last executing test programs: 39m9.99100142s ago: executing program 32 (id=3963): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 37m56.787737374s ago: executing program 33 (id=4395): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xc}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 37m21.455481397s ago: executing program 34 (id=4580): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xc, 0x4}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xffff8a9f, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}]}}]}, 0x3c}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35m20.291709616s ago: executing program 35 (id=5458): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x4, 0x2}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x23000) read(r0, &(0x7f0000001040)=""/4096, 0x1000) 34m33.50759053s ago: executing program 4 (id=5778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000009ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007240)=[{0x68, 0x102, 0x7ff, "9be985f25a0a68cd0befefe8b898408881b819406432a4a277e964eaa7f1a3fc3fb82c150e02ee143bc59166abebe24a881f181165912c5a79781b4c9e1c9c6a934c7ba3ca09b4c606e05cc3cf6f558e43e2e7b83f4020a6"}], 0x68}}], 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34m33.063826603s ago: executing program 4 (id=5782): r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x559}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000280)="f6b5193c92620af9b3fa1faccb57e074e14ce635198e3153ea38f30d3158296db167d2748fc6236ea19b7a3527962b4f075eeb493b85a78d0206b27a153ce2a1788c167469adcc05", 0x0, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') lseek(r2, 0x9, 0x0) 34m32.089562775s ago: executing program 4 (id=5793): openat$kvm(0xffffffffffffff9c, 0x0, 0x22d81, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, 0x3, 0x8, 0x101, 0x0, 0x0, {0x6, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040080) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 34m31.955417447s ago: executing program 4 (id=5795): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 34m31.636131765s ago: executing program 4 (id=5797): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2b9d}}}, 0x3a) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) 34m31.08852834s ago: executing program 4 (id=5800): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) listen(r0, 0x9) 34m30.51655184s ago: executing program 36 (id=5800): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) listen(r0, 0x9) 31m27.629507652s ago: executing program 0 (id=6604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd={0x73682a85, 0x0, r3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x14}, @fda={0x66646185, 0x6, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 31m26.96893044s ago: executing program 0 (id=6610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 31m26.483201114s ago: executing program 0 (id=6613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfff8}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xb}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0xc828}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20000800) 31m24.606144206s ago: executing program 0 (id=6619): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 31m21.228609402s ago: executing program 9 (id=6637): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 31m21.051200167s ago: executing program 9 (id=6638): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80) 31m20.62667611s ago: executing program 9 (id=6644): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 31m18.090761997s ago: executing program 9 (id=6655): fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x3, 0xffffffff}, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 31m17.559520831s ago: executing program 0 (id=6659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000340)=0xe) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="7807c0b77f99938f6976370e796b078cf90d89d2b4cc39584033a40f4ae0ec28b1bacd43616d392c1c893be5004ab8f323be6908bf914cad0e81529dc82b5a0dfaf90d5bacd288686bc6b708d5499dde2fe25aae19e54f187e025281daa8715f8ab66ef8819ceb42c13d3ce63d9ca16c4e64fe7fd490f721836441b3cf324bb92beb94ebc90b7078fdd2aab61417e9a642e079804bbf6a08ceaa17fcfe9275ebaa0072e75df5eda1c624b7577d8a8c520c195c55", 0xb4}, {0x0}], 0x2) 31m17.107486674s ago: executing program 0 (id=6662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) 31m16.269193601s ago: executing program 9 (id=6664): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x8000) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socket$igmp6(0xa, 0x3, 0x2) 31m15.107132585s ago: executing program 9 (id=6665): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$sysfs(0xffffff9c, &(0x7f0000000400)='/sys/power/image_size', 0x880, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 31m1.879113439s ago: executing program 37 (id=6662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) 30m59.919301298s ago: executing program 38 (id=6665): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$sysfs(0xffffff9c, &(0x7f0000000400)='/sys/power/image_size', 0x880, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 30m9.189232133s ago: executing program 5 (id=6858): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x2e, 0xffff, 0x6, 0x7}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 30m1.281572253s ago: executing program 5 (id=6880): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$mouse(0x0, 0x5f43, 0x12b143) syz_io_uring_setup(0x10b, &(0x7f0000000140), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) shutdown(r0, 0x2) 29m58.002123748s ago: executing program 5 (id=6888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2b, 0x8000, {0x0, 0x0, 0x0, r6, {0xa, 0x7}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xf, 0xc, 0x1, 0x3, 0x5, 0x9, 0x54b, 0x5, [{0x1, 0x8001, 0x0, 0x80000000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x3}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 29m57.364070996s ago: executing program 5 (id=6889): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f00000000c0)) 29m56.909073584s ago: executing program 5 (id=6893): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 29m56.511697452s ago: executing program 5 (id=6897): unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005"], 0x78) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060"], 0xfdef) 29m41.401780049s ago: executing program 39 (id=6897): unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005"], 0x78) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060"], 0xfdef) 29m40.775688383s ago: executing program 8 (id=6936): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0x2af}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x10, 0x3, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x47f6, 0x0, 0x5, 0x0, 0x0) 29m38.638779911s ago: executing program 8 (id=6944): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 29m37.985093361s ago: executing program 8 (id=6946): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="6930d8697c97a65b36159a023034632628cd4474514a1368f1e71dd9b7c48436c2ea07f3bd58a6bbc0f065ddba346122dff6ad81d21cea72e7d951c5c5b21a9f0ba768cd18ddcc7de78e2ba9ac88654a1d99806fb236617ff138f15994a6259de4f933ae62cdc98b2e33514066dd1b9ae1546df8db973d467507b2ecb6a4ece57b2ba7b9df20a0d6817b9fc2ee34e709a8bdef99624ab97472db298354edf3c072c710b9ba9d9a0ae44928172ce6a0d2695a17057255ec6e0b09c684a7f808e38302eb375390ae65d665da7f176a45ed0144a762fc666931f1a4c0ed03fb42e8f7ed4439add1a96b90904330d8e3c91527b405f36e89e44599c5ba4e742f1a281f0dab5fc2dc8855a78e1812ba99ce71fbabef429e87295d941c555c0fdacfa1f3256b70c1fc84b2d0df2c589dac34698d8d108474f84dce58efcbe580b8f348c550c6ca9abe230330d05dffea89475391015c707ddc45a3958a68ea44b5f7d81a84b9064111954da3b5c832df657efd5f0849b32834a053f4a052d7fd7d4db17be80879bf6859bc9605664557eceeb74753416e41b92fb84b572b3c78b6aab6f0bdfcfd7d3a830f12d1b3046e615889ae554db34d35775c6272243d7132426dfc9027ea50d62b91f356c58093933ad75013f9470ec90bfe1d9376002dbbcba9b7e7a1e023f878bfa4d88a9421c035951fd3169c5508ecf28c3a8691605242cc858fb56af44956bb5e677d1d90f0a3b97ad30c74adfc2f22232f7f1fa022c1f0492619cf98381039f26c784ca4d4706f67013bf457fe927aad53c1aa0da90d2730155664d84e41792f3f461840e41135c5b82c87834156b9d6403b7001e5ebb1846a6ad80723387bb92f8d991fa8db1fa65ef90a5054798635c18e7ff7649c41e867fb070bcfef61445a7d0c0c5fa02da82969db96aada4095e8cb2bf7728bf95eb020594c0d3617467701d8c4dd01c750712dae33dfba7548032b48ab93ff3c82e104b08116c1a68fb3b28a1b8ccc23c2698803828d1da099a5437b248078b502f7ccd867af9f8c79bc55643414c57466a781032bdd6dea9acd5cde821480a85c308dd03af012d03cb552b3770124ac279c9427c0e1b761c525eb251598d326bc650b5f055b610688fdaf9789e60fc234f1881536016901ddb2597b47e7bc675cac3ae8c50169230af084998dd6be35dc3609c5edbc93da3fe98ebb475a0d30437017ef640b96fd48ef52f509cf57e65c73ac09603081cd980e8b9d73ef4acf4511cfbb07d5074a6561192c2b2bce29cef8ec70ff599d4751103ffec500a8657d6ef30499b9ad0b10f3e7b6b53fc61dfbbb209e3691b1cba1af62468ebcb61c4c0a776fbfc92c5d2a10350bad29915e44cc952de4226ab646e28ab008683e470ccae3486bdb4ab4a6ffea9a671237bf0943660d929667ebe4a5f9cd1bdecbb53262a4fe3eaeed7fbb4ed1ca40da9e2efdaae4da05b14c754360f3c3e5b96f203c4f87e5feeb73abb88aa57fb850702339b5ac192810597e99fefedd52558fc6aad5d2ac0eaec00dda68467a3c7c7cdc3b724990f1b2f4f65e9181e5ebd0a343c491a1fe0e4378f241bd071fabeb1487044fe5c5eb942eb92dc80ff317cabfa10c75434441716a7339115a3071e45eb2d0800627b99a4fb59e260b26d53953ff3f255dc4bf40d3cc8797287fe3d6356d1eaaf67745ef73844b4c64e89ca0f04a87659427c26f0d6bfa2f4881ef69dc5c7b4515c7c4394f621fb98f2c6f496b7ac640d3a1fcd483ae10c4ee9710a896e67175a679f2461be09c722be20df30c9670299db21bc8aeae63e57ebeab1ca61c265f10d8def8243583e6967c5e40162110025a65f0c658db29f5eb0e50b2dd318ac55209721c8c0d51fb05c9ff3106731b058e14c8c89dd33bef6333f218c9f66e2bd9fd897b985bda3747c88fbd24d90cc8428380048330abb044f9e7107ccae059b961e0c6a53d182de21cb77e12d1ed0faeeb214c9ab6b7dd5f99d9278df393958a7a46aa734726938ca2172e4cba5f0a68cc2823bd5aa622c099fd936e303549ea4a80521b12b616526fdaf00779de369a5a83dcedbb739d426eb7f3864cbe346ff458433ca67a86ccbc703939216e4a001d9ccc84b4c438e5bb583e733973b3b0d2fa9a1bd4be4fc2b497b80e1455657a3f339f512cd38428e022d311075190c8d443cd94505dc52b0c7b6138f2279dcfd0a20a564e45b8f144a6f09e5beda5303f885a7d9fbdb4a6f3778ff9e9fc6e0dbee5bdd0330c3c956ddc36f10fb6811320ab30b4817934bd7e11bdcefb58132a17ac76fb54aaab0188a32eec2284f1a24835cc79c6909f742ab35631b919673eb84d53715dc8bdac9b6d28a24b869929d7fb7bcb34b5b5bab1ee69ee38c86541982806b84db06d0dc81e940a872ca89a5a7e1c191bec2808ac6aa0d733c1d647f88df8455ccfbd35fd5bef780bc8c4fb86efb1951b8382915939779493c20279b165c2b775b7d5b63ea0ceec09a17472bab7ec8122dbcf5ebaf4ac3db25fd0776f13cd67a36ce6cfa58acd262cbf4bdcbf2fa7239c79386dc580121e986de5b78a4351388e7fa6461a7657bdb4383c659409f16c7508d5e5618d116a659bc0462c130b088d63ac4bb69c0d756b5fa2e80004019d6ca5371ea361e8cc613954332ee959de1766f8f3689ab8daf45b69ec0810d0ab7e3b402860c8b94ffc25de57920f8da7a3bc7badc4dc9088bc7f6c71b1d4d960c258cd87abcd739bbd5115aef29f994f062318e8accab85f5c64a263ca14c1629284f7369d86436d174f6f2b1a5e014dc5cc3021efbce66bb88d7b3827be33365d8ab2daed7c6dc0651b77af1dd289684df8e21b6a81c66a27294c7cbf5cd90add094477cd6dec894b140a409add754727459c695c4e63dc73fb491af8c22edf1dbabe56a9969146056259a65f9c1c62973abba625b8065fdcccddda10cd7ff7b2144c63b754af792cfe395902608da630aeed913e9f014bdd184c9341c62fe0c7dd2660e26eab22cbd0d9e21ba0552e71f1ce17407672f01ef1012877fb7da93cdc92056ecad3ab01922b3a8e13661ef1372d84ce5167153ca2551edfed8c2c6557626f2554d67a852a8d2b566fa40c6dfeee3b63e2be83523f64365922531ac93ae196fa6a98b3b8708eb90f410f150c3e8680d9cb7265f108f2b860e7d8c7dd64405bd545eea08520cb33857b3090fe1b364e47151eb847ff444fab989dbe1e03b29409d46fff338d6ae5a4c61426ba4b170d96617774b6f3ae64beb7f791334f4d48d3fd26969d4a4342a8f1088bafdbefbcb1990e9d0fc95edf96113137e619cb15df9c4d9a21de468e40d284f5af88cb8b038540b91ba070f311efe1b081000da886eaddb3aaad90bca70e2ed34dadacccebb095d8e116ac9911c2c4f2a7a95e939853950b5e04a98b6bc9340b28e323ad7cc58888e33ef8bf438080dc26c71c8e12e0bbccb1fde98231ebf61a9011a2190b33c941d927128d30570c11b2a51d919d4caf1fbca673931fb2016b81c12e4a31b3458d0f215c97c9dfec8d514d66e748931b6e8bd06085c7ee8e7b845912053766ceaa20f1917d075fdcf2e9cca3e21bbbb1dc0a5cad36ee44e7a4e136ec5e5fc233cb63d5f035f96628a7abb281b493d9cf8fc4251fc9c3c004bd5d64713c05ba68de2318826b01db27661561b6dd381e5973b887797bb21f7a7f30c9343696a60775c36e5b05eb19dc62fef3ff99f8f00e8ccd25e00bd1863609f51e6a69f7e9c650aff3c8897ed6ee4c8d0b0356627cf69a3a3abd0c352e255b2c6250834c9fb272d83bdeb959ebc1e7207546da012b3eb4861c98fa1fd126b18a14585a2e142b98e5fe902a4961ccbdf7b7728588b7559511b30a2d2e86857d0281bd5e08103dcd11becfeb8e9c5b3e4813c79c14055e46203a5cebaa30fedec57ed23538afa85711e0ef3f72541af4d3e6c938590ee053d4ad1de8ecac6c49f1d70707c4d93e031b6f930658425fb0dfc3cde7c9f775eb3cf28fff76097c35e532335a80053fc198b6de7fb09b87e2219ec04782f35bedffef4c08e6316b25824caffef257d7a072fcd6251450dd9882e25e3e0a05a63b022e53ffcbff4097ad150095fb7065c47f7b8a9fc2c8186a5942663e661d80649af235707a87619d277dc8b5ef70190663991a531d67660c74f778301f9939d4511eca1f8bdee0706fec004a6042e45954f710a9e90081a8b297bcde440bc8d54676ba38397734196aa3835d361d8f36acbe4c1bf0f2782d27611555b19d1b9bd1ba493ab4c3a884216bc143629d8d418518f9a06b2b0d25a5e10ce515f47c5a54fa63212a686eab067600d56b234fba7be63b4d40f8be1fef0e69a55373f8faaa8f02b2b85aaee0720d0dff9a0e84850d998959df6397cd824c1a7bed9b73ca92f83ba66e3f170c3b34a3f7ad509d7bdf916d5367c22454f2252ecbb9a334e2fd2032c569fbf4bfcf6f41bd003ed10911f2644d66f4a6ec4a2eca936fcaff29ea9f454d5fc68575cfcb7e6cf8cffca37d1c5d374ca1ed77ffde5a01d349e4d18ddd15cc7397e696d6a92e0ed7260efd42ac23b5396840df636f85f83b6fcfb27f3503e130200a77c61c01b3c80a5b77c90eff390e27c3c1256efae5da2cb7ca7169cb824a164da49078e461f4640ff4d7b074a32676aac9f96746c36fa151145e1d13187191dc9739fe3c3af9418d6258e525ac82f626666278fc888cc0b8616d851469d3c676c1a0ac6c71b5914009b9797a914f1498f6f439a92205f855a4bf69843489dd425c4b5482522b96f385ab8138aefa8833eaf2056cfd068da37229fc7a5900d30c152cf92cf2a4f7a7505190268b08c9acd3839d560ab5762a0dfca0f2db56e2298c1f7d894b98ae8c98dfc81ef6e8e7a8a7138f12005f54bcfb93c9244468b7c76fc3afdc4c59abea57ce6302291c5130697834e838147d62112c96acefb57900eef463048068a0344f2e09d4c5a9488b63b92c5a67d1486ef56aff7f79c06fc5eb3eed23ea56f4331a638bbde8e9b022c29c08a803fb2e386012a1cf008106e619b5fab2a60653fba60c6ec7fd19f33a8e2ff6dc8046c117d3d8131d5f23b70f900ae5d632a51bf76420b9a1055c4bf49e22b5011e0fd12c12c403b42f54f799ba61b57c0bc0933adabdb909f0609602e73e583a9747a8f0477f0ea3621669343960f2dad82056471f596449ba52bef2fb24959f80659df251df5443dfe6b6a91fe0919cf0193afb37a786f9d13eeeafacd839f876e70c791e911b6e8c35fff3e4dbb787bf50fdcf9c8d001d8c078c0cb994f17a95f08d8de87700286c251011ffd8baf2e976e587730390e412e35b664a1dbff7744b68c91eee7356348c2fbe5a2e38985337cdeceb12c836cb1bade7c4c999eff6333bc5c0f779573080d046f96cca17802a0a2b7b0d36560868c2e54a883bf3ed16d5067adb0f4ff81d246b00ab30aaa58ba139e0e2d84c2b86e77934ff04cbb05f5ce568ceeb3ceb1baaf084160617f6821fc503c238a6daa5ffc19321a878ebad11a898f8d0d27b823c2e3ce57a9333d9d40a492da5ba26593ccf97b25c7b6698d9b8b4a46dce1c81c98093a790075411a6a7abca59e592f37eac9d588ab3a2e86edfbba12bbb83af804afb015a8c240dda9124a0c9c9691569eae6e948b48d4cf470f898075a1d5f13a239b3c1e31e8d98ddde799d8c3035d1e3949c2ec5a760a0f38314f66b3bf40de785c7a60a8f22d701a9e70d6a3f1b35d6d1e94038f8a7f4c97fb5370c9f83e31daa73a6e648a21e929324faa27482b039bf2d55032bfd8d1b5712b9250c8269b0daae8dbb5c8d4a243484b0d5f941a987242d06987bedfa97a3e062510c9b4cd3b82222ef22a4927749f38bd4259c3e6c8d8cbf0a1224bb80d8a5923827e18b18778dd44e7e3fa8b8b407c0cdec6fbccb5e33c2fbd9f5f0a7e35c4a04dedd69cdda7d888f2082903dd86e45732a687568a248a9af16253db86bae7e893a8a8c380e53d596733523499c74ab1c1b1ab26888533bf2d3ccfe221033442ce0d34aa34bd9c420d4e39413c95de2c2acdc520fc6ce524149bc80e9bd32bc7d72e7def1c425391fdee15cd89a090ec7aa29a4b9c0bfc01df19b9bf692c4569a9f3e0e19b288710089f677905780d2c3132c909cb29bee3bd6d62f060a944d66c78493b01279203e7a1185001ee8f6cb0967e8b3ce9aa50106c5576912a7dae46229ff03b65cc659cf49dae6aa6b162d6dba82119c511119225d6a536fc24bbc55f6e237d957a43f351c50378d0efc9ba1eac7d6a1b280c16454452294c457b8eb10dabc768edd67877b2ed08abba8768bc6579eccde4839ee7d68f80cc4aa318fd458f97ea9609f3135ea417aa455592e394b1f5ab6ccc14385ddbb416d47279e5748ee4e02e76ecba7d7474fb6ed6a851da3e156a7542bb9ad9b48b8362bff43755ce5b657d5a752ef632bb416184e70f1937c494ed9db084cc1177ac6c491772b739fba1b4be52acc2cc0975c8dc0b00929f503fb3cfe4c7e6670295edaef2327cec950737f0cc96eb30e7fa8217d9b9968274c413ec79e1b050814145432bf164f6e7b75a43424dec600502011190097ffd1edf795be01c4135a9be178b6b050d82d8542375abb40f0fe776965bf3f0630a2652e5bcf3dc237a84a4634081d0a9ba1842e6ddd4faf787aa6449a50fa9498ffe97c2759558112d1b0ec0db512d7990fc0efce6bde80f4b1ec9799d0cdcd41e6863eb473c3edb5c2e70ddc7d3aba52c2ad2e054b01eb3d92c2023b33975b23a72211fec063bb4fbaa49abacc47efea7d5ede3675ad49eb74b7fdaa5667b9ddff2e6007eccc90a7cfda32a053d9fd2aa1d01fe54c112b955d8c26e3e0ac2994fcf3f50d1fb129ee3df3db886d93faad74cec81c11e2e0922fcd0b2187cb75369598a3b5c8c8495870403b2593647a8a2d4d86601da9fbf49f1222dcfe5b64d0102d3c9296d0c0d459c5a7bab1580fb0b25a5ef71eb579546bda6ea58be241ec8ac9737e0e30ea47fa93c4cf2d44d2b6421c856dd5e1c2c3569040113d7006be693b293074a2a6188b228129fc79f9984f5bafd6f7a32f68bd3dc7197a7094e93561d208f0c948d364743854efc6af051a3e2a7eea8f132442d1e3a87e670190f3752ef0699f470ed15719ba274371179935ff79853b928cda754d1045929f8db75ca71825f21642f738622e392bc0b35ca98eff3821b7d122732f8ccf8d251d84589ce028d2efe7d7cbd34e8137f518e2feda64d9c788713df3e1450e8a36dc031c22f3d5bf7d294a66f90b64fd285aeded6e4a07b82c740c87598a9684f8f6d47b266169696b126e66d7b4532ace038a2b7921bd62fc806bb552676abb8204b4ad975d449d1be97ec9b55dc8b2b10a3dfe4880487de3f8c6a3b4426ac6adfa03845b4d0cf1e6cbd86be473d154bf7439dee05d555268a769ab339b299379cb8546f16ed8bbb789049eb57dcaca48c26e78982cc331ba474bcdd9f893f5f6526b4999fabcadc7bc6e8805ecc68902a31522e20b3f1817c1b516f16ab5bcdc7101165d59ce074e633dc68202221d2bae4ea62a13f6a5e7c82e8fd232fc076ca7399b5d01c325d67ab82f50acc789dfe8cab35de7e2131081a9d90606e5dc5a9c3af3fc9bc895174215d8aeae8dfe75b33be25298a11eabf2e0481050731edb27894df45a17985ffb4f3f27ad6393af9ac6f461737394ffc89f9549b7607dbecbf7803899d2e6513a74473ec0fb6569f6d27cc9a83f242f4ab78aea3c293ee846a2e0b3114991d5543902c848a7e451da4789e478f707e585defb47e3ce3525cfa17571772e1526c16c1065e5f438442c25e43e1023511022647244415f0bb7d28be2f7a75dae78b5da0f9d063c66ac396ef0b66fdb7e701e4caf9a435ccc476cdf3e5356ade531a3e33640ede4af542bcdb1ec54fcfe6f0ba105e0fd72b707611020ae1adc3f794b3c66e3c1f9ab0c87e5641a4891d74a194b9cd8ce14c81ad35df9a3c7862921e2d8c3942d4a57f4f4d13a6d82d75a21f1b862e8f4402c8b2c0fe2fb788ab761a22a4377497b34d137d0184d2d7bce69826e7ecbf63a89b133f263d58945627bd79472e3cbef5595a0c9d2e512605b578f2e558d4c4b31416c12f5709f68bd4e7ab1b0954f395299d634102bbbc97506e2dc938c5ecd9fdb26566eeb4de1621954ecb5af9b0d9d39b0fb1b972fd92b959277bf78d0a1763df9d9bc4182ad3f3b8eeb19d00cf41016f4d0d4623f2541a73f588f5108cde960b0bdc93ec260c14a498931226c981b41804bc09ca8a9168d9a4e17d269815e7ada71be1fc410b38874aa5782abc7ba7976daa94d724c9687c419165e77b7effe77d07e5fd6f55993b8a151889e57166c2ff63f04e3e09eead6f8c92e49e926c8f60a2f933c8926be5fb83b650b126cdbd9d239f6f11d717f8f32fd757350e7db0bd32e191052524922b2bf2b92801a717be7504ab79d55e425b09a79c8a84af1cf94c66dada7789e6d67dc041b4ac0e57c4e658d11be13af2fc3c200086e147a2223296a4253297155210440f0f17c3aa21ab7e15fe2e12bb9e9356d1018cc68313034b469152b650adab57f73350a6c0f76a36580a7dd8af218d656fa4bdd57b9d584e5acd1fa95e14120d7f9ed1fc3a83aa24135ca45472844d115f0a1bdebe2f6bc37cabdd0d7f9aab4fdc6a2c58aa0beb0ce431620d5ede6ef98e2b77e8d0558d250aa20c54c62d4b61d9bdd63286c6887ee3a556677e0673c94e46b9f834c6e4996b1c91141cd0d39b712f93e5195a7f7838f3af8325f649938d8c319ceebfa8154d23197bcbcf616be6f1f5d6fc070ed76abe89d6b94bf8a8d3f5b9bedce758b17d1e0be38bce845c8c3209d3fc30901494408c96956d050d14548d6edf55f4add18c91fb6da723a0c7c3c3f4c4b3a7056e611bdabdfd4edfb7a79a2b02c05ef4027c15db8bf2bcd015c66ae6d3203164615c56dba94606702caa577777e05e642ce3df5573ba3ae268f4ce4b38cc9013faf21d7dd7174ce7ea498c9451a1626f02398e49a33def46d228edb6de6fe8dec11f553634fb923849e3cdfbe645cff327b8251afc107b7fb8cf3cd735ed9bb1275ecc804a4f126bfeb853e13e636a74a4efc9faf01118aa82d00ac20ce0c0af140c756ab90e5dfa238707318c353c7bc9342c36ddcb6e74400933c8fa99448f3a169b95cd6d2558d755e1dd53f3fcfc46b057c550de64829e556c8cae40e796ef76fcb953086168fb2eae89349f29d3dd26ac6282292355be3b123b0c02e553bfb8948afe8d7e8ae5d63184b20795481a9385be05e9eff807b94eb1e977d50a7dd7da582695aa496a9a7587d01f970c3ed8d63db217164824d8b8bf4c5e493f801e1ed241afda4b695a4c606d6b5344493d9922dff76b4be7021d26b60d1f785d205c39d83694b0585eff60c9e1bb2f7023c5b5d3d043897baa9a9ef3507c280d9580d43c7985db146694b8649e2bf67e37081a945c4c81fad0a48e64d8877dd149443c8f4d2267b4aeaec8f168b44d5af109f505644e2a545fefb13d673210bd2b418b054cb4fc9fb7f2041e87be5f31466b51b308deff16bd9878a3ec72d0a1ad27c5cbd497b2c9585d914392da52b3708b198a3693d2988f03c7d3a41762c78cb9c268dbbcb0d1efc800fab4183286d924604a5fe9657cebad2d8bb0ef0006a46a4ef9fe92c3fdc1682b993239421879cb5626bae2368b646e61c870342b5cbb7f7baab7142a9ca2378805310c1abc12098c796550a20f3d5f01141470c1b5550857202ec712e3813d1ff7150111f4730bd83c8516aa86b345c280fb461c7bc6ff6f0bea507033d312027f51b4a90becfb048e676bfecfe2b1cd7504a226e89bb4df31d13436db7765062fc74789b75f82e77a6e83f49092558d38da47755ca0373ee0979c880e224bd5f70d6a69d8e2463d9b70bc7dbbdc9f27e1ba38d5adfdd6a5a0c564cda76a9ed6dc0e5117b06b9817d6d47f2a82d41a5a821431fe5f38eb3417d820c769afc09ffd001fd0a6f3c3879dc74ffcba15b8b29a4f435249226ee1cd7fb8c0bb6ec9012178bd25c05e69cb1d6e7121295a4e166c80d918b915232e6e8823ed6529eda300f2541142092df194de0cc255beed438afa94cbd350acf809e7f0467830b20108b95c9b653b030e311026cecc32332697cc2f8ef9cecb227de6de7144fc4b25e2180784f55204b17612228548fc825e60c88144c72abf3cb468a2d5491c431f38d858fb5471ce84c69d1d2b38e8ae2b134f4f94aa03996b2e0f1edc538ff32f7ee409b79922660b0f3421083298b14f26733577ff59b672b7214bd0e4508503c61da0b70cb6186b01ed575f9e5bf8f3bf538c2260f4a82755094c33c931ad0bb346518cff593de0985602852749610e073f20dd0be87ec8c452c3dfb4ac19d73a489e74a8a48411faac7ecf7e53d76ced94495ec2e814259fb5114a7986fb81a936d38c99443ebd55026acc6c78e1b14728551bae0bdb86cd518eeeb22dbfd7f7a32d2b94f7b0f757f34d6d22156e4dc1e7b9533fcf7a0d0cc3e41480345ddc68c11e47f8c514f1ed601d69e5b36e03962643544064ddbf689a3cbf378074879f6cd33d56c0a728a2050ab202981d6723b99a0e505cd8fea39da000bc7608a53024614407a5ebd5e034b9a59fa952841ab4f0758e988161e56fb454db449b3090eb1c4154ea6e34ea13101bb3a62dfa1878448952b1955a3c462432d7035228caf6ed4381e3ec1295e90decc62ebed5e60acbae3d26982e7834ee00a7632f581b6198f9bf42161a4980d08fac53d40b81731e4c727f5a24e75f6a262a1d2ab37b3ebc09ca6b0ffb0a1edf942e93d17d95eb3532b57488469575d9d47c2d08eec166f8fc1f6183795e1d5e48f46ae05a173af5765e03e98e6710b408cbeb169fb67f1d79a1999a977b7df51d7ede5aca5d31e9d75d2be3838a014d8283c3566ef5ea37955d6e66628d755c927e14d40f723428a69e03c8b100924b72e2c49926208044ff49536b0a1eca6c7c42ff9c90716fa35b02d2d869bcceb60e91dacf34ac1249f5d7934a078417e4fd416da2fbf9122fd37c042712ad9ce8592806b556d26163990b11466bf759615d2b852e75681a8b87571b5f0a21a4b5617cb94e2dc9efb264c0a331a752994d10a958b245cb40d9985365c4dd3b9551c4d03157aa29222a2af29ada6c123eaf08722310da16f7611cfe729255044642a8c5cb9f94c3f778248bf35520ac980af12ddd3b001df23404e49e3a57cc11fd12e51e422a92b5bf9e2ad225d42ad5d0325ca35804340fdde061c5bf2a4c8cc86e946a60040130ce831b9be93885f4ddb9fb7584ad875b05d59128f533c40c541ec03dfccba2af6fbdae4efb10a45e0f7d9851126b1dd9d374cec36067cdf2eefcb0a0cbf5619fa7ac2027d4b5c9da389bc1ffee655aef769a5aa542b291c0d71c8dc5e54268dc5f86a4133cc917a84efaf1456de9106c6fb3f5d41ff9f9a76a1dd3243a5e99c95e933d32e13f3eeb5a550", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0xffffffffffffff80, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) r4 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x8}) 29m37.499082499s ago: executing program 8 (id=6949): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 29m36.329106375s ago: executing program 8 (id=6953): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_dev$vim2m(&(0x7f0000000000), 0x83, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$sndseq(r0, 0x0, 0x3a99c56f) epoll_create1(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x80, 0xd, 0xfffffffe, 0x4, 0x402, 0x807fe}) 29m35.613207383s ago: executing program 8 (id=6956): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1) 29m34.360635256s ago: executing program 40 (id=6956): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1) 19.613341056s ago: executing program 7 (id=10545): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xc}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) creat(0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r9 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0xcd0, 0x0, 0x0, 0x118, 0x2e8, 0x200, 0xc38, 0xc38, 0xc38, 0xc38, 0xc38, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x3, 0x6, 0x7, 0x2, 0x0, 0x7], 0x0, 0x4}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x1, 0x4, 0x1, 0x4, 0x4], 0x3}}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3e}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'vlan0\x00', 'vlan1\x00', {}, {0xff}, 0x32, 0x2, 0x6a}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x5}}}, {{@uncond, 0x0, 0x850, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x1}, {0x9, 0x3}, {0x6}, {0x2, 0x1}, {}, {0xd, 0x2}, {0x2}, {0x0, 0x1}, {0xc477, 0x3}, {0x5, 0x1}, {0x5, 0x1}], [{0x10, 0x7}, {0x7, 0x4b2}, {0xb405, 0x80a}, {0xced, 0x200}, {0x3, 0x4}, {0x5}, {0x800, 0x6}, {0x4, 0x4}, {0x10001, 0x6bca}, {0x5, 0x101}, {0xfffff800, 0x6}], 0x5}, {[{0xffffffff}, {0x5, 0x3}, {0xffffffff, 0x1}, {0x9, 0x3}, {0x2}, {0x0, 0x1}, {0x5343}, {0x4, 0x2}, {0x9, 0x3}, {0x8001}, {0x8}], [{0xe, 0xd0a}, {0x3, 0xbc}, {0xf, 0x3}, {0x6, 0x1ff}, {0x9, 0x4}, {0x0, 0xc}, {0xb1, 0x80000001}, {0xc, 0x80000000}, {0x3, 0x2d65}, {0x3ff, 0x5}, {0x4, 0x1ff}], 0x0, 0x6}, {[{0xbf, 0x3}, {0x8000, 0x3}, {0x7, 0x1}, {0x8, 0x2}, {0xef, 0x3}, {0x9, 0x3}, {0xdc, 0x1}, {0x0, 0x2}, {0x8, 0x3}, {0x4, 0x3}, {0x3, 0x3}], [{0x80000000, 0x6}, {0xda5, 0x15c}, {0x7, 0x200}, {0x2, 0x8000}, {0xffffffff, 0x7}, {0xfffffff1, 0x1e}, {0x9, 0x2}, {0x7, 0x1000}, {0xa0000000, 0x1}, {0xc15, 0x9}, {0x8, 0x101}], 0x9, 0x9}, {[{0x7ff, 0x3}, {0x6748ba60}, {0x7}, {0x7}, {}, {0x80000001, 0x3}, {0x8, 0x1}, {0x5, 0x1}, {0x9}, {0x8, 0x2}, {0x0, 0x1}], [{0xd6a0, 0x7}, {0xcf0, 0x7}, {0x4, 0xfffffa7a}, {0x3ff, 0x1}, {0x4, 0x4}, {0x5, 0x101}, {0x4, 0x8}, {0x3585}, {0x119f7cbc, 0x7}, {0x46, 0x9}, {0x2, 0x43}], 0x0, 0x5}, {[{0x1}, {0x5, 0x3}, {0x3}, {0x8001, 0x2}, {0x6e}, {0xffffc2b6}, {0x5a, 0x3}, {0x5470932b, 0x3}, {0x40, 0x2}, {0x2}, {0x3f1a1ae4}], [{0xb, 0x3}, {0x9, 0x1}, {0x6, 0x2}, {0x2, 0x7431c0b3}, {0xbe, 0x9}, {0x6}, {0x3, 0x3}, {0xa, 0x4}, {0x1, 0x6}, {0x5, 0x3ff}, {0xee, 0x7ff}], 0x6, 0x6}, {[{0x8000}, {0x4b3, 0x1}, {}, {0xf6, 0x1}, {0x3}, {0x23a}, {0xfc}, {0x8649, 0x1}, {0x7, 0x1}, {0x8, 0x2}, {0x7ff}], [{0x7, 0x2}, {0xfffeffff, 0x3}, {0xec, 0x7}, {0xb73, 0x8848}, {0x2, 0xba}, {0xfffffff2, 0x1}, {0x1ff, 0x7f}, {0x9, 0x4}, {0x5, 0x101}, {0x1a05, 0x2}, {0x0, 0xfdfa}], 0x6, 0x6}, {[{0x7, 0x2}, {0x4}, {0x7}, {0xfffffffd, 0x3}, {0x2}, {0x18a6, 0x3}, {0x4, 0x3}, {0x0, 0x2}, {0xfffffff8}, {0xf, 0x1}, {0x7ff, 0x2}], [{0x40, 0x7}, {0x401, 0x3}, {0x8000, 0x1ff}, {0xc}, {0x9, 0x8}, {0x5, 0x4}, {0x3, 0x4}, {0x80, 0x6}, {0x100, 0x9}, {0x5, 0x8}, {0x400}], 0x9, 0x6}, {[{0xfcf, 0x3}, {0xfff}, {0x8, 0x3}, {0xf9, 0x3}, {0x2, 0x2}, {0x3800000}, {0x9a4, 0x3}, {0x80000}, {0x3}, {0x9}, {0xc, 0x3}], [{0x4, 0x6}, {0x1, 0x2}, {0xb0, 0x6}, {0xfff, 0xa}, {0x4, 0x7fffffff}, {0xfffffff9, 0x2}, {0x9, 0xaf}, {0xc, 0x5}, {0xffff, 0x88d}, {0x800, 0xfffffffb}, {0x400, 0x9}], 0xb, 0x8}, {[{0x100}, {0xfffffffe}, {0x8, 0x3}, {0x400}, {0x80000001, 0x1}, {0xa3d}, {0x6b, 0x1}, {0x1, 0x2}, {0x9, 0x1}, {0x101, 0x2}, {0xa, 0x1}], [{0xfffffff8, 0x61d0}, {0x3, 0x101}, {0x3, 0x1}, {0x6, 0x4}, {0x3, 0x7}, {0x5, 0x580000}, {0x5, 0x2}, {0xe, 0x5}, {0xac5, 0x43}, {0x9, 0xfffffff8}, {0x3, 0x1}], 0xb, 0x5}, {[{0x4}, {0x6}, {0x5}, {0x4}, {0x3, 0x1}, {0x2}, {0x3, 0x2}, {0x2}, {0x401}, {0x3, 0x3}, {0x9, 0x3}], [{0x8, 0x8}, {0x7, 0x1}, {0xf, 0x7}, {0x9, 0x34e0}, {0xd796, 0x2}, {0x2, 0x5}, {0x1, 0x8000}, {0x4, 0x94f}, {0x3, 0x7ff}, {0x6, 0x3}, {0x1, 0x7}], 0x1, 0x3}, {[{0x5, 0x2}, {0x0, 0x1}, {0x9}, {0xff}, {0x7, 0x2}, {0x2, 0x3}, {0x8591, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0xa, 0x1}, {0x4, 0x2}], [{0x861, 0x10}, {0x9, 0xffff}, {0x0, 0x9}, {0x7, 0x5}, {0xfffffff9, 0x9}, {0x6, 0x1}, {0x1ff, 0x8}, {0x6, 0x5}, {0x6, 0x7}, {0x6, 0x74}, {0x200, 0x8}], 0x4, 0x3}], 0xb}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x8, 0x0, [0x17, 0x3b, 0x1d, 0x39, 0x32, 0x29, 0x2a, 0x1f, 0x35, 0x8, 0x1b, 0x6, 0x2e, 0x2c, 0x27, 0x15], 0x2, 0x3, 0xfffffffffffff11b}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x6, 0x4}, {0x4, 0x6, 0x4}, 0x9, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xd30) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 17.313186339s ago: executing program 1 (id=10549): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 17.19861364s ago: executing program 2 (id=10550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0x10, 0x80000, 0x3) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000580)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x9, 0x832]}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000042bb1932da", @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, 0x0, 0x0) pwrite64(r3, &(0x7f00000004c0)="03b1eed35063230f2d8e5104b2fa358a5e31420ac9824b6b42d57e5c555465e28be3fc1889eab2a17badb3e1dd899d51fa6a18d337df5e1f235a9fae2d4434d00353eed2845b90c7c1f273209975398523042d3d3f99379c2f970763e709b3", 0x5f, 0x4) unshare(0x42000000) r10 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r10, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0xc1105511, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 16.934508238s ago: executing program 1 (id=10551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x84800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x4, 0xe1030457243e7279, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005001a00fc"], 0x24}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffdd2) r7 = openat$dsp(0xffffffffffffff9c, 0x0, 0x410bc0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfc5) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0xf, 0x803, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r7, @ANYRES32=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32=r10], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r12 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r13 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r11, r12, r13}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) r14 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r14, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$BLKZEROOUT(r14, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 15.612780744s ago: executing program 1 (id=10552): r0 = socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x28b2, 0x63f5, 0x40, &(0x7f0000000340)={[0x7]}, 0x8) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000c40)={0x20, r6, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74"], 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="e6260a8b0180c200000e0180c2000001080500e40fd617a9122c330e"], &(0x7f0000000040)={0x1, 0x2, [0x9f5, 0xba8, 0xc81, 0xb48]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000004040000", 0x58}], 0x1) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x6}, [@RTA_SRC={0x8, 0x2, @local}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002800c0002001b0000001d00000006000100000000000600050088a8000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x60}}, 0x0) 15.286764496s ago: executing program 7 (id=10553): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x0, 0xfffffffffffffffa]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x4, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc, 0x0, 0xbe]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={r8}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="4dc07f94714b300c8602870252d2", 0xe) r10 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xff) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$video(&(0x7f0000000080), 0xb, 0x444c0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 14.565995217s ago: executing program 2 (id=10556): socket$inet_mptcp(0x2, 0x1, 0x106) fanotify_init(0xa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r2, 0x2) close(r2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07424ae89cf7d629f944a4bedd8607e44fa2444bf40ddf534ff8c07cb111"], 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) 13.117561272s ago: executing program 3 (id=10558): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sysfs$1(0x1, &(0x7f0000000300)='\\\'+$#\x00') syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet(0xa, 0x1, 0x100) listen(r3, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x10000004}) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 11.366266767s ago: executing program 1 (id=10559): getsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8880) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open(0x0, 0x0, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r6, 0x0, 0x0, 0x100008) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) 10.988850408s ago: executing program 6 (id=10560): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000200)={r5}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61a6160a14a500"], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r9, 0x1}) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.988498715s ago: executing program 7 (id=10561): socket$netlink(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x27) r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0x71) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r2, 0xffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010828bd7000fedbdf248180800000000000000000003d2a1350201d615caf9cc74109218ef5a410291fd688ebf305b660d7d2ce0249855c6730223c63e75e3b80688b6e6a03c100f916832bd7196c228ec2fc01b12b4e03a594b00394dacab33514cdba7436e0bad9ddb69c4eafe393206b8c3355a76b246dc1a111fcfb07003b87312f464ab2250f1a885efa696ff1b5a30318f0d6c80fe2f7210c210bc9a89d60826216e91ef7b16813"], 0x1c}, 0x1, 0x0, 0x0, 0x4004880}, 0x884) 10.880821912s ago: executing program 2 (id=10562): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x8, 0x8, 0x0, 0x1ff, {{0x5, 0x4, 0x2, 0x2b, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x48, 0x40000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020700090582020002000000"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x8, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/198, 0xc6, 0x1, &(0x7f0000000180)=""/218, 0xda}, &(0x7f00000002c0)=0x40) 10.108098453s ago: executing program 1 (id=10563): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x27, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xc6d1, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000002c0)="01000000020000000000a824b55a2a6d0b00c145f94cd977df45909260d4753c259449f9b1466da811a4dc2cc004b98fa98616ca", 0x34, 0xffffffffffffffff) syz_usb_connect(0x6, 0x5f, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) fremovexattr(0xffffffffffffffff, &(0x7f0000002340)=@known='system.posix_acl_access\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) dup2(r6, r5) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 9.152918618s ago: executing program 3 (id=10564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8000006) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) fsopen(&(0x7f00000005c0)='minix\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2000, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={[&(0x7f00000001c0)='\',]\\\xbd-\x00', &(0x7f0000000280)='/dev/kvm\x00']}, &(0x7f0000000540)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='#^\x00', &(0x7f00000003c0)=':)\x00', &(0x7f0000000400)=',!^:.\x00', &(0x7f0000000440)='/dev/kvm\x00', &(0x7f0000000480)='/dev/kvm\x00', &(0x7f00000004c0)='\x9a\'\x00', &(0x7f0000000500)='\x00']}) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000040)=0x5, 0x4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700"], 0x0, 0x4a1a45a4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)) 8.902229572s ago: executing program 7 (id=10565): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xff, 0x9, 0x1100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) syz_open_dev$video4linux(0x0, 0x7fffffff, 0x100) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='veth1\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x480, 0x0, 0x0) getxattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYBLOB], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 8.856663528s ago: executing program 2 (id=10566): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000280)={0x0, 0x8, "6dadd3b51567f3aa46f0645bf9d84fade7cf8c0e3580f1c8cc4d0192a4ef5379", 0x3800, 0x7f, 0xe6db, 0x6, 0x2, 0x7, 0xc7, 0x0, [0x7, 0x400, 0x6, 0x5]}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4) syz_emit_ethernet(0xff, &(0x7f0000000400)=ANY=[], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x3, 0x2) socketpair(0x2c, 0x3, 0x0, 0x0) close(r8) r9 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r10 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) 6.113777934s ago: executing program 6 (id=10567): mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file1/file0\x00'}) openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000380)="cd", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') 5.751983467s ago: executing program 3 (id=10568): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1, &(0x7f0000002180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB], 0x4, 0x0, 0x0) open$dir(&(0x7f0000000840)='./file0\x00', 0x4374362a64d36bbe, 0xa) r6 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r6, r6, 0x0, 0x200001) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000009c0)={0x5}, 0x1) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x6044094, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 4.865870048s ago: executing program 7 (id=10569): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r2, &(0x7f0000000040), 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x46, &(0x7f0000000980)=""/70}, &(0x7f0000000040)="4eb4fffffede", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001780), 0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1000001d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x4, 0x49, 0x39cc191b, 0x5f, 0x9, 0x209, 0xffff2d33, 0xffffff01, 0x6, 0x3, 0x20000, 0x5, 0x4, 0xe4a1, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x6, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x0, 0x71, 0x6, 0x7, 0x1, 0x7, 0x9, 0x3e, 0x8f, 0x3, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x7, 0x8000, 0x10, 0x1, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x15a, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8c2, 0xea4, 0x0, 0x4, 0x2, 0x8004, 0x2009, 0x3fc, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x42, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x81, 0x223], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x4005, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x9, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x8, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x9, 0xac8, 0xbf, 0x59, 0x3, 0x80000000, 0xfffffff9, 0x0, 0x9, 0xffff, 0xb0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x4, 0x6, 0x0, 0x5, 0xce7, 0x8001, 0x2, 0x7, 0x5, 0x3, 0x101, 0x0, 0x2, 0x7fff, 0xffff, 0xa61c, 0x2, 0xffffffff, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x7, 0xffff, 0x10, 0x7a, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x5, 0x80010080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x0, 0x200, 0xffff343e, 0xfff]}, 0x45c) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000880)="1a573524696e98e80925eef5e496345e6195c12209648f759ce4787f731824f0ba4bc5de4ba0f2b7ee16cf2805aefe37b76ce266ab8e1e3cda99acb4a771a9971cc5a678c4fa2a9ad13c0dcfb8816f8d4d5566fe6f9350dde10298b3f3636487510194df6abed88a755aff4bc1253297390d663f945d78881c1fbd65972939d3526778b6d3a7235513f54ddf1e224c997d334b768d90195202ad9174b140aa41a04357658c0737c6fc9ea93f0e4e4e6c857703a55ebbb18d6c752de32aa1a8b47543637b708f", 0xc6) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000140)={0x2, 0x5, 0x4, 0xe000, 0xdb5, {}, {0x2, 0xc, 0x2, 0x7, 0xd, 0x7, "bbab7ae5"}, 0x9, 0x4, {}, 0x8001}) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000280)=""/200, 0xc8}], 0x6, 0x6, 0x780) 4.652974469s ago: executing program 3 (id=10570): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, 0x0, 0x44080) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1, &(0x7f0000002180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB], 0x4, 0x0, 0x0) open$dir(&(0x7f0000000840)='./file0\x00', 0x4374362a64d36bbe, 0xa) r6 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r6, r6, 0x0, 0x200001) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000009c0)={0x5}, 0x1) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x6044094, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 4.172942095s ago: executing program 6 (id=10571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="a400000010000104000000006f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008000100000014000600fc010000f5ffffffffffffff00000001050016000200000014000700ff"], 0xa4}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcb, 0x0, 0xf) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r10, 0x7}, 0x8) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x9, 0x2, 0x1, {0x0, 0x0, r4}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r11 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x2, 0x72}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000080)=""/245) io_uring_enter(r5, 0x3516, 0x100000, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000005, 0x13, r3, 0x100000000) 3.557011569s ago: executing program 3 (id=10572): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) landlock_restrict_self(r3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20020480) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2c, r5, 0x5, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000056fffffff00000000200000005700e0ff000002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r8 = signalfd(0xffffffffffffffff, 0x0, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304905) close(r9) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) fcntl$setstatus(r8, 0x4, 0x2c00) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES16=r9], 0x0) syz_usb_control_io(r10, 0x0, 0x0) 2.035124729s ago: executing program 2 (id=10573): getsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8880) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open(0x0, 0x0, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r6, 0x0, 0x0, 0x100008) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) 1.892481563s ago: executing program 1 (id=10574): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sysfs$1(0x1, &(0x7f0000000300)='\\\'+$#\x00') syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet(0xa, 0x1, 0x100) listen(r3, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x10000004}) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 1.879153873s ago: executing program 6 (id=10575): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r2], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, "000002", "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"}}, 0x110) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="034886dd09032800030020000000600000001204730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x2, 0xa, 0x7, 0xd62}, {0x2cf, 0x8, 0x7, 0x6}, {0x2, 0xc1, 0xa, 0x5}, {0x2, 0x2, 0x7f, 0x8}]}) close_range(r9, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x1, 0xdc, 0x0, 0x0) close(0x3) 1.698863761s ago: executing program 7 (id=10576): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000000)='\x00', 0x24000, 0x1) mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000400)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x0, @multicast1, 0x4, "93f3871800000000"}]}}}}}}}}, 0x0) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 900.911943ms ago: executing program 2 (id=10577): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)=0x8100000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000180)={0x0, 0x0}) sched_setattr(r6, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x5d7440, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000003380)) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x4048884) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x3, 0x20040) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 837.279776ms ago: executing program 6 (id=10578): socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="30000000120001000000002000000010100000000c00000000000000000000002378e29f6a8a94751fa60f"], 0x30}], 0x1}, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 552.688947ms ago: executing program 6 (id=10579): pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x10000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000440)="9de408d2632cdbd824b209b4b08066cee32bcf11da28dab812ce0e488520cb0c1315614b0b77f6f768b83c8131b430b22efdccdb92ecf76ca5dccc236c2e001f182638d0141fada290d5ff9215374799a918b75b10095f92", 0x58}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000001c0)=[{0xebf, 0xc1, 0x3, 0x3}, {0x4, 0xb2, 0x2, 0x9}, {0x0, 0x30, 0x2}]}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x21000, 0x3a, 0x1000, 0x3a, 0x7fc, 0xf83, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @loopback, 0x3}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x0) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e07", 0xdd) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x3ff) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000400)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) 0s ago: executing program 3 (id=10580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1, &(0x7f0000002180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB], 0x4, 0x0, 0x0) open$dir(&(0x7f0000000840)='./file0\x00', 0x4374362a64d36bbe, 0xa) r6 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r6, r6, 0x0, 0x200001) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000009c0)={0x5}, 0x1) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x6044094, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) kernel console output (not intermixed with test programs): oop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 2582.412486][ T5199] ldm_validate_partition_table(): Disk read failed. [ 2582.419936][ T5199] Dev loop6: unable to read RDB block 0 [ 2582.433952][ T5199] loop6: unable to read partition table [ 2582.484607][T25661] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2582.526746][T25661] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2582.630623][T25661] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2582.682825][T25661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.731817][T25661] usb 2-1: config 0 descriptor?? [ 2584.076535][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10060'. [ 2584.103432][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10059'. [ 2584.857818][ T7571] usb 4-1: USB disconnect, device number 56 [ 2586.032818][ T9312] vivid-000: disconnect [ 2586.082133][ T7571] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2586.254550][ T7571] usb 7-1: config 0 has no interfaces? [ 2586.324440][ T7571] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2586.342711][ T7571] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.342828][T25661] usbhid 2-1:0.0: can't add hid device: -71 [ 2586.375512][ T7571] usb 7-1: Product: syz [ 2586.379742][ T7571] usb 7-1: Manufacturer: syz [ 2586.405167][ T7571] usb 7-1: SerialNumber: syz [ 2586.428448][ T9300] vivid-000: reconnect [ 2586.439550][ T7571] usb 7-1: config 0 descriptor?? [ 2586.630295][T25661] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2586.720690][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10062'. [ 2586.741536][T25661] usb 2-1: USB disconnect, device number 77 [ 2587.678548][ T9332] netlink: 'syz.2.10064': attribute type 11 has an invalid length. [ 2588.103649][ T9340] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2589.815866][ T7571] usb 7-1: USB disconnect, device number 17 [ 2590.420706][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10070'. [ 2590.526964][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.533708][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.553015][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10070'. [ 2590.991401][ T7571] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2591.151769][ T7571] usb 3-1: Using ep0 maxpacket: 32 [ 2591.167867][ T7571] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 2591.196100][ T7571] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2591.218540][ T7571] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2591.239470][ T7571] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2591.257662][ T7571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2591.278146][ T7571] usb 3-1: Product: syz [ 2591.300218][ T7571] usb 3-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄ [ 2591.326910][ T7571] usb 3-1: SerialNumber: syz [ 2591.354151][ T9356] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2591.618865][ T7571] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 2591.689558][ T7571] usb 3-1: USB disconnect, device number 65 [ 2591.999505][ T9378] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10073'. [ 2592.124650][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10073'. [ 2592.308308][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10077'. [ 2592.325090][ T9379] netlink: 'syz.6.10077': attribute type 27 has an invalid length. [ 2593.061392][ T6659] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2593.159580][ T9389] ip6gre1: entered promiscuous mode [ 2594.446301][ T6659] usb 3-1: config 0 has no interfaces? [ 2594.710697][ T6659] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2594.870333][ T6659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.910626][ T6659] usb 3-1: Product: syz [ 2594.948260][ T6659] usb 3-1: Manufacturer: syz [ 2595.115731][ T6659] usb 3-1: SerialNumber: syz [ 2595.270255][ T6659] usb 3-1: config 0 descriptor?? [ 2596.073620][ T6659] usb 3-1: can't set config #0, error -71 [ 2596.125983][ T6659] usb 3-1: USB disconnect, device number 66 [ 2596.221275][ T2631] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2596.221304][ T7571] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2596.422967][ T7571] usb 4-1: Using ep0 maxpacket: 16 [ 2596.484181][ T2631] usb 7-1: Using ep0 maxpacket: 16 [ 2596.500098][ T7571] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2596.609651][ T7571] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2596.633156][ T7571] usb 4-1: Product: syz [ 2596.637373][ T7571] usb 4-1: Manufacturer: syz [ 2596.656577][ T7571] usb 4-1: SerialNumber: syz [ 2596.694669][ T7571] usb 4-1: config 0 descriptor?? [ 2596.704246][ T6659] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2596.712298][ T2631] usb 7-1: config 0 has no interfaces? [ 2596.739735][ T2631] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2596.933868][ T2631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.946969][ T7571] usb 4-1: USB disconnect, device number 57 [ 2596.992086][ T2631] usb 7-1: config 0 descriptor?? [ 2597.196134][ T6659] usb 3-1: config 0 has no interfaces? [ 2597.260311][ T6659] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2597.296604][ T6659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2597.312322][ T6659] usb 3-1: Product: syz [ 2597.332715][ T6659] usb 3-1: Manufacturer: syz [ 2597.344772][ T6659] usb 3-1: SerialNumber: syz [ 2597.357147][ T6659] usb 3-1: config 0 descriptor?? [ 2598.051455][T25648] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2598.211389][T25648] usb 2-1: Using ep0 maxpacket: 32 [ 2598.236315][T25648] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 2598.264939][T25648] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2598.310385][T25648] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2598.340146][T25648] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2598.383754][T25648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.403302][T25648] usb 2-1: Product: syz [ 2598.407732][T25648] usb 2-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄ [ 2598.423377][T25648] usb 2-1: SerialNumber: syz [ 2598.455323][ T9428] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2598.718455][T25648] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 2598.774015][T25648] usb 2-1: USB disconnect, device number 78 [ 2599.703961][T25648] usb 7-1: USB disconnect, device number 18 [ 2600.018014][ T7571] usb 3-1: USB disconnect, device number 67 [ 2600.681707][ T2631] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2600.882097][ T2631] usb 4-1: Using ep0 maxpacket: 8 [ 2601.104873][ T2631] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2601.147080][ T2631] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2601.231250][ T2631] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2601.351245][ T2631] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2601.431034][ T2631] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2601.491361][ T2631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.367515][ T9479] netlink: 'syz.6.10098': attribute type 11 has an invalid length. [ 2603.381840][ T6659] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 2603.671375][ T6659] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2603.692287][ T6659] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 2603.713783][ T6659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.832550][ T6659] usb 3-1: config 0 descriptor?? [ 2604.247494][ T9474] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2604.325447][ T6659] sony 0003:1345:3008.0075: item fetching failed at offset 4/5 [ 2604.402757][ T6659] sony 0003:1345:3008.0075: parse failed [ 2604.451585][ T6659] sony 0003:1345:3008.0075: probe with driver sony failed with error -22 [ 2604.587836][T25648] usb 3-1: USB disconnect, device number 68 [ 2604.689987][ T9487] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10100'. [ 2604.777208][ T9482] netlink: 'syz.7.10099': attribute type 10 has an invalid length. [ 2604.887354][ T2631] usb 4-1: usb_control_msg returned -71 [ 2604.916470][ T2631] usbtmc 4-1:16.0: can't read capabilities [ 2604.969357][ T2631] usb 4-1: USB disconnect, device number 58 [ 2605.946127][ T9507] netlink: 'syz.3.10101': attribute type 1 has an invalid length. [ 2605.982679][ T9507] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.10101'. [ 2606.195587][ T9515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2606.251492][T25648] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2606.652766][T25648] usb 3-1: config 0 has no interfaces? [ 2606.671254][ T2631] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2606.699527][T25648] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2606.741053][T25648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.794293][T25648] usb 3-1: Product: syz [ 2606.798629][T25648] usb 3-1: Manufacturer: syz [ 2606.841882][T25648] usb 3-1: SerialNumber: syz [ 2606.867862][T25648] usb 3-1: config 0 descriptor?? [ 2607.002835][ T2631] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2607.087074][ T2631] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2607.311326][ T2631] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2607.383060][ T2631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2607.434331][ T9504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2607.472294][ T9504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2608.015836][ T2631] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2608.088152][ T2631] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2608.362608][ T9515] 8021q: VLANs not supported on bond0 [ 2610.431645][T25648] usb 3-1: USB disconnect, device number 69 [ 2610.445543][ T7571] usb 7-1: USB disconnect, device number 19 [ 2610.951495][ T2631] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2611.101279][ T7571] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2611.111308][ T2631] usb 3-1: Using ep0 maxpacket: 32 [ 2611.141763][ T2631] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2611.180751][ T2631] usb 3-1: config 0 has no interface number 0 [ 2611.193795][ T2631] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2611.213989][ T2631] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2611.238684][ T2631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.273123][ T2631] usb 3-1: Product: syz [ 2611.277368][ T2631] usb 3-1: Manufacturer: syz [ 2611.302081][ T2631] usb 3-1: SerialNumber: syz [ 2611.317512][ T2631] usb 3-1: config 0 descriptor?? [ 2611.334731][ T2631] smsc75xx v1.0.0 [ 2611.358094][ T9563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2611.368508][ T7571] usb 7-1: config 0 has no interfaces? [ 2611.403579][ T7571] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2611.434685][ T7571] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.547293][ T7571] usb 7-1: Product: syz [ 2611.554878][ T7571] usb 7-1: Manufacturer: syz [ 2611.559831][ T7571] usb 7-1: SerialNumber: syz [ 2611.578587][ T7571] usb 7-1: config 0 descriptor?? [ 2611.959648][ T2631] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2612.077390][ T2631] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2612.128270][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10113'. [ 2612.138332][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10113'. [ 2612.162035][ T9570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.181386][ T9570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.214587][ T9570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.229983][ T9570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2612.251878][ T9570] geneve3: entered promiscuous mode [ 2612.258498][ T9570] geneve3: entered allmulticast mode [ 2612.787616][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10111'. [ 2612.841269][ T7571] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2612.911214][ T2631] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 2612.949704][ T2631] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 2613.064762][ T7571] usb 4-1: config 0 has no interfaces? [ 2613.074818][ T7571] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2613.103803][ T7571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2613.131716][ T7571] usb 4-1: Product: syz [ 2613.142503][ T7571] usb 4-1: Manufacturer: syz [ 2613.156304][ T7571] usb 4-1: SerialNumber: syz [ 2613.167655][ T2631] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2613.200551][ T7571] usb 4-1: config 0 descriptor?? [ 2613.270195][ T2631] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 2614.109281][ T9587] xt_NFQUEUE: number of total queues is 0 [ 2614.378463][ T7571] usb 7-1: USB disconnect, device number 20 [ 2615.043744][ T9581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2615.513952][ T7571] usb 3-1: USB disconnect, device number 70 [ 2615.619252][ T6577] usb 4-1: USB disconnect, device number 59 [ 2615.887020][ T2625] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2615.925825][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 2616.061374][ T2625] usb 7-1: device descriptor read/64, error -32 [ 2616.271332][ T7571] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2616.341371][ T2625] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2616.500246][ T7571] usb 4-1: config 0 has no interfaces? [ 2616.655738][ T7571] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2616.804527][ T7571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2616.855426][ T7571] usb 4-1: Product: syz [ 2616.859698][ T7571] usb 4-1: Manufacturer: syz [ 2616.888237][ T7571] usb 4-1: SerialNumber: syz [ 2616.932878][ T7571] usb 4-1: config 0 descriptor?? [ 2617.144471][ T9618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2617.307325][ T9613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2617.490400][ T9613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2617.641498][ T7571] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2617.807869][ T7571] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2617.914214][ T7571] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2618.045910][ T7571] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2618.095929][ T7571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2618.619920][ T7571] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2618.860656][ T7571] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2618.869381][ T9618] vlan2: entered promiscuous mode [ 2618.877784][ T9618] bond0: entered promiscuous mode [ 2618.983887][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10122'. [ 2619.075700][ T2625] usb 7-1: device descriptor read/all, error -71 [ 2619.141759][ T2625] usb usb7-port1: attempt power cycle [ 2619.509818][ T2631] usb 4-1: USB disconnect, device number 60 [ 2619.526849][ T9630] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2620.008925][ T9639] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2620.425742][ T9639] vlan0: entered promiscuous mode [ 2620.438421][ T9639] bond0: (slave vlan0): Opening slave failed [ 2620.798881][ T2631] usb 2-1: USB disconnect, device number 79 [ 2621.501414][ T2631] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2621.719556][ T2631] usb 2-1: config 0 has no interfaces? [ 2621.931686][ T6659] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 2622.103260][ T2631] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2622.117910][ T6659] usb 7-1: config 0 has no interfaces? [ 2622.165437][ T6659] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2622.182641][ T2631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.291604][ T6659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.348112][ T2631] usb 2-1: Product: syz [ 2622.388735][ T2631] usb 2-1: Manufacturer: syz [ 2622.400033][ T6659] usb 7-1: Product: syz [ 2622.414934][ T2631] usb 2-1: SerialNumber: syz [ 2622.422204][ T6659] usb 7-1: Manufacturer: syz [ 2622.448895][ T6659] usb 7-1: SerialNumber: syz [ 2622.470804][ T2631] usb 2-1: config 0 descriptor?? [ 2622.519683][ T6659] usb 7-1: config 0 descriptor?? [ 2622.981436][ T2625] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2623.191269][ T2625] usb 3-1: Using ep0 maxpacket: 16 [ 2623.231089][ T2625] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2623.272050][ T2625] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2623.347517][ T2625] usb 3-1: Product: syz [ 2623.369487][ T2625] usb 3-1: Manufacturer: syz [ 2623.383266][ T2625] usb 3-1: SerialNumber: syz [ 2623.403107][ T2625] usb 3-1: config 0 descriptor?? [ 2624.041980][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10127'. [ 2624.925162][ T2625] usb 2-1: USB disconnect, device number 80 [ 2625.651567][ T2631] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 2625.905753][ T2631] usb 2-1: not running at top speed; connect to a high speed hub [ 2625.932130][ T6659] usb 3-1: USB disconnect, device number 71 [ 2625.985619][ T2631] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 2626.055500][ T2631] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2626.212392][ T2631] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 2626.302455][ T2631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.333272][ T6659] usb 7-1: USB disconnect, device number 24 [ 2626.388125][ T2631] usb 2-1: Product: syz [ 2626.405395][ T2631] usb 2-1: Manufacturer: syz [ 2626.410152][ T2631] usb 2-1: SerialNumber: syz [ 2626.971630][ T6659] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2627.101282][ T2625] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 2627.109385][ C0] raw-gadget.2 gadget.6: ignoring, device is not running [ 2627.241727][ T2625] usb 7-1: device descriptor read/64, error -32 [ 2627.551240][ T6659] usb 3-1: Using ep0 maxpacket: 8 [ 2627.561392][ T2625] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2627.674109][ T6659] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2627.725496][ T6659] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2627.744616][ T6659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2627.764149][ T6659] usb 3-1: config 0 descriptor?? [ 2627.906466][ T2625] usb 7-1: config 0 has no interfaces? [ 2628.088787][ T6659] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2628.374329][ T2625] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2628.436793][ T2625] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2628.679275][ T2631] usb 2-1: USB disconnect, device number 81 [ 2628.700242][ T2625] usb 7-1: Product: syz [ 2628.775898][ T2625] usb 7-1: Manufacturer: syz [ 2628.783032][ T2625] usb 7-1: SerialNumber: syz [ 2628.855332][ T2625] usb 7-1: config 0 descriptor?? [ 2629.158337][ T9713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2629.791640][ T2631] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 2629.989414][ T2631] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 2630.141175][ T2631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2630.253881][ T2631] usb 2-1: Product: syz [ 2630.258275][ T2631] usb 2-1: Manufacturer: syz [ 2630.432350][ T2631] usb 2-1: SerialNumber: syz [ 2630.452981][ T2631] usb 2-1: config 0 descriptor?? [ 2630.483292][ T2625] usb 3-1: USB disconnect, device number 72 [ 2630.614061][ T2631] usb 2-1: selecting invalid altsetting 3 [ 2630.647967][ T2631] comedi comedi0: could not set alternate setting 3 in high speed [ 2630.697702][ T2631] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 2630.774459][ T2631] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 2630.883817][ T9718] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10141'. [ 2631.322467][ T2631] usb 7-1: USB disconnect, device number 26 [ 2631.339414][ T9727] fuse: Unknown parameter '0xffffffffffffffff' [ 2632.622578][ T2631] usb 2-1: USB disconnect, device number 82 [ 2633.381345][ T2625] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2633.618803][ T2625] usb 2-1: config 0 has no interfaces? [ 2633.719745][ T2625] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2633.754090][ T2625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2633.803384][ T2625] usb 2-1: Product: syz [ 2633.807869][ T2625] usb 2-1: Manufacturer: syz [ 2633.845203][ T2625] usb 2-1: SerialNumber: syz [ 2633.899162][ T2625] usb 2-1: config 0 descriptor?? [ 2634.440169][ T9757] ptrace attach of "./syz-executor exec"[24636] was attempted by "./syz-executor exec"[9757] [ 2634.461920][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10146'. [ 2634.589055][ T9757] dns_resolver: Unsupported server list version (0) [ 2636.558005][ T2631] usb 2-1: USB disconnect, device number 83 [ 2637.107287][ T9788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2637.381351][ T2631] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2637.589396][ T2631] usb 2-1: config 0 has no interfaces? [ 2637.642042][ T2631] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2637.682845][ T2631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2637.735297][ T2631] usb 2-1: Product: syz [ 2637.775044][ T2631] usb 2-1: Manufacturer: syz [ 2637.781698][ T30] audit: type=1800 audit(1747173258.621:5201): pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10152" name="file0" dev="tmpfs" ino=3364 res=0 errno=0 [ 2637.828710][ T2631] usb 2-1: SerialNumber: syz [ 2639.900222][ T9788] vlan0: entered promiscuous mode [ 2639.970414][ T2631] usb 2-1: config 0 descriptor?? [ 2640.801364][ T6659] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 2641.017246][ T6659] usb 7-1: config 0 has no interfaces? [ 2641.027326][ T6659] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2641.038508][ T6659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.067008][ T6659] usb 7-1: Product: syz [ 2641.090447][ T6659] usb 7-1: Manufacturer: syz [ 2641.105387][ T6659] usb 7-1: SerialNumber: syz [ 2641.130984][ T6659] usb 7-1: config 0 descriptor?? [ 2641.393019][ T2631] usb 2-1: can't set config #0, error -71 [ 2641.400647][ T2631] usb 2-1: USB disconnect, device number 84 [ 2641.812215][ T2631] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2642.072999][ T2631] usb 4-1: Using ep0 maxpacket: 8 [ 2642.133975][ T2631] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2642.171602][ T7571] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2642.183304][ T2631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2642.234314][ T2631] usb 4-1: Product: syz [ 2642.254994][ T2631] usb 4-1: Manufacturer: syz [ 2642.342585][ T2631] usb 4-1: SerialNumber: syz [ 2642.368695][ T2631] usb 4-1: config 0 descriptor?? [ 2642.409915][ T7571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2642.526889][ T7571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2642.556287][ T7571] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2642.597353][ T2631] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2642.727953][ T7571] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2642.883403][ T7571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2643.025797][ T7571] usb 2-1: config 0 descriptor?? [ 2644.460273][ T9835] "syz.1.10160" (9835) uses obsolete ecb(arc4) skcipher [ 2644.631469][ T2625] usb 7-1: USB disconnect, device number 27 [ 2645.729150][ T2631] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2645.907182][ T2631] usb 4-1: USB disconnect, device number 61 [ 2646.075761][ T7571] usbhid 2-1:0.0: can't add hid device: -71 [ 2646.082079][ T7571] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2646.254781][ T7571] usb 2-1: USB disconnect, device number 85 [ 2646.790796][ T7571] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2647.176873][ T7571] usb 2-1: config 0 has no interfaces? [ 2647.286714][ T9857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2647.365814][ T9860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2647.444608][ T7571] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2647.466539][ T7571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2647.481460][ T7571] usb 2-1: Product: syz [ 2647.486157][ T7571] usb 2-1: Manufacturer: syz [ 2647.491103][ T7571] usb 2-1: SerialNumber: syz [ 2647.499721][ T7571] usb 2-1: config 0 descriptor?? [ 2647.946656][ T30] audit: type=1326 audit(1747173268.851:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2648.021692][ T2631] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 2648.032660][ T30] audit: type=1326 audit(1747173268.851:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2648.102303][ T30] audit: type=1326 audit(1747173268.861:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2648.284010][ T2631] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2648.301385][ T2631] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2648.315027][ T30] audit: type=1326 audit(1747173268.871:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2648.359479][ T2631] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2648.393712][ T2631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.413654][ T7571] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2648.467162][ T2631] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2648.541256][ T30] audit: type=1326 audit(1747173268.871:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2648.594259][ T7571] usb 4-1: config 0 has no interfaces? [ 2648.612437][ T2631] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2648.632013][ T7571] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2648.647042][ T7571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.673554][ T9860] 8021q: VLANs not supported on bond0 [ 2648.752762][ T30] audit: type=1326 audit(1747173268.871:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2648.776202][ T7571] usb 4-1: Product: syz [ 2648.780427][ T7571] usb 4-1: Manufacturer: syz [ 2648.837894][ T7571] usb 4-1: SerialNumber: syz [ 2648.951356][ T30] audit: type=1326 audit(1747173268.871:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2648.977909][ T30] audit: type=1326 audit(1747173268.871:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2649.000409][ C1] vkms_vblank_simulate: vblank timer overrun [ 2649.013494][ T30] audit: type=1326 audit(1747173268.871:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2649.052620][ T7571] usb 4-1: config 0 descriptor?? [ 2649.175632][ T30] audit: type=1326 audit(1747173268.871:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9846 comm="syz.1.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2649.198072][ C1] vkms_vblank_simulate: vblank timer overrun [ 2649.262060][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2649.540313][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2650.410471][ T2631] usb 4-1: USB disconnect, device number 62 [ 2650.586034][ T2625] usb 2-1: USB disconnect, device number 86 [ 2650.658176][ T2631] usb 7-1: USB disconnect, device number 28 [ 2651.006708][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10178'. [ 2651.969574][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.977469][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.371250][ T7571] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2653.704555][ T7571] usb 2-1: config 0 has no interfaces? [ 2653.897156][ T7571] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2654.182387][ T7571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2654.201193][ T7571] usb 2-1: Product: syz [ 2654.214684][ T7571] usb 2-1: Manufacturer: syz [ 2654.219354][ T7571] usb 2-1: SerialNumber: syz [ 2654.253979][ T7571] usb 2-1: config 0 descriptor?? [ 2654.671662][ T6659] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2654.885184][ T6659] usb 4-1: config 0 has no interfaces? [ 2655.044424][ T6659] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2655.088259][ T6659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2655.136697][ T6659] usb 4-1: Product: syz [ 2655.205924][ T6659] usb 4-1: Manufacturer: syz [ 2655.220974][ T6659] usb 4-1: SerialNumber: syz [ 2655.286154][ T6659] usb 4-1: config 0 descriptor?? [ 2656.304723][ T9942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2656.424757][ T9944] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 2656.431325][ T9944] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2656.477730][ T9944] vhci_hcd vhci_hcd.0: Device attached [ 2656.477992][ T9947] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(8) [ 2656.489766][ T9947] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2656.582133][ T2631] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 2656.627397][ T9951] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(14) [ 2656.634044][ T9951] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2656.652184][ T9951] vhci_hcd vhci_hcd.0: Device attached [ 2656.662098][ T9951] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2656.706182][ T9944] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(11) [ 2656.707396][T25661] usb 2-1: USB disconnect, device number 87 [ 2656.712914][ T9944] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2656.727067][ T6659] vhci_hcd: vhci_device speed not set [ 2656.765578][ T2631] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2656.779356][ T2631] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2656.796892][ T6659] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 2656.847195][ T2631] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2656.882031][ T2631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2656.912959][ T9947] vhci_hcd vhci_hcd.0: Device attached [ 2656.920888][ T9944] vhci_hcd vhci_hcd.0: Device attached [ 2656.936451][ T2631] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2657.060146][ T2631] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2657.127730][ T9942] 8021q: VLANs not supported on bond0 [ 2657.826401][ T9952] vhci_hcd: connection closed [ 2657.826909][ T53] vhci_hcd: stop threads [ 2657.836643][ T9950] vhci_hcd: connection closed [ 2657.837029][ T9948] vhci_hcd: connection closed [ 2657.842044][ T9945] vhci_hcd: connection reset by peer [ 2657.851367][ T53] vhci_hcd: release socket [ 2657.871658][ T53] vhci_hcd: disconnect device [ 2657.878835][ T53] vhci_hcd: stop threads [ 2657.902184][ T53] vhci_hcd: release socket [ 2657.913854][ T53] vhci_hcd: disconnect device [ 2657.940669][ T13] vhci_hcd: stop threads [ 2657.950233][ T13] vhci_hcd: release socket [ 2657.964431][ T13] vhci_hcd: disconnect device [ 2657.990816][ T13] vhci_hcd: stop threads [ 2658.013941][ T13] vhci_hcd: release socket [ 2658.042196][ T13] vhci_hcd: disconnect device [ 2658.743855][ T2631] usb 4-1: USB disconnect, device number 63 [ 2659.051515][T25661] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2659.583744][T25661] usb 3-1: config 0 has no interfaces? [ 2659.685804][T25661] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2659.745848][T25661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2659.827638][T25661] usb 3-1: Product: syz [ 2659.838021][T25661] usb 3-1: Manufacturer: syz [ 2659.859181][T25661] usb 3-1: SerialNumber: syz [ 2659.872355][T25661] usb 3-1: config 0 descriptor?? [ 2659.915238][ T2631] usb 7-1: USB disconnect, device number 29 [ 2661.951585][ T6659] vhci_hcd: vhci_device speed not set [ 2662.143109][T10016] netlink: 168 bytes leftover after parsing attributes in process `syz.6.10200'. [ 2662.171258][T25661] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2662.533600][T25661] usb 2-1: config 0 has no interfaces? [ 2662.552092][T25661] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2662.581687][T25661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2662.611501][T25661] usb 2-1: Product: syz [ 2662.618768][T25661] usb 2-1: Manufacturer: syz [ 2662.636167][T25661] usb 2-1: SerialNumber: syz [ 2662.659523][T25661] usb 2-1: config 0 descriptor?? [ 2663.174751][T25661] usb 3-1: USB disconnect, device number 73 [ 2663.431876][ T2631] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 2663.771572][ T2631] usb 7-1: config 0 has no interfaces? [ 2663.908532][ T2631] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2663.927450][ T2631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.936154][ T2631] usb 7-1: Product: syz [ 2663.940590][ T2631] usb 7-1: Manufacturer: syz [ 2663.954845][ T2631] usb 7-1: SerialNumber: syz [ 2663.980560][ T2631] usb 7-1: config 0 descriptor?? [ 2664.973678][ T2625] usb 2-1: USB disconnect, device number 88 [ 2665.344976][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10204'. [ 2666.231463][ T2625] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2666.333049][T10062] input: syz0 as /devices/virtual/input/input140 [ 2666.438734][ T2625] usb 4-1: config index 0 descriptor too short (expected 63524, got 36) [ 2666.469172][ T2625] usb 4-1: config 227 has too many interfaces: 94, using maximum allowed: 32 [ 2666.522753][ T2625] usb 4-1: config 227 has an invalid descriptor of length 37, skipping remainder of the config [ 2666.576119][ T2625] usb 4-1: config 227 has 0 interfaces, different from the descriptor's value: 94 [ 2666.629255][ T2625] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2666.704994][ T2625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2667.108250][ T7571] usb 7-1: USB disconnect, device number 30 [ 2668.578860][T10061] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2669.441373][ T2625] usb 4-1: string descriptor 0 read error: -71 [ 2669.584853][ T2625] usb 4-1: USB disconnect, device number 64 [ 2669.833981][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2669.833998][ T30] audit: type=1326 audit(1747173290.731:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.10212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2669.870228][ T30] audit: type=1326 audit(1747173290.731:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.10212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2669.991283][ T2625] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2670.015859][ T30] audit: type=1326 audit(1747173290.731:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.10212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2670.060531][ T30] audit: type=1326 audit(1747173290.741:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.10212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2670.083299][ C0] vkms_vblank_simulate: vblank timer overrun [ 2670.142149][ T30] audit: type=1326 audit(1747173290.741:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.10212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2670.175366][ T2625] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2670.209486][ T30] audit: type=1326 audit(1747173290.741:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.10212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2670.263584][ T2625] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2670.271252][ T30] audit: type=1326 audit(1747173290.741:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.10212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2670.325870][ T30] audit: type=1326 audit(1747173290.741:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.1.10212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa5d558e969 code=0x7ffc0000 [ 2670.349477][ T2625] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2670.359195][ T2625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2672.253661][T10103] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.10211'. [ 2672.686866][ T2625] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2672.899122][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10215'. [ 2673.040058][ T2625] usb 3-1: config 0 has no interfaces? [ 2673.114768][ T2625] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2673.149173][ T2625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2673.181460][ T2625] usb 3-1: Product: syz [ 2673.195021][ T2625] usb 3-1: Manufacturer: syz [ 2673.214974][ T2625] usb 3-1: SerialNumber: syz [ 2673.270608][ T2625] usb 3-1: config 0 descriptor?? [ 2673.914603][ T2631] usb 4-1: USB disconnect, device number 65 [ 2676.008136][ T2625] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2676.421280][ T7571] usb 3-1: USB disconnect, device number 74 [ 2676.629184][ T2625] usb 2-1: config 1 has no interfaces? [ 2676.669549][ T2625] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2676.709943][ T2625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.731535][ T2625] usb 2-1: Product: syz [ 2676.735758][ T2625] usb 2-1: Manufacturer: syz [ 2676.763242][ T2625] usb 2-1: SerialNumber: syz [ 2676.971895][T10169] binder: 10159:10169 ioctl c0306201 2000000003c0 returned -14 [ 2677.051323][ T7571] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2677.331333][ T7571] usb 3-1: Using ep0 maxpacket: 8 [ 2677.424055][ T7571] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2677.448191][ T7571] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2677.482861][ T7571] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2677.519097][ T7571] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2677.574438][ T7571] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2677.635336][ T7571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2677.899869][ T7571] usb 3-1: GET_CAPABILITIES returned 0 [ 2677.918270][ T7571] usbtmc 3-1:16.0: can't read capabilities [ 2678.156608][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2679.959321][ T2625] usb 2-1: USB disconnect, device number 89 [ 2680.147562][T10195] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10231'. [ 2680.168970][T10195] netlink: 'syz.6.10231': attribute type 29 has an invalid length. [ 2680.326482][T10197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2680.611276][ T2631] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2681.167416][ T2625] usb 3-1: USB disconnect, device number 75 [ 2681.208221][ T2631] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2681.288000][ T2631] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2681.370388][ T2631] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2681.434607][ T2631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2681.540559][ T2631] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2681.891594][T25661] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 2682.055249][ T2631] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2682.131482][T25661] usb 7-1: Using ep0 maxpacket: 8 [ 2682.220459][T25661] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2682.267847][T25661] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2682.293585][T25661] usb 7-1: config 0 has no interfaces? [ 2682.313426][T25661] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 2682.322921][T25661] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.331948][T25661] usb 7-1: Product: syz [ 2682.336357][T25661] usb 7-1: Manufacturer: syz [ 2682.341047][T25661] usb 7-1: SerialNumber: syz [ 2682.377769][T25661] usb 7-1: config 0 descriptor?? [ 2682.423303][T10197] vlan2: entered promiscuous mode [ 2683.266434][T10222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10239'. [ 2683.773859][ T6659] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2684.031907][ T6659] usb 3-1: Using ep0 maxpacket: 32 [ 2684.084722][ T6659] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 2684.135689][ T6659] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2684.152974][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2684.193983][ T6659] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2684.212793][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2684.263436][ T6659] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2684.318643][ T6659] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2684.358866][ T6659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2686.152809][ T6659] usb 7-1: USB disconnect, device number 31 [ 2686.601587][T10248] netlink: 'syz.7.10243': attribute type 30 has an invalid length. [ 2686.617427][T10248] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10243'. [ 2687.015499][ T7571] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2687.202854][ T7571] usb 7-1: config 0 has no interfaces? [ 2687.351677][ T7571] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2687.356893][ T6659] usb 2-1: USB disconnect, device number 90 [ 2687.493424][T10227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2687.510186][T25661] usb 3-1: USB disconnect, device number 76 [ 2687.544620][ T7571] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2687.610479][ T7571] usb 7-1: Product: syz [ 2687.625242][ T7571] usb 7-1: Manufacturer: syz [ 2687.637576][ T7571] usb 7-1: SerialNumber: syz [ 2687.710095][ T7571] usb 7-1: config 0 descriptor?? [ 2688.161453][T25661] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2688.762577][T25661] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2690.244889][T25661] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2690.256467][T25661] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2690.272011][T25661] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2690.459132][T25661] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 2690.780711][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10249'. [ 2690.860920][T25661] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 2691.288525][ T7571] usb 7-1: can't set config #0, error -71 [ 2691.304470][ T7571] usb 7-1: USB disconnect, device number 32 [ 2691.834035][T25661] usb 3-1: string descriptor 0 read error: -71 [ 2691.850662][T25661] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2691.924383][T25661] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2691.967573][T25661] usb 3-1: can't set config #1, error -71 [ 2692.004609][T25661] usb 3-1: USB disconnect, device number 77 [ 2692.216855][T10295] program syz.6.10252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2692.396941][T10295] syz.6.10252 (10295): drop_caches: 2 [ 2692.507162][T10295] syz.6.10252 (10295): drop_caches: 2 [ 2692.781554][T10303] ip6t_srh: unknown srh match flags 5040 [ 2693.868867][T10317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2693.983174][T10316] loop6: detected capacity change from 0 to 524287999 [ 2695.765645][T10338] netlink: 'syz.6.10261': attribute type 6 has an invalid length. [ 2695.903763][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10261'. [ 2697.101582][T25661] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2697.145321][T10355] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2697.261516][ T6659] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2697.384032][T25661] usb 3-1: config 0 has no interfaces? [ 2697.403877][T25661] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2697.416486][T25661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2697.417278][ T6659] usb 2-1: config 0 has no interfaces? [ 2697.451318][T25661] usb 3-1: Product: syz [ 2697.459534][T25661] usb 3-1: Manufacturer: syz [ 2697.465293][T25661] usb 3-1: SerialNumber: syz [ 2697.473778][ T6659] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2697.486426][ T6659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2697.512574][ T6659] usb 2-1: Product: syz [ 2697.518336][T25661] usb 3-1: config 0 descriptor?? [ 2697.533874][ T6659] usb 2-1: Manufacturer: syz [ 2697.556043][ T6659] usb 2-1: SerialNumber: syz [ 2697.578454][ T6659] usb 2-1: config 0 descriptor?? [ 2697.824545][T10354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2697.850360][T10354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2700.116274][T25661] usb 3-1: USB disconnect, device number 78 [ 2700.933350][T10379] netlink: 'syz.2.10268': attribute type 10 has an invalid length. [ 2701.046101][T25661] usb 2-1: USB disconnect, device number 91 [ 2701.744914][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10269'. [ 2702.091278][T25661] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2702.620290][T25661] usb 4-1: config 0 has no interfaces? [ 2702.818135][T25661] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2702.847755][T25661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2702.871041][T25661] usb 4-1: Product: syz [ 2702.941387][T25661] usb 4-1: Manufacturer: syz [ 2703.026632][T25661] usb 4-1: SerialNumber: syz [ 2703.060212][T25661] usb 4-1: config 0 descriptor?? [ 2703.482515][T10396] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.10271'. [ 2703.691997][T25661] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2703.904211][T25661] usb 3-1: config 0 has no interfaces? [ 2703.916316][T25661] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2703.950275][T25661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.985613][T25661] usb 3-1: Product: syz [ 2704.006197][T25661] usb 3-1: Manufacturer: syz [ 2704.052403][T25661] usb 3-1: SerialNumber: syz [ 2704.242793][T25661] usb 3-1: config 0 descriptor?? [ 2704.407887][T10425] xt_connbytes: Forcing CT accounting to be enabled [ 2704.426952][T10425] xt_cluster: node mask cannot exceed total number of nodes [ 2704.486237][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2704.521794][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2705.646041][ T7571] usb 4-1: USB disconnect, device number 66 [ 2706.019507][T10437] @: renamed from syz_tun [ 2706.281221][T25661] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2707.166065][ T6659] usb 3-1: USB disconnect, device number 79 [ 2707.243451][T25661] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2707.284643][T25661] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2707.299914][T10453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2707.309044][T25661] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2707.360225][T25661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2707.693568][T10440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2707.720457][T10440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2707.764891][T10440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2707.907156][T10440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2708.142302][ T7571] usb 4-1: USB disconnect, device number 67 [ 2709.476930][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10283'. [ 2709.560446][T10461] syzkaller1: entered promiscuous mode [ 2709.566347][T10461] syzkaller1: entered allmulticast mode [ 2709.592798][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10283'. [ 2711.532437][T25661] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 2713.407146][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.413853][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.564413][T10499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10288'. [ 2713.761455][ T2625] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2713.772507][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 2713.921350][ T2625] usb 2-1: device descriptor read/64, error -32 [ 2713.942954][T10501] ptrace attach of "./syz-executor exec"[24636] was attempted by "./syz-executor exec"[10501] [ 2714.013332][T25661] usb 7-1: device descriptor read/all, error -71 [ 2714.231316][ T2625] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2714.401589][T25661] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 2714.573377][T25661] usb 7-1: Using ep0 maxpacket: 16 [ 2714.925151][ T2625] usb 2-1: config 0 has no interfaces? [ 2714.938321][ T2625] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2714.948518][ T2625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.398385][ T2625] usb 2-1: Product: syz [ 2715.415410][ T2625] usb 2-1: Manufacturer: syz [ 2715.461696][ T6659] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 2715.545056][ T2625] usb 2-1: SerialNumber: syz [ 2715.560184][ T2625] usb 2-1: config 0 descriptor?? [ 2715.990837][ T6659] usb 4-1: config 0 has no interfaces? [ 2716.027057][ T6659] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2716.113488][ T6659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2716.154818][ T6659] usb 4-1: Product: syz [ 2716.173068][ T6659] usb 4-1: Manufacturer: syz [ 2716.191883][ T6659] usb 4-1: SerialNumber: syz [ 2716.225118][T10494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2716.247639][T10494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2716.272512][ T6659] usb 4-1: config 0 descriptor?? [ 2717.966939][T25661] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2718.079520][T25661] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2718.152409][T25661] usb 7-1: can't read configurations, error -71 [ 2718.186854][T25661] usb usb7-port1: attempt power cycle [ 2718.700699][ T2625] usb 2-1: USB disconnect, device number 93 [ 2719.270313][T10541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2719.561296][ T2625] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2719.753264][ T2625] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2719.824587][ T2625] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2719.839208][ T2625] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2719.866993][ T7571] usb 4-1: USB disconnect, device number 68 [ 2719.928136][ T2625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2719.978327][ T2625] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2720.044444][ T2625] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2720.120907][ T4618] udevd[4618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2720.247557][T10541] vlan2: entered promiscuous mode [ 2721.485264][T10565] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10301'. [ 2722.904677][ T2625] usb 2-1: USB disconnect, device number 94 [ 2723.625573][T10581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2725.390777][T10608] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2726.177250][T10614] netlink: 'syz.1.10311': attribute type 13 has an invalid length. [ 2726.191882][T10614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2726.451506][T25661] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2726.611725][T25661] usb 4-1: Using ep0 maxpacket: 16 [ 2726.619741][T25661] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 2726.632538][T25661] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2726.657390][T25661] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 2726.673997][T25661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2726.685453][T25661] usb 4-1: Product: syz [ 2726.689801][T25661] usb 4-1: Manufacturer: syz [ 2726.695019][T25661] usb 4-1: SerialNumber: syz [ 2726.716386][T25661] usb 4-1: config 0 descriptor?? [ 2726.727476][T25661] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 2727.469822][T25661] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 2727.493495][T25661] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2729.041256][T25661] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2729.229983][ T2625] usb 4-1: USB disconnect, device number 69 [ 2729.357240][T10646] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2729.447094][T25661] usb 3-1: Using ep0 maxpacket: 16 [ 2729.525590][T10642] netlink: 216 bytes leftover after parsing attributes in process `syz.2.10316'. [ 2729.971898][ T6659] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2730.971583][ T6659] usb 4-1: config 0 has no interfaces? [ 2731.116855][ T6659] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2731.126884][ T6659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.135417][ T6659] usb 4-1: Product: syz [ 2731.139838][ T6659] usb 4-1: Manufacturer: syz [ 2731.144862][ T6659] usb 4-1: SerialNumber: syz [ 2731.152368][ T6659] usb 4-1: config 0 descriptor?? [ 2731.461583][ T6659] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 2731.713266][ T6659] usb 7-1: config 0 has no interfaces? [ 2731.772855][ T6659] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2731.796963][ T6659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.826061][ T6659] usb 7-1: Product: syz [ 2731.836790][ T6659] usb 7-1: Manufacturer: syz [ 2731.848244][ T6659] usb 7-1: SerialNumber: syz [ 2731.874764][ T6659] usb 7-1: config 0 descriptor?? [ 2732.962496][T10669] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2733.753221][ T2625] usb 4-1: USB disconnect, device number 70 [ 2734.524807][T25661] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2734.679529][T25661] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 2734.679563][T25661] usb 3-1: chopping to 0 config(s) [ 2734.679593][T25661] usb 3-1: can't read configurations, error -32 [ 2735.381491][T25661] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2735.527205][T25661] usb 3-1: device descriptor read/64, error -32 [ 2735.661648][T25661] usb usb3-port1: attempt power cycle [ 2735.764763][ T6659] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2736.041678][T25661] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2736.063101][T25661] usb 3-1: device descriptor read/8, error -32 [ 2736.255086][ T6659] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2736.265849][ T6659] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2736.311243][T25661] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2736.332326][T25661] usb 3-1: device descriptor read/8, error -32 [ 2736.437020][ T6659] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2736.481835][T25661] usb usb3-port1: unable to enumerate USB device [ 2736.489958][ T6659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2736.538565][ T6659] usb 2-1: SerialNumber: syz [ 2737.192798][ T7571] usb 7-1: USB disconnect, device number 36 [ 2737.763326][T25661] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2737.985062][T25661] usb 3-1: config 0 has no interfaces? [ 2738.042909][T25661] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2738.098228][T25661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2738.116828][T25661] usb 3-1: Product: syz [ 2738.126208][T25661] usb 3-1: Manufacturer: syz [ 2738.136556][T25661] usb 3-1: SerialNumber: syz [ 2738.189011][T25661] usb 3-1: config 0 descriptor?? [ 2738.983969][T25661] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2740.302500][T10738] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10328'. [ 2740.577430][ T2625] hid-generic 0101:0009:007F.0076: item fetching failed at offset 0/2 [ 2740.602902][ T2625] hid-generic 0101:0009:007F.0076: probe with driver hid-generic failed with error -22 [ 2740.996948][ T2625] usb 3-1: USB disconnect, device number 84 [ 2741.641836][ T6659] usb 2-1: can't set config #1, error -110 [ 2742.631329][ T30] audit: type=1326 audit(1747173363.501:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.7.10333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9f8e969 code=0x7ffc0000 [ 2742.665940][ T30] audit: type=1326 audit(1747173363.501:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.7.10333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9f8e969 code=0x7ffc0000 [ 2742.744996][ T30] audit: type=1326 audit(1747173363.501:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.7.10333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f20e9f8e969 code=0x7ffc0000 [ 2742.833644][ T30] audit: type=1326 audit(1747173363.501:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.7.10333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9f8e969 code=0x7ffc0000 [ 2742.894207][ T30] audit: type=1326 audit(1747173363.501:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.7.10333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9f8e969 code=0x7ffc0000 [ 2742.954036][ T30] audit: type=1326 audit(1747173363.501:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.7.10333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f20e9f8e969 code=0x7ffc0000 [ 2743.007917][ T30] audit: type=1326 audit(1747173363.501:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.7.10333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9f8e969 code=0x7ffc0000 [ 2743.093229][ T30] audit: type=1326 audit(1747173363.501:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.7.10333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e9f8e969 code=0x7ffc0000 [ 2743.163411][ T30] audit: type=1326 audit(1747173363.501:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.7.10333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f20e9f8e969 code=0x7ffc0000 [ 2744.765901][T10769] fuse: Unknown parameter 'al' [ 2745.334084][T25661] usb 4-1: device descriptor read/all, error -110 [ 2745.541404][T25661] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2745.691491][T25661] usb 4-1: device descriptor read/64, error -32 [ 2745.802299][T25661] usb usb4-port1: attempt power cycle [ 2746.156396][T25661] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2746.189524][T25661] usb 4-1: device descriptor read/8, error -32 [ 2746.367461][ T2625] usb 2-1: USB disconnect, device number 95 [ 2746.401355][T25661] raw-gadget.0 gadget.3: failed to queue resume event [ 2746.461300][T25661] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2746.689783][T10782] netlink: 'syz.2.10337': attribute type 11 has an invalid length. [ 2746.741494][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 2746.748707][T25661] usb 4-1: device descriptor read/8, error -32 [ 2746.861736][T25661] raw-gadget.0 gadget.3: failed to queue suspend event [ 2746.974899][T25661] usb usb4-port1: unable to enumerate USB device [ 2747.512491][T10791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2747.764699][T10800] netlink: 'syz.2.10341': attribute type 29 has an invalid length. [ 2747.772881][ T7571] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2747.861297][ T2625] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2748.021383][ T2625] usb 2-1: Using ep0 maxpacket: 32 [ 2748.397195][ T2625] usb 2-1: config index 0 descriptor too short (expected 65316, got 36) [ 2748.436387][ T2625] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2748.454170][ T7571] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2748.480312][ T7571] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2748.498599][ T2625] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2748.542329][T10802] netlink: 'syz.2.10341': attribute type 29 has an invalid length. [ 2748.559202][ T2625] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2748.576060][ T7571] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2748.610888][ T2625] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2748.627809][ T7571] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2748.636619][T10803] netlink: 'syz.2.10341': attribute type 29 has an invalid length. [ 2748.665456][ T2625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2748.707022][ T7571] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2748.816864][ T7571] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2748.856428][T10797] udevd[10797]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2749.038047][T10791] 8021q: VLANs not supported on bond0 [ 2750.124026][T10731] raw-gadget.0 gadget.3: failed to queue disconnect event [ 2750.641597][ T2625] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2750.817201][ T2625] usb 4-1: config 0 has no interfaces? [ 2750.944388][ T2625] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2751.016078][ T2625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.185434][ T2625] usb 4-1: Product: syz [ 2751.201314][ T2625] usb 4-1: Manufacturer: syz [ 2751.234089][ T2625] usb 4-1: SerialNumber: syz [ 2751.259605][ T2625] usb 4-1: config 0 descriptor?? [ 2751.280181][T10795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2751.320926][T25661] usb 2-1: USB disconnect, device number 96 [ 2751.620258][T10808] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.10342'. [ 2751.962289][T10827] netlink: 'syz.2.10344': attribute type 13 has an invalid length. [ 2752.110805][T10827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2752.334676][T10827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2752.899131][ T6659] usb 7-1: USB disconnect, device number 37 [ 2753.561275][ T6659] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2753.731502][ T6659] usb 7-1: Using ep0 maxpacket: 16 [ 2754.744957][ T2625] usb 4-1: USB disconnect, device number 75 [ 2755.381642][ T2625] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2755.789253][T10867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2755.853545][ T2625] usb 4-1: config 0 has no interfaces? [ 2755.894671][ T7571] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2756.371501][ T7571] usb 3-1: config 0 has no interfaces? [ 2756.422361][ T7571] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2756.448300][ T2625] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2756.465478][ T7571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2756.476661][ T2625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2756.511511][ T7571] usb 3-1: Product: syz [ 2756.531168][ T2625] usb 4-1: Product: syz [ 2756.535389][ T2625] usb 4-1: Manufacturer: syz [ 2756.543190][ T7571] usb 3-1: Manufacturer: syz [ 2756.566394][ T7571] usb 3-1: SerialNumber: syz [ 2756.571429][ T2625] usb 4-1: SerialNumber: syz [ 2756.598959][ T7571] usb 3-1: config 0 descriptor?? [ 2756.607641][ T2625] usb 4-1: config 0 descriptor?? [ 2757.666458][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2757.711789][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2757.855412][ T6659] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2757.892235][ T6659] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2757.899872][ T6659] usb 7-1: can't read configurations, error -71 [ 2758.271297][ T2631] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2758.838375][ T2631] usb 2-1: config 0 has no interfaces? [ 2758.846789][ T2631] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2758.856834][ T2631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2758.865182][ T2631] usb 2-1: Product: syz [ 2758.870646][ T2631] usb 2-1: Manufacturer: syz [ 2758.875831][ T2631] usb 2-1: SerialNumber: syz [ 2758.913113][ T2631] usb 2-1: config 0 descriptor?? [ 2759.280216][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2759.370194][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2759.581361][ T7571] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2759.736520][ T6659] usb 4-1: USB disconnect, device number 76 [ 2759.749567][ T2625] usb 3-1: USB disconnect, device number 85 [ 2759.797522][ T7571] usb 7-1: Using ep0 maxpacket: 32 [ 2760.033994][ T7571] usb 7-1: config index 0 descriptor too short (expected 65316, got 36) [ 2760.117906][ T7571] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2760.152918][ T7571] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2760.253712][ T7571] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2760.418607][ T7571] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2760.439283][ T7571] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2761.735418][ T2631] usb 2-1: USB disconnect, device number 97 [ 2762.910739][T10923] netlink: 'syz.2.10363': attribute type 1 has an invalid length. [ 2762.998194][T10887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2763.034734][ T7571] usb 7-1: USB disconnect, device number 40 [ 2763.259655][T10923] bond4: entered promiscuous mode [ 2763.265194][T10923] bond4: entered allmulticast mode [ 2765.641224][ T7571] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2765.915634][ T7571] usb 4-1: config 0 has no interfaces? [ 2766.094728][ T7571] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2766.167803][ T7571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2766.241347][ T2631] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2766.334921][ T7571] usb 4-1: Product: syz [ 2766.371895][ T7571] usb 4-1: Manufacturer: syz [ 2766.376685][ T7571] usb 4-1: SerialNumber: syz [ 2766.398477][ T7571] usb 4-1: config 0 descriptor?? [ 2766.923737][T10949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2766.978673][T10949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2767.201325][T10970] netlink: 'syz.6.10372': attribute type 11 has an invalid length. [ 2767.233265][ T2631] usb 2-1: config 0 has no interfaces? [ 2767.250617][ T2631] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2767.261641][ T2631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2767.269671][ T2631] usb 2-1: Product: syz [ 2767.346595][ T2631] usb 2-1: Manufacturer: syz [ 2767.437831][ T2631] usb 2-1: SerialNumber: syz [ 2767.604246][ T2631] usb 2-1: config 0 descriptor?? [ 2768.287367][T10949] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 2768.784138][ T2625] usb 4-1: USB disconnect, device number 77 [ 2769.391523][ T2631] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2769.707349][ T2631] usb 4-1: Using ep0 maxpacket: 32 [ 2769.743878][ T2631] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 2769.812942][ T2631] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2769.897327][ T2631] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2769.987497][ T2631] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2770.048644][ T2631] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2770.110927][ T2631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2770.507038][ T2625] usb 2-1: USB disconnect, device number 98 [ 2771.053272][T11011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10378'. [ 2771.957436][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10382'. [ 2773.080774][T10994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2773.145487][ T2625] usb 4-1: USB disconnect, device number 78 [ 2774.609239][T11051] vivid-000: disconnect [ 2774.701681][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10387'. [ 2774.853431][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.866250][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.436264][T11061] xt_cgroup: path and classid specified [ 2775.461328][ T2625] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 2775.556502][T11048] vivid-000: reconnect [ 2775.643936][ T2625] usb 7-1: config 0 has no interfaces? [ 2775.656237][ T2625] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2775.676370][ T2625] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2775.790881][ T2625] usb 7-1: Product: syz [ 2775.818238][ T2625] usb 7-1: Manufacturer: syz [ 2775.857109][ T2625] usb 7-1: SerialNumber: syz [ 2775.915688][ T2625] usb 7-1: config 0 descriptor?? [ 2777.280222][T11076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2779.019837][ T2625] usb 7-1: USB disconnect, device number 41 [ 2779.053690][T11090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2779.361252][ T7571] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2779.391255][T25648] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2779.551420][T25648] usb 4-1: Using ep0 maxpacket: 32 [ 2779.637655][T25648] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 2779.747180][T25648] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 2779.866002][T25648] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2780.056307][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10399'. [ 2780.111802][T25648] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 2780.131192][T25648] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2780.150725][T25648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.186632][ T7571] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2780.227954][ T7571] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2780.305419][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10399'. [ 2780.324174][ T7571] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2780.373524][ T7571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.499695][ T7571] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2780.700458][ T7571] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2780.735964][T10797] udevd[10797]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2781.898615][T11090] vlan2: entered promiscuous mode [ 2782.557921][T11091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2782.606509][ T7571] usb 4-1: USB disconnect, device number 79 [ 2783.201691][ T6659] usb 2-1: USB disconnect, device number 99 [ 2783.451336][ T2631] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2783.641267][ T2631] usb 4-1: Using ep0 maxpacket: 16 [ 2783.921272][ T7571] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2784.632257][ T7571] usb 2-1: config 0 has no interfaces? [ 2784.696419][ T7571] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2784.742174][ T7571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2784.787191][ T7571] usb 2-1: Product: syz [ 2784.799828][ T7571] usb 2-1: Manufacturer: syz [ 2784.826762][ T7571] usb 2-1: SerialNumber: syz [ 2784.862753][ T7571] usb 2-1: config 0 descriptor?? [ 2785.919516][T11149] Invalid logical block size (-1) [ 2786.681297][ T7571] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 2786.750873][ T2631] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2786.810514][ T2631] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2786.829370][ T2631] usb 4-1: can't read configurations, error -71 [ 2786.838052][ T7571] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 2786.853615][ T7571] usb 7-1: config 0 has no interface number 0 [ 2786.880901][ T7571] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2786.994860][ T7571] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2787.037745][ T7571] usb 7-1: config 0 interface 113 has no altsetting 0 [ 2787.057216][ T7571] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2787.071230][ T7571] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2787.099126][ T7571] usb 7-1: Product: syz [ 2787.123391][ T7571] usb 7-1: Manufacturer: syz [ 2787.230399][ T7571] usb 7-1: SerialNumber: syz [ 2787.346542][ T7571] usb 7-1: config 0 descriptor?? [ 2787.406700][ C0] usb 7-1: NFC: Urb failure (status -71) [ 2787.433388][ T7571] usb 7-1: NFC: Unable to get FW version [ 2787.463214][ T7571] pn533_usb 7-1:0.113: probe with driver pn533_usb failed with error -90 [ 2787.649068][ T7571] usb 7-1: USB disconnect, device number 42 [ 2787.707096][T25648] usb 2-1: USB disconnect, device number 100 [ 2788.281266][T25648] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2788.766574][T25648] usb 2-1: too many configurations: 154, using maximum allowed: 8 [ 2788.825692][T25648] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2788.907189][T25648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2788.929556][T25648] usb 2-1: Product: syz [ 2788.946534][T25648] usb 2-1: Manufacturer: syz [ 2788.958961][T25648] usb 2-1: SerialNumber: syz [ 2789.178682][T25648] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2789.909038][ T7571] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2791.001517][ T7571] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2791.036564][ T7571] ath9k_htc: Failed to initialize the device [ 2791.182277][ T7571] usb 2-1: ath9k_htc: USB layer deinitialized [ 2791.741267][T25648] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2791.903860][T25648] usb 4-1: config 0 has no interfaces? [ 2791.916612][T25648] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2791.926626][T25648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2791.950042][T25648] usb 4-1: Product: syz [ 2791.986650][T25648] usb 4-1: Manufacturer: syz [ 2792.005933][T25648] usb 4-1: SerialNumber: syz [ 2792.074303][T25648] usb 4-1: config 0 descriptor?? [ 2792.150934][ T2631] usb 2-1: USB disconnect, device number 101 [ 2792.689894][T11205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2792.991304][T25648] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2793.095477][ T30] audit: type=1326 audit(1747173414.011:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609b8e969 code=0x7ffc0000 [ 2793.169663][ T30] audit: type=1326 audit(1747173414.011:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609b8e969 code=0x7ffc0000 [ 2793.249603][T25648] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2793.280734][ T30] audit: type=1326 audit(1747173414.011:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff609b8e969 code=0x7ffc0000 [ 2793.323559][T25648] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2793.341597][T25648] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2793.358271][ T30] audit: type=1326 audit(1747173414.011:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609b8e969 code=0x7ffc0000 [ 2793.421025][T25648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2793.526355][ T30] audit: type=1326 audit(1747173414.011:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609b8e969 code=0x7ffc0000 [ 2793.743998][ T30] audit: type=1326 audit(1747173414.041:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff609b8e969 code=0x7ffc0000 [ 2793.993342][ T30] audit: type=1326 audit(1747173414.041:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609b8e969 code=0x7ffc0000 [ 2794.161567][ T30] audit: type=1326 audit(1747173414.041:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609b8e969 code=0x7ffc0000 [ 2794.312801][ T30] audit: type=1326 audit(1747173414.061:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff609b8e969 code=0x7ffc0000 [ 2794.489025][ T30] audit: type=1326 audit(1747173414.061:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.10419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609b8e969 code=0x7ffc0000 [ 2795.814256][ T7571] usb 4-1: USB disconnect, device number 82 [ 2796.247956][T25648] usb 3-1: can't set config #27, error -71 [ 2796.261609][T25648] usb 3-1: USB disconnect, device number 86 [ 2796.852277][ T2631] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2797.283944][ T2631] usb 3-1: Using ep0 maxpacket: 16 [ 2797.400869][ T2631] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2797.415875][T25648] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 2797.787345][ T2631] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2797.823327][T25648] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2797.835354][T25648] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2797.858490][T25648] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2797.902080][T25648] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2797.946199][T25648] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2798.030863][T25648] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2798.097533][T25648] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2798.163510][ T2631] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 2798.261450][ T2631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2798.322602][ T2631] usb 3-1: Product: syz [ 2798.326817][ T2631] usb 3-1: Manufacturer: syz [ 2798.379624][ T2631] usb 3-1: SerialNumber: syz [ 2798.390558][T11250] netlink: 188 bytes leftover after parsing attributes in process `syz.6.10425'. [ 2798.815823][T11271] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2801.238690][ T6659] usb 7-1: USB disconnect, device number 43 [ 2801.273985][T11249] delete_channel: no stack [ 2801.631580][T25648] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2801.833732][ T2631] usbhid 3-1:1.0: can't add hid device: -71 [ 2801.896012][ T2631] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 2801.989986][ T2631] usb 3-1: USB disconnect, device number 87 [ 2802.012199][T25648] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2802.074571][T25648] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2802.150811][T25648] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2802.170009][T25648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2802.275198][T25648] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2802.345178][T11306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2802.579846][T25648] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2802.741171][ T2631] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2803.029835][ T2631] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2803.161384][ T2631] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2803.228666][ T2631] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2803.281348][ T2631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2803.613266][ T2631] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2803.660066][ T2631] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2803.739255][T10797] udevd[10797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2804.161873][T11306] vlan0: entered promiscuous mode [ 2804.867798][T25648] usb 4-1: USB disconnect, device number 83 [ 2805.461217][T25648] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2805.481934][ T2631] usb 3-1: USB disconnect, device number 88 [ 2805.853518][T11337] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2806.209001][T25648] usb 4-1: config 0 has no interfaces? [ 2806.584143][T25648] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2806.599141][T25648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2806.641754][T25648] usb 4-1: Product: syz [ 2806.646009][T25648] usb 4-1: Manufacturer: syz [ 2806.650789][T25648] usb 4-1: SerialNumber: syz [ 2806.659373][T25648] usb 4-1: config 0 descriptor?? [ 2807.016086][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2807.034254][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2807.242324][ T2631] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2807.404425][ T2631] usb 3-1: Using ep0 maxpacket: 16 [ 2807.413582][ T2631] usb 3-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2807.491355][ T2631] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2807.508656][ T2631] usb 3-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 2807.535467][ T2631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2807.556725][ T2631] usb 3-1: config 0 descriptor?? [ 2807.997889][ T2631] logitech 0003:046D:C219.0077: unknown main item tag 0x2 [ 2808.019448][ T2631] logitech 0003:046D:C219.0077: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.2-1/input0 [ 2808.070936][ T2631] logitech 0003:046D:C219.0077: no inputs found [ 2808.100563][T11363] vivid-000: disconnect [ 2808.253331][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2808.272446][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2808.316656][T11349] RDS: rds_bind could not find a transport for 5300::c000:0:20:0, load rds_tcp or rds_rdma? [ 2808.520223][T11352] vivid-000: reconnect [ 2808.611489][ T2631] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2809.201343][ T2631] usb 2-1: config 0 has no interfaces? [ 2809.394173][T25661] usb 4-1: USB disconnect, device number 84 [ 2810.153015][T25661] usb 3-1: USB disconnect, device number 89 [ 2810.222202][ T2631] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2810.306305][ T2631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2810.374767][ T2631] usb 2-1: Product: syz [ 2810.385985][ T2631] usb 2-1: Manufacturer: syz [ 2810.398363][ T2631] usb 2-1: SerialNumber: syz [ 2810.415854][ T2631] usb 2-1: config 0 descriptor?? [ 2811.030378][T11389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2811.040963][T11389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2811.665946][T11399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2812.161272][ T2631] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 2812.884070][ T2631] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2812.915744][ T2631] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2812.980854][ T2631] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2813.011719][ T2631] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2813.107286][T25648] usb 2-1: USB disconnect, device number 102 [ 2813.236488][ T2631] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2813.350791][ T30] kauditd_printk_skb: 360 callbacks suppressed [ 2813.350812][ T30] audit: type=1800 audit(1747173434.261:5621): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10451" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 2813.405531][ T2631] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2814.015732][T11399] 8021q: VLANs not supported on bond0 [ 2815.381254][ T2631] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2815.563012][ T2631] usb 4-1: Using ep0 maxpacket: 32 [ 2815.572818][ T2631] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 2815.611272][ T2631] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2815.665995][ T2631] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2815.717301][ T2631] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2815.736272][T25661] usb 7-1: USB disconnect, device number 44 [ 2815.795182][ T2631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2815.848806][ T2631] usb 4-1: Product: syz [ 2815.857302][ T2631] usb 4-1: Manufacturer: ꂩă豂㷨ꔅ橋靑蠀挵⪰៭쳥ﾐ嵮家雩ꍄ䕡ᬷ푭삲犀彃誹⥄巍﵄ [ 2815.875089][ T2631] usb 4-1: SerialNumber: syz [ 2815.886565][T11429] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2816.031210][T25648] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2816.166378][ T2631] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 2816.186624][ T2631] usb 4-1: USB disconnect, device number 85 [ 2816.325426][T25648] usb 3-1: config 0 has no interfaces? [ 2816.349643][T25648] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2816.368725][T25648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2816.385588][T25648] usb 3-1: Product: syz [ 2816.394991][T25648] usb 3-1: Manufacturer: syz [ 2816.399823][T25648] usb 3-1: SerialNumber: syz [ 2816.524789][T25648] usb 3-1: config 0 descriptor?? [ 2816.624754][T11443] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10457'. [ 2816.908795][T11448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2817.099543][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2817.129930][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2817.143892][T11455] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10461'. [ 2817.531285][T25648] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2817.805201][T25648] usb 4-1: Using ep0 maxpacket: 32 [ 2817.842139][T25648] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 2817.858987][T25648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2817.892833][T25648] usb 4-1: config 0 descriptor?? [ 2817.906761][T25648] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input141 [ 2819.236326][ T5184] bcm5974 4-1:0.0: could not read from device [ 2819.488512][T25648] usb 4-1: USB disconnect, device number 86 [ 2820.152801][T25661] usb 3-1: USB disconnect, device number 90 [ 2821.097334][T11485] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 2821.917343][T25648] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2822.686769][T25648] usb 3-1: config 0 has no interfaces? [ 2823.044433][T25648] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2823.082977][T25648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2823.165275][T25648] usb 3-1: Product: syz [ 2823.169527][T25648] usb 3-1: Manufacturer: syz [ 2823.240806][T25648] usb 3-1: SerialNumber: syz [ 2823.276930][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10469'. [ 2823.301939][T25648] usb 3-1: config 0 descriptor?? [ 2823.350722][T11506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2824.458622][T11513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2826.305617][T11526] netlink: 468 bytes leftover after parsing attributes in process `syz.6.10473'. [ 2826.921615][T25648] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2827.193593][T25648] usb 2-1: config 0 has no interfaces? [ 2827.242151][T25648] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2827.302919][T25648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2827.352257][T25648] usb 2-1: Product: syz [ 2827.372622][T25648] usb 2-1: Manufacturer: syz [ 2827.401815][T25648] usb 2-1: SerialNumber: syz [ 2827.450675][T25648] usb 2-1: config 0 descriptor?? [ 2827.740578][T11531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2827.763183][T11531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2827.947406][T25648] usb 3-1: USB disconnect, device number 91 [ 2831.580580][T11570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10479'. [ 2831.671567][ T2631] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 2833.133842][T11572] netlink: 'syz.2.10478': attribute type 20 has an invalid length. [ 2833.621610][T25661] usb 2-1: USB disconnect, device number 103 [ 2834.111216][ T7571] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2834.361334][T25648] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2834.547361][T25648] usb 4-1: config 0 has no interfaces? [ 2834.573157][T11565] delete_channel: no stack [ 2834.639490][T25648] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2834.649091][T25648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2834.657340][T25648] usb 4-1: Product: syz [ 2834.662265][T25648] usb 4-1: Manufacturer: syz [ 2834.666904][T25648] usb 4-1: SerialNumber: syz [ 2834.677076][T25648] usb 4-1: config 0 descriptor?? [ 2834.942020][ T7571] usb 3-1: config 0 has no interfaces? [ 2835.047074][ T7571] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2835.439738][ T7571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2835.736880][ T7571] usb 3-1: Product: syz [ 2835.745053][ T7571] usb 3-1: Manufacturer: syz [ 2835.749741][ T7571] usb 3-1: SerialNumber: syz [ 2835.751530][ T2631] usb 7-1: device descriptor read/64, error -71 [ 2835.886895][ T7571] usb 3-1: config 0 descriptor?? [ 2836.013443][ T2631] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2836.225512][ T2631] usb 7-1: config 0 has no interfaces? [ 2836.298069][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.308265][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.317881][ T2631] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2836.365989][ T2631] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2836.409754][ T2631] usb 7-1: Product: syz [ 2836.430055][ T2631] usb 7-1: Manufacturer: syz [ 2836.447561][ T2631] usb 7-1: SerialNumber: syz [ 2836.507105][ T2631] usb 7-1: config 0 descriptor?? [ 2836.963959][T11602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2837.013233][ T7571] usb 3-1: can't set config #0, error -71 [ 2837.054218][ T7571] usb 3-1: USB disconnect, device number 92 [ 2837.541531][ T7571] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2837.582002][T11596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2837.635467][T11596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2837.807437][ T2631] usb 4-1: USB disconnect, device number 87 [ 2837.854605][ T7571] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2838.009169][ T7571] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2838.054204][T11613] xt_TCPMSS: Only works on TCP SYN packets [ 2838.070159][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10487'. [ 2838.091680][ T7571] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2838.184629][ T7571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2838.455613][ T7571] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2838.591268][ T6659] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 2838.593959][ T7571] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2838.731960][T11602] vlan0: entered promiscuous mode [ 2838.752989][ T6659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2838.775770][ T6659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2838.811281][ T6659] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2838.864049][ T6659] usb 4-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 2838.897224][ T6659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2839.060094][ T6659] usb 4-1: config 0 descriptor?? [ 2839.532475][ T6659] usbhid 4-1:0.0: can't add hid device: -71 [ 2839.545301][ T6659] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2839.622631][ T6659] usb 4-1: USB disconnect, device number 88 [ 2839.887547][ T6659] usb 7-1: USB disconnect, device number 46 [ 2840.497082][ T6659] usb 3-1: USB disconnect, device number 93 [ 2840.870095][T11632] vlan0: entered promiscuous mode [ 2840.880389][T11632] netlink: 'syz.6.10491': attribute type 13 has an invalid length. [ 2841.011255][T11632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2841.035446][T11632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2841.081262][T25661] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2841.156396][ T2631] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2841.191537][ T6659] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2841.672995][ T53] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2841.849298][ T2631] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2842.693262][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2842.746880][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2842.775819][ T6659] usb 3-1: config 0 has no interfaces? [ 2843.482074][ T7571] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2843.498818][ T6659] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2843.648234][ T6659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2843.656443][ T6659] usb 3-1: Product: syz [ 2843.660769][ T6659] usb 3-1: Manufacturer: syz [ 2843.668435][ T6659] usb 3-1: SerialNumber: syz [ 2843.972527][ T6659] usb 3-1: config 0 descriptor?? [ 2843.982328][ T6659] usb 3-1: can't set config #0, error -71 [ 2844.033411][ T6659] usb 3-1: USB disconnect, device number 94 [ 2844.625347][T25661] usb 4-1: device descriptor read/all, error -71 [ 2844.721574][ T6659] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2844.801391][ T7571] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2844.965929][ T6659] usb 7-1: config 0 has no interfaces? [ 2845.300913][ T6659] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2845.310245][ T6659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.319348][ T6659] usb 7-1: Product: syz [ 2845.324488][ T6659] usb 7-1: Manufacturer: syz [ 2845.329223][ T6659] usb 7-1: SerialNumber: syz [ 2845.333974][T25661] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2845.365365][ T6659] usb 7-1: config 0 descriptor?? [ 2845.378523][ T7571] usb 2-1: config 0 has no interfaces? [ 2845.497613][ T7571] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2845.610066][ T7571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.636102][ T7571] usb 2-1: Product: syz [ 2845.649374][ T7571] usb 2-1: Manufacturer: syz [ 2845.659119][ T7571] usb 2-1: SerialNumber: syz [ 2845.676844][ T7571] usb 2-1: config 0 descriptor?? [ 2845.741528][T25661] usb 4-1: config 0 has no interfaces? [ 2845.807482][T25661] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2845.829121][T11672] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10499'. [ 2845.848635][T25661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.885302][T25661] usb 4-1: Product: syz [ 2845.900840][T25661] usb 4-1: Manufacturer: syz [ 2845.915472][T25661] usb 4-1: SerialNumber: syz [ 2845.939438][T25661] usb 4-1: config 0 descriptor?? [ 2846.367940][T11681] trusted_key: encrypted_key: insufficient parameters specified [ 2846.417091][T11681] batadv_slave_1: entered promiscuous mode [ 2846.460018][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2846.476620][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2846.635885][T11680] batadv_slave_1: left promiscuous mode [ 2846.761557][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2847.321889][T25648] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2847.825735][T25648] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2847.869677][T25648] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2847.884344][T25648] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2847.893797][T25648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2847.987337][T25648] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2848.028417][T25648] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2848.134463][T25648] usb 4-1: USB disconnect, device number 90 [ 2848.380260][T25661] usb 7-1: USB disconnect, device number 47 [ 2848.961978][T25661] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 2849.226142][T25661] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2849.531001][T25661] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2849.553143][T25661] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2849.581412][T25661] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2849.608791][T25661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2849.784419][T25661] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2849.946435][T11707] ptrace attach of "./syz-executor exec"[25686] was attempted by " \x07   @ \x09$ \x1b \x09 *>t \x09 8  [ 2849.952892][T11707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2850.044182][ C1] vkms_vblank_simulate: vblank timer overrun [ 2850.060805][T11707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2850.228594][T25661] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2850.959422][T11719] netlink: 'syz.3.10508': attribute type 13 has an invalid length. [ 2851.097796][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2851.126229][T11719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2852.090060][T25648] usb 3-1: USB disconnect, device number 95 [ 2852.111332][ T7571] usb 2-1: USB disconnect, device number 104 [ 2852.611804][T25661] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2852.701804][ T2631] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2852.868812][T25661] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2852.971785][T25661] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2852.986142][ T2631] usb 2-1: config 0 has no interfaces? [ 2853.050338][T25661] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2853.142160][T25661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2853.309861][ T2631] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2853.340110][T25661] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2853.363569][ T2631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2853.595514][ T2631] usb 2-1: Product: syz [ 2853.615111][ T2631] usb 2-1: Manufacturer: syz [ 2853.623168][T25661] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2853.636399][ T2631] usb 2-1: SerialNumber: syz [ 2853.659139][ T2631] usb 2-1: config 0 descriptor?? [ 2853.670288][T10797] udevd[10797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2854.419004][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10514'. [ 2854.559781][T11748] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 2854.841359][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2855.536733][ T2631] usb 3-1: USB disconnect, device number 96 [ 2855.617762][T25661] usb 7-1: USB disconnect, device number 48 [ 2856.855290][ T7571] usb 2-1: USB disconnect, device number 105 [ 2857.234581][T11774] tipc: Disabling bearer [ 2858.891250][ T7571] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2858.936898][T11796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2859.156986][ T7571] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2859.167765][ T7571] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2859.181187][ T7571] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2859.190325][ T7571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2859.351690][T11801] i2c i2c-0: Invalid block write size 34 [ 2859.470560][ T7571] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2859.576744][ T7571] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2859.653482][T25648] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 2859.733268][T11805] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2859.841611][T25648] usb 7-1: Using ep0 maxpacket: 16 [ 2859.876255][T25648] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 2859.902623][T11791] vlan0: entered promiscuous mode [ 2859.925743][T25648] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2859.980437][T25648] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 2860.067164][T25648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2860.113177][T25648] usb 7-1: Product: syz [ 2860.125028][T25648] usb 7-1: Manufacturer: syz [ 2860.146016][T25648] usb 7-1: SerialNumber: syz [ 2860.179198][T25648] usb 7-1: config 0 descriptor?? [ 2860.525567][T25648] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 2860.549687][ C0] usb 7-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 2860.560363][T25648] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 2860.581299][T25661] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2861.069265][T25661] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2861.201199][T25661] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2861.270735][T25661] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2861.296905][T25661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2861.938579][T25661] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2862.348552][T25648] usb 3-1: USB disconnect, device number 97 [ 2862.403828][T25661] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2862.519240][T11805] vlan2: entered promiscuous mode [ 2863.484711][T25661] usb 7-1: USB disconnect, device number 49 [ 2864.572658][ T2631] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2864.758571][ T2631] usb 3-1: config 0 has no interfaces? [ 2864.774650][ T2631] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2864.811116][ T2631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2864.839791][ T2631] usb 3-1: Product: syz [ 2864.853108][ T2631] usb 3-1: Manufacturer: syz [ 2864.885433][ T2631] usb 3-1: SerialNumber: syz [ 2864.909207][ T2631] usb 3-1: config 0 descriptor?? [ 2865.879567][T11863] delete_channel: no stack [ 2866.232053][ T2631] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2866.285151][T25661] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2866.304735][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 2866.451312][T25661] usb 7-1: device descriptor read/64, error -32 [ 2866.485872][ T2631] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2866.577555][ T2631] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2866.603126][ T2631] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2866.634129][ T2631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2866.721611][T25661] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2866.771493][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 2866.826154][T11863] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2866.863290][ T2631] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2866.903350][T25661] usb 7-1: device descriptor read/64, error -32 [ 2866.945337][T11872] hsr0: entered promiscuous mode [ 2866.946636][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10538'. [ 2866.994018][T11872] hsr_slave_0: left promiscuous mode [ 2867.025960][T25661] usb usb7-port1: attempt power cycle [ 2867.097074][T11872] hsr0 (unregistering): left promiscuous mode [ 2867.156936][T11863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2867.160488][T11863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2867.361179][T25661] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2867.381367][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 2867.381491][T25661] usb 7-1: device descriptor read/8, error -32 [ 2867.522006][T25661] raw-gadget.2 gadget.6: failed to queue suspend event [ 2867.541674][T25661] raw-gadget.2 gadget.6: failed to queue reset event [ 2867.631703][T25661] raw-gadget.2 gadget.6: failed to queue resume event [ 2867.701540][T25661] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2867.721463][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 2867.730440][T25661] usb 7-1: device descriptor read/8, error -32 [ 2867.841370][T25661] raw-gadget.2 gadget.6: failed to queue suspend event [ 2867.855818][T25661] usb usb7-port1: unable to enumerate USB device [ 2867.937368][T25648] usb 3-1: USB disconnect, device number 98 [ 2868.203190][T11877] ptrace attach of "./syz-executor exec"[24636] was attempted by "./syz-executor exec"[11877] [ 2869.044063][T25661] usb 4-1: USB disconnect, device number 91 [ 2869.819597][T25661] usb 2-1: USB disconnect, device number 106 [ 2870.841274][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2872.327939][T11906] netlink: 'syz.7.10545': attribute type 13 has an invalid length. [ 2872.383919][T11906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2873.473746][ T30] audit: type=1400 audit(1747173494.351:5622): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620922F pid=11911 comm="syz.3.10547" [ 2873.493543][ C1] vkms_vblank_simulate: vblank timer overrun [ 2875.512645][T11943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2875.811439][ T7571] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2875.819531][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 2875.967153][ T7571] usb 2-1: device descriptor read/64, error -32 [ 2876.534315][ T7571] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2877.030929][ T7571] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2877.113758][ T7571] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2877.161613][T25661] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2877.203381][ T7571] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2877.226078][ T7571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.323944][ T7571] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2877.411175][T25661] usb 3-1: Using ep0 maxpacket: 16 [ 2877.597310][ T7571] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2877.948276][T11943] vlan2: entered promiscuous mode [ 2878.711559][ T6659] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2878.872967][ T6659] usb 4-1: config 0 has no interfaces? [ 2878.880940][ T6659] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2878.890940][ T6659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2878.910301][ T6659] usb 4-1: Product: syz [ 2878.923456][ T6659] usb 4-1: Manufacturer: syz [ 2878.936969][ T6659] usb 4-1: SerialNumber: syz [ 2878.945620][ T6659] usb 4-1: config 0 descriptor?? [ 2879.359937][T11972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.410907][T11972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2879.496192][ T6659] usb 2-1: USB disconnect, device number 108 [ 2880.008145][T25661] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2880.025928][T25661] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2880.087122][T25661] usb 3-1: can't read configurations, error -71 [ 2880.307812][T11992] bridge4: entered promiscuous mode [ 2880.463200][T25661] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2880.686779][T25661] usb 3-1: Using ep0 maxpacket: 32 [ 2880.750649][T25661] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 2880.769138][T25661] usb 3-1: config 0 has no interface number 0 [ 2880.783458][T25661] usb 3-1: config 0 interface 12 has no altsetting 0 [ 2880.798252][T25661] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2880.807992][T25661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2880.816420][T25661] usb 3-1: Product: syz [ 2880.820774][T25661] usb 3-1: Manufacturer: syz [ 2880.825554][T25661] usb 3-1: SerialNumber: syz [ 2880.832542][T25661] usb 3-1: config 0 descriptor?? [ 2881.267843][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10562'. [ 2881.362949][T25661] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2881.380976][T25661] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 2881.402363][T25661] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2881.410123][T25661] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 2881.428963][T25661] usb 3-1: USB disconnect, device number 100 [ 2881.701179][T25661] usb 4-1: USB disconnect, device number 92 [ 2887.088138][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10571'. [ 2887.122055][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10571'. [ 2887.181173][T12042] sctp: [Deprecated]: syz.6.10571 (pid 12042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2887.181173][T12042] Use struct sctp_sack_info instead [ 2887.854030][T12052] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10572'. [ 2887.877299][T12052] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2888.241240][ T7571] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2888.421230][ T7571] usb 4-1: Using ep0 maxpacket: 32 [ 2888.471466][ T7571] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 2888.481208][ T7571] usb 4-1: config 0 has no interface number 0 [ 2888.488309][ T7571] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2888.563660][ T7571] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2888.579482][ T7571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2888.591150][ T7571] usb 4-1: Product: syz [ 2888.596585][ T7571] usb 4-1: Manufacturer: syz [ 2888.606738][ T7571] usb 4-1: SerialNumber: syz [ 2888.654373][ T7571] usb 4-1: config 0 descriptor?? [ 2888.705523][ T7571] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2888.751543][ T7571] em28xx 4-1:0.132: Video interface 132 found: isoc [ 2889.307090][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10575'. [ 2889.461608][ T2625] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2889.763324][ T2625] usb 2-1: config 0 has no interfaces? [ 2889.775043][ T2625] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2889.798021][ T2625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2889.821545][ T2625] usb 2-1: Product: syz [ 2889.826226][ T2625] usb 2-1: Manufacturer: syz [ 2889.830899][ T2625] usb 2-1: SerialNumber: syz [ 2889.862677][ T2625] usb 2-1: config 0 descriptor?? [ 2889.873535][ T7571] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 2889.969991][ T7571] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2890.020770][ T7571] em28xx 4-1:0.132: board has no eeprom [ 2890.115276][ T7571] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2890.134367][ T7571] em28xx 4-1:0.132: analog set to isoc mode. [ 2890.163470][T25648] em28xx 4-1:0.132: Registering V4L2 extension [ 2890.234983][T12075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2890.284713][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 2890.303089][T12075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2890.330321][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 2890.369325][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 2890.385830][ T2625] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2890.406799][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 2890.475855][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 2890.489740][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 2890.509520][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 2890.537815][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 2890.581299][ T2625] usb 3-1: Using ep0 maxpacket: 8 [ 2890.615426][ T2625] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2890.654468][ T2625] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2890.686066][ T2625] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2890.699307][ T2625] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2890.699470][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 2890.724162][ T2625] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2890.734055][ T2625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2890.764880][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 2890.787109][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 2890.811352][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 2890.832311][T25648] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 2890.858195][ T7571] usb 4-1: USB disconnect, device number 93 [ 2890.888737][T25648] em28xx 4-1:0.132: Config register raw data: 0xfffffffb [ 2890.904396][ T7571] em28xx 4-1:0.132: Disconnecting em28xx [ 2890.921242][T25648] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 2891.079567][T25648] em28xx 4-1:0.132: No AC97 audio processor [ 2891.419148][T25648] usb 4-1: Decoder not found [ 2891.616371][T25648] em28xx 4-1:0.132: failed to create media graph [ 2891.635008][T25648] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 2891.728116][T25648] em28xx 4-1:0.132: Remote control support is not available for this card. [ 2891.747470][ T7571] em28xx 4-1:0.132: Closing input extension [ 2891.759272][T12096] ================================================================== [ 2891.767403][T12096] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 2891.774859][T12096] Read of size 8 at addr ffff888058240738 by task v4l_id/12096 [ 2891.782448][T12096] [ 2891.784913][T12096] CPU: 1 UID: 0 PID: 12096 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 2891.784943][T12096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2891.784966][T12096] Call Trace: [ 2891.784983][T12096] [ 2891.784994][T12096] dump_stack_lvl+0x189/0x250 [ 2891.785033][T12096] ? __virt_addr_valid+0x18c/0x540 [ 2891.785065][T12096] ? rcu_is_watching+0x15/0xb0 [ 2891.785087][T12096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2891.785119][T12096] ? rcu_is_watching+0x15/0xb0 [ 2891.785141][T12096] ? lock_release+0x4b/0x3e0 [ 2891.785176][T12096] ? __virt_addr_valid+0x18c/0x540 [ 2891.785206][T12096] ? __virt_addr_valid+0x469/0x540 [ 2891.785238][T12096] print_report+0xb4/0x290 [ 2891.785266][T12096] ? v4l2_fh_open+0xc7/0x430 [ 2891.785295][T12096] kasan_report+0x118/0x150 [ 2891.785327][T12096] ? v4l2_fh_open+0xc7/0x430 [ 2891.785360][T12096] v4l2_fh_open+0xc7/0x430 [ 2891.785389][T12096] ? __pfx___mutex_lock+0x10/0x10 [ 2891.785422][T12096] em28xx_v4l2_open+0x157/0x9a0 [ 2891.785457][T12096] v4l2_open+0x20f/0x360 [ 2891.785491][T12096] chrdev_open+0x4c9/0x5e0 [ 2891.785523][T12096] ? __pfx_chrdev_open+0x10/0x10 [ 2891.785557][T12096] ? __pfx_chrdev_open+0x10/0x10 [ 2891.785587][T12096] do_dentry_open+0xdf3/0x1970 [ 2891.785629][T12096] vfs_open+0x3b/0x340 [ 2891.785660][T12096] ? path_openat+0x2ecd/0x3830 [ 2891.785686][T12096] path_openat+0x2ee5/0x3830 [ 2891.785708][T12096] ? arch_stack_walk+0xfc/0x150 [ 2891.785755][T12096] ? __pfx_path_openat+0x10/0x10 [ 2891.785777][T12096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2891.785811][T12096] do_filp_open+0x1fa/0x410 [ 2891.785836][T12096] ? __pfx_do_filp_open+0x10/0x10 [ 2891.785871][T12096] ? _raw_spin_unlock+0x28/0x50 [ 2891.785895][T12096] ? alloc_fd+0x64c/0x6c0 [ 2891.785937][T12096] do_sys_openat2+0x121/0x1c0 [ 2891.785959][T12096] ? __pfx_do_sys_openat2+0x10/0x10 [ 2891.785980][T12096] ? exc_page_fault+0x68/0x110 [ 2891.786009][T12096] ? do_user_addr_fault+0xc8a/0x1390 [ 2891.786033][T12096] __x64_sys_openat+0x138/0x170 [ 2891.786068][T12096] do_syscall_64+0xf6/0x210 [ 2891.786098][T12096] ? clear_bhb_loop+0x60/0xb0 [ 2891.786123][T12096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2891.786145][T12096] RIP: 0033:0x7fa6698a7407 [ 2891.786171][T12096] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2891.786192][T12096] RSP: 002b:00007ffebc5cf260 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2891.786224][T12096] RAX: ffffffffffffffda RBX: 00007fa669f79880 RCX: 00007fa6698a7407 [ 2891.786242][T12096] RDX: 0000000000000000 RSI: 00007ffebc5cff1a RDI: ffffffffffffff9c [ 2891.786258][T12096] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2891.786271][T12096] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2891.786285][T12096] R13: 00007ffebc5cf4b0 R14: 00007fa66a0e0000 R15: 00005611d1dfa4d8 [ 2891.786311][T12096] [ 2891.786319][T12096] [ 2892.076237][T12096] Allocated by task 25648: [ 2892.080657][T12096] kasan_save_track+0x3e/0x80 [ 2892.085354][T12096] __kasan_kmalloc+0x93/0xb0 [ 2892.089958][T12096] __kmalloc_cache_noprof+0x230/0x3d0 [ 2892.095432][T12096] em28xx_v4l2_init+0x10b/0x2e70 [ 2892.100383][T12096] em28xx_init_extension+0x11d/0x1c0 [ 2892.105683][T12096] process_scheduled_works+0xade/0x17a0 [ 2892.111415][T12096] worker_thread+0x8a0/0xda0 [ 2892.116027][T12096] kthread+0x711/0x8a0 [ 2892.120104][T12096] ret_from_fork+0x4b/0x80 [ 2892.124527][T12096] ret_from_fork_asm+0x1a/0x30 [ 2892.129315][T12096] [ 2892.131655][T12096] Freed by task 25648: [ 2892.135730][T12096] kasan_save_track+0x3e/0x80 [ 2892.140416][T12096] kasan_save_free_info+0x46/0x50 [ 2892.145452][T12096] __kasan_slab_free+0x62/0x70 [ 2892.150245][T12096] kfree+0x193/0x440 [ 2892.154170][T12096] em28xx_v4l2_init+0x1683/0x2e70 [ 2892.159239][T12096] em28xx_init_extension+0x11d/0x1c0 [ 2892.164671][T12096] process_scheduled_works+0xade/0x17a0 [ 2892.170227][T12096] worker_thread+0x8a0/0xda0 [ 2892.174829][T12096] kthread+0x711/0x8a0 [ 2892.178918][T12096] ret_from_fork+0x4b/0x80 [ 2892.183342][T12096] ret_from_fork_asm+0x1a/0x30 [ 2892.188111][T12096] [ 2892.190439][T12096] The buggy address belongs to the object at ffff888058240000 [ 2892.190439][T12096] which belongs to the cache kmalloc-8k of size 8192 [ 2892.204518][T12096] The buggy address is located 1848 bytes inside of [ 2892.204518][T12096] freed 8192-byte region [ffff888058240000, ffff888058242000) [ 2892.218585][T12096] [ 2892.220927][T12096] The buggy address belongs to the physical page: [ 2892.227344][T12096] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58240 [ 2892.236119][T12096] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2892.244630][T12096] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2892.252194][T12096] page_type: f5(slab) [ 2892.256218][T12096] raw: 00fff00000000040 ffff88801a042280 ffffea000509e600 dead000000000006 [ 2892.264829][T12096] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2892.273435][T12096] head: 00fff00000000040 ffff88801a042280 ffffea000509e600 dead000000000006 [ 2892.282418][T12096] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2892.291116][T12096] head: 00fff00000000003 ffffea0001609001 00000000ffffffff 00000000ffffffff [ 2892.299813][T12096] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2892.308494][T12096] page dumped because: kasan: bad access detected [ 2892.314928][T12096] page_owner tracks the page as allocated [ 2892.320648][T12096] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15782, tgid 15782 (syz-executor), ts 554824812574, free_ts 554797451229 [ 2892.342372][T12096] post_alloc_hook+0x1d8/0x230 [ 2892.347156][T12096] get_page_from_freelist+0x21ce/0x22b0 [ 2892.352813][T12096] __alloc_frozen_pages_noprof+0x181/0x370 [ 2892.358737][T12096] alloc_pages_mpol+0x232/0x4a0 [ 2892.363628][T12096] allocate_slab+0x8a/0x3b0 [ 2892.368410][T12096] ___slab_alloc+0xbfc/0x1480 [ 2892.373108][T12096] __kvmalloc_node_noprof+0x411/0x5e0 [ 2892.378495][T12096] pfifo_fast_init+0x363/0x6b0 [ 2892.383706][T12096] qdisc_create_dflt+0x11f/0x470 [ 2892.388660][T12096] dev_activate+0x378/0x1150 [ 2892.393284][T12096] __dev_open+0x69c/0x880 [ 2892.397626][T12096] __dev_change_flags+0x1ea/0x6d0 [ 2892.402679][T12096] netif_change_flags+0x88/0x1a0 [ 2892.407627][T12096] do_setlink+0xcb9/0x40d0 [ 2892.412061][T12096] rtnl_newlink+0x160b/0x1c70 [ 2892.416761][T12096] rtnetlink_rcv_msg+0x7cc/0xb70 [ 2892.421711][T12096] page last free pid 15782 tgid 15782 stack trace: [ 2892.428219][T12096] __free_frozen_pages+0xb0e/0xcd0 [ 2892.433354][T12096] __slab_free+0x326/0x400 [ 2892.437784][T12096] qlist_free_all+0x9a/0x140 [ 2892.442391][T12096] kasan_quarantine_reduce+0x148/0x160 [ 2892.447865][T12096] __kasan_slab_alloc+0x22/0x80 [ 2892.452727][T12096] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 2892.458635][T12096] __alloc_skb+0x112/0x2d0 [ 2892.463168][T12096] netlink_sendmsg+0x5c6/0xb30 [ 2892.467965][T12096] __sock_sendmsg+0x21c/0x270 [ 2892.472654][T12096] __sys_sendto+0x3bd/0x520 [ 2892.477177][T12096] __x64_sys_sendto+0xde/0x100 [ 2892.481953][T12096] do_syscall_64+0xf6/0x210 [ 2892.486466][T12096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2892.492376][T12096] [ 2892.494727][T12096] Memory state around the buggy address: [ 2892.500367][T12096] ffff888058240600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2892.508958][T12096] ffff888058240680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2892.517026][T12096] >ffff888058240700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2892.525088][T12096] ^ [ 2892.530979][T12096] ffff888058240780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2892.539087][T12096] ffff888058240800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2892.547167][T12096] ================================================================== [ 2892.555686][ C1] vkms_vblank_simulate: vblank timer overrun [ 2892.723064][T12096] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2892.730325][T12096] CPU: 1 UID: 0 PID: 12096 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 2892.742082][T12096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2892.752274][T12096] Call Trace: [ 2892.755849][T12096] [ 2892.758822][T12096] dump_stack_lvl+0x99/0x250 [ 2892.763484][T12096] ? __asan_memcpy+0x40/0x70 [ 2892.768116][T12096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2892.773358][T12096] ? __pfx__printk+0x10/0x10 [ 2892.777973][T12096] panic+0x2db/0x790 [ 2892.781891][T12096] ? __pfx_panic+0x10/0x10 [ 2892.786324][T12096] ? check_panic_on_warn+0x75/0xb0 [ 2892.791466][T12096] ? v4l2_fh_open+0xc7/0x430 [ 2892.796078][T12096] check_panic_on_warn+0x89/0xb0 [ 2892.801036][T12096] ? v4l2_fh_open+0xc7/0x430 [ 2892.805659][T12096] end_report+0x78/0x160 [ 2892.809913][T12096] kasan_report+0x129/0x150 [ 2892.814430][T12096] ? v4l2_fh_open+0xc7/0x430 [ 2892.819038][T12096] v4l2_fh_open+0xc7/0x430 [ 2892.823470][T12096] ? __pfx___mutex_lock+0x10/0x10 [ 2892.828561][T12096] em28xx_v4l2_open+0x157/0x9a0 [ 2892.833438][T12096] v4l2_open+0x20f/0x360 [ 2892.837890][T12096] chrdev_open+0x4c9/0x5e0 [ 2892.842329][T12096] ? __pfx_chrdev_open+0x10/0x10 [ 2892.847373][T12096] ? __pfx_chrdev_open+0x10/0x10 [ 2892.852355][T12096] do_dentry_open+0xdf3/0x1970 [ 2892.857156][T12096] vfs_open+0x3b/0x340 [ 2892.861677][T12096] ? path_openat+0x2ecd/0x3830 [ 2892.866450][T12096] path_openat+0x2ee5/0x3830 [ 2892.871052][T12096] ? arch_stack_walk+0xfc/0x150 [ 2892.876070][T12096] ? __pfx_path_openat+0x10/0x10 [ 2892.881014][T12096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2892.887127][T12096] do_filp_open+0x1fa/0x410 [ 2892.891648][T12096] ? __pfx_do_filp_open+0x10/0x10 [ 2892.896716][T12096] ? _raw_spin_unlock+0x28/0x50 [ 2892.901582][T12096] ? alloc_fd+0x64c/0x6c0 [ 2892.905958][T12096] do_sys_openat2+0x121/0x1c0 [ 2892.910649][T12096] ? __pfx_do_sys_openat2+0x10/0x10 [ 2892.915866][T12096] ? exc_page_fault+0x68/0x110 [ 2892.920653][T12096] ? do_user_addr_fault+0xc8a/0x1390 [ 2892.925970][T12096] __x64_sys_openat+0x138/0x170 [ 2892.930832][T12096] do_syscall_64+0xf6/0x210 [ 2892.935546][T12096] ? clear_bhb_loop+0x60/0xb0 [ 2892.940272][T12096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2892.946206][T12096] RIP: 0033:0x7fa6698a7407 [ 2892.950634][T12096] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2892.970251][T12096] RSP: 002b:00007ffebc5cf260 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2892.978682][T12096] RAX: ffffffffffffffda RBX: 00007fa669f79880 RCX: 00007fa6698a7407 [ 2892.986682][T12096] RDX: 0000000000000000 RSI: 00007ffebc5cff1a RDI: ffffffffffffff9c [ 2892.994681][T12096] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2893.002840][T12096] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2893.010905][T12096] R13: 00007ffebc5cf4b0 R14: 00007fa66a0e0000 R15: 00005611d1dfa4d8 [ 2893.018898][T12096] [ 2893.022205][T12096] Kernel Offset: disabled [ 2893.026547][T12096] Rebooting in 86400 seconds..