last executing test programs: 17.276791772s ago: executing program 2 (id=598): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)=@newtfilter={0x3f4, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3b4, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x370, 0x2, [@m_skbedit={0x14c, 0x1f, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x6, 0x20000000, 0xaf000000, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3ff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xef, 0x6, "4c0b2d056d27d61bf9caa7638256403e0a873ca84f9e23b21c8b50af1caf8445094c77efc7a906cc51927cae63f5582b9cd772754ad95975f8cd15a7eaf94d6407b559f7e03319122770e276d047f4e861875f58f1f09c50ed6055b988b88edb58dbe1b4964af4b889e66d3e316861be06762ece4361114a00bf7934b73b2fcfcc13476192158ee9e4eb6ac960884827b73b0070d251dfb26c40ee090cf9d8b117e148b8bf73557fc7200d34a97ba8fdfb6822477f55185368e5735891cf0e8306674740bbb34c5274c454ba6a9f17fe9ac26abf476434507f12237fdafb132634a52843c93aa663f4dac1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x130, 0x16, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x9, 0xbde, 0x4}, @broadcast, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x5, 0x0, 0x400, 0xffff7fff}, @multicast1, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x3, 0x1, 0x7}, @broadcast, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x43, 0x0, 0x9, 0x200}, @multicast1, @loopback, 0xffffffff, 0x1}}]}, {0x68, 0x6, "efb1ceb9e1fd5c3140979a820830591412b3a1e51ff01430b993e9513caeae48b445fc37a3632c283671b57dd18d62cc84acc268c7342a5de3348ec761f3af57144f222391ee893e8205a4803bb4aa896c4072f30729be7dd8940468da8e00213347348f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0xf0, 0x1a, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_LABELS={0x14, 0x7, "bf91b338555d4b4d82637cd8f81d8678"}]}, {0xab, 0x6, "c527675bf7f4646ae31c844a33598eff03ceaabbf6272a809016b3f45d79c400b539c7a4d14eaae83644f301ed04c18bf42d5c76a75e8a581d9a3557c255c6295de63eb3da7d415bef4d1f78361360ce6fe6411cab60fa0a5057105013247436fea28171a79df64b155fc529fcfebcabf8e2f34843a55ef8798b5d34a7f442bde0879242568c20977076b5be5c90ddd6de40fd02d6c00f1f52b2454bd700ba583c7a3e90fc14df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file2\x00'}) r5 = fsopen(0x0, 0x1) r6 = fsmount(r5, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) rename(0x0, 0x0) bind$inet6(r9, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x8e0, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000040)={0x3, 0x1}) fcntl$notify(r0, 0x402, 0x8000003d) 15.960300846s ago: executing program 2 (id=600): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) 15.234198274s ago: executing program 2 (id=605): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r9, 0xae80, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x3, 0xc}, 0x0) syz_usb_connect(0x4, 0x815, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x803, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x9, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x66, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2d61c31f8"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x7b, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58ba099e51de8f69"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x41, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb8, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa611175"}, @generic={0x68, 0x1, "d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b77"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x2, 0x0, [@generic={0x6f, 0x21, "62577cba293bba305869f08ab851fb587e2eed458fc5bee46fb025d3b967f9be90be8b40ef3017c99ab22f13b5397107174a572a16ea33ad9f9831c43dd24de095a4d57925d4674c489889f2ccdabe0f1557cd9c48a56a1fb0a9197b1d83cd6232ebd79caba58a2a6b22e45ebf"}]}}]}}, {{0x9, 0x4, 0x6, 0x81, 0x10, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x4d, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6efbf4da53ba7e4637e19ca02a543eddd5c78a05eb618636ae8ef03a0cc3025495a9f76ec02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xbd, 0x30, "adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5cf9bf995c43567488b4f501e2c8587a8c8265c9f6c498ce5050ef1a8c7160ac450c51ac98f80c53ee9bbe3d78eac1d1d1612d762951c300de140984119d0877b92131b45b05d316d00414199dd474583c53bb5470053e00a6531bc4eb7e2969e67993b54ba02c0514d2b10aa380e3a0266562e496a2d0ec36c56dd0355b06b92972b24a9afb3d77edc3afb2497e4305"}, @generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x69, 0x1a706ddc45c7be6c, "4a85f115ba000403ce77fb79afa920ba41ea90d69bcf0f00d0c069e995c6fc91e8753cc06b8a66e557772ee323ef15e33cc03d488fba1b9458d147029835823da1d29bc5ad06cb1961a9073703a33e9a0aac26689563d7af64d967db9ba5f243f8b14f2ac885e0"}, @generic={0xec, 0xf, "c8141a089e3edece84c8d0e3948e48fde590e4d5669331e884f338771c338a979a058314f00e35992c9d857fd47017ed60860916fe6284f955e25349d82db94dba21733cd8173264b8df4bc38f2b6a78794da97e944c08b55138b67532b3c79fd747bb0e4df3f4f68549ae438c4909acc599060dd6978666647661d9c3c2a5d009464203101ca72a7b678ab34cc10e6cab5f0a389ee827531407b6d324c77c700e8f78fc1b677d01e317d7fb0d16b720d9dc739eecdb6ee5e004e5da07bd0a1f39e4a3caadc5aa8a0c38733c1a624d59fc5ccf7589e9bbc030660adceb837cd6a8a304b731677df302df"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x38, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x44, 0x6, "bcf5c276eb7e6041ded0936f8e701ff524cc17c62017a427da4e43e4c15d518d62d88b36e4405d67b02f0ee5f956445091bfdf5c3301db9854f0af967d92ecb24444"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2d, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7c2"}, @generic={0x5f, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e902e"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x7, [@generic={0x64, 0x22, "54d79160e3bb2b979055366518a0402e0d7197feac1163166820e42a96d9892377f31677125d1a67551d627f8fa316782e390ff4d8399b71c69deb70ff938756404953b45c193bad68ff74b3f3fb0192880b5bb2913370fcf3e84d1890266b9374fb"}, @generic={0xa, 0x31, "4b143e0f2ad03248"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x4, [{0xa7, &(0x7f0000000cc0)=@string={0xa7, 0x3, "62dd396ed9f6d9bf69252fc70cbd708841f5f9950454323e22900253b3695ae886d90228ef82a4bb1fe8b0da3e06fc0e9d1dc58884b27df1c20f9739a714571ebeeb600f193a7d018f075a02c62651d5d46fac40036a4e4996fc3ab74b9e0ac84e9f3412a8f53de6f36df89e1022ce648101c1f4a7b986adc33b8510ace339159da5483e3153c66ad185ed040cbf3d1418c10a56e45d48cff8ebc05d30fba421283bd4fa65"}}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000d80)=@string={0x7f, 0x3, "9811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) readv(r8, &(0x7f0000000380)=[{&(0x7f0000000f80)=""/100, 0x64}, {&(0x7f0000001000)=""/183, 0xb7}, {&(0x7f00000010c0)=""/105, 0x69}], 0x3) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 11.07252789s ago: executing program 2 (id=614): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xed43, 0xf8, 0x6, 0x9, 0x151}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fsetxattr$security_capability(r6, &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0x3475, 0x7}, {0x81, 0x5}]}, 0x14, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=""/201, &(0x7f0000000000)=0xc9) syz_usb_connect$uac1(0x0, 0xbb, &(0x7f0000000e40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0x6, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa, 0x2a, 0xf, {0x7, 0x25, 0x1, 0x0, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x80, 0x9, "", "fc"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x0, 0x2, "10f249a9a619"}, @as_header={0x7, 0x24, 0x1, 0x93, 0x0, 0x1}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x3, 0x81, 0x3, "d3647eb4351a6a"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x40, 0x3, 0x0, "0e992b23991064ba"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x7c, 0x0, "f7d8ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb3, 0x3, 0x0, {0x7, 0x25, 0x1, 0x2, 0x2, 0x401}}}}}}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffffdf0000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b9349e31aa3701c38c527d3237c18e521ab219efdebb7b3de8f67581cf796a1d4223b90b80fcad3f6c962b9f292324b7ab7f7da31cf41ab12012fb1e0a494034127de745409e35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d307db98ca112874ec309baed0499104dcfe7c0f694bd5fc9e66d058b75fa4c81e5c9f42d9383e41d277b10392a96286744f049c3f128f8f92ef992239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b2e00916de48a4e70f03cc415ba77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b638c234bbb55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4cc302b52e2101de18a1f1f7c551b3fa00055cc1c46c5fd9c26a54d43fa050645bd6109b113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97c870800000047546103f123f661c84726e7c7c55eff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef7be184f5e93ba5c8c2a4c04450b652b8d4c2ff030000000000000007c6bbd6cb2b240ce7d47ae636a5dbe9864a117d27326850a7c3b57086a4482c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c87c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a700a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c718d0ad23bc83ba3f3757210a057e177615c0683f000000000000006d4e0413ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fcff030000629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa63966945d93c33b038ce0d890f85f8a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f207ea3df3d6c0002a41783078e56c70afe8016b3dd9dc7785b36e609f173cc747837d600283b3452c57a5d44cacd363589845637071320921d32c1663964eddec97cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dcb0c42c4d719347f3d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57586e5fe2aa611f6232a9b71882ce24fce75cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed000080000000000000000000000fa36bbac00bb77c933d3961556f3fe647b05643b0000000000000000000000967aef9c5706e13d5889e77dab80a2548ec31629b7355a2bb8b93e4b6323061f545b26accc4621b568ab0bfaf30aa4f60705532c4a09c0a4a5487c762167edf362be35b9c90ad7e372a66bbb1471aa21000000000000104061c66a7432f25687618e31dcef8c5d4a2457a93f3fc6d3d7131746c75ccf400fc1a7a51826832ef7f5fbc78827d937768443a1c1ca3aba93a34efd21aa1201d9225256df8de405d1f12c17cdaff3ad675aa333aa7e919459babd3cc1000000000000000000000000000000000000000000000000000000000000000059fdc6a54a2a8b28fa7d9b92aeb58e78e3b8594a5ef6bb67e52bf43b6145f544273a8f62852706c0abef368bfc72f92fa99a7bf121019cff8001fd7d2f6c2c295a5cab383235fec4c1decbed258ee9df8963c0fc828ad2119ffefe36c78692fffb6942b9da0922b2aa8f6b66c14ee7f42d5951edcc986356b41c0de3549f851ca340d9e425e355c1decb785a1042a72c1c98a084b04b1d9be473e50a15d76b110eda3b7cc1f2501211773cf510a43888422c1328476dd6f42659c61a18618fd28d5cd342c276aa9c4cc035077fa09d672b8dcfb3ac1751628647047d07338a8619037e3449a173ddd697f541a0795a2de7ef1396d70675341ebf004be122de04b5275fe7e53d28ebdc5051cec00759d73ca97229d93b965926060b6f91d01324bd458b425ea51c5d5b69551d599188fc6040370ac9ca7ae9eea9e5ede79bd66bd3d616dd7d7dd4c3a8fd055a3585af6fe7f5046c61154598cd33c33a48ece1072afd04b1fd85eb1655d9f3f813392c9634200d892dc6810b436820a1e0f6b464855e28953eb63cd3d6fc1b7bfb588ce28a51af1658d45d759a8399da55a3ff6597bb9f47167fe55ca240623a001e5fe15d9ddefea06a3750501916163844106c4ce662f418d9fc509e5447f712048d53e7e36ee7de083c5ea1119969d858eb6785395fc5a2c551de9a086cb4583f55c47828645e3046"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000757c32eb73f0799d8bd179f0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, &(0x7f0000000240)=r10) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000040)={0x1, r10}) close_range(r9, r10, 0x0) 10.984677658s ago: executing program 4 (id=615): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800003f80ce070000009000000000851000000200e21e9500c212"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x7800, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f00000001c0)={0x1, r8}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000040)={0x2, r8}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000080)={0x3, r8}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f00000000c0)={0x3, r8, 0x1}) socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000014000780080012400000000805001500ff0300000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = socket$inet(0x2, 0x80001, 0x84) listen(r10, 0x3) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="d0187f0008021100000108041100000050505050505020000f", @ANYRES8], 0x3c) 10.173116052s ago: executing program 4 (id=622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x4, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3, 0x0, 0x0, 0x10000}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc02000000000000000000000000000064010102000000000000000000000000002f0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 9.95520967s ago: executing program 4 (id=623): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r2, &(0x7f0000000340)=[{}, {0x80000000}], &(0x7f0000000480)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000200)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000400)={{r3, r6, 0x3}, {r5}}) set_mempolicy(0x2, &(0x7f0000000000)=0x76, 0x105) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/109, 0x6d}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) readv(r8, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xb03137cc5c403bd1}}, {0x0, 0x0}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r10, 0x540b, 0x1) bind$netlink(r9, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xd, 0x1, 0x9, 0x7, 0x8, 0x3, 0x4, 0x10, 0x8001, 0xb, 0x800, 0x0, 0x6, 0x101, 0x10007fff, 0x7]}) 9.009888132s ago: executing program 3 (id=628): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000affe4000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 8.708702186s ago: executing program 3 (id=629): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x10001, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 6.777525475s ago: executing program 4 (id=631): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) read$char_usb(r4, 0x0, 0x0) syz_usb_connect(0x5, 0xd5, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xd6, 0xbf, 0x35, 0x10, 0x4e8, 0x689a, 0x8804, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x1, 0x0, 0x2, 0x0, 0x5, [{{0x9, 0x4, 0xfa, 0x1, 0x5, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x2, 0x10, 0x8, 0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xf, 0x3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7688}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xf, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}, @generic={0x68, 0x30, "882c60b10c291f241f4f2966bf592b165fe1579d6bdcdb77fd6a8f6131b027f5337c7249910f87a03fb8f04244c43682119c9a296a0e425d08414af97d5b312c2ea510d91ee3e86001f2c00f43951bff0c0d55667fa6fa19e0e3a7e77d4c7453957b14d39f47"}]}}, {{0x9, 0x5, 0xd, 0x18, 0x400, 0x2, 0xe, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc4, 0x29a4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x7, 0x3, 0x81}}]}}]}}]}}, 0x0) fcntl$addseals(r1, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r8, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r8, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r6, @ANYBLOB="80008f0b0a000200aaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 6.392276819s ago: executing program 2 (id=632): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r1) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x1, 0x3ff, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x1fffffffe, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x0, @in6=@private2, 0x3502, 0x1, 0x0, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) dup3(r3, 0xffffffffffffffff, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) pwrite64(r3, 0x0, 0x0, 0x6) syz_usb_connect(0x0, 0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 6.252620851s ago: executing program 1 (id=633): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2982, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x900000, &(0x7f0000002140)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}}, 0x50) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40000000206050000000000000000000000000054000780080017400000000908000a40000000071800018014000240fc010000000000000108000a400001000108000b40000000151800028014000240fc0100000000000000000000000000000500010007000000340007800800124000000040060005404e200000050007002f000000060004404e200000080009400000000108000840000000cc05000500020000000500010006000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000380)={0x26b0, 0x1, 0xffffffff, 0x3, 0x16, "28c4d95d3933aabcf900"}) r6 = syz_open_dev$vivid(&(0x7f0000002600), 0x1, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r2, r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000100)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40028d1}, 0x40010) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x1, 0x50000a}, {0x7, 0x9}, 0x5, [0x3, 0x3, 0x104, 0x6, 0xfffffffffffffffe, 0x400, 0xffffffffffffffff, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x7, 0x9, 0x7]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0xf) close_range(r8, 0xffffffffffffffff, 0x0) 5.615603682s ago: executing program 3 (id=635): syz_open_dev$sndpcmc(&(0x7f0000000380), 0x2009, 0x202) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050004000000000009fb0100737905300000000005000a0000000c000800000012400000ffff12000300686173683a6e65742c706f7274000000"], 0x58}}, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x52, 0x101000) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x40010, r4, 0x83000000) 5.516683866s ago: executing program 0 (id=636): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x5, @remote, 0x4}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRESHEX=r7, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) r9 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x102c0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.496883917s ago: executing program 1 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x20008c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x95}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003e000701feffffff00000000017c0000040042800c00018006000600800a0000110002800c001480080007"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x884) 5.398819708s ago: executing program 3 (id=638): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000180)=0x8000000000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x80010, 0xffffffffffffffff, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x4000) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000001840)=@newtclass={0x514, 0x28, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0x2, 0x9}, {0x1, 0x1}}, [@c_atm={{0x8}, {0x98, 0x2, [@TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0x8, 0x3, "905b10a1"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0xfff1}}, @TCA_ATM_HDR={0x13, 0x3, "6e14976b506475279feaa033a58f0b"}, @TCA_ATM_HDR={0x31, 0x3, "8b509f2aeef47b6e2c43407e8515623d9e52e49fc2acca4309ec334647d08c59de1fc54710476051db8dd327d9"}, @TCA_ATM_HDR={0x1a, 0x3, "6c24b2976b21e0c4ac0eed837afeb39f6931a4ad80c3"}, @TCA_ATM_HDR={0x16, 0x3, "fdab4a9110a6e3f73f7855431b8465ac17ad"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5}}}, @c_cbq={{0x8}, {0x430, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x0, 0x7, 0x400, 0x4, 0x7f}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x9, 0x8, 0x1, 0xbc, 0x2, 0x8, 0xe0, 0x2, 0x7, 0x8, 0x0, 0xa, 0x4, 0x10, 0x7, 0x3, 0xfffffff5, 0x3, 0x10c, 0x6, 0x7, 0xffffffff, 0xfffffeff, 0x4, 0x29, 0x251, 0xfd4, 0x101, 0x6, 0x4, 0xfff, 0x90, 0x8, 0x0, 0x7, 0x6, 0x2, 0x3, 0x1, 0xfffffffb, 0x8, 0x5, 0x5, 0x5, 0xd, 0x4d13, 0x6, 0x36, 0x7, 0x1ff, 0x7, 0x0, 0x8, 0x6, 0x8, 0xffffffff, 0x3, 0xfffffffd, 0x1, 0xb25, 0x8, 0x4, 0x4, 0x5, 0x2, 0x800, 0x0, 0x1, 0xfffffffc, 0x0, 0x6, 0x8, 0x9, 0x3, 0x3, 0x0, 0x4, 0x40, 0x5, 0x100, 0x5, 0x4, 0xffffffff, 0x1000, 0x2, 0x7, 0x7, 0x8, 0x3607, 0x7ff, 0x180000, 0x40, 0x2, 0x800, 0x0, 0xfffffff7, 0x4, 0x4, 0x0, 0x4, 0x6, 0x3, 0x100, 0x6, 0x2, 0xd, 0x4, 0x1, 0x4aa, 0x3, 0x7, 0x2, 0x32b, 0x8, 0x5, 0xe, 0x0, 0x5, 0x7, 0x6, 0x26, 0x381, 0x3, 0x1, 0x8, 0x200, 0xffffffff, 0x2, 0x2, 0x7ff, 0xe, 0xf, 0x10000, 0x7, 0x7f, 0xfffffff7, 0x7, 0x2, 0x1800000, 0x6, 0x9, 0x7, 0x1000, 0xffffffc2, 0x0, 0x676, 0x9, 0xa, 0x3, 0x3, 0x8, 0x6fde, 0xf, 0xfffffffe, 0x6, 0x6, 0x4, 0x4, 0x0, 0x1, 0x7, 0x1800, 0xf, 0xffffffff, 0x2, 0xf, 0x78ed3098, 0x7, 0x400, 0x4, 0x1000, 0x7f, 0x2, 0x9, 0x8000, 0x5, 0x1, 0x284c, 0x5, 0x19, 0x1, 0x9, 0x0, 0x1400000, 0x200, 0xffff, 0x2, 0x1, 0xa967, 0x10001, 0x1, 0x7f, 0x5476021f, 0x5, 0xec, 0x8, 0x7, 0x401, 0x1, 0x2, 0x1, 0x6, 0x8, 0x1, 0x7, 0x6, 0x77da, 0x80000000, 0x3, 0x10, 0x33, 0x3, 0x80000000, 0xc340, 0xfffffffb, 0xd7b7, 0x3, 0x1, 0x5, 0x9, 0x14, 0x300, 0x9, 0x5, 0x2308, 0x4, 0x1defbfa, 0x3ff, 0x800, 0x5, 0x0, 0x8, 0x400, 0x28, 0x8001, 0x9, 0x2, 0x7, 0x100, 0x67, 0xd, 0x101, 0x2, 0x4a9, 0x80009, 0x5, 0x9, 0x5e9, 0x3, 0x7d4, 0x3, 0xfff, 0x1000, 0x6, 0xd360]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3d, 0x3, 0x16, 0x5, 0x42, 0x8, 0x10000, 0x1}}]}}]}, 0x514}}, 0x4010) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r4, 0x1) connect$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r8 = fspick(r7, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) 5.276639644s ago: executing program 1 (id=639): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r6 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc) keyctl$clear(0x7, r6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=r2], 0x4c}}, 0x0) 3.821490651s ago: executing program 1 (id=640): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x4171, &(0x7f0000000780)={0x0, 0xb395, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x4b00, &(0x7f0000000500)="05"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) ustat(0x11, &(0x7f0000000600)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 3.480003814s ago: executing program 4 (id=641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x4, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3, 0x0, 0x0, 0x10000}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000001a80000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 3.137020695s ago: executing program 2 (id=642): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bind$rxrpc(r4, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) landlock_restrict_self(r4, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x5a) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) unshare(0x20020480) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000056fffffff00000000200000005700e0ff000002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = signalfd(0xffffffffffffffff, 0x0, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304905) close(r8) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) fcntl$setstatus(r7, 0x4, 0x2c00) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES16=r8], 0x0) syz_usb_control_io(r9, 0x0, 0x0) 3.136338826s ago: executing program 4 (id=643): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000ac0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000400)={0x40, 0x23, 0xb5, {0xb5, 0x3, "25322f113563694e2702abf525209885bfb6c5d87b4659fe014ba1bf72b7a6d57be503e10f8e0c756b43895b399ff57cc7f64d1dd380a37d14f30ec1735e8df90edba090d008ebbe2ffd0881ae12928a474826d1890bdd2b749bf91d9636bf59e2808108aa87d8accdb1d291ee1740e24968f34531a800610ebad1713b5278606f73e2b358674003f18516405286664890f14d34f7248fa48f2c6ade3195de767aa6b59d7b91ce1d0ed37d11b43ad560c51197"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000540)={0x20, 0x6, 0x41, "9a2322739001f81e8bc7fcd3871071009349ca196b9f2cae7d532e7d6398d1852641ee378faa55d21b16f5c03ce4db9c11fc2cce444ab0d4f435e04264b54de00b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x38}, &(0x7f00000004c0)={0x0, 0x8, 0x1}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffffd, 0x8, 0x14, 0x0, 0x205, 0x400, 0x8000, 0x7f}, 0x0, &(0x7f0000000200)={0x5, 0x5, 0x8, 0x67, 0x8, 0x2, 0x80000001}, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000380)={&(0x7f0000000340)={[0xe]}, 0x8}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4c000, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x101, @dev, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'ipvlan0\x00', 0x100}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) splice(r3, &(0x7f0000000600)=0x42a, r4, &(0x7f0000000640)=0x4, 0x3ff, 0x4) 2.72781491s ago: executing program 0 (id=644): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x8, 0xd, 0x0, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x3231564e}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r1], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x2f, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff, 0x0, 0x100000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x8, 0xd, 0x0, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x3231564e}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r1], 0x0, 0x0, 0x0) (async) syz_fuse_handle_req(r1, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x2f, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff, 0x0, 0x100000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 2.418209141s ago: executing program 0 (id=645): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x1800000000000000, 0x400c844}, 0x0) 2.17677606s ago: executing program 0 (id=646): r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000f00)={0x7, @output={0x0, 0x1, {0x7, 0x7}, 0x8de, 0x2ed8}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xeb1}], 0x1}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc) 2.019867267s ago: executing program 3 (id=647): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2982, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x900000, &(0x7f0000002140)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}}, 0x50) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40000000206050000000000000000000000000054000780080017400000000908000a40000000071800018014000240fc010000000000000108000a400001000108000b40000000151800028014000240fc0100000000000000000000000000000500010007000000340007800800124000000040060005404e200000050007002f000000060004404e200000080009400000000108000840000000cc05000500020000000500010006000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x20000023896) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000380)={0x26b0, 0x1, 0xffffffff, 0x3, 0x16, "28c4d95d3933aabcf900"}) r6 = syz_open_dev$vivid(&(0x7f0000002600), 0x1, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r2, r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000100)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40028d1}, 0x40010) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x1, 0x50000a}, {0x7, 0x9}, 0x5, [0x3, 0x3, 0x104, 0x6, 0xfffffffffffffffe, 0x400, 0xffffffffffffffff, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x7, 0x9, 0x7]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0xf) close_range(r8, 0xffffffffffffffff, 0x0) 1.889247271s ago: executing program 0 (id=648): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002004e25ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e200a0101"], 0x110) 1.468856707s ago: executing program 0 (id=649): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a00)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xfff6}, {0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffe01}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18}, './file2\x00'}) r4 = fsopen(0x0, 0x1) r5 = gettid() syz_clone3(&(0x7f0000000300)={0x24000080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x27}, &(0x7f00000000c0)=""/180, 0xb4, &(0x7f0000000180)=""/149, &(0x7f0000000240)=[r5, r5], 0x2}, 0x58) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x37, 0x800000000004, @tid=r6}, 0x0) r7 = fsmount(r4, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x105b9) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x288243, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) rename(0x0, 0x0) bind$inet6(r11, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000040)={0x3, 0x1}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) 1.268754365s ago: executing program 3 (id=650): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x10e, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xca, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xb, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x101, 0x9602, 0xb, 0x2, 0x4, 0xa, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000100)={0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r8 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001000b8bee472b4d308"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 259.625413ms ago: executing program 1 (id=651): socket$inet(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c94}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 0s ago: executing program 1 (id=652): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00068018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x6) syz_usb_connect(0x5, 0xd5, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d6bf3510e8049a680488010203010902c30001000200050904fa0105ffffff0609050210080009050209050402ff030f03f707250101058876090504eec79e9c229f7443e1341ee65a00ff030f0202072501000804006830882c60b10c291f241f4f2966bf592b165fe1579d6bdcdb77fd6a8f6131b027f5337c7249910f87a03fb8f042c0c43682119c9a296a0e425d084107007d5b312c2ea510d91ee3e86001f2c00f43951bff0c0d55667fa6fa19e0e3a7d27d4c7453957b14d39f4709050d180004020e0f07250101020500072501cf692343dca4cfa3b9c7e69ef83adf39371ede51fb3ac9aeec18e326c893b45ee3e3236f9efaad0455cbb1ebb01e8581f560c7b6123c4ce8f0ab046d61d15c72edf2460fd348d3ec609305f1979854bf82e4a34cd7fbfa91659610b5bac0132534241ebec22a1f412cc9a1530dd961e1d8558a9d5eea7d6c8a552c4f9695042d666ee9b3ad0a0cbd12399fa5e20d89b42d496917bc02c247c63fe16a157bfbca5c3441ee422f93fd19b8ef4eed7b93f4f768b63dc22bc46579d55f63ff4d2486cd414a26c535b87860f6a7001a959fe6c24535ba08e2927d600832e4c3b944727f8e0a87c8496cbedcf0d38b1b1b0fa58b1de008f97d123b2b07448550c657e09726a0e4720a562209c47f7a1fa48ae23cebffd7288c843cc219f1a423529d0c4df13e95cc2bf126e1ba29c79198312e3fb3151eb44af6b0b7a28a607ed74c070b9846182a4c5cf9b777fa044ecd039d3d0d6b89a37f7b895bad8c0b664ef6cf6a03e32402a6bef2e730cf1a02f94b4e872ee0f46a550a42d5571f85618f47b2a982b326a240dce5168101c633ffc9654e9734e8ccf2519c234fa08001c62105a8546b2deabde0dcf5c32aa227"], 0x0) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa085696d24d734b1, 0x12, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000080)="82df7c6118d691155d99143c8318fdaa9ab75dc4d871fa50cd4aad61654e27dcc3c192dd73b2533c86a7e020", 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000300)="d2ffdd934517", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x1, 0x7f, 0x1, 0x401}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xffff800000000000, 0x5, 0x0, 0x81, 0x100004, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0x2], 0xffff1000, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): 52.074804][ T5916] usb 2-1: 0:2 : does not exist [ 152.103578][ T5916] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 152.165144][ T5916] usb 2-1: USB disconnect, device number 10 [ 152.442517][ T6821] netlink: 76 bytes leftover after parsing attributes in process `syz.0.236'. [ 152.860547][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.240'. [ 153.277668][ T5894] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 153.297611][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 153.427792][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 153.439952][ T5894] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 153.450595][ T5894] usb 1-1: config 0 has no interface number 0 [ 153.456703][ T5894] usb 1-1: config 0 interface 250 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 1023 [ 153.467187][ T24] usb 5-1: device descriptor read/64, error -71 [ 153.477040][ T5894] usb 1-1: config 0 interface 250 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 153.497618][ T5894] usb 1-1: config 0 interface 250 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 153.517800][ T5894] usb 1-1: config 0 interface 250 has no altsetting 0 [ 153.538781][ T5894] usb 1-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=88.04 [ 153.548795][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.556831][ T5894] usb 1-1: Product: syz [ 153.566766][ T5894] usb 1-1: Manufacturer: syz [ 153.572065][ T5894] usb 1-1: SerialNumber: syz [ 153.584916][ T6849] input: syz0 as /devices/virtual/input/input12 [ 153.605213][ T5894] usb 1-1: config 0 descriptor?? [ 153.648953][ T6840] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.711041][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 153.859139][ T24] usb 5-1: device descriptor read/64, error -71 [ 153.893527][ T6853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.907645][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.243'. [ 153.958096][ T5894] usb 1-1: USB disconnect, device number 9 [ 154.039919][ T24] usb usb5-port1: attempt power cycle [ 154.254833][ T6852] xt_CT: No such helper "snmp" [ 154.517656][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 154.548401][ T24] usb 5-1: device descriptor read/8, error -71 [ 154.787664][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 155.037339][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 155.231007][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 155.268423][ T24] usb 5-1: device descriptor read/8, error -71 [ 155.558615][ T24] usb usb5-port1: unable to enumerate USB device [ 155.585041][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 155.727986][ T6876] vlan2: entered promiscuous mode [ 155.737919][ T6876] syz_tun: entered promiscuous mode [ 155.872217][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 155.941841][ T6880] bond_slave_0: entered promiscuous mode [ 155.947831][ T6880] bond_slave_1: entered promiscuous mode [ 155.961376][ T6880] macvtap1: entered promiscuous mode [ 155.966894][ T6880] bond0: entered promiscuous mode [ 155.976082][ T6880] macvtap1: entered allmulticast mode [ 155.982434][ T6880] bond0: entered allmulticast mode [ 155.987992][ T6880] bond_slave_0: entered allmulticast mode [ 155.993943][ T6880] bond_slave_1: entered allmulticast mode [ 156.002052][ T6880] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 156.016794][ T6881] bond0: left allmulticast mode [ 156.022230][ T6881] bond_slave_0: left allmulticast mode [ 156.074490][ T6881] bond_slave_1: left allmulticast mode [ 156.093212][ T6881] bond0: left promiscuous mode [ 156.124391][ T6881] bond_slave_0: left promiscuous mode [ 156.130181][ T6881] bond_slave_1: left promiscuous mode [ 156.430289][ T5916] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 156.594917][ T6897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.616792][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.631077][ T5916] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.657683][ T5901] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 156.666415][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.692235][ T5916] usb 1-1: config 0 descriptor?? [ 156.716331][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 156.828251][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 156.850378][ T5901] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.866074][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.874587][ T5901] usb 3-1: Product: syz [ 156.884584][ T5901] usb 3-1: Manufacturer: syz [ 156.894798][ T5901] usb 3-1: SerialNumber: syz [ 156.909646][ T5901] usb 3-1: config 0 descriptor?? [ 157.124208][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.187791][ T5901] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 157.201781][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 157.219575][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 157.228326][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 157.236604][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 157.244024][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 157.251294][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 157.258704][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 157.266039][ T5916] pwc: recv_control_msg error -32 req 04 val 1500 [ 157.273712][ T5916] pwc: recv_control_msg error -32 req 02 val 2500 [ 157.280951][ T5916] pwc: recv_control_msg error -32 req 02 val 2400 [ 157.288481][ T5916] pwc: recv_control_msg error -32 req 02 val 2600 [ 157.498117][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 157.515054][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 157.529402][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 157.619515][ T6916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.695615][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.709273][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.790738][ T5916] pwc: Registered as video103. [ 157.868036][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 159.237750][ T5901] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 159.842516][ T5914] usb 3-1: USB disconnect, device number 12 [ 159.851436][ T5916] usb 1-1: USB disconnect, device number 10 [ 160.195275][ T5977] udevd[5977]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 160.598706][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 161.130938][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 161.144794][ T6940] vlan2: entered promiscuous mode [ 161.657701][ T5914] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.797887][ T5914] usb 2-1: device descriptor read/64, error -71 [ 162.037596][ T5914] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.147416][ T6948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.187760][ T5914] usb 2-1: device descriptor read/64, error -71 [ 162.315071][ T5914] usb usb2-port1: attempt power cycle [ 162.668043][ T5914] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 162.738447][ T5914] usb 2-1: device descriptor read/8, error -71 [ 163.010814][ T5914] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 163.038244][ T5914] usb 2-1: device descriptor read/8, error -71 [ 163.088006][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.110305][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.148144][ T5914] usb usb2-port1: unable to enumerate USB device [ 163.297644][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 163.327599][ T5894] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.824915][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 163.843958][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.955649][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.978294][ T10] usb 3-1: Product: syz [ 163.982536][ T10] usb 3-1: Manufacturer: syz [ 163.987363][ T10] usb 3-1: SerialNumber: syz [ 164.063517][ T10] usb 3-1: config 0 descriptor?? [ 164.218557][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 164.314978][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 164.788183][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 164.798593][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.809835][ T24] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.823550][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.833689][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.869387][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.888018][ T24] usb 4-1: invalid MIDI out EP 0 [ 164.943992][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 165.188287][ T6969] netlink: 60 bytes leftover after parsing attributes in process `syz.4.280'. [ 165.335055][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 165.794551][ T6983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.984120][ T5894] usb 3-1: USB disconnect, device number 13 [ 166.008804][ T6985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.083619][ T6983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.263320][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 166.352301][ T6995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.803922][ T5894] usb 4-1: USB disconnect, device number 14 [ 167.139600][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.289'. [ 167.452686][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 167.577907][ T5894] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 167.607806][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 167.614071][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 167.639253][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 167.658926][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.671914][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 167.685298][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 167.702423][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.713942][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.722133][ T10] usb 4-1: Product: syz [ 167.726337][ T10] usb 4-1: Manufacturer: syz [ 167.751032][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 167.756270][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 167.767286][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.769764][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.791779][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 167.798203][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 167.798991][ T5894] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.804411][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 167.815615][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.828947][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 167.838695][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.858648][ T24] usb 3-1: Product: syz [ 167.870729][ T5894] usb 2-1: config 0 descriptor?? [ 167.875936][ T24] usb 3-1: Manufacturer: syz [ 167.882051][ T24] usb 3-1: SerialNumber: syz [ 167.898029][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 167.923447][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 167.936203][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 168.302968][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00 [ 168.317651][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 168.325668][ T5894] pwc: recv_control_msg error -32 req 02 val 2700 [ 168.352743][ T5894] pwc: recv_control_msg error -32 req 02 val 2c00 [ 168.365967][ T5894] pwc: recv_control_msg error -32 req 04 val 1000 [ 168.384195][ T5894] pwc: recv_control_msg error -32 req 04 val 1300 [ 168.408898][ T5894] pwc: recv_control_msg error -32 req 04 val 1400 [ 168.487899][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 168.512148][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.533266][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.608154][ T10] usb 1-1: Product: syz [ 168.618272][ T10] usb 1-1: Manufacturer: syz [ 168.623252][ T10] usb 1-1: SerialNumber: syz [ 168.634977][ T5894] pwc: recv_control_msg error -71 req 02 val 2100 [ 168.636519][ T10] usb 1-1: config 0 descriptor?? [ 168.650384][ T5894] pwc: recv_control_msg error -71 req 04 val 1500 [ 168.719181][ T978] usb 4-1: USB disconnect, device number 15 [ 168.778829][ T5894] pwc: recv_control_msg error -71 req 02 val 2500 [ 168.791336][ T5894] pwc: recv_control_msg error -71 req 02 val 2400 [ 168.846249][ T5894] pwc: recv_control_msg error -71 req 02 val 2600 [ 168.853784][ T5894] pwc: recv_control_msg error -71 req 02 val 2900 [ 168.877250][ T5894] pwc: recv_control_msg error -71 req 02 val 2800 [ 168.888167][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.901385][ T5894] pwc: recv_control_msg error -71 req 04 val 1100 [ 168.919461][ T5894] pwc: recv_control_msg error -71 req 04 val 1200 [ 168.927239][ T5894] pwc: Registered as video103. [ 168.984981][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 169.034547][ T5894] usb 2-1: USB disconnect, device number 15 [ 169.058251][ T7034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.684371][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 169.807652][ T5894] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 169.964082][ T5894] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 169.995745][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.026554][ T5894] usb 2-1: Product: syz [ 170.037916][ T5894] usb 2-1: Manufacturer: syz [ 170.042683][ T5894] usb 2-1: SerialNumber: syz [ 170.055233][ T5894] usb 2-1: config 0 descriptor?? [ 170.071077][ T5894] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 016 [ 170.380158][ T7049] netlink: 'syz.4.303': attribute type 2 has an invalid length. [ 170.417622][ T10] r8152-cfgselector 3-1: USB disconnect, device number 14 [ 170.556772][ T5894] (null): failure reading functionality [ 170.649072][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'. [ 170.684040][ T7062] vlan2: entered promiscuous mode [ 171.215125][ T5886] usb 1-1: USB disconnect, device number 12 [ 171.237862][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 171.288965][ T7071] netlink: 76 bytes leftover after parsing attributes in process `syz.4.309'. [ 171.367446][ T7073] veth1_macvtap: left promiscuous mode [ 171.377436][ T7073] macsec0: entered promiscuous mode [ 171.395104][ T7073] veth1_macvtap: entered promiscuous mode [ 171.403647][ T7073] macsec0: left promiscuous mode [ 171.447988][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 171.777023][ T7078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.983517][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 172.030269][ T7080] bond_slave_0: entered promiscuous mode [ 172.036051][ T7080] bond_slave_1: entered promiscuous mode [ 172.058152][ T7080] macvtap2: entered promiscuous mode [ 172.063510][ T7080] bond0: entered promiscuous mode [ 172.077914][ T7080] macvtap2: entered allmulticast mode [ 172.083642][ T7080] bond0: entered allmulticast mode [ 172.092877][ T7080] bond_slave_0: entered allmulticast mode [ 172.099746][ T7080] bond_slave_1: entered allmulticast mode [ 172.117772][ T7080] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 172.154637][ T7081] bond0: left allmulticast mode [ 172.159668][ T7081] bond_slave_0: left allmulticast mode [ 172.165251][ T7081] bond_slave_1: left allmulticast mode [ 172.170824][ T7081] bond0: left promiscuous mode [ 172.176648][ T7081] bond_slave_0: left promiscuous mode [ 172.182125][ T7081] bond_slave_1: left promiscuous mode [ 172.552944][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 172.614133][ T5894] i2c i2c-1: failure reading functionality [ 172.759432][ T7089] bond_slave_0: entered promiscuous mode [ 172.764389][ T5894] i2c i2c-1: connected i2c-tiny-usb device [ 172.765168][ T7089] bond_slave_1: entered promiscuous mode [ 172.842907][ T7089] macvtap1: entered promiscuous mode [ 172.873248][ T7089] bond0: entered promiscuous mode [ 172.876022][ T5894] usb 2-1: USB disconnect, device number 16 [ 173.023005][ T7089] macvtap1: entered allmulticast mode [ 173.067860][ T7089] bond0: entered allmulticast mode [ 173.073619][ T7089] bond_slave_0: entered allmulticast mode [ 173.079872][ T7089] bond_slave_1: entered allmulticast mode [ 173.088114][ T7089] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 173.199690][ T7091] ip6gretap1: entered promiscuous mode [ 173.206888][ T7091] ip6gretap1: entered allmulticast mode [ 173.534603][ T5915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 174.006170][ T7092] bond0: left allmulticast mode [ 174.027987][ T5915] usb 2-1: device descriptor read/64, error -71 [ 174.058061][ T7092] bond_slave_0: left allmulticast mode [ 174.071714][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.088994][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 174.091597][ T7092] bond_slave_1: left allmulticast mode [ 174.096617][ T24] usb 3-1: can't read configurations, error -71 [ 174.116325][ T7092] bond0: left promiscuous mode [ 174.123153][ T7092] bond_slave_0: left promiscuous mode [ 174.128658][ T7092] bond_slave_1: left promiscuous mode [ 174.308143][ T5915] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 174.452372][ T5915] usb 2-1: device descriptor read/64, error -71 [ 174.508577][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 174.542092][ T7114] netlink: 76 bytes leftover after parsing attributes in process `syz.3.322'. [ 174.588029][ T5915] usb usb2-port1: attempt power cycle [ 174.620116][ T7116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.638192][ T10] usb 1-1: device descriptor read/64, error -71 [ 174.912707][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 174.948012][ T5894] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 174.955825][ T5915] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 174.980661][ T5915] usb 2-1: device descriptor read/8, error -71 [ 175.048184][ T10] usb 1-1: device descriptor read/64, error -71 [ 175.110042][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 175.131141][ T5894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.150077][ T5894] usb 5-1: config 0 has no interface number 0 [ 175.156272][ T5894] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 175.179537][ T10] usb usb1-port1: attempt power cycle [ 175.193772][ T5894] usb 5-1: config 0 interface 1 has no altsetting 0 [ 175.204537][ T5894] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 175.215832][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.235345][ T5894] usb 5-1: Product: syz [ 175.244579][ T5894] usb 5-1: Manufacturer: syz [ 175.249434][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 175.269615][ T5894] usb 5-1: SerialNumber: syz [ 175.288516][ T5915] usb 2-1: device descriptor read/8, error -71 [ 175.304396][ T5894] usb 5-1: config 0 descriptor?? [ 175.451424][ T5915] usb usb2-port1: unable to enumerate USB device [ 175.508000][ T978] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 175.537803][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 175.631241][ T10] usb 1-1: device descriptor read/8, error -71 [ 175.632679][ T5894] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 175.786033][ T5894] cx231xx 5-1:0.1: Failed to read PCB config [ 175.793474][ T5894] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 175.809740][ T5894] usb 5-1: USB disconnect, device number 18 [ 175.822157][ T978] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 175.837153][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.846356][ T978] usb 3-1: Product: syz [ 175.855519][ T978] usb 3-1: Manufacturer: syz [ 175.863364][ T978] usb 3-1: SerialNumber: syz [ 175.880232][ T978] usb 3-1: config 0 descriptor?? [ 175.903382][ T978] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 017 [ 175.911572][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 175.938573][ T10] usb 1-1: device descriptor read/8, error -71 [ 176.085494][ T10] usb usb1-port1: unable to enumerate USB device [ 176.297784][ T5894] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 176.400537][ T978] (null): failure reading functionality [ 176.467697][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 176.475005][ T5894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.484554][ T5894] usb 5-1: config 0 has no interface number 0 [ 176.494738][ T5894] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 176.506525][ T5894] usb 5-1: config 0 interface 1 has no altsetting 0 [ 176.520187][ T5894] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 176.529601][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.546420][ T5894] usb 5-1: Product: syz [ 176.551708][ T5894] usb 5-1: Manufacturer: syz [ 176.564360][ T5894] usb 5-1: SerialNumber: syz [ 176.580179][ T5894] usb 5-1: config 0 descriptor?? [ 176.687707][ T5901] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 176.836737][ T5894] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 176.848697][ T5894] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 176.887728][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 176.896668][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.923060][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.944028][ T5901] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 176.960496][ T5894] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 176.971847][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.973042][ T5894] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 176.992664][ T5894] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 176.995650][ T5901] usb 2-1: config 0 descriptor?? [ 177.010510][ T5894] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 177.019544][ T5894] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 177.030611][ T5894] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32 [ 177.091461][ T5894] i2c i2c-3: Added multiplexed i2c bus 5 [ 177.104476][ T5894] i2c i2c-3: Added multiplexed i2c bus 6 [ 177.114204][ T5894] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 177.123530][ T5894] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 177.163710][ T5894] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 177.176857][ T5894] usb 5-1: USB disconnect, device number 19 [ 177.516774][ T5901] usbhid 2-1:0.0: can't add hid device: -71 [ 177.533812][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 177.582583][ T5901] usb 2-1: USB disconnect, device number 21 [ 177.902582][ T7155] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.062602][ T7162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.326203][ T978] i2c i2c-1: failure reading functionality [ 178.337280][ T978] i2c i2c-1: connected i2c-tiny-usb device [ 178.351596][ T978] usb 3-1: USB disconnect, device number 17 [ 178.508551][ T5894] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 178.679791][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 178.705178][ T5894] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 178.733889][ T5894] usb 4-1: config 0 has no interface number 0 [ 178.752712][ T5894] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 178.798036][ T5894] usb 4-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 178.833875][ T5894] usb 4-1: config 0 interface 41 has no altsetting 0 [ 178.864059][ T5894] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 178.902068][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.932865][ T5894] usb 4-1: Product: syz [ 178.937108][ T5894] usb 4-1: Manufacturer: syz [ 178.963614][ T5894] usb 4-1: SerialNumber: syz [ 178.993961][ T5894] usb 4-1: config 0 descriptor?? [ 179.001913][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 179.025107][ T7166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.036772][ T7166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.054259][ T5894] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 179.180704][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 179.375398][ T10] usb 1-1: config index 0 descriptor too short (expected 126, got 72) [ 179.402581][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 179.415189][ T7190] netlink: 'syz.2.347': attribute type 4 has an invalid length. [ 179.430045][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.465048][ T10] usb 1-1: Product: syz [ 179.466909][ T7193] netlink: 'syz.2.347': attribute type 4 has an invalid length. [ 179.486885][ T10] usb 1-1: Manufacturer: syz [ 179.513717][ T10] usb 1-1: SerialNumber: syz [ 179.584456][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 179.852051][ T5901] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 180.398348][ T10] usb 4-1: USB disconnect, device number 16 [ 180.480004][ T7176] netlink: 408 bytes leftover after parsing attributes in process `syz.0.342'. [ 180.590972][ T5894] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 180.664604][ T24] usb 1-1: USB disconnect, device number 17 [ 180.801818][ T5894] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 180.813121][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.822181][ T5894] usb 3-1: Product: syz [ 180.831841][ T5894] usb 3-1: Manufacturer: syz [ 180.856706][ T5894] usb 3-1: SerialNumber: syz [ 180.898334][ T5894] usb 3-1: config 0 descriptor?? [ 180.923713][ T5901] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 180.954369][ T5894] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 018 [ 180.978253][ T5901] ath9k_htc: Failed to initialize the device [ 181.006557][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 181.173220][ T7211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.487460][ T5894] (null): failure reading functionality [ 182.608209][ T5916] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 182.703462][ T7227] fuse: Bad value for 'fd' [ 182.791142][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 182.798953][ T5916] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 182.807201][ T5916] usb 5-1: config 0 has no interface number 0 [ 182.819290][ T5916] usb 5-1: config 0 interface 250 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 1023 [ 182.832440][ T5916] usb 5-1: config 0 interface 250 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 182.856282][ T5916] usb 5-1: config 0 interface 250 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 182.893643][ T5916] usb 5-1: config 0 interface 250 has no altsetting 0 [ 182.943810][ T5916] usb 5-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=88.04 [ 183.015558][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.123073][ T5916] usb 5-1: Product: syz [ 183.144188][ T5916] usb 5-1: Manufacturer: syz [ 183.162292][ T5916] usb 5-1: SerialNumber: syz [ 183.186711][ T5916] usb 5-1: config 0 descriptor?? [ 183.199752][ T7219] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.322120][ T5894] i2c i2c-1: failure reading functionality [ 183.337879][ T5915] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 183.349062][ T5894] i2c i2c-1: connected i2c-tiny-usb device [ 183.404633][ T5894] usb 3-1: USB disconnect, device number 18 [ 183.531961][ T5916] usb 5-1: USB disconnect, device number 20 [ 183.543409][ T7241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.548524][ T5915] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 183.612905][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 183.930490][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 183.963671][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 183.999027][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.017110][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.055898][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.076622][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.114974][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.160826][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.174966][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.205895][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.234709][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.277460][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.331240][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.357231][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.377219][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.389585][ T7257] fuse: Bad value for 'user_id' [ 184.394646][ T7257] fuse: Bad value for 'user_id' [ 184.396488][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.441523][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.459086][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.472816][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.504555][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.511242][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 184.526265][ T5915] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.542412][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.564390][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.566991][ T7259] vlan2: entered promiscuous mode [ 184.584652][ T5915] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 184.596735][ T5915] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 184.598047][ T7259] syz_tun: entered promiscuous mode [ 184.619306][ T5915] usb 4-1: Product: syz [ 184.623562][ T5915] usb 4-1: Manufacturer: syz [ 184.643140][ T5915] usb 4-1: SerialNumber: syz [ 184.663898][ T5915] usb 4-1: config 0 descriptor?? [ 184.683490][ T5915] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 184.898198][ T5916] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 185.003735][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.058302][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.066661][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 185.077224][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.111251][ T10] usb 4-1: USB disconnect, device number 17 [ 185.124178][ T10] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 185.133860][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.162355][ T5916] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 185.184421][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.200005][ T5915] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 185.215339][ T5916] usb 5-1: config 0 descriptor?? [ 185.414636][ T5915] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 185.427653][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.446116][ T5915] usb 3-1: Product: syz [ 185.452657][ T5915] usb 3-1: Manufacturer: syz [ 185.473108][ T5915] usb 3-1: SerialNumber: syz [ 185.503716][ T5915] usb 3-1: config 0 descriptor?? [ 185.525235][ T5915] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 019 [ 185.739596][ T5916] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 185.755221][ T5916] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 185.876936][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.893518][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.912938][ T24] usb 5-1: USB disconnect, device number 21 [ 185.992780][ T5915] (null): failure reading functionality [ 186.327683][ T5886] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 186.468199][ T5886] usb 4-1: device descriptor read/64, error -71 [ 186.589546][ T7291] fuse: Bad value for 'user_id' [ 186.594632][ T7291] fuse: Bad value for 'user_id' [ 186.730671][ T5886] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 186.833918][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 186.871764][ T7296] bond_slave_0: entered promiscuous mode [ 186.877603][ T7296] bond_slave_1: entered promiscuous mode [ 186.883985][ T7296] macvtap2: entered promiscuous mode [ 186.890129][ T7296] bond0: entered promiscuous mode [ 186.895992][ T7296] macvtap2: entered allmulticast mode [ 186.897361][ T5886] usb 4-1: device descriptor read/64, error -71 [ 186.903215][ T7296] bond0: entered allmulticast mode [ 186.913522][ T7296] bond_slave_0: entered allmulticast mode [ 186.927697][ T7296] bond_slave_1: entered allmulticast mode [ 186.936315][ T7296] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 186.953155][ T7298] bond0: left allmulticast mode [ 186.958480][ T7298] bond_slave_0: left allmulticast mode [ 186.964062][ T7298] bond_slave_1: left allmulticast mode [ 186.990108][ T7298] bond0: left promiscuous mode [ 187.016067][ T7298] bond_slave_0: left promiscuous mode [ 187.021645][ T7298] bond_slave_1: left promiscuous mode [ 187.038179][ T5886] usb usb4-port1: attempt power cycle [ 187.387810][ T5886] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 187.438600][ T5886] usb 4-1: device descriptor read/8, error -71 [ 187.519489][ T7311] loop9: detected capacity change from 0 to 6 [ 187.527610][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 187.531524][ T7311] Dev loop9: unable to read RDB block 6 [ 187.545726][ T7311] loop9: unable to read partition table [ 187.553000][ T7311] loop9: partition table beyond EOD, truncated [ 187.561435][ T7311] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 187.561435][ T7311] ) failed (rc=-5) [ 187.678520][ T5886] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 187.718420][ T5886] usb 4-1: device descriptor read/8, error -71 [ 187.727737][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 187.735050][ T10] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 187.762643][ T10] usb 1-1: config 0 has no interface number 0 [ 187.784002][ T10] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.828002][ T5886] usb usb4-port1: unable to enumerate USB device [ 187.852482][ T10] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 187.970601][ T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 187.987222][ T10] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 188.002368][ T10] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 188.024433][ T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.033698][ T5915] i2c i2c-1: failure reading functionality [ 188.038776][ T10] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 188.062481][ T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 188.062906][ T5915] i2c i2c-1: connected i2c-tiny-usb device [ 188.074139][ T10] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 188.100398][ T10] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.269691][ T5915] usb 3-1: USB disconnect, device number 19 [ 188.355865][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.419686][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.440247][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.454178][ T10] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 188.475417][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.529604][ T7320] netlink: 76 bytes leftover after parsing attributes in process `syz.2.388'. [ 188.566966][ T10] usb 1-1: Product: syz [ 188.631528][ T10] usb 1-1: Manufacturer: syz [ 188.684520][ T10] usb 1-1: SerialNumber: syz [ 188.705297][ T10] usb 1-1: config 0 descriptor?? [ 188.724741][ T7308] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 188.736723][ T7308] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 188.758899][ T10] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 188.772182][ T10] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 188.814803][ T10] scsi host1: microtekX6 [ 189.006033][ T5915] usb 1-1: USB disconnect, device number 18 [ 189.958074][ T5894] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 190.147667][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 190.323516][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.376623][ T5894] usb 3-1: config 0 has no interfaces? [ 190.418675][ T5894] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 190.468165][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.491224][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.396'. [ 190.505234][ T5894] usb 3-1: config 0 descriptor?? [ 190.527399][ T7357] vlan2: entered promiscuous mode [ 190.536846][ T7357] bridge0: entered promiscuous mode [ 190.901977][ T7344] netlink: 56 bytes leftover after parsing attributes in process `syz.2.391'. [ 190.927674][ T5901] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 191.177695][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 191.233506][ T5901] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 191.263518][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.267892][ T5915] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 191.279553][ T5901] usb 1-1: Product: syz [ 191.285058][ T5901] usb 1-1: Manufacturer: syz [ 191.304180][ T5901] usb 1-1: SerialNumber: syz [ 191.344574][ T5901] r8152-cfgselector 1-1: Unknown version 0x0000 [ 191.352129][ T5901] r8152-cfgselector 1-1: config 0 descriptor?? [ 191.365446][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 191.393680][ T7364] bond_slave_0: entered promiscuous mode [ 191.399511][ T7364] bond_slave_1: entered promiscuous mode [ 191.414491][ T7364] macvtap2: entered promiscuous mode [ 191.422013][ T7364] bond0: entered promiscuous mode [ 191.435887][ T5915] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 191.450873][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.459945][ T5915] usb 5-1: Product: syz [ 191.464222][ T5915] usb 5-1: Manufacturer: syz [ 191.471666][ T5915] usb 5-1: SerialNumber: syz [ 191.476920][ T7364] macvtap2: entered allmulticast mode [ 191.514203][ T7364] bond0: entered allmulticast mode [ 191.522676][ T5915] usb 5-1: config 0 descriptor?? [ 191.527593][ T7364] bond_slave_0: entered allmulticast mode [ 191.533782][ T7364] bond_slave_1: entered allmulticast mode [ 191.534478][ T5915] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 022 [ 191.541820][ T7364] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 191.602011][ T7365] bond0: left allmulticast mode [ 191.615070][ T7365] bond_slave_0: left allmulticast mode [ 191.625245][ T7365] bond_slave_1: left allmulticast mode [ 191.632131][ T7365] bond0: left promiscuous mode [ 191.638767][ T7365] bond_slave_0: left promiscuous mode [ 191.644336][ T7365] bond_slave_1: left promiscuous mode [ 191.857082][ T7368] netlink: 76 bytes leftover after parsing attributes in process `syz.1.401'. [ 192.025092][ T5915] (null): failure reading functionality [ 192.521841][ T5894] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 192.712422][ T5901] usb 3-1: USB disconnect, device number 20 [ 193.020152][ T7385] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 193.847670][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 193.899801][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 193.919752][ T7397] vlan2: entered promiscuous mode [ 193.924973][ T7397] bridge0: entered promiscuous mode [ 193.953057][ T5901] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 193.997785][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 194.074920][ T5915] i2c i2c-1: failure reading functionality [ 194.127093][ T24] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 194.156361][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 194.160702][ T5915] i2c i2c-1: connected i2c-tiny-usb device [ 194.170236][ T24] usb 1-1: config 0 has no interface number 0 [ 194.171703][ T5901] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 194.176383][ T24] usb 1-1: config 0 interface 250 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 1023 [ 194.187564][ T5901] usb 2-1: config 0 has no interface number 0 [ 194.213341][ T5915] usb 5-1: USB disconnect, device number 22 [ 194.237281][ T5901] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 194.259525][ T24] usb 1-1: config 0 interface 250 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 194.285664][ T5901] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 194.311974][ T24] usb 1-1: config 0 interface 250 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 194.353619][ T24] usb 1-1: config 0 interface 250 has no altsetting 0 [ 194.360953][ T5901] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 194.384584][ T24] usb 1-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=88.04 [ 194.393229][ T5901] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 194.415805][ T5901] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 194.419923][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.441775][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.448378][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.487375][ T24] usb 1-1: Product: syz [ 194.497380][ T24] usb 1-1: Manufacturer: syz [ 194.502483][ T24] usb 1-1: SerialNumber: syz [ 194.514763][ T24] usb 1-1: config 0 descriptor?? [ 194.522933][ T5901] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.524031][ T7393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.566948][ T5901] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 194.596206][ T5901] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 194.640733][ T5901] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 194.678072][ T5901] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.712088][ T7407] trusted_key: syz.2.412 sent an empty control message without MSG_MORE. [ 194.788569][ T5901] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 194.797954][ T5916] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 194.806683][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.808743][ T7393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.406'. [ 194.827229][ T5901] usb 2-1: Product: syz [ 194.831875][ T5901] usb 2-1: Manufacturer: syz [ 194.837664][ T5901] usb 2-1: SerialNumber: syz [ 194.855970][ T5901] usb 2-1: config 0 descriptor?? [ 194.868883][ T24] usb 1-1: USB disconnect, device number 20 [ 194.873551][ T7395] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.884088][ T7395] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.899890][ T5901] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 194.931753][ T5901] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 195.007784][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 195.015645][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.024304][ T5916] usb 5-1: config 0 has no interface number 0 [ 195.030848][ T5916] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.052499][ T5901] scsi host1: microtekX6 [ 195.139388][ T5916] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.151431][ T5916] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 195.604947][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.631610][ T5901] usb 2-1: USB disconnect, device number 22 [ 195.670046][ T55] microtek usb (rev 0.4.3): error -19 submitting URB [ 195.717649][ T55] microtek usb (rev 0.4.3): error -19 submitting URB [ 195.757341][ T7418] netlink: 76 bytes leftover after parsing attributes in process `syz.0.413'. [ 195.804830][ T5916] usb 5-1: config 0 descriptor?? [ 196.631888][ T7430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.250564][ T7443] fuse: Bad value for 'user_id' [ 197.255876][ T7443] fuse: Bad value for 'user_id' [ 197.296879][ T5901] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 197.619380][ T7446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.686119][ T7447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.829738][ T5901] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 197.841668][ T7446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.005894][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.057780][ T5901] usb 1-1: Product: syz [ 198.083446][ T5901] usb 1-1: Manufacturer: syz [ 198.114100][ T5901] usb 1-1: SerialNumber: syz [ 198.413424][ T5901] usb 1-1: config 0 descriptor?? [ 198.484617][ T5901] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 021 [ 198.978044][ T5901] (null): failure reading functionality [ 199.368876][ T5916] usbhid 5-1:0.1: can't add hid device: -71 [ 199.375102][ T5916] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 199.409706][ T5916] usb 5-1: USB disconnect, device number 23 [ 199.588023][ T5915] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 199.900750][ T5915] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 199.916954][ T5915] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.083977][ T5915] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.174896][ T5901] i2c i2c-1: failure reading functionality [ 200.228631][ T5901] i2c i2c-1: connected i2c-tiny-usb device [ 200.247783][ T5915] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.256904][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.400720][ T7466] input: syz0 as /devices/virtual/input/input18 [ 200.411970][ T5901] usb 1-1: USB disconnect, device number 21 [ 200.499897][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.561278][ T5915] usb 4-1: invalid MIDI out EP 0 [ 200.964161][ T7466] xt_CT: No such helper "snmp" [ 201.148498][ T5901] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 201.322949][ T5901] usb 1-1: config 7 interface 0 has no altsetting 0 [ 201.345571][ T5901] usb 1-1: string descriptor 0 read error: -22 [ 201.349256][ T5915] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 201.353088][ T5901] usb 1-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 201.440627][ T5916] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 201.477245][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.535080][ T5901] usb 1-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 201.585971][ T5901] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.611125][ T5901] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 201.622726][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.632837][ T5916] usb 3-1: config 7 has an invalid interface number: 67 but max is 0 [ 201.641941][ T5916] usb 3-1: config 7 has no interface number 0 [ 201.661350][ T5916] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 201.675111][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.723678][ T5901] usb 1-1: media controller created [ 201.761176][ T5916] usb 3-1: Product: 㯑 [ 201.789000][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 201.789016][ T30] audit: type=1326 audit(1750994417.797:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.0.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f774178e929 code=0x0 [ 201.968608][ T7482] fuse: Bad value for 'fd' [ 201.974623][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.023639][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.189731][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.314908][ T5916] usb 3-1: USB disconnect, device number 21 [ 202.772288][ T5901] usb 4-1: USB disconnect, device number 22 [ 203.002649][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 203.047744][ T7488] vlan2: entered promiscuous mode [ 203.055308][ T7488] bridge0: entered promiscuous mode [ 203.456849][ T7497] netlink: 'syz.3.432': attribute type 2 has an invalid length. [ 203.590862][ T5915] usb 1-1: USB disconnect, device number 22 [ 204.358793][ T5886] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 204.380930][ T7518] input: syz0 as /devices/virtual/input/input19 [ 204.397698][ T5901] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 204.448188][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 204.538248][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 204.610511][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.613570][ T5915] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 204.709902][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.712351][ T5901] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.755761][ T5915] usb 2-1: Product: syz [ 204.777452][ T5915] usb 2-1: Manufacturer: syz [ 204.784032][ T5915] usb 2-1: SerialNumber: syz [ 204.806699][ T5915] usb 2-1: config 0 descriptor?? [ 204.821812][ T5915] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 023 [ 205.012751][ T5901] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 205.037366][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 205.117716][ T5901] usb 5-1: Product: syz [ 205.124422][ T5901] usb 5-1: Manufacturer: syz [ 205.142465][ T5901] usb 5-1: SerialNumber: syz [ 205.532009][ T5915] (null): failure reading functionality [ 205.616345][ T5901] usb 5-1: config 0 descriptor?? [ 205.699751][ T7519] xt_CT: No such helper "snmp" [ 205.858527][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.884361][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.921463][ T7526] PKCS7: Unknown OID: [5] (bad) [ 206.066148][ T7526] PKCS7: Only support pkcs7_signedData type [ 206.096361][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.109026][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.706026][ T5886] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.750833][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 206.757420][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 206.763633][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 206.777994][ T978] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 206.785689][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 206.792434][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 206.819719][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 206.827442][ T5886] usb 4-1: can't read configurations, error -71 [ 206.990899][ T978] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 207.050593][ T978] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 207.088265][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.362158][ T5915] i2c i2c-1: failure reading functionality [ 207.374546][ T978] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 207.437415][ T5915] i2c i2c-1: connected i2c-tiny-usb device [ 207.488436][ T5915] usb 2-1: USB disconnect, device number 23 [ 207.565536][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 207.642008][ T7542] vlan2: entered promiscuous mode [ 207.670982][ T7534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.700680][ T7534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.729335][ T978] usb 3-1: USB disconnect, device number 22 [ 207.737680][ T5886] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 207.887702][ T5886] usb 4-1: device descriptor read/64, error -71 [ 208.007999][ T5886] usb usb4-port1: attempt power cycle [ 208.079137][ T7551] netlink: 'syz.1.447': attribute type 6 has an invalid length. [ 208.080355][ T5915] usb 5-1: USB disconnect, device number 24 [ 208.097672][ T5894] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 208.267713][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 208.283277][ T5894] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 208.293777][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.306310][ T5894] usb 1-1: Product: syz [ 208.311541][ T5894] usb 1-1: Manufacturer: syz [ 208.316390][ T5894] usb 1-1: SerialNumber: syz [ 208.349979][ T5894] r8152-cfgselector 1-1: Unknown version 0x0000 [ 208.356305][ T5894] r8152-cfgselector 1-1: config 0 descriptor?? [ 208.387663][ T5886] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 208.408300][ T5886] usb 4-1: device descriptor read/8, error -71 [ 208.505096][ T978] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 208.639180][ T7564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.452'. [ 208.650473][ T5886] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 208.679176][ T5886] usb 4-1: device descriptor read/8, error -71 [ 208.690153][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 208.712506][ T978] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 208.731693][ T978] usb 2-1: config 0 has no interface number 1 [ 208.752361][ T978] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 208.770729][ T5916] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 208.778719][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.809971][ T5886] usb usb4-port1: unable to enumerate USB device [ 208.844847][ T978] usb 2-1: config 0 descriptor?? [ 208.957801][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 209.098355][ T978] qcserial 2-1:0.2: Qualcomm USB modem converter detected [ 209.198810][ T5886] r8152-cfgselector 1-1: USB disconnect, device number 23 [ 209.310383][ T30] audit: type=1326 audit(1750994425.337:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb50cb8e929 code=0x0 [ 209.338878][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 209.437385][ T978] usb 2-1: USB disconnect, device number 24 [ 209.445172][ T978] qcserial 2-1:0.2: device disconnected [ 209.887758][ T978] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 210.053453][ T978] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 210.112165][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.158600][ T978] usb 1-1: Product: syz [ 210.174716][ T978] usb 1-1: Manufacturer: syz [ 210.216063][ T978] usb 1-1: SerialNumber: syz [ 210.327872][ T978] usb 1-1: config 0 descriptor?? [ 210.353093][ T978] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 024 [ 210.504453][ T7574] netlink: 'syz.2.454': attribute type 2 has an invalid length. [ 210.926055][ T978] (null): failure reading functionality [ 210.977836][ T978] i2c i2c-1: failure reading functionality [ 211.006263][ T978] i2c i2c-1: connected i2c-tiny-usb device [ 211.055372][ T978] usb 1-1: USB disconnect, device number 24 [ 211.128082][ T5915] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 211.297657][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 211.309863][ T5915] usb 4-1: config 0 has an invalid interface number: 250 but max is 0 [ 211.320065][ T5915] usb 4-1: config 0 has no interface number 0 [ 211.335669][ T5915] usb 4-1: config 0 interface 250 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 1023 [ 211.390825][ T5915] usb 4-1: config 0 interface 250 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 211.447948][ T5915] usb 4-1: config 0 interface 250 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 211.503731][ T5915] usb 4-1: config 0 interface 250 has no altsetting 0 [ 211.510987][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.550618][ T5915] usb 4-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=88.04 [ 211.559893][ T5916] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 211.575471][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.591639][ T5916] usb 5-1: can't read configurations, error -71 [ 211.618175][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 211.627341][ T5915] usb 4-1: Product: syz [ 211.644867][ T5915] usb 4-1: Manufacturer: syz [ 211.654212][ T5915] usb 4-1: SerialNumber: syz [ 211.686253][ T5915] usb 4-1: config 0 descriptor?? [ 211.710135][ T7578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.922047][ T7578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.455'. [ 211.967760][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 211.977613][ T5916] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 212.010146][ T5915] usb 4-1: USB disconnect, device number 27 [ 212.139690][ T43] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 212.140819][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.173992][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.185874][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.196950][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.203927][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.205175][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.222476][ T5886] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 212.256495][ T5916] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 212.294047][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 212.303177][ T5916] usb 5-1: Product: syz [ 212.307451][ T5916] usb 5-1: Manufacturer: syz [ 212.307821][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.312373][ T5916] usb 5-1: SerialNumber: syz [ 212.333994][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.335049][ T5916] usb 5-1: config 0 descriptor?? [ 212.342970][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.359253][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.372226][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.381365][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.392749][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.405577][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.417161][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.431752][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.446255][ T5886] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 212.462661][ T5886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.474072][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.481334][ T5886] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.501827][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.514200][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.530070][ T5886] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.540799][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.548189][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.558150][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.567116][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.583356][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.612158][ T5886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.630434][ T5886] usb 2-1: invalid MIDI out EP 0 [ 212.643376][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.662881][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.673770][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.712663][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.720705][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.752318][ T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 212.762765][ T43] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 212.777617][ T43] usb 1-1: Product: syz [ 212.787918][ T43] usb 1-1: Manufacturer: syz [ 212.827650][ T7593] FAULT_INJECTION: forcing a failure. [ 212.827650][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 212.828967][ T43] usb 1-1: SerialNumber: syz [ 212.884886][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.3.461 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 212.884917][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.884929][ T7593] Call Trace: [ 212.884937][ T7593] [ 212.884946][ T7593] dump_stack_lvl+0x189/0x250 [ 212.884981][ T7593] ? __pfx____ratelimit+0x10/0x10 [ 212.885010][ T7593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.885040][ T7593] ? __pfx__printk+0x10/0x10 [ 212.885068][ T7593] ? __pfx___might_resched+0x10/0x10 [ 212.885104][ T7593] should_fail_ex+0x414/0x560 [ 212.885132][ T7593] should_failslab+0xa8/0x100 [ 212.885154][ T7593] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 212.885181][ T7593] ? zswap_store+0xbfa/0x1d10 [ 212.885204][ T7593] zswap_store+0xbfa/0x1d10 [ 212.885225][ T7593] ? __lock_acquire+0xab9/0xd20 [ 212.885246][ T7593] ? zswap_store+0x721/0x1d10 [ 212.885271][ T7593] ? __pfx_zswap_store+0x10/0x10 [ 212.885297][ T7593] ? do_raw_spin_unlock+0x122/0x240 [ 212.885320][ T7593] ? folio_free_swap+0x289/0x430 [ 212.885347][ T7593] swap_writeout+0x6d9/0xce0 [ 212.885375][ T7593] ? __pfx_swap_writeout+0x10/0x10 [ 212.885393][ T7593] shrink_folio_list+0x31ba/0x4e90 [ 212.885453][ T7593] ? __pfx_shrink_folio_list+0x10/0x10 [ 212.885584][ T7593] ? __pfx_css_rstat_updated+0x10/0x10 [ 212.885619][ T7593] reclaim_folio_list+0xeb/0x500 [ 212.885662][ T7593] ? __pfx_reclaim_folio_list+0x10/0x10 [ 212.885683][ T7593] ? lru_gen_update_size+0x818/0xd20 [ 212.885704][ T7593] ? __mod_zone_page_state+0xd7/0x140 [ 212.885733][ T7593] ? lru_gen_del_folio+0x359/0x540 [ 212.885754][ T7593] reclaim_pages+0x49a/0x5b0 [ 212.885788][ T7593] ? __pfx_reclaim_pages+0x10/0x10 [ 212.885816][ T7593] ? madvise_cold_or_pageout_pte_range+0x19b1/0x1d60 [ 212.885842][ T7593] madvise_cold_or_pageout_pte_range+0x19da/0x1d60 [ 212.885882][ T7593] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 212.885923][ T7593] walk_pgd_range+0x1096/0x1e70 [ 212.885991][ T7593] ? __pfx_walk_pgd_range+0x10/0x10 [ 212.886029][ T7593] __walk_page_range+0x14c/0x710 [ 212.886061][ T7593] ? find_vma+0xe7/0x160 [ 212.886077][ T7593] ? __pfx_find_vma+0x10/0x10 [ 212.886104][ T7593] walk_page_range_mm+0x42d/0x620 [ 212.886142][ T7593] ? __pfx_walk_page_range_mm+0x10/0x10 [ 212.886183][ T7593] ? mlock_drain_local+0x79/0x490 [ 212.886212][ T7593] ? walk_page_range+0x6b/0x90 [ 212.886243][ T7593] madvise_do_behavior+0x1c01/0x2e70 [ 212.886283][ T7593] ? __pfx_madvise_do_behavior+0x10/0x10 [ 212.886307][ T7593] ? __might_fault+0xb0/0x130 [ 212.886327][ T7593] ? _parse_integer_limit+0x1ae/0x1f0 [ 212.886378][ T7593] ? get_pid_task+0x20/0x1f0 [ 212.886415][ T7593] ? __lock_acquire+0xab9/0xd20 [ 212.886453][ T7593] ? madvise_lock+0xda/0x200 [ 212.886495][ T7593] do_madvise+0x174/0x220 [ 212.886520][ T7593] ? __pfx_do_madvise+0x10/0x10 [ 212.886553][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 212.886568][ T7593] ? rcu_is_watching+0x15/0xb0 [ 212.886603][ T7593] __x64_sys_madvise+0xa7/0xc0 [ 212.886625][ T7593] do_syscall_64+0xfa/0x3b0 [ 212.886652][ T7593] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.886678][ T7593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.886697][ T7593] ? clear_bhb_loop+0x60/0xb0 [ 212.886721][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.886738][ T7593] RIP: 0033:0x7f5e02f8e929 [ 212.886756][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.886774][ T7593] RSP: 002b:00007f5e03de1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 212.886797][ T7593] RAX: ffffffffffffffda RBX: 00007f5e031b5fa0 RCX: 00007f5e02f8e929 [ 212.886811][ T7593] RDX: 0000000000000015 RSI: 0000000000c00304 RDI: 0000200000000000 [ 212.886824][ T7593] RBP: 00007f5e03de1090 R08: 0000000000000000 R09: 0000000000000000 [ 212.886836][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.886848][ T7593] R13: 0000000000000000 R14: 00007f5e031b5fa0 R15: 00007f5e032dfa28 [ 212.886878][ T7593] [ 213.354118][ T5886] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 213.376060][ T43] usb 1-1: config 0 descriptor?? [ 213.391478][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.400634][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.447220][ T43] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 213.749532][ T7600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.463'. [ 214.068481][ T5886] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 214.202167][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.211564][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.233682][ T5916] usb 1-1: USB disconnect, device number 25 [ 214.243170][ T5916] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 214.320405][ T5886] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 214.342719][ T5886] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 214.361370][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.461405][ T978] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 214.506652][ T5886] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 214.530850][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.780544][ T5916] usb 2-1: USB disconnect, device number 25 [ 214.801589][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 214.818041][ T978] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 214.829967][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.859525][ T978] usb 4-1: Product: syz [ 214.872011][ T978] usb 4-1: Manufacturer: syz [ 214.879664][ T978] usb 4-1: SerialNumber: syz [ 214.898667][ T978] usb 4-1: config 0 descriptor?? [ 215.024013][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.059386][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.105721][ T5886] usb 3-1: USB disconnect, device number 23 [ 215.948407][ T7614] netlink: 'syz.0.466': attribute type 2 has an invalid length. [ 216.645658][ T10] usb 5-1: USB disconnect, device number 26 [ 217.157641][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 217.255299][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 217.418898][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 217.439126][ T7634] team_slave_0: entered promiscuous mode [ 217.445009][ T7634] team_slave_1: entered promiscuous mode [ 217.468083][ T5886] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 217.498353][ T7634] macvtap3: entered promiscuous mode [ 217.503775][ T7634] team0: entered promiscuous mode [ 217.510046][ T43] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 217.510822][ T7634] macvtap3: entered allmulticast mode [ 217.527891][ T7634] team0: entered allmulticast mode [ 217.543117][ T7634] team_slave_0: entered allmulticast mode [ 217.550165][ T43] usb 5-1: config 0 has no interface number 0 [ 217.556553][ T43] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.588156][ T7634] team_slave_1: entered allmulticast mode [ 217.624602][ T43] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 217.655302][ T7634] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 217.667655][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 217.686261][ T43] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 217.713073][ T7635] team0: left allmulticast mode [ 217.748918][ T7635] team_slave_0: left allmulticast mode [ 217.760326][ T43] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 217.788181][ T43] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 217.819237][ T7635] team_slave_1: left allmulticast mode [ 217.844330][ T43] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.857395][ T7635] team0: left promiscuous mode [ 217.872589][ T43] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 217.895529][ T7635] team_slave_0: left promiscuous mode [ 217.901206][ T7635] team_slave_1: left promiscuous mode [ 217.911628][ T43] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 217.940447][ T43] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 217.950216][ T978] usb 4-1: USB disconnect, device number 28 [ 217.977347][ T43] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.001564][ T43] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 218.012770][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.079389][ T43] usb 5-1: Product: syz [ 218.107687][ T43] usb 5-1: Manufacturer: syz [ 218.155911][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.157287][ T43] usb 5-1: SerialNumber: syz [ 218.426166][ T43] usb 5-1: config 0 descriptor?? [ 218.432330][ T7624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 218.442660][ T7624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 218.540160][ T43] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 218.578397][ T43] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 218.616468][ T43] scsi host1: microtekX6 [ 218.976213][ T43] usb 5-1: USB disconnect, device number 27 [ 218.998286][ T55] microtek usb (rev 0.4.3): error -19 submitting URB [ 219.101674][ T55] microtek usb (rev 0.4.3): error -19 submitting URB [ 219.147730][ T55] microtek usb (rev 0.4.3): error -19 submitting URB [ 219.718732][ T7639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.791858][ T7639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.832212][ T7645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.410544][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 220.580452][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 220.605497][ T5886] usb 3-1: can't read configurations, error -71 [ 220.973172][ T7660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.479'. [ 221.474639][ T7664] netlink: 'syz.2.480': attribute type 2 has an invalid length. [ 221.487664][ T5894] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 221.638112][ T978] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 221.639447][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.682273][ T5894] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 221.708558][ T5894] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.717867][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.726031][ T5894] usb 4-1: Product: syz [ 221.734258][ T5894] usb 4-1: Manufacturer: syz [ 221.752816][ T5894] usb 4-1: SerialNumber: syz [ 221.766420][ T5894] usb 4-1: config 0 descriptor?? [ 221.809487][ T978] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 221.847643][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.859766][ T978] usb 1-1: Product: syz [ 221.863992][ T978] usb 1-1: Manufacturer: syz [ 221.900943][ T978] usb 1-1: SerialNumber: syz [ 221.925852][ T978] usb 1-1: config 0 descriptor?? [ 221.950608][ T978] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 026 [ 222.009456][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.019243][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.233423][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.245942][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.488579][ T978] (null): failure reading functionality [ 223.097900][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 223.418862][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 224.408301][ T978] i2c i2c-1: failure reading functionality [ 224.586018][ T978] i2c i2c-1: connected i2c-tiny-usb device [ 224.621501][ T978] usb 1-1: USB disconnect, device number 26 [ 224.677114][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 224.701272][ T7698] vlan2: entered promiscuous mode [ 224.706606][ T7698] syz_tun: entered promiscuous mode [ 225.769689][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.789195][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 225.821699][ T10] usb 3-1: can't read configurations, error -71 [ 225.859722][ T7712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.903314][ T5830] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 225.982791][ T978] usb 4-1: USB disconnect, device number 29 [ 226.068630][ T5894] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 226.502368][ T7715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.609973][ T5894] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 226.621133][ T5894] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 226.626179][ T7701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.630288][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.661889][ T7701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.692060][ T5894] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 226.692443][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.984267][ T7706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.998060][ T7706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.010918][ T5894] usb 2-1: USB disconnect, device number 26 [ 227.377640][ T5886] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 227.551335][ T7739] input: syz0 as /devices/virtual/input/input21 [ 227.617595][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 227.625144][ T5886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 227.690398][ T5886] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 227.703685][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.849046][ T5886] usb 1-1: Product: syz [ 227.865602][ T5886] usb 1-1: Manufacturer: syz [ 227.881149][ T5886] usb 1-1: SerialNumber: syz [ 227.905901][ T5886] usb 1-1: config 0 descriptor?? [ 227.927621][ T5886] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 228.210418][ T7739] xt_CT: No such helper "snmp" [ 228.323522][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 228.478119][ T7749] ip6gretap0: entered allmulticast mode [ 228.542519][ T5886] gspca_zc3xx: reg_w_i err -71 [ 228.561375][ T7754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.659938][ T5830] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 228.973322][ T30] audit: type=1326 audit(1750994444.997:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297198e929 code=0x7ffc0000 [ 228.975612][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 229.090410][ T30] audit: type=1326 audit(1750994444.997:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297198e929 code=0x7ffc0000 [ 229.150713][ T5886] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 229.159003][ T5886] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 229.164007][ T10] usb 2-1: config 0 has an invalid interface number: 31 but max is 1 [ 229.177846][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.180509][ T5886] usb 1-1: USB disconnect, device number 27 [ 229.214650][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 229.224671][ T30] audit: type=1326 audit(1750994444.997:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f297198e929 code=0x7ffc0000 [ 229.236270][ T10] usb 2-1: config 0 has no interface number 0 [ 229.336779][ T30] audit: type=1326 audit(1750994444.997:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297198e929 code=0x7ffc0000 [ 229.409197][ T10] usb 2-1: too many endpoints for config 0 interface 31 altsetting 106: 182, using maximum allowed: 30 [ 229.437904][ T7763] netlink: 'syz.3.512': attribute type 2 has an invalid length. [ 229.446849][ T30] audit: type=1326 audit(1750994444.997:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297198e929 code=0x7ffc0000 [ 229.469083][ T10] usb 2-1: config 0 interface 31 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 229.469124][ T10] usb 2-1: config 0 interface 31 has no altsetting 0 [ 229.469166][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 229.469190][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.539214][ T10] usb 2-1: config 0 descriptor?? [ 229.740710][ T30] audit: type=1326 audit(1750994444.997:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f297198e929 code=0x7ffc0000 [ 229.778111][ T30] audit: type=1326 audit(1750994444.997:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297198e929 code=0x7ffc0000 [ 229.801755][ T30] audit: type=1326 audit(1750994444.997:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f297198e929 code=0x7ffc0000 [ 229.817590][ T10] usb 2-1: string descriptor 0 read error: -71 [ 229.936092][ T30] audit: type=1326 audit(1750994444.997:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f297198e963 code=0x7ffc0000 [ 229.938384][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 229.991099][ T7775] program syz.4.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.021367][ T30] audit: type=1326 audit(1750994445.037:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f297198e963 code=0x7ffc0000 [ 230.037678][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 230.131196][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 230.160849][ T7778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.237088][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 230.287890][ T10] usb 2-1: media controller created [ 230.356931][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.423809][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 230.440517][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 230.454178][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 230.476102][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 230.561815][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 230.635340][ T10] usb 2-1: USB disconnect, device number 27 [ 230.905705][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 230.926949][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 230.981466][ T7796] bond_slave_0: entered promiscuous mode [ 230.987250][ T7796] bond_slave_1: entered promiscuous mode [ 231.007149][ T5830] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 231.119285][ T7796] macvtap3: entered promiscuous mode [ 231.148890][ T7799] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 231.158070][ T7796] bond0: entered promiscuous mode [ 231.163876][ T7796] macvtap3: entered allmulticast mode [ 231.227291][ T7796] bond0: entered allmulticast mode [ 231.236234][ T5830] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 231.257566][ T7796] bond_slave_0: entered allmulticast mode [ 231.263365][ T7796] bond_slave_1: entered allmulticast mode [ 231.338016][ T43] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 231.530736][ T7796] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 231.563649][ T7797] bond0: left allmulticast mode [ 231.577093][ T7797] bond_slave_0: left allmulticast mode [ 231.583130][ T7797] bond_slave_1: left allmulticast mode [ 231.589335][ T7797] bond0: left promiscuous mode [ 231.596609][ T7797] bond_slave_0: left promiscuous mode [ 231.602165][ T7797] bond_slave_1: left promiscuous mode [ 231.637805][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 231.655996][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 231.693861][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 231.702116][ T7802] netlink: 60 bytes leftover after parsing attributes in process `syz.1.524'. [ 231.736306][ T43] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 231.764008][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.784361][ T43] usb 3-1: Product: syz [ 231.802738][ T43] usb 3-1: Manufacturer: syz [ 231.807409][ T43] usb 3-1: SerialNumber: syz [ 231.834250][ T43] usb 3-1: config 0 descriptor?? [ 231.846058][ T7794] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.875067][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 231.893893][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 231.936928][ T43] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 232.190852][ T5920] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 232.267710][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 232.397718][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 232.404947][ T5920] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 232.427152][ T5920] usb 2-1: config 0 has no interface number 0 [ 232.452410][ T5920] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 232.477362][ T5920] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.535069][ T5920] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 232.555050][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 232.592617][ T5920] usb 2-1: Product: syz [ 232.596983][ T5920] usb 2-1: SerialNumber: syz [ 232.605839][ T5920] usb 2-1: config 0 descriptor?? [ 232.619281][ T5920] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 232.822432][ T5920] usb 2-1: USB disconnect, device number 28 [ 232.861150][ T7817] netlink: 'syz.3.527': attribute type 2 has an invalid length. [ 232.889251][ T7823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.950091][ T978] usb 3-1: USB disconnect, device number 28 [ 233.107685][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 233.257716][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 233.264936][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 233.273124][ T10] usb 5-1: can't read configurations, error -22 [ 233.407981][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 233.487184][ T7826] netlink: 68 bytes leftover after parsing attributes in process `syz.1.534'. [ 233.618051][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 233.623769][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 233.657909][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 233.665912][ T10] usb 5-1: can't read configurations, error -22 [ 233.683397][ T10] usb usb5-port1: attempt power cycle [ 233.847666][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 234.049925][ T43] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 234.065873][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 234.067643][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 234.088607][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.118231][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 234.119391][ T7839] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 234.125750][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 234.151502][ T10] usb 5-1: can't read configurations, error -22 [ 234.160934][ T5886] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 234.201702][ T43] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 234.217353][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.298004][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 234.331171][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 234.348989][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 234.372437][ T10] usb 5-1: can't read configurations, error -22 [ 234.393621][ T10] usb usb5-port1: unable to enumerate USB device [ 234.476594][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.528077][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.556696][ T10] usb 2-1: USB disconnect, device number 29 [ 234.876008][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.898861][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.007628][ T978] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 235.060653][ T7865] netlink: 'syz.0.546': attribute type 2 has an invalid length. [ 235.107614][ T5916] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 235.184790][ T978] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 235.195263][ T978] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.207628][ T978] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.221567][ T978] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.231988][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.258241][ T5916] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 235.267588][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.277300][ T5916] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.301261][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.310141][ T978] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.408191][ T978] usb 4-1: invalid MIDI out EP 0 [ 235.426668][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.462161][ T5916] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.478201][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.486613][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.507099][ T5916] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.530950][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.610145][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.628067][ T5916] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.734213][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.756033][ T7867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.785337][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.808074][ T978] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 235.818657][ T5916] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.838392][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.932315][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 235.964865][ T5916] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.003828][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.066099][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.084729][ T5916] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.147686][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.157683][ T5916] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.179357][ T5916] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.211112][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.234086][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 236.236308][ T5916] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 236.259105][ T5916] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 236.284868][ T5916] usb 3-1: Product: syz [ 236.293768][ T5916] usb 3-1: Manufacturer: syz [ 236.322993][ T5916] usb 3-1: SerialNumber: syz [ 236.350084][ T5916] usb 3-1: config 0 descriptor?? [ 236.415098][ T5916] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 236.601114][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.613575][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.640561][ T978] usb 3-1: USB disconnect, device number 29 [ 236.659874][ T978] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 236.717824][ T5916] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 236.817721][ T5886] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 236.917867][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 236.926810][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.958860][ T5916] usb 2-1: config 0 has no interfaces? [ 236.993577][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 237.043962][ T5916] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 237.054734][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.071484][ T5916] usb 2-1: Product: syz [ 237.076173][ T5916] usb 2-1: Manufacturer: syz [ 237.083540][ T5916] usb 2-1: SerialNumber: syz [ 237.120485][ T5916] usb 2-1: config 0 descriptor?? [ 237.241945][ T978] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 237.335262][ T43] usb 4-1: USB disconnect, device number 30 [ 237.462785][ T978] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 237.499998][ T978] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 237.584987][ T7894] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 237.610529][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.693214][ T978] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 237.714467][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.553'. [ 238.097711][ T5894] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 238.255204][ T5894] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 238.267192][ T5894] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 238.355767][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.431573][ T5894] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 238.675603][ T7906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.739125][ T7906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.762977][ T7906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.506512][ T5916] usb 2-1: USB disconnect, device number 30 [ 239.516970][ T5894] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 239.546893][ T5894] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 239.555626][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 239.606464][ T5894] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 239.706646][ T5894] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 239.947863][ T5894] usb 3-1: USB disconnect, device number 30 [ 240.050399][ T5920] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 240.121920][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.133552][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 240.173517][ T5886] usb 5-1: can't read configurations, error -71 [ 240.226883][ T7926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.277641][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 240.303753][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.321473][ T5920] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 240.334078][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.343390][ T5920] usb 2-1: Product: syz [ 240.350713][ T5920] usb 2-1: Manufacturer: syz [ 240.355481][ T5920] usb 2-1: SerialNumber: syz [ 240.362233][ T5920] usb 2-1: config 0 descriptor?? [ 240.388887][ T5920] hub 2-1:0.0: bad descriptor, ignoring hub [ 240.397290][ T5920] hub 2-1:0.0: probe with driver hub failed with error -5 [ 240.433798][ T5920] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 240.686502][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.720670][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.758507][ T5894] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 240.864128][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 240.901695][ T7938] bond_slave_0: entered promiscuous mode [ 240.907589][ T7938] bond_slave_1: entered promiscuous mode [ 240.933211][ T7938] macvtap1: entered promiscuous mode [ 240.940920][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 240.948033][ T5894] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 240.956402][ T5894] usb 3-1: config 0 has no interface number 0 [ 240.965125][ T5894] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.977915][ T7938] bond0: entered promiscuous mode [ 240.988819][ T7938] macvtap1: entered allmulticast mode [ 240.996960][ T5894] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 241.009619][ T7938] bond0: entered allmulticast mode [ 241.011732][ T5920] usb 1-1: USB disconnect, device number 29 [ 241.014881][ T7938] bond_slave_0: entered allmulticast mode [ 241.028236][ T5894] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 241.058665][ T7938] bond_slave_1: entered allmulticast mode [ 241.066938][ T5894] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 241.089602][ T7938] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 241.096711][ T5894] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 241.137926][ T7939] bond0: left allmulticast mode [ 241.145801][ T5894] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.161906][ T7939] bond_slave_0: left allmulticast mode [ 241.171109][ T5894] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 241.182847][ T7939] bond_slave_1: left allmulticast mode [ 241.190044][ T7939] bond0: left promiscuous mode [ 241.196249][ T5894] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 241.216019][ T7939] bond_slave_0: left promiscuous mode [ 241.221781][ T7939] bond_slave_1: left promiscuous mode [ 241.238912][ T5894] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 241.272387][ T5894] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.293325][ T5894] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 241.442208][ T7945] QAT: failed to copy from user cfg_data. [ 241.501630][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.607544][ T5894] usb 3-1: Product: syz [ 241.611798][ T5894] usb 3-1: Manufacturer: syz [ 241.648583][ T24] usb 2-1: USB disconnect, device number 31 [ 241.656695][ T5894] usb 3-1: SerialNumber: syz [ 241.691710][ T5894] usb 3-1: config 0 descriptor?? [ 241.715395][ T7948] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 241.772335][ T7930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 241.809891][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.569'. [ 241.888112][ T7930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 241.916336][ T5894] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 241.989491][ T5894] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 242.036405][ T5894] scsi host1: microtekX6 [ 242.259481][ T5894] usb 3-1: USB disconnect, device number 31 [ 242.598294][ T7967] input: syz0 as /devices/virtual/input/input27 [ 242.858267][ T7967] xt_CT: No such helper "snmp" [ 243.409445][ T7984] xt_connbytes: Forcing CT accounting to be enabled [ 243.417067][ T7984] Cannot find add_set index 0 as target [ 243.504319][ T7985] netlink: 60 bytes leftover after parsing attributes in process `syz.4.581'. [ 243.710137][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.158334][ T5894] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 244.217586][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 244.322295][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 244.335823][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 244.349900][ T24] usb 3-1: device descriptor read/64, error -71 [ 244.377034][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 244.411178][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 244.436185][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 244.472607][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.503584][ T5894] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 244.514352][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.522621][ T5894] usb 1-1: Product: syz [ 244.527105][ T5894] usb 1-1: Manufacturer: syz [ 244.532439][ T5894] usb 1-1: SerialNumber: syz [ 244.551066][ T5894] usb 1-1: config 0 descriptor?? [ 244.566235][ T8006] xt_policy: too many policy elements [ 244.596280][ T8005] netlink: 'syz.3.590': attribute type 10 has an invalid length. [ 244.606258][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 244.629324][ T5894] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 244.646712][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 244.674661][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.724184][ T8005] team0: Device bond0 failed to register rx_handler [ 244.768678][ T24] usb 3-1: device descriptor read/64, error -71 [ 245.017532][ T24] usb usb3-port1: attempt power cycle [ 245.363948][ T8006] team0 (unregistering): Port device team_slave_0 removed [ 245.377627][ T5886] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 245.388762][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 245.409787][ T8006] team0 (unregistering): Port device team_slave_1 removed [ 245.423038][ T24] usb 3-1: device descriptor read/8, error -71 [ 245.457974][ T5920] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 245.547599][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 245.569726][ T5886] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 245.583784][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.594481][ T5886] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 245.606686][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.621763][ T5886] usb 2-1: Product: syz [ 245.626492][ T5886] usb 2-1: Manufacturer: syz [ 245.626499][ T5920] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 245.626548][ T5920] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.632381][ T5886] usb 2-1: SerialNumber: syz [ 245.672706][ T5920] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.693522][ T5920] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.693589][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 245.703804][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.785965][ T5920] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.810543][ T5920] usb 5-1: invalid MIDI out EP 0 [ 245.832313][ T5886] usb 2-1: config 0 descriptor?? [ 245.859929][ T5886] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 245.867111][ T24] usb 3-1: device descriptor read/8, error -71 [ 246.069494][ T5886] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 246.110620][ T5886] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 246.133219][ T5886] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 246.148032][ T24] usb usb3-port1: unable to enumerate USB device [ 246.180643][ T5920] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 246.531718][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.549643][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.752687][ T8032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.830683][ T8033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.956111][ T8032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.657614][ T5886] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 248.827825][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 248.837001][ T5886] usb 4-1: too many configurations: 166, using maximum allowed: 8 [ 248.846972][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 248.873132][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 248.884956][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 248.896696][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 248.912352][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 248.925258][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 248.936332][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 248.946170][ T5920] usb 2-1: USB disconnect, device number 32 [ 248.957084][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 248.996790][ T5886] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= d.2d [ 249.006710][ T5886] usb 4-1: New USB device strings: Mfr=246, Product=135, SerialNumber=13 [ 249.041901][ T5886] usb 4-1: Product: syz [ 249.059116][ T5886] usb 4-1: Manufacturer: syz [ 249.063949][ T5886] usb 4-1: SerialNumber: syz [ 249.070319][ T978] usb 5-1: USB disconnect, device number 34 [ 249.144411][ T5886] gspca_main: 0000:0000 too many config [ 249.349955][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 249.424150][ T8043] program syz.3.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.437088][ T5886] usb 4-1: USB disconnect, device number 32 [ 249.904709][ T8074] netlink: 156 bytes leftover after parsing attributes in process `syz.4.606'. [ 252.167870][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 252.329712][ T24] usb 4-1: config 0 has no interfaces? [ 252.357934][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 252.387005][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.426423][ T24] usb 4-1: Product: syz [ 252.462417][ T24] usb 4-1: Manufacturer: syz [ 252.478109][ T24] usb 4-1: SerialNumber: syz [ 252.532026][ T24] usb 4-1: config 0 descriptor?? [ 252.677950][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'. [ 252.761443][ T8090] vlan2: entered promiscuous mode [ 253.852240][ T8101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.078960][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 254.217651][ T978] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 254.390284][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 254.737826][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 254.879722][ T5886] usb 4-1: USB disconnect, device number 33 [ 254.914430][ T24] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 254.955840][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.994680][ T24] usb 2-1: Product: syz [ 255.015732][ T24] usb 2-1: Manufacturer: syz [ 255.023621][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 255.045340][ T24] usb 2-1: SerialNumber: syz [ 255.080417][ T24] usb 2-1: config 0 descriptor?? [ 255.109799][ T8124] vlan2: entered promiscuous mode [ 255.110405][ T24] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 033 [ 255.276194][ T8124] bridge0: entered promiscuous mode [ 255.768317][ T5920] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 255.872535][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.879464][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.001577][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.029651][ T5920] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 256.049341][ T5920] usb 5-1: config 7 has no interface number 0 [ 256.115966][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.125697][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.142548][ T8139] syz.0.627 uses obsolete (PF_INET,SOCK_PACKET) [ 256.203712][ T5920] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 256.217581][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.307388][ T5920] usb 5-1: Product: 㯑 [ 256.583003][ T8125] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 257.478051][ T24] (null): failure reading functionality [ 257.581360][ T24] i2c i2c-1: failure reading functionality [ 257.739248][ T24] i2c i2c-1: connected i2c-tiny-usb device [ 257.806695][ T24] usb 2-1: USB disconnect, device number 33 [ 257.981938][ T5920] usb 5-1: USB disconnect, device number 35 [ 258.249307][ T8150] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.630'. [ 258.311734][ T978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.359835][ T978] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 258.372847][ T978] usb 3-1: can't read configurations, error -71 [ 258.508002][ T5920] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 258.595178][ T8159] netlink: 76 bytes leftover after parsing attributes in process `syz.1.633'. [ 258.813335][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 258.832332][ T5920] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 258.841480][ T5920] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 258.857940][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 258.869232][ T978] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 258.888030][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.903139][ T5920] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 258.913450][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 258.936519][ T5920] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 258.953250][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.985082][ T5920] usb 5-1: config 0 descriptor?? [ 259.007698][ T978] usb 3-1: device descriptor read/64, error -71 [ 259.140152][ T978] usb usb3-port1: attempt power cycle [ 259.242549][ T5920] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 259.254258][ T8164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.635'. [ 259.302892][ T5920] usb 5-1: USB disconnect, device number 36 [ 259.318175][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.338926][ T5920] usblp0: removed [ 259.576809][ T978] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 259.686838][ T978] usb 3-1: device descriptor read/8, error -71 [ 259.747866][ T8180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.639'. [ 259.897730][ T5886] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 260.860197][ T5920] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 260.867976][ T978] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 260.928373][ T978] usb 3-1: device descriptor read/8, error -71 [ 260.956940][ T5886] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 260.975671][ T5886] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.017833][ T5886] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.038428][ T5886] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.052842][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.053222][ T978] usb usb3-port1: unable to enumerate USB device [ 261.087533][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 261.094742][ T5920] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 261.099644][ T5886] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.113906][ T5886] usb 4-1: invalid MIDI out EP 0 [ 261.125041][ T5920] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 261.134101][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 261.147825][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.221172][ T5920] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.241555][ T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 261.293770][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 261.410107][ T5920] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 261.431555][ T5886] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 261.455504][ T43] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 261.472382][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.480624][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.488750][ T5920] usb 5-1: config 0 descriptor?? [ 261.518559][ T43] usb 2-1: Product: syz [ 261.522977][ T43] usb 2-1: Manufacturer: syz [ 261.527355][ T5920] usb 5-1: can't set config #0, error -71 [ 261.537943][ T43] usb 2-1: SerialNumber: syz [ 261.555775][ T43] usb 2-1: config 0 descriptor?? [ 261.614894][ T5920] usb 5-1: USB disconnect, device number 37 [ 261.626422][ T43] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 034 [ 262.067663][ T5920] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 262.098920][ T8200] netlink: 156 bytes leftover after parsing attributes in process `syz.2.642'. [ 262.120387][ T8200] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 262.231522][ T8202] fuse: Bad value for 'group_id' [ 262.259798][ T5920] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 262.269565][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.284989][ T8203] fuse: Bad value for 'group_id' [ 262.291263][ T8203] fuse: Bad value for 'group_id' [ 262.297720][ T8202] fuse: Bad value for 'group_id' [ 262.350354][ T5920] usb 5-1: config 0 descriptor?? [ 262.418895][ T5886] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 262.571383][ T24] usb 4-1: USB disconnect, device number 34 [ 262.574144][ T5920] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 262.580824][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 262.610206][ T5886] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 262.624019][ T5886] usb 3-1: config 0 has no interface number 0 [ 262.648830][ T5886] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.652009][ T8209] binder: BINDER_SET_CONTEXT_MGR already set [ 262.666566][ T8209] binder: 8208:8209 ioctl 4018620d 200000000040 returned -16 [ 262.677880][ T8209] binder: 8208:8209 ioctl c0306201 200000000240 returned -11 [ 262.731508][ T5886] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 262.783399][ T5886] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 262.795980][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.806467][ T5886] usb 3-1: Product: syz [ 262.813277][ T5886] usb 3-1: Manufacturer: syz [ 262.823975][ T5886] usb 3-1: SerialNumber: syz [ 262.842892][ T5886] usb 3-1: config 0 descriptor?? [ 262.884175][ T5886] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 262.903828][ T5886] em28xx 3-1:0.132: Video interface 132 found: bulk [ 262.972384][ T8211] netlink: 76 bytes leftover after parsing attributes in process `syz.3.647'. [ 263.956596][ T43] (null): failure setting delay to 10us [ 263.965825][ T43] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 264.233383][ T5886] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 264.273849][ T8225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.350771][ T5886] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 264.378539][ T5916] usb 2-1: USB disconnect, device number 34 [ 264.411056][ T5886] em28xx 3-1:0.132: board has no eeprom [ 264.507617][ T5886] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 264.526615][ T5886] em28xx 3-1:0.132: analog set to bulk mode. [ 264.545868][ T43] em28xx 3-1:0.132: Registering V4L2 extension [ 264.586697][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 264.802196][ T43] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 264.848126][ T5886] usb 3-1: USB disconnect, device number 40 [ 264.871335][ T43] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 264.890158][ T5886] em28xx 3-1:0.132: Disconnecting em28xx [ 264.979799][ T8232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.078303][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.087286][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.393823][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 265.454841][ T43] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 265.497810][ T43] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 265.513352][ T43] em28xx 3-1:0.132: No AC97 audio processor [ 265.537371][ T43] usb 3-1: Decoder not found [ 265.621426][ T43] em28xx 3-1:0.132: failed to create media graph [ 265.744393][ T43] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 265.847630][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 265.858573][ T43] em28xx 3-1:0.132: Remote control support is not available for this card. [ 265.858846][ T8235] ================================================================== [ 265.868340][ T5886] em28xx 3-1:0.132: Closing input extension [ 265.875280][ T8235] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 265.875323][ T8235] Read of size 8 at addr ffff8880798ac738 by task v4l_id/8235 [ 265.875341][ T8235] [ 265.875352][ T8235] CPU: 0 UID: 0 PID: 8235 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 265.875373][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.875383][ T8235] Call Trace: [ 265.875391][ T8235] [ 265.875399][ T8235] dump_stack_lvl+0x189/0x250 [ 265.875425][ T8235] ? __virt_addr_valid+0x1c8/0x5c0 [ 265.875442][ T8235] ? rcu_is_watching+0x15/0xb0 [ 265.875469][ T8235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.875494][ T8235] ? rcu_is_watching+0x15/0xb0 [ 265.875517][ T8235] ? lock_release+0x4b/0x3e0 [ 265.875543][ T8235] ? __virt_addr_valid+0x1c8/0x5c0 [ 265.875559][ T8235] ? __virt_addr_valid+0x4a5/0x5c0 [ 265.875577][ T8235] print_report+0xd2/0x2b0 [ 265.875598][ T8235] ? v4l2_fh_open+0xc7/0x430 [ 265.875621][ T8235] kasan_report+0x118/0x150 [ 265.875640][ T8235] ? v4l2_fh_open+0xc7/0x430 [ 265.875667][ T8235] v4l2_fh_open+0xc7/0x430 [ 265.875691][ T8235] ? __pfx___mutex_lock+0x10/0x10 [ 265.875719][ T8235] em28xx_v4l2_open+0x157/0x9a0 [ 265.875748][ T8235] v4l2_open+0x20f/0x360 [ 265.875766][ T8235] chrdev_open+0x4c9/0x5e0 [ 265.875785][ T8235] ? __pfx_chrdev_open+0x10/0x10 [ 265.875806][ T8235] ? __pfx_chrdev_open+0x10/0x10 [ 265.875824][ T8235] do_dentry_open+0xdf0/0x1970 [ 265.875851][ T8235] vfs_open+0x3b/0x340 [ 265.875869][ T8235] ? path_openat+0x2ecd/0x3830 [ 265.875894][ T8235] path_openat+0x2ee5/0x3830 [ 265.875916][ T8235] ? arch_stack_walk+0xfc/0x150 [ 265.875958][ T8235] ? __pfx_path_openat+0x10/0x10 [ 265.876005][ T8235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.876037][ T8235] do_filp_open+0x1fa/0x410 [ 265.876060][ T8235] ? __lock_acquire+0xab9/0xd20 [ 265.876083][ T8235] ? __pfx_do_filp_open+0x10/0x10 [ 265.876114][ T8235] ? _raw_spin_unlock+0x28/0x50 [ 265.876135][ T8235] ? alloc_fd+0x64c/0x6c0 [ 265.876156][ T8235] do_sys_openat2+0x121/0x1c0 [ 265.876179][ T8235] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.876200][ T8235] ? exc_page_fault+0x76/0xf0 [ 265.876225][ T8235] ? do_user_addr_fault+0xc8a/0x1390 [ 265.876248][ T8235] __x64_sys_openat+0x138/0x170 [ 265.876271][ T8235] do_syscall_64+0xfa/0x3b0 [ 265.876296][ T8235] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.876319][ T8235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.876335][ T8235] ? clear_bhb_loop+0x60/0xb0 [ 265.876354][ T8235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.876372][ T8235] RIP: 0033:0x7f02894a7407 [ 265.876388][ T8235] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 265.876404][ T8235] RSP: 002b:00007ffdae846480 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 265.876424][ T8235] RAX: ffffffffffffffda RBX: 00007f02893b9880 RCX: 00007f02894a7407 [ 265.876438][ T8235] RDX: 0000000000000000 RSI: 00007ffdae846f1b RDI: ffffffffffffff9c [ 265.876450][ T8235] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 265.876460][ T8235] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 265.876471][ T8235] R13: 00007ffdae8466d0 R14: 00007f0289c3d000 R15: 000055d8a20124d8 [ 265.876490][ T8235] [ 265.876496][ T8235] [ 265.882936][ T24] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 265.888848][ T8235] Allocated by task 43: [ 265.888864][ T8235] kasan_save_track+0x3e/0x80 [ 265.888895][ T8235] __kasan_kmalloc+0x93/0xb0 [ 265.888911][ T8235] __kmalloc_cache_noprof+0x230/0x3d0 [ 265.903533][ T24] usb 2-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 265.910347][ T8235] em28xx_v4l2_init+0x10b/0x2e70 [ 265.910381][ T8235] em28xx_init_extension+0x11d/0x1c0 [ 265.910402][ T8235] process_scheduled_works+0xae1/0x17b0 [ 265.910429][ T8235] worker_thread+0x8a0/0xda0 [ 266.261470][ T8235] kthread+0x70e/0x8a0 [ 266.265558][ T8235] ret_from_fork+0x3fc/0x770 [ 266.270164][ T8235] ret_from_fork_asm+0x1a/0x30 [ 266.274935][ T8235] [ 266.277260][ T8235] Freed by task 43: [ 266.281070][ T8235] kasan_save_track+0x3e/0x80 [ 266.285767][ T8235] kasan_save_free_info+0x46/0x50 [ 266.290800][ T8235] __kasan_slab_free+0x62/0x70 [ 266.295565][ T8235] kfree+0x18e/0x440 [ 266.299473][ T8235] em28xx_v4l2_init+0x1683/0x2e70 [ 266.304508][ T8235] em28xx_init_extension+0x11d/0x1c0 [ 266.309802][ T8235] process_scheduled_works+0xae1/0x17b0 [ 266.315383][ T8235] worker_thread+0x8a0/0xda0 [ 266.320020][ T8235] kthread+0x70e/0x8a0 [ 266.324104][ T8235] ret_from_fork+0x3fc/0x770 [ 266.328714][ T8235] ret_from_fork_asm+0x1a/0x30 [ 266.333483][ T8235] [ 266.335811][ T8235] The buggy address belongs to the object at ffff8880798ac000 [ 266.335811][ T8235] which belongs to the cache kmalloc-8k of size 8192 [ 266.349871][ T8235] The buggy address is located 1848 bytes inside of [ 266.349871][ T8235] freed 8192-byte region [ffff8880798ac000, ffff8880798ae000) [ 266.363849][ T8235] [ 266.366188][ T8235] The buggy address belongs to the physical page: [ 266.372606][ T8235] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x798a8 [ 266.381376][ T8235] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 266.389877][ T8235] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 266.397861][ T8235] page_type: f5(slab) [ 266.401849][ T8235] raw: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 266.410441][ T8235] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 266.419031][ T8235] head: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 266.427708][ T8235] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 266.436384][ T8235] head: 00fff00000000003 ffffea0001e62a01 00000000ffffffff 00000000ffffffff [ 266.445077][ T8235] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 266.453768][ T8235] page dumped because: kasan: bad access detected [ 266.460198][ T8235] page_owner tracks the page as allocated [ 266.466007][ T8235] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5846, tgid 5846 (syz-executor), ts 89817278864, free_ts 89813096462 [ 266.485728][ T8235] post_alloc_hook+0x240/0x2a0 [ 266.490507][ T8235] get_page_from_freelist+0x21e4/0x22c0 [ 266.496063][ T8235] __alloc_frozen_pages_noprof+0x181/0x370 [ 266.501889][ T8235] alloc_pages_mpol+0x232/0x4a0 [ 266.506749][ T8235] allocate_slab+0x8a/0x3b0 [ 266.511367][ T8235] ___slab_alloc+0xbfc/0x1480 [ 266.516079][ T8235] __kvmalloc_node_noprof+0x429/0x5f0 [ 266.521470][ T8235] pfifo_fast_init+0x363/0x6b0 [ 266.526269][ T8235] qdisc_create_dflt+0x138/0x4e0 [ 266.531227][ T8235] dev_activate+0x378/0x1150 [ 266.535829][ T8235] __dev_open+0x69c/0x880 [ 266.540189][ T8235] __dev_change_flags+0x1ea/0x6d0 [ 266.545221][ T8235] netif_change_flags+0x88/0x1a0 [ 266.550164][ T8235] do_setlink+0xc55/0x41c0 [ 266.554587][ T8235] rtnl_newlink+0x160b/0x1c70 [ 266.559274][ T8235] rtnetlink_rcv_msg+0x7cc/0xb70 [ 266.564216][ T8235] page last free pid 78 tgid 78 stack trace: [ 266.570213][ T8235] __free_frozen_pages+0xc71/0xe70 [ 266.575370][ T8235] __put_partials+0x161/0x1c0 [ 266.580081][ T8235] put_cpu_partial+0x17c/0x250 [ 266.584863][ T8235] __slab_free+0x2f7/0x400 [ 266.589295][ T8235] qlist_free_all+0x97/0x140 [ 266.593897][ T8235] kasan_quarantine_reduce+0x148/0x160 [ 266.599369][ T8235] __kasan_slab_alloc+0x22/0x80 [ 266.604223][ T8235] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 266.610124][ T8235] __alloc_skb+0x112/0x2d0 [ 266.614548][ T8235] rtmsg_ifinfo_build_skb+0x84/0x260 [ 266.619843][ T8235] rtnetlink_event+0x1b7/0x270 [ 266.624610][ T8235] notifier_call_chain+0x1b3/0x3e0 [ 266.629744][ T8235] netdev_lower_state_changed+0xc6/0x140 [ 266.635385][ T8235] __team_port_change_send+0x1cc/0x4f0 [ 266.640851][ T8235] team_device_event+0x762/0xa20 [ 266.645796][ T8235] notifier_call_chain+0x1b3/0x3e0 [ 266.650921][ T8235] [ 266.653247][ T8235] Memory state around the buggy address: [ 266.658878][ T8235] ffff8880798ac600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.666946][ T8235] ffff8880798ac680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.675010][ T8235] >ffff8880798ac700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.683070][ T8235] ^ [ 266.688961][ T8235] ffff8880798ac780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.697053][ T8235] ffff8880798ac800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.705127][ T8235] ================================================================== [ 266.717685][ T24] usb 2-1: config 0 has no interface number 0 [ 266.723872][ T24] usb 2-1: config 0 interface 250 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 1023 [ 266.737658][ T24] usb 2-1: config 0 interface 250 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 266.757573][ T24] usb 2-1: config 0 interface 250 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 266.777563][ T24] usb 2-1: config 0 interface 250 has no altsetting 0 [ 266.926472][ T43] usb 5-1: USB disconnect, device number 38 [ 266.937897][ T8235] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 266.945151][ T8235] CPU: 1 UID: 0 PID: 8235 Comm: v4l_id Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 266.956816][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.966904][ T8235] Call Trace: [ 266.970210][ T8235] [ 266.973150][ T8235] dump_stack_lvl+0x99/0x250 [ 266.977769][ T8235] ? __asan_memcpy+0x40/0x70 [ 266.982374][ T8235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.987610][ T8235] ? __pfx__printk+0x10/0x10 [ 266.992260][ T8235] panic+0x2db/0x790 [ 266.996188][ T8235] ? __pfx_panic+0x10/0x10 [ 267.000635][ T8235] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 267.006545][ T8235] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.012884][ T8235] ? print_memory_metadata+0x314/0x400 [ 267.018377][ T8235] ? v4l2_fh_open+0xc7/0x430 [ 267.022985][ T8235] check_panic_on_warn+0x89/0xb0 [ 267.027942][ T8235] ? v4l2_fh_open+0xc7/0x430 [ 267.032552][ T8235] end_report+0x78/0x160 [ 267.036800][ T8235] kasan_report+0x129/0x150 [ 267.041308][ T8235] ? v4l2_fh_open+0xc7/0x430 [ 267.045914][ T8235] v4l2_fh_open+0xc7/0x430 [ 267.050347][ T8235] ? __pfx___mutex_lock+0x10/0x10 [ 267.055387][ T8235] em28xx_v4l2_open+0x157/0x9a0 [ 267.060254][ T8235] v4l2_open+0x20f/0x360 [ 267.064502][ T8235] chrdev_open+0x4c9/0x5e0 [ 267.068932][ T8235] ? __pfx_chrdev_open+0x10/0x10 [ 267.073879][ T8235] ? __pfx_chrdev_open+0x10/0x10 [ 267.078827][ T8235] do_dentry_open+0xdf0/0x1970 [ 267.083607][ T8235] vfs_open+0x3b/0x340 [ 267.087704][ T8235] ? path_openat+0x2ecd/0x3830 [ 267.092483][ T8235] path_openat+0x2ee5/0x3830 [ 267.097081][ T8235] ? arch_stack_walk+0xfc/0x150 [ 267.101972][ T8235] ? __pfx_path_openat+0x10/0x10 [ 267.106954][ T8235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.113049][ T8235] do_filp_open+0x1fa/0x410 [ 267.117570][ T8235] ? __lock_acquire+0xab9/0xd20 [ 267.122437][ T8235] ? __pfx_do_filp_open+0x10/0x10 [ 267.127485][ T8235] ? _raw_spin_unlock+0x28/0x50 [ 267.132353][ T8235] ? alloc_fd+0x64c/0x6c0 [ 267.136690][ T8235] do_sys_openat2+0x121/0x1c0 [ 267.141378][ T8235] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.146592][ T8235] ? exc_page_fault+0x76/0xf0 [ 267.151282][ T8235] ? do_user_addr_fault+0xc8a/0x1390 [ 267.156665][ T8235] __x64_sys_openat+0x138/0x170 [ 267.161527][ T8235] do_syscall_64+0xfa/0x3b0 [ 267.166049][ T8235] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.171260][ T8235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.177333][ T8235] ? clear_bhb_loop+0x60/0xb0 [ 267.182021][ T8235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.187924][ T8235] RIP: 0033:0x7f02894a7407 [ 267.192345][ T8235] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 267.211959][ T8235] RSP: 002b:00007ffdae846480 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 267.220402][ T8235] RAX: ffffffffffffffda RBX: 00007f02893b9880 RCX: 00007f02894a7407 [ 267.228577][ T8235] RDX: 0000000000000000 RSI: 00007ffdae846f1b RDI: ffffffffffffff9c [ 267.236566][ T8235] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 267.244561][ T8235] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 267.252539][ T8235] R13: 00007ffdae8466d0 R14: 00007f0289c3d000 R15: 000055d8a20124d8 [ 267.260526][ T8235] [ 267.263825][ T8235] Kernel Offset: disabled [ 267.268151][ T8235] Rebooting in 86400 seconds..