? [ 1614.580092][T10190] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1614.672797][T10190] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input29 [ 1614.742731][ C1] cm109_urb_ctl_callback: 323 callbacks suppressed [ 1614.742841][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1614.759532][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1614.767510][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1614.775126][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1614.783263][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1614.791248][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1614.801948][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1614.810514][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1614.818192][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1614.825906][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1614.912702][T10190] usb 1-1: USB disconnect, device number 82 [ 1614.912934][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1615.051254][T10190] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1615.279365][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1618.431185][T10411] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1618.500974][ T9450] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1618.706660][T10411] usb 4-1: Using ep0 maxpacket: 16 [ 1618.727216][ T9450] usb 1-1: Using ep0 maxpacket: 16 [ 1618.758114][T10411] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1618.766516][T10411] usb 4-1: config 0 has no interface number 0 [ 1618.772960][T10411] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1618.784226][T10411] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1618.829098][ T9450] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.839670][ T9450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1618.853068][ T9450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1618.863094][ T9450] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1618.873140][ T9450] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1619.010879][T10411] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1619.020370][T10411] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1619.028727][T10411] usb 4-1: Product: syz [ 1619.033394][T10411] usb 4-1: SerialNumber: syz [ 1619.083163][ T9450] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1619.092842][ T9450] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1619.107605][ T9450] usb 1-1: Manufacturer: syz [ 1619.153727][T10411] usb 4-1: config 0 descriptor?? [ 1619.187945][T10411] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1619.208417][T10411] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input30 [ 1619.239236][ T9450] usb 1-1: config 0 descriptor?? [ 1619.590893][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1619.600155][T10411] usb 4-1: USB disconnect, device number 81 [ 1619.833300][T10411] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1619.850542][ T9450] rc_core: IR keymap rc-hauppauge not found [ 1619.856759][ T9450] Registered IR keymap rc-empty [ 1619.862520][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1619.957157][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1620.013003][ T9450] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1620.036467][ T9450] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 1620.338950][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1620.442079][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1620.696698][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1620.801332][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1620.855221][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1620.888321][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1621.003112][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1621.045409][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1621.099060][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1621.165201][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1621.194046][ T9450] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1621.307134][ T9450] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1621.315700][ T9450] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1621.438945][ T9450] usb 1-1: USB disconnect, device number 83 [ 1622.861863][T21129] ip6tnl1: entered promiscuous mode [ 1622.867339][T21129] ip6tnl1: entered allmulticast mode [ 1624.050954][ T9450] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1624.850619][ T9450] usb 3-1: Using ep0 maxpacket: 16 [ 1624.868719][ T9450] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1624.877326][ T9450] usb 3-1: config 0 has no interface number 0 [ 1624.883772][ T9450] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1624.896798][ T9450] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1624.907859][T10411] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1624.958998][ T9450] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1624.968667][ T9450] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1624.977195][ T9450] usb 3-1: Product: syz [ 1624.981701][ T9450] usb 3-1: SerialNumber: syz [ 1625.038442][ T9450] usb 3-1: config 0 descriptor?? [ 1625.083699][ T9450] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1625.094286][ T9450] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input32 [ 1625.117757][T10411] usb 2-1: Using ep0 maxpacket: 16 [ 1625.154115][T10411] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1625.190773][T10411] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1625.198863][T10411] usb 2-1: can't read configurations, error -71 [ 1625.255341][ C0] cm109_urb_ctl_callback: 606 callbacks suppressed [ 1625.255451][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1625.270746][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1625.278424][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1625.286143][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1625.293933][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1625.301653][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1625.309331][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1625.320475][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1625.328077][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1625.335718][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1625.356965][ T9450] usb 3-1: USB disconnect, device number 80 [ 1625.357199][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1625.385452][ T9450] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1626.691873][T10411] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1626.892482][T10411] usb 7-1: Using ep0 maxpacket: 32 [ 1626.915725][T10411] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.926337][T10411] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1626.935962][T10411] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1626.945445][T10411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.113819][T10411] usb 7-1: config 0 descriptor?? [ 1627.678621][T21182] binder: BINDER_SET_CONTEXT_MGR already set [ 1627.685011][T21182] binder: 21181:21182 ioctl 4018620d 20004a80 returned -16 [ 1627.703812][T21166] batadv0: entered promiscuous mode [ 1628.083326][T21186] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4015'. [ 1628.322753][T10411] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1628.550604][T11456] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1628.594250][T10411] usb 1-1: Using ep0 maxpacket: 16 [ 1628.637804][T10411] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1628.659961][T10411] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1628.668039][T10411] usb 1-1: can't read configurations, error -71 [ 1628.728440][T11456] usb 3-1: Using ep0 maxpacket: 16 [ 1628.775599][T11456] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1628.784333][T11456] usb 3-1: config 0 has no interface number 0 [ 1628.790992][T11456] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1628.802316][T11456] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1628.889515][T11456] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1628.899205][T11456] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1628.907772][T11456] usb 3-1: Product: syz [ 1628.912311][T11456] usb 3-1: SerialNumber: syz [ 1628.961779][ T9450] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1628.975243][T11456] usb 3-1: config 0 descriptor?? [ 1629.004642][T11456] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1629.039186][T11456] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input33 [ 1629.150799][ T9450] usb 2-1: Using ep0 maxpacket: 8 [ 1629.176230][ T9450] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1629.186996][ T9450] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1629.197221][ T9450] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1629.207573][ T9450] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1629.221633][ T9450] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1629.236485][ T9450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.376646][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1629.386051][T11456] usb 3-1: USB disconnect, device number 81 [ 1629.596951][ T1602] usb 7-1: USB disconnect, device number 78 [ 1629.635265][T11456] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1630.012887][T21164] batadv0: left promiscuous mode [ 1630.049127][ T9450] usb 2-1: GET_CAPABILITIES returned 2f [ 1630.063944][ T9450] usbtmc 2-1:16.0: can't read capabilities [ 1630.287188][ T9450] usb 2-1: USB disconnect, device number 14 [ 1630.511209][ T1602] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1630.691057][ T1602] usb 7-1: Using ep0 maxpacket: 16 [ 1630.723707][ T1602] usb 7-1: config 8 has an invalid interface number: 179 but max is 0 [ 1630.735480][ T1602] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.746541][ T1602] usb 7-1: config 8 has no interface number 0 [ 1630.753089][ T1602] usb 7-1: config 8 interface 179 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1630.908651][ T1602] usb 7-1: New USB device found, idVendor=c21c, idProduct=79d3, bcdDevice=56.9d [ 1630.918574][ T1602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.927004][ T1602] usb 7-1: Product: syz [ 1630.931630][ T1602] usb 7-1: Manufacturer: syz [ 1630.936561][ T1602] usb 7-1: SerialNumber: syz [ 1631.038357][ T1602] usb 7-1: bad CDC descriptors [ 1631.231472][T11456] usb 7-1: USB disconnect, device number 79 [ 1631.440988][ T1602] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1631.517129][T21220] dccp_invalid_packet: P.Data Offset(4) too small [ 1631.661161][ T1602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.672833][ T1602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.683050][ T1602] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1631.700781][ T1602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.722916][ T1602] usb 3-1: config 0 descriptor?? [ 1632.227239][ T1602] usbhid 3-1:0.0: can't add hid device: -71 [ 1632.234020][ T1602] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1632.241424][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1632.247073][ T1602] usb 3-1: USB disconnect, device number 82 [ 1632.248334][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1632.901329][T11456] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1633.083554][T11456] usb 1-1: Using ep0 maxpacket: 16 [ 1633.117512][T11456] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1633.130763][T11456] usb 1-1: config 0 has no interface number 0 [ 1633.137129][T11456] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1633.148706][T11456] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1633.191011][T21240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4039'. [ 1633.191430][T11456] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1633.209883][T11456] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1633.220091][T11456] usb 1-1: Product: syz [ 1633.228229][T11456] usb 1-1: SerialNumber: syz [ 1633.254926][T11456] usb 1-1: config 0 descriptor?? [ 1633.319120][T11456] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1633.334900][T11456] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input34 [ 1633.548068][ C1] cm109_urb_ctl_callback: 403 callbacks suppressed [ 1633.548182][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1633.564839][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1633.574565][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1633.583401][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1633.591266][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1633.600526][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1633.608088][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1633.620713][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1633.630506][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1633.641718][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1633.674375][T11456] usb 1-1: USB disconnect, device number 86 [ 1633.674584][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1633.897272][T11456] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1634.868489][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4046'. [ 1634.878306][T21260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4046'. [ 1635.185026][ T1602] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1635.215823][ T29] audit: type=1326 audit(1730146652.810:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21262 comm="syz.6.4049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3108b7e719 code=0x0 [ 1635.632899][ T9450] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1635.655989][ T5808] Bluetooth: hci5: adv larger than maximum supported [ 1635.656157][ T5808] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1635.679385][ T1602] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1635.693233][ T1602] usb 4-1: no configurations [ 1635.698084][ T1602] usb 4-1: can't read configurations, error -22 [ 1635.798426][ T9450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.810075][ T9450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.821140][ T9450] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1635.830651][ T9450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.855106][ T9450] usb 3-1: config 0 descriptor?? [ 1636.405295][ T9450] usbhid 3-1:0.0: can't add hid device: -71 [ 1636.412065][ T9450] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1636.443126][ T9450] usb 3-1: USB disconnect, device number 83 [ 1637.050888][ T1602] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1637.122526][ T9450] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1637.240804][ T1602] usb 2-1: Using ep0 maxpacket: 16 [ 1637.294374][ T9450] usb 1-1: device descriptor read/64, error -71 [ 1637.302684][ T1602] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1637.311450][ T1602] usb 2-1: config 0 has no interface number 0 [ 1637.317800][ T1602] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1637.334867][ T1602] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1637.497701][ T1602] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1637.507340][ T1602] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1637.515794][ T1602] usb 2-1: Product: syz [ 1637.520197][ T1602] usb 2-1: SerialNumber: syz [ 1637.550680][ T9450] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1637.583888][ T1602] usb 2-1: config 0 descriptor?? [ 1637.609034][ T1602] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1637.619475][ T1602] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input35 [ 1637.710627][ T9450] usb 1-1: device descriptor read/64, error -71 [ 1637.843794][ T9450] usb usb1-port1: attempt power cycle [ 1637.864495][ T1602] usb 2-1: USB disconnect, device number 15 [ 1637.864807][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1637.903459][ T1602] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1638.195712][ T9450] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1638.261753][ T9450] usb 1-1: device descriptor read/8, error -71 [ 1638.511476][ T9450] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1638.586128][ T9450] usb 1-1: device descriptor read/8, error -71 [ 1638.722107][ T9450] usb usb1-port1: unable to enumerate USB device [ 1640.690753][T11456] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1641.456803][ T5808] Bluetooth: hci1: adv larger than maximum supported [ 1641.457011][ T5808] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1641.572163][T11456] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1641.580209][T11456] usb 7-1: no configurations [ 1641.585314][T11456] usb 7-1: can't read configurations, error -22 [ 1642.550730][T15220] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1642.720663][T10190] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1642.776375][T15220] usb 2-1: Using ep0 maxpacket: 16 [ 1642.804641][T15220] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1642.813100][T15220] usb 2-1: config 0 has no interface number 0 [ 1642.819552][T15220] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1642.831517][T15220] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1642.931230][T10190] usb 3-1: device descriptor read/64, error -71 [ 1642.986148][T15220] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1642.996524][T15220] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1643.005188][T15220] usb 2-1: Product: syz [ 1643.009616][T15220] usb 2-1: SerialNumber: syz [ 1643.174030][T15220] usb 2-1: config 0 descriptor?? [ 1643.190981][T15220] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1643.201481][T15220] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input36 [ 1643.408714][ C1] cm109_urb_ctl_callback: 163 callbacks suppressed [ 1643.408826][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1643.425525][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1643.433765][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1643.441561][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1643.449174][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1643.456826][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1643.464626][T10190] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1643.475861][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1643.484726][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1643.485220][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1643.492797][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1643.579240][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1643.588629][T15220] usb 2-1: USB disconnect, device number 16 [ 1643.606822][T15220] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1643.720828][T10190] usb 3-1: device descriptor read/64, error -71 [ 1643.833684][T10190] usb usb3-port1: attempt power cycle [ 1644.213144][T10190] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1644.272987][T10190] usb 3-1: device descriptor read/8, error -71 [ 1644.531637][T10190] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1644.761605][T10190] usb 3-1: device descriptor read/8, error -71 [ 1644.930165][T10190] usb usb3-port1: unable to enumerate USB device [ 1646.115096][ T9450] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1646.337236][ T9450] usb 2-1: Using ep0 maxpacket: 16 [ 1646.360781][ T9450] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1646.369502][ T9450] usb 2-1: config 0 has no interface number 0 [ 1646.376053][ T9450] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1646.387383][ T9450] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1646.505630][ T9450] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1646.515723][ T9450] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1646.524259][ T9450] usb 2-1: Product: syz [ 1646.528675][ T9450] usb 2-1: SerialNumber: syz [ 1646.633210][ T9450] usb 2-1: config 0 descriptor?? [ 1646.733015][ T9450] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1646.753837][ T9450] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input37 [ 1646.942655][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1646.952124][ T9450] usb 2-1: USB disconnect, device number 17 [ 1646.973122][ T9450] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1647.083196][T10190] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1647.264950][T10190] usb 4-1: Using ep0 maxpacket: 8 [ 1647.307506][T10190] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1647.317863][T10190] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1647.328114][T10190] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1647.338450][T10190] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1647.352156][T10190] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1647.364779][T10190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.643351][T10190] usb 4-1: GET_CAPABILITIES returned 0 [ 1647.649193][T10190] usbtmc 4-1:16.0: can't read capabilities [ 1647.882268][ T9450] usb 4-1: USB disconnect, device number 84 [ 1648.340770][T10190] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1648.522179][T10190] usb 3-1: device descriptor read/64, error -71 [ 1648.794261][T10190] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1649.010571][T10190] usb 3-1: device descriptor read/64, error -71 [ 1649.122391][T10190] usb usb3-port1: attempt power cycle [ 1649.552285][T10190] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1649.628407][T10190] usb 3-1: device descriptor read/8, error -71 [ 1649.930654][T10190] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1649.962705][T10190] usb 3-1: device descriptor read/8, error -71 [ 1650.071840][T10190] usb usb3-port1: unable to enumerate USB device [ 1651.171358][ T9450] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1651.740789][ T9450] usb 1-1: Using ep0 maxpacket: 8 [ 1651.768883][ T9450] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1651.781497][ T9450] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1651.792529][ T9450] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1651.803763][ T9450] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1651.817963][ T9450] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1651.828103][ T9450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.145459][ T9450] usb 1-1: GET_CAPABILITIES returned 64 [ 1652.151521][ T9450] usbtmc 1-1:16.0: can't read capabilities [ 1652.356654][ T9450] usb 1-1: USB disconnect, device number 91 [ 1653.170818][ T9450] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1653.260745][ T1602] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1653.360968][ T9450] usb 7-1: Using ep0 maxpacket: 16 [ 1653.432312][ T9450] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1653.442174][ T9450] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1653.450799][ T9450] usb 7-1: Product: syz [ 1653.455225][ T9450] usb 7-1: Manufacturer: syz [ 1653.460085][ T9450] usb 7-1: SerialNumber: syz [ 1653.466702][ T1602] usb 3-1: device descriptor read/64, error -71 [ 1653.478206][ T9450] usb 7-1: config 0 descriptor?? [ 1653.756284][ T9450] usb 7-1: USB disconnect, device number 82 [ 1653.950817][ T1602] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1654.100472][ T1602] usb 3-1: device descriptor read/64, error -71 [ 1654.214761][ T1602] usb usb3-port1: attempt power cycle [ 1654.593616][ T1602] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1654.666625][ T1602] usb 3-1: device descriptor read/8, error -71 [ 1654.951110][ T1602] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1655.059068][ T1602] usb 3-1: device descriptor read/8, error -71 [ 1655.202783][ T1602] usb usb3-port1: unable to enumerate USB device [ 1657.378216][T21508] vlan4: entered promiscuous mode [ 1658.204083][T21526] loop0: detected capacity change from 0 to 256 [ 1659.857748][T10190] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1660.039697][T21557] vlan2: entered promiscuous mode [ 1660.056317][T10190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.067726][T10190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.078036][T10190] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1660.088358][T10190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.220002][T10190] usb 3-1: config 0 descriptor?? [ 1660.843000][T10190] usbhid 3-1:0.0: can't add hid device: -71 [ 1660.849631][T10190] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1660.946089][T10190] usb 3-1: USB disconnect, device number 96 [ 1661.171087][T11456] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1661.460893][T11456] usb 1-1: device descriptor read/64, error -71 [ 1661.685884][T21576] dccp_invalid_packet: P.Data Offset(4) too small [ 1661.720959][T11456] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1661.901177][T11456] usb 1-1: device descriptor read/64, error -71 [ 1662.041953][T11456] usb usb1-port1: attempt power cycle [ 1662.430747][T11456] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1662.489348][T11456] usb 1-1: device descriptor read/8, error -71 [ 1662.543265][T21589] vlan4: entered promiscuous mode [ 1662.760761][T11456] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1662.842301][T11456] usb 1-1: device descriptor read/8, error -71 [ 1662.956347][T11456] usb usb1-port1: unable to enumerate USB device [ 1663.521434][T21602] ===================================================== [ 1663.528694][T21602] BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 [ 1663.535862][T21602] sctp_sf_ootb+0x7f5/0xce0 [ 1663.540672][T21602] sctp_do_sm+0x181/0x93d0 [ 1663.545276][T21602] sctp_endpoint_bh_rcv+0xc38/0xf90 [ 1663.550816][T21602] sctp_inq_push+0x2ef/0x380 [ 1663.555584][T21602] sctp_rcv+0x3831/0x3b20 [ 1663.560071][T21602] sctp4_rcv+0x42/0x50 [ 1663.564525][T21602] ip_protocol_deliver_rcu+0xb51/0x13d0 [ 1663.570351][T21602] ip_local_deliver_finish+0x336/0x500 [ 1663.576127][T21602] ip_local_deliver+0x21f/0x490 [ 1663.581254][T21602] ip_rcv_finish+0x4a2/0x520 [ 1663.586025][T21602] ip_rcv+0xcd/0x380 [ 1663.590093][T21602] __netif_receive_skb+0x319/0xa00 [ 1663.595531][T21602] netif_receive_skb+0x58/0x660 [ 1663.600681][T21602] tun_rx_batched+0x3ee/0x980 [ 1663.605532][T21602] tun_get_user+0x5783/0x6c60 [ 1663.610481][T21602] tun_chr_write_iter+0x3ac/0x5d0 [ 1663.615739][T21602] vfs_write+0xb2b/0x1540 [ 1663.620361][T21602] ksys_write+0x24f/0x4c0 [ 1663.624881][T21602] __x64_sys_write+0x93/0xe0 [ 1663.629832][T21602] x64_sys_call+0x306a/0x3ba0 [ 1663.634804][T21602] do_syscall_64+0xcd/0x1e0 [ 1663.639514][T21602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.645700][T21602] [ 1663.648120][T21602] Uninit was created at: [ 1663.652716][T21602] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 1663.658834][T21602] kmalloc_reserve+0x13d/0x4a0 [ 1663.663892][T21602] __alloc_skb+0x363/0x7b0 [ 1663.668485][T21602] alloc_skb_with_frags+0xc8/0xd00 [ 1663.673886][T21602] sock_alloc_send_pskb+0xa81/0xbf0 [ 1663.679314][T21602] tun_get_user+0x20f4/0x6c60 [ 1663.684254][T21602] tun_chr_write_iter+0x3ac/0x5d0 [ 1663.689518][T21602] vfs_write+0xb2b/0x1540 [ 1663.694127][T21602] ksys_write+0x24f/0x4c0 [ 1663.698650][T21602] __x64_sys_write+0x93/0xe0 [ 1663.703513][T21602] x64_sys_call+0x306a/0x3ba0 [ 1663.708400][T21602] do_syscall_64+0xcd/0x1e0 [ 1663.713203][T21602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.719301][T21602] [ 1663.721855][T21602] CPU: 0 UID: 0 PID: 21602 Comm: syz.2.4194 Tainted: G W 6.12.0-rc5-syzkaller #0 [ 1663.732662][T21602] Tainted: [W]=WARN [ 1663.736575][T21602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1663.747310][T21602] ===================================================== [ 1663.754461][T21602] Disabling lock debugging due to kernel taint [ 1663.760826][T21602] Kernel panic - not syncing: kmsan.panic set ... [ 1663.767388][T21602] CPU: 0 UID: 0 PID: 21602 Comm: syz.2.4194 Tainted: G B W 6.12.0-rc5-syzkaller #0 [ 1663.778138][T21602] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1663.783283][T21602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1663.793494][T21602] Call Trace: [ 1663.796888][T21602] [ 1663.799932][T21602] dump_stack_lvl+0x216/0x2d0 [ 1663.804832][T21602] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1663.810893][T21602] dump_stack+0x1e/0x30 [ 1663.815261][T21602] panic+0x4e2/0xcf0 [ 1663.819376][T21602] ? kmsan_get_metadata+0x121/0x1c0 [ 1663.824838][T21602] kmsan_report+0x2c7/0x2d0 [ 1663.829578][T21602] ? filter_irq_stacks+0x60/0x1a0 [ 1663.834838][T21602] ? __msan_warning+0x95/0x120 [ 1663.839817][T21602] ? sctp_sf_ootb+0x7f5/0xce0 [ 1663.844708][T21602] ? sctp_do_sm+0x181/0x93d0 [ 1663.849491][T21602] ? sctp_endpoint_bh_rcv+0xc38/0xf90 [ 1663.855102][T21602] ? sctp_inq_push+0x2ef/0x380 [ 1663.860050][T21602] ? sctp_rcv+0x3831/0x3b20 [ 1663.864727][T21602] ? sctp4_rcv+0x42/0x50 [ 1663.869168][T21602] ? ip_protocol_deliver_rcu+0xb51/0x13d0 [ 1663.875097][T21602] ? ip_local_deliver_finish+0x336/0x500 [ 1663.880931][T21602] ? ip_local_deliver+0x21f/0x490 [ 1663.886143][T21602] ? ip_rcv_finish+0x4a2/0x520 [ 1663.891096][T21602] ? ip_rcv+0xcd/0x380 [ 1663.895347][T21602] ? __netif_receive_skb+0x319/0xa00 [ 1663.900855][T21602] ? netif_receive_skb+0x58/0x660 [ 1663.906092][T21602] ? tun_rx_batched+0x3ee/0x980 [ 1663.911124][T21602] ? tun_get_user+0x5783/0x6c60 [ 1663.916150][T21602] ? tun_chr_write_iter+0x3ac/0x5d0 [ 1663.921583][T21602] ? vfs_write+0xb2b/0x1540 [ 1663.926285][T21602] ? ksys_write+0x24f/0x4c0 [ 1663.930986][T21602] ? __x64_sys_write+0x93/0xe0 [ 1663.935952][T21602] ? x64_sys_call+0x306a/0x3ba0 [ 1663.941016][T21602] ? do_syscall_64+0xcd/0x1e0 [ 1663.945911][T21602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.952188][T21602] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1663.958261][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1663.963705][T21602] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1663.969756][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1663.975190][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1663.980626][T21602] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1663.986676][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1663.992106][T21602] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1663.998158][T21602] __msan_warning+0x95/0x120 [ 1664.002964][T21602] sctp_sf_ootb+0x7f5/0xce0 [ 1664.007687][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1664.013139][T21602] sctp_do_sm+0x181/0x93d0 [ 1664.017754][T21602] ? stack_depot_save_flags+0x2c/0x6e0 [ 1664.023435][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1664.028872][T21602] ? stack_depot_save+0x12/0x20 [ 1664.033927][T21602] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 1664.039956][T21602] ? kmsan_internal_chain_origin+0x57/0xd0 [ 1664.045979][T21602] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 1664.052533][T21602] ? __msan_memcpy+0x108/0x1c0 [ 1664.057509][T21602] ? sctp_init_addrs+0x4b/0x60 [ 1664.062485][T21602] ? sctp_rcv+0x3198/0x3b20 [ 1664.067160][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1664.072596][T21602] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1664.078645][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1664.084086][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1664.089518][T21602] ? __pfx_sctp_sf_ootb+0x10/0x10 [ 1664.094761][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1664.100199][T21602] sctp_endpoint_bh_rcv+0xc38/0xf90 [ 1664.105662][T21602] ? __pfx_sctp_endpoint_bh_rcv+0x10/0x10 [ 1664.111619][T21602] sctp_inq_push+0x2ef/0x380 [ 1664.116403][T21602] sctp_rcv+0x3831/0x3b20 [ 1664.120899][T21602] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1664.126982][T21602] ? __pfx_sctp4_rcv+0x10/0x10 [ 1664.131951][T21602] sctp4_rcv+0x42/0x50 [ 1664.136213][T21602] ip_protocol_deliver_rcu+0xb51/0x13d0 [ 1664.141973][T21602] ip_local_deliver_finish+0x336/0x500 [ 1664.147636][T21602] ip_local_deliver+0x21f/0x490 [ 1664.152663][T21602] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1664.158838][T21602] ? __pfx_ip_local_deliver+0x10/0x10 [ 1664.164392][T21602] ip_rcv_finish+0x4a2/0x520 [ 1664.169166][T21602] ip_rcv+0xcd/0x380 [ 1664.173228][T21602] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1664.178525][T21602] ? ip6_rcv_finish+0x8b0/0x970 [ 1664.183548][T21602] ? __pfx_ip_rcv+0x10/0x10 [ 1664.188212][T21602] __netif_receive_skb+0x319/0xa00 [ 1664.193529][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1664.198960][T21602] netif_receive_skb+0x58/0x660 [ 1664.204007][T21602] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1664.210041][T21602] ? tun_rx_batched+0x37c/0x980 [ 1664.215053][T21602] tun_rx_batched+0x3ee/0x980 [ 1664.219889][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1664.225310][T21602] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1664.231350][T21602] tun_get_user+0x5783/0x6c60 [ 1664.236196][T21602] ? kmsan_get_metadata+0x13e/0x1c0 [ 1664.241619][T21602] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1664.248172][T21602] ? ref_tracker_alloc+0x490/0x7e0 [ 1664.253522][T21602] tun_chr_write_iter+0x3ac/0x5d0 [ 1664.258800][T21602] vfs_write+0xb2b/0x1540 [ 1664.263347][T21602] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1664.269114][T21602] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1664.275154][T21602] ksys_write+0x24f/0x4c0 [ 1664.279683][T21602] __x64_sys_write+0x93/0xe0 [ 1664.284460][T21602] x64_sys_call+0x306a/0x3ba0 [ 1664.289340][T21602] do_syscall_64+0xcd/0x1e0 [ 1664.294046][T21602] ? clear_bhb_loop+0x25/0x80 [ 1664.298903][T21602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.304984][T21602] RIP: 0033:0x7ff4f7b7e719 [ 1664.309536][T21602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1664.329346][T21602] RSP: 002b:00007ff4f89ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1664.337942][T21602] RAX: ffffffffffffffda RBX: 00007ff4f7d35f80 RCX: 00007ff4f7b7e719 [ 1664.346081][T21602] RDX: 000000000000004f RSI: 0000000020000300 RDI: 0000000000000003 [ 1664.354198][T21602] RBP: 00007ff4f7bf132e R08: 0000000000000000 R09: 0000000000000000 [ 1664.362325][T21602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1664.370446][T21602] R13: 0000000000000000 R14: 00007ff4f7d35f80 R15: 00007fffcbe78298 [ 1664.378583][T21602] [ 1664.381969][T21602] Kernel Offset: disabled [ 1664.386360][T21602] Rebooting in 86400 seconds..