last executing test programs:

13.382227425s ago: executing program 3 (id=266):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x54, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813d1ba2a46"})
ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f00000000c0))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)=@newtaction={0x2c24, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x2c10, 0x1, [@m_pedit={0x2c0c, 0x1, 0x0, 0x0, {{0xa}, {0x2be0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0xfffffffc, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0xa, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0xfffff507, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x204, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdda2, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x5, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff33}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x7f, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x4, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1c, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2dc, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x20040}, {0x73d, 0x81, 0x4, 0xc, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x9}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xa4, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x1, 0xb, 0x1, 0x8f6, 0x5}, 0x4, 0x6, [{0x8, 0x9f1, 0x5, 0x5, 0x8000, 0x8}, {0x7, 0x8, 0x3ff, 0x9, 0x7, 0x69b}, {0x9, 0x6, 0xce, 0x81, 0xfffffff6, 0x4}, {0x649, 0x2, 0x9, 0x0, 0x1}, {0x78f88895, 0x5c5, 0x4, 0x3, 0x2, 0x7fffffff}, {0x2, 0x4, 0xff, 0x845, 0xff, 0x2}]}, [{0x9, 0x1ff, 0x1, 0x8, 0x7, 0x7f}, {0x388e, 0x8, 0x81, 0x1, 0x0, 0x1}, {0xdfe, 0xffff, 0x1, 0x0, 0x7, 0x7}, {0x7fffffff, 0x401, 0x80000000, 0x7, 0x2000000, 0x1}, {0x3, 0x7fff, 0x400, 0x8, 0x1, 0x26eb}, {0xee59, 0x1, 0x9, 0x8c5, 0x100, 0x8001}, {0x0, 0x1, 0xfffffffa, 0x80000001, 0xf, 0x8a0c}, {0x4e6, 0x10, 0x3, 0x401, 0xfffffffa}, {0x8000, 0x1, 0xffff0000, 0x800, 0xc4, 0xff}, {0x3, 0x8, 0x4, 0x101, 0xaf21, 0x2}, {0xc8d0, 0xf, 0x3, 0x9, 0x1d5, 0x8000}, {0x4, 0x6d2, 0x7fff, 0x3, 0x2}, {0x4, 0x1a6, 0xfffff589, 0x1, 0x3ff, 0x7fff}, {0x40100000, 0xfffffff7, 0x8001, 0x2, 0x5}, {0x0, 0x400, 0x7, 0x10000}, {0x9, 0x4, 0x9, 0x9, 0x400, 0x5}, {0x7, 0x2, 0x401, 0x8, 0x50000, 0x10001}, {0x0, 0x2, 0x5, 0x9, 0x2aa, 0x4}, {0x6, 0x6c8, 0x7f, 0x3, 0x6c, 0x2}, {0x80000000, 0xd, 0x1, 0x9, 0x2, 0x3}, {0xffff, 0xa4, 0xc210, 0x10001, 0x7, 0x7}, {0x6e, 0x46, 0x89, 0x1, 0x2, 0x7}, {0x5, 0x985, 0x6, 0x3, 0x6, 0x200}, {0x83e5, 0x1, 0x401, 0xfff, 0xdfd, 0x6}, {0xba, 0x6, 0x400, 0x81, 0xa40, 0x8}, {0x34, 0x7df, 0x7, 0x800, 0xf, 0xb}, {0x4, 0x621, 0x7, 0xff, 0x7fff, 0xe}, {0x8, 0x9, 0x4, 0x81, 0x1, 0x7}, {0x5, 0xec51, 0x7, 0x9, 0x101, 0x8}, {0x8, 0xffff, 0x34f, 0x7, 0x4, 0x6}, {0x6, 0x6, 0x0, 0x8000, 0x4, 0x6}, {0x7, 0x6da3, 0x3, 0x81, 0x2b48505, 0x9}, {0x4, 0x5, 0x2, 0x1, 0xc, 0x8}, {0xfffffffa, 0x4, 0x2, 0x5, 0x3ff, 0x8001}, {0x7fffffff, 0xdd3, 0x5, 0x5, 0x1, 0x4}, {0x9, 0x8, 0x9, 0x47f5, 0x8000, 0x96e}, {0x2, 0xfb12, 0x1000, 0x3a, 0x8, 0x2}, {0x3ff, 0x1, 0x40, 0x1, 0xa643, 0x29}, {0x8001, 0xb, 0xf, 0x80000000, 0xecc2, 0x8}, {0x2, 0x800, 0x0, 0x1a5, 0x35a, 0x4}, {0xe, 0xffffffff, 0x9b, 0x6, 0x9, 0x5}, {0x5, 0x7, 0x7ff, 0x8, 0x9}, {0x3, 0x6, 0x4, 0xdd93, 0x3, 0x8}, {0xbe6, 0x5, 0x7fffffff, 0x32c, 0x8, 0x7}, {0x6, 0x2, 0x3, 0x77a, 0x4a, 0x9}, {0xe, 0x2, 0x80, 0x1, 0x5, 0x7f}, {0x4, 0x7ff, 0xc7b, 0x9, 0x50f0, 0x5}, {0x169c, 0x7fffffff, 0x9, 0x100, 0xa, 0xfffffff7}, {0x5, 0x4828, 0xed, 0x6, 0xc7af, 0x6}, {0x2, 0x6, 0x3, 0x5, 0x3ff, 0x6}, {0x9, 0x80000001, 0x6, 0x401, 0xfffffffc}, {0x3, 0x10, 0x6, 0x3, 0x9, 0x6}, {0x7, 0x80000001, 0x3, 0x1, 0x8, 0x7}, {0x6, 0x5, 0x9, 0x800, 0x3ff, 0x8af8}, {0x2, 0xffff, 0x5, 0x7fff, 0x6, 0x3}, {0x6b4, 0x3, 0x87, 0xf8b, 0x9, 0x7}, {0x400, 0x5, 0x2, 0x4, 0xd348, 0xff}, {0x4, 0x631, 0x0, 0x9, 0x80000001, 0xc4e}, {0x4, 0xff, 0x9, 0x40, 0x0, 0x2}, {0x101, 0x4, 0x7, 0xb0b6, 0x7fffffff, 0x83}, {0x2, 0x7931, 0x40, 0x9, 0x8, 0x7}, {0x2, 0x1, 0x20b5, 0x0, 0xfffffffc, 0x6}, {0xffffffe1, 0x0, 0x1, 0xc20, 0x2cf, 0x4}, {0x2, 0xde5, 0x5f, 0x3, 0x0, 0x4}, {0x5, 0x2, 0x5188, 0x8, 0xe}, {0x5, 0xc, 0xf39, 0x8000, 0x60, 0xffff}, {0xfffffff7, 0x1, 0x8, 0xcf6, 0x0, 0x1ff}, {0x2, 0x9, 0xffff8000, 0x7, 0x6, 0xd19}, {0xffff, 0x401, 0x0, 0xffffffff, 0x40, 0xffffff3b}, {0x6e9, 0xff, 0x2, 0x6, 0xa0000000, 0xfe4a}, {0xe, 0x0, 0xffffb8d3, 0x2, 0x3, 0x1}, {0x3, 0x3a4, 0x5, 0x6, 0x6, 0x30}, {0xe, 0xffff, 0x7, 0x1, 0xffffffc0, 0x3}, {0x9, 0x0, 0x5, 0xe000000, 0xff, 0x352}, {0x40, 0x5, 0x200, 0x3c66, 0x80000000, 0x10000}, {0xfff, 0x0, 0xb5, 0x2, 0xe, 0x7f}, {0x10, 0x9, 0x8, 0x6, 0x2, 0x241}, {0x8, 0xdec0, 0x10001, 0x57db0296, 0x9, 0x4}, {0xd21, 0x6, 0x8, 0x2, 0x2, 0x6}, {0xfcd6, 0x4, 0x4, 0x7, 0x6, 0xd613}, {0x1, 0x0, 0xa, 0x1000, 0x4, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x800, 0xffff0271}, {0x6, 0x1, 0x3, 0x1000, 0x5, 0x5}, {0x3, 0xfffffffe, 0x4b, 0x2, 0x3f2b, 0x101}, {0x7, 0x2, 0xea84, 0x7, 0x7, 0x1}, {0x5, 0x3, 0x6, 0x8, 0x9, 0xc149}, {0x2, 0x4b0d, 0x7, 0xf, 0x1, 0x4}, {0x401, 0x8, 0x8, 0xb, 0x3, 0x6}, {0xfff, 0x5, 0x4, 0x3, 0x5}, {0x2, 0x3, 0x3, 0x3, 0x6a80000, 0x3}, {0x7f, 0x0, 0x0, 0xf1, 0xffffff21}, {0x3, 0x80, 0xd, 0x7af9, 0x3, 0x7ff}, {0x401, 0x0, 0x0, 0x0, 0x1, 0xc}, {0x4, 0x5, 0x1000, 0x3, 0x9, 0x5}, {0x3, 0x0, 0x6, 0x4, 0x1, 0xc}, {0x3aff, 0x28000000, 0x9b, 0x6, 0xd, 0x7}, {0x7fffffff, 0x10000, 0xe0000000, 0x5, 0xe, 0x3ff}, {0x10000, 0x0, 0x10, 0x6, 0x100, 0xb}, {0x5, 0x2, 0xd80, 0x81, 0x0, 0x866}, {0x4, 0x5, 0xffffffff, 0x2, 0x5, 0x10000}, {0x7, 0x0, 0x8, 0x40, 0x7, 0x5}, {0x7, 0xc0, 0x7ff, 0x3ff, 0xf5, 0x1}, {0x8, 0x4, 0x0, 0x6, 0x7, 0x2}, {0x7c, 0x2, 0x5, 0xf, 0x6, 0x9}, {0x3, 0x1, 0x7fffffff, 0x4f}, {0x4916, 0x10000, 0x14, 0x200, 0x8001, 0x3}, {0x6, 0x8, 0x1, 0x8, 0x7fff, 0x7}, {0x54f, 0x4, 0x81, 0x7, 0x4, 0x7}, {0x9, 0x80, 0x4, 0xfffff801, 0x0, 0x80000001}, {0xf, 0x0, 0x2bd, 0xe, 0x70, 0xf}, {0xdd, 0x3, 0x9, 0x4, 0x0, 0x3}, {0x5a, 0x8, 0x4, 0x6, 0x8, 0x1}, {0x8, 0x3, 0x9, 0x4, 0x4, 0xffffffff}, {0xffff, 0xfffffff8, 0x5, 0x5, 0x9, 0x100}, {0x1, 0x7f, 0x6, 0x2, 0xffff, 0x8}, {0x101, 0xa0000, 0x2b, 0x0, 0x0, 0x10}, {0x2124, 0xb6, 0x7, 0x7, 0x1, 0x1}, {0x1797, 0x8000, 0x1ff, 0x80000001, 0x91a, 0x86a}, {0x7, 0x5, 0x0, 0x6, 0xa, 0xfff}, {0x0, 0x50c, 0xbdb, 0x0, 0x4, 0x5}, {0x2, 0xfff, 0x3, 0xffffffff, 0x0, 0x3}, {0x58, 0x7, 0xfd, 0x5, 0x1, 0x401}, {0x1, 0x0, 0x800, 0xf8000000, 0x8, 0x101}, {0x3, 0x8, 0x6, 0xd327, 0x8, 0xdd}, {0x9, 0x8, 0x743, 0x4, 0x3, 0xd6d9}, {0xe67, 0xd, 0x5, 0x100, 0xe7, 0x8}, {0x3, 0x8, 0x9, 0x63c, 0x1000, 0x2}, {0xf48e, 0x4, 0xd000000, 0x7, 0x44b, 0x7}], [{0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x8}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {}, {0x3173f6319f87980, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x5}, {0x5}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x2}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x7}, {0x2}, {0x7}, {}, {0x3}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x2, 0xffff, 0x6, 0x10001, 0xfffffff8}, 0xa, 0x8a, [{0x9, 0x4, 0x3, 0xa16b37de, 0xe}, {0xe621, 0x1, 0x9422, 0x362, 0x1e0, 0x4}]}, [{0x5, 0x6, 0x1, 0xfffffffe, 0xb, 0x3}, {0x6, 0x1, 0x0, 0x6, 0xa97, 0x7}, {0x8000, 0xffffffff, 0x1000, 0xffff, 0x800}, {0x1, 0x2, 0x5, 0x9, 0x90f9, 0xf516}, {0x0, 0x7, 0x9, 0x2, 0x5, 0x6}, {0x5, 0x3000000, 0x4da7, 0x1, 0x80000000, 0xd}, {0x7a87d363, 0x98a3, 0x10001, 0x4, 0x1, 0x10000}, {0xa, 0x40, 0x7, 0xf167, 0xd, 0x3ff}, {0x10000, 0x8, 0x2, 0x9, 0xffffffff, 0x1}, {0x4, 0x9, 0x2, 0x7, 0x1, 0x2}, {0x2, 0x4, 0x6, 0x6, 0x3, 0x4}, {0xb, 0x8, 0x77954180, 0xfffff001, 0x2, 0xd}, {0xe, 0x5, 0x6, 0xff, 0x10000, 0xfffffffc}, {0xf2, 0x8, 0x5, 0x7, 0x1, 0xff}, {0xa, 0x9, 0x3, 0xffffffff, 0xff, 0xfff}, {0x400, 0xe910, 0x4, 0x3, 0x0, 0x3}, {0x0, 0x677ec74e, 0x7f, 0x7fffffff, 0x0, 0x80000000}, {0x2ea29b0c, 0x6b0b, 0x6, 0x3, 0x1, 0x3}, {0xd, 0x7, 0x4d, 0x101, 0x10001, 0x3}, {0x6, 0x7, 0x928, 0xa2, 0x1, 0x5}, {0x8, 0xffffffff, 0x3, 0x1, 0xffffffff, 0xdcf7}, {0x1, 0x200000, 0x3, 0x10000, 0x2, 0x5e}, {0x2, 0x4, 0x53b, 0x3, 0x7fff, 0x6}, {0x8, 0x2, 0x6, 0xffffffff, 0x8, 0x8be}, {0x40, 0x2f6, 0x81, 0x9, 0x6, 0x7}, {0x7, 0x3, 0xfffffff7, 0x3cfc5895, 0x80, 0x1}, {0x7, 0x4, 0x80000000, 0x9, 0x6, 0x101}, {0xe, 0x1, 0x3, 0x1, 0xdd, 0xcc}, {0x3, 0x0, 0x7, 0x8, 0x8, 0x75}, {0x6, 0x3, 0x6, 0x1, 0xdd3, 0x941}, {0xa, 0x80000001, 0x4, 0x401, 0x5, 0x2}, {0x2, 0x8001, 0xfffffeff, 0x1, 0x7, 0x100}, {0x1000, 0x5, 0x6, 0x1ff, 0x0, 0x4}, {0x4, 0x1ff, 0xfff, 0x0, 0x597a, 0x9}, {0x1a, 0x7, 0xa, 0xfffffff9, 0x6, 0xbf6}, {0x3e218170, 0xfffffffb, 0x8, 0x6, 0x4, 0x4}, {0xc, 0x400, 0x3ff, 0x3, 0x8, 0x1}, {0x38000, 0x0, 0xfffffffb, 0x8, 0xc7e, 0x2}, {0x9, 0x9, 0xfffffff8, 0x3, 0x0, 0x1}, {0x7, 0x1000000, 0x3, 0x3ff, 0x4d8badc3, 0x1000}, {0x7fffffff, 0x42a, 0x4, 0x8, 0x6}, {0xb, 0x3, 0x2, 0x10000, 0x5, 0x4}, {0x0, 0x1, 0xffffffff, 0x9, 0x3, 0xe}, {0x9, 0x1, 0xb9, 0x5, 0x4, 0x32}, {0x1400, 0xa, 0xfff, 0xd2b, 0xfffffffb, 0x8}, {0x8000, 0x4, 0x8, 0x10001, 0x1ff, 0x6}, {0x1, 0x6186, 0x2, 0x8, 0x9, 0x5}, {0xf, 0x4a1e, 0x9, 0x101, 0x9, 0xd81d}, {0x10000, 0x2b0a4a3e, 0xffff0001, 0x699, 0x2029, 0x10000}, {0x4, 0x7, 0x2, 0xffff, 0x101, 0x6}, {0xe9, 0x400, 0x2, 0xf, 0x1, 0x3}, {0x0, 0x82, 0x0, 0x7, 0x3, 0x2}, {0xc0, 0x0, 0x10, 0x1, 0x8, 0x5}, {0x2, 0x200, 0xfffffff9, 0x8000, 0x2, 0x8}, {0x8, 0xd470, 0x7, 0x0, 0xfffffffe, 0x8}, {0x9, 0x2, 0x6, 0x6, 0xf4bfd702, 0x1}, {0x6, 0x7, 0x3, 0x6, 0x1, 0xb8}, {0x9, 0x9, 0x2, 0x3, 0x6, 0x6}, {0x9a4, 0x2, 0x39dec57a, 0xffffbcad, 0x30000000, 0x3}, {0x3eb97d68, 0x0, 0x6, 0x3, 0x6, 0x1}, {0x0, 0x8, 0xa, 0x4, 0x0, 0x1f}, {0x1, 0x4, 0x8, 0x7fff, 0x3, 0x6}, {0x6de3, 0xc, 0xd91c, 0x6}, {0x10, 0x51cc, 0x100, 0x2, 0x6, 0xf}, {0x6, 0xfffffffe, 0xe7ad, 0x0, 0x4, 0x7}, {0x7, 0x5, 0xeb, 0x3, 0x0, 0x7a58}, {0x10, 0x9, 0x100, 0x80000000, 0x0, 0x7}, {0x6, 0x1, 0x139, 0x1b91, 0x5, 0x5}, {0x7f, 0xac39, 0x40, 0x280000, 0x8, 0x9}, {0x3, 0x4, 0xfff, 0x80000000, 0x0, 0x101}, {0xfde000, 0x2, 0x6da7, 0xfffffffb, 0xfff, 0x8}, {0x0, 0x2, 0x6, 0xd21, 0xe1, 0x5}, {0xffff, 0x7, 0x8, 0x8, 0x9, 0xa}, {0x180, 0x6, 0x8, 0x3, 0x5, 0xb}, {0x8001, 0x3, 0x101, 0x6, 0xc903, 0x7f}, {0x5, 0x8, 0xfd7, 0xffffffff, 0x7f, 0xa}, {0x4, 0x400, 0xba, 0x60c, 0x7ff, 0x6}, {0x3, 0x8, 0x3ff, 0xfdfc, 0xffffffff, 0x6}, {0x320, 0xd, 0x9, 0x0, 0x4d, 0x7}, {0x3, 0x2, 0xef03, 0x1, 0x2e9e}, {0x51cb, 0x1ff, 0x5c, 0x80, 0x3, 0x5}, {0x7ff, 0x7, 0x101, 0x0, 0x8, 0xffff}, {0x8, 0x2, 0xff, 0x1, 0x39, 0x9}, {0x0, 0x9, 0x10, 0x3, 0x9, 0x40}, {0x6, 0x9d2c, 0x6c, 0x5, 0xb, 0x1}, {0xfe, 0x1, 0xf2, 0xb, 0x1, 0x5}, {0x9, 0x7, 0x9, 0x2, 0x8, 0x7}, {0xfffffc00, 0x9, 0x3ff, 0xfffff000, 0xe0, 0x2}, {0x80, 0x9, 0x5dff, 0x8b, 0x4, 0xfffffff8}, {0x10000000, 0x9, 0x1, 0xffffffff, 0x86, 0x4}, {0x2d5, 0x8, 0x80000000, 0x0, 0x7, 0x2}, {0x5, 0x80, 0x1, 0x4, 0x5, 0x8}, {0x2, 0x9, 0x66ad, 0x5, 0x5, 0x7}, {0x0, 0x9, 0x5, 0x400, 0x7, 0x5}, {0x2, 0x3d9, 0x1fec5ace, 0xf, 0x2, 0x10000}, {0x7, 0x9, 0x9, 0x4, 0x0, 0x10}, {0xffffff81, 0xfffffc00, 0x1, 0xd, 0x2, 0xffff}, {0x8, 0x40, 0x9, 0x7, 0x3, 0x7f}, {0x18fa, 0x9, 0x4b, 0x7, 0x63, 0x3}, {0x40, 0xf, 0x844, 0x5, 0xf, 0xf}, {0x0, 0x401, 0x3, 0xffff, 0x89c, 0xfffffffa}, {0x0, 0x5, 0x661, 0x2b, 0xe6, 0x9}, {0x4, 0x9, 0x8, 0x5, 0x9, 0x8000}, {0x80000001, 0x4, 0x0, 0x200, 0x0, 0x80000000}, {0x3, 0x0, 0x400, 0x0, 0x7, 0x5}, {0x6, 0x9, 0x7, 0xd, 0x82f, 0x7ff}, {0x4, 0x60e, 0x1, 0x1, 0x4}, {0x78, 0x3, 0x3, 0x4, 0xffff4766, 0x7}, {0x2, 0x10001, 0x7, 0x3, 0x1, 0x5}, {0x1, 0x41a2, 0xffff4a66, 0x0, 0x6, 0x1}, {0xfffffff9, 0x0, 0x8, 0x400, 0xb5, 0x101}, {0x7, 0x0, 0x6, 0x1ff, 0x11, 0x3}, {0x1, 0x0, 0x9, 0x0, 0x7, 0xc57}, {0x7fffffff, 0x5, 0xffffffff, 0x7f, 0x1, 0x1}, {0x3, 0x9, 0x3, 0x50013bd6, 0x0, 0x4}, {0x80000000, 0x3, 0x4, 0x8, 0x4, 0x4}, {0x3, 0x7, 0x0, 0x1000, 0x6, 0x1}, {0xa02d, 0x4, 0xe, 0xd, 0x0, 0x400}, {0x6, 0xfffffffe, 0x400, 0xffffffff, 0x4, 0x9}, {0x9, 0x3, 0x8, 0x4, 0x9, 0x2}, {0x9, 0x6, 0xb23b, 0x7, 0x3, 0x97af}, {0xfffffff9, 0x2, 0x0, 0x8, 0x6}, {0x1, 0x5, 0x8001, 0x3, 0x7fffffff, 0x3}, {0x8, 0x3ff, 0x10001, 0xb, 0x2, 0x9c5}, {0xe9d, 0x8, 0xe9, 0x400, 0x4, 0x5cf}, {0x8, 0xb8, 0x8, 0x71, 0xd, 0xff}, {0xf9, 0x7, 0x7, 0x1, 0xe, 0x2}, {0x3, 0x400, 0x9, 0x1, 0x3, 0x6}], [{0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x2, 0x1}, {0x1, 0x61d023cdbd907091}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x3, 0xef997b81e6ed93d}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x1}, {}, {0x2}, {0x5}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x6}, {0x5}, {0x2, 0x1}, {0x4}, {0x2}, {0x3, 0x34de7a0c42b6c7f0}, {0x5, 0x1}, {0x5}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x1}, {0x8}, {0x4}, {0x5}, {0x3}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x5}, {0x4}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x5}, {0x7f5a86033e25656e}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0xcd8209ae31843148}, {0x7, 0x1}, {0x2}], 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x2c24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x6)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
r6 = inotify_init1(0x80800)
r7 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x64000ba6)
inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018)
mlockall(0x2)
syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, r8})

12.369822118s ago: executing program 2 (id=270):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0xc, &(0x7f0000000340)={0x20, 0x11, 0x41, {0x41, 0x28, "56fb9a59db284fba84c852454c66416b6dc449f16a84fd3c22631d58211b21e4c1266b71afb634627a92aa9724855b3c89c212dc9425f670025c937c0f9055"}}, &(0x7f0000000240)={0x0, 0x3, 0x21, @string={0x21, 0x3, "61037301e4547868802596333013e1ab5a9e3e5696ef7eaef536bf9296b962"}}}, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x20, 0x15, 0xb7, "c2663640b4f5c737de426fee2570d4b349bb39c988185749a6ae6d8b8cd5deb36c2f87e8214df2c74d1c577d6ba4b6240b192192b3f48a648fec88472936b6fb0d186044c8c675914595ff3ae1764fda077939423f34c52f70682b7ce5b69906173d8ec19c43249dd20df4a7a5c1549c3fc8eb1689330ba3cec26b1f372cc52b14bf18db99a27560eeb890d48c455c5b04125e8f8b40641c5a57ca7a0c042211c2cd26e17495a7438b0389a41cf617111daa9207debf95"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x81, 0x3, "172f8c"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, "c6"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "a5"}, &(0x7f0000000640)={0x20, 0x84, 0x4, "6a4eda26"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "5cb771"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000280)={0x0, 0x5, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(0xffffffffffffffff, r2, 0x0, 0x6)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xa2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f00002bb000/0x3000)=nil, 0x3000, 0x1)
setuid(0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r3, r6, 0x7, 0x0)
syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x0, 0x0, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "581c031315c8"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x0, 0x0, "9e"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x4, 0x4, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x6, 0x3, 0x8000, 0x5, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x0, 0x0, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000700)=""/79, &(0x7f0000000780)=0x4f)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x80, 0x8, 0x6, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xfe, 0x0, 0x4038a09, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x0, 0x0, 0x7, 0xc}})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc)

9.596934821s ago: executing program 1 (id=277):
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040))
timer_create(0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d})
ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2c0)
ioctl$UI_DEV_CREATE(r4, 0x5501)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
close(0x3)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r5 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xdca7, 0x800, 0x8000002, 0x1d4})
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x14000000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r3, 0x0, 0x50)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x8, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x1a, 0x400, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa87f16855a78bae5, 0x0, 0x3b00}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

9.407645527s ago: executing program 3 (id=278):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x11, 0x3, 0x10)
pipe(&(0x7f0000000080))
pipe(&(0x7f0000000000))
socket(0x2, 0x80802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000140))
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xc00, r2}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0)

9.078747441s ago: executing program 0 (id=279):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x1000008, 0x4)
connect$inet6(r0, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000080)={0xa, 0x4e21, 0xfc, @private2, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x24008804)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x80000)
r1 = socket$inet6(0xa, 0x800, 0x88)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x10000, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000300)={0x1, 0x1000000, 0x0, 0x0})
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181002, 0x0)
r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.clone_children\x00', 0x2, 0x0)
tee(r5, r4, 0xffffffff, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x3a, 0x0, @thr={&(0x7f0000000400)="696c7e9cef8da1e6a0434523148c903c9d5cc90855e74af2dbb4697db3c8870c1f3e054096c40b0f3f8c3ee5903ae3f129e5a60111d2e1e2b515289208305affa6778940bd702e3f320cbbb3124c11b4f5693f8c8c42e678c24dee653072d117f1a50e2c7bcaa86aa0c3f57f4edec50a78c4cc16a6a6157d290332c4b842e3f6f1cf6153a9c5fd47cf68f1958e8c4a43fbba0b888e9bb952a15e19d4bde443a87aeb02590d8af70fd7bb7c7c8e04007d43", &(0x7f0000000580)="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"}}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fc000000180001801400020073797a5f74756e000000000000000000050003000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20049005}, 0x4000080)
getdents64(r6, &(0x7f0000000080)=""/185, 0xb9)
socket(0x27, 0xa, 0x5)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f000065d000/0x1000)=nil, 0x2000})
socket(0x15, 0x4, 0x6)

8.788308558s ago: executing program 3 (id=280):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x54, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813d1ba2a46"})
ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f00000000c0))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)=@newtaction={0x2c24, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x2c10, 0x1, [@m_pedit={0x2c0c, 0x1, 0x0, 0x0, {{0xa}, {0x2be0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0xfffffffc, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0xa, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0xfffff507, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x204, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdda2, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x5, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff33}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x7f, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x4, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1c, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2dc, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x20040}, {0x73d, 0x81, 0x4, 0xc, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x9}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xa4, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x1, 0xb, 0x1, 0x8f6, 0x5}, 0x4, 0x6, [{0x8, 0x9f1, 0x5, 0x5, 0x8000, 0x8}, {0x7, 0x8, 0x3ff, 0x9, 0x7, 0x69b}, {0x9, 0x6, 0xce, 0x81, 0xfffffff6, 0x4}, {0x649, 0x2, 0x9, 0x0, 0x1}, {0x78f88895, 0x5c5, 0x4, 0x3, 0x2, 0x7fffffff}, {0x2, 0x4, 0xff, 0x845, 0xff, 0x2}]}, [{0x9, 0x1ff, 0x1, 0x8, 0x7, 0x7f}, {0x388e, 0x8, 0x81, 0x1, 0x0, 0x1}, {0xdfe, 0xffff, 0x1, 0x0, 0x7, 0x7}, {0x7fffffff, 0x401, 0x80000000, 0x7, 0x2000000, 0x1}, {0x3, 0x7fff, 0x400, 0x8, 0x1, 0x26eb}, {0xee59, 0x1, 0x9, 0x8c5, 0x100, 0x8001}, {0x0, 0x1, 0xfffffffa, 0x80000001, 0xf, 0x8a0c}, {0x4e6, 0x10, 0x3, 0x401, 0xfffffffa}, {0x8000, 0x1, 0xffff0000, 0x800, 0xc4, 0xff}, {0x3, 0x8, 0x4, 0x101, 0xaf21, 0x2}, {0xc8d0, 0xf, 0x3, 0x9, 0x1d5, 0x8000}, {0x4, 0x6d2, 0x7fff, 0x3, 0x2}, {0x4, 0x1a6, 0xfffff589, 0x1, 0x3ff, 0x7fff}, {0x40100000, 0xfffffff7, 0x8001, 0x2, 0x5}, {0x0, 0x400, 0x7, 0x10000}, {0x9, 0x4, 0x9, 0x9, 0x400, 0x5}, {0x7, 0x2, 0x401, 0x8, 0x50000, 0x10001}, {0x0, 0x2, 0x5, 0x9, 0x2aa, 0x4}, {0x6, 0x6c8, 0x7f, 0x3, 0x6c, 0x2}, {0x80000000, 0xd, 0x1, 0x9, 0x2, 0x3}, {0xffff, 0xa4, 0xc210, 0x10001, 0x7, 0x7}, {0x6e, 0x46, 0x89, 0x1, 0x2, 0x7}, {0x5, 0x985, 0x6, 0x3, 0x6, 0x200}, {0x83e5, 0x1, 0x401, 0xfff, 0xdfd, 0x6}, {0xba, 0x6, 0x400, 0x81, 0xa40, 0x8}, {0x34, 0x7df, 0x7, 0x800, 0xf, 0xb}, {0x4, 0x621, 0x7, 0xff, 0x7fff, 0xe}, {0x8, 0x9, 0x4, 0x81, 0x1, 0x7}, {0x5, 0xec51, 0x7, 0x9, 0x101, 0x8}, {0x8, 0xffff, 0x34f, 0x7, 0x4, 0x6}, {0x6, 0x6, 0x0, 0x8000, 0x4, 0x6}, {0x7, 0x6da3, 0x3, 0x81, 0x2b48505, 0x9}, {0x4, 0x5, 0x2, 0x1, 0xc, 0x8}, {0xfffffffa, 0x4, 0x2, 0x5, 0x3ff, 0x8001}, {0x7fffffff, 0xdd3, 0x5, 0x5, 0x1, 0x4}, {0x9, 0x8, 0x9, 0x47f5, 0x8000, 0x96e}, {0x2, 0xfb12, 0x1000, 0x3a, 0x8, 0x2}, {0x3ff, 0x1, 0x40, 0x1, 0xa643, 0x29}, {0x8001, 0xb, 0xf, 0x80000000, 0xecc2, 0x8}, {0x2, 0x800, 0x0, 0x1a5, 0x35a, 0x4}, {0xe, 0xffffffff, 0x9b, 0x6, 0x9, 0x5}, {0x5, 0x7, 0x7ff, 0x8, 0x9}, {0x3, 0x6, 0x4, 0xdd93, 0x3, 0x8}, {0xbe6, 0x5, 0x7fffffff, 0x32c, 0x8, 0x7}, {0x6, 0x2, 0x3, 0x77a, 0x4a, 0x9}, {0xe, 0x2, 0x80, 0x1, 0x5, 0x7f}, {0x4, 0x7ff, 0xc7b, 0x9, 0x50f0, 0x5}, {0x169c, 0x7fffffff, 0x9, 0x100, 0xa, 0xfffffff7}, {0x5, 0x4828, 0xed, 0x6, 0xc7af, 0x6}, {0x2, 0x6, 0x3, 0x5, 0x3ff, 0x6}, {0x9, 0x80000001, 0x6, 0x401, 0xfffffffc}, {0x3, 0x10, 0x6, 0x3, 0x9, 0x6}, {0x7, 0x80000001, 0x3, 0x1, 0x8, 0x7}, {0x6, 0x5, 0x9, 0x800, 0x3ff, 0x8af8}, {0x2, 0xffff, 0x5, 0x7fff, 0x6, 0x3}, {0x6b4, 0x3, 0x87, 0xf8b, 0x9, 0x7}, {0x400, 0x5, 0x2, 0x4, 0xd348, 0xff}, {0x4, 0x631, 0x0, 0x9, 0x80000001, 0xc4e}, {0x4, 0xff, 0x9, 0x40, 0x0, 0x2}, {0x101, 0x4, 0x7, 0xb0b6, 0x7fffffff, 0x83}, {0x2, 0x7931, 0x40, 0x9, 0x8, 0x7}, {0x2, 0x1, 0x20b5, 0x0, 0xfffffffc, 0x6}, {0xffffffe1, 0x0, 0x1, 0xc20, 0x2cf, 0x4}, {0x2, 0xde5, 0x5f, 0x3, 0x0, 0x4}, {0x5, 0x2, 0x5188, 0x8, 0xe}, {0x5, 0xc, 0xf39, 0x8000, 0x60, 0xffff}, {0xfffffff7, 0x1, 0x8, 0xcf6, 0x0, 0x1ff}, {0x2, 0x9, 0xffff8000, 0x7, 0x6, 0xd19}, {0xffff, 0x401, 0x0, 0xffffffff, 0x40, 0xffffff3b}, {0x6e9, 0xff, 0x2, 0x6, 0xa0000000, 0xfe4a}, {0xe, 0x0, 0xffffb8d3, 0x2, 0x3, 0x1}, {0x3, 0x3a4, 0x5, 0x6, 0x6, 0x30}, {0xe, 0xffff, 0x7, 0x1, 0xffffffc0, 0x3}, {0x9, 0x0, 0x5, 0xe000000, 0xff, 0x352}, {0x40, 0x5, 0x200, 0x3c66, 0x80000000, 0x10000}, {0xfff, 0x0, 0xb5, 0x2, 0xe, 0x7f}, {0x10, 0x9, 0x8, 0x6, 0x2, 0x241}, {0x8, 0xdec0, 0x10001, 0x57db0296, 0x9, 0x4}, {0xd21, 0x6, 0x8, 0x2, 0x2, 0x6}, {0xfcd6, 0x4, 0x4, 0x7, 0x6, 0xd613}, {0x1, 0x0, 0xa, 0x1000, 0x4, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x800, 0xffff0271}, {0x6, 0x1, 0x3, 0x1000, 0x5, 0x5}, {0x3, 0xfffffffe, 0x4b, 0x2, 0x3f2b, 0x101}, {0x7, 0x2, 0xea84, 0x7, 0x7, 0x1}, {0x5, 0x3, 0x6, 0x8, 0x9, 0xc149}, {0x2, 0x4b0d, 0x7, 0xf, 0x1, 0x4}, {0x401, 0x8, 0x8, 0xb, 0x3, 0x6}, {0xfff, 0x5, 0x4, 0x3, 0x5}, {0x2, 0x3, 0x3, 0x3, 0x6a80000, 0x3}, {0x7f, 0x0, 0x0, 0xf1, 0xffffff21}, {0x3, 0x80, 0xd, 0x7af9, 0x3, 0x7ff}, {0x401, 0x0, 0x0, 0x0, 0x1, 0xc}, {0x4, 0x5, 0x1000, 0x3, 0x9, 0x5}, {0x3, 0x0, 0x6, 0x4, 0x1, 0xc}, {0x3aff, 0x28000000, 0x9b, 0x6, 0xd, 0x7}, {0x7fffffff, 0x10000, 0xe0000000, 0x5, 0xe, 0x3ff}, {0x10000, 0x0, 0x10, 0x6, 0x100, 0xb}, {0x5, 0x2, 0xd80, 0x81, 0x0, 0x866}, {0x4, 0x5, 0xffffffff, 0x2, 0x5, 0x10000}, {0x7, 0x0, 0x8, 0x40, 0x7, 0x5}, {0x7, 0xc0, 0x7ff, 0x3ff, 0xf5, 0x1}, {0x8, 0x4, 0x0, 0x6, 0x7, 0x2}, {0x7c, 0x2, 0x5, 0xf, 0x6, 0x9}, {0x3, 0x1, 0x7fffffff, 0x4f}, {0x4916, 0x10000, 0x14, 0x200, 0x8001, 0x3}, {0x6, 0x8, 0x1, 0x8, 0x7fff, 0x7}, {0x54f, 0x4, 0x81, 0x7, 0x4, 0x7}, {0x9, 0x80, 0x4, 0xfffff801, 0x0, 0x80000001}, {0xf, 0x0, 0x2bd, 0xe, 0x70, 0xf}, {0xdd, 0x3, 0x9, 0x4, 0x0, 0x3}, {0x5a, 0x8, 0x4, 0x6, 0x8, 0x1}, {0x8, 0x3, 0x9, 0x4, 0x4, 0xffffffff}, {0xffff, 0xfffffff8, 0x5, 0x5, 0x9, 0x100}, {0x1, 0x7f, 0x6, 0x2, 0xffff, 0x8}, {0x101, 0xa0000, 0x2b, 0x0, 0x0, 0x10}, {0x2124, 0xb6, 0x7, 0x7, 0x1, 0x1}, {0x1797, 0x8000, 0x1ff, 0x80000001, 0x91a, 0x86a}, {0x7, 0x5, 0x0, 0x6, 0xa, 0xfff}, {0x0, 0x50c, 0xbdb, 0x0, 0x4, 0x5}, {0x2, 0xfff, 0x3, 0xffffffff, 0x0, 0x3}, {0x58, 0x7, 0xfd, 0x5, 0x1, 0x401}, {0x1, 0x0, 0x800, 0xf8000000, 0x8, 0x101}, {0x3, 0x8, 0x6, 0xd327, 0x8, 0xdd}, {0x9, 0x8, 0x743, 0x4, 0x3, 0xd6d9}, {0xe67, 0xd, 0x5, 0x100, 0xe7, 0x8}, {0x3, 0x8, 0x9, 0x63c, 0x1000, 0x2}, {0xf48e, 0x4, 0xd000000, 0x7, 0x44b, 0x7}], [{0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x8}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {}, {0x3173f6319f87980, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x5}, {0x5}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x2}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x7}, {0x2}, {0x7}, {}, {0x3}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x2, 0xffff, 0x6, 0x10001, 0xfffffff8}, 0xa, 0x8a, [{0x9, 0x4, 0x3, 0xa16b37de, 0xe}, {0xe621, 0x1, 0x9422, 0x362, 0x1e0, 0x4}]}, [{0x5, 0x6, 0x1, 0xfffffffe, 0xb, 0x3}, {0x6, 0x1, 0x0, 0x6, 0xa97, 0x7}, {0x8000, 0xffffffff, 0x1000, 0xffff, 0x800}, {0x1, 0x2, 0x5, 0x9, 0x90f9, 0xf516}, {0x0, 0x7, 0x9, 0x2, 0x5, 0x6}, {0x5, 0x3000000, 0x4da7, 0x1, 0x80000000, 0xd}, {0x7a87d363, 0x98a3, 0x10001, 0x4, 0x1, 0x10000}, {0xa, 0x40, 0x7, 0xf167, 0xd, 0x3ff}, {0x10000, 0x8, 0x2, 0x9, 0xffffffff, 0x1}, {0x4, 0x9, 0x2, 0x7, 0x1, 0x2}, {0x2, 0x4, 0x6, 0x6, 0x3, 0x4}, {0xb, 0x8, 0x77954180, 0xfffff001, 0x2, 0xd}, {0xe, 0x5, 0x6, 0xff, 0x10000, 0xfffffffc}, {0xf2, 0x8, 0x5, 0x7, 0x1, 0xff}, {0xa, 0x9, 0x3, 0xffffffff, 0xff, 0xfff}, {0x400, 0xe910, 0x4, 0x3, 0x0, 0x3}, {0x0, 0x677ec74e, 0x7f, 0x7fffffff, 0x0, 0x80000000}, {0x2ea29b0c, 0x6b0b, 0x6, 0x3, 0x1, 0x3}, {0xd, 0x7, 0x4d, 0x101, 0x10001, 0x3}, {0x6, 0x7, 0x928, 0xa2, 0x1, 0x5}, {0x8, 0xffffffff, 0x3, 0x1, 0xffffffff, 0xdcf7}, {0x1, 0x200000, 0x3, 0x10000, 0x2, 0x5e}, {0x2, 0x4, 0x53b, 0x3, 0x7fff, 0x6}, {0x8, 0x2, 0x6, 0xffffffff, 0x8, 0x8be}, {0x40, 0x2f6, 0x81, 0x9, 0x6, 0x7}, {0x7, 0x3, 0xfffffff7, 0x3cfc5895, 0x80, 0x1}, {0x7, 0x4, 0x80000000, 0x9, 0x6, 0x101}, {0xe, 0x1, 0x3, 0x1, 0xdd, 0xcc}, {0x3, 0x0, 0x7, 0x8, 0x8, 0x75}, {0x6, 0x3, 0x6, 0x1, 0xdd3, 0x941}, {0xa, 0x80000001, 0x4, 0x401, 0x5, 0x2}, {0x2, 0x8001, 0xfffffeff, 0x1, 0x7, 0x100}, {0x1000, 0x5, 0x6, 0x1ff, 0x0, 0x4}, {0x4, 0x1ff, 0xfff, 0x0, 0x597a, 0x9}, {0x1a, 0x7, 0xa, 0xfffffff9, 0x6, 0xbf6}, {0x3e218170, 0xfffffffb, 0x8, 0x6, 0x4, 0x4}, {0xc, 0x400, 0x3ff, 0x3, 0x8, 0x1}, {0x38000, 0x0, 0xfffffffb, 0x8, 0xc7e, 0x2}, {0x9, 0x9, 0xfffffff8, 0x3, 0x0, 0x1}, {0x7, 0x1000000, 0x3, 0x3ff, 0x4d8badc3, 0x1000}, {0x7fffffff, 0x42a, 0x4, 0x8, 0x6}, {0xb, 0x3, 0x2, 0x10000, 0x5, 0x4}, {0x0, 0x1, 0xffffffff, 0x9, 0x3, 0xe}, {0x9, 0x1, 0xb9, 0x5, 0x4, 0x32}, {0x1400, 0xa, 0xfff, 0xd2b, 0xfffffffb, 0x8}, {0x8000, 0x4, 0x8, 0x10001, 0x1ff, 0x6}, {0x1, 0x6186, 0x2, 0x8, 0x9, 0x5}, {0xf, 0x4a1e, 0x9, 0x101, 0x9, 0xd81d}, {0x10000, 0x2b0a4a3e, 0xffff0001, 0x699, 0x2029, 0x10000}, {0x4, 0x7, 0x2, 0xffff, 0x101, 0x6}, {0xe9, 0x400, 0x2, 0xf, 0x1, 0x3}, {0x0, 0x82, 0x0, 0x7, 0x3, 0x2}, {0xc0, 0x0, 0x10, 0x1, 0x8, 0x5}, {0x2, 0x200, 0xfffffff9, 0x8000, 0x2, 0x8}, {0x8, 0xd470, 0x7, 0x0, 0xfffffffe, 0x8}, {0x9, 0x2, 0x6, 0x6, 0xf4bfd702, 0x1}, {0x6, 0x7, 0x3, 0x6, 0x1, 0xb8}, {0x9, 0x9, 0x2, 0x3, 0x6, 0x6}, {0x9a4, 0x2, 0x39dec57a, 0xffffbcad, 0x30000000, 0x3}, {0x3eb97d68, 0x0, 0x6, 0x3, 0x6, 0x1}, {0x0, 0x8, 0xa, 0x4, 0x0, 0x1f}, {0x1, 0x4, 0x8, 0x7fff, 0x3, 0x6}, {0x6de3, 0xc, 0xd91c, 0x6}, {0x10, 0x51cc, 0x100, 0x2, 0x6, 0xf}, {0x6, 0xfffffffe, 0xe7ad, 0x0, 0x4, 0x7}, {0x7, 0x5, 0xeb, 0x3, 0x0, 0x7a58}, {0x10, 0x9, 0x100, 0x80000000, 0x0, 0x7}, {0x6, 0x1, 0x139, 0x1b91, 0x5, 0x5}, {0x7f, 0xac39, 0x40, 0x280000, 0x8, 0x9}, {0x3, 0x4, 0xfff, 0x80000000, 0x0, 0x101}, {0xfde000, 0x2, 0x6da7, 0xfffffffb, 0xfff, 0x8}, {0x0, 0x2, 0x6, 0xd21, 0xe1, 0x5}, {0xffff, 0x7, 0x8, 0x8, 0x9, 0xa}, {0x180, 0x6, 0x8, 0x3, 0x5, 0xb}, {0x8001, 0x3, 0x101, 0x6, 0xc903, 0x7f}, {0x5, 0x8, 0xfd7, 0xffffffff, 0x7f, 0xa}, {0x4, 0x400, 0xba, 0x60c, 0x7ff, 0x6}, {0x3, 0x8, 0x3ff, 0xfdfc, 0xffffffff, 0x6}, {0x320, 0xd, 0x9, 0x0, 0x4d, 0x7}, {0x3, 0x2, 0xef03, 0x1, 0x2e9e}, {0x51cb, 0x1ff, 0x5c, 0x80, 0x3, 0x5}, {0x7ff, 0x7, 0x101, 0x0, 0x8, 0xffff}, {0x8, 0x2, 0xff, 0x1, 0x39, 0x9}, {0x0, 0x9, 0x10, 0x3, 0x9, 0x40}, {0x6, 0x9d2c, 0x6c, 0x5, 0xb, 0x1}, {0xfe, 0x1, 0xf2, 0xb, 0x1, 0x5}, {0x9, 0x7, 0x9, 0x2, 0x8, 0x7}, {0xfffffc00, 0x9, 0x3ff, 0xfffff000, 0xe0, 0x2}, {0x80, 0x9, 0x5dff, 0x8b, 0x4, 0xfffffff8}, {0x10000000, 0x9, 0x1, 0xffffffff, 0x86, 0x4}, {0x2d5, 0x8, 0x80000000, 0x0, 0x7, 0x2}, {0x5, 0x80, 0x1, 0x4, 0x5, 0x8}, {0x2, 0x9, 0x66ad, 0x5, 0x5, 0x7}, {0x0, 0x9, 0x5, 0x400, 0x7, 0x5}, {0x2, 0x3d9, 0x1fec5ace, 0xf, 0x2, 0x10000}, {0x7, 0x9, 0x9, 0x4, 0x0, 0x10}, {0xffffff81, 0xfffffc00, 0x1, 0xd, 0x2, 0xffff}, {0x8, 0x40, 0x9, 0x7, 0x3, 0x7f}, {0x18fa, 0x9, 0x4b, 0x7, 0x63, 0x3}, {0x40, 0xf, 0x844, 0x5, 0xf, 0xf}, {0x0, 0x401, 0x3, 0xffff, 0x89c, 0xfffffffa}, {0x0, 0x5, 0x661, 0x2b, 0xe6, 0x9}, {0x4, 0x9, 0x8, 0x5, 0x9, 0x8000}, {0x80000001, 0x4, 0x0, 0x200, 0x0, 0x80000000}, {0x3, 0x0, 0x400, 0x0, 0x7, 0x5}, {0x6, 0x9, 0x7, 0xd, 0x82f, 0x7ff}, {0x4, 0x60e, 0x1, 0x1, 0x4}, {0x78, 0x3, 0x3, 0x4, 0xffff4766, 0x7}, {0x2, 0x10001, 0x7, 0x3, 0x1, 0x5}, {0x1, 0x41a2, 0xffff4a66, 0x0, 0x6, 0x1}, {0xfffffff9, 0x0, 0x8, 0x400, 0xb5, 0x101}, {0x7, 0x0, 0x6, 0x1ff, 0x11, 0x3}, {0x1, 0x0, 0x9, 0x0, 0x7, 0xc57}, {0x7fffffff, 0x5, 0xffffffff, 0x7f, 0x1, 0x1}, {0x3, 0x9, 0x3, 0x50013bd6, 0x0, 0x4}, {0x80000000, 0x3, 0x4, 0x8, 0x4, 0x4}, {0x3, 0x7, 0x0, 0x1000, 0x6, 0x1}, {0xa02d, 0x4, 0xe, 0xd, 0x0, 0x400}, {0x6, 0xfffffffe, 0x400, 0xffffffff, 0x4, 0x9}, {0x9, 0x3, 0x8, 0x4, 0x9, 0x2}, {0x9, 0x6, 0xb23b, 0x7, 0x3, 0x97af}, {0xfffffff9, 0x2, 0x0, 0x8, 0x6}, {0x1, 0x5, 0x8001, 0x3, 0x7fffffff, 0x3}, {0x8, 0x3ff, 0x10001, 0xb, 0x2, 0x9c5}, {0xe9d, 0x8, 0xe9, 0x400, 0x4, 0x5cf}, {0x8, 0xb8, 0x8, 0x71, 0xd, 0xff}, {0xf9, 0x7, 0x7, 0x1, 0xe, 0x2}, {0x3, 0x400, 0x9, 0x1, 0x3, 0x6}], [{0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x2, 0x1}, {0x1, 0x61d023cdbd907091}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x3, 0xef997b81e6ed93d}, {0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x1}, {}, {0x2}, {0x5}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x6}, {0x5}, {0x2, 0x1}, {0x4}, {0x2}, {0x3, 0x34de7a0c42b6c7f0}, {0x5, 0x1}, {0x5}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x1}, {0x8}, {0x4}, {0x5}, {0x3}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x5}, {0x4}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x5}, {0x7f5a86033e25656e}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0xcd8209ae31843148}, {0x7, 0x1}, {0x2}], 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x2c24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x6)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
r5 = inotify_init1(0x80800)
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x64000ba6)
inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018)
mlockall(0x2)
syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, r7})

8.654569402s ago: executing program 2 (id=281):
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3})
socket(0x200000000000011, 0x5, 0xe)
socket(0x200000000000011, 0x2, 0x0)
syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)

7.799890424s ago: executing program 4 (id=282):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usbip_server_init(0x4)
r1 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10000000, @remote}, 0x1c)

7.52943753s ago: executing program 0 (id=283):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000000002010400000000000000000200000004000180300003802c0001801400030000000000000000000000ffffe000000214000400fe8000000000000000000000000000bb240002801400018008"], 0x6c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000380)={0xf94, [0x8, 0x9, 0x3], [{0xfffff17b, 0xc2a, 0x0, 0x0, 0x1}, {0x5, 0x10001, 0x0, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1}, {0x3, 0x400, 0x1}, {0x2d, 0x9cb, 0x0, 0x1}, {0x4, 0x40, 0x0, 0x0, 0x1, 0x1}, {0xf5, 0x80000000, 0x0, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x1}, {0xc1, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x8, 0x0, 0x1, 0x1}], 0x4a46ac0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x0, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000"])

7.180257604s ago: executing program 0 (id=284):
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90)
r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x1, 0x2000)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001140)={0xb0000008})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902110000fffffffedbdf2500"], 0x10}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @private=0xa010101}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
write$P9_RSTATu(r4, 0x0, 0x62)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x3fff8, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x22000, 0x0, 0xffffffff, 0x8, 0x101, 0x3, 0xfe, 0x0, 0x0, 0xfffffffc, {0x4, 0x6, 0xfffffffd, 0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x40000c4)
sendmmsg(r3, &(0x7f00000024c0)=[{{&(0x7f0000000040)=@xdp={0x2c, 0x5, r7, 0x35}, 0x80, &(0x7f0000000240)}}, {{&(0x7f0000002540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x3, 0x4, 0x3, {0xa, 0x4e23, 0x58, @private1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000005c0)="36702b83ad50cbfba03ffdf53586bbe56cd75691fc33b8e77dbf23696bf3c5eb6a0dd5e000f18b713bb380d17b8fc5e59e663d81f73ad3b03b7edbc75a5fa35097c521dde2571d2fa83e5674e50678d7a5cdb0f294482ab1a642725418ae16e5f74a3297243379ea87e86233df661ba55c800b46092195b1f717a8ec3ccfd5f50e48ad5fc7305a365296064003c896088cce9df51d570b35deaef09844613a3acc03803ed3b9cf297e723484b54bdcfcaed1a2bf", 0xb4}, {&(0x7f0000000680)="067d1c89a064e6c92845626666c44fccad0cf6595334b2c17254cf8b6b33adb902723fb438cf7d1c7fe13e62b4ce1dd4208d27c8fe9b1f0e08da709737f27f662709ad625aa72adf27a58268c23482001d9996f67a69afc30fb7c8f78e9a686e2a06dbc69ffdb61115439fa842ecbd9f767ab3838253f3b0f25b7ac602eb1b0e6130fb6a23df99abc60212397b5030c667ae2a12bf769332ceb8f1c2c28074e773544f4803f28666f65d833c44751418eb6782659239635567784224e5195352", 0xc0}, {&(0x7f0000000300)}, {&(0x7f0000000340)="a7e8dbd36aaa77b9456d79fd555a23301a2d114a5cc5ed5844beae", 0x1b}, {&(0x7f0000000800)="ea466972d9b58719d49bb16015b1fff2ff4b6bd6150065e6ade2b7a14ce781040d365ece5f33896929eb4496db3d5d37db93dea3c0c223d731b886e3cb382e8b366dedd745e98ccbcf8a7986b6c1776dba1fd5f97a3abdbfb79ee39aae8c309a8e49bb5ae9f1964299bd11cf8f20b26e97c4c0fba60a4a8960999a6a667b905366935a93ce55a02fd5d8bd278d9f0d291740ab84d36dcc6275b02d7767bc4303f9df0b14054db93251a7143c3b7b135f95990b220a725426d01a263a73ec4411d4aa1f", 0xc3}, {&(0x7f0000000400)="e47470124c6f88b351457e8aad6cd2cdb41439782efb96ab8bebd085fe4fbf754e2325d6a5c58e9f29d1e3a1e18d864211eba2b28cf5a9f8d81db483d36bc4", 0x3f}, {&(0x7f0000000440)="a744767367ec64f7a8f1be4017a66679ae1cc662075723540aae6151ce6032fd0be15ba1293549b5e37452042ae03ecf734a81f58df3e64a74", 0x39}], 0x7, &(0x7f0000000900)=[{0x94, 0x11f, 0x5, "82e92796ae6565b20fb11b5a10c67ebbfc92706d0c1921c0b450d925b708bb94553f0b7d184cabaa52d37e8ee9400871b14eaf6648765dd4e3871954cde89de00b638392c099cc5346f9955d2b6611d0803093854d048e85429f18ed14ef75e4f025d00d3c46e8dd6d06bf7933c78dda165b521a44d309e2bf7a846e2eff3036720fd881767563"}, {0x104, 0x10d, 0x0, "00f617a476492f0d3ec436f0aa3a3b500e40e406f58a0a4db17c4da78f997b8c3cd278f4a4d40a989348b6a223b69a2dba1b2ceac7b63568e92e57b59e9ae2aaefc235b1ca89bcb68d6e03c9c9118417165e34474b299d5bd18a5c2ed8958ab689b8b8fbf3e34d0a7a8fd87a1f0ece5ddbe320c1cbb82529b5f870ddaaeb2d5b1d9a87ab5f6458b25a1cf26f102c6469de4a12baf39b25ceebafa885ea9124bd4183a15955aae386e5b1214eab64e0a36ad5923280a5e80a5175f199b67568b095dc094881113a0d65cf8fd76524d0871e132e33d93429138c5a72d70685b87ead37a09c5cf8577432c6ba1f3d12173ab0f5bd80bf64"}, {0x18, 0x10e, 0x7, "4acdff0e16838d9131edb9"}, {0xf8, 0xff, 0x3951, "4ad83b3e636d8cf7237d1f8109e99fe6bd9e581ae3bf4ca6620dece0e9e5df42b2901ee1072b0a40068bb49d19fbb3f3979b2a8352af1b221dbecb5d55758d3b8bbdc33e1734a9eebb23c3e774fb80fcb217e370e9812d6916ae62f3cc00028e4dfb9d518a4875a1525787ae2fafce1a733987831165db78e3fd8f0383b86260bc6dc0cf43296f4a3aeb3bf03d5008423db3d36529609708c2792e4d3cf458314e86d3571ce77f047d92c894bf147708566a56ad3df751d82c8a6eae3420eb29c0e05656212063f78c1f47559ae979edb2117b929adbf7892b4fec48064b2af2c0affb28afc365e9163d34de"}, {0xb8, 0x6, 0x6, "c38fdc8d99db6aca87278e191f80fffc047f2c7b720ee6fbeb41d95fc8b12354925d055fc3085f76ef5f5ff066e5f4fa1a9fc1a7e1f5c3a96063b0e18f4f17793be2c27d0018180a3de88f5a4a9cf948af123ac235148c63b351717c67fd7a6842ead3c2194df2c2acfc495aa77dec76bd00e10a5236fe65934a44ef1e54ecb80291ce3c1e3ee39899fd7228d72266bb559ead95c718c03946d1638537d1535b40cd7f8237658d9821939e"}, {0x78, 0x10a, 0x5, "119a466ee709c8a5e12679c363253f5d80bae9c96f79331542db9915ec60d7ead306e67b071b2ff182ba8affad094613e27a68d5299637fb0cb7581c7a2b85a5962c8c31dc140f5b5f09522d3a7c48bed9c69e9a5a554159754215419f99250faa15783056b7667f4350861b"}, {0xc0, 0xff, 0x3, "b1654d69a202cafda2bbbc60d3a9b6197f2e78fc2eaa105d426645530cfb357bed652faf23c408e2d19484a6a93c2ba1fe89c771e5f0dd80ba23ee60b550fe2aadbbcb6b065f6567f344223792a8699ba1748a3c391d200dcdeb3c1cdda846db62d1267ff6f9091c82da383a978b31989dab29d182de735d78f31d8d4d75d28e27c44e05fd49fcf14269ac610e95d4ab82dc76ea1e4800fe23b139129dd5bce3a61a302a9c1b15baaded8d3088043ca901b726a7"}, {0x54, 0x112, 0x5, "3775dcff34ac2ad539984536513283aa13dc699c246d4f61dff459d2e18b84bd8063e76777468857abcd44dd7eed3ea7f0c5abee966d93ed6d2a08d343cb00a1f0370dbca064"}], 0x4ec}}, {{&(0x7f0000000740)=@x25, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000e00)="3a5630430028602c2e19eaeac2088bc6696615a8dd3b6218c04e9120fa8e3970a2d77cc6cadb72b3a0967bacfe4e2dd1cb45c17e89c376641c59f3c809ea4cf72a5ef25edf20fe6465c42bfca39927f108590186688457d8dec7efc3aee57c4058286bb1e9a0bbd9bc871d9af24278801a8be33aa57281941835928d8081419fe74ff6253eb648e81dbe0a905c6e0d0bde2e52ffc9eca81e2a0b5159af9ea5e819ac01fb06e92d2de951d8ebd125c985766580231ee2fd54bf8fb1079ba7d23aaabdacae538fecf854bbd0abc4ea5417497e69d28d04589f229d606b6d28fa6cc74809c98df109", 0xe7}, {&(0x7f0000001180)="2ac49767b6ae2024dbedc93082804e4515dbda2a4708bd20288f772a636188ee4cd6305866db7d71523dfa5845db57b3be81164f3967da78c274b130699d95090d6ae7982894c5e330f208e01c124cc6a526c2767e848831c405cf10de8e117dae9a00037291acdbc33fc78122c8610780e75c7742dd0b88887983972e6835202e3417bbe1b2bc468d9a600c64c3bb8d1ba1409c7ea4221915aaab8a625f15d25980ee36d140c9940ac2904516ae4f10032dc8ee1677a67fa3dc3c0209c92cf8f68d758d46ecc37b7d287afde3364a6c2c102669b1fb1d1411aaf5a0c070b13782cf95e81ca4c8d282fbb450d9e9e997257c0cd27f28c2cc5bdfbdab4c589d454e9a7d0afdb64f6e633af4290c1fa629d8b7f41f6cf35721db019580417c6a3d20836743707f7e991f5c3ba1009cfacd249d09b40379b8e70e77aa49ba24cfb185a00c9b0cb9cac2df3aba3a87146ad9e68b582540195970d2c75f9cce893d5499e9f1c3186ebb95ee6469838f86c606339e2cb2eaace8dc1fc36827ae51e24bf243efe73eac43203065b5e6b0efb6c74128c3512c848a380c5875d3bf0559373a19f06e6d4ae9e3979e6d21ef7fb8089b626b3a2efc9ebcf2e9e28ea97c737a0da6c7efe01fd1a7060c6193dae8901bbca573f2cd9f142e2d66c835d69fbd68061e539ee9cc86014eb61c7635d9a644c50350d78804f4bff7c0b2fc39f6a7f42881ea1add5e5714cb24cc65ca7763ee9ffe3823f31662516969232157f6707e15aaddbea5e359d845f9e492d4000b1b44bb2a3a7d1b3c2b4872ec28995557ca79e9885dcb4cf821ba9c7b02e9dcc1301cf3c80607d402d48c6c2bc42604ff949e7df30ed4603d345e9cf7e21d1ccf522f741338ccd68fe325668fcce4177413dc64f6938d671e3a19191cad020504a0cc0892294f19240595e2961e8345f9c33129c1ece5f168ba2a153992e50ccbff5efc906ef2f67cade867af4caf01fc67a39c65ddccdad761fcb96b05570b83f362691e09cdeca759218aa390fb1009bf50d36155a489e5a2c98e732df9922cd90a47bad2420be59babf9417fd54aacffc4b33922175198fe818706c9aa8807ab21f16f019184ddfaf10726d52ff66f5a7c158b7f0fb692e079e4660758a1629d8f3b138fb9c3f76a823a9aa40386388eebdaa447df46edbe26fcc3c51183ed7c4685bb08868d1954007747c75b86210fca9afec5bd5642650e809538e3cc2ed74c939d5f022b811936f31c395e8759f0d597b784b84a70ae3f61078f68dee599b0e618f90d454f2db2c463d6d1d2b78a40d8a49fe31adb043f501c1e33ed1fdf4f8a4f01053f623a8289b2081c226065e850bfa9ddad8c6a1252ea3ed276073005cf4e508ab4b7f62564e11a573956753651515cb5100cd8bfd7705480b2d74ae814258dd92ec2f2fb3f61333353ca66f2fab6281c2bef7d3a181a30fe8e52476130ed681fb50e8ae86416b0451e031452e8e05020622ce406539b01bec0122cfff007591f24e5bf46421a3da6160a69bbe3dafd5b40c445219fb0d07ea9cafe913cb12d4bd305e57fd9f9fcbbb97715fd309f9966dda2e578ccdd113fbf75c00d02bdf1dc20a7accf32a1ed2e544b44812a5243435b04c6131b85f13a69a39eac00d2349ff475b8212b89a1e4c0a95e823944e446056709c92dc74cb39302d47e09dfab73e6ee68706b1443223282be5d439923624373c0d67a6ccf25eb7590d9fb898b7f6c91b1d0a11ecf564789e494fb62dcb7a9efd1104212e4205bd9227ec87ba075da16a2ba55f6f39979760973a9000a7f42e9ec0834d1473ffe5328638369a81f98d9d8e5e965ca31faf5f5e3c70db943f6170a44546a6dbbc911657e70f2ad3cc8bc4d6eaae39712c77f62006146ace205c6ae4eba6f14d0d3ef14b176b61c0841db6f3f621e861a2aa88fb1cb5ec87ee3d2876c86a3a485c36499076d32311e43d794ed9fa20c08ae19f1d69982cda76f0021903639fa8e91f1db7f95b90c063ac68601aebf887873f88e795047b27b8db39cb4e4f19a24d13defe33e41ca725f5a688110f523d3d5a2cc6e7ccf9d01b54cfde806a3f8105109ce51fba39b4fe45caab4f3b4ca577edb4a27917f41d6ef1bd013d83187ae3be03acaadf4702207d6a1967419e4b6d7e61afb22675ebb51de56f2d77429e0b858c593c2ab0649e17c6c76bb3ded6a9f643b78222c4656ab03eb2ad0283840382afac53217986efaed3d6f256ec1a6123e48b7cfcca8be49a07b24defe6349ea12677625ef20dba5f7c1edb0eda2679a3ae20e679ed248f7bf158859931c156d720abf9f347d7e8d6ebaeb8236e8c288d7b682e7bd52934a28dee788a161cd1ada19e2ddf2a1f18d2f4763aa73e01099faadbf5992154ccb80e725b17e3e3242718aca2a7d938580723276ade1ac539ce73b2083d8a7a81444d3355f2234e24896b0cf2c6dabbda9611b2f8af3d24d5b958bf9a43ee6f753ab70c53ae4ee34fa1d874afac51f354ba83cfc9c791648579962730e913a7589109fcf5dc1cd77b9ab6424dbcedb45a9b94fc2071a975b6376b6092ce60d49bda253e6e28b62d9df2f3d3601aeabb3e75dd48d499f7e7fca1dbff6280ecf415eccfe80820a8e1d8034bd1132704282d5eb5ad11bd297dcbff38611772f6e62c59100f6bff72ca1bac29d657810bd6b21d0a4ffee24c4170a6255d1cd5977749698b30f56eff2b1d3ee55277495f91b50979688cb1fb4284c7dda7a288ad5a6b83b7d01d3be44b3ffadab2375769b57283abf4a43389868dad2235629f3fc775807dfb91951666fb835efa952b4f6eb7fa93172d76c2ae3fb3a6c4951fa151abecaf251688482633f371521b2b04521bdd9ac1e85c25d622c8996d892ac40ade9e85c20ed379ee886477ca0b5d90399d0f191b0c48094a21a8519e0f378d09191a6a15565ff2ae86531c8b1acc835f1a66856479aade2e1b52957ceb642849bceb870acbfd14eb95f04e76cea9830d6180062729966c066049a30e079912b93602cdd314644b35035858749bc7d7950de3108bc33ad61cc05f63bc092be66696e0dfa75272665fd42052887e966c77162d308d87e189604f01ca525f31d5442bbccbc75862e699e3ab4f4006948667a9e7a282dee7626deeee1bc13c248be93163dc318dd604d05dae592c28aa7718ae612f361ef0114ef476fb8d666a54840145e90ba14383945be141c4a3cf3eba249052e9cc549941c5dedf66fb3c8fd10a1a5ff5d9cc3f5a0d4b754c1562632c11f1c5e0a029a8b3ad0c16700785d8118dea326f0d2f862dc38ca55464e9f3579f3acd62c49374d867df12a6cf093bf889c162d902b89e1ddfe3d745294d578d0430bb50d26d619a652c278f6fe250ebae6b8cfc03366de791168be0bae54d6d54cafeee44cdda016c7eb8eb42fcac636f33218ea47958641fc432d3d6f3d724ec6439b4314a6a62f1a01fc5096b8a8263e60548ae30c351639ad2dd895369f2a2e169ed8481e0b2992c0c56c2fd8aa2b0b9f70e8251b17e1a18b47342380b3e063bb3db13da277586830b65f1b011c082299224a51e1b3e7dd9c962d6c60c098d8aae65bdac86185c3998f44d4119aa4ddc707015b09fc94c909116be54f1f254b60f04396352cd072f70d7eb4539d8ac9ffd5785c680a4470bf6abab46f4901c10f16fe5dfddc5e16a414a74063baf444e5fe3fb1cc9b8dbe9312dd1d35b47d624835b35389ec0e67951607fed58361b9a02ca245c4be9fedcf622ed001bfdeab78689340c809f8ff2b49b2847ee5677cee0554e477c50648909d3b7c65bb6d9e4979b2982a773c6b5412e37ff4d9410637ef5b15635f0634026de6e9c78ec026a0d2edf1a37239b1698ea769c1c900560b47e41cfb6e40ae1a0a81e9a828895d145ba49586e81dd7dc4cd9f38aea22ed5d3064d8a29fb95e91b8a0c6e3737edb2b72a062e8e5a30482c18a4ac1a37b6595206d8a43679c39b899f98d3b8b381e06f4f67881e8ea75861dd3b3a4e236630f79cda3e33b07b504b9982526de839dbc61c47a705751b32896d15ffcb05d5f52c92a3796439a7333ee509a2c0604fa7382c48846e8f87ab502c6a61b46552362a6d1774829c0c6bb576d2d3097a27d17ab2e3dd0fe8f6155cfdb8b511a9d82d1693b8ca3a541c354719751baf8d914531a4f8c32fe43f773fc8dce3ced5883ccdaa53c79077579dfa6a7b9f8c41c4cbb4515312f09b2c8adf96c0bf8817578f6600654cf1d84a26f753cfb3f9715b045f094c1bd12362c3dce394bb0df1bbc75ffa23a1cc8e5610419bc1766d8b06589a1450a7ed1b9bb5ae24e586e09b1df30b655ad98fe1e51325a57c0eaebd191036d688b956cf95dff24c8d1386797d78fef19118f638976bcbb4054678445f2a0c1b66f1b3ba3376c64d59a422e001cbf07b2a62d5835ee495503311f95880746ada3f3981c06330278c36234d0e4cb0174ddce84dab2028b20e815c64091b513a53c06a3189bb7d3390cc0caba60a1528f079647146e4ecc0f844bd452dcac98d0c6396802bce6d8fcb1fb0bae3dbe1292cc1b27bfbcd60a501ac382b950a0b87f2e2e28886e0b90e6a57d3c597dbd785e8adaefcef6822bdbc96dcbd62ceee18aa1ce5dc81dafeb22f9bbe1a71404b599d40b87c35ac6c9784b9e071d7d65362897ccb158333974e899b0f0a7dfe855e4b6a96a8506bc2940cb16e62e3052b21da7f920d2af88e0d9c41889ea42ddd9e78a64f9d61b1467810d71fac2c4ab323384a0faad3a66c396afcb3e8972a3230599580fd59935ef0c2ab80ec10a2c8f5f699b8cd15db8afd39fc4d59afa1e28b338e75a3456beccfc05feed6deeeac0f7ec5fb66f50381f5fd48cf8fca4a02fe1492041aacea0716c5f329e4e571d03170a78ee99c797e59d6e81fb31b22e76c2075d7c0275efd42896dd010fa8b040d71a1203203971d9d0f63509d7ddb3478af67757e84e2a63fd14d514dfd79568a69c5ad97f304b5207671a886858fe571d1645749f8b72218373b4b4bbbb671f04250709cabacdc35746878c5fa14a40db6510d427d213e01ca191740df49b2d6b15e5b21d4db4b5954cc3975ca727b3b8727717a4741ffe1dd504b09f9a87cd6da94776300359e2a0ccbe50167e3aaad56ea068df0f3e807fad15a3efeffb456910182ac890f3173e6498c2c0a03ae2e40d0199aa238f13069389b0a72cfe8c913ece54549155e395cd3d6584447dd9d9097cc240e60df460b33c103eef4462e550655ce5e23a044606a1619f6b1724b5bd37d1238711ece8cf8d168439f8dc1ab6a07983367867988bcbaee5daa9251ea59fecb522c592c1e6bd769b8df05883919a90f3a022636fbddf9075812925703de36f48cdfc5ad6523c6d6415f1cf1e567f473085636ed37f7f62f179cefaeb204cc6c6a0c51edd1ac941dd005ac96f0a8d99433363fa8599deebf2ca6cfab74505b4a9a0788f7e03179ac44a89b15487d04034546041f8d8b7abc5a35021a279300bd0f6cdd12d3fd4dbce7cb46241a21ff99c1984271a2f9dbc83d744dffc127a9d3184ba34e2544bc7f31252588add2dd349330368d71f1d74f38405e617f538a47068f8d6f007c7ff2a2f77b15e7a032afda7a9a3a32bf2c682e11349fb3e5f3af51ad1462ffe15626ccbfa778e5149092edb37e58cada42811a362ab140211d5cf4202746d9778389cd09ba1127e5c0f3dee4224674ddeb91a3cbdd1a2a4d3455e93118ec3a25c2de89284402fe82b7d37dfb299c9", 0x1000}, {&(0x7f0000000f00)="1f928cb4d67bd381bd1f5a8c05b1808e0ba1baa514fd236c00377995151323a11e9047e4c0e66276e76e96600e5aaebec288321396121e84e5f5f280f7988b80f3c3a2a7c899fb70cca775e4b5ac8c72672dc25546aa83fac69eb92418b4cb337d18bc90c7527647ccaff9a0c8ac", 0x6e}, {&(0x7f0000000500)}, {&(0x7f0000000f80)="f4e2c598ebe53a4f81a6eca76f1ac50bcb02f4d2486831203ddbd0bc0e7b52738f5f6c68a8c94b99a3ae57de7e64da4c1fffe3e33a3b272950b8cfe1b57e277c59146928cbe93110abc8c1d503a7aede8490eaf42cbdee3d79165e4b540f2ff3eae256666624259842abfcfc7d1aaa74aa8f419cf54ae2a2d8a35e1ca95f9ea3220700b827999857956404fc99ffb73afe67b94f0448cc9b68566ed2a8186ea66a77f557b73687f217d05f6669b5c7", 0xaf}, {&(0x7f0000001040)="ead98fc5ca3b7cd289be2f0ee9cb765b77551709d1051eedeb2340ebada2507a826651e150c9d23306ef95e492c0fe47e12cf52f154863340f7eec3627ae759370499b8bbc973ee2f6a934d7e22c9b55ebba7a2fa97e39a79797751e19bdf5f9976f386475b8529941b0f2f9cc1a939c422926a8aa29f9f58795605f9cf5ecbf6a3c5f759b79d9778a265a33c71bee3ff87ffcbe634259ee7552b9fa5d238fd4b19aad851e1464f690b4e856ff38bcb263332730", 0xb4}, {&(0x7f0000002180)="968a51d05af546e92387c6cf5ffb169f0aaa272cf4cc09efaeba3e449fed85cdca6ae1febca999e18242f6d3f9dfc756aac770c89376468b4770e82a3b2d58480d7f80750ac483a87b4cc499baabf4899008fc370456d957a7c328c8d1", 0x5d}, {&(0x7f0000002200)="5a8ca4fbece08b7049a0d5e9289894a87b1bd3b6c42cdd8b7cf7b946047b192020a225822198693cd1c89f4b50bc1af9e4c31a1fa6dc3cac990071801521d1aa628314397cbca312fdccd2281190b7d9e766591fa831afd0137d7c652ae46c51de19357494a094b48f0c0ed09b8c5fd68567efc222b4e29f6fba30db1899b42ea5ab073e17c38f6d65", 0x89}, {&(0x7f0000001100)="f65e2beefd992671bfa95105556d9d80e7d4a0bb509effcfad61cb3ab184ac9c595163a12e5399cc23ce85a6558b2f", 0x2f}], 0x9, &(0x7f0000002340)=[{0x14, 0x0, 0x1, "d391f47a6cc83e3e"}, {0xbc, 0x0, 0xce57, "4aaa0de005098b901780cb177672fbd6763b9da51979a66fa659d38fa5feae65ffe1b3e9bf53ee9f868d8616e27901689944b872ab73c3d5e7773503998f02937001c76e82802ef9ac77b4d26eff2a4545cbfc02129fe4708ff34a3ef1c803e0312980d6d242d4ea584a2dd0e78027f096738f374b509da43421b223224832fe8a53e3dcfa17aea5c40ba645cd4b822a527acf5eb5f3b7a057cdaf1906559edb96bb023ee5e4ef94e5035425ead0"}, {0xa4, 0x10e, 0x6, "244edfdf21435fe4582001f4d87498d385950f448b7d9e4b9cc4a501f5a02739fc0190f99bc8f5677cdaaa5547824a5929c4b3f96918ba451092eaa42b93d2154f1d425c53222f2b01528eb2ddae212cb3ef6619bc49c9d760e55892fe196e8120cc682117ae2fad3aaa63cecbdfd73dfaf8292e85ece7d1ecc6b012e4d5f2f84aadb97ae3eb69af22d789576031418e3fc976f2ac33"}], 0x174}}], 0x3, 0x0)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004e904}, 0x800)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000003780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003740)={&(0x7f0000004680)=ANY=[@ANYBLOB="0055225cdaf7bccb2c8fdbed5cf9000000", @ANYRES16=r8, @ANYBLOB="00042dbd7000fbdbdf254a000000080001006e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000007100000018107580040007000c100480081000800410020001267cc375813a6bdd695a3a1938875b9bc4565cb02b481284904e8039dfb5b7763b4db2c81929d0e562f1055331752599307c84748baa46e1a758d0c11987d6ad4bb82a00416d033ddfc177c0575b5a20e29094b2c6828411099c1fc6d96125c30e4e1e44fd6540679fd4be201f9b1682e2e9e031e646bd1f2f81059093c54dfc0b923c5d1b56cb0c829ae9e07339c1bbcff33c411751f5209e6fde3b5f299b2bafe1bc2fe346dacad9daee598c34b5ba448a01ae53d310b1d6da8f4bc39f0e53b1da7060e0df818e6f6653f1796c64ac282971146c31e7d4e551c16f66dbb52f0642287d67cebf8ca3896ba0746a2f6a9df01bcb1e0ed374bd3fa4cb8dbb4199b551c499250cda95cfeb361e85d00a7b2916133605b885bc7a0d8e5bcc5baaa3cec2e0b09407432a3335138be0258202f865a02d9877dfc39c0249d3034b7c7a380b124076c9902ad13b3ed3153e71a7d7c1c9e356fd05b31575e5c6a0367c9d7fc7e9b5b4bb5af9aadc22b5d51eeca26259ebe3eafe5ae08ed9d1c0b01937de784a66badc3b8d3f6988abc9448c2e66b750a3ce48c0815fdf98ea0623d08de3ebfaf48fcfc92fa342cb22cda178e6e4f58641a1887545f3385bfabbc1ad4b64eaf2c4ab12219ef08914d48875f125fa3a83c63611f3c3578168b101abf44f5015d74c489dc392181673918be55887e9a08b178e52281d09637c4a88e0bcb4e3f50fa649c1563e3e5caf2fb334e2beb60a347eba5c608da16233df8ba1b7f7cb53f9c9d27266da0196723e66776c5e595b496140ed9f7cd3e95cf5ab4d4b982ed9f787acee6c50aed87445c623d4feec0da8b04747c9c49007a5933ef7104097249a374a1ec2da6e0e4f8f1e4efcd241f4db7815fdc740ea472a16026a8c9427f01522040dbae3bdd1932d0336d5b3675afcbff165221d34983949c4511a3a7a1ee150e43b4bfd6020575941627df0707480adbb1153db38406291fc2ec73cf43313cb3e07c8dde5c8f77b1a56d8302e4dca24aaf1cf40ce718fa4684dc2ed308d77e0e28cdcff46f26a49253a6caf1e445219639a93e43187f4aff0b4818436ca5cbbfad52cf2f7e352d6d7bc9677f86ef7bef91cd2081519ecfbf25343356f907a955e99deeffd08b52558f706631ff4c40d3504593bbf5358e1a4422d9b659b84c7c80fac2c1f5c55fd69167db5351ef5c2a6bbc1e00eee7c40d282656db43ed142d554215e937b3ec4190e028b69ad38d03c03a37e557c9caa5c79f89fa004d48c0c1c41f173205bb6f627ed8f8c8c9042bb7cec7e80bf1a67304fb250eb726c3c36bbf54def70d70d5f03c2c1113be8c5a6e241ff13d5061df978df1b6f375e3562766c4c85156217661a1a6a9e4e1ff7b53d62a86bbe9ab72c338db6a879b38500e67f0fa9561d59e9f57c28a480304529a30d3bdfdedc716cf5c8509b1939e1e82dc93627fcaac250699a6679bd0cfe43701b202a52dd0d988408fa61eb32a2d01abac29129ee7470e3783e6ff257b1a7515c357066b9b6d14d465679f6410dabf996725133e4e3c7fcc9173bf0b2121af02db5909ca7dedd26cb61ab45c43e84fdf9003dbe1d3075b5401c77e9bc8b9e36e1c3c0c75ac966d005cdde63770a43a3dda515c7bb0322c8d851fbea661579ac9914dbd015070441bf1b6884143d3127cc9b56f405e18b044d9f5d9423b484ff7f8654950415046f4359e5ac7332e368bdaf0d6265246bf54b200f4bb0733329b65694b02c6482f2af425ab47124046f211f7affeb9ded02e6f510a538a5ea2304b4a7e3a0e1aa0330f64786d1158174a16d5c36371ed4eae538c41bc7f4f33c080276898da6f017a58f9a8d894b050b4d00e921cef76470b537482c0fdd949f5b893420ce56c232d1a8cbe6d33a3d8451a227dbafdff13dfd659bcb10a4a73edec7f946e2d598488100e298abade846e32498e2727e9b749dc3cfa203be5a56050f1929b90f84b8eaafadf27f1a247c25dfcb76edb3c16c3424c2a370ad0f9cde9df86da85f4550643dec7fb22e2426d9b97130cd7f1e81f7f53a5d46bbf8f208db8ad335d863f17102dd2fd6f808a55e130193591d2407faad071d7db03587e7122caa0dc19e6495eb24e4d7bd8f741a2a76f066228c6f823bcfebf72ca0f1eda1df95661beda052d1687de16f60df70f3247ff0ffe46cc542312f4c77f8c274b44363533097b40554702250296b5f898e17d9a1f4c10b8244ddb9843e8867b4b9be83d9fa2af2265db1fcb110c413ae05df5179b74c3e5b7629fc2cfcdd4bc03081044d1cd4b98e987ed4adf8d1717505c4a308333e32aefabeee96ef1e03670d7776f00a03a36effaf0244d4d915199738079e29f3fcf65aa204a3266c81b19546852cbe0008c3ae1b03b01ca7a60f2fd1dd516f5c0f67a02d9f92cc1f51dc6955180eaba5e9e3a23aff9ccbb8f2f34699a704aa8da30de9eb99ba742eea681fda5c5dbfee29d4d9107f28c053132cfcdae7ad308a76b691d68af9516a2989f6fa8cf76a644c8beac0e32928546d8d4496e476f2203a3fb0668b31666edf65c5892894f56f28c5abeea56230e0b6728117a888bf26e2d415a02096835221b61d3e433e23e7704dddf84ede89aea9862eb9aa21c7fc11e73702eaa29b33c8c856e8803323bb7d34a3fdfa12ae717eb91c66b8232106baf153b345c9a035da73ec8f524af84be4c1498747399bfa6c03502f456d557ab8dbb72bbedfd974349e4eb8075e605cc5a5c240753fe1aabd24d971f5641dfcfd6d5e792ba7575b856e0875b3b3e9b8dd104938d94d7b120376754cc897a91f42adb2453ebdf721bd010c7052b788627753badb6ab4dff054ca3495c7101e2c234e977c812c385d31b1246a8347f380eeb4a21188b91d7743e2fa26c70b16ec5c41c648069e221b5d481718cbbddae3923c1cdf3c833a0bcdf36758e346b8fc69d5cdc96b5598b7c8c99f2b246a2623bccef9f977de26f76d4b2c0da466ca9369ac1cc8f07b7f7b9c4a65c320c60e674fe350b4e459027ba4bcecd5d880189080bf66d24a720a70e532fc80bae9bad50c0f6276036f34ffbe698ac530460b04cd299f020c86c203af26c2d309409848a1168cb4dccea3ed22397e9f32bfab9fb83bcfbe6d711c2c6aeea5ddbe1138d78a96eb33272479c8d08b32ac7ee7f11b67d8ce38cfc86c7e7911edeb3dd39b4d8e415cb48a12960d3b553a130e7cab8559d2f5be7f902160a2ea10b9c2861126efd16a9a2d9dd4de6c618202bbf3a303e78ee242a455d96f54ad38133572b0ffcfff7bc5e4d256140ea3e2bf1c754b7df07b28b69ab0b22574eccdc4b5a334e2d143e64cf12ca9abe4c5a387d954f49dd94ea584f2c8484f816345b9050fcb161f546c00f218d0ec08e0e14a3a12e648a60049dbe64ac7e2e16945156acdef40552bad0b357a53c0e3674aa50879109caa21af830c87c156b6dca7ce03542e7b52aa21ede195346c8adddf6cf4d13ca930d819765678026cb57922ffd3557a28d35b39cad01be39be687555e00df17f3c9dd4931fcc759543cbc1a84f77632d6ddb05f15726ac3d982ca413359934e5428456d1b946386cbab890d42726fd9702b1b126afe603bde857b5b051edf820f934e4b964285f9594d75d736b5a5ab801431c7bb901f68dde5c9f901abde92f3ac8244ba82dbf414161b133576a5d7c3d1ab57926a79a106efa98295d5d4cf573168c067792a89da5c093026cecdd5e2517c5f2e3e10408b327c8a0dc41bfc2757e59c739f14342d3520f9ac0814f57885c3e0855f215695d548c2285b22ca591623f41961cd321c8983926e0f2f9dcc6ba41a2661327f2fa1e3e94c34cee897276f7311696011d0b6efa1ff3202388c8d808cfed059f3a628a14ffa7febe5fbe73a2e833cdb8cc8cee2070f47bbb524022b534da031c718bdc6824bcb027b00ff7cb36c9b346e72ff449d4a73f1dbef6bb5fa49e93851a9052a293f011d0e91abfada80dc1a8da5cd2b59191757b70ca57f8172bbbc4ec9e57f22551da7c01258e2699684fc9ee2eed2b437d5462c20350937cecd19e82f6a512e22b2212b3195c66ad7238bda43f00063441be6fabe299b03ed054d09f53cdf0beb1971d1bd7133bf0483187f94386b8fbf80751bcb26d3aa8145f62943d118df16215392e6f4ad797a361146cb82a30d78cb8f059b9cfc6fe6450a7917e12d0a6cc304cd761a10290cefa9810093e79cef5bffe507ec9370652a394d1ab1983adc11184bdf8cd65b7349983bd4106db6b9c86e2b3b26954663fe909b70301888108957586045b1ae5fd562877df4659486a0f97dceab216a9402d0a0f850deb1921cb09b0cc8842c50c1eca406232729fc957c45e2ede5c4ab9bc0b5732c22895af92f4a80eaefb07e3a14108a86000419cc507d9ec3b8f8db0147d521ac2f060eca239b5566a224cb3253e494b97793a0918b91564ca73168385e6a5fbf4b0681249ef68e0d74324573fea7566b1415c190c4f2e5ee38ef4f24ebf5655e326c3b9e1269c74e6b8e2d5c390b405ee44d56bcf91663914c40e4f3d71836740539e24c9ae736045d63e911cee5d6201153d83a99e71ff37a3e671c2f35b37c1ef5610b58273dec88070f7a5e67833aab4442f00791d1a36d5cbb949f2d111dd29512dc92c7415f1baea73031ac25f3c38798402624c3045fd7109254922961deb1c9558891a53d1e33d3f513a157e8f1dee395553c288c5583fca9b592cca87222a9e87b772d1d1b680186288984563432d115af534cab3e3c51af022cce51094bcf1b48507d1a762594106fbad566497a79ffa513060a60ec0e0483fde9bfe2b795bea01d3d5127280e82c604378b19651dd8dcab9b0e8ee6ed01c1c88cd68d6a326851d74bc758cf734cc3cde33813694182ca339fd185395b46456975918c06ff78e72aab29fb24636fcd1b0836d74a55c9475910d2074b69361ac422b52bfd6c4a0b565853b27ec27f9cc46e1f0cdd75d726244d1197094c05a3a2389b1ac1669583ed867f1ce792ccda6bafb42a4b61a1e22e643ecf02f4b2aa488e52fd2f4a9c0d9d3ed42d6cc6ba13552511fdcd0dc93a8f7e39ad845e0d422d53ef22ceeffce135c9fee8c8cc94e589a33a5f2cea1813b79ec2637f67922298b99cdf44bb296d0f98fd5a9e11b337802133e58fecc99916fb9e840b2764b1670ab317dc96299ab1db8b37b0aefaa88a2011e9df4c1104830a2315d2c4ce3839315a15735e4d225c958abf0d2102124b4f8cdaa63683e6f09b03c034d0bb22e479133e2133651d1f9942f5516caf2bda22ec252d988b0a3d77535b635cc2da2ddb543c586ff3bfd66684044cbe68dd702f36caed8e313df045914202a2ae740122a18b477c8840ee72b99fc4668510e4001de8717d60ace67ed3bf00db6ae410dfb4ed0d97fc891832c2a1b813c39880689fa6d669e3832c90b9139588f6f0c7d143065ed965f0777c0640bdfebc74c568fe3465bef78eb2d8365ba35c6bc2f6a776d071087de05516b9710bb0983e488c7c237784e24d3014f8d46a30664560e1ffe5afe4745b3e531ad258003b06094ffc91fb71eb65c33e300e345a638d7532933392c7c88831a0268b1759ec57bc90658ce6890ea06e08d3c710bd232ee19c58d8aac27fd4640a112854453f76f74bc38db720d978232af92e0356f0ac159a05a4baec39a8488f9f7b69e522c612b9f4ba5a314b9e5ae4f56bf14e7f306a47bda1fd55e00988b89d61b64f667b5839360bcdc947bbe0bff8f3fa0400090068017580600112801c018480c80000800a00050050505050505000003400068008000500010000000800020005000000080001000f000000080000000400000008000100ffffffff0800030000000000080002000600000008000200920c00000a00050008021100000000002c000680080000000500000008000000010000800800030003000000080003000010000008000300030000001500010010f61d396c6371d9c4f4a34f1582e8c474000000240006800800050000010000080003008c00000008000000000000000800010009000000280000800a00010002020202020200000a00050050505050505000000a0005005050505050500000280000800a0005006b77573e33e700000e0001008611729bbabc74f4a2030000060001004283000038002d800a00000002020202020200001a000000657f6ec246da838926de0072269e0476edfcf728d87700000a00000001010101010100000600f70001070000040003000c00758004000480040008000800758004000200"], 0x11c4}, 0x1, 0x0, 0x0, 0x801}, 0x20000804)

6.696665933s ago: executing program 2 (id=285):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59004"])
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x7)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x8ca, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309})
ioctl$TUNGETSNDBUF(r7, 0x400454d8, &(0x7f0000001700))
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000001080)={0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="00002e000000b808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f0000000000)={0x9, 0x8, 0x8001, 0x5, 0x1, 0x8})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10], 0x68}}, 0x0)

6.667173891s ago: executing program 1 (id=286):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x7, 0x3, 0x4, 0x0, 0x0, 0x40}]}, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) (async)
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/s\\s/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x46, 0x43]}, 0x76) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async)
r1 = signalfd4(r0, &(0x7f0000000080)={[0x800, 0x2]}, 0x8, 0x180000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x80010, r1, 0x0) (async)
syz_usb_connect(0x5, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001accd5910a9054a264ce50102030109023e0001030f400809049bbc000e01000d0a0d020101020401727f05240600000509000500030b24130b21c4"], 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2)

6.561034969s ago: executing program 4 (id=287):
fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)="1b0000001a005f3803000000000000008104008000000000000000", 0x1b)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty, 0x4}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)

6.326859026s ago: executing program 2 (id=288):
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x88}}, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x3, 0x0, 0x0, 0x0, 0x802d, 0x9, 0x4}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x5, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004888)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@userptr={0xff, 0x0, 0x4, 0x800, 0x3f, {0x77359400}, {0x4, 0xc3a360ab3b82f309, 0x9, 0x8, 0x5, 0x7, "2c40043c"}, 0x2001, 0x2, {&(0x7f0000000140)}, 0x8})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffd}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x48010)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1)
pread64(r3, &(0x7f0000000840)=""/240, 0xf0, 0x289)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000380)={[{0x1000, 0x5, 0x8, 0x5, 0x1, 0xce, 0x4, 0xd1, 0x84, 0x8, 0x5, 0x9, 0xfffffffffffffffd}, {0x5, 0x1c0, 0x80, 0xfb, 0x40, 0x6, 0x4, 0x9, 0x5, 0x19, 0x7, 0xfe, 0x8}, {0x40000007, 0x5ee, 0xfa, 0x8, 0x3, 0x3, 0xf7, 0x0, 0xfc, 0x9, 0xf8, 0x5, 0x7}], 0x2})
socket$unix(0x1, 0x1, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x4e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r6, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)

6.325945308s ago: executing program 1 (id=298):
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040))
timer_create(0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d})
ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2c0)
ioctl$UI_DEV_CREATE(r4, 0x5501)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
close(0x3)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r5 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xdca7, 0x800, 0x8000002, 0x1d4})
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x14000000)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r3, 0x0, 0x50)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x8, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x1a, 0x400, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa87f16855a78bae5, 0x0, 0x3b00}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

5.630870776s ago: executing program 0 (id=289):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = epoll_create1(0x80000)
io_setup(0xdda, &(0x7f00000000c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2016})
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x1, 0x8, 0x201, 0x88a8, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000010)

4.929866251s ago: executing program 4 (id=290):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x11, 0x3, 0x10)
pipe(&(0x7f0000000080))
pipe(&(0x7f0000000000))
socket(0x2, 0x80802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000140))
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xc00, r2}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0)

4.692390483s ago: executing program 0 (id=291):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0xc, &(0x7f0000000340)={0x20, 0x11, 0x41, {0x41, 0x28, "56fb9a59db284fba84c852454c66416b6dc449f16a84fd3c22631d58211b21e4c1266b71afb634627a92aa9724855b3c89c212dc9425f670025c937c0f9055"}}, &(0x7f0000000240)={0x0, 0x3, 0x21, @string={0x21, 0x3, "61037301e4547868802596333013e1ab5a9e3e5696ef7eaef536bf9296b962"}}}, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x20, 0x15, 0xb7, "c2663640b4f5c737de426fee2570d4b349bb39c988185749a6ae6d8b8cd5deb36c2f87e8214df2c74d1c577d6ba4b6240b192192b3f48a648fec88472936b6fb0d186044c8c675914595ff3ae1764fda077939423f34c52f70682b7ce5b69906173d8ec19c43249dd20df4a7a5c1549c3fc8eb1689330ba3cec26b1f372cc52b14bf18db99a27560eeb890d48c455c5b04125e8f8b40641c5a57ca7a0c042211c2cd26e17495a7438b0389a41cf617111daa9207debf95"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x81, 0x3, "172f8c"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, "c6"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "a5"}, &(0x7f0000000640)={0x20, 0x84, 0x4, "6a4eda26"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "5cb771"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000280)={0x0, 0x5, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(0xffffffffffffffff, r2, 0x0, 0x6)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xa2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f00002bb000/0x3000)=nil, 0x3000, 0x1)
setuid(0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r3, r6, 0x7, 0x0)
syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x0, 0x0, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "581c031315c8"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x0, 0x0, "9e"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x4, 0x4, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x6, 0x3, 0x8000, 0x5, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x0, 0x0, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000700)=""/79, &(0x7f0000000780)=0x4f)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x80, 0x8, 0x6, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xfe, 0x0, 0x4038a09, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x0, 0x0, 0x7, 0xc}})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc)

4.691714888s ago: executing program 4 (id=292):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usbip_server_init(0x4)
syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2})
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10000000, @remote}, 0x1c)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3})

4.373416591s ago: executing program 2 (id=293):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x1000008, 0x4)
connect$inet6(r0, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000080)={0xa, 0x4e21, 0xfc, @private2, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x24008804)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x80000)
r1 = socket$inet6(0xa, 0x800, 0x88)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x10000, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000300)={0x1, 0x1000000, 0x0, 0x0})
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181002, 0x0)
r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cgroup.clone_children\x00', 0x2, 0x0)
tee(r5, r4, 0xffffffff, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x3a, 0x0, @thr={&(0x7f0000000400)="696c7e9cef8da1e6a0434523148c903c9d5cc90855e74af2dbb4697db3c8870c1f3e054096c40b0f3f8c3ee5903ae3f129e5a60111d2e1e2b515289208305affa6778940bd702e3f320cbbb3124c11b4f5693f8c8c42e678c24dee653072d117f1a50e2c7bcaa86aa0c3f57f4edec50a78c4cc16a6a6157d290332c4b842e3f6f1cf6153a9c5fd47cf68f1958e8c4a43fbba0b888e9bb952a15e19d4bde443a87aeb02590d8af70fd7bb7c7c8e04007d43", &(0x7f0000000580)="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"}}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fc000000180001801400020073797a5f74756e000000000000000000050003000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20049005}, 0x4000080)
getdents64(r6, &(0x7f0000000080)=""/185, 0xb9)
socket(0x27, 0xa, 0x5)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f000065d000/0x1000)=nil, 0x2000})
socket(0x15, 0x4, 0x6)

4.088161128s ago: executing program 3 (id=294):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000000002010400000000000000000200000004000180300003802c0001801400030000000000000000000000ffffe000000214000400fe8000000000000000000000000000bb240002801400018008"], 0x6c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000380)={0xf94, [0x8, 0x9, 0x3], [{0xfffff17b, 0xc2a, 0x0, 0x0, 0x1}, {0x5, 0x10001, 0x0, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1}, {0x3, 0x400, 0x1}, {0x2d, 0x9cb, 0x0, 0x1}, {0x4, 0x40, 0x0, 0x0, 0x1, 0x1}, {0xf5, 0x80000000, 0x0, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x1}, {0xc1, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x8, 0x0, 0x1, 0x1}], 0x4a46ac0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x0, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000"])

3.811263135s ago: executing program 2 (id=295):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902"], 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}]}, 0x44}}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001cc0)='netpci0\x00', 0x10)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)

3.592829404s ago: executing program 4 (id=296):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
clock_nanosleep(0xb, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde080045000070"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sched_getattr(0x0, &(0x7f0000000280)={0x38}, 0x38, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879006769ebdf12cfacae8e8c03f5db079da7d9", 0x22, 0x20000000, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
recvfrom$inet(0xffffffffffffffff, &(0x7f00000003c0)=""/245, 0xf5, 0x0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r6 = dup(r5)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xf5, 0x5, 0x0, 0x3, 0x3, 0xb, 0x9, 0xf8, 0x7e, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa})
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000004c0)=0x10000)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e0ffff"])

3.566181172s ago: executing program 1 (id=297):
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x88}}, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x5, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004888)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@userptr={0xff, 0x0, 0x4, 0x800, 0x3f, {0x77359400}, {0x4, 0xc3a360ab3b82f309, 0x9, 0x8, 0x5, 0x7, "2c40043c"}, 0x2001, 0x2, {&(0x7f0000000140)}, 0x8})
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffd}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x48010)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1)
r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
pread64(r3, &(0x7f0000000840)=""/240, 0xf0, 0x289)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000380)={[{0x1000, 0x5, 0x8, 0x5, 0x1, 0xce, 0x4, 0xd1, 0x84, 0x8, 0x5, 0x9, 0xfffffffffffffffd}, {0x5, 0x1c0, 0x80, 0xfb, 0x40, 0x6, 0x4, 0x9, 0x5, 0x19, 0x7, 0xfe, 0x8}, {0x40000007, 0x5ee, 0xfa, 0x8, 0x3, 0x3, 0xf7, 0x0, 0xfc, 0x9, 0xf8, 0x5, 0x7}], 0x2})
socket$unix(0x1, 0x1, 0x0)
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r6, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x4e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r7, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)

3.423065772s ago: executing program 3 (id=299):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usbip_server_init(0x4)
r1 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10000000, @remote}, 0x1c)

1.468789254s ago: executing program 3 (id=300):
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x88}}, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x3, 0x0, 0x0, 0x0, 0x802d, 0x9, 0x4}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004888)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)=@userptr={0xff, 0x0, 0x4, 0x800, 0x3f, {0x77359400}, {0x4, 0xc3a360ab3b82f309, 0x9, 0x8, 0x5, 0x7, "2c40043c"}, 0x2001, 0x2, {&(0x7f0000000140)}, 0x8})
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffd}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x48010)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1)
r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
pread64(0xffffffffffffffff, &(0x7f0000000840)=""/240, 0xf0, 0x289)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000380)={[{0x1000, 0x5, 0x8, 0x5, 0x1, 0xce, 0x4, 0xd1, 0x84, 0x8, 0x5, 0x9, 0xfffffffffffffffd}, {0x5, 0x1c0, 0x80, 0xfb, 0x40, 0x6, 0x4, 0x9, 0x5, 0x19, 0x7, 0xfe, 0x8}, {0x40000007, 0x5ee, 0xfa, 0x8, 0x3, 0x3, 0xf7, 0x0, 0xfc, 0x9, 0xf8, 0x5, 0x7}], 0x2})
socket$unix(0x1, 0x1, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x4e)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r6, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)

632.780106ms ago: executing program 1 (id=301):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000, 0xc9ffff})

306.141537ms ago: executing program 1 (id=302):
fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)="1b0000001a005f3803000000000000008104008000000000000000", 0x1b)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @empty, 0x4}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)

1.655685ms ago: executing program 4 (id=303):
clock_getres(0xb000000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x5, 0x800, 0x81, 0xfc425851a4d61e40, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff1704b4"], 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r7 = dup(r6)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa})
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200})
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000f9b000/0x4000)=nil, 0x4000, 0x2, 0x40010, r3, 0x8000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x80, &(0x7f0000000080)=0x9, 0x0, 0x4)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e0ff"])

0s ago: executing program 0 (id=313):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0xc, &(0x7f0000000340)={0x20, 0x11, 0x41, {0x41, 0x28, "56fb9a59db284fba84c852454c66416b6dc449f16a84fd3c22631d58211b21e4c1266b71afb634627a92aa9724855b3c89c212dc9425f670025c937c0f9055"}}, &(0x7f0000000240)={0x0, 0x3, 0x21, @string={0x21, 0x3, "61037301e4547868802596333013e1ab5a9e3e5696ef7eaef536bf9296b962"}}}, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x20, 0x15, 0xb7, "c2663640b4f5c737de426fee2570d4b349bb39c988185749a6ae6d8b8cd5deb36c2f87e8214df2c74d1c577d6ba4b6240b192192b3f48a648fec88472936b6fb0d186044c8c675914595ff3ae1764fda077939423f34c52f70682b7ce5b69906173d8ec19c43249dd20df4a7a5c1549c3fc8eb1689330ba3cec26b1f372cc52b14bf18db99a27560eeb890d48c455c5b04125e8f8b40641c5a57ca7a0c042211c2cd26e17495a7438b0389a41cf617111daa9207debf95"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x81, 0x3, "172f8c"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, "c6"}, &(0x7f0000000600)={0x20, 0x83, 0x1, "a5"}, &(0x7f0000000640)={0x20, 0x84, 0x4, "6a4eda26"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "5cb771"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000280)={0x0, 0x5, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(0xffffffffffffffff, r2, 0x0, 0x6)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xa2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f00002bb000/0x3000)=nil, 0x3000, 0x1)
setuid(0x0)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r3, r6, 0x7, 0x0)
syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x0, 0x0, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "581c031315c8"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x0, 0x0, "9e"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x4, 0x4, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x6, 0x3, 0x8000, 0x5, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x0, 0x0, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000700)=""/79, &(0x7f0000000780)=0x4f)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x80, 0x8, 0x6, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xfe, 0x0, 0x4038a09, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x0, 0x0, 0x7, 0xc}})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc)

kernel console output (not intermixed with test programs):

batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.896406][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.910049][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.917897][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.945855][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  100.336933][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.354326][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.511874][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.520137][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.613046][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.640707][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.780309][ T5981] bridge_slave_0: left allmulticast mode
[  101.786338][ T5981] bridge_slave_0: left promiscuous mode
[  101.803447][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.860129][ T5981] bridge_slave_1: left allmulticast mode
[  101.868194][ T5981] bridge_slave_1: left promiscuous mode
[  101.876619][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.945612][ T5981] bond0: (slave bond_slave_0): Releasing backup interface
[  101.983037][ T5981] bond0: (slave bond_slave_1): Releasing backup interface
[  102.094675][ T5981] team0: Port device team_slave_0 removed
[  102.109630][ T5981] team0: Port device team_slave_1 removed
[  102.120308][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.155702][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.173439][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.181097][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.887606][ T5997] input: syz1 as /devices/virtual/input/input5
[  102.902151][ T5953] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  103.068946][ T5953] usb 3-1: Using ep0 maxpacket: 8
[  103.090371][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.111165][ T5953] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  103.165852][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  103.186612][ T5953] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  103.196250][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.243182][ T5953] usb 3-1: config 0 descriptor??
[  104.593441][ T6018] binder: 6011:6018 ioctl 40043311 800000c0 returned -22
[  105.104117][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  105.104164][   T30] audit: type=1326 audit(1754883163.970:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  105.637110][   T30] audit: type=1326 audit(1754883163.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  105.707901][   T30] audit: type=1326 audit(1754883163.970:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf705e539 code=0x7ffc0000
[  105.826590][   T30] audit: type=1326 audit(1754883163.970:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  106.400367][   T30] audit: type=1326 audit(1754883163.970:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  106.432100][ T5871] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  106.661626][   T30] audit: type=1326 audit(1754883163.970:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf705e539 code=0x7ffc0000
[  106.701493][ T5871] usb 5-1: Using ep0 maxpacket: 8
[  106.961896][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.967652][ T5937] usb 3-1: USB disconnect, device number 2
[  107.028336][   T30] audit: type=1326 audit(1754883163.970:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  107.143530][ T5871] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  107.348272][ T5871] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  107.359921][ T6035] netlink: 'syz.3.17': attribute type 27 has an invalid length.
[  107.389220][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'.
[  107.598505][   T30] audit: type=1326 audit(1754883163.970:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf705e539 code=0x7ffc0000
[  107.621775][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.657479][   T30] audit: type=1326 audit(1754883163.970:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  107.700035][   T30] audit: type=1326 audit(1754883163.970:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  107.772618][ T6041] input: syz1 as /devices/virtual/input/input6
[  107.836607][ T5871] usb 5-1: config 0 descriptor??
[  108.162794][ T5937] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  108.775140][ T5937] usb 4-1: Using ep0 maxpacket: 32
[  108.848671][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  108.947618][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  109.186083][ T5937] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  109.208826][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.238299][ T5937] usb 4-1: Product: syz
[  109.289276][ T5937] usb 4-1: Manufacturer: syz
[  109.327309][ T5937] usb 4-1: SerialNumber: syz
[  109.381288][ T5937] usb 4-1: config 0 descriptor??
[  109.495056][ T5937] usb 4-1: no audio or video endpoints found
[  109.601077][   T44] usb 5-1: USB disconnect, device number 2
[  109.788058][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'.
[  110.118412][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[  110.898803][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.096269][ T6038] 8021q: adding VLAN 0 to HW filter on device team0
[  111.122260][ T6038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.162971][   T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.199687][   T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.272380][ T5930] usb 4-1: USB disconnect, device number 2
[  111.313528][   T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.384849][ T6043] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.741842][   T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  111.873357][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[  111.953094][   T44] usb 5-1: Using ep0 maxpacket: 8
[  111.984847][   T44] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  111.997636][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.036935][   T44] pvrusb2: Hardware description: Terratec Grabster AV400
[  112.105750][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'.
[  112.195874][   T44] pvrusb2: **********
[  112.211248][   T44] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  112.261220][   T44] pvrusb2: Important functionality might not be entirely working.
[  112.288652][   T44] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  112.410854][   T44] pvrusb2: **********
[  112.422954][ T2345] pvrusb2: Invalid write control endpoint
[  112.844824][ T6081] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  112.877806][   T30] audit: type=1326 audit(1754883171.750:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  112.941752][ T6068] pvrusb2: Invalid write control endpoint
[  112.947028][   T30] audit: type=1326 audit(1754883171.750:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf704e539 code=0x7ffc0000
[  112.962181][ T5937] usb 5-1: USB disconnect, device number 3
[  113.137704][   T30] audit: type=1326 audit(1754883171.750:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  113.667889][   T30] audit: type=1326 audit(1754883171.760:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf704e539 code=0x7ffc0000
[  113.699764][ T2345] pvrusb2: Invalid write control endpoint
[  113.723766][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  113.745544][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  113.797903][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  113.805766][   T30] audit: type=1326 audit(1754883171.780:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  113.840609][ T2345] pvrusb2: Device being rendered inoperable
[  113.869594][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  113.901673][   T30] audit: type=1326 audit(1754883171.780:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf704e539 code=0x7ffc0000
[  113.905924][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  114.011477][   T30] audit: type=1326 audit(1754883171.790:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  114.030450][ T2345] pvrusb2: Attached sub-driver cx25840
[  114.086485][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  114.201796][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  114.259795][   T30] audit: type=1326 audit(1754883171.790:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.26" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  114.411529][   T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  114.591634][   T44] usb 3-1: Using ep0 maxpacket: 8
[  114.632602][   T44] usb 3-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  114.722322][   T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64
[  114.931719][ T5871] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  114.968102][   T44] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  115.045677][   T44] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  115.060068][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.082800][   T44] usb 3-1: Product: syz
[  115.084070][ T5953] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  115.087054][   T44] usb 3-1: Manufacturer: syz
[  115.087074][   T44] usb 3-1: SerialNumber: syz
[  115.131603][ T5871] usb 4-1: Using ep0 maxpacket: 8
[  115.136992][   T44] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  115.139267][ T5871] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  115.158431][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.183745][   T44] usbtest 3-1:1.0: couldn't get endpoints, -22
[  115.218696][ T5871] pvrusb2: Hardware description: Terratec Grabster AV400
[  115.279479][   T44] usbtest 3-1:1.0: probe with driver usbtest failed with error -22
[  115.334346][ T5953] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  115.387425][ T5871] pvrusb2: **********
[  115.439031][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.457083][ T5871] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  115.495380][ T5871] pvrusb2: Important functionality might not be entirely working.
[  115.508550][ T5871] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  115.556881][ T5953] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  115.569645][ T6103] PKCS7: Unknown OID: [5] (bad)
[  115.584953][ T6103] PKCS7: Only support pkcs7_signedData type
[  115.634300][ T5953] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  115.671826][ T5854] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  115.878132][ T5871] pvrusb2: **********
[  115.903182][ T2345] pvrusb2: Invalid write control endpoint
[  115.906924][ T5953] usb 2-1: Manufacturer: syz
[  115.942470][ T5953] usb 2-1: config 0 descriptor??
[  116.241594][ T5871] usb 4-1: USB disconnect, device number 3
[  116.254614][ T5854] usb 5-1: Using ep0 maxpacket: 8
[  116.302185][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.336103][ T5854] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  116.356450][ T5854] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  116.380505][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.402382][ T5953] rc_core: IR keymap rc-hauppauge not found
[  116.408482][ T5953] Registered IR keymap rc-empty
[  116.425478][ T5854] usb 5-1: config 0 descriptor??
[  116.434689][ T5953] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  116.450851][ T6095] block device autoloading is deprecated and will be removed.
[  116.470047][ T5953] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  116.486326][ T6095] syz.1.30: attempt to access beyond end of device
[  116.486326][ T6095] md133: rw=2048, sector=0, nr_sectors = 8 limit=0
[  116.551595][ T2345] pvrusb2: Invalid write control endpoint
[  116.674130][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  116.732136][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  116.821489][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  116.861569][ T2345] pvrusb2: Device being rendered inoperable
[  116.905009][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  116.910803][ T6095] block device autoloading is deprecated and will be removed.
[  116.973774][ T6095] syz.1.30: attempt to access beyond end of device
[  116.973774][ T6095] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  117.041639][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  117.309075][   T30] audit: type=1326 audit(1754883176.190:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.3.32" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x0
[  117.332423][ T2345] pvrusb2: Attached sub-driver cx25840
[  117.352860][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  117.364944][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  117.407493][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  117.615531][ T5953] usb 3-1: USB disconnect, device number 3
[  117.631881][   T44] usb 2-1: USB disconnect, device number 2
[  118.165845][ T6116] bridge_slave_0: left allmulticast mode
[  118.171948][ T6116] bridge_slave_0: left promiscuous mode
[  118.182423][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.587351][ T6116] bridge_slave_1: left allmulticast mode
[  118.593331][ T6116] bridge_slave_1: left promiscuous mode
[  118.600055][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.619448][ T6116] bond0: (slave bond_slave_0): Releasing backup interface
[  118.788656][   T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  118.847041][ T6116] bond0: (slave bond_slave_1): Releasing backup interface
[  119.008553][   T44] usb 2-1: Using ep0 maxpacket: 32
[  119.023130][   T44] usb 2-1: config 0 has an invalid interface number: 247 but max is 0
[  119.033265][ T5953] usb 5-1: USB disconnect, device number 4
[  119.050781][   T44] usb 2-1: config 0 has no interface number 0
[  119.070911][   T44] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  119.089872][   T44] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  119.114265][   T44] usb 2-1: Product: syz
[  119.130435][   T44] usb 2-1: Manufacturer: syz
[  119.155681][   T44] usb 2-1: config 0 descriptor??
[  119.206675][ T6116] team0: Port device team_slave_0 removed
[  119.252017][ T6116] team0: Port device team_slave_1 removed
[  119.290670][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.311610][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.347957][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.356309][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.507674][ T6122] netlink: 52 bytes leftover after parsing attributes in process `syz.1.34'.
[  120.355295][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'.
[  121.034495][   T44] usb 2-1: USB disconnect, device number 3
[  121.122427][ T6131] binder: 6127:6131 ioctl 40043311 800000c0 returned -22
[  122.843853][ T6145] PKCS7: Unknown OID: [5] (bad)
[  122.991510][   T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  123.272910][   T44] usb 5-1: Using ep0 maxpacket: 8
[  123.297426][   T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.354987][   T44] usb 5-1: config 0 has no interfaces?
[  123.372871][   T44] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  123.385183][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.397053][ T6145] PKCS7: Only support pkcs7_signedData type
[  123.586801][ T6154] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  123.645499][   T30] audit: type=1326 audit(1754883182.510:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000
[  123.701124][   T44] usb 5-1: config 0 descriptor??
[  123.709580][   T30] audit: type=1326 audit(1754883182.510:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000
[  123.962008][   T30] audit: type=1326 audit(1754883182.510:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf703e539 code=0x7ffc0000
[  124.017038][   T30] audit: type=1326 audit(1754883182.510:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000
[  124.487741][   T30] audit: type=1326 audit(1754883182.510:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.2.40" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf703e539 code=0x7ffc0000
[  124.741028][ T6164] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  124.818955][   T30] audit: type=1326 audit(1754883183.670:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  124.886287][   T30] audit: type=1326 audit(1754883183.670:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  124.918042][   T30] audit: type=1326 audit(1754883183.670:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  124.949045][   T30] audit: type=1326 audit(1754883183.670:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  125.528328][   T30] audit: type=1326 audit(1754883183.670:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.1.42" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  125.748798][ T5923] usb 5-1: USB disconnect, device number 5
[  125.850703][ T6172] bridge_slave_0: left allmulticast mode
[  125.858342][ T6172] bridge_slave_0: left promiscuous mode
[  125.864740][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.146666][ T6172] bridge_slave_1: left allmulticast mode
[  126.156117][ T6172] bridge_slave_1: left promiscuous mode
[  126.167476][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.204708][ T6172] bond0: (slave bond_slave_0): Releasing backup interface
[  126.223834][ T6172] bond0: (slave bond_slave_1): Releasing backup interface
[  126.247353][ T6172] team0: Port device team_slave_0 removed
[  126.350489][ T6172] team0: Port device team_slave_1 removed
[  126.361045][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.369884][ T6172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.458979][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.468371][ T6172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.223226][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'.
[  128.269974][ T6193] fuse: Unknown parameter ' 0
[  128.269974][ T6193]  tunl0:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
[  128.269974][ T6193]   gre0:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
[  128.269974][ T6193] gretap0:       0       0    0    0    0     0          0         0        0       0    9    0    0     0       0          0
[  128.269974][ T6193] erspan0:       0       0    0    0    0     0          0         0        0       0   10    0    0     0       0          0
[  128.269974][ T6193] ip_vti0:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
[  128.269974][ T6193] ip6_vti0:       0       0    0    0    0     0          0         0        0       0    4    4    0     0       4          0
[  128.269974][ T6193]   sit0:       0       0    0    0    0     0          0         0        0       0    3    1    0     0       0          0
[  128.269974][ T6193] ip6tnl0:       0       0    0    0    0     0          0         0        0       0    4    4    0     0       4          0
[  128.269974][ T6193] ip6
[  129.307594][ T6200] tipc: Started in network mode
[  129.435912][ T6200] tipc: Node identity 9abe9a39e2a3, cluster identity 4711
[  129.543465][ T6200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.552957][ T6206] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  129.563556][ T6204] syzkaller0: entered promiscuous mode
[  129.591296][ T6204] syzkaller0: entered allmulticast mode
[  129.851855][ T6209] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  130.031541][   T30] audit: type=1326 audit(1754883188.880:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  130.056260][ T6200] tipc: Resetting bearer <eth:syzkaller0>
[  130.125575][ T6198] tipc: Resetting bearer <eth:syzkaller0>
[  130.241182][ T6198] tipc: Disabling bearer <eth:syzkaller0>
[  130.246207][   T30] audit: type=1326 audit(1754883188.880:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  130.311825][   T30] audit: type=1326 audit(1754883188.880:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  130.344993][   T30] audit: type=1326 audit(1754883188.880:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  130.419213][   T30] audit: type=1326 audit(1754883188.880:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  130.608324][ T6216] vivid-000: =================  START STATUS  =================
[  130.668951][ T6216] vivid-000: Test Pattern: 75% Colorbar
[  130.690343][ T6216] vivid-000: Fill Percentage of Frame: 100
[  130.697615][ T6216] vivid-000: Horizontal Movement: No Movement
[  130.701179][   T30] audit: type=1326 audit(1754883188.880:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  130.730179][ T6216] 
[  130.852963][ T6216] vivid-000: Vertical Movement: No Movement
[  130.866304][   T30] audit: type=1326 audit(1754883188.880:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  130.899581][ T6216] vivid-000: OSD Text Mode: All
[  130.906022][ T6216] vivid-000: Show Border: false
[  130.912644][ T6216] vivid-000: Show Square: false
[  130.925093][ T6216] vivid-000: Sensor Flipped Horizontally: false
[  130.948169][ T6216] vivid-000: Sensor Flipped Vertically: false
[  130.982756][ T6216] vivid-000: Insert SAV Code in Image: false
[  131.015771][ T6216] vivid-000: Insert EAV Code in Image: false
[  131.059893][ T6216] vivid-000: Insert Video Guard Band: false
[  131.069910][   T30] audit: type=1326 audit(1754883188.880:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  131.077906][ T6216] vivid-000: Reduced Framerate: 
[  131.093188][   T30] audit: type=1326 audit(1754883189.160:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.2.54" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703e539 code=0x0
[  131.262344][ T6216] false
[  131.270385][ T6216] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  131.278477][ T6216] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  131.331728][ T6216] vivid-000: Enable Capture Cropping: true grabbed
[  131.351519][ T6216] vivid-000: Enable Capture Composing: true grabbed
[  131.378657][ T6216] vivid-000: Enable Capture Scaler: true grabbed
[  131.401544][ T6216] vivid-000: Timestamp Source: End of Frame
[  131.455077][ T6216] vivid-000: Colorspace: sRGB
[  131.461879][ T6216] vivid-000: Transfer Function: Default
[  131.474084][ T6216] vivid-000: Y'CbCr Encoding: Default
[  131.487385][ T6216] vivid-000: HSV Encoding: Hue 0-179
[  131.506646][ T6216] vivid-000: Quantization: Default
[  131.525550][ T6216] vivid-000: Apply Alpha To Red Only: false
[  131.580100][ T6216] vivid-000: Standard Aspect Ratio: 4x3
[  131.610171][ T6216] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  131.655428][ T6216] vivid-000: DV Timings: 640x480p59 inactive
[  131.679805][ T6216] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  131.705842][ T6216] vivid-000: Maximum EDID Blocks: 2
[  131.913254][ T6216] vivid-000: Limited RGB Range (16-235): false
[  131.920906][ T6216] vivid-000: Rx RGB Quantization Range: Automatic
[  131.929901][ T6216] vivid-000: Power Present: 0x00000001
[  131.943031][ T6216] tpg source WxH: 320x240 (Y'CbCr)
[  131.957465][ T6216] tpg field: 1
[  131.963380][ T6216] tpg crop: (0,0)/320x240
[  131.968891][ T6216] tpg compose: (0,0)/320x240
[  131.975643][ T6216] tpg colorspace: 8
[  131.981264][ T6216] tpg transfer function: 0/0
[  131.988050][ T6216] tpg Y'CbCr encoding: 0/0
[  131.995673][ T6216] tpg quantization: 0/0
[  132.003269][ T6216] tpg RGB range: 0/2
[  132.010104][ T6216] vivid-000: ==================  END STATUS  ==================
[  132.091483][   T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  132.326930][   T44] usb 2-1: Using ep0 maxpacket: 8
[  132.498999][ T6234] binder: 6227:6234 ioctl 40043311 800000c0 returned -22
[  132.546604][   T44] usb 2-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  132.558624][   T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64
[  132.601970][   T44] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  132.692756][   T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  132.703359][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.746627][   T44] usb 2-1: Product: syz
[  132.778324][   T44] usb 2-1: Manufacturer: syz
[  132.845936][   T44] usb 2-1: SerialNumber: syz
[  132.990548][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  132.999649][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  133.036647][   T44] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  133.068110][   T44] usbtest 2-1:1.0: couldn't get endpoints, -22
[  133.075920][   T44] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[  133.905727][   T30] audit: type=1326 audit(1754883192.750:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.0.59" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  134.093912][ T6243] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.61'.
[  134.146028][ T5930] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  134.461430][ T5930] usb 1-1: Using ep0 maxpacket: 8
[  134.517333][ T6242] netlink: 'syz.0.59': attribute type 3 has an invalid length.
[  134.544254][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.557294][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.188435][ T5953] usb 2-1: USB disconnect, device number 4
[  135.653747][ T6252] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  136.743329][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'.
[  137.448939][ T5930] usb 1-1: unable to get BOS descriptor or descriptor too short
[  137.513164][ T5930] usb 1-1: unable to read config index 0 descriptor/start: -71
[  137.556700][ T5930] usb 1-1: can't read configurations, error -71
[  137.729675][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'.
[  137.917736][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'.
[  137.991499][ T6274] binder: 6262:6274 ioctl 40043311 800000c0 returned -22
[  138.291710][ T5930] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  138.532307][ T6276] PKCS7: Unknown OID: [5] (bad)
[  138.537512][ T6276] PKCS7: Only support pkcs7_signedData type
[  138.543869][ T5930] usb 1-1: Using ep0 maxpacket: 8
[  138.563952][ T5930] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  138.673627][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.860131][ T5930] pvrusb2: Hardware description: Terratec Grabster AV400
[  138.882578][ T5930] pvrusb2: **********
[  138.886597][ T5930] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  138.924897][ T5930] pvrusb2: Important functionality might not be entirely working.
[  138.964345][ T5930] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  139.122475][ T5930] pvrusb2: **********
[  139.139541][ T2345] pvrusb2: Invalid write control endpoint
[  139.154778][ T5930] usb 1-1: USB disconnect, device number 3
[  139.365139][ T2345] pvrusb2: Invalid write control endpoint
[  139.395969][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  139.431055][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  139.467779][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  139.642505][ T6282] hub 9-0:1.0: USB hub found
[  139.648925][ T6282] hub 9-0:1.0: 1 port detected
[  139.707658][ T2345] pvrusb2: Device being rendered inoperable
[  139.724988][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  139.749650][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  139.771414][ T2345] pvrusb2: Attached sub-driver cx25840
[  139.811456][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  139.852157][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  141.278521][ T6293] binder: 6289:6293 ioctl 40043311 800000c0 returned -22
[  142.565101][ T6298] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  142.695051][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  142.695072][   T30] audit: type=1326 audit(1754883201.570:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  142.747849][   T30] audit: type=1326 audit(1754883201.570:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  142.785781][   T30] audit: type=1326 audit(1754883201.570:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  143.310643][ T6305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  143.328813][   T30] audit: type=1326 audit(1754883201.570:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  143.388928][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'.
[  143.622667][ T6307] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  143.634452][   T30] audit: type=1326 audit(1754883201.570:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  143.735153][   T30] audit: type=1326 audit(1754883201.570:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  144.041510][   T30] audit: type=1326 audit(1754883201.570:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  144.119351][ T6313] bridge_slave_0: left allmulticast mode
[  144.189149][   T30] audit: type=1326 audit(1754883201.570:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  144.199349][ T6313] bridge_slave_0: left promiscuous mode
[  144.268793][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.697786][   T30] audit: type=1326 audit(1754883201.570:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  144.758154][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'.
[  144.781626][   T30] audit: type=1326 audit(1754883201.570:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6294 comm="syz.4.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  145.030459][ T6313] bridge_slave_1: left allmulticast mode
[  145.036613][ T6313] bridge_slave_1: left promiscuous mode
[  145.043418][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.105649][ T6313] bond0: (slave bond_slave_0): Releasing backup interface
[  145.132666][ T6313] bond0: (slave bond_slave_1): Releasing backup interface
[  145.235579][ T6313] team0: Port device team_slave_0 removed
[  145.319612][ T6313] team0: Port device team_slave_1 removed
[  145.330090][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.337754][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.377093][ T6325] binder: 6320:6325 ioctl 40043311 800000c0 returned -22
[  145.393665][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.496993][ T6313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.197570][ T6331] netlink: 'syz.2.80': attribute type 27 has an invalid length.
[  146.582508][ T5953] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  146.744188][ T5953] usb 3-1: Using ep0 maxpacket: 32
[  146.767015][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  146.781082][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  146.916728][ T5953] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  146.936335][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.957752][ T5953] usb 3-1: Product: syz
[  146.975986][ T5953] usb 3-1: Manufacturer: syz
[  146.987740][ T5953] usb 3-1: SerialNumber: syz
[  147.011161][ T5953] usb 3-1: config 0 descriptor??
[  147.068674][ T5953] usb 3-1: no audio or video endpoints found
[  147.658605][ T6332] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.674716][ T6332] 8021q: adding VLAN 0 to HW filter on device team0
[  147.690360][ T6332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.723907][ T4600] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.733475][ T4600] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.748695][ T4600] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.820051][ T6337] input: syz1 as /devices/virtual/input/input8
[  147.878856][ T4600] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.076374][ T5953] usb 3-1: USB disconnect, device number 4
[  148.269168][ T6349] binder: 6340:6349 ioctl 40043311 800000c0 returned -22
[  148.458961][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'.
[  150.011103][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  150.011122][   T30] audit: type=1326 audit(1754883208.890:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  150.222758][   T30] audit: type=1326 audit(1754883208.890:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  150.543950][   T30] audit: type=1326 audit(1754883208.890:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf704e539 code=0x7ffc0000
[  150.654015][   T30] audit: type=1326 audit(1754883208.890:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  151.088919][   T30] audit: type=1326 audit(1754883208.890:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  151.190698][   T30] audit: type=1326 audit(1754883208.890:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf704e539 code=0x7ffc0000
[  151.329448][   T30] audit: type=1326 audit(1754883208.890:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  151.436073][   T30] audit: type=1326 audit(1754883208.890:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  151.551510][   T30] audit: type=1326 audit(1754883208.890:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf704e539 code=0x7ffc0000
[  151.575412][   T30] audit: type=1326 audit(1754883208.890:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6353 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  151.860136][ T6379] binder: 6371:6379 ioctl 40043311 800000c0 returned -22
[  152.148217][ T6382] binder: 6376:6382 ioctl 40043311 800000c0 returned -22
[  152.449511][ T6387] binder: 6383:6387 ioctl 40043311 800000c0 returned -22
[  154.126354][ T6395] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  155.877934][ T6405] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  156.163824][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  156.163846][   T30] audit: type=1326 audit(1754883215.030:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  156.532206][   T30] audit: type=1326 audit(1754883215.030:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  156.841945][   T30] audit: type=1326 audit(1754883215.030:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf705e539 code=0x7ffc0000
[  156.920703][   T30] audit: type=1326 audit(1754883215.030:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  157.081852][   T30] audit: type=1326 audit(1754883215.030:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  157.158013][   T30] audit: type=1326 audit(1754883215.040:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf705e539 code=0x7ffc0000
[  157.184044][   T30] audit: type=1326 audit(1754883215.040:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  157.206807][ T5953] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  157.233565][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'.
[  157.266660][   T30] audit: type=1326 audit(1754883215.040:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  157.294793][   T30] audit: type=1326 audit(1754883215.040:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf705e539 code=0x7ffc0000
[  157.325685][   T30] audit: type=1326 audit(1754883215.040:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  157.361706][ T5953] usb 4-1: Using ep0 maxpacket: 8
[  157.370300][ T5953] usb 4-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  157.385451][ T5953] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64
[  157.399186][ T5953] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  157.424581][ T5953] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  157.437486][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.456346][ T5953] usb 4-1: Product: syz
[  157.480337][ T5953] usb 4-1: Manufacturer: syz
[  157.487326][ T5953] usb 4-1: SerialNumber: syz
[  157.585335][ T5953] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  157.606477][ T5953] usbtest 4-1:1.0: couldn't get endpoints, -22
[  157.616273][ T5953] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[  158.615125][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'.
[  160.120676][ T5953] usb 4-1: USB disconnect, device number 4
[  161.161449][ T6465] binder: 6453:6465 ioctl 40043311 800000c0 returned -22
[  161.806617][ T5930] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  161.873606][ T6469] binder: 6467:6469 ioctl 40043311 800000c0 returned -22
[  162.231474][ T5930] usb 1-1: Using ep0 maxpacket: 8
[  162.343624][ T5930] usb 1-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  162.354130][ T5930] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64
[  162.365748][ T5930] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  162.428457][ T5930] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  162.519056][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.544197][ T5930] usb 1-1: Product: syz
[  162.564465][ T5930] usb 1-1: Manufacturer: syz
[  162.639360][ T5930] usb 1-1: SerialNumber: syz
[  162.732034][ T5930] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  162.784768][ T5930] usbtest 1-1:1.0: couldn't get endpoints, -22
[  162.805899][ T5930] usbtest 1-1:1.0: probe with driver usbtest failed with error -22
[  163.555653][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'.
[  165.043698][ T6497] binder: 6492:6497 ioctl 40043311 800000c0 returned -22
[  165.736097][ T5974] usb 1-1: USB disconnect, device number 4
[  165.881745][ T5953] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  166.258628][ T5953] usb 3-1: Using ep0 maxpacket: 8
[  166.272395][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.285270][ T5953] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  166.294672][ T5953] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  166.315249][ T6508] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  166.392575][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  166.392594][   T30] audit: type=1326 audit(1754883225.260:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  166.427021][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.447963][   T30] audit: type=1326 audit(1754883225.260:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  166.542798][ T6512] input: syz1 as /devices/virtual/input/input9
[  166.560155][ T5953] usb 3-1: config 0 descriptor??
[  166.588215][   T30] audit: type=1326 audit(1754883225.260:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf704e539 code=0x7ffc0000
[  166.686355][   T30] audit: type=1326 audit(1754883225.260:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  166.981492][   T30] audit: type=1326 audit(1754883225.260:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  167.071645][   T30] audit: type=1326 audit(1754883225.270:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf704e539 code=0x7ffc0000
[  167.100923][   T30] audit: type=1326 audit(1754883225.270:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  167.492431][   T30] audit: type=1326 audit(1754883225.270:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  167.519176][   T30] audit: type=1326 audit(1754883225.270:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf704e539 code=0x7ffc0000
[  167.547215][   T30] audit: type=1326 audit(1754883225.270:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  168.246405][ T6529] tipc: New replicast peer: 0.0.0.0
[  168.260083][ T6529] tipc: Enabled bearer <udp:syz2>, priority 10
[  168.272402][ T6529] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[6529]
[  168.431188][ T6533] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  169.424006][ T5953] tipc: Node number set to 2015205945
[  169.647308][ T5930] usb 3-1: USB disconnect, device number 5
[  170.492082][ T5974] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  170.651493][ T5974] usb 3-1: device descriptor read/64, error -71
[  170.902453][ T5974] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  170.986547][ T5930] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  171.072331][ T5974] usb 3-1: device descriptor read/64, error -71
[  171.091292][ T6561] input: syz1 as /devices/virtual/input/input10
[  171.204555][ T5974] usb usb3-port1: attempt power cycle
[  171.215731][ T5930] usb 2-1: Using ep0 maxpacket: 8
[  171.242038][ T5930] usb 2-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config
[  171.345749][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64
[  171.478714][ T5930] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  171.556750][ T6572] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  171.615177][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  171.615192][   T30] audit: type=1326 audit(1754883230.460:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  171.665135][ T5974] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  171.680293][ T5930] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  171.701837][ T5974] usb 3-1: device descriptor read/8, error -71
[  171.719255][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.731645][   T30] audit: type=1326 audit(1754883230.460:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  171.753828][ T5930] usb 2-1: Product: syz
[  171.815833][ T5930] usb 2-1: Manufacturer: syz
[  171.826471][ T6577] binder: 6567:6577 ioctl 40043311 800000c0 returned -22
[  171.866262][ T5930] usb 2-1: SerialNumber: syz
[  171.879934][   T30] audit: type=1326 audit(1754883230.460:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  171.959538][   T30] audit: type=1326 audit(1754883230.460:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  171.991575][ T5974] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  172.362060][ T5930] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  172.379123][ T5930] usbtest 2-1:1.0: couldn't get endpoints, -22
[  172.394832][ T5930] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[  172.395047][ T5974] usb 3-1: device descriptor read/8, error -71
[  172.403152][   T30] audit: type=1326 audit(1754883230.460:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  172.594507][   T30] audit: type=1326 audit(1754883230.460:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  172.704951][   T30] audit: type=1326 audit(1754883230.460:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  172.755707][ T5974] usb usb3-port1: unable to enumerate USB device
[  172.807237][   T30] audit: type=1326 audit(1754883230.460:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  173.273333][   T30] audit: type=1326 audit(1754883232.160:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  173.412408][   T30] audit: type=1326 audit(1754883232.160:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.0.134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  174.239529][ T6592] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  174.325381][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'.
[  174.467453][ T5953] usb 2-1: USB disconnect, device number 5
[  176.163924][ T6610] input: syz1 as /devices/virtual/input/input11
[  176.490722][ T6617] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  176.497368][ T6617] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  176.522610][ T6617] vhci_hcd vhci_hcd.0: Device attached
[  176.631445][   T30] kauditd_printk_skb: 54 callbacks suppressed
[  176.631464][   T30] audit: type=1326 audit(1754883235.480:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd5558 code=0x7ffc0000
[  176.689327][ T6621] vhci_hcd: connection closed
[  176.701571][   T12] vhci_hcd: stop threads
[  176.711677][ T5953] vhci_hcd: vhci_device speed not set
[  176.720277][   T12] vhci_hcd: release socket
[  176.727885][   T12] vhci_hcd: disconnect device
[  176.775347][   T30] audit: type=1326 audit(1754883235.480:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd5558 code=0x7ffc0000
[  176.805689][ T5953] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  176.827454][ T5953] usb 41-1: enqueue for inactive port 0
[  176.861437][   T30] audit: type=1326 audit(1754883235.490:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  176.931619][ T5953] vhci_hcd: vhci_device speed not set
[  176.939388][   T30] audit: type=1326 audit(1754883235.490:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  177.020547][   T30] audit: type=1326 audit(1754883235.490:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd5558 code=0x7ffc0000
[  177.089136][   T30] audit: type=1326 audit(1754883235.490:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd5558 code=0x7ffc0000
[  177.168966][   T30] audit: type=1326 audit(1754883235.490:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd5558 code=0x7ffc0000
[  177.244849][   T30] audit: type=1326 audit(1754883235.490:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd5558 code=0x7ffc0000
[  177.511624][   T30] audit: type=1326 audit(1754883235.490:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd5558 code=0x7ffc0000
[  177.560197][   T30] audit: type=1326 audit(1754883235.490:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd5558 code=0x7ffc0000
[  177.751451][ T5937] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  177.902490][ T5937] usb 4-1: Using ep0 maxpacket: 8
[  177.936473][ T5937] usb 4-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config
[  177.977745][ T5937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64
[  178.062184][ T5937] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  178.120197][ T5937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  178.130777][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.144091][ T5937] usb 4-1: Product: syz
[  178.149590][ T5937] usb 4-1: Manufacturer: syz
[  178.178847][ T5937] usb 4-1: SerialNumber: syz
[  178.228786][ T5937] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  178.252031][ T5937] usbtest 4-1:1.0: couldn't get endpoints, -22
[  178.262141][ T5937] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[  180.220232][   T44] usb 4-1: USB disconnect, device number 5
[  180.791513][ T6669] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  180.868537][ T6668] binder: 6654:6668 ioctl 40043311 800000c0 returned -22
[  181.060087][ T6664] mmap: syz.1.164 (6664) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  182.422458][ T6682] input: syz1 as /devices/virtual/input/input12
[  183.128099][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'.
[  183.732364][   T30] kauditd_printk_skb: 77 callbacks suppressed
[  183.732382][   T30] audit: type=1326 audit(1754883242.620:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  183.861614][ T6699] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  183.868277][ T6699] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  183.877574][ T6699] vhci_hcd vhci_hcd.0: Device attached
[  183.883240][   T30] audit: type=1326 audit(1754883242.620:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  183.883294][   T30] audit: type=1326 audit(1754883242.650:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf704e539 code=0x7ffc0000
[  183.883339][   T30] audit: type=1326 audit(1754883242.650:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  183.883384][   T30] audit: type=1326 audit(1754883242.650:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  183.883427][   T30] audit: type=1326 audit(1754883242.650:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf704e539 code=0x7ffc0000
[  183.883473][   T30] audit: type=1326 audit(1754883242.650:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e539 code=0x7ffc0000
[  183.883518][   T30] audit: type=1326 audit(1754883242.650:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704e539 code=0x7ffc0000
[  184.053687][   T30] audit: type=1326 audit(1754883242.930:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000
[  184.121483][ T5974] vhci_hcd: vhci_device speed not set
[  184.181601][ T5974] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  184.219723][   T30] audit: type=1326 audit(1754883242.930:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.3.163" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf704e539 code=0x7ffc0000
[  184.464678][ T6700] vhci_hcd: connection reset by peer
[  184.471848][   T13] vhci_hcd: stop threads
[  184.528274][   T13] vhci_hcd: release socket
[  184.551589][   T13] vhci_hcd: disconnect device
[  185.023065][ T5854] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  185.118471][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'.
[  185.226136][ T5854] usb 5-1: Using ep0 maxpacket: 8
[  185.274810][ T6717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'.
[  185.292689][ T5854] usb 5-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  185.333318][ T5854] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64
[  185.363925][ T5854] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  185.419939][ T5854] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  185.435481][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.531754][ T5854] usb 5-1: Product: syz
[  185.560671][ T5854] usb 5-1: Manufacturer: syz
[  185.575339][ T5854] usb 5-1: SerialNumber: syz
[  185.781250][ T5854] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  185.802571][ T5854] usbtest 5-1:1.0: couldn't get endpoints, -22
[  185.818254][ T5854] usbtest 5-1:1.0: probe with driver usbtest failed with error -22
[  186.161635][   T44] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  186.496783][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'.
[  186.603972][   T44] usb 3-1: Using ep0 maxpacket: 32
[  186.611485][   T44] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  186.619803][   T44] usb 3-1: config 0 has no interface number 0
[  186.625988][   T44] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  186.699640][   T44] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  186.734423][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.744701][ T6741] netlink: 'syz.0.174': attribute type 10 has an invalid length.
[  186.813413][   T44] usb 3-1: Product: syz
[  186.824181][   T44] usb 3-1: Manufacturer: syz
[  186.836327][   T44] usb 3-1: SerialNumber: syz
[  186.864745][   T44] usb 3-1: config 0 descriptor??
[  186.890251][   T44] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  186.906779][ T6741] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  186.915698][   T44] em28xx 3-1:0.132: Video interface 132 found:
[  187.405921][   T44] em28xx 3-1:0.132: unknown em28xx chip ID (194)
[  187.966639][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.982088][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.070969][ T5930] usb 5-1: USB disconnect, device number 6
[  188.265787][ T6757] input: syz1 as /devices/virtual/input/input13
[  188.751939][   T44] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  188.768604][   T44] em28xx 3-1:0.132: board has no eeprom
[  188.984036][ T5854] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  188.984075][   T44] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  189.080476][   T44] em28xx 3-1:0.132: analog set to bulk mode.
[  189.086958][ T5937] em28xx 3-1:0.132: Registering V4L2 extension
[  189.221614][ T5854] usb 2-1: Using ep0 maxpacket: 32
[  189.261209][   T44] usb 3-1: USB disconnect, device number 10
[  189.271851][ T5974] vhci_hcd: vhci_device speed not set
[  189.272511][   T44] em28xx 3-1:0.132: Disconnecting em28xx
[  189.298083][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.468235][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.509336][ T5854] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  189.534164][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.617847][ T5854] usb 2-1: config 0 descriptor??
[  190.040994][ T5854] ft260 0003:0403:6030.0001: unknown main item tag 0x7
[  190.103434][ T5937] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  190.163843][ T5937] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  190.227936][ T5937] em28xx 3-1:0.132: No AC97 audio processor
[  190.238758][ T5854] ft260 0003:0403:6030.0001: chip code: 6424 8183
[  190.272120][ T5937] usb 3-1: Decoder not found
[  190.308374][ T5937] em28xx 3-1:0.132: failed to create media graph
[  190.324277][ T5937] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  190.356130][ T5937] em28xx 3-1:0.132: Remote control support is not available for this card.
[  190.368003][ T6789] FAULT_INJECTION: forcing a failure.
[  190.368003][ T6789] name failslab, interval 1, probability 0, space 0, times 1
[  190.411853][   T44] em28xx 3-1:0.132: Closing input extension
[  190.422907][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.3.186 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  190.422936][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  190.422958][ T6789] Call Trace:
[  190.422967][ T6789]  <TASK>
[  190.422976][ T6789]  dump_stack_lvl+0x189/0x250
[  190.423024][ T6789]  ? __pfx____ratelimit+0x10/0x10
[  190.423055][ T6789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.423081][ T6789]  ? __pfx__printk+0x10/0x10
[  190.423115][ T6789]  ? __pfx___might_resched+0x10/0x10
[  190.423137][ T6789]  ? fs_reclaim_acquire+0x7d/0x100
[  190.423177][ T6789]  should_fail_ex+0x414/0x560
[  190.423211][ T6789]  should_failslab+0xa8/0x100
[  190.423245][ T6789]  __kmalloc_noprof+0xcb/0x4f0
[  190.423275][ T6789]  ? tomoyo_encode+0x28b/0x550
[  190.423302][ T6789]  tomoyo_encode+0x28b/0x550
[  190.423330][ T6789]  tomoyo_realpath_from_path+0x58d/0x5d0
[  190.423354][ T6789]  ? tomoyo_domain+0xd9/0x130
[  190.423383][ T6789]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  190.423413][ T6789]  tomoyo_path_number_perm+0x1e8/0x5a0
[  190.423447][ T6789]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  190.423503][ T6789]  ? __lock_acquire+0xab9/0xd20
[  190.423558][ T6789]  ? __fget_files+0x2a/0x420
[  190.423583][ T6789]  ? __fget_files+0x3a0/0x420
[  190.423601][ T6789]  ? __fget_files+0x2a/0x420
[  190.423625][ T6789]  security_file_ioctl_compat+0xcb/0x2d0
[  190.423658][ T6789]  __ia32_compat_sys_ioctl+0x128/0x840
[  190.423690][ T6789]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  190.423724][ T6789]  ? __fget_files+0x3a0/0x420
[  190.423751][ T6789]  ? fput+0xa0/0xd0
[  190.423775][ T6789]  ? ksys_write+0x22a/0x250
[  190.423815][ T6789]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.423848][ T6789]  __do_fast_syscall_32+0xb6/0x2b0
[  190.423883][ T6789]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.423917][ T6789]  do_fast_syscall_32+0x34/0x80
[  190.423949][ T6789]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  190.423982][ T6789] RIP: 0023:0xf704e539
[  190.424017][ T6789] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  190.424036][ T6789] RSP: 002b:00000000f543e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  190.424058][ T6789] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa05
[  190.424073][ T6789] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  190.424086][ T6789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  190.424098][ T6789] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  190.424110][ T6789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  190.424142][ T6789]  </TASK>
[  190.424166][ T6789] ERROR: Out of memory at tomoyo_realpath_from_path.
[  190.541827][ T5854] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  190.727058][ T5854] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup
[  191.258779][   T44] em28xx 3-1:0.132: Freeing device
[  191.891580][ T5854] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71
[  192.025080][ T5854] usb 2-1: USB disconnect, device number 6
[  192.201422][ T5953] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  192.411604][ T5953] usb 1-1: Using ep0 maxpacket: 8
[  192.568736][ T5953] usb 1-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config
[  192.581667][ T5937] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  192.625694][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64
[  192.695599][ T5953] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  192.741828][ T5937] usb 3-1: Using ep0 maxpacket: 32
[  192.753337][ T5937] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  192.766898][ T5937] usb 3-1: config 0 has no interface number 0
[  192.777101][ T5937] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  192.825714][ T5937] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  192.843869][   T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  192.866518][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.928417][ T5937] usb 3-1: Product: syz
[  192.943105][ T5953] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  192.954087][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.970969][ T5953] usb 1-1: Product: syz
[  192.971438][ T5937] usb 3-1: Manufacturer: syz
[  192.990943][ T5937] usb 3-1: SerialNumber: syz
[  192.999780][ T5953] usb 1-1: Manufacturer: syz
[  193.008579][ T5937] usb 3-1: config 0 descriptor??
[  193.014048][   T44] usb 4-1: Using ep0 maxpacket: 32
[  193.016203][ T5953] usb 1-1: SerialNumber: syz
[  193.022778][   T44] usb 4-1: config 0 interface 0 has no altsetting 0
[  193.031089][   T44] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  193.057802][ T5937] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  193.068733][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.080156][ T5937] em28xx 3-1:0.132: Video interface 132 found:
[  193.119877][   T44] usb 4-1: config 0 descriptor??
[  193.119934][ T5953] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  193.156173][ T5953] usbtest 1-1:1.0: couldn't get endpoints, -22
[  193.165010][ T5953] usbtest 1-1:1.0: probe with driver usbtest failed with error -22
[  193.458492][ T5937] em28xx 3-1:0.132: unknown em28xx chip ID (194)
[  193.713400][   T44] corsair-psu 0003:1B1C:1C0D.0002: unknown main item tag 0x0
[  193.720864][   T44] corsair-psu 0003:1B1C:1C0D.0002: unknown main item tag 0x0
[  193.740772][   T44] corsair-psu 0003:1B1C:1C0D.0002: unknown main item tag 0x0
[  193.756985][   T44] corsair-psu 0003:1B1C:1C0D.0002: unknown main item tag 0x0
[  193.766060][   T44] corsair-psu 0003:1B1C:1C0D.0002: unknown main item tag 0x0
[  193.880628][   T44] corsair-psu 0003:1B1C:1C0D.0002: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.3-1/input0
[  194.027768][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.036802][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.318977][   T30] kauditd_printk_skb: 90 callbacks suppressed
[  194.318992][   T30] audit: type=1326 audit(1754883253.170:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  194.355033][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.389022][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.415864][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.422775][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  194.446099][   T44] corsair-psu 0003:1B1C:1C0D.0002: unable to initialize device (-110)
[  194.518460][   T44] corsair-psu 0003:1B1C:1C0D.0002: probe with driver corsair-psu failed with error -110
[  194.532517][   T30] audit: type=1326 audit(1754883253.170:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  194.572233][   T44] usb 4-1: USB disconnect, device number 6
[  194.601525][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  194.649026][   T30] audit: type=1326 audit(1754883253.170:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  194.678301][   T30] audit: type=1326 audit(1754883253.170:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  194.757983][   T30] audit: type=1326 audit(1754883253.170:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  194.784499][   T30] audit: type=1326 audit(1754883253.170:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  194.807577][   T24] usb 2-1: Using ep0 maxpacket: 8
[  194.813074][ T5937] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  194.827354][ T5937] em28xx 3-1:0.132: board has no eeprom
[  194.856156][ T6829] netlink: 'syz.1.196': attribute type 3 has an invalid length.
[  194.919157][ T6829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.972555][ T6829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.981425][   T30] audit: type=1326 audit(1754883253.180:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  195.003331][ T5937] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  195.011434][ T5937] em28xx 3-1:0.132: analog set to bulk mode.
[  195.020028][   T44] em28xx 3-1:0.132: Registering V4L2 extension
[  195.063992][   T30] audit: type=1326 audit(1754883253.180:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  195.133642][   T30] audit: type=1326 audit(1754883253.390:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  195.241823][   T30] audit: type=1326 audit(1754883253.410:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76539 code=0x7ffc0000
[  195.298074][ T5937] usb 1-1: USB disconnect, device number 5
[  195.313264][ T5950] usb 3-1: USB disconnect, device number 11
[  195.321996][ T5950] em28xx 3-1:0.132: Disconnecting em28xx
[  195.968355][   T44] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  195.980784][   T44] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  196.058757][   T44] em28xx 3-1:0.132: No AC97 audio processor
[  196.209887][   T44] usb 3-1: Decoder not found
[  196.238475][   T44] em28xx 3-1:0.132: failed to create media graph
[  196.280373][   T44] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  196.352502][   T44] em28xx 3-1:0.132: Remote control support is not available for this card.
[  196.378858][ T6846] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  196.410518][ T5950] em28xx 3-1:0.132: Closing input extension
[  196.526060][ T5950] em28xx 3-1:0.132: Freeing device
[  196.911443][ T5950] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  197.101513][ T5950] usb 3-1: Using ep0 maxpacket: 16
[  197.109295][ T5950] usb 3-1: config 0 has an invalid interface number: 126 but max is 0
[  197.152249][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.165742][ T5950] usb 3-1: config 0 has no interface number 0
[  197.172347][ T5950] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  197.184569][ T5950] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  197.197229][ T5950] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  197.339135][ T5950] usb 3-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147
[  197.378815][ T5950] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  197.415408][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  197.450009][   T24] usb 2-1: unable to read config index 0 descriptor/start: -71
[  197.457757][ T5950] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  197.468361][   T24] usb 2-1: can't read configurations, error -71
[  197.481446][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.513812][ T5950] usb 3-1: config 0 descriptor??
[  197.520128][ T6849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  197.539632][ T6849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  197.572974][ T5950] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  197.751545][ T5953] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  197.805082][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.828559][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.836587][ T5923] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  197.858935][ T5950] usb 3-1: USB disconnect, device number 12
[  197.951520][ T5953] usb 5-1: Using ep0 maxpacket: 32
[  197.961240][ T5953] usb 5-1: config 0 has an invalid interface number: 247 but max is 0
[  198.001540][ T5953] usb 5-1: config 0 has no interface number 0
[  198.001667][ T5923] usb 1-1: Using ep0 maxpacket: 32
[  198.020237][ T5923] usb 1-1: config 0 has an invalid interface number: 247 but max is 0
[  198.024976][ T5953] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  198.030043][ T5923] usb 1-1: config 0 has no interface number 0
[  198.052889][ T5923] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  198.060357][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  198.063243][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  198.080972][ T5923] usb 1-1: Product: syz
[  198.085545][ T5923] usb 1-1: Manufacturer: syz
[  198.090630][ T5953] usb 5-1: Product: syz
[  198.098060][ T5923] usb 1-1: config 0 descriptor??
[  198.110908][ T5953] usb 5-1: Manufacturer: syz
[  198.153815][ T5953] usb 5-1: config 0 descriptor??
[  198.268645][ T5953] chaoskey 5-1:0.247: Unable to register with hwrng
[  198.470491][ T6873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.202'.
[  198.617160][ T6874] FAULT_INJECTION: forcing a failure.
[  198.617160][ T6874] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  198.672569][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.4.203 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  198.672599][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  198.672611][ T6874] Call Trace:
[  198.672620][ T6874]  <TASK>
[  198.672628][ T6874]  dump_stack_lvl+0x189/0x250
[  198.672658][ T6874]  ? __pfx____ratelimit+0x10/0x10
[  198.672686][ T6874]  ? __pfx_dump_stack_lvl+0x10/0x10
[  198.672710][ T6874]  ? __pfx__printk+0x10/0x10
[  198.672747][ T6874]  should_fail_ex+0x414/0x560
[  198.672778][ T6874]  _copy_to_user+0x31/0xb0
[  198.672804][ T6874]  simple_read_from_buffer+0xe1/0x170
[  198.672839][ T6874]  proc_fail_nth_read+0x1b3/0x220
[  198.672865][ T6874]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  198.672890][ T6874]  ? rw_verify_area+0x2a6/0x4d0
[  198.672914][ T6874]  ? __lock_acquire+0xab9/0xd20
[  198.672940][ T6874]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  198.672965][ T6874]  vfs_read+0x200/0xa30
[  198.672989][ T6874]  ? fdget_pos+0x247/0x320
[  198.673009][ T6874]  ? __pfx___mutex_lock+0x10/0x10
[  198.673037][ T6874]  ? __pfx_vfs_read+0x10/0x10
[  198.673063][ T6874]  ? __fget_files+0x2a/0x420
[  198.673085][ T6874]  ? __fget_files+0x3a0/0x420
[  198.673102][ T6874]  ? __fget_files+0x2a/0x420
[  198.673127][ T6874]  ksys_read+0x145/0x250
[  198.673154][ T6874]  ? __pfx_ksys_read+0x10/0x10
[  198.673183][ T6874]  ? lockdep_hardirqs_on+0x9c/0x150
[  198.673214][ T6874]  __do_fast_syscall_32+0xb6/0x2b0
[  198.673253][ T6874]  ? lockdep_hardirqs_on+0x9c/0x150
[  198.673284][ T6874]  do_fast_syscall_32+0x34/0x80
[  198.673313][ T6874]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  198.673336][ T6874] RIP: 0023:0xf7fd5539
[  198.673359][ T6874] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  198.673376][ T6874] RSP: 002b:00000000f54d5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  198.673397][ T6874] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f54d5620
[  198.673410][ T6874] RDX: 000000000000000f RSI: 00000000f7464ff4 RDI: 0000000000000000
[  198.673422][ T6874] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  198.673433][ T6874] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  198.673445][ T6874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  198.673471][ T6874]  </TASK>
[  199.399222][ T5871] usb 5-1: USB disconnect, device number 7
[  199.445354][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'.
[  199.541431][ T5953] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  199.731433][ T5953] usb 2-1: Using ep0 maxpacket: 32
[  199.801203][ T5953] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  199.813306][ T5953] usb 2-1: config 0 has no interface number 0
[  199.819438][ T5953] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  199.833658][ T5953] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  199.843331][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.855001][ T5953] usb 2-1: Product: syz
[  199.861213][ T5953] usb 2-1: Manufacturer: syz
[  199.868925][ T5953] usb 2-1: SerialNumber: syz
[  199.881160][ T5871] usb 1-1: USB disconnect, device number 6
[  199.912377][ T5953] usb 2-1: config 0 descriptor??
[  199.957551][ T5953] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  199.970637][ T6886] bridge0: port 1(syz_tun) entered blocking state
[  199.977267][ T5953] em28xx 2-1:0.132: Video interface 132 found:
[  200.041591][ T6886] bridge0: port 1(syz_tun) entered disabled state
[  200.049605][ T6886] syz_tun: entered allmulticast mode
[  200.093583][ T6886] syz_tun: entered promiscuous mode
[  200.340429][ T6886] bridge0: port 1(syz_tun) entered blocking state
[  200.347285][ T6886] bridge0: port 1(syz_tun) entered forwarding state
[  200.443938][ T5953] em28xx 2-1:0.132: unknown em28xx chip ID (194)
[  201.012797][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.069684][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.321456][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  201.481600][   T24] usb 1-1: Using ep0 maxpacket: 32
[  201.500738][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.512438][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.532926][   T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  201.563960][ T6915] netlink: 'syz.2.219': attribute type 10 has an invalid length.
[  201.576038][ T6915] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  201.596399][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.622550][   T24] usb 1-1: config 0 descriptor??
[  201.765568][ T5953] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  201.789228][ T5953] em28xx 2-1:0.132: board has no eeprom
[  201.863442][ T5953] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  201.876858][ T5953] em28xx 2-1:0.132: analog set to bulk mode.
[  201.887517][ T5871] em28xx 2-1:0.132: Registering V4L2 extension
[  202.059391][   T24] koneplus 0003:1E7D:2D51.0003: collection stack underflow
[  202.078187][   T24] koneplus 0003:1E7D:2D51.0003: item 0 0 0 12 parsing failed
[  202.113803][   T24] koneplus 0003:1E7D:2D51.0003: parse failed
[  202.137348][   T24] koneplus 0003:1E7D:2D51.0003: probe with driver koneplus failed with error -22
[  202.302902][ T5871] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  202.352139][ T5953] usb 2-1: USB disconnect, device number 9
[  202.367265][ T5953] em28xx 2-1:0.132: Disconnecting em28xx
[  202.448463][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.478888][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.537981][ T6919] random: crng reseeded on system resumption
[  203.491789][ T5871] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  203.500033][ T5871] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  203.516260][ T5871] em28xx 2-1:0.132: No AC97 audio processor
[  203.538708][ T5871] usb 2-1: Decoder not found
[  203.552835][ T5871] em28xx 2-1:0.132: failed to create media graph
[  203.707831][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  203.707850][   T30] audit: type=1326 audit(1754883262.580:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  203.737240][ T5871] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  203.749888][   T30] audit: type=1326 audit(1754883262.580:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  203.776002][ T5871] em28xx 2-1:0.132: Remote control support is not available for this card.
[  203.789528][ T5953] em28xx 2-1:0.132: Closing input extension
[  203.806586][   T30] audit: type=1326 audit(1754883262.590:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  203.842444][ T5953] em28xx 2-1:0.132: Freeing device
[  203.862571][   T30] audit: type=1326 audit(1754883262.590:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  203.913654][   T30] audit: type=1326 audit(1754883262.590:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  203.988129][   T30] audit: type=1326 audit(1754883262.590:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  204.071528][   T30] audit: type=1326 audit(1754883262.590:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  204.133145][ T5871] usb 1-1: USB disconnect, device number 7
[  204.151620][ T5953] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  204.231781][   T30] audit: type=1326 audit(1754883262.590:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  204.296018][   T30] audit: type=1326 audit(1754883262.590:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  204.317942][    C0] vkms_vblank_simulate: vblank timer overrun
[  204.632265][ T5953] usb 2-1: config 0 has no interfaces?
[  204.672790][ T5953] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  204.682047][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.690071][ T5953] usb 2-1: Product: syz
[  204.694463][   T30] audit: type=1326 audit(1754883262.590:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  204.716473][    C0] vkms_vblank_simulate: vblank timer overrun
[  204.773539][ T5953] usb 2-1: Manufacturer: syz
[  205.321611][ T5953] usb 2-1: SerialNumber: syz
[  205.331680][ T5953] usb 2-1: config 0 descriptor??
[  205.452977][ T5923] usb 2-1: USB disconnect, device number 10
[  205.754552][ T6948] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  205.761095][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  205.797440][ T6948] vhci_hcd vhci_hcd.0: Device attached
[  205.910913][ T6949] vhci_hcd: connection closed
[  205.911228][   T78] vhci_hcd: stop threads
[  205.921660][   T78] vhci_hcd: release socket
[  205.926466][   T78] vhci_hcd: disconnect device
[  205.944439][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'.
[  206.174608][ T6964] input: syz1 as /devices/virtual/input/input14
[  206.311430][ T5923] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  206.502702][ T6971] capability: warning: `syz.3.233' uses 32-bit capabilities (legacy support in use)
[  206.686515][ T5923] usb 5-1: Using ep0 maxpacket: 32
[  206.797614][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.804402][ T5923] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  206.813820][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.006477][ T5923] usb 5-1: config 0 descriptor??
[  207.222094][ T5953] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  207.343383][ T6972] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  207.407905][ T5953] usb 1-1: unable to get BOS descriptor or descriptor too short
[  207.498959][ T5953] usb 1-1: unable to read config index 0 descriptor/start: -71
[  207.519937][ T5953] usb 1-1: can't read configurations, error -71
[  207.581477][ T5923] corsair-psu 0003:1B1C:1C0D.0004: unknown main item tag 0x0
[  207.641665][ T5923] corsair-psu 0003:1B1C:1C0D.0004: unknown main item tag 0x0
[  207.676851][ T5923] corsair-psu 0003:1B1C:1C0D.0004: unknown main item tag 0x0
[  207.706004][ T6979] FAULT_INJECTION: forcing a failure.
[  207.706004][ T6979] name failslab, interval 1, probability 0, space 0, times 0
[  207.718898][ T5923] corsair-psu 0003:1B1C:1C0D.0004: unknown main item tag 0x0
[  207.729052][ T5923] corsair-psu 0003:1B1C:1C0D.0004: unknown main item tag 0x0
[  207.746043][ T6979] CPU: 1 UID: 0 PID: 6979 Comm: syz.1.235 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  207.746075][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  207.746089][ T6979] Call Trace:
[  207.746098][ T6979]  <TASK>
[  207.746107][ T6979]  dump_stack_lvl+0x189/0x250
[  207.746139][ T6979]  ? __pfx____ratelimit+0x10/0x10
[  207.746168][ T6979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  207.746194][ T6979]  ? __pfx__printk+0x10/0x10
[  207.746227][ T6979]  ? __lock_acquire+0xab9/0xd20
[  207.746269][ T6979]  should_fail_ex+0x414/0x560
[  207.746302][ T6979]  should_failslab+0xa8/0x100
[  207.746337][ T6979]  kmem_cache_alloc_noprof+0x73/0x3c0
[  207.746365][ T6979]  ? skb_clone+0x212/0x3a0
[  207.746393][ T6979]  skb_clone+0x212/0x3a0
[  207.746419][ T6979]  __netlink_deliver_tap+0x404/0x850
[  207.746464][ T6979]  ? netlink_deliver_tap+0x2e/0x1b0
[  207.746497][ T6979]  netlink_deliver_tap+0x19c/0x1b0
[  207.746529][ T6979]  netlink_unicast+0x7fa/0x9e0
[  207.746567][ T6979]  ? __pfx_netlink_unicast+0x10/0x10
[  207.746597][ T6979]  ? netlink_sendmsg+0x642/0xb30
[  207.746635][ T6979]  ? skb_put+0x11b/0x210
[  207.746672][ T6979]  netlink_sendmsg+0x805/0xb30
[  207.746712][ T6979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  207.746745][ T6979]  ? __import_iovec+0x5d4/0x7f0
[  207.746766][ T6979]  ? aa_sock_msg_perm+0xf1/0x1d0
[  207.746801][ T6979]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  207.746825][ T6979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  207.746858][ T6979]  __sock_sendmsg+0x21c/0x270
[  207.746893][ T6979]  ____sys_sendmsg+0x505/0x830
[  207.746923][ T6979]  ? __pfx_____sys_sendmsg+0x10/0x10
[  207.746964][ T6979]  ___sys_sendmsg+0x21f/0x2a0
[  207.746988][ T6979]  ? __pfx____sys_sendmsg+0x10/0x10
[  207.747051][ T6979]  ? __fget_files+0x2a/0x420
[  207.747069][ T6979]  ? __fget_files+0x3a0/0x420
[  207.747100][ T6979]  __sys_sendmsg+0x164/0x220
[  207.747124][ T6979]  ? __pfx___sys_sendmsg+0x10/0x10
[  207.747165][ T6979]  ? lockdep_hardirqs_on+0x9c/0x150
[  207.747198][ T6979]  __do_fast_syscall_32+0xb6/0x2b0
[  207.747231][ T6979]  ? lockdep_hardirqs_on+0x9c/0x150
[  207.747264][ T6979]  do_fast_syscall_32+0x34/0x80
[  207.747295][ T6979]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  207.747322][ T6979] RIP: 0023:0xf7f76539
[  207.747340][ T6979] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  207.747359][ T6979] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  207.747382][ T6979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  207.747397][ T6979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  207.747409][ T6979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  207.747422][ T6979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  207.747435][ T6979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  207.747466][ T6979]  </TASK>
[  208.122939][ T5923] corsair-psu 0003:1B1C:1C0D.0004: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.4-1/input0
[  208.128557][ T6979] wg1: entered promiscuous mode
[  208.190425][ T6979] wg1: entered allmulticast mode
[  208.402877][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.478592][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.490101][ T5923] corsair-psu 0003:1B1C:1C0D.0004: unable to initialize device (-110)
[  208.559222][ T5923] corsair-psu 0003:1B1C:1C0D.0004: probe with driver corsair-psu failed with error -110
[  208.640142][ T5923] usb 5-1: USB disconnect, device number 8
[  208.917839][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  208.917858][   T30] audit: type=1326 audit(1754883267.800:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  208.946063][    C0] vkms_vblank_simulate: vblank timer overrun
[  208.964952][   T30] audit: type=1326 audit(1754883267.840:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  208.989163][ T7006] binder: BINDER_SET_CONTEXT_MGR already set
[  208.995435][ T7006] binder: 6997:7006 ioctl 4018620d 80000040 returned -16
[  209.005035][ T7006] fuse: Unknown parameter '00000000000000000000003ÿÿÿÿÿÿÿÿ'
[  209.015967][ T7006] netlink: 14 bytes leftover after parsing attributes in process `syz.1.240'.
[  209.030853][ T7000] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  209.037411][ T7000] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  209.045257][ T7000] vhci_hcd vhci_hcd.0: Device attached
[  209.067283][   T30] audit: type=1326 audit(1754883267.840:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf704e539 code=0x7ffc0000
[  209.244515][ T7006] hsr_slave_1 (unregistering): left promiscuous mode
[  209.251890][   T30] audit: type=1326 audit(1754883267.840:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  209.275453][ T7004] vhci_hcd: connection closed
[  209.283156][ T5953] vhci_hcd: vhci_device speed not set
[  209.307226][ T7012] binder: 6995:7012 ioctl 40043311 800000c0 returned -22
[  209.367902][ T5953] usb 39-1: new full-speed USB device number 3 using vhci_hcd
[  209.371439][   T78] vhci_hcd: stop threads
[  209.474667][   T78] vhci_hcd: release socket
[  209.484688][   T78] vhci_hcd: disconnect device
[  209.497109][   T30] audit: type=1326 audit(1754883267.840:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  209.604540][   T30] audit: type=1326 audit(1754883267.840:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf704e539 code=0x7ffc0000
[  209.661160][   T30] audit: type=1326 audit(1754883267.840:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704e539 code=0x7ffc0000
[  209.707866][   T30] audit: type=1326 audit(1754883267.840:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704e539 code=0x7ffc0000
[  209.849292][   T30] audit: type=1326 audit(1754883267.930:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf704e539 code=0x7ffc0000
[  210.006120][   T30] audit: type=1326 audit(1754883267.930:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  210.166935][ T7015] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  210.173486][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  210.190082][ T7015] vhci_hcd vhci_hcd.0: Device attached
[  210.224131][ T7022] vhci_hcd: connection closed
[  210.236530][ T1107] vhci_hcd: stop threads
[  210.255241][ T1107] vhci_hcd: release socket
[  210.260219][ T1107] vhci_hcd: disconnect device
[  210.493521][ T7031] input: syz1 as /devices/virtual/input/input15
[  210.665286][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  210.859823][   T24] usb 5-1: Using ep0 maxpacket: 16
[  210.889939][   T24] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  210.919282][   T24] usb 5-1: config 0 has no interface number 0
[  210.942639][   T24] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  210.975048][   T24] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  211.003294][   T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  211.028254][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.037168][   T24] usb 5-1: Product: syz
[  211.050241][   T24] usb 5-1: Manufacturer: syz
[  211.066126][   T24] usb 5-1: SerialNumber: syz
[  211.091116][   T24] usb 5-1: config 0 descriptor??
[  211.105231][ T7029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  211.116466][ T7029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  211.191656][ T5871] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  211.332929][ T7029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  211.358667][ T7029] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  211.371426][ T5871] usb 4-1: Using ep0 maxpacket: 32
[  211.397023][ T5871] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  211.410029][ T5871] usb 4-1: config 0 has no interface number 0
[  211.511663][ T5871] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  211.533711][ T5871] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  211.542945][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.560559][ T5871] usb 4-1: Product: syz
[  211.571156][ T5871] usb 4-1: Manufacturer: syz
[  211.576189][ T5871] usb 4-1: SerialNumber: syz
[  211.727249][ T5871] usb 4-1: config 0 descriptor??
[  211.769676][ T5871] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  211.780638][ T5871] em28xx 4-1:0.132: Video interface 132 found:
[  211.844224][ T7016] Bluetooth: hci0: command 0x0406 tx timeout
[  211.856541][ T5866] Bluetooth: hci2: command 0x0406 tx timeout
[  211.865114][ T7016] Bluetooth: hci3: command 0x0406 tx timeout
[  211.877185][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  211.884189][ T5866] Bluetooth: hci4: command 0x0406 tx timeout
[  212.190943][ T5871] em28xx 4-1:0.132: unknown em28xx chip ID (194)
[  212.810910][   T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  212.834774][   T24] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  212.846907][   T24] asix 5-1:0.251: probe with driver asix failed with error -71
[  212.878207][   T24] usb 5-1: USB disconnect, device number 9
[  213.152016][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.228061][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.729596][ T7063] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  213.736159][ T7063] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  213.866881][ T7063] vhci_hcd vhci_hcd.0: Device attached
[  213.931487][ T5974] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  213.946077][ T5871] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  213.960407][ T7068] vhci_hcd: connection closed
[  213.995756][ T5871] em28xx 4-1:0.132: board has no eeprom
[  213.995768][   T12] vhci_hcd: stop threads
[  213.995788][   T12] vhci_hcd: release socket
[  214.024547][   T30] kauditd_printk_skb: 94 callbacks suppressed
[  214.024562][   T30] audit: type=1326 audit(1754883272.820:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf703e539 code=0x7ffc0000
[  214.099739][   T30] audit: type=1326 audit(1754883272.820:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000
[  214.124305][ T5871] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  214.127349][   T12] vhci_hcd: disconnect device
[  214.141503][ T5974] usb 2-1: Using ep0 maxpacket: 8
[  214.156933][ T5871] em28xx 4-1:0.132: analog set to bulk mode.
[  214.266325][ T5974] usb 2-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config
[  214.289179][    T9] em28xx 4-1:0.132: Registering V4L2 extension
[  214.289746][   T30] audit: type=1326 audit(1754883272.820:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000
[  214.355528][ T5974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 29440, setting to 64
[  214.358265][   T30] audit: type=1326 audit(1754883272.820:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000
[  214.458602][ T5974] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  214.462751][ T5871] usb 4-1: USB disconnect, device number 7
[  214.483440][ T5953] vhci_hcd: vhci_device speed not set
[  214.551879][ T5974] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  214.592758][ T5871] em28xx 4-1:0.132: Disconnecting em28xx
[  214.610928][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.650659][ T5974] usb 2-1: Product: syz
[  214.659444][ T5974] usb 2-1: Manufacturer: syz
[  214.669970][ T5974] usb 2-1: SerialNumber: syz
[  214.698900][   T30] audit: type=1326 audit(1754883272.820:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000
[  214.758539][ T5974] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  214.994840][ T5974] usbtest 2-1:1.0: couldn't get endpoints, -22
[  215.018175][ T5974] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[  215.021444][   T30] audit: type=1326 audit(1754883272.820:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000
[  215.225197][   T30] audit: type=1326 audit(1754883272.820:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000
[  215.542309][   T30] audit: type=1326 audit(1754883272.830:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000
[  215.585684][ T7091] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  215.592255][ T7091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  215.604210][ T7091] vhci_hcd vhci_hcd.0: Device attached
[  215.641610][ T7092] vhci_hcd: connection closed
[  215.661827][   T13] vhci_hcd: stop threads
[  215.670843][   T13] vhci_hcd: release socket
[  215.679462][    T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  215.686652][   T30] audit: type=1326 audit(1754883272.830:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000
[  215.712978][    T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  215.720263][   T13] vhci_hcd: disconnect device
[  215.728221][    T9] em28xx 4-1:0.132: No AC97 audio processor
[  215.743017][   T30] audit: type=1326 audit(1754883272.830:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000
[  215.768690][    T9] usb 4-1: Decoder not found
[  215.777502][    T9] em28xx 4-1:0.132: failed to create media graph
[  215.801543][    T9] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  215.816096][    T9] em28xx 4-1:0.132: Remote control support is not available for this card.
[  215.836053][ T5871] em28xx 4-1:0.132: Closing input extension
[  215.850952][ T5871] em28xx 4-1:0.132: Freeing device
[  216.721680][ T5871] usb 2-1: USB disconnect, device number 11
[  216.814545][ T7105] binder: 7100:7105 ioctl 40043311 800000c0 returned -22
[  217.568292][ T7096] capability: warning: `syz.4.264' uses deprecated v2 capabilities in a way that may be insecure
[  217.654563][ T5950] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  217.901570][ T5950] usb 3-1: Using ep0 maxpacket: 32
[  217.913036][ T5950] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  217.922428][ T5950] usb 3-1: config 0 has no interface number 0
[  217.937470][ T5950] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  218.015733][ T5950] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  218.025702][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.034514][ T5950] usb 3-1: Product: syz
[  218.039074][ T5950] usb 3-1: Manufacturer: syz
[  218.061851][ T5950] usb 3-1: SerialNumber: syz
[  218.184061][ T5950] usb 3-1: config 0 descriptor??
[  218.219730][ T5950] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  218.243023][ T5950] em28xx 3-1:0.132: Video interface 132 found:
[  218.711452][ T7129] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  218.764168][ T5950] em28xx 3-1:0.132: unknown em28xx chip ID (194)
[  219.546278][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.632991][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.954231][   T30] kauditd_printk_skb: 75 callbacks suppressed
[  219.954259][   T30] audit: type=1326 audit(1754883278.840:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  220.026110][   T30] audit: type=1326 audit(1754883278.910:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  220.051606][   T30] audit: type=1326 audit(1754883278.930:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  220.074378][   T30] audit: type=1326 audit(1754883278.930:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  220.096579][ T7136] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  220.103241][ T7136] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  220.121133][ T7136] vhci_hcd vhci_hcd.0: Device attached
[  220.147724][   T30] audit: type=1326 audit(1754883278.930:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  220.269993][   T30] audit: type=1326 audit(1754883278.930:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  220.292289][   T24] vhci_hcd: vhci_device speed not set
[  220.387767][   T24] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[  220.407152][ T5950] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  220.440228][ T7147] input: syz1 as /devices/virtual/input/input16
[  220.470379][ T5950] em28xx 3-1:0.132: board has no eeprom
[  220.502853][   T30] audit: type=1326 audit(1754883278.930:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  220.602446][ T5950] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  220.641426][ T5950] em28xx 3-1:0.132: analog set to bulk mode.
[  220.647796][   T30] audit: type=1326 audit(1754883279.020:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  220.671713][   T44] em28xx 3-1:0.132: Registering V4L2 extension
[  220.869705][   T30] audit: type=1326 audit(1754883279.020:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  220.962477][ T5950] usb 3-1: USB disconnect, device number 13
[  221.008965][ T5950] em28xx 3-1:0.132: Disconnecting em28xx
[  221.134339][   T30] audit: type=1326 audit(1754883279.020:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7134 comm="syz.4.276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  221.291638][ T7162] binder: 7151:7162 ioctl 40043311 800000c0 returned -22
[  221.582107][ T7138] vhci_hcd: connection reset by peer
[  221.588802][   T78] vhci_hcd: stop threads
[  221.596521][   T78] vhci_hcd: release socket
[  221.627908][   T78] vhci_hcd: disconnect device
[  221.909031][   T44] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  221.981914][   T44] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  222.070462][   T44] em28xx 3-1:0.132: No AC97 audio processor
[  222.241011][   T44] usb 3-1: Decoder not found
[  222.283149][   T44] em28xx 3-1:0.132: failed to create media graph
[  222.292972][ T7168] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  222.296514][   T44] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  222.299529][ T7168] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  222.323205][   T44] em28xx 3-1:0.132: Remote control support is not available for this card.
[  222.338645][ T7168] vhci_hcd vhci_hcd.0: Device attached
[  222.345437][ T5950] em28xx 3-1:0.132: Closing input extension
[  222.360039][ T5950] em28xx 3-1:0.132: Freeing device
[  222.481539][ T7173] vhci_hcd: connection closed
[  222.486473][ T1107] vhci_hcd: stop threads
[  222.562588][ T1107] vhci_hcd: release socket
[  222.567316][ T1107] vhci_hcd: disconnect device
[  223.136277][ T7182] binfmt_misc: register: failed to install interpreter file ./file0/../file0
[  223.355142][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'.
[  223.785359][ T7201] input: syz1 as /devices/virtual/input/input17
[  224.061025][ T7200] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  225.112620][   T30] kauditd_printk_skb: 103 callbacks suppressed
[  225.112634][   T30] audit: type=1326 audit(1754883284.000:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  225.172185][ T7210] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  225.178756][ T7210] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  225.197283][   T30] audit: type=1326 audit(1754883284.030:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  225.231683][ T7210] vhci_hcd vhci_hcd.0: Device attached
[  225.251864][ T5923] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  225.327208][   T30] audit: type=1326 audit(1754883284.030:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  225.396693][   T30] audit: type=1326 audit(1754883284.030:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  225.420820][   T30] audit: type=1326 audit(1754883284.030:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  225.453281][   T30] audit: type=1326 audit(1754883284.030:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  225.511465][ T5923] usb 1-1: Using ep0 maxpacket: 32
[  225.544799][   T30] audit: type=1326 audit(1754883284.030:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  225.547376][ T5923] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  225.639290][   T30] audit: type=1326 audit(1754883284.030:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd5539 code=0x7ffc0000
[  225.716250][ T7211] vhci_hcd: connection reset by peer
[  225.728401][   T30] audit: type=1326 audit(1754883284.190:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd5558 code=0x7ffc0000
[  225.728439][   T78] vhci_hcd: stop threads
[  225.756208][   T30] audit: type=1326 audit(1754883284.190:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd5558 code=0x7ffc0000
[  225.849076][ T5923] usb 1-1: config 0 has no interface number 0
[  225.849107][   T78] vhci_hcd: release socket
[  225.870048][ T5923] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  225.900597][   T78] vhci_hcd: disconnect device
[  225.938428][ T5923] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  225.951480][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.961478][   T24] vhci_hcd: vhci_device speed not set
[  225.988289][ T5923] usb 1-1: Product: syz
[  226.023050][ T5923] usb 1-1: Manufacturer: syz
[  226.027720][ T5923] usb 1-1: SerialNumber: syz
[  226.077833][ T5923] usb 1-1: config 0 descriptor??
[  226.163879][ T5923] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  226.179382][ T5923] em28xx 1-1:0.132: Video interface 132 found:
[  226.471485][ T5953] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  226.681357][ T5923] em28xx 1-1:0.132: unknown em28xx chip ID (194)
[  226.692292][ T7232] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  226.698855][ T7232] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  226.737387][ T7232] vhci_hcd vhci_hcd.0: Device attached
[  226.887680][ T7240] vhci_hcd: connection closed
[  226.888063][   T37] vhci_hcd: stop threads
[  226.897226][ T5953] usb 3-1: Using ep0 maxpacket: 8
[  226.924538][ T7226] netlink: 'syz.2.295': attribute type 3 has an invalid length.
[  227.009359][ T7242] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  227.044344][ T5950] vhci_hcd: vhci_device speed not set
[  227.057677][   T37] vhci_hcd: release socket
[  227.083884][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.093790][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.112602][ T5950] usb 39-1: new full-speed USB device number 4 using vhci_hcd
[  227.113719][   T37] vhci_hcd: disconnect device
[  227.776189][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.035717][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.081719][ T5923] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  228.105185][ T5923] em28xx 1-1:0.132: board has no eeprom
[  228.186986][ T5923] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  228.200314][ T5923] em28xx 1-1:0.132: analog set to bulk mode.
[  228.212346][   T24] em28xx 1-1:0.132: Registering V4L2 extension
[  228.384619][   T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  228.461126][   T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  228.490127][   T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  228.647772][   T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[  228.829868][   T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-5)
[  229.276586][   T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x86 (error=-5)
[  229.434400][   T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x94 (error=-5)
[  229.447728][ T5871] usb 1-1: USB disconnect, device number 10
[  229.457417][ T5871] em28xx 1-1:0.132: Disconnecting em28xx
[  229.741076][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'.
[  229.805938][   T24] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  229.831041][   T24] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  229.998043][   T24] em28xx 1-1:0.132: No AC97 audio processor
[  230.100045][   T24] usb 1-1: Decoder not found
[  230.142553][   T24] em28xx 1-1:0.132: failed to create media graph
[  230.167122][   T24] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  230.230148][   T24] em28xx 1-1:0.132: Remote control support is not available for this card.
[  230.230520][ T7270] ==================================================================
[  230.246876][ T7270] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430
[  230.254258][ T7270] Read of size 8 at addr ffff888053fbc740 by task v4l_id/7270
[  230.261715][ T7270] 
[  230.264046][ T7270] CPU: 0 UID: 0 PID: 7270 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  230.264066][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  230.264076][ T7270] Call Trace:
[  230.264083][ T7270]  <TASK>
[  230.264090][ T7270]  dump_stack_lvl+0x189/0x250
[  230.264110][ T7270]  ? rcu_is_watching+0x15/0xb0
[  230.264126][ T7270]  ? __kasan_check_byte+0x12/0x40
[  230.264148][ T7270]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.264165][ T7270]  ? rcu_is_watching+0x15/0xb0
[  230.264179][ T7270]  ? lock_release+0x4b/0x3e0
[  230.264203][ T7270]  ? __virt_addr_valid+0x1c8/0x5c0
[  230.264224][ T7270]  ? __virt_addr_valid+0x4a5/0x5c0
[  230.264244][ T7270]  print_report+0xca/0x240
[  230.264258][ T7270]  ? v4l2_fh_open+0xc7/0x430
[  230.264279][ T7270]  kasan_report+0x118/0x150
[  230.264301][ T7270]  ? v4l2_fh_open+0xc7/0x430
[  230.264325][ T7270]  v4l2_fh_open+0xc7/0x430
[  230.264349][ T7270]  em28xx_v4l2_open+0x157/0x9a0
[  230.264373][ T7270]  v4l2_open+0x20c/0x360
[  230.264397][ T7270]  chrdev_open+0x4cc/0x5e0
[  230.264422][ T7270]  ? __pfx_chrdev_open+0x10/0x10
[  230.264446][ T7270]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  230.264472][ T7270]  ? __pfx_chrdev_open+0x10/0x10
[  230.264494][ T7270]  do_dentry_open+0x953/0x13f0
[  230.264515][ T7270]  vfs_open+0x3b/0x340
[  230.264528][ T7270]  ? path_openat+0x2ecd/0x3830
[  230.264548][ T7270]  path_openat+0x2ee5/0x3830
[  230.264565][ T7270]  ? arch_stack_walk+0xfc/0x150
[  230.264590][ T7270]  ? stack_depot_save_flags+0x40/0x860
[  230.264615][ T7270]  ? __pfx_path_openat+0x10/0x10
[  230.264632][ T7270]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.264655][ T7270]  do_filp_open+0x1fa/0x410
[  230.264672][ T7270]  ? __lock_acquire+0xab9/0xd20
[  230.264694][ T7270]  ? __pfx_do_filp_open+0x10/0x10
[  230.264721][ T7270]  ? _raw_spin_unlock+0x28/0x50
[  230.264739][ T7270]  ? alloc_fd+0x64c/0x6c0
[  230.264765][ T7270]  do_sys_openat2+0x121/0x1c0
[  230.264782][ T7270]  ? __pfx_do_sys_openat2+0x10/0x10
[  230.264798][ T7270]  ? exc_page_fault+0x76/0xf0
[  230.264819][ T7270]  ? do_user_addr_fault+0xc8a/0x1390
[  230.264844][ T7270]  __x64_sys_openat+0x138/0x170
[  230.264862][ T7270]  do_syscall_64+0xfa/0x3b0
[  230.264884][ T7270]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.264903][ T7270]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.264918][ T7270]  ? clear_bhb_loop+0x60/0xb0
[  230.264935][ T7270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.264950][ T7270] RIP: 0033:0x7f3c578a7407
[  230.264964][ T7270] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  230.264978][ T7270] RSP: 002b:00007fff68389300 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  230.264994][ T7270] RAX: ffffffffffffffda RBX: 00007f3c57f59880 RCX: 00007f3c578a7407
[  230.265010][ T7270] RDX: 0000000000000000 RSI: 00007fff68389f1e RDI: ffffffffffffff9c
[  230.265021][ T7270] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  230.265030][ T7270] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  230.265039][ T7270] R13: 00007fff68389550 R14: 00007f3c580c0000 R15: 00005606eef874d8
[  230.265057][ T7270]  </TASK>
[  230.265062][ T7270] 
[  230.574568][ T7270] Allocated by task 24:
[  230.578748][ T7270]  kasan_save_track+0x3e/0x80
[  230.583453][ T7270]  __kasan_kmalloc+0x93/0xb0
[  230.588083][ T7270]  __kmalloc_cache_noprof+0x230/0x3d0
[  230.593495][ T7270]  em28xx_v4l2_init+0x10b/0x2e70
[  230.598463][ T7270]  em28xx_init_extension+0x11d/0x1c0
[  230.603786][ T7270]  process_scheduled_works+0xade/0x17b0
[  230.609355][ T7270]  worker_thread+0x8a0/0xda0
[  230.613973][ T7270]  kthread+0x70e/0x8a0
[  230.618070][ T7270]  ret_from_fork+0x3f9/0x770
[  230.622688][ T7270]  ret_from_fork_asm+0x1a/0x30
[  230.627485][ T7270] 
[  230.629825][ T7270] Freed by task 24:
[  230.633658][ T7270]  kasan_save_track+0x3e/0x80
[  230.638372][ T7270]  kasan_save_free_info+0x46/0x50
[  230.643418][ T7270]  __kasan_slab_free+0x5b/0x80
[  230.648211][ T7270]  kfree+0x18e/0x440
[  230.652131][ T7270]  em28xx_v4l2_init+0x1683/0x2e70
[  230.657266][ T7270]  em28xx_init_extension+0x11d/0x1c0
[  230.662573][ T7270]  process_scheduled_works+0xade/0x17b0
[  230.668135][ T7270]  worker_thread+0x8a0/0xda0
[  230.672749][ T7270]  kthread+0x70e/0x8a0
[  230.676841][ T7270]  ret_from_fork+0x3f9/0x770
[  230.681450][ T7270]  ret_from_fork_asm+0x1a/0x30
[  230.686243][ T7270] 
[  230.688573][ T7270] The buggy address belongs to the object at ffff888053fbc000
[  230.688573][ T7270]  which belongs to the cache kmalloc-8k of size 8192
[  230.702627][ T7270] The buggy address is located 1856 bytes inside of
[  230.702627][ T7270]  freed 8192-byte region [ffff888053fbc000, ffff888053fbe000)
[  230.716607][ T7270] 
[  230.718938][ T7270] The buggy address belongs to the physical page:
[  230.725371][ T7270] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53fb8
[  230.734153][ T7270] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  230.742662][ T7270] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  230.750226][ T7270] page_type: f5(slab)
[  230.754214][ T7270] raw: 00fff00000000040 ffff88801a442280 ffffea00014fec00 0000000000000004
[  230.762806][ T7270] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  230.771396][ T7270] head: 00fff00000000040 ffff88801a442280 ffffea00014fec00 0000000000000004
[  230.780070][ T7270] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  230.788744][ T7270] head: 00fff00000000003 ffffea00014fee01 00000000ffffffff 00000000ffffffff
[  230.797418][ T7270] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  230.806085][ T7270] page dumped because: kasan: bad access detected
[  230.812503][ T7270] page_owner tracks the page as allocated
[  230.818288][ T7270] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 7011, tgid 7010 (syz.4.243), ts 209438632450, free_ts 206712798643
[  230.837927][ T7270]  post_alloc_hook+0x240/0x2a0
[  230.842723][ T7270]  get_page_from_freelist+0x21e4/0x22c0
[  230.848277][ T7270]  __alloc_frozen_pages_noprof+0x181/0x370
[  230.854092][ T7270]  alloc_pages_mpol+0x232/0x4a0
[  230.858959][ T7270]  allocate_slab+0x8a/0x370
[  230.863471][ T7270]  ___slab_alloc+0xbeb/0x1410
[  230.868162][ T7270]  __kvmalloc_node_noprof+0x429/0x5f0
[  230.873545][ T7270]  netlink_alloc_large_skb+0x5d/0x110
[  230.878927][ T7270]  netlink_sendmsg+0x5c6/0xb30
[  230.883716][ T7270]  __sock_sendmsg+0x21c/0x270
[  230.888405][ T7270]  sock_sendmsg+0x158/0x230
[  230.892925][ T7270]  splice_to_socket+0x8ff/0xf10
[  230.897790][ T7270]  direct_splice_actor+0x101/0x160
[  230.902915][ T7270]  splice_direct_to_actor+0x5a5/0xcc0
[  230.908316][ T7270]  do_splice_direct+0x181/0x270
[  230.913186][ T7270]  do_sendfile+0x4da/0x7e0
[  230.917613][ T7270] page last free pid 1107 tgid 1107 stack trace:
[  230.923940][ T7270]  free_unref_folios+0xdbd/0x1520
[  230.928990][ T7270]  folios_put_refs+0x559/0x640
[  230.933767][ T7270]  release_pages+0x4b4/0x520
[  230.938365][ T7270]  io_free_region+0xb4/0x270
[  230.942957][ T7270]  io_ring_ctx_free+0x287/0x4e0
[  230.947818][ T7270]  io_ring_exit_work+0x8c4/0x930
[  230.952763][ T7270]  process_scheduled_works+0xade/0x17b0
[  230.958317][ T7270]  worker_thread+0x8a0/0xda0
[  230.962915][ T7270]  kthread+0x70e/0x8a0
[  230.966997][ T7270]  ret_from_fork+0x3f9/0x770
[  230.971594][ T7270]  ret_from_fork_asm+0x1a/0x30
[  230.976368][ T7270] 
[  230.978721][ T7270] Memory state around the buggy address:
[  230.984352][ T7270]  ffff888053fbc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  230.992414][ T7270]  ffff888053fbc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  231.000489][ T7270] >ffff888053fbc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  231.008550][ T7270]                                            ^
[  231.014735][ T7270]  ffff888053fbc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  231.022883][ T7270]  ffff888053fbc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  231.031029][ T7270] ==================================================================
[  231.049155][ T5871] em28xx 1-1:0.132: Closing input extension
[  231.203634][ T7270] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  231.210889][ T7270] CPU: 0 UID: 0 PID: 7270 Comm: v4l_id Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) 
[  231.220785][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  231.230845][ T7270] Call Trace:
[  231.234127][ T7270]  <TASK>
[  231.237058][ T7270]  dump_stack_lvl+0x99/0x250
[  231.241673][ T7270]  ? __asan_memcpy+0x40/0x70
[  231.246288][ T7270]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.251485][ T7270]  ? __pfx__printk+0x10/0x10
[  231.256102][ T7270]  vpanic+0x281/0x750
[  231.260097][ T7270]  ? preempt_schedule+0xae/0xc0
[  231.264968][ T7270]  ? __pfx_vpanic+0x10/0x10
[  231.269493][ T7270]  ? preempt_schedule_common+0x83/0xd0
[  231.274975][ T7270]  ? preempt_schedule+0xae/0xc0
[  231.279845][ T7270]  ? __pfx_preempt_schedule+0x10/0x10
[  231.285244][ T7270]  panic+0xb9/0xc0
[  231.288977][ T7270]  ? __pfx_panic+0x10/0x10
[  231.293403][ T7270]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  231.299325][ T7270]  ? v4l2_fh_open+0xc7/0x430
[  231.303936][ T7270]  check_panic_on_warn+0x89/0xb0
[  231.308894][ T7270]  ? v4l2_fh_open+0xc7/0x430
[  231.313498][ T7270]  end_report+0x78/0x160
[  231.317754][ T7270]  kasan_report+0x129/0x150
[  231.322273][ T7270]  ? v4l2_fh_open+0xc7/0x430
[  231.326905][ T7270]  v4l2_fh_open+0xc7/0x430
[  231.331353][ T7270]  em28xx_v4l2_open+0x157/0x9a0
[  231.336231][ T7270]  v4l2_open+0x20c/0x360
[  231.340494][ T7270]  chrdev_open+0x4cc/0x5e0
[  231.344934][ T7270]  ? __pfx_chrdev_open+0x10/0x10
[  231.349892][ T7270]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  231.356246][ T7270]  ? __pfx_chrdev_open+0x10/0x10
[  231.361197][ T7270]  do_dentry_open+0x953/0x13f0
[  231.365983][ T7270]  vfs_open+0x3b/0x340
[  231.370074][ T7270]  ? path_openat+0x2ecd/0x3830
[  231.374852][ T7270]  path_openat+0x2ee5/0x3830
[  231.379483][ T7270]  ? arch_stack_walk+0xfc/0x150
[  231.384359][ T7270]  ? stack_depot_save_flags+0x40/0x860
[  231.389838][ T7270]  ? __pfx_path_openat+0x10/0x10
[  231.394798][ T7270]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.400883][ T7270]  do_filp_open+0x1fa/0x410
[  231.405402][ T7270]  ? __lock_acquire+0xab9/0xd20
[  231.410270][ T7270]  ? __pfx_do_filp_open+0x10/0x10
[  231.415332][ T7270]  ? _raw_spin_unlock+0x28/0x50
[  231.420221][ T7270]  ? alloc_fd+0x64c/0x6c0
[  231.424576][ T7270]  do_sys_openat2+0x121/0x1c0
[  231.429270][ T7270]  ? __pfx_do_sys_openat2+0x10/0x10
[  231.434479][ T7270]  ? exc_page_fault+0x76/0xf0
[  231.439175][ T7270]  ? do_user_addr_fault+0xc8a/0x1390
[  231.444478][ T7270]  __x64_sys_openat+0x138/0x170
[  231.449338][ T7270]  do_syscall_64+0xfa/0x3b0
[  231.453861][ T7270]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.459123][ T7270]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.465198][ T7270]  ? clear_bhb_loop+0x60/0xb0
[  231.469895][ T7270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.475888][ T7270] RIP: 0033:0x7f3c578a7407
[  231.480321][ T7270] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  231.500234][ T7270] RSP: 002b:00007fff68389300 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  231.508775][ T7270] RAX: ffffffffffffffda RBX: 00007f3c57f59880 RCX: 00007f3c578a7407
[  231.516793][ T7270] RDX: 0000000000000000 RSI: 00007fff68389f1e RDI: ffffffffffffff9c
[  231.524776][ T7270] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  231.532755][ T7270] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  231.540737][ T7270] R13: 00007fff68389550 R14: 00007f3c580c0000 R15: 00005606eef874d8
[  231.548726][ T7270]  </TASK>
[  231.552084][ T7270] Kernel Offset: disabled
[  231.556411][ T7270] Rebooting in 86400 seconds..