last executing test programs: 1m19.370923664s ago: executing program 0 (id=161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="30003300c0000000ffffffffffff0802"], 0x54}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x1e}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fda={0x66646185, 0x3, 0x0, 0x40}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private=0xa010100}]}}}}}}}}, 0x0) 1m18.769272435s ago: executing program 0 (id=164): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) syz_usb_control_io(r0, &(0x7f0000002780)={0x2c, 0x0, &(0x7f0000002400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073797a310000000028000000000a030000000000000000000200000008000240000000000900010073797a31"], 0x98}}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xfffffffffffffffc, 0x8400) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f00000000c0)={0x2, "f82f28e5f4ac0762b7306cc9f81ee5b04eeaddbfd47163a027fb7374fcd378a3", 0x2, 0xb057d695ecb39785, 0x9, 0x92b4, 0x10, 0x2, 0x6, 0x4}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x2) 1m16.883075808s ago: executing program 0 (id=177): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000005900)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)="49bf5cb821229fa1921d1193b44945f7497d1a5bc7d030059afbc35a09305f9227fc7a5d63cf46093899b9cf74a35a4ef3bd1565641eb0a0ffb3c41e9d5a16572989aa9cf14b4bed0b2b22d1661cfd397dc0c3ee89ac9e77da5a0ac2202074a0e8bfe84f63dae59b3f7a5f007a2f72f84c9bc82d4a0d697d32013f0b4a71fa4657d46786fd4989d2b8e1d5f67d556d31d103ab850ab60840c89ce77aebae6f2119f284bf91abf16fb8", 0xa9}, {&(0x7f00000005c0)="f3bbef1aa93605689f86f7396e3f8e4264eedf18ee4681eea8e7c3f1cdfa5a692159575a8189f0ac9abc76b7f708f52bd77a35ba1d5a8f15765428922f139e683dba864f0ab45a", 0x47}], 0x2, &(0x7f0000002680)=[@rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r0, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r2]}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r0, r0, r2, r0, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8, 0x4800}}, {{&(0x7f0000004280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005800)=[{&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="76830e0731e248cbdc082d06e1c56b960c3b719f2a52ed974e3d94e6a4a6df88703554d4dc52985d5dd0d6c08cd61bdbb4937052c3b4584a05cd890f4cc845996b67620a281e810dc558aeecb7edaadea37371addaf65ac9083dda47949839a45cc83939532fc63d953eb2fdf8fcdf1ce9938e6c75f40498c7a96163bb2dc6ec124b0448a76c3ae01c37a814cf8dd44f34b81e945dceaf5100f9f53d1b049dd44d51cf7a54d8378b8681b33454d2bb9ba49dc9cbe0693dbb73c9a38e3c43e56d999b91a771ebc984a57bb2eac3fc972f73b4aa071d68b56a98281b19b281a9b13f79", 0xe2}, {&(0x7f0000005400)='?', 0x1}, {&(0x7f0000005440)="8811fef3b538f3e6533c5218384bd9c47d55894a9414fe75c5f7c242a5a37709b0f011b9a225506cb90cbdff9dae06581c641c15dc1b5a707cceda3e4c745085151d08fcc508b19a4d", 0x49}, {&(0x7f00000054c0)="6f454c90b1b1aca75f8ddecf08299f45c36fc9b1b56bbb5a45954c316d256e2f5aed1334b056759697535d9e268f1bd5f38965b1f76566c4f2852246e351845317bb28a0dae6dedca794ecf2ddcfe04222c99e7c0368a87bf7a4c6765a6399ef1e3d3777160b95ab1a7c42076d4f381a07e717f98152d7514c221b9bb066fce5940e8962def5ce3c646077ea1aa0a9999500a3d16755692a076b3c694303e92934e24f32740d716b8f7e791c0a7e70c2b0c966712aeebbe9e1003460e2ed96ba677734c0e44b164122e252572123d707e3dae37bac9f", 0xd6}, {&(0x7f00000055c0)="d2f96dc5641dd76b919e3326b536331621c0054b2dbe74624dfa3a1893f6e38e089dacdc2d461d042b71fa25ef2fa4ad5fa28c847f9dbcf7c54bd59a0dcd9135814953a73a52af88337347d81881ec17280bd0407457517826c91b62b7383a022d5f9810c6", 0x65}, {&(0x7f0000005640)="8ad8a346dd090da47af5579bb82dd7eb7418f8769b72b4f782497f622f93949a6cce6c0513b471c0910f2dd8658cb8702b038f2602c38355f81fb6791b292f75d0ef54d4c8e6708af17ee4d5e9ba2cabd1a3c815dcedcb1c804a0a7987169d9d2dc74c33cb1197f1f47e886e8caa566314fe87db88ddfe3fdfb2313b9edc3f7101ca60666709c087b54e862f5d416ff2f2feb67318a0e9fdbe86ef21ed0441459f4dad1f3bdb782fd26b95fe6cd609a1f0361ae5117932cb469474af524b262acce622", 0xc3}, {&(0x7f0000005740)="778d3f4816997d2f86482074f90b23e2e5dca045f6c9d798d607d189c82a235862a534f60f4a697df752003c2337e9d223126894c4ddfd73f5007f7fe6807ecc15565d9ddc", 0x45}, {&(0x7f00000057c0)="06e21410ed", 0x5}], 0x9, &(0x7f00000058c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x4044000}}], 0x2, 0x20040008) exit(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000001c0)={0x3, r2, 0x5, {0x8, 0x101}}, 0x1) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='fusa\x00']) ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0) fsopen(&(0x7f0000000200)='vfat\x00', 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00') r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) getsockname$packet(r3, 0x0, &(0x7f0000000380)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x20, 0x4, 0x1, 0x9, 0x80, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x2c, 0x0, [{0x0, 0x10, "61853379342bf9bc837101084905"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x6, 'A\a\"\f'}, {0x1, 0xa, "434c36e509a5c106"}]}, @lsrr={0x83, 0x23, 0x62, [@multicast2, @multicast2, @local, @broadcast, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0x10, "829d7c641c0fb0116f1138dc2ee3"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) 1m15.476375257s ago: executing program 0 (id=179): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000040)=""/44) 1m14.438493324s ago: executing program 0 (id=184): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="234c6c62827529dd8836a855af202f0445b830ce6816ab07192ecf1a1e7de5bfedfb16af0e5696c137ac0f4faaba2c3d1b40cbb44cf6457ee6266af2f9624e24456b5e5e7cfac20e8c46f8d56be3fc42898b002e47a5fd35119731220caf7c7aef86b879a7a0ccd94f2cf634daa70cdba8734760479aef16289cebb8aabc073862997b15ddac051854a627488fff0278f8f830e8efb2ee634c5fc110398c648091d1331d5179eae8a76c89ff05a541e60a02e542b12fd7dc8c13a9aa9bf9b2d3975e9facd603d065ed1cd556018ae5e16ab4550f8f42281a280917316652e93fc6"}], 0x104c, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000440)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ecabd4", 0x44, 0x2f, 0xff, @local, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x2, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) recvmmsg(r1, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000580)=""/104, 0x68}], 0x1}, 0x3}], 0x1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000840)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) write$FUSE_INIT(r4, 0x0, 0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r6 = dup2(r3, r1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="61f245cafab21e55697298a0ae35e18d14dd4b6592fa14c0489b858840d12654fb8ddbd1563e581b6a29f56e6127a48c40b95af04e135572e6084e5706e88f02b4440c32e93c31603beb0bc2616de2e7f2a3936b7862df4bc4178710a61eb2e0e7b4ac16cde4477d10653b0d6afde80c950848626b7296ec902f7dc875cbb34a73638a2a48eec75667340826ad84022664c0039de213dc5054b5ecc2ea3c385fe8cdeb814e4eb6262fb39fb637c13a6c1b401f1eafc7a09d49980e60e5caca3520ffeeaf9b20a67d680c7ade66ff7398725ab5bfeed67b48888284c03f6c5331b33f5bd12b10f2c9f8a82549939fbf23caba0dfe1cd962f5e97d9a7dbfed7b25dfcd025cafb3c3b34bde13e2cf3684db786b56929bd381fa5e178b268005224cf7d79103524ec32d22509292501062fd2a907f9eb1a564bcb58da00933f9fb49af10ce55617b9edfad6ca5f9060623e0d6fb73aa68c9b5190dc671968ecbf752962f6e3f0ef6b3ff918603cd511ec00dc67ba004c6469380f5c5390226ccd5ebb934a63c103e4fb6b69c42a6e8e8aa434fd0c787de018fc1e25189ba81be91c80d5e3c9d021baa3cb3abaf755b79e41a8604392c68a018e1750ab6d54608969f3c9273b1a08c3b8d7d9b6f03f4bd3a6c64790617d72a891556cba509f21f992c59db9f78853421fb9ec4ddb2fe782f5da26c038626f26d1e4fda289cea520d44630b041e18ea2ecf56852c25f1ddf3bbaed2c17ba898575431134ee7c27fbf8548dfd63364b8beae267085bfa964786745134ae2b64c4a263f885c198952e795c17e04f0d9e4360de13ae3f2481e6d234bb5c54e03d5e0cb27e5b610ea2c0d85d21bc66e5c861f1e8ba66620cb6f590b2fe294013923b7fc9b170f449e7873bb9aa14cf7421e61feaaeb349a2acb5816a51325f45065b035be05f4498e77eb5e875c03b0c41061caadee14eb2764a5846ba0cab400e1676f533abc56930e5acccf331b0611af1e2947b11820d32e142ca885f4df233678ccbcfa63e5cfa708adcfefa34f059f81f14a5ef2538ef446feec5c78828c618576b18b86c7ee37d8182a8dee51d5dd199cd2ee915f5e25be2885822ab3e5b988786764e611f0bb1214bb9d825c9c4e15c061acf2b4e7361831e0fe9fc409e0004631ab31c42bfd962ba7a0e475f3a91643ce65d2efb94976b14fcf7d21c93bd9208b7bb7a3dfc4444cf14d127401c6892ba93ac786476e0885f028ae6141de817d3517cce625eebb50e2c1e5e64ffc50da4d2eaa605501769e4c1a40fd9da7da178b4bf468942514082773698770ef455ea263fefa4fb258c15afb076c7979296f901e84a2b71eb63cb3d9dfd9abb3e1f8f657070d75541c20476f37e14ca43014ef80b33eeca91ace604ec2051d73ec2f69ffa14bcd79ea577e9676825094606343d31874111fbc535d28fa7a9e379d38226001e241d3515e1d63ba56f1eebe8ea788c4d768f4c4fbbaf834ca3f21460613d768dacf2a27778dc2b4598726646b8c06b6e4d38162720c807724f92bdc9f0b0f5d303d5a5a3998aa270a6760c7651df601bc42c78dd9bd53ee960cf80a30a6b7a1a880d37ff31fb2c9bb0c591bba3ef8228a0506f45065c65b131aff8da8eebbd6754b9e5601632da39c329a229062a94833b23c97371d510a19e2d3b5bc516e3d3c8601495fbeecc16c5c50ba6c435974e8275d372add206964f29997b515f63f50121029e61f47db19fc63b07d0f059ca686e80fb6c294667affaea2daff241bdd0945bfbfe28643136bcea9aa345d482fc3b9d872b482463b92b25f0e5157be3fd8b7a328f327ddfa5c05a6f172deb795f19b9f2091386acb060f170540bfa898057c206d81afd85701b8ee030076bc3782d7d8f6673111baf80818aeca7e5944d91a7f4fce840303867ea18d2b92d74c67157284c787fcfde780fc9a53ae5560e101ef125ce707d34f957072958dc9916492e73a90a10f660a221a7c6730ac0ac01e37d54f058b64f41a46be5320800172e2c9fda248a2964548ddf1f53599027c29ede6079a72d454bcf4403808111d00cb4e3aadd060c333e57c64a70bdfbb572fe228538c82ab427416cdcce1dd643ece610ca7042e2a164d3dfdabb966f1a8fc875cd002920321dac62e25f38cb0031e4de6324b0db402b12c4b0e335898e21b7b326ebbeec0b4bc21ef2dd6f9755e8ff35602d30189ae3efe9c487aec2ce90dbbe790c919b77036240786f3fe9441204b81bc43b5f5cbede75702a1c28ab16d2f578dddb3624f596b5b82e2f26b63966ddc78c8ffa13a23b6c4ee2c741820b9738fe881ddeeeba60fa4221885be55a6fdaa0b90b246f5959b844afd6898bc8c0a75fc45fb968d6e8ea6831d15808b23904355c62a8590d1ba51cdb051bd5ccc1b62a8ca520af60daefae7f7f1dcc90a02ab3af5307fcd5fed9af7d9b192f080be6ded768c6d1d4ea0ba5cc996e5c24b8048eeaea09cabcf1c0488a357280395cfc5394ba160c439dda0a7f4ed182d3f33a4addb1c74d7d797179c633013b24c7e0cd2f4b86904bd1d70a4821c7ff619455953d820e1594c7136e66c260c868776129eddedfdec5ebb0da2e5207215f9c47d7bf74319661311232ca1d108da00df2d07ff5720c474981cb54bd185448ae0e3d9d3194614ae67bdb24122cb2207be610456c35ba6e11429a3a6c266b4bfd905c7534de4fe03ac5063cbb08b3a75137e59e3e8b3fee3989bfb0735ea6f948371a60efff49ea51d5825dd61ef9a0b735fc859c9b003325fe6e3a5fdb8d2cf51e2e9a4c73a8af3a702a83d57d3ddb81d5e9342c97f143ed28228c16a1625d8ba4f0ffddc968f37cb07ea09d35703f920cf4e7a1394b7f18e6f2508a4c90acc92710ddce1e7a9a22ad2d540f669411b263b3e20b07131cc17cf20ae8030de00862bdc33b7eb4f8122c47c833e73aed84199e5d584625570193e18c3d165dae7941d17cc07034a2a5c67c708d6c96f9c5595800dfb65f42c413716b952d42727e7117915b359d1f1c0a64f0ee4b4a0bfbc4e9fc794cd02369e9594acb7805a155ec03505df719aa47e5da38fd3ab736fa76acee10abd1b220b32436260f2ab86f7d0c20fd9b3a1e63b9b3dbd91e7579fec104f5a714f4d0a00a03a1848c58508e8ec27c7fa04d3baf64e1258bd1d72465f3a64c793b3e09a97ca1a2efbac7adb6228ef4588be15afc21c80905a26a22f4db7940b9369051dde4e24008a5f7b943d769578ffa46572435c2076c60096252f3b3b5fe6d8f4579d11c9c71cbf7444c661306fa07dd01e670fa8d24071b09d6e74a268a0d43aef3b7f8e126900bf2e21304785712f327275a2e16febd4faaaacce68b92dcc3c27ca035bb4210408a34103719c82d33c8b43dd9a46cc0420a533b906317fb817ef6164286b8ddacee6191027bfa9ed19746c8401bab93d08d028fd9e2203cccf56b22042c402e8a438ed226112fa71d02c4537d4156a3af28ab4ffcf19309d283902f1e70f42d6713782c5e468a086fdb5c8b3e15de36acc4469ec42ea23a1e5e8e399f4d4be71dd4b4c268db2ab91b68ceafb95cbba36228e59bc0cd7f987a2ad4bbd23b67acabb26a0f4c694ff320f2275042c85ef256aeef306cf5e2803d6c55827011e2f98d0e80819e0039a71cc9c59464f209afa7891a359a3f9efb4bba2a18fd013e8664a6bec7e717ffe2f0c06f7268862696cfae0fe6fab5b1a2921c0e29aaa8638f6a18d1cbaaa4aa0d76f66fa9f44511e631f2fde8024210eb39f545a648c1b77ab04a7d110edbd1dce3939b4dee867df3cb3107fffe5ab22fe5e32b38447d32094259cee40c9a5254df72cbd7a29188d7285facd6e2f5c78ee9d11645cf026e99162da9c2d148373018fe8e052ffccc4e3952e86228d7835a3bc9b4a5c6099dd3e802b059ef2225cbe4664458729c78032e184b61a089870c6b3c2bf2e5df6bd65bc195e1ccbe58b9a6dde49897ab59dd269a737f04e37e34d3d10c3b01c744a742d52da1bceca63fcbecc136a80bf3ca1df2f226de073b67a0b646674744acd14d5dab9929f2cb804637ebf211f2b3a8b959723808904e9044deb551b2613c1e501385693e7abff809b641c02107187cf1bd1c9571a9023942f0c78c467611193a7e6900eefc49fded206630336cd8d2849731b73798d9258be75b843f051679e6bd541c78457db5470d3d494f333a81b3ed26b57f9f7726275c12f192f4b1d9615c7fe3e0bb22fb47ae1effea3bd2a0a379593a25f933c8af1f14d08bd8ca692c9af3eaee136664e1829204c171ad6e50fa928a3c1f5ee2c14f984884c2cb0256acfa6172d030940f3f9f99443c730b0f070192d36fb83b3d470cf3098bd8b0f09eb6d1b58efbde00305c3a50e00df17b9963f1c06f26b48e4a166073f3f3119ed2b56af1f8c056c07f65ffc3f2e81efa22f97c66998b35bb2af3ce2d89af5f5b1368ce9148937f826c3ef81a116382bd3f53e26f210aed545f38c1e21400957b824eaa95bb401ef308852c7e5015b89244a403308de785a81739634161e33d79435f18cf378bd9f5eb59b40a55abe627f6944ec239f80fc15526e7f1b2c2949a85b8c15a299cee1c86f61746a4eae3dc5f347225f1965cf09d4457b1a1b692fb108a681607d6276c4a6cf35709dc95aa249ae245a0435c481cbae672037aefc82fee9f249e643e658d173aea1d99e361f383dd674a5f2a6525755eaba2d59928a8d9e2eb1aafd129cb4c2cefd5da0213d900efa938e937a7c4e62243eeb3f5f43be35323f63b0b1ac2a298fcfbf71129da3465e488f52b82ec725bdf2fd943e09004c62abf5332139fb38b797756c5e9de926da21f8d77408ea740cf5ec8a657eae110df0550c6ca2585e0cdd5de1e986da91ca1d112f0d5397fdc612b2163164dedddf60c1e3dcd94195b65f50a9c86fb7b67b91dc7c0b8ab3d1c254663fc09ad5fd2c97221f1c6032557ff0a2fc441b71b3a6a6c52efded4133c8d57ce15523550237e7fef838d66cd77c48a743b2a2cc7c1f0ef3d520eb7ce9c086d73c352fe311337b3558a6985660a19ac852edceed56e3e9bb49b8a788eaa3f9be70b3fd1e764888a35a6c874256f9a8e53790281e30fdc1ed35ef03e9bd805ba3ef6ad07c3eef31fadcaba39c9b793e15d04f096c62f6282e8fc4aa31b275bc7fe5dce144ba736151d046b1285b698422ae84ae222e835e2ea80791082cd1742385764a0b047fcadfd8da7acc8f820dd50444fbbecb18ff5c9df10e08609d4b0f76ce14dc8ab056227e3604b3933df593a1b961fba44678131c958b15246e5054465bfffba1cb05c8d4a3ce7a3473d88c9213b5d8fcef3c46f8650fec5077bffaf9b469051b0e5aa7b55f863f0919ca310505a063890b1560597aac6ca1ed9a7c7ed8e894597098cc9333d687bd8e1b4539bb9f74d034d2fc316ef806d67bcec412fb485a03f87cb89d122809fc55f1a7fb35a74440d661ee736340cdbe70141214e899cf9f907a2463f995d21e2d1d25fe92b47ea198f467bf5e775104bbb0ed11534ef25eabdd6b14e8961ee0534f5ab504151f1b2f1853f7229e07131696deb538114d51df2d5c4145bb53d7292e1544c3075806980d5d595528dcf1ce6d4d35470331f00a7bb00e4a1b38982f5dbd2114715a3bd23fa9dbadfe2970853a89d1abb9ae5d4f3bab355691c3ccbbe4bcb2e44425d6c2c3dc3ddd8d43872a6063f111c1c7e6ed4449b39bbd6df92ed4a0e4808ffad0391f89b509f683061bcbe06369e47d43e9", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={r7, 0x1000, &(0x7f0000002a80)=""/4096}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000400)={r7, 0xc7, &(0x7f0000000600)=""/199}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000340)) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78, 0x0, r5, {0x9, 0x4a4, 0x0, {0x0, 0x0, 0x3, 0x9, 0x7, 0xfee0, 0xa, 0x8, 0xc, 0x1000, 0xfd4f, 0x0, 0x0, 0x2, 0xfff}}}, 0x78) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "80c90800005207b7"}}}}}}}, 0x0) recvmmsg(r9, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 1m14.104044691s ago: executing program 0 (id=185): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8857c5fc68d9", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="a027", 0x2}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback, 0x404}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)="4da3be4a15e36c43962160a876021f002d4da53fc0311b6a19644647dfdf328f9ef41d60545087867f78d4ff3ba482149b000000", 0x34}], 0x1, &(0x7f0000000880)}}], 0x4, 0x28048005) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="63efd66ad1b839bdbdde091154", 0xd}], 0x1}}], 0x1, 0x9) 1m13.00416091s ago: executing program 32 (id=185): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8857c5fc68d9", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="a027", 0x2}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback, 0x404}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)="4da3be4a15e36c43962160a876021f002d4da53fc0311b6a19644647dfdf328f9ef41d60545087867f78d4ff3ba482149b000000", 0x34}], 0x1, &(0x7f0000000880)}}], 0x4, 0x28048005) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="63efd66ad1b839bdbdde091154", 0xd}], 0x1}}], 0x1, 0x9) 10.793049048s ago: executing program 1 (id=411): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x40001) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r4, 0x0, 0xe, 0x0, 0x3, [], [0x6, 0x8, 0x7, 0x8], [0xffffffff, 0x7ff, 0x1, 0x9], [0x1, 0xc63c, 0x6, 0x9]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000300)={&(0x7f0000000240)=""/172, 0xac, 0x0, &(0x7f0000000480)=""/254, 0xfe}}, 0x10) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000000c0)={0x0, 0xa, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x1000, 0x10000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x800, 0xfffffffd], [0x0, 0x1001000, 0xfffffffc], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x1, [r7, 0x0, 0x0, r8], [0x2b8], [0x0, 0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 10.524083298s ago: executing program 1 (id=412): shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x2e, &(0x7f0000000340)}, 0x6a) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x1aee2, 0x0, 0x9, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={0x0}, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x804) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) umount2(&(0x7f0000000000)='./file1\x00', 0xa7a1983d75b55fcd) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x40, 0x2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 8.631584707s ago: executing program 4 (id=419): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xd2, 0x7b6e73f209e7f471) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000000c0)={0x0, 0x3, 0xffff, 0xfffffff7, 0x1, [0x0], [0x9a, 0x3, 0x90d, 0x80], [0x84, 0x2, 0x7, 0x3], [0x9c3d, 0x7, 0x4, 0x4]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000180)={0x0, 0x0, 0xacb3, 0x8, 0x1, [0x0, 0x0], [0x34cffe8f, 0x42f5, 0x3, 0x3], [0x9, 0x8, 0x401, 0x4], [0x3, 0xffffffff, 0x5, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000200)={r1, 0x9, 0xf6, 0x1, 0x1, [r2, 0x0, r3, r4], [0x0, 0xb, 0x8000, 0xf], [0x0, 0x41f, 0x600, 0xa], [0xe, 0x72, 0x0, 0x6]}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r0, 0x13, 0x1, 0xfffffff5, &(0x7f0000000300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x12, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf2}, {}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @generic={0x7, 0xd, 0x2, 0x5, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x2, 0x48, &(0x7f0000000580)=""/72, 0x41100, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x0, 0x1, 0x7, 0x2}, {0x3, 0x5, 0x7, 0x1}, {0x4, 0x3, 0x0, 0x5}], 0x10, 0x4b0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=0x1, r5, 0xc, 0xc, 0x0, @void, @value=r8, @void, @void, r7}, 0x20) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000780)) r9 = syz_io_uring_setup(0x19e7, &(0x7f00000007c0)={0x0, 0xda1e, 0x200, 0x0, 0x2c0}, &(0x7f0000000840), &(0x7f0000000880)) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x14) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000002bc0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000002cc0)=0xe8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002d00)={0x0, 0x0, 0x0}, &(0x7f0000002d40)=0xc) lstat(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000002ec0)='./file0\x00', 0x1000, 0x0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000003140)={{0x1, 0x1, 0x18, r9, {0x0, 0xee00}}, './file0\x00'}) getgroups(0x3, &(0x7f0000003180)=[0x0, 0xee00, 0xee01]) getresuid(&(0x7f00000031c0), &(0x7f0000003200)=0x0, &(0x7f0000003240)) fstat(r6, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000003300)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000003400)=0xe8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000003440)={0x0, 0x0, 0x0}, &(0x7f0000003480)=0xc) statx(r6, &(0x7f00000036c0)='./file0\x00', 0x2000, 0x400, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(r8, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000008c0)="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", 0x2000, &(0x7f0000003c40)={&(0x7f00000028c0)={0x50, 0xfffffffffffffff5, 0x8000000000000000, {0x7, 0x2b, 0x6, 0x6030820, 0x4c51, 0x8, 0x52f0000, 0x2, 0x0, 0x0, 0x8, 0x1}}, &(0x7f0000002940)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000002980)={0x18, 0xfffffffffffffff5, 0x3}, &(0x7f00000029c0)={0x18, 0x0, 0x7, {0x2}}, &(0x7f0000002a00)={0x18, 0x0, 0x7, {0x1e6}}, &(0x7f0000002a40)={0x28, 0x0, 0x9, {{0x18000000000000, 0x9}}}, &(0x7f0000002a80)={0x60, 0x0, 0x8, {{0x9, 0x401, 0xfffffffffffffff7, 0x5, 0xa, 0x3, 0x28, 0x4}}}, &(0x7f0000002b00)={0x18, 0x0, 0x5f, {0x8}}, &(0x7f0000002b40)={0x14, 0xffffffffffffffda, 0x9, {'.:-\x00'}}, &(0x7f0000002b80)={0x20, 0x2f, 0x6, {0x0, 0x1}}, &(0x7f0000002d80)={0x78, 0x0, 0x0, {0x8001, 0x7, 0x0, {0x6, 0x7, 0xe, 0xfff, 0x8, 0x4, 0x265f, 0x3, 0x5, 0x1000, 0x8, r10, r11, 0xf, 0x400}}}, &(0x7f0000003000)={0x90, 0x0, 0x4, {0x5, 0x1, 0x0, 0x9, 0x1, 0x4, {0x2, 0x8, 0xd3c, 0x4, 0x6, 0xfff, 0x5, 0x8, 0x64f, 0x1000, 0x1, r12, r13, 0x5}}}, &(0x7f00000030c0)={0x48, 0x0, 0x4, [{0x5, 0x3, 0x4, 0x8001, 'GPL\x00'}, {0x2, 0x1000, 0x0, 0x3}]}, &(0x7f00000034c0)={0x1e0, 0x0, 0x100000001, [{{0x4, 0x3, 0x6, 0xf, 0xbf3, 0xfffffffb, {0x2, 0x2, 0x0, 0x40, 0x4, 0x4, 0x8, 0x7, 0x8001, 0x6000, 0x2, r15, r16, 0x7, 0x4}}, {0x5, 0x1000, 0x3, 0x9, '%*-'}}, {{0x1, 0x0, 0x800, 0x7, 0x7, 0x0, {0x5, 0x37ab, 0x5, 0x1, 0x1, 0x4, 0x4, 0x401, 0x2, 0x0, 0x5, r17, r18, 0x6, 0x6}}, {0x4, 0x6, 0x0, 0x2}}, {{0x6, 0x0, 0x7, 0x1, 0x9, 0x9, {0x0, 0x38, 0x6, 0xfffffffffffffffb, 0xfffffffffffff713, 0x79, 0x6, 0x5, 0x7, 0x6000, 0x2, r19, r20, 0x9, 0x82e}}, {0x5, 0x3, 0x0, 0x400}}]}, &(0x7f00000038c0)={0xa0, 0x0, 0xdc25, {{0x0, 0x0, 0x2, 0xfffffffffffffffa, 0x86b, 0x9, {0x4, 0x4, 0x7, 0x7ff, 0x5, 0x8, 0x7, 0x3, 0x2, 0x8000, 0x1, r21, r22, 0x5, 0x2}}, {0x0, 0x4}}}, &(0x7f0000003980)={0x20, 0x0, 0x6, {0xe, 0x0, 0x8, 0x6078}}, &(0x7f0000003b00)={0x130, 0x0, 0x2, {0x3, 0x2, 0x0, '\x00', {0x4, 0x7, 0x7ff, 0x4, r23, r24, 0x4000, '\x00', 0x9, 0x9, 0x9, 0x30ff0df0, {0xfff, 0x8}, {0x1, 0xe}, {0x774, 0x2ad}, {0x8, 0x132}, 0x2, 0x401, 0x11, 0x2}}}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000003d00)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r14, 0x3b8a, &(0x7f0000003e80)={0x28, 0x0, r25, 0xe7, &(0x7f0000003d80)=""/231}) 8.573391226s ago: executing program 5 (id=421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000005540), r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c27726f75705f69643dce482433d50e64", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r7, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r8 = syz_open_procfs(0x0, 0x0) readv(r8, 0x0, 0x0) r9 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 8.458029062s ago: executing program 4 (id=422): io_setup(0x222, &(0x7f0000000180)=0x0) io_destroy(r0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x100) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x10200, 0xd) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0202f5", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2507000000080034000100000008003a0007000000080031000000000008003a000100010008003c0030000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000008}, 0x8003) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000001c0)={0x8}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r6, 0x2000000000000269, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x30, 0x1, 0x6416, r5, 0x0, 0x0, 0x5, 0x0, 0x2}]) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000001240)=r4) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000240)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x40001018, r7, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r7, r9, 0x0, 0x4) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x2000008, 0x12, r1, 0x83000000) 8.284257402s ago: executing program 4 (id=423): r0 = syz_usb_connect(0x5, 0x48, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="d31fdce14d45ce4c8fce73a0ac4415769e5b622cb57404eef8b445bebfec8e98eacd4e7fe3bc34b10b0d0f69ecd9be6e578e2566358852ca913ecd52c54340c2a155594a478038ede4dbfc774e260e84a2795e3bd484139f1846520e62f3b1d0ed759eddf0500607932fc38d1444233fed22e6fedbb3fd287bce85b01e2ef15114cd65d8649b8c1ba7596e573ebe0d6ed1a5cc0e460bc2640f155fc64a949b18391b431b4dbf6451a4ee31829bbb30534b292126e0bf67edaac3d6e677a210d37eafac372d255d", @ANYRESHEX, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="b14bbec13ecb43f61c4368550f1214d62cb93a8a63ce73c8616d1fa4144326c69be7caf2f842d203f4d5356df8440d4c6a961d8ebf71aa3959b7b6ddec99ddee91d7f92970e6a35f8b82", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8.188626967s ago: executing program 2 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe2(0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r8, 0x1) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa390800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\\x00\x00'], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x3274f3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x5, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x40000, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0xffffffffffffffff]}) close(0xffffffffffffffff) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r12, &(0x7f00000001c0)=[{{&(0x7f0000000540)={0xa, 0x4e22, 0x1, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) 6.99848933s ago: executing program 2 (id=428): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_STATUS={0x8}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4316d5206da97f33}]}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="db36e307f0a5f747d418609c42c2c888"], 0x34}}, 0x24000850) 6.945971475s ago: executing program 1 (id=429): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x1ff, 0x8000000000000001}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x400, 0x10, 0x33}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048080}, 0x1) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000002c0)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, "df198744afcdc165f945ed7cbffb487b9ea5cd7783835d0915bdd49c7deb56b3", 0x4, 0x66, 0x5, 0xfffffffc}, 0x3c) ftruncate(r0, 0x3a) r3 = accept$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000380)=0x1c) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x99b}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x1, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x14064800) umount2(&(0x7f00000006c0)='./file0\x00', 0x3) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf32}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xf433}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1f}, {0x8, 0x13, 0x800}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa1}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x1}}]}, 0x108}}, 0x80c4) landlock_restrict_self(r1, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000980)={r4}, &(0x7f00000009c0)=0x8) r5 = openat(r1, &(0x7f0000000a00)='./file0\x00', 0x80003, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000ac0)={'erspan0\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x700, 0x1, 0x4, 0xfffffff8, {{0x10, 0x4, 0x3, 0x2, 0x40, 0x68, 0x0, 0x81, 0x4, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xea, [@local, @loopback, @private=0xa010102, @empty]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x1b, 0x0, 0x6, [0x2, 0x6, 0x9]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000b00)={@dev={0xfe, 0x80, '\x00', 0x2f}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x8, 0x8, 0x400, 0x8, 0x80040020, r6}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000b80)={'pim6reg\x00', 0x9}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000bc0)={0x9, [[0x7, 0x40, 0x7, 0xb4d, 0x7fff, 0xfffffffe, 0x4, 0x2], [0x7, 0x3ff, 0x2aa, 0x3, 0x8, 0xa, 0x10001, 0x8], [0xd, 0x1, 0xe8366d, 0x2, 0x9, 0x5, 0x7, 0x95]], '\x00', [{0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0xffff, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x4, 0x0, 0x1}, {0x8, 0xd, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x5, 0x1, 0x1}, {0x6, 0xffff, 0x1, 0x1, 0x1}, {0x400, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x160, 0x7fff, 0x1, 0x0, 0x0, 0x1}, {0xb5, 0x3, 0x0, 0x0, 0x1}, {0x4, 0x40, 0x1, 0x1, 0x0, 0x1}, {0x2ebb7d6, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x4, 0x0, 0x1, 0x1}], '\x00', 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000e40)={0x0, @raw_data="21e5fc417719506f1eebf0d45cbaf6cb674bb36abcead1146a719e6bd6cf8c3488aecf9a3fa3296c21559ac242d0d53b8325bbb327287e24118fff0951657e5b180a83913f8fe8a72cd74eb1e230ab1d23b76e30e12e87e89cf1545a31ed349eccdad9fd7b5ba150b274896ffa358c4035849b36c5317d9eefdbc242d021a44a95719c66d1a36cc3fa75e8757698dfbf41230e40d8e42fbd144276e2e7c28a44e771a7918609ba9c7b7f9900f80ddfcc73af2b8fbe1f8b80a7ba24930d823d619d87921169dcc73f"}) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f0000000f40)={0x3, 0x100, 0x7, 0xc6f2, 0x2, 0x2}) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xd8, 0x1, 0x2, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x82}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x200c00c4}, 0x20008c10) ioctl$HIDIOCGVERSION(r5, 0x80044801, &(0x7f0000001140)) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001280)={0x0, 0x4}, &(0x7f00000012c0)=0x8) 6.823975572s ago: executing program 2 (id=430): syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000300)=0x2000004) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) syz_io_uring_setup(0x18da, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2, 0x85}, &(0x7f0000000100), &(0x7f0000ffe000)) r2 = socket(0x2, 0x3, 0x6) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r2, @ANYRES16=r2, @ANYRES8=r0], 0x14}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) capset(&(0x7f0000000200)={0x20080522, r3}, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x81, 0xfffffdff}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100090808004149004001040800", 0x58}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000300)=0x2000004) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) (async) syz_io_uring_setup(0x18da, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2, 0x85}, &(0x7f0000000100), &(0x7f0000ffe000)) (async) socket(0x2, 0x3, 0x6) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r2, @ANYRES16=r2, @ANYRES8=r0], 0x14}}, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r0, 0x0, 0x0, 'syz0\x00', 0x0}) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) (async) capset(&(0x7f0000000200)={0x20080522, r3}, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x81, 0xfffffdff}) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100090808004149004001040800", 0x58}], 0x1) (async) 6.492338591s ago: executing program 1 (id=431): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000080)="ea", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001", @ANYRESDEC=r2], 0x18}, 0xc800) r4 = accept(r0, &(0x7f0000000140)=@nfc, &(0x7f0000000000)=0x80) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100), 0x4) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 5.563315848s ago: executing program 1 (id=435): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="f0010203010902000905820300160033810000626a55330500"/36], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000240)={0x40, 0x15, 0x8, "ee684fbe0d94f5f8"}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xe, &(0x7f0000000040)=ANY=[]) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x30314247, 0x2, 0x6, 0x5, 0x5, 0xa6e, 0x0, 0x4, 0x0, 0x5}}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.408076009s ago: executing program 5 (id=436): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={r9, 0x1}, 0x8) close(r6) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r10, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r10, 0x1) recvfrom(r10, 0x0, 0x0, 0x61, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 5.262951248s ago: executing program 4 (id=437): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.log\x00', 0x40, 0x12) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@deltaction={0x58, 0x31, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004854}, 0x40) syz_open_dev$evdev(0x0, 0x1, 0x180303) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000001540)={&(0x7f00004a0000/0x1000)=nil, 0x1000}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x492, &(0x7f00000000c0)={0x0, 0x747c, 0x400, 0x3, 0x3de}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x1, &(0x7f0000000700)=@raw=[@jmp={0x5, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) io_uring_enter(r4, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000066b0e20899110268e3fe0102030109025100010000a0240904840307368a340809050110400099f70509050800100002050409050608404006800809050300000239f5330905070210002b0406090502001000bc070509050b004000005407a901c1cc37b0aa47433657052d3d4d991a55ddf59981c9f8082a2f6a32de7cca34ccff0ee9e4218b2f8da608a5f518e5a855b225e18aa61a32b1042bae09aca209436881782ed3dd09ecbaccdda128f9336042"], 0x0) 4.237073009s ago: executing program 3 (id=438): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x1, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) close_range(0xffffffffffffffff, r5, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f00000000c0)={0x40000}) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.772069711s ago: executing program 5 (id=439): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0xffffffff, &(0x7f0000000040)) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x108, 0x0, 0x108, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x1, 0x3, 0x1, 0x7}}, @common=@set={{0x40}, {{0x2, [0x1, 0x5453bcbc9f9b51c3, 0x5, 0x7, 0x3, 0x4], 0x5, 0x2}}}]}, @REJECT={0x28}}, {{@ip={@empty, @broadcast, 0xffffff00, 0xff, 'veth1\x00', 'pimreg\x00', {}, {0xff}, 0x84, 0x1, 0x20}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010100, 0xffffff00, 0xff000000, 'ip6gretap0\x00', 'pimreg1\x00', {0xff}, {}, 0x67, 0x1, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390429bd70000000000000000000", @ANYRES32=r0, @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x4008055}, 0x4000004) 3.771389089s ago: executing program 2 (id=440): shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x2e, &(0x7f0000000340)}, 0x6a) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x1aee2, 0x0, 0x9, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={0x0}, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x804) syz_usb_connect(0x6, 0x24, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) umount2(&(0x7f0000000000)='./file1\x00', 0xa7a1983d75b55fcd) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x40, 0x2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 3.358161563s ago: executing program 5 (id=441): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="11c34f511ac9854deabf88c722f1ed635bbe5dbbe51b5155075d3c655ca4b3abec126c8a77e5a5696a590e4ef5eaafd9d63ecd2baa3be49bae48c261ee86a6ccc76238b187285e96a78b863044333dfbf4c0c247", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2e, &(0x7f00000000c0)=0x100000001, 0x4) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000001c0)={0x1, 0x6, 0x2, &(0x7f0000000000)={0x1b, "a7116004b8e589618ceb9252a7347d377e11caa4391ba1929e6785a4864a9331ab"}}) write$binfmt_misc(r0, &(0x7f0000000dc0), 0x386) 2.587867707s ago: executing program 3 (id=442): syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYBLOB="0635d3fb90fe59"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r0) 2.384161289s ago: executing program 1 (id=443): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x30, 0x6737, 0x7f}, &(0x7f00000000c0)=0x18) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) 1.599423359s ago: executing program 4 (id=444): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000500)=0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000300)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af04, &(0x7f0000000200)) r10 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200024, 0x0) 1.576173305s ago: executing program 5 (id=445): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1032, 0x20a}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3c3}}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.112130381s ago: executing program 5 (id=446): recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x1000e}], 0x1, 0x10162, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x319401, 0x21, 0x10}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r6, 0x47bc, 0xf5, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000440)={{0x0, 0x6, 0x7, 0xa253, 0xc6d, 0x4, 0x4, 0x9, 0x8, 0x6, 0x1, 0x52e9, 0x3c4a, 0x6, 0xffff}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f0000000b80)="648678210790aef789014d2950e053689eccf789ca22d52f003429a35ee198865ddbc79fdf08b2803880dca70ebfbb08514bb5107c999f3c3ec9cdd8bfa6d977863f4278649f9b9433d8879fd6c523b4817ff160"}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r9, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) r10 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000773f83910a16b6f9000000000000000000000000000000000000000000000000000000000000000000e6ffffffffffffff000000000000000000000000000000000000000001000000010000000a"], 0x110) sendmmsg$inet6(r9, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240040500000000904000006214c6a0009050702000000da00090589b93bbdb9358f05b8076f4c0fcae82a8751830eca5237b6c5f9b92b3c"], 0x0) 1.075344988s ago: executing program 3 (id=447): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x400) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f00000000c0)={0x60003, 0x0, {[0x6, 0x0, 0x80, 0xf000000, 0x8001, 0xffffffffffffffff, 0x9, 0xe]}}) (async) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r11, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 970.017534ms ago: executing program 4 (id=448): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xffffffffffffffaa, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xe0, 0x1, 0x4, 0x10, 0x34ef, 0x202b, 0x3609, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x84, 0x65, 0x20, 0x9, [{{0x9, 0x4, 0x4, 0x0, 0x3, 0x5d, 0x8e, 0xb8, 0x9, [], [{{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x6, 0x2, 0x9f}}, {{0x9, 0x5, 0x2, 0x2, 0x1af, 0x5, 0x3, 0xc}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0xf1, 0x5}}]}}]}}]}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24004085}, 0x48050) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000300090000030000"]}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003030000000003000084117641c7a59f7fb6b53e0b751e96f7a92f6a0838620002d24771670cce2e848640a2d173dbc97a6c5d5e9f04e33a27773cecf06628d5044c35035696242337af7b6d0b05463e5261cf8d1b5ac0dc7a295df53fd3e0422d0a1cfe5de7e8e7ff527c691301ee8474718df0b874f0139a340f30f8c38dfd"]}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 644.345238ms ago: executing program 3 (id=449): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000000000000900010073797a300000000048000000160a05000000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000314000380080002400000000008000140000000004f0000001000010000000000000000000000000a1a9f8a459c58253c4e41f369ba656a599eade5d555d5414fb2de816bfcb4cfb140b2602acd6e5eccfabb72bb"], 0x90}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 532.702764ms ago: executing program 2 (id=450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400100001000010000000000fddbdf25ac1414aa0000000000000000000000000000000000000000000000000000000040000000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x20000000) 354.608853ms ago: executing program 3 (id=451): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x4440) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x3ff, 0x2, 0x3, 0x3, 0x7}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xe9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000580)={{}, {0x3}, 0x94, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="92043f0b29d81602fc0689df4279d98f1d75d871ea2c10aa1e4a5312383ee7d991853febce63f33a8bcee434c2d566c7fcdcde6cfd46b1a3b065eb1def177ea9ac647269e36897b5afeb5b48268ecad4be22907ee9b4555d6750edd013fe63f7816cb7770cbdd27300d0a7a5b49bdbd71e3a3e1971bdd586365dbb18f099adc1b89298cbe74ffad3d33cbe3c5a0222c4a7c706da5650624b2671481b193be0cc2603b9bc36848f8c3a0b8d83ab3860760ebd6227f7619a473cfb281d97658c9b774217c39a5302ac8d14b772fa97d00df17aca7a835fd28a8a87ca68e211450437e682ae76affd42c46a0a5c25e59df4282a58bcf921b5f85aab38626902c59fffd83f85e867f5af1ba5f8dd57d6ee72ae6005be1cc58795a295a9aad84067db467c589332785d340bb919b369d283a16cebded8899d2268deefc3fd9f03636d7064e9beafeed2e63ccd4d61e0b754a7a741adda0feb0f2cf082a80c405b82e493d169045b8fde1f63a1bc256c2e3c66ce48950f0b74e4f10fd8b53aa8324e5b39148a06f012ada5675b69fdb66ac54f1086a9e7d94160523ea126aa88aa486c103c31b46e3d538073fd4a426971bf454833ecd538c4fdc373f82b83c36de1f66ad06c6d8e083ed01f461de1e6cc585122c8c73e36921bb8e701de7a", 0x1dc, 0x0, &(0x7f0000000400)={0x2, 0xe0, {0x1, 0xc, 0x0, "", 0xd3, "45fc716bf5ac24e43ded2682a7cc7a328ff397b9bcf54c4a07ac9621023cccff87bbe8715b22823beb8c322532a974bc72878777c53e22374410995ed1cb935bd2e786b2230ff9692818b7792162cccfa6a0c2c1a255dd84a54ef0a772ef0f37273ed35448e4271f047f2087d66c39f0c0e534fe9c8329d7923fe7abe74cd6b325ee0b337a61eb861aeba0596b4354316b39fd6ab6b3f4645407ceeb0e336473feae6fc0f30d770f0ff94b381881884da2b55d0a53795814341471b482f08c5071f60f3d9aea4c38527e068ea1bb1a68c49bba"}, 0x60, "cd5e40cc6841b1ffabf9930b38fe931a9de01f9f44ff30a9eade2b648f752edb5e0d7a948d10e3ba93ae8d3066eef5a63e387d310f17db0a57810d369022e2b411c55fc40a14293b6403fec11c2da34640a085aa7eba548429332d99cff8e499"}, 0x14c}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000600)='[\x00', &(0x7f0000000640)='\x00', 0x0) io_uring_enter(r2, 0x75b3, 0x497b, 0x70, &(0x7f0000000680)={[0x8000]}, 0x8) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000006c0)="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") ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000007c0)={0xb5d4, 0x19, [{0xc, 0x1}, {0x4}, {0x7, 0x1}, {0x9}, {0x1}, {0x6, 0x1}, {0xc, 0x1}, {0x2}, {0xd, 0x1}, {0x6, 0x1}, {0x7, 0x1}, {0xf}, {0xf}, {0x7}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0xb}, {0x5}, {0xb}, {}, {0x9}, {0x6}, {0x5}, {0x5}]}) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000800)={0x5, 0x10, 0x1, 0x0, 0xc}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x400180, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000880), 0x402, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000008c0)={0x7fff, 0x8, [0x5c4, 0x5]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/bus/input/handlers\x00', 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000940)={0x0, 0x0, r5}) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000980)) r6 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) sendto$l2tp(r6, &(0x7f00000009c0)="2730ae72f2b71f3e8b5514fc", 0xc, 0x0, &(0x7f0000000a00)={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000a40), 0x6, 0x84040) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000000a80)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000b00)=0x0) sendmsg$nl_netfilter(r8, &(0x7f0000002e40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e00)={&(0x7f0000000b40)={0x22b0, 0x14, 0x2, 0x903, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0xa}, [@generic="821005340fef5ea921efaec34960ef81d78088ec3e42376ad5b685b235b8176f8b250fed8d9050a8adeb65348fabf9be4c30837814eaa3a0e0f2bf703da8b5b3bc0f8897d6b7ac009a1ca8aee25e99036384b623635ece0fd16810d13fcd352d3b0dfd218ffd12e773d36fa4f8abc2f59e22def18735f8b84273a62a4925da6f948c1e3aa9395780fadd4723a0a2376a62be86869c08236a657b2c6b507a9347cbf8c2ca9cc4f288c6cfe7b38c2ffcb8bc9bab37e6be68", @nested={0x8, 0xaa, 0x0, 0x1, [@nested={0x4, 0xfd}]}, @generic="06068e5464e22207bfd357acd4620d40dc9bc13ee250168c469a27d017098a2163245f23976b7219a427de0910b4793d4bdb35ee6065501fd703153c4fbde6b15836b0f68b591f4ceb9cbe0540cd5465ca69200219c03599b0f7a052f7afe21b759c0a2d986fe0808e41e635ce09db8af1cbfab6b0763025681924705089a4cadfae8f2fb5e0a83bb5058447235dfa7a4448a4b147603a30447927d6d88c5bd1cc8ea80da221e6225a4c6f52f5364b27908545098402cc856c5d67d9ccfbb89333e8a97747525db42e6afc3df1a0bd48803cc4bd8f47f3a6f4e4f2bd7cfb46a155fbfc9b7551d29ea47050d5b48e840ddf1b459ac7cdd2d41bd7ce4903f4b78c4267fd4fc5c2aa25953d2525e250c53355c9dd41ba34e6b6f075a089099cc8406e0157680dc287dff7cd62aaa3d6f0d90fb8a81e696d6a46e236db4f3406d9469ea665c0a03140625d65b0f6620d27e5574cd8f52692eee763f3e6264a41c535fc99f1786ae54c43b9da27a60631d4fd659ae2a2e6400194d48cef637f7360e7d69e8a7fca40b9f1d08111e6bcfd105b4defb4c43ea43f525ca5b44790844c7b51c5d190f08a97a406fafed90b90a4ca5df19e959a32728ecf46b2a4e2a0300a74c108be1d6fa56c665f1cd71775b16c504270404efeff5d4e4a13ab20503ac0ac05f2e820ee1602775cf5c4fc493073dd63f81d2a7364ba1178dff4ce605079ac02fa3721fdc68b178e7df89229cf2720cf8638f8fe192a1f728548c685872f96144f63ddc257501c6ca10cd9832f0f0b66c32205d1b50fa5c6b41636d2d3a895ab63e00427d6aa110b9e4fb3b42110967b786f4b863c2873874ecb4b4d502dece5a13cd8489aadbbbb9fbb895782a1d0bdd7d4c8817192dde0ab3faf90533821c4bd7a0d585aa6bbb2950018f9b1acc20c8cebe41b5f91f4e5be60a4a3ae6992fde63f1d5ef02bee1aaaf415e5e916e471c7eb512523489ca64cf689eeac1967671e36047bb300d0b57b80adbd2a21d66f77b9344e940e868ad06d60bb3f901adf722520f639b563d39236081bca7e0951b73a485b1f5a7b9f33cd50571bfd0286719b3e1195bf0781cad42b1988e1fef20c7e39ed8232e97e684af44bbc0210ca46cd8b56b347951cb076e983cd086c5bd1deabd0684c350f291e082025850a08013973d76f5a7ff69b69a4bae0b3c4db452baed7fcf182df55a1446b41637893ca3d31f6acd16598ac311c1081a6f6c9275b71bfff8a235c45a8575197f1a22726e59750606960408a4e159f6a62f0cae326e8789e3cdc9702ca06f2404f5227cc2c1d247dbdf6a5db216ecb8805b56af30cd10c45541ed541f436da1ae5b0d6ea31d09e68dd23c44d52285deb11b349090477060f878cc019fbf40da401bf60ee42faee3f649098718c6a70178c80cea3b0ca5f49965a171a23ba55961c43dbe2a7c4e00025547a783f5ef42279efa01b0ccdb0a06505b925ac755b24fca206b029eddf5ae892055680bfa5b70c45800a95cb8bb40292a8c7d1c623447a0d5e43f2cdc1d3e0a92bd32668399403e903252cacd89281d25fea6ac9f4348db6be1366287463137fffd8e8ca13936232feccc33c4b21cb44eae073b6a44017ba462d041dc9101cf6c5691e2c8761a35866492bb64d60062f1556c121e948000d54aae84dbe22b0487ae7b67e2702d6cbca9718b3594df0444471276ebef975eb56a6cb556bba0110be90cb4cb97ceaa388abb3b3423146bdce03fde37b960cd571c4175cd2accb3a22c032f4a5b9670d4b4bd35d597f344a4ef8152f19daa98a660dc10fbb8a38b0050c3008a46b7b8e0bc633cce8289ccca071012d0a0e89e10dd7208781b1711b803ad26a9f7cfa6c1ac0e57882eee1736272b63cff36d2ebb7a62b8c054017d525dfd0ec91a24ecbc4988b4dec1b4f7fdcf8237e843696895a9f643e429799029d33168451d53280c23c4d54aaa74c92e74acc338716a32c79cb5719f092b6e7f561caf783acac728b25d8d48515452b20e3713f520d6cab5aa0bd0326a7e0fccb7efb7b029c0ddc527f58c049b0a48f9d1c2b21c08b7b699508c90e5f2bb289f1758d37ef65f03f12b1178b54f6dd5d5567e71ce3aa1f12ca6d430314ab9186481d199d4dde86d6b997ac8ffb0f88623cecc72434f50c8fda7868f8db1775da267067e1b81e8f137d73dfcd5410a90df2fa430a228a1c52783d96d235c54c6019f29a5f181cc2d3ea124f2796083e31357b2ee00fa13c5a5b5cbad3b7e67e79e4efdd27538cb6a08f68718bd59b9b2ff0489a2583ade629ad6b5d6b4d126fcaf71b5718a0fe2537a5666d15dfa79c532749a872a84e783930ec2a2caf933952e8680a71eb945c24370e97e2cdf2255eafc627ee3cfeb90bb57df29aa865be70ff474caad355f670d1874c9595a87a3fe73547efaf8f53ccefb9a7cc235d2fa46785e73fb523be79365945142f2b6f9d6a642b3178061f366c17cee19b71eda2c674936e7e8702855cf52490631adaa6dd093e02e54eebdb81a1e56bb2ab570349f36bef270ac0d626f32bc145cc5bb94b4dde26da2e0ae5ba48c84b875620679dbd46fc860d2ea4fe2bf0d8037b831a6416d516f525f23398026f21d3614260f26770d49a76ae87a62eba1452eb31cd72fa1ff601fd161dae50772c160d4ca03b20513e91fe3bf1f0e1384694e9df103bf94962262adf330fc6edeec650c31d8dfab448eea2bb92f91664ac1a90069cc49fa409a8bd7f13ca629a9c23e5c84a3e7fb2b8908ac97da340cadfb5f7e59b6923c5d1e16ade500f35c58f2d2fab1773feb999c5e21015093c0e52746ff017ef34b96f56584f38458d7235a7e61364fe345cafdd2479ab5b45ec54f6e09c0e8638b3e57cea325c2519f84b384317a625d885419ff32a3e5bd9612f1b573bf42074142c7aa27456dfef018becf7554d2fd885cd8bca6d1d97d2d31d4265b375cf84da29a6a620f812412f04849402cb387db323f47cfcabca45926a305cc37f4db98ba4c9a60589ff0e27952bc8c5573dd9dbd815911193908e1ecc3cbf1a3e9a7e2a74c9ad51b42e87b36e0be04af802d659617ee8fec9465eed84f60581f899bcdac3ea2bfd16efb4ea1b939909eb8ba1c7f7955e5e0f7c3bed7038bf14b893d8a4356676b477e901ac17f125c1dcb6c03b66cf07a283b77c4aa436ca83d3611c7062e73d1b40013369bde6adc2d87ff9a5a403b27d8646dd704028cc45c22b252298ad962f2e294edf94bab5519c55d3e2873b725a03e372af8ef3b283fedb6cc834d1f2c019f802a6858c4bfca37a07b4ca4f391caaaf250331b65c95bfb25b09fdd4ab01d93466b36f8e2f077ae963f358b0a92b7cee36d2931f5e3be0d577809971e0587d4db0b04516885f0c72b9a8b3ae897d2b7c2bd06c61878210a51b00b5061f77cbdc58d9a5225c27b8fce17ab181f8524fe01f60b6ea8ffbae0fd8ec4f87701c96ccb57fc0e63966745f0990743a98b2a345a9c83c07c4677ce5aa98c9f4ab7b0c5ff468037d845f4fd8e4173634a268a45822474001d035fdd6ff236190ae3ab149a56a11f4fae710cd15645f04a2d0155765e0834eed49867824024e6283c647e9e17a9426f1178341dddeb2237714d36ff32d948c9f50babf1ba4c4f219c36a39a901dcbd9ecaf6fc95068d17e107c95606551af57d63ebd733760a239f716238225baa17c9c193f30e0be7224d565c1e20bbaa4f2b3e8eb29d486f42e3065196e7810ad6360560b85ab8208d9b1fb357afdfcc9c517c808187e5235522e05c1b7eb6bd64b6d4b1e92ae98c80733c0e9eaf751b0ad6d2f73dd60a2157a2f064910f23e44bed5b332cc3fce0cc831ce7db5f20b01caab9b32debae5a1a3f22b2b26c3ef304cc1ca456c082ad5a053e0c9a7dc1a4c398c3face0358e0e38656962b0c9053214cc938d32f61a14a8f788010372a611676f281cda8d94f8a02b9bfc94181731d57d8d5283f1b98adc1924383d652b2533aa9aa5be6134429d7eefed51c0b1fba4d7c077bfa8173cb949d7ae6834e38a640712b126df7edcb332209fdbfc43cc8b756e3e47dd87abda026b83fa96384775c8becb916a7b87e517c7faafeb5755fa1c79361942483e29de7eac3467575bd5935e0cd808f89124db517b6fd346c1799f4f6883651345c72cd8f821faf6c19f976860df327bd38824d7175511e034b1250bb5a312ebbcb831fdf9a63a2434386cd30aaad5d6ec1240169978ca436387cb72b6cd69f5ce4976b9edd83d8a07b87ddc1c0567689ccd1d11a647423e301eb51bfdb48b5dad835d636b68bc37be21cfbd911c07ee911662545358ff7109b7cea528b5e1c13e73da5fe68927e883884d4bd7fc008104329cdf237ebdacf36b38a828f721c48e7917b47201c5d0df0ef4b52069e5c12220545e720519543328e513e4077ccfc909c48796fdd431229123ece07e7cb3afd84e80f99b93d89758fdfcdca97c8ca309325ec73d8934115b05c86ae0559169da5072094c5233313874f3276d30ea66a1a160b1e0c182ae97b84cb2aff4174d4ced405b1ddc9c736db8c699518da490b8ede6c9130fc6e2f89a00259a2a1709fd1d4b5c61c6e797948e7868b62cdeb0ae0d7581976584088b5fc38b351f9f57fc4f4871c94403d575038c6ebaae3f7fd09e06fcada902ebad3e28e96e66a0d7cc9996746d9700e683d4f279d0da04b6d2d4d01a4564013ba5430183e39b8375309ef586aa786835554292a7d026e631682356870f8909e68faad5886e85300cf3d28a754b1707e59b9281e826840a6a19a86551e4ab3abb925101fe61ac656fe495b12baf050606a01e7660e237f78fb8fc76be6eb6b91c31f393bb4dedcf2a11e91fa087ff74d8f92b7d881307924ab3b20eea3e2fdca7384b2629f6ec1dad98c2414cbe348e0e13f5e69490279fe15fa8614af14614123c2c7457f3cd1599b870e896b47a65b10f61d01977d26830e86bc98fc3c912cd3af28b4071bebdf38bff88e564de270da7dac846e058656674d5376a6cc015a36cdd646ba13671b794b7a55c1e9dedc400b8f3cbfc4a135909ba934cbe91cb395366ef9d4fb7c626f6e97e58d488c799071809deedd969ccebea8cddb4348010a3315ea81f48c3a35e89d9add93dc9189b9ba89a13cc22c35a574de33172d529a549339df0151510dc7e0bce5165a4e28a4789c7d032dad93a448c4a4397988e53ebe67271633c3a1c981ff57c0bba2444da2c9aed127c3831d66b217658de73cdae5be76dd429b29f022403f39252f58c5c3f3d96c6a5276220693f10ef671f31f0d6551143c7683fd0920cdec9dd6d0039092dd480601ecc1738262fe88bb0c6c7dcc07f094c42915a6505d1f6fa5b323e19f8815c256fa4fcb179a6e77cceb5e49d683b07a5a243c53055370933735c3366c5e955c73aa58b70c85bd580d66e10ee8df6035410765516f513a6296fb7dbcf95ba1e6864247c6b05be589152f8caa34efe8d31660c346c5621b809f5143fa009464eb8944155768746ec297656c48506f0b493ff5cf0cbbb8a3269590ea7c30467f4cbe7f5bc88412262915a358bdb6d6353a81b783fcb36c2abccedc0e693c6a957a4a46d632f1f8e75e249df2a628b101d1f601acc4ba6387e3e6a164f96727b784e336af46418af3e4df5569e4aa0e9fc2689bd234c184416f6073da861b88d08c38054b69ef0c397d61f50a3f4470ba3aa81f7dbc7b02594b174ec344fefc80143fff49044a335be9e3296685810d49f09ce21e63", @typed={0x14, 0x38, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x10e2, 0x17, 0x0, 0x1, [@nested={0x4, 0x5}, @generic="c4fe4dabe36636452432c31447811e463ad51dfe3e566392db101939753f3a64b439ec916376b76c2889b413fc8065d4be6b1852534a02a2f4a808151141dadb9e04d8a4d457bccbfee3512bc3e1bc2d174055cc9fa0b98624f6ab946dd109406051d7f6b42bc601f2f8ea31f6d0af32e4701085d479e8de577c4765732e079b758bf8d290da7e3b349ed869780891ab166b2c57e5420d84cd0561ae3c4d560ce496d9fafdca549f3242ae32bc942e02874ac0b0c8dcc2af97d3ed16987dbec5862fd3e18f4188f13382bbdb3e1c3e30228a4483588b42a8ed5a5eed789b67bee8b254a5f054427819b019a61572328c5ecb1eefb78c82ba8a8fe7ffaf30dab96e3b4420dbe725d5814fe996facb0d596d145c6d1b88195927c3bad9d79d7c6e11526f8b760a41c2dbb193c9b3d06377b7b98d5c249bab7ba394e749706f2abd8ccbf0d6aa60b0e4b0dc88684a52493f2c0e5612076b523a87f83ff311492403f4c79b3b55b4cf463158e594688332cd8625b3f377537d09fbf28d4f1c7f15c48a4ce57e486cde5427a7eb53aeb324d7a830439cf9266b68b765e558b53788ec739b7e5381fae5664184db97e9bd05da09970203b6cca763086eac44ad06db05347942a80eec79b455c085efe78e7f6b8a40935bc575e2edeb9aa972602253ee776315376837e0ab8d9868fdb0e03739f3a936961551c71dfe3538ea334e777df54ed7576d19818cf9cf00a13a57505775ea3d9d6cf335e91a7f4c6aab3aca575db848b756feb280dea9d104c973809bd1a94c52dbcf168b8a6e8a8f7843250ec7b9d3430eda95a9855a3d1737686ae39faf1e1cef136434c656428e4d8e1a0d3d7aba39783db1776c4b0d8774308f5fd811c6da91b847aa564a915bd3a2e8e60772b617692fc0a592b00689d08153d42fa39f38c94b0ed3fd2fbcfd94888ec3dc81d518f3b5f2694c0991a83a72649f2dc8671df33a81095ced194868f2fd652be08eb72f7cce995bf3a0a2145c39bf7644ff1722f7cbd1309c25f91def2af4f68313243643b1178bc304227bf1cd6a5aa4bafa7975bbadb1ef46a44b07ed1cd0cca4346169f0f95fac68f57e6250ffc7b6fe9f342fc81960e6e5981ff91cd78749cbccdef4e5686cd55b8b87ea6aece1a13ba04299a79fdb3d9649a03131694d264e3da61e48303ba3149f01aad084dae5a98acf909520386c59ec481221d81fe4d0fa0415e9e684b0ec3d595ae888229ae8d5c19296d83b2724e425f19ea1b1489d3ce5d27b235ce913452b371a9f9f94cfdab215ab633a7af977f8fa3fdf9f20794a99792fbfb085980750dec8bbd13293dc8346f079628bfca3f15e755967c904bdd2c281b362418181cc9bc0838bded4060aac86ca8ce943bc212921c30c5bc34783014bf2781cefd4ac41c7d325391f0c4aa1ac697c701bba5a04de4105d8f73bf55fdcfd328d862f6150e1f6b3d3d05a0009cdf9680bf015fc596785780a5f0d8cade41ddae5d5cd279e64a7181aa59042c1e1d0031548bbaddad8e150f6d9a4d822453538433b472ad86b251384bd648f6e3b4766748d48ee7927c6d2b13d16a4511d8eef390d9343996997c25c823cee3aff0365d01b987724b146406a513ed4731375810c2bee57a58c704afe9a780cfc5e0591e6798c895146e15973d8ddb548be30be779231df63dedf8ebe3d695dfeaef515f214e5966beb06368c6c0c1934bd5cc5701370d380bd4e6a2da39576196dd7fdf49c5424b481c7f541f53e36cb52187a9372133e75fe5166ab948c9292d44921351a845c3a04a354fa5112c23c0bf8720d18562cbea40b096df5eb76776838ea4bd6ef225fb60cd7428affd6cea229ed08ae05723619ddca77218104587e15b900dff3bc51935b2a2b3edbd4f4d86c930838c4ad7b4432860af1521994d0f6247fe8864e18f43bf2b7b81fce7f679af4cf6a0caa3e79ef7cd05171456c6b7e75d4d12d8d6070f1e08d296130d3a26bd9c05ba282e21192e77c0b93d87b13eeb21856cc1f890fda97993c4197542c9aa8a5867b3659d520c702fea76e4a68f79c1763da43013bfdc35fb9417f47e432a602306e3f7ef30ea01e612d9eb00df883e954386272226f96086a8968f13cc9c1113ac88c3e54215cc51ca853e12e8d93730a6b0e7d559d71dff52d06c15184cfb93d6b6225f6d6d6e8d7d559b2b66e846eb109b4a1180bd50d2ac7aef72acb7a6bcda38ae2e241ebac4995ac5d992f1230c5cf2f93f925388dbea582504af732a9d48b348324b8944938897d805d54ddafc292c88bbc4a0b7e45e7b1f5910283abaf4ad62f0fa80fc211b9289b79d0a6e5e4676611c3f1f9dbddde1f298945644aa2f8cbf108880c851e6c2212a3a681217c097d5bc36189c020e3b61db14b32ed5f80a48aae225e55fdcbafd29b930f36ee74f55e20a8d20418a2f88cd95730aaaba773ad98fd5a459ba77b7e4a4a03c29aa893f1c43378f15d36a1b2258f05aed7acddeee36c6d31807685c6f6cdb03a9dc31ad21fae9534a3d2f01211ed0425a5eaceed5ce45bae49532cb4b76677e39ed3d64e2b2c6242f4f10a160f7bde97df848a72f0823978a3a0e11bce28bf16c0f1580caad883e1ea7f60ff7613c3844404452de45fd1cd19503756996c2d4c2d31c6392779b3e65cfac68978cf62f505ee516c97c6b70169bb5e1a2e7b4e5a9ad1a98c3ce6ea9ac2e888cbc466d954ea569d7fee8d681b5de1369e3f4346433e5f4a5e4c32b44a61f260fa7f37aeb9e52985c28e4a6b7a1339788613d5cb1a73ae9899c6a0da1775cb4a176d8f62794298b26e4e9d7824755e0e630b4e2c02d73908e49e798b84a6cc7b1eea230b5f641d8aa484acb0838535b1b5a0d8a75c7bf735edc87b05a97218cab2619f7336b6d41deff2e7b193db111d590aae056800e8eb09eb204315f0c89a11e75e68a752de52c95ccc4ac47093a2170f926533cf41f7ace1868aa3010b921ee59039f9df4c2fac2e069da0893e608f8c0987cdf053819bcb563fc7fa201289da68256bb89056bc0ffd618abcb5ad7cf7fd3d13ffba9069786cd4e1c918b389e5a8e71bfd25b48ccd2893332f6e4621fbd6969f241aea96a5271b27c1df31819671ec1acf73e26f17e17cecd4df72bd4f5ce7714baeb5420c99c8b161c52f0a8997817a654adea741d563ecd09d66c4e8147447e0a9aa766047785602948898a96f99cffba32a106caaffa9f0c8de1ec56b458769e1794d060d6dd0673b526301d2c507dd1f81e41027d1037421ea664570d662abab323d97c5ebca35d49ef6b13b58b110749684074565debc6b47e45beb20034fe5d016fdd4bda8fa1245c8a615413cdfad2fdb194fb70b1987d288eb95cbd7bcf91e4f5bc33a40727a51727c912f2cb8be40de7f2705891a27d4c9ef524cc43e8ede82e97240567cc6ccbcf8d5941d98892c80ecb1e57882aa3482b1a4bfa70c55325e6451097eb3906dbc34be5bdba36a48cef677f43478f935cbedc3be1a4c95ac0ae8cac8d9e79a68eb8db252ed609d1a4c09c39b316dc0df5d85d7f11c4b0ed61a8e2c7025d558692b2ac1695f9e7d299804c963d6383932c7dbefb3d72e4501774220f5619b51c35d5674252bb0eea407987288800ae0c16638cced39b575b84785ea3e46cebf3958f5a8e918fa5e1a81da10e961284437a944de3e30ea185834fe92ca0cab378a3108664a8421d98a55c3ad5842ddacc7e6a04e71bc33159af8571ff82a23e33933285fcc81abd9e911360c5716528fd45b2082f92f15a3c82cfec33cf552b438bc2758fa9ea391583b4e3436b0ea1ededc4f5d08645e90360e077654e78314c81912eb9d9ef43c02616502f193bc1320fac5bb8c4b2f24051324363eef558a821033122f76aba352bc084a55848f94175fe8cbc651a7f00693b9dea5644a2049c5066df2ef42009ba4422260a0941b7a6401c1608d7a8814cfc01ff024b569bac838c80a824a10b41858bf0dca400e0e13ba3ee571d96531b0a16024e94639ea4afdba465283931dfa1de8d60fe43583216c6af0cac2a4d47ac85366ecf5b0dce119ddad39d31428c5dffd3cbad489564f9d4deeb3669a279162307ec07d300fc8b866554edbb5faab2028226d4c0e4a7fa3fec1782dde1781d622d68ceaf186859778330aa3ab28cf7264a2f961999993a7475c498474a756100cdc31c22fe685f1909ae8118e6c505dbe826d6e559db4afddc35a97138c5d25a043630e0e859d8bf5e844097003853a29bf5816295472627fd76d058a263b2e48a0d24b5c510f357ce85edbd471f2449f56280f7ea3fb69c515ff44745f00f54ca0133002d7ae225c9c03f8c3570a46b454681eeb35a78cf6e35718f71b9de32199f464a9f99cc50c2b450ef4b23a743c9291aa25977022efd692615aaeac268d0eac684d60ade3d5ca8e48eb3dd9432c299e252878b7d0cdb5db7fd48c6be6d55ed70c98e7adc3c2799fa20aa2c003ebb188a03f964894a69f0bc494fd7f955e6ff12d85663f278d17bcd6475ff191bf83fed0229bcb63d5a81d22fce026623c704d30eccba2faf2cc7e230fc96a04684eb9dd8a1686d3624ccdfdac86c36f56e8a551a889c5147c5f6f348124c3697cb696f3e269a61f8524fde8d29c0248771f120d4ee67bcb5c1e7bff5ec5746f65f98af02938a06d3ee046ef12e378699887d93cd798b5e70763093c46d6c502e7df5d2751fc9d6aaea8cc28fdd67b4184a4a9f3a0fc68babb6d8efa6ab423e838a528897b09e1678b5dd33615876c181aa1dcb2f3eb9ddd15df1892fcfff1cf862da2c7e2b1626f446345175cbafdf83451df08dff1b080db5000ec34ede52af39f9fe51baba2eba8345305d4bb432027d5f7c28a8a9402daf8239fe28e1a686c6e5327b0a7d3aa1757d960abc22845f8ab79afad04b4a9110e7b324ac1bf239ef745d6873b68f0e9a632184ba02c9b8228cce9ec52ceed28b12882f857a6ec92c335b49b272dc4d6f48c4e4b02fae64009a1877a68011e528fc8a910a10e67ea7081aba7e28dc327a6a2efa6b4d5804c96bbbad7ae29300726f2d55b624137eb06f52fda8c4893aa62fb1cc9a4fb65464aee6badee879253f2b23c2c8311a501ddbad247125fe79229721920a6e26b880af084db8b3e5e50ea39a8a707cb0c6f42b05a55ef5463f215238cf2fcf43d6f995ea49e91d3bf0c475c086e6701b24c9d6fca3d877ea7633268f707d1d006c3e70448dfb770ae17ee4247b80e2f80b2b97f1d59faac83d86c5a7d4d8fb4a87718d6a0875e8aa875a69fc59e8405556f97d1a12764d4825eec8e50beb5a795827603ddbe34ff2b6988483dbb0ba3174c0ac90c8035e6758d3475bc7f77ed055b84f1ba1adb4ebadb92cbd4ad3d94ba693fdac42245ccd6c76fb1c58937044ad737a16d7649dd7f8fa6cab1b811b93ecf067345d05e818c7dd5249e5b1fd2972091589db9a0a0c4f219967d418d0d781bdc3ed0d5530d0db751da84d82fcb89c513eb09b9c3ddbc060d28d0de9515486413fb1abc7bf87c3f96d94b8c1f706493497f88f20bd65cc6fc516a63b7ffdb1dcdc0afa13bfc8267d87059dfeaa88656f5900fc6a6413a15f22dd3ab2aba09abec717f52c01efc0cea2457cf24274a218e6b7308f7d8c163f0ff567c3f5e3bd61ae0b951e9cdce0cbabdfc7f9b7d39a64ea0b093d8e5b0d25fd8c23da3e09b34225c1e896020a85fbc8d1df8ff2ccbec43cd53961437c06db0d3584b9ae05973afaba161ee866612b5f37796d6838c66", @nested={0x4, 0x104}, @nested={0x4, 0x12d}, @generic="26c2bf1652e4ac3b679cf060989f4baa3da5581cf6020c645b5545f4c4e66476b97f67e27f3c734e82bd64b839d6715f9c7ffaeb26e796b6f947be93ec46860562a8fdcf85b41662de20ced2c8e6acffa3316b35adcd565c6b89785a143b9e81bec2191b0e5f1c45260b386d9d29ce507519149cddf090a96311c8d822258ed364870b4e798e9643149c704c0b901f6ee64593cb5f9b31978cd2e9c1625d5acbd6867df153717cced534bf7e4b25a9d91668c22b63804ec9d61618de37118048e23b56e0940e", @nested={0x4, 0x6c}, @typed={0x8, 0x55, 0x0, 0x0, @pid=r9}]}, @nested={0xe1, 0x70, 0x0, 0x1, [@generic="1945fbcd5da80aa34f6fff7a22f5fcf94630a870957e14d8deb362d894e30868e84c0f60d013a03f098554152013f6dc8d5c8186fd05ac39cf4e4583222a326eee9ab435dccac615ab2d5ab6e13ef2e66851669f304a722ad5c7d0c7557f6477eec42731fab5ff919b553f5aa81cd8382265dc0dc1ab3685a1509dedcca87a55bc4f1a819b00e194e18c58eae38fd6fb560fb62dc8030d5e05c0911febd000c4e00c5adccc39b921c728f1e1a8524d999b95e460ba48a710b286c2a1150b07a4be6726de84794b953b0f0e020b4e175690f4b8bdfbf4f51c22bbf9d36a"]}]}, 0x22b0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 263.620866ms ago: executing program 2 (id=452): shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x2e, &(0x7f0000000340)}, 0x6a) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(0x0, r2) getsockname$packet(r2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_route(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x1aee2, 0x0, 0x9, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={0x0}, 0x1) syz_usb_connect(0x6, 0x24, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) umount2(&(0x7f0000000000)='./file1\x00', 0xa7a1983d75b55fcd) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x40, 0x2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x6000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x4, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xc, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x0, 0x0, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0x0, 0x0, 0x0, 0x100, 0x0, 0xf801, 0x8000000, [0x79327378, 0x0, 0x1, 0x400000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"]) syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) kernel console output (not intermixed with test programs): ss Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 107.429350][ T1148] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 107.453430][ T5955] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 107.531602][ T1148] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 107.558342][ T6221] syz.4.64 uses obsolete (PF_INET,SOCK_PACKET) [ 107.615417][ T5955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.658398][ T5955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.661514][ T5955] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.680838][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.680863][ T5955] usb 3-1: Product: syz [ 107.707131][ T5955] usb 3-1: Manufacturer: syz [ 107.707150][ T5955] usb 3-1: SerialNumber: syz [ 107.709653][ T6222] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 107.765112][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.913431][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 107.929218][ T43] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 107.950366][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.973447][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.005070][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.032272][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.065429][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.075125][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.094119][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.214038][ T121] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.331336][ T43] usb 1-1: GET_CAPABILITIES returned 0 [ 108.363258][ T43] usbtmc 1-1:16.0: can't read capabilities [ 108.383434][ T5928] usb 2-1: USB disconnect, device number 5 [ 108.410041][ T969] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 108.418411][ T12] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 108.435859][ T121] usb 4-1: config 0 has no interfaces? [ 108.459985][ T121] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 108.490379][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.506477][ T12] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 108.519909][ T121] usb 4-1: Product: syz [ 108.528085][ T121] usb 4-1: Manufacturer: syz [ 108.539582][ T121] usb 4-1: SerialNumber: syz [ 108.566044][ T43] usb 1-1: USB disconnect, device number 7 [ 108.574515][ T5955] usb 3-1: 0:2 : does not exist [ 108.598295][ T12] sd 1:0:0:1: [sdc] Sense not available. [ 108.613142][ T121] usb 4-1: config 0 descriptor?? [ 108.617973][ T5955] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 108.631603][ T12] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 108.642898][ T969] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 108.649744][ T12] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 108.675968][ T12] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 108.692814][ T12] sd 1:0:0:1: [sdc] Asking for cache data failed [ 108.699761][ T12] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 108.752798][ T5955] usb 3-1: USB disconnect, device number 5 [ 108.821518][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.895678][ T6238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.904893][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.921639][ T12] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 108.943168][ T6070] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 108.988937][ T6224] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.082132][ T5955] usb 4-1: USB disconnect, device number 7 [ 109.135628][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.277945][ T6004] udevd[6004]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 109.296272][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.496374][ T5920] udevd[5920]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 109.715885][ T5919] udevd[5919]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 109.816872][ T5955] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 109.939422][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.947661][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.973815][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 109.988013][ T5986] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.989820][ T5955] usb 1-1: config 149 has an invalid interface number: 17 but max is 0 [ 110.010516][ T5955] usb 1-1: config 149 has no interface number 0 [ 110.019222][ T5955] usb 1-1: config 149 interface 17 has no altsetting 0 [ 110.032206][ T5955] usb 1-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=65.f4 [ 110.033396][ T5928] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.042487][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.064257][ T5955] usb 1-1: Product: syz [ 110.068556][ T5955] usb 1-1: Manufacturer: syz [ 110.073168][ T5955] usb 1-1: SerialNumber: syz [ 110.113332][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 110.154123][ T5986] usb 4-1: Using ep0 maxpacket: 32 [ 110.167437][ T5986] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 110.179117][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.183480][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.191618][ T5986] usb 4-1: Product: syz [ 110.204879][ T5986] usb 4-1: Manufacturer: syz [ 110.211206][ T5928] usb 2-1: config 0 has no interfaces? [ 110.218256][ T5986] usb 4-1: SerialNumber: syz [ 110.226256][ T5928] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 110.238659][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.248082][ T5986] usb 4-1: config 0 descriptor?? [ 110.260094][ T5928] usb 2-1: Product: syz [ 110.264936][ T5928] usb 2-1: Manufacturer: syz [ 110.281947][ T5928] usb 2-1: SerialNumber: syz [ 110.291266][ T6266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.295496][ T43] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 110.302721][ T6266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.321299][ T5928] usb 2-1: config 0 descriptor?? [ 110.333716][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.353760][ T43] usb 5-1: config 0 has no interface number 0 [ 110.371463][ T43] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 110.382682][ T43] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.406735][ T5955] cypress_m8 1-1:149.17: HID->COM RS232 Adapter converter detected [ 110.420466][ T5955] cyphidcom ttyUSB0: required endpoint is missing [ 110.436685][ T43] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 110.457621][ T5955] usb 1-1: USB disconnect, device number 8 [ 110.463796][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.485749][ T43] usb 5-1: Product: syz [ 110.489950][ T43] usb 5-1: Manufacturer: syz [ 110.499384][ T5955] cypress_m8 1-1:149.17: device disconnected [ 110.506571][ T5974] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 110.519853][ T43] usb 5-1: SerialNumber: syz [ 110.549272][ T43] usb 5-1: config 0 descriptor?? [ 110.659520][ T6234] veth0_macvtap: left promiscuous mode [ 110.667687][ T5974] usb 3-1: config index 0 descriptor too short (expected 25618, got 18) [ 110.681944][ T5974] usb 3-1: config 11 has too many interfaces: 47, using maximum allowed: 32 [ 110.697644][ T5974] usb 3-1: config 11 has 1 interface, different from the descriptor's value: 47 [ 110.715432][ T5974] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 110.727770][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.741689][ T5974] usb 3-1: Product: syz [ 110.750115][ T5974] usb 3-1: Manufacturer: syz [ 110.755035][ T5974] usb 3-1: SerialNumber: syz [ 110.761728][ T10] usb 2-1: USB disconnect, device number 6 [ 110.780289][ T43] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 110.827059][ T43] usb 5-1: USB disconnect, device number 10 [ 110.939264][ T6278] Zero length message leads to an empty skb [ 111.090382][ T6260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.105176][ T5974] usb 3-1: USB disconnect, device number 6 [ 111.218434][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.418506][ T5986] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 111.434483][ T5928] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 111.545702][ T5986] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 111.613915][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 111.623004][ T5986] usb 4-1: USB disconnect, device number 8 [ 111.632333][ T5928] usb 5-1: descriptor type invalid, skip [ 111.639769][ T5928] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 111.673047][ T5928] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 64 [ 111.754794][ T5928] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1023 [ 111.777864][ T5928] usb 5-1: config 1 interface 0 has no altsetting 0 [ 111.796823][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.806103][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.814625][ T5928] usb 5-1: Product: 、 [ 111.905532][ T5928] usb 5-1: SerialNumber:   [ 111.952271][ T6260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.971605][ T6260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.228192][ T5928] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 112.260255][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.329669][ T5928] usb 5-1: USB disconnect, device number 11 [ 112.366703][ T6291] delete_channel: no stack [ 112.924802][ T5928] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.113388][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 113.167147][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.186474][ T5928] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 113.406636][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.431262][ T5928] usb 2-1: config 0 descriptor?? [ 113.942397][ T6320] dvmrp8: entered allmulticast mode [ 114.100420][ T5928] usbhid 2-1:0.0: can't add hid device: -71 [ 114.106493][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 114.308839][ T5928] usb 2-1: USB disconnect, device number 7 [ 114.414446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.437583][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.827104][ T5955] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.926892][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.100'. [ 114.963918][ T6381] netlink: 96 bytes leftover after parsing attributes in process `syz.2.101'. [ 114.977676][ T5955] usb 1-1: device descriptor read/64, error -71 [ 115.223293][ T5955] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 115.373326][ T5955] usb 1-1: device descriptor read/64, error -71 [ 115.454263][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.485057][ T5955] usb usb1-port1: attempt power cycle [ 115.823920][ T5955] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.875790][ T5955] usb 1-1: device descriptor read/8, error -71 [ 115.963336][ T5928] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 116.014270][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.094013][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.123464][ T5955] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 116.137932][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 116.155724][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.168815][ T5955] usb 1-1: device descriptor read/8, error -71 [ 116.179969][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.213348][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.223995][ T5928] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 116.246938][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.273622][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 116.277793][ T5928] usb 4-1: config 0 descriptor?? [ 116.283706][ T5955] usb usb1-port1: unable to enumerate USB device [ 116.293372][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.354832][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.431091][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 116.431132][ T30] audit: type=1326 audit(1758731892.876:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.4.110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x0 [ 116.432951][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.543106][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.556283][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.565844][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.588857][ T6403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.592166][ T43] usb 2-1: config 0 descriptor?? [ 116.629146][ T6403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.704190][ T6403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.716650][ T6419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.099085][ T43] HID 045e:07da: Invalid code 65791 type 1 [ 117.149148][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input7 [ 117.151090][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 117.210683][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 117.242179][ T43] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 117.253283][ T5928] usb 4-1: USB disconnect, device number 9 [ 117.616773][ T5981] net_ratelimit: 15 callbacks suppressed [ 117.616792][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.940454][ T6438] netlink: 'syz.4.117': attribute type 8 has an invalid length. [ 118.133398][ T5986] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 118.297555][ T5986] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.317410][ T5986] usb 4-1: config 81 has an invalid interface number: 13 but max is 0 [ 118.326516][ T5986] usb 4-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 118.343091][ T5986] usb 4-1: config 81 has no interface number 0 [ 118.349832][ T5986] usb 4-1: config 81 interface 13 has no altsetting 0 [ 118.360839][ T5986] usb 4-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 118.370472][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.378908][ T5986] usb 4-1: Product: syz [ 118.385424][ T5986] usb 4-1: Manufacturer: syz [ 118.392007][ T5986] usb 4-1: SerialNumber: syz [ 118.464410][ T5928] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 118.563375][ T5981] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.736490][ T5986] qmi_wwan 4-1:81.13: bogus CDC Union: master=0, slave=1 [ 118.741213][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.806301][ T5986] qmi_wwan 4-1:81.13: probe with driver qmi_wwan failed with error -22 [ 118.841559][ T5986] usb 4-1: USB disconnect, device number 10 [ 118.854760][ T6450] netlink: 'syz.0.121': attribute type 20 has an invalid length. [ 118.867795][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 118.881341][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 118.929682][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.941777][ T5981] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.957821][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.969710][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.981474][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.993361][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.007629][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.017200][ T5981] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.035023][ T5981] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 119.051592][ T5981] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 119.061375][ T5981] usb 3-1: Manufacturer: syz [ 119.083328][ T5981] usb 3-1: config 0 descriptor?? [ 119.644967][ T5981] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 119.727232][ T5981] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 119.774157][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.800044][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.896218][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.941747][ T6443] capability: warning: `syz.2.119' uses deprecated v2 capabilities in a way that may be insecure [ 120.073451][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.272496][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.291216][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.358165][ T10] usb 2-1: USB disconnect, device number 8 [ 120.457872][ T1213] usb 3-1: USB disconnect, device number 7 [ 120.629637][ T30] audit: type=1326 audit(1758731897.116:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.1.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feed078eec9 code=0x0 [ 120.817511][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.143486][ T5974] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 121.323556][ T5974] usb 5-1: Using ep0 maxpacket: 16 [ 121.331663][ T5974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.350608][ T5974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.433796][ T5974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.446331][ T5974] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 121.457975][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.470448][ T5974] usb 5-1: config 0 descriptor?? [ 121.533895][ T1213] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 121.701621][ T6494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.129'. [ 121.747615][ T1213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.792671][ T1213] usb 2-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 121.806290][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.814609][ T1213] usb 2-1: Product: syz [ 121.814628][ T1213] usb 2-1: Manufacturer: syz [ 121.814639][ T1213] usb 2-1: SerialNumber: syz [ 121.820906][ T1213] usb 2-1: config 0 descriptor?? [ 121.857177][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.858246][ T1213] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 121.883385][ T1213] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 121.883411][ T1213] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 122.042929][ T1213] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 122.042949][ T1213] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 122.098412][ T1213] usb 2-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 122.188864][ T1213] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 122.195725][ T1213] usb 2-1: USB disconnect, device number 9 [ 122.429566][ T5974] usbhid 5-1:0.0: can't add hid device: -71 [ 122.429635][ T5974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 122.437214][ T5974] usb 5-1: USB disconnect, device number 12 [ 122.899386][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.011112][ T6514] 8021q: VLANs not supported on nlmon0 [ 123.150055][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.187516][ T6517] tipc: Started in network mode [ 123.192568][ T6517] tipc: Node identity c2c4f0ef6a8, cluster identity 4711 [ 123.228407][ T6517] tipc: Enabled bearer , priority 0 [ 123.313608][ T6518] syzkaller0: entered promiscuous mode [ 123.371990][ T6518] syzkaller0: entered allmulticast mode [ 123.477047][ T6516] tipc: Resetting bearer [ 123.703976][ T6516] tipc: Disabling bearer [ 123.933883][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.655224][ T5986] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 124.722967][ T6550] lo: entered promiscuous mode [ 124.729668][ T6550] tunl0: entered promiscuous mode [ 124.738524][ T6550] gre0: entered promiscuous mode [ 124.746243][ T6550] gretap0: entered promiscuous mode [ 124.752887][ T6550] erspan0: entered promiscuous mode [ 124.759710][ T6550] ip_vti0: entered promiscuous mode [ 124.766528][ T6550] ip6_vti0: entered promiscuous mode [ 124.786591][ T6550] sit0: entered promiscuous mode [ 124.793467][ T6550] ip6tnl0: entered promiscuous mode [ 124.800259][ T6550] ip6gre0: entered promiscuous mode [ 124.807074][ T6550] syz_tun: entered promiscuous mode [ 124.813925][ T6550] ip6gretap0: entered promiscuous mode [ 124.820820][ T6550] bridge0: entered promiscuous mode [ 124.828014][ T6550] vcan0: entered promiscuous mode [ 124.834051][ T6550] bond0: entered promiscuous mode [ 125.633398][ T6550] bond_slave_0: entered promiscuous mode [ 125.633960][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.647264][ T5986] usb 1-1: Using ep0 maxpacket: 16 [ 125.855532][ T5986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.909399][ T6550] bond_slave_1: entered promiscuous mode [ 125.930057][ T6550] team0: entered promiscuous mode [ 125.936885][ T5986] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 125.941661][ T6550] team_slave_0: entered promiscuous mode [ 125.968635][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.003354][ T5986] usb 1-1: Product: syz [ 126.009853][ T5986] usb 1-1: Manufacturer: syz [ 126.029706][ T6550] team_slave_1: entered promiscuous mode [ 126.039200][ T5986] usb 1-1: SerialNumber: syz [ 126.047571][ T6550] dummy0: entered promiscuous mode [ 126.069379][ T5986] usb 1-1: config 0 descriptor?? [ 126.087511][ T5986] hub 1-1:0.0: bad descriptor, ignoring hub [ 126.097612][ T6550] nlmon0: entered promiscuous mode [ 126.116235][ T5986] hub 1-1:0.0: probe with driver hub failed with error -5 [ 126.141070][ T5986] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.173503][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.184693][ T6550] caif0: entered promiscuous mode [ 126.189765][ T6550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.256644][ T5986] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 126.367795][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.453795][ T5986] usb 1-1: USB disconnect, device number 13 [ 126.627952][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.656811][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.214848][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.223012][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.353379][ T1213] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 127.544614][ T1213] usb 5-1: Using ep0 maxpacket: 32 [ 127.566087][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.577550][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.598937][ T1213] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.630272][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.659358][ T1213] usb 5-1: config 0 descriptor?? [ 127.677258][ T1213] hub 5-1:0.0: USB hub found [ 127.877025][ T1213] hub 5-1:0.0: 1 port detected [ 128.078416][ T1213] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 128.121003][ T1213] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 128.164215][ T1213] usbhid 5-1:0.0: can't add hid device: -71 [ 128.178283][ T1213] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 128.208096][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 128.236733][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 128.245974][ T1213] usb 5-1: USB disconnect, device number 14 [ 128.498889][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 128.557711][ T6583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'. [ 128.567276][ T6584] tipc: Enabling of bearer rejected, failed to enable media [ 128.607358][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.154'. [ 128.744107][ T1213] net_ratelimit: 1 callbacks suppressed [ 128.744123][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.865334][ T30] audit: type=1326 audit(1758731905.346:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 128.918946][ T30] audit: type=1326 audit(1758731905.346:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 129.022073][ T30] audit: type=1326 audit(1758731905.346:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 129.104863][ T30] audit: type=1326 audit(1758731905.346:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 129.130859][ T30] audit: type=1326 audit(1758731905.346:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 129.168923][ T30] audit: type=1326 audit(1758731905.346:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 129.192492][ T5986] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.206983][ T30] audit: type=1326 audit(1758731905.346:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 129.233487][ T30] audit: type=1326 audit(1758731905.346:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 129.263327][ T30] audit: type=1326 audit(1758731905.346:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 129.294955][ T30] audit: type=1326 audit(1758731905.346:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f898c78d710 code=0x7ffc0000 [ 129.343860][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.377027][ T5986] usb 2-1: Using ep0 maxpacket: 8 [ 129.386793][ T5986] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 129.402233][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.426238][ T5986] usb 2-1: Product: syz [ 129.430433][ T5986] usb 2-1: Manufacturer: syz [ 129.439326][ T5986] usb 2-1: SerialNumber: syz [ 129.449016][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 129.458791][ T5986] usb 2-1: config 0 descriptor?? [ 129.474187][ T5986] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 129.506137][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.519707][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.529689][ T5928] usb 4-1: New USB device found, idVendor=258a, idProduct=6a80, bcdDevice= 0.00 [ 129.550628][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.597096][ T5928] usb 4-1: config 0 descriptor?? [ 129.675812][ T5986] gspca_sonixj: reg_r err -32 [ 129.690780][ T5986] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 129.732010][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 129.773626][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.055958][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.072239][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.099289][ T6597] input: syz1 as /devices/virtual/input/input8 [ 130.155857][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 130.165997][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 130.186255][ T5928] usb 4-1: USB disconnect, device number 11 [ 130.246749][ T10] usb 2-1: USB disconnect, device number 10 [ 130.254508][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.443859][ T5986] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 130.693967][ T5986] usb 1-1: Using ep0 maxpacket: 16 [ 130.700877][ T5986] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 130.713340][ T5986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.733515][ T5986] usb 1-1: config 0 has no interface number 0 [ 130.742169][ T5986] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 130.781783][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.829270][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.842481][ T5986] usb 1-1: Product: syz [ 130.859892][ T5986] usb 1-1: Manufacturer: syz [ 130.912941][ T5986] usb 1-1: SerialNumber: syz [ 130.921919][ T5986] usb 1-1: config 0 descriptor?? [ 130.948404][ T6626] ALSA: mixer_oss: invalid OSS volume '' [ 131.139601][ T5986] usb 1-1: Found UVC 0.00 device syz (046d:08d3) [ 131.161133][ T5986] usb 1-1: No valid video chain found. [ 131.342730][ T5928] usb 1-1: USB disconnect, device number 14 [ 131.461970][ T6636] wireguard0: entered promiscuous mode [ 131.467705][ T6636] wireguard0: entered allmulticast mode [ 131.503377][ T5986] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 131.664177][ T5986] usb 4-1: device descriptor read/64, error -71 [ 131.925399][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.943699][ T5986] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 132.003292][ T1213] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 132.961700][ T5986] usb 4-1: device descriptor read/64, error -71 [ 133.000991][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.010311][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.018238][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.116398][ T1213] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.116503][ T5986] usb usb4-port1: attempt power cycle [ 133.134091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.142495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.168254][ T1213] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 133.216851][ T1213] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 133.229384][ T6657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.294756][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.303586][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.341179][ T1213] usb 5-1: config 0 descriptor?? [ 133.456659][ T6663] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 133.463324][ T6663] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 133.472101][ T6663] vhci_hcd vhci_hcd.0: Device attached [ 133.479518][ T6664] vhci_hcd: connection closed [ 133.480658][ T49] vhci_hcd: stop threads [ 133.492171][ T49] vhci_hcd: release socket [ 133.498161][ T49] vhci_hcd: disconnect device [ 133.544406][ T5986] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 133.565271][ T5986] usb 4-1: device descriptor read/8, error -71 [ 133.803348][ T5986] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 133.824232][ T5986] usb 4-1: device descriptor read/8, error -71 [ 133.934623][ T5986] usb usb4-port1: unable to enumerate USB device [ 133.937773][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 133.937788][ T30] audit: type=1326 audit(1758731910.426:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6631 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1e538eacb code=0x7ffc0000 [ 133.974371][ T6649] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 134.013647][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.036103][ T6649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.089904][ T6668] bond1: (slave geneve2): making interface the new active one [ 134.103025][ T6668] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 135.054385][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.074004][ T5974] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 135.241990][ T1163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.254834][ T5974] usb 4-1: Using ep0 maxpacket: 8 [ 135.320472][ T1163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.335264][ T5974] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 135.422082][ T5974] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.537760][ T5974] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 135.559755][ T5974] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.667113][ T5974] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 135.677029][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.706737][ T1163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.718346][ T5974] usb 4-1: Product: syz [ 135.722537][ T5974] usb 4-1: Manufacturer: syz [ 135.753556][ T5974] usb 4-1: SerialNumber: syz [ 135.758336][ T1163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.850779][ T6683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.861800][ T5974] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 135.913620][ T5974] usbtest 4-1:1.0: Linux user mode ISO test driver [ 135.923354][ T5974] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 135.941817][ T1213] Bluetooth: Can't get version to change to load ram patch err [ 136.018789][ T1213] Bluetooth: Loading sysconfig file failed [ 136.089238][ T1213] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 136.101427][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.175046][ T1213] usb 5-1: USB disconnect, device number 15 [ 136.206459][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 136.281753][ T1163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.305142][ T6692] loop2: detected capacity change from 0 to 7 [ 136.345551][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.354765][ T5986] usb 4-1: USB disconnect, device number 16 [ 136.375481][ T1163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.691242][ T1163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.724587][ T1163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.814799][ T6690] vxlan0: entered promiscuous mode [ 136.817531][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.836462][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.877189][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.905814][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.943424][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.987963][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.999368][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.011740][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.029591][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.039641][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.160096][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.662537][ T1163] bridge_slave_1: left allmulticast mode [ 137.679901][ T1163] bridge_slave_1: left promiscuous mode [ 137.686949][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.856364][ T1163] bridge_slave_0: left allmulticast mode [ 137.862073][ T1163] bridge_slave_0: left promiscuous mode [ 137.869990][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.175419][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.229839][ T6711] usb usb3: selecting invalid altsetting 5 [ 138.801434][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.926094][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.946654][ T1163] bond0 (unregistering): Released all slaves [ 138.974171][ T6706] @: renamed from vlan0 (while UP) [ 139.107514][ T1163] tipc: Left network mode [ 139.133947][ T5878] Bluetooth: hci0: command tx timeout [ 139.214051][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.374304][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.758727][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 139.781247][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 139.965919][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 140.004881][ T10] usb 4-1: can't read configurations, error -61 [ 140.173267][ T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 140.263113][ T6753] netlink: 212816 bytes leftover after parsing attributes in process `syz.1.199'. [ 140.272945][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.346651][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 140.356190][ T10] usb 4-1: can't read configurations, error -61 [ 140.371598][ T10] usb usb4-port1: attempt power cycle [ 140.548286][ T1163] hsr_slave_0: left promiscuous mode [ 140.573422][ T1163] hsr_slave_1: left promiscuous mode [ 140.579629][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.587701][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.600980][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.610212][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.631553][ T1163] veth1_macvtap: left promiscuous mode [ 140.637310][ T1163] veth0_macvtap: left promiscuous mode [ 140.643100][ T1163] veth1_vlan: left promiscuous mode [ 140.652597][ T1163] veth0_vlan: left promiscuous mode [ 140.734766][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 140.776899][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 140.798174][ T10] usb 4-1: can't read configurations, error -61 [ 140.843300][ T1213] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 140.953521][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 140.988872][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 141.000127][ T10] usb 4-1: can't read configurations, error -61 [ 141.008880][ T10] usb usb4-port1: unable to enumerate USB device [ 141.022037][ T1213] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 141.036669][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.057172][ T1213] usb 5-1: Product: syz [ 141.061357][ T1213] usb 5-1: Manufacturer: syz [ 141.066098][ T1213] usb 5-1: SerialNumber: syz [ 141.214867][ T5878] Bluetooth: hci0: command tx timeout [ 141.245633][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 141.281464][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 141.299871][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.308010][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.795629][ T1213] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 141.821933][ T1213] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 141.830174][ T6703] chnl_net:caif_netlink_parms(): no params data found [ 141.869808][ T1213] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 141.933063][ T1213] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 141.985313][ T1213] usb 5-1: USB disconnect, device number 16 [ 142.218355][ T6795] loop2: detected capacity change from 0 to 7 [ 142.237174][ T6703] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.267249][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.275252][ T6795] loop2: [ 142.286939][ T6795] loop2: partition table partially beyond EOD, truncated [ 142.293470][ T6703] bridge_slave_0: entered allmulticast mode [ 142.303786][ T6703] bridge_slave_0: entered promiscuous mode [ 142.343483][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.353914][ T6703] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.361053][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.403476][ T6703] bridge_slave_1: entered allmulticast mode [ 142.418978][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.439808][ T6703] bridge_slave_1: entered promiscuous mode [ 142.561323][ T6801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.645763][ T6803] netlink: 'syz.4.205': attribute type 323 has an invalid length. [ 142.708127][ T6808] tipc: Started in network mode [ 142.713021][ T6808] tipc: Node identity e0000002, cluster identity 4711 [ 142.743931][ T6808] tipc: Enabling of bearer rejected, failed to enable media [ 142.761126][ T6703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.802073][ T6703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.952185][ T6811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.056993][ T6703] team0: Port device team_slave_0 added [ 143.059992][ T6703] team0: Port device team_slave_1 added [ 143.151251][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.159453][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.186457][ T6703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.211965][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.297187][ T5878] Bluetooth: hci0: command tx timeout [ 143.308551][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.394971][ T6703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.407352][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.595314][ T6703] hsr_slave_0: entered promiscuous mode [ 143.631018][ T6703] hsr_slave_1: entered promiscuous mode [ 144.359179][ T6843] netlink: 'syz.1.211': attribute type 27 has an invalid length. [ 144.423964][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.494920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.504454][ T5981] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 144.723490][ T5981] usb 5-1: Using ep0 maxpacket: 32 [ 144.734665][ T5981] usb 5-1: config 2 has an invalid interface number: 45 but max is 0 [ 144.742842][ T5981] usb 5-1: config 2 has no interface number 0 [ 144.749120][ T5981] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 144.835137][ T5981] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.043368][ T5974] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 145.121104][ T5981] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 145.132135][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.141221][ T5981] usb 5-1: Product: syz [ 145.155736][ T5981] usb 5-1: Manufacturer: syz [ 145.173534][ T5981] usb 5-1: SerialNumber: syz [ 145.200998][ T5981] kobil_sct 5-1:2.45: KOBIL USB smart card terminal converter detected [ 145.240888][ T5981] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 145.249646][ T5974] usb 2-1: Using ep0 maxpacket: 16 [ 145.309612][ T5974] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.339967][ T5974] usb 2-1: config 0 has no interface number 0 [ 145.373315][ T5878] Bluetooth: hci3: command tx timeout [ 145.378981][ T51] Bluetooth: hci0: command tx timeout [ 145.408159][ T5974] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 145.446947][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.455931][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.464675][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.481203][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.482629][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.497511][ T5974] usb 2-1: Product: syz [ 145.501685][ T5974] usb 2-1: Manufacturer: syz [ 145.513244][ T5974] usb 2-1: SerialNumber: syz [ 145.681973][ T5974] usb 2-1: config 0 descriptor?? [ 145.722302][ T5974] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 146.028923][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.094362][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.493537][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.444616][ T5974] gspca_spca1528: reg_w err -110 [ 147.449748][ T5974] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 147.736960][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.785206][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.832022][ T6843] vxlan0: left promiscuous mode [ 147.876424][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.907320][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.934069][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.942927][ T969] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.968348][ T969] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.987892][ T969] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.004578][ T969] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.020104][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.028514][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 148.036344][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.046203][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.061565][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.101092][ T6703] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.128016][ T969] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.137313][ T6862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.146332][ T6862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.154936][ T969] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.159567][ T6862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.163950][ T969] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.193353][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 148.201291][ T43] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 148.213736][ T43] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 148.222483][ T969] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.222567][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 148.241291][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 148.256113][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 148.291694][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.293314][ T6703] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.309915][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 148.320406][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 148.335573][ T43] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 148.350915][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.364047][ T43] usb 4-1: config 0 descriptor?? [ 148.372006][ T43] usblp0: Disabling reads from problematic bidirectional printer [ 148.376623][ T6703] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.398287][ T6703] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.501253][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.611890][ T43] usblp 4-1:0.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 148.641097][ T43] usb 4-1: USB disconnect, device number 21 [ 148.655362][ T43] usblp0: removed [ 148.749145][ T6703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.818622][ T6703] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.820458][ T5928] usb 5-1: USB disconnect, device number 17 [ 148.844927][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.852061][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.886730][ T5928] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 148.895406][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.903539][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.926858][ T5928] kobil_sct 5-1:2.45: device disconnected [ 149.005701][ T1213] usb 2-1: USB disconnect, device number 11 [ 149.067276][ T6884] netlink: 'syz.1.218': attribute type 4 has an invalid length. [ 149.106495][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 149.759262][ T6703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.853760][ T1213] net_ratelimit: 3 callbacks suppressed [ 149.853772][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.022702][ T6703] veth0_vlan: entered promiscuous mode [ 150.067458][ T6703] veth1_vlan: entered promiscuous mode [ 150.190455][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.271523][ T6703] veth0_macvtap: entered promiscuous mode [ 150.370580][ T6703] veth1_macvtap: entered promiscuous mode [ 150.474963][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.666162][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.743478][ T3508] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.772166][ T3508] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.818638][ T3508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.854685][ T3508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.895093][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.963674][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.223403][ T5986] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 151.251492][ T6920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.275597][ T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.308807][ T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.437573][ T5986] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 151.447167][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.489926][ T5986] usb 2-1: config 0 descriptor?? [ 151.539493][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.937285][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.999324][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.018039][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.153035][ T6945] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 152.255854][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.911752][ T6957] netlink: 'syz.4.229': attribute type 2 has an invalid length. [ 152.975131][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.135787][ T6961] loop6: detected capacity change from 0 to 524288000 [ 153.154692][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.224909][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.264874][ T6961] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.326039][ T6962] loop6: detected capacity change from 524288000 to 0 [ 153.329897][ T6961] ldm_validate_partition_table(): Disk read failed. [ 153.370573][ T6961] Dev loop6: unable to read RDB block 0 [ 153.412513][ T6961] loop6: unable to read partition table [ 153.451673][ T6961] loop6: partition table beyond EOD, truncated [ 153.495377][ T6961] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 153.786973][ T6970] netlink: 'syz.2.233': attribute type 3 has an invalid length. [ 154.015676][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.113338][ T5986] usbhid 2-1:0.0: can't add hid device: -71 [ 154.143554][ T5986] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 154.225365][ T5986] usb 2-1: USB disconnect, device number 12 [ 154.469184][ T5974] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 154.699074][ T5974] usb 5-1: config 0 has no interfaces? [ 154.723535][ T5974] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 154.739009][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.749136][ T5974] usb 5-1: Product: syz [ 154.788458][ T5974] usb 5-1: Manufacturer: syz [ 154.797407][ T5974] usb 5-1: SerialNumber: syz [ 154.865110][ T5974] usb 5-1: config 0 descriptor?? [ 154.889615][ T6980] net_ratelimit: 1 callbacks suppressed [ 154.889627][ T6980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.053969][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.794793][ T5986] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 155.964223][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 156.001263][ T5986] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 156.029073][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.075378][ T5986] usb 2-1: config 0 descriptor?? [ 156.094666][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.097799][ T5986] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 156.309837][ T7006] ip6tnl1: entered allmulticast mode [ 156.318257][ T7022] fuse: Unknown parameter '000000000000000000030x0000000000000004' [ 156.339401][ T5986] usb 2-1: Detected FT232B [ 156.540680][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.605080][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.646067][ T7023] netlink: 'syz.2.238': attribute type 5 has an invalid length. [ 156.682061][ T5986] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 156.711264][ T5986] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 156.760965][ T5986] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 156.837491][ T5986] usb 2-1: USB disconnect, device number 13 [ 156.910499][ T5986] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 156.925764][ T5986] ftdi_sio 2-1:0.0: device disconnected [ 156.947845][ T5974] usb 5-1: USB disconnect, device number 18 [ 157.243852][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.553326][ T5928] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 157.613380][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.713438][ T5974] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 157.736442][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 157.754392][ T5928] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 157.762707][ T5928] usb 6-1: config 0 has no interface number 0 [ 157.778221][ T5928] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 157.931498][ T5928] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 158.052986][ T5928] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 158.072926][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 158.113322][ T5928] usb 6-1: Product: syz [ 158.117524][ T5928] usb 6-1: SerialNumber: syz [ 158.181387][ T5928] usb 6-1: config 0 descriptor?? [ 158.220617][ T5928] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 158.253822][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.326814][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 158.419293][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.487769][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.534284][ T5986] usb 6-1: USB disconnect, device number 2 [ 158.878876][ T7044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.422065][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.489375][ T7071] macsec0: entered promiscuous mode [ 160.495095][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.503590][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.515365][ T7069] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.519872][ T7071] macsec0: entered allmulticast mode [ 160.574751][ T7071] veth1_macvtap: entered allmulticast mode [ 160.993142][ T7084] netlink: 'syz.5.264': attribute type 21 has an invalid length. [ 161.017270][ T7085] fuse: Bad value for 'fd' [ 161.083508][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 161.144876][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.264'. [ 161.343475][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 161.359387][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 161.447789][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 161.495144][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.543998][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.586734][ T10] usb 4-1: Product: syz [ 161.615439][ T10] usb 4-1: Manufacturer: syz [ 161.653627][ T10] usb 4-1: SerialNumber: syz [ 161.666707][ T10] usb 4-1: config 0 descriptor?? [ 161.687109][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 161.716998][ T5974] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.774136][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.790131][ T5986] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 161.943567][ T5974] usb 6-1: Using ep0 maxpacket: 32 [ 161.951980][ T5974] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 161.962256][ T5986] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 161.962282][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.962299][ T5986] usb 2-1: Product: syz [ 161.986889][ T5986] usb 2-1: Manufacturer: syz [ 161.991498][ T5986] usb 2-1: SerialNumber: syz [ 162.260862][ T30] audit: type=1326 audit(1758731938.556:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 162.310503][ T5986] usb 2-1: config 0 descriptor?? [ 162.314711][ T5974] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.321949][ T5986] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 014 [ 162.342574][ T30] audit: type=1326 audit(1758731938.556:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 162.629122][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.637451][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.721602][ T5974] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 162.781891][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.810229][ T30] audit: type=1326 audit(1758731938.556:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 162.855004][ T5986] (null): failure reading functionality [ 162.857047][ T5974] usb 6-1: config 0 descriptor?? [ 162.874851][ T5986] i2c i2c-1: connected i2c-tiny-usb device [ 162.888433][ T5974] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 162.903461][ T30] audit: type=1326 audit(1758731938.556:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 162.946052][ T30] audit: type=1326 audit(1758731938.556:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 162.978882][ T30] audit: type=1326 audit(1758731938.576:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 163.006955][ T30] audit: type=1326 audit(1758731938.576:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 163.029113][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.086222][ T5986] usb 2-1: USB disconnect, device number 14 [ 163.115621][ T30] audit: type=1326 audit(1758731938.666:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 163.148819][ T30] audit: type=1326 audit(1758731938.666:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 163.183527][ T30] audit: type=1326 audit(1758731938.666:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898c78eec9 code=0x7ffc0000 [ 163.548360][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.700892][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.396502][ T7122] delete_channel: no stack [ 164.622856][ T5974] usb 6-1: USB disconnect, device number 3 [ 164.734525][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.763770][ T5942] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 164.966233][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.999196][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.023263][ T5942] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 165.040765][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.063636][ T5942] usb 5-1: config 0 descriptor?? [ 165.084910][ T10] gspca_zc3xx: reg_r err -110 [ 165.498550][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.516237][ T5942] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 165.577734][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.635434][ T7171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.673244][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 165.701520][ T10] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 165.735394][ T7173] vim2m vim2m.0: vidioc_s_fmt queue busy [ 165.773896][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.860838][ T5974] usb 4-1: USB disconnect, device number 22 [ 166.090428][ T7178] loop8: detected capacity change from 0 to 7 [ 166.193487][ T7178] Dev loop8: unable to read RDB block 7 [ 166.250008][ T7178] loop8: unable to read partition table [ 166.379608][ T7178] loop8: partition table beyond EOD, truncated [ 166.394028][ T7178] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 166.579411][ T5942] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 166.587064][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.595395][ T5942] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 166.608996][ T5942] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -32 [ 166.813863][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.943153][ T7191] netlink: 'syz.5.278': attribute type 27 has an invalid length. [ 167.164398][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.172990][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.469998][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.493444][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.521476][ T5928] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 167.694071][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 167.703583][ T5928] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.711685][ T5928] usb 6-1: config 0 has no interface number 0 [ 167.724795][ T7191] veth1_macvtap: left allmulticast mode [ 167.730901][ T7191] macsec0: left promiscuous mode [ 167.736975][ T7191] macsec0: left allmulticast mode [ 167.756449][ T5928] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 167.770190][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.885609][ T5928] usb 6-1: Product: syz [ 167.885831][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.890016][ T5928] usb 6-1: Manufacturer: syz [ 167.905904][ T5928] usb 6-1: SerialNumber: syz [ 167.978622][ T10] usb 5-1: USB disconnect, device number 20 [ 167.995785][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.007514][ T5928] usb 6-1: config 0 descriptor?? [ 168.045693][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.099740][ T7193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.117341][ T5928] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 168.172467][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.208381][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.313358][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.323911][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.714527][ T10] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 168.823713][ T5981] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 168.890884][ T10] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 168.900674][ T10] usb 5-1: config 0 has no interface number 0 [ 168.903665][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.923447][ T10] usb 5-1: config 0 interface 29 has no altsetting 0 [ 168.993820][ T5928] gspca_spca1528: reg_w err -110 [ 169.003443][ T5981] usb 2-1: Using ep0 maxpacket: 32 [ 169.013649][ T5928] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 169.018773][ T5981] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 169.031129][ T5981] usb 2-1: config 0 has no interface number 0 [ 169.057485][ T5981] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=6c.54 [ 169.074188][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.083639][ T5981] usb 2-1: Product: syz [ 169.088026][ T5981] usb 2-1: Manufacturer: syz [ 169.092728][ T5981] usb 2-1: SerialNumber: syz [ 169.102773][ T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 169.119382][ T5981] usb 2-1: config 0 descriptor?? [ 169.127923][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.134221][ T5981] gspca_main: kinect-2.14.0 probing 045e:02bf [ 169.142897][ T10] usb 5-1: Product: syz [ 169.150090][ T10] usb 5-1: Manufacturer: syz [ 169.155206][ T10] usb 5-1: SerialNumber: syz [ 169.171636][ T10] usb 5-1: config 0 descriptor?? [ 169.487175][ T10] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 169.613376][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.832175][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.843654][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.853902][ T7215] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 169.933579][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.101749][ T5942] usb 6-1: USB disconnect, device number 4 [ 170.260925][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.5.285'. [ 170.973845][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.480726][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.290'. [ 171.586537][ T5942] usb 2-1: USB disconnect, device number 15 [ 171.796891][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 171.796903][ T30] audit: type=1326 audit(1758731948.286:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed078eec9 code=0x7ffc0000 [ 171.837028][ T30] audit: type=1326 audit(1758731948.316:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7feed078eec9 code=0x7ffc0000 [ 171.874204][ T10] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 171.890533][ T10] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 171.902055][ T30] audit: type=1326 audit(1758731948.316:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed078eec9 code=0x7ffc0000 [ 171.999004][ T30] audit: type=1326 audit(1758731948.316:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7feed078eec9 code=0x7ffc0000 [ 172.021342][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.029883][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.038041][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.074157][ T10] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 172.097078][ T30] audit: type=1326 audit(1758731948.316:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed078eec9 code=0x7ffc0000 [ 172.119282][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.134820][ T10] usb 5-1: USB disconnect, device number 21 [ 172.160448][ T30] audit: type=1326 audit(1758731948.316:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7feed078eec9 code=0x7ffc0000 [ 172.227090][ T30] audit: type=1326 audit(1758731948.316:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed078eec9 code=0x7ffc0000 [ 172.256771][ T30] audit: type=1326 audit(1758731948.316:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed078eec9 code=0x7ffc0000 [ 172.285050][ T7260] random: crng reseeded on system resumption [ 172.302351][ T30] audit: type=1326 audit(1758731948.316:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feed078eec9 code=0x7ffc0000 [ 172.341625][ T30] audit: type=1326 audit(1758731948.316:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.1.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed078eec9 code=0x7ffc0000 [ 172.623298][ T5928] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 172.653770][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.798377][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.811372][ T5928] usb 6-1: config index 0 descriptor too short (expected 46109, got 29) [ 172.829723][ T5928] usb 6-1: config 0 has too many interfaces: 114, using maximum allowed: 32 [ 172.851440][ T5928] usb 6-1: config 0 has an invalid interface number: 119 but max is 113 [ 172.871625][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 114 [ 172.899836][ T5928] usb 6-1: config 0 has no interface number 0 [ 172.914287][ T5928] usb 6-1: config 0 interface 119 has no altsetting 0 [ 172.957629][ T5928] usb 6-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=d4.8c [ 172.991709][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.016529][ T5928] usb 6-1: Product: syz [ 173.054671][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.080397][ T5928] usb 6-1: Manufacturer: syz [ 173.233370][ T5928] usb 6-1: SerialNumber: syz [ 173.584284][ T5928] usb 6-1: config 0 descriptor?? [ 174.094497][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.193419][ T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 174.363542][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 174.373431][ T5942] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 174.392031][ T43] usb 2-1: config 0 has an invalid descriptor of length 60, skipping remainder of the config [ 174.430051][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.487636][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 174.496994][ T43] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 174.546157][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.574736][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 174.594787][ T5942] usb 4-1: config 0 has no interfaces? [ 174.636823][ T5942] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 174.637453][ T43] usb 2-1: config 0 descriptor?? [ 174.691909][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 174.824679][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.874417][ T5942] usb 4-1: config 0 descriptor?? [ 175.141463][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.227257][ T7286] vlan2: entered promiscuous mode [ 175.368554][ T5928] rndis_host 6-1:0.119: invalid descriptor buffer length [ 175.407165][ T5928] usb 6-1: bad CDC descriptors [ 175.483447][ T5928] cdc_acm 6-1:0.119: invalid descriptor buffer length [ 175.507853][ T5928] usb 6-1: USB disconnect, device number 5 [ 175.695707][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.165615][ T7306] vivid-007: ================= START STATUS ================= [ 176.174795][ T7306] vivid-007: Enable Output Cropping: true [ 176.180936][ T7306] vivid-007: Enable Output Composing: true [ 176.183567][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.187380][ T7306] vivid-007: Enable Output Scaler: true [ 176.201216][ T7306] vivid-007: Tx RGB Quantization Range: Automatic [ 176.210030][ T7306] vivid-007: Transmit Mode: HDMI [ 176.215723][ T7306] vivid-007: Hotplug Present: 0x00000000 [ 176.221583][ T7306] vivid-007: RxSense Present: 0x00000000 [ 176.227824][ T7306] vivid-007: EDID Present: 0x00000000 [ 176.233397][ T7306] vivid-007: ================== END STATUS ================== [ 176.431433][ T5974] usb 2-1: USB disconnect, device number 16 [ 176.988755][ T5928] usb 4-1: USB disconnect, device number 23 [ 177.170055][ T7319] netlink: 36 bytes leftover after parsing attributes in process `syz.5.307'. [ 177.174822][ T7320] vlan0: entered allmulticast mode [ 177.217993][ T7320] hsr0: entered allmulticast mode [ 177.223504][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.232527][ T7320] hsr_slave_0: entered allmulticast mode [ 177.239404][ T7320] hsr_slave_1: entered allmulticast mode [ 177.317363][ T7321] pimreg: entered allmulticast mode [ 178.270090][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.510852][ T7349] Can't find ip_set type [ 178.513387][ T7346] Can't find ip_set type [ 178.858528][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.205204][ T7376] netlink: 76 bytes leftover after parsing attributes in process `syz.2.324'. [ 179.773072][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.777304][ T5974] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 180.824297][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.962330][ T5974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.976331][ T5974] usb 4-1: not running at top speed; connect to a high speed hub [ 180.996164][ T5974] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 181.015770][ T43] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 181.029815][ T5974] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 181.076710][ T5974] usb 4-1: config 2 has no interface number 0 [ 181.087797][ T5974] usb 4-1: config 2 has no interface number 1 [ 181.101022][ T5974] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 181.156120][ T5974] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 181.167718][ T5974] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 181.179113][ T5974] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 181.209216][ T5974] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.265311][ T43] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 181.275713][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.284001][ T5974] usb 4-1: config 2 interface 212 has no altsetting 0 [ 181.293539][ T7410] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 181.310075][ T43] usb 6-1: config 0 descriptor?? [ 181.316564][ T5974] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 181.325891][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.359697][ T5974] usb 4-1: Product: syz [ 181.378746][ T5974] usb 4-1: Manufacturer: syz [ 181.390359][ T5974] usb 4-1: SerialNumber: syz [ 181.613705][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.699414][ T5974] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input10 [ 181.718981][ C1] xpad 4-1:2.226: xpad_irq_in - usb_submit_urb failed with result -1 [ 181.745988][ T5974] usb 4-1: USB disconnect, device number 24 [ 181.982908][ T7420] netlink: 'syz.4.335': attribute type 6 has an invalid length. [ 182.120858][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.196946][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 182.216426][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 182.248699][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.314192][ T43] usb 6-1: USB disconnect, device number 6 [ 182.989848][ T7432] program syz.1.341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.152911][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.284218][ T5981] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 183.360922][ T7443] fuse: Unknown parameter 'fd0x0000000000000006' [ 183.374392][ T7443] netlink: 'syz.5.345': attribute type 16 has an invalid length. [ 183.382322][ T7443] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.345'. [ 183.455526][ T5981] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 183.467509][ T5981] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 183.476983][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.485068][ T5981] usb 5-1: Product: syz [ 183.489339][ T5981] usb 5-1: Manufacturer: syz [ 183.493987][ T5981] usb 5-1: SerialNumber: syz [ 183.603318][ T5928] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 183.633272][ T1213] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 183.704608][ T5981] usb 5-1: selecting invalid altsetting 1 [ 183.715316][ T7455] syz.4.343: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.739588][ T5981] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 183.739729][ T5981] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 183.753943][ T7455] CPU: 0 UID: 0 PID: 7455 Comm: syz.4.343 Not tainted syzkaller #0 PREEMPT(full) [ 183.753966][ T7455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.753980][ T7455] Call Trace: [ 183.753987][ T7455] [ 183.753995][ T7455] dump_stack_lvl+0x189/0x250 [ 183.754029][ T7455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.754049][ T7455] ? __pfx__printk+0x10/0x10 [ 183.754075][ T7455] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 183.754095][ T7455] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 183.754115][ T7455] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 183.754136][ T7455] warn_alloc+0x214/0x310 [ 183.754166][ T7455] ? __pfx_warn_alloc+0x10/0x10 [ 183.754197][ T7455] ? __get_vm_area_node+0x28f/0x300 [ 183.754219][ T7455] ? vb2_vmalloc_alloc+0xef/0x340 [ 183.754241][ T7455] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 183.754293][ T7455] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.754319][ T7455] ? __kasan_kmalloc+0x93/0xb0 [ 183.754343][ T7455] vmalloc_user_noprof+0xad/0xf0 [ 183.754365][ T7455] ? vb2_vmalloc_alloc+0xef/0x340 [ 183.754384][ T7455] vb2_vmalloc_alloc+0xef/0x340 [ 183.754401][ T7455] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 183.754420][ T7455] __vb2_queue_alloc+0x9c2/0x15a0 [ 183.754463][ T7455] vb2_core_reqbufs+0xc31/0x1420 [ 183.754498][ T7455] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 183.754514][ T7455] ? vb2_verify_memory_type+0x1fc/0x570 [ 183.754534][ T7455] ? vb2_reqbufs+0x3a9/0x630 [ 183.754559][ T7455] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 183.754583][ T7455] __video_do_ioctl+0xc9b/0xdb0 [ 183.754610][ T7455] ? __pfx___video_do_ioctl+0x10/0x10 [ 183.754642][ T7455] video_usercopy+0x871/0x14f0 [ 183.754671][ T7455] ? __pfx___video_do_ioctl+0x10/0x10 [ 183.754688][ T7455] ? __pfx_video_usercopy+0x10/0x10 [ 183.754718][ T7455] ? __fget_files+0x2a/0x420 [ 183.754736][ T7455] ? __fget_files+0x2a/0x420 [ 183.754749][ T7455] ? __fget_files+0x3a0/0x420 [ 183.754767][ T7455] v4l2_ioctl+0x18d/0x1e0 [ 183.754785][ T7455] ? __pfx_v4l2_ioctl+0x10/0x10 [ 183.754802][ T7455] __se_sys_ioctl+0xfc/0x170 [ 183.754824][ T7455] do_syscall_64+0xfa/0x3b0 [ 183.754841][ T7455] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.754857][ T7455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.754874][ T7455] ? clear_bhb_loop+0x60/0xb0 [ 183.754893][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.754909][ T7455] RIP: 0033:0x7f898c78eec9 [ 183.754932][ T7455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.754945][ T7455] RSP: 002b:00007f898a9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.754963][ T7455] RAX: ffffffffffffffda RBX: 00007f898c9e6180 RCX: 00007f898c78eec9 [ 183.754974][ T7455] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000004 [ 183.754985][ T7455] RBP: 00007f898c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 183.754996][ T7455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.755005][ T7455] R13: 00007f898c9e6218 R14: 00007f898c9e6180 R15: 00007f898cb0fa28 [ 183.755033][ T7455] [ 183.755043][ T7455] Mem-Info: [ 183.824303][ T1213] usb 6-1: Using ep0 maxpacket: 8 [ 183.827553][ T1213] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 58, using maximum allowed: 30 [ 183.853400][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 183.869593][ T7455] active_anon:8049 inactive_anon:1 isolated_anon:0 [ 183.869593][ T7455] active_file:12613 inactive_file:39947 isolated_file:0 [ 183.869593][ T7455] unevictable:768 dirty:152 writeback:0 [ 183.869593][ T7455] slab_reclaimable:10971 slab_unreclaimable:98497 [ 183.869593][ T7455] mapped:30891 shmem:3011 pagetables:1445 [ 183.869593][ T7455] sec_pagetables:0 bounce:0 [ 183.869593][ T7455] kernel_misc_reclaimable:0 [ 183.869593][ T7455] free:1309547 free_pcp:13210 free_cma:0 [ 183.880218][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.900488][ T7455] Node 0 active_anon:32296kB inactive_anon:4kB active_file:50376kB inactive_file:159588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123488kB dirty:588kB writeback:0kB shmem:10508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12432kB pagetables:5588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.933396][ T5928] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 183.947026][ T1213] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 183.958885][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.974587][ T1213] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 183.976964][ T7455] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.979935][ T1213] usb 6-1: New USB device strings: Mfr=22, Product=2, SerialNumber=3 [ 183.995797][ T7455] Node 0 [ 184.023964][ T1213] usb 6-1: Product: syz [ 184.061103][ T5928] usb 2-1: config 0 descriptor?? [ 184.064528][ T7455] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.133238][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.177165][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.247705][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.296794][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.322126][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.343230][ T1213] usb 6-1: Manufacturer: syz [ 184.347879][ T1213] usb 6-1: SerialNumber: syz [ 184.353300][ T7455] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 184.359075][ T7455] Node 0 DMA32 free:1321428kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45056kB inactive_anon:4kB active_file:50376kB inactive_file:158000kB unevictable:1536kB writepending:592kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:30832kB local_pcp:15092kB free_cma:0kB [ 184.391320][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.412753][ T1213] usb 6-1: config 0 descriptor?? [ 184.428956][ T1213] usb_ehset_test 6-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 184.470730][ T7455] lowmem_reserve[]: 0 0 1 1 1 [ 184.480856][ T7455] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 184.564069][ T7455] lowmem_reserve[]: 0 0 0 0 0 [ 184.571176][ T7455] Node 1 Normal free:3893600kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:200kB unevictable:1536kB writepending:20kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16544kB local_pcp:5088kB free_cma:0kB [ 184.583553][ T5928] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 184.602560][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.687512][ T7455] lowmem_reserve[]: 0 0 0 0 0 [ 184.712321][ T7455] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.738560][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.764200][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.779318][ T1213] usb 6-1: USB disconnect, device number 7 [ 184.788737][ T7455] Node 0 DMA32: 169*4kB (UME) 400*8kB (UME) 136*16kB (UE) 178*32kB (UE) 86*64kB (UE) 128*128kB (UM) 129*256kB (UM) 45*512kB (UM) 12*1024kB (M) 4*2048kB (UE) 289*4096kB (UM) = 1293924kB [ 184.837823][ T7455] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 184.857957][ T7455] Node 1 Normal: 181*4kB (UME) 40*8kB (UME) 48*16kB (UE) 100*32kB (UME) 24*64kB (UE) 6*128kB (UME) 5*256kB (UM) 6*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3893652kB [ 184.883240][ T7455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.893042][ T7455] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.966963][ T7455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 185.004283][ T7455] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 185.015825][ T7455] 66746 total pagecache pages [ 185.020526][ T7455] 1 pages in swap cache [ 185.025304][ T7455] Free swap = 124992kB [ 185.032355][ T7455] Total swap = 124996kB [ 185.037043][ T7455] 2097051 pages RAM [ 185.040946][ T7455] 0 pages HighMem/MovableOnly [ 185.046129][ T7455] 425671 pages reserved [ 185.051740][ T7455] 0 pages cma reserved [ 185.061955][ T5928] usb 2-1: USB disconnect, device number 17 [ 185.107949][ T5974] usb 5-1: USB disconnect, device number 22 [ 185.289341][ T7477] syz.3.352 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 185.303337][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.373675][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.782484][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.842291][ T7503] binder: 7502:7503 ioctl c018620c 200000000380 returned -1 [ 187.855522][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.899524][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.193235][ T5981] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 188.336388][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.349223][ T5981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.359869][ T5981] usb 5-1: not running at top speed; connect to a high speed hub [ 188.396907][ T5981] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 188.442531][ T5981] usb 5-1: config 253 interface 0 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.478035][ T5981] usb 5-1: config 253 interface 0 has no altsetting 0 [ 188.500040][ T5981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.510858][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.535267][ T5981] usb 5-1: Product: syz [ 188.554446][ T5981] usb 5-1: Manufacturer: syz [ 188.571300][ T5981] usb 5-1: SerialNumber: syz [ 188.861919][ T7505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.359'. [ 188.899417][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.134573][ T7515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.187849][ T5981] cdc_ether 5-1:253.0: skipping garbage [ 189.205723][ T5981] usb 5-1: bad CDC descriptors [ 189.236660][ T7515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.244971][ T5981] usb 5-1: USB disconnect, device number 23 [ 189.429581][ T7523] netlink: 104 bytes leftover after parsing attributes in process `syz.3.363'. [ 189.613566][ T7526] netlink: 60 bytes leftover after parsing attributes in process `syz.5.364'. [ 189.642011][ T7526] unsupported nlmsg_type 40 [ 189.807874][ T7538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.895654][ T7541] netlink: 32 bytes leftover after parsing attributes in process `syz.1.369'. [ 189.919532][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 189.937151][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.099179][ T5974] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 190.243884][ T5974] usb 6-1: device descriptor read/64, error -71 [ 190.349736][ T7555] program syz.4.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.360460][ T7555] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 190.368345][ T7555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.370'. [ 190.604178][ T5974] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 190.757583][ T5974] usb 6-1: device descriptor read/64, error -71 [ 190.885776][ T5974] usb usb6-port1: attempt power cycle [ 190.989516][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.238134][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.375132][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.383264][ T5974] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 191.405847][ T5974] usb 6-1: device descriptor read/8, error -71 [ 191.674037][ T5974] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 191.743793][ T5974] usb 6-1: device descriptor read/8, error -71 [ 191.854056][ T5974] usb usb6-port1: unable to enumerate USB device [ 191.971798][ T7569] tipc: Enabling of bearer rejected, failed to enable media [ 191.975370][ T7567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.014530][ T5981] net_ratelimit: 1 callbacks suppressed [ 192.014545][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.444926][ T7579] gretap0: entered promiscuous mode [ 192.450697][ T7579] vlan2: entered promiscuous mode [ 192.695260][ T7583] binder: BINDER_SET_CONTEXT_MGR already set [ 192.712727][ T7583] binder: 7581:7583 ioctl 4018620d 2000000000c0 returned -16 [ 193.073385][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.292380][ T7613] trusted_key: syz.1.382 sent an empty control message without MSG_MORE. [ 193.313439][ T7617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.354564][ T7613] sctp: [Deprecated]: syz.1.382 (pid 7613) Use of int in maxseg socket option. [ 193.354564][ T7613] Use struct sctp_assoc_value instead [ 193.993459][ T5981] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 194.094572][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.256085][ T5981] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.293215][ T5981] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 194.325960][ T5981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.342757][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.352385][ T5981] usb 4-1: Product: syz [ 194.362712][ T5981] usb 4-1: Manufacturer: syz [ 194.372877][ T5981] usb 4-1: SerialNumber: syz [ 194.417706][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425751][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.428453][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.583349][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 194.598811][ T7634] bond0: entered promiscuous mode [ 194.616044][ T7634] bond_slave_0: entered promiscuous mode [ 194.621449][ T7621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.621914][ T7634] bond_slave_1: entered promiscuous mode [ 194.663477][ T7634] bond0: left promiscuous mode [ 194.668348][ T7634] bond_slave_0: left promiscuous mode [ 194.688799][ T7634] bond_slave_1: left promiscuous mode [ 194.833974][ T7634] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 194.963730][ T7641] gretap0: entered promiscuous mode [ 194.969042][ T7641] vlan2: entered promiscuous mode [ 195.153320][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.303739][ T121] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 195.493316][ T121] usb 2-1: unable to get BOS descriptor or descriptor too short [ 195.518613][ T121] usb 2-1: not running at top speed; connect to a high speed hub [ 195.522554][ T7621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.531389][ T121] usb 2-1: config 188 has an invalid interface number: 3 but max is 1 [ 195.542535][ T121] usb 2-1: config 188 has an invalid interface number: 9 but max is 1 [ 195.573342][ T121] usb 2-1: config 188 has no interface number 0 [ 195.613362][ T121] usb 2-1: config 188 has no interface number 1 [ 195.619666][ T121] usb 2-1: config 188 interface 3 has no altsetting 0 [ 195.637696][ T121] usb 2-1: config 188 interface 9 has no altsetting 0 [ 195.647775][ T121] usb 2-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0 [ 195.667534][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.680788][ T121] usb 2-1: Product: syz [ 195.704564][ T121] usb 2-1: Manufacturer: syz [ 195.756266][ T121] usb 2-1: SerialNumber: syz [ 195.816852][ T5981] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 195.835117][ T5981] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 195.865635][ T5981] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 195.997212][ T121] usb 2-1: unknown number of interfaces: 2 [ 196.017447][ T121] usb 2-1: USB disconnect, device number 18 [ 196.128088][ T7667] use of bytesused == 0 is deprecated and will be removed in the future, [ 196.136738][ T7667] use the actual size instead. [ 196.187791][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.560665][ T7676] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 196.574529][ T7676] netlink: 'syz.5.402': attribute type 1 has an invalid length. [ 196.590788][ T7678] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 196.618030][ T7678] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 197.147294][ T7690] gretap0: entered promiscuous mode [ 197.159729][ T7690] vlan2: entered promiscuous mode [ 197.177214][ T5981] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 197.214503][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.263651][ T5981] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 197.420696][ T5981] usb 4-1: USB disconnect, device number 25 [ 197.455830][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.461643][ T5981] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 197.473641][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.254237][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.071073][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 199.080510][ T7720] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 199.088303][ T7720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.309048][ T7727] fuse: Bad value for 'fd' [ 199.316099][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.392185][ T5981] hid (null): global environment stack underflow [ 199.406337][ T5981] hid-generic 0004:0004:677EAE69.0007: global environment stack underflow [ 199.425916][ T5981] hid-generic 0004:0004:677EAE69.0007: item 0 2 1 11 parsing failed [ 199.511996][ T5981] hid-generic 0004:0004:677EAE69.0007: probe with driver hid-generic failed with error -22 [ 199.534744][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.603284][ T1213] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 199.765171][ T1213] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.775781][ T1213] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.884921][ T1213] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.894307][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.910122][ T1213] usb 4-1: Product: syz [ 199.919907][ T1213] usb 4-1: Manufacturer: syz [ 199.930076][ T1213] usb 4-1: SerialNumber: syz [ 200.151258][ T1213] usb 4-1: 0:2 : does not exist [ 200.163605][ T1213] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 200.211612][ T1213] usb 4-1: USB disconnect, device number 26 [ 200.257293][ T7742] fuse: Unknown parameter ''roup_id' [ 200.316463][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.334665][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.494024][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.664498][ T5942] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 200.710019][ T5981] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 200.832582][ T7759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.425'. [ 200.843319][ T5942] usb 6-1: no configurations [ 200.847948][ T5942] usb 6-1: can't read configurations, error -22 [ 200.856664][ T5981] usb 5-1: device descriptor read/64, error -71 [ 201.033338][ T5942] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 201.048159][ T7762] netlink: 36 bytes leftover after parsing attributes in process `syz.3.426'. [ 201.123334][ T5981] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 201.194108][ T5942] usb 6-1: no configurations [ 201.199070][ T5942] usb 6-1: can't read configurations, error -22 [ 201.207528][ T5942] usb usb6-port1: attempt power cycle [ 201.273308][ T5981] usb 5-1: device descriptor read/64, error -71 [ 201.393584][ T5981] usb usb5-port1: attempt power cycle [ 201.514331][ T5928] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 201.605566][ T5942] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 201.647461][ T5942] usb 6-1: no configurations [ 201.652059][ T5942] usb 6-1: can't read configurations, error -22 [ 201.663261][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 201.670827][ T5928] usb 4-1: config 13 has an invalid interface number: 176 but max is 3 [ 201.681378][ T5928] usb 4-1: config 13 has an invalid interface number: 117 but max is 3 [ 201.689985][ T5928] usb 4-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 201.715708][ T5928] usb 4-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 201.737772][ T5928] usb 4-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 201.743279][ T5981] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 201.749107][ T5928] usb 4-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 201.776038][ T5928] usb 4-1: config 13 has an invalid descriptor of length 158, skipping remainder of the config [ 201.790927][ T5928] usb 4-1: config 13 has 2 interfaces, different from the descriptor's value: 4 [ 201.812975][ T5981] usb 5-1: device descriptor read/8, error -71 [ 201.833319][ T5942] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 201.857110][ T5928] usb 4-1: config 13 has no interface number 0 [ 201.879413][ T5942] usb 6-1: no configurations [ 201.884252][ T5942] usb 6-1: can't read configurations, error -22 [ 201.893595][ T5928] usb 4-1: config 13 has no interface number 1 [ 201.893654][ T5928] usb 4-1: config 13 interface 176 altsetting 2 endpoint 0xA has invalid maxpacket 536, setting to 64 [ 201.893678][ T5928] usb 4-1: config 13 interface 176 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 201.893704][ T5928] usb 4-1: config 13 interface 176 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 201.893730][ T5928] usb 4-1: config 13 interface 176 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 201.893749][ T5928] usb 4-1: config 13 interface 176 altsetting 2 endpoint 0x6 has invalid maxpacket 511, setting to 64 [ 201.893771][ T5928] usb 4-1: config 13 interface 176 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 201.893791][ T5928] usb 4-1: config 13 interface 176 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 201.893812][ T5928] usb 4-1: config 13 interface 176 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 201.893833][ T5928] usb 4-1: config 13 interface 176 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 201.893851][ T5928] usb 4-1: config 13 interface 176 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 201.893881][ T5928] usb 4-1: config 13 interface 117 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 201.893900][ T5928] usb 4-1: config 13 interface 176 has no altsetting 0 [ 201.893914][ T5928] usb 4-1: config 13 interface 117 has no altsetting 0 [ 201.901442][ T5942] usb usb6-port1: unable to enumerate USB device [ 201.915544][ T5928] usb 4-1: New USB device found, idVendor=413c, idProduct=8180, bcdDevice=a1.93 [ 201.915571][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.915589][ T5928] usb 4-1: Product: syz [ 201.915602][ T5928] usb 4-1: Manufacturer: 䐍ꤎ뫥楶ꢾ寔踽弝＾⓪ൟ鄺䉏̇㦪⽏‶얈ạ䐖ඵ⇤切켯헧봊ǜ⏾蒻햋翇쎭痉騗ꄞ⌅맳殧㿘隶撇△཭㱭綤맇㔰ꀮオ価㳮虉鬃Ỻ赖똰ṣꛓ쉪岆礛豢磳㿔㒢鰌Ꮝ圡ꈉԍ㢢㵺 [ 201.915626][ T5928] usb 4-1: SerialNumber: syz [ 202.077698][ T5981] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 202.119978][ T5981] usb 5-1: device descriptor read/8, error -71 [ 202.179654][ T5928] option 4-1:13.176: GSM modem (1-port) converter detected [ 202.206377][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.233617][ T5981] usb usb5-port1: unable to enumerate USB device [ 202.272934][ T5928] option 4-1:13.117: GSM modem (1-port) converter detected [ 202.285914][ T5928] usb 4-1: USB disconnect, device number 27 [ 202.309506][ T5928] option 4-1:13.176: device disconnected [ 202.318574][ T5928] option 4-1:13.117: device disconnected [ 202.428613][ T5981] net_ratelimit: 1 callbacks suppressed [ 202.428632][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.403443][ T5928] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 203.453578][ T5981] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 203.466423][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.526471][ T7794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.546723][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.575433][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.583787][ T5928] usb 4-1: not running at top speed; connect to a high speed hub [ 203.625775][ T5981] usb 2-1: device descriptor read/64, error -71 [ 203.665772][ T5928] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.679036][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.704652][ T5928] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.716040][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.746747][ T5928] usb 4-1: Product: syz [ 203.763862][ T5928] usb 4-1: Manufacturer: syz [ 203.781127][ T5928] usb 4-1: SerialNumber: syz [ 203.893308][ T5981] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 203.933548][ T5942] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 204.009672][ T5928] usb 4-1: 0:2 : does not exist [ 204.015166][ T5928] usb 4-1: unit 4 not found! [ 204.023536][ T5981] usb 2-1: device descriptor read/64, error -71 [ 204.040099][ T5928] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 204.083265][ T5942] usb 5-1: Using ep0 maxpacket: 8 [ 204.092139][ T5942] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 204.102004][ T5942] usb 5-1: config 0 has no interface number 0 [ 204.113100][ T5928] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 204.135202][ T5981] usb usb2-port1: attempt power cycle [ 204.157001][ T5942] usb 5-1: config 0 interface 132 altsetting 3 endpoint 0x6 has invalid maxpacket 16448, setting to 64 [ 204.197193][ T5942] usb 5-1: config 0 interface 132 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 204.210255][ T5942] usb 5-1: config 0 interface 132 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 16 [ 204.221780][ T5928] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 204.261972][ T5928] usb 4-1: USB disconnect, device number 28 [ 204.320732][ T5942] usb 5-1: config 0 interface 132 has no altsetting 0 [ 204.416312][ T5942] usb 5-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=fe.e3 [ 204.425762][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.434173][ T5942] usb 5-1: Product: syz [ 204.438451][ T5942] usb 5-1: Manufacturer: syz [ 204.443769][ T5942] usb 5-1: SerialNumber: syz [ 204.474383][ T5942] usb 5-1: config 0 descriptor?? [ 204.482367][ T7799] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 204.493741][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.501988][ T5981] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 204.556631][ T5981] usb 2-1: device descriptor read/8, error -71 [ 204.813330][ T5981] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 204.902386][ T5981] usb 2-1: device descriptor read/8, error -71 [ 205.023662][ T5981] usb usb2-port1: unable to enumerate USB device [ 205.225630][ T7810] netlink: 40 bytes leftover after parsing attributes in process `syz.5.439'. [ 205.564707][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.755555][ T121] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 206.035940][ T121] usb 6-1: Using ep0 maxpacket: 8 [ 206.053698][ T121] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 206.067411][ T121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.114766][ T121] pvrusb2: Hardware description: Terratec Grabster AV400 [ 206.124528][ T121] pvrusb2: ********** [ 206.129758][ T121] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 206.152065][ T121] pvrusb2: Important functionality might not be entirely working. [ 206.202509][ T121] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 206.256437][ T121] pvrusb2: ********** [ 206.297564][ T2347] pvrusb2: Invalid write control endpoint [ 206.483234][ T43] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 206.508177][ T7814] pvrusb2: Invalid write control endpoint [ 206.525506][ T2347] pvrusb2: Invalid write control endpoint [ 206.535296][ T5981] usb 6-1: USB disconnect, device number 16 [ 206.546538][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 206.559647][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 206.574628][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.587938][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.613183][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 206.630312][ T2347] pvrusb2: Device being rendered inoperable [ 206.639818][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 206.651572][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 206.669653][ T2347] pvrusb2: Attached sub-driver cx25840 [ 206.675452][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 206.680899][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 206.691231][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 206.702689][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.729375][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.733345][ T121] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 206.753963][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 206.761556][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 206.767744][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 206.773799][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 206.828618][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.842640][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.851489][ T43] usb 4-1: Product: syz [ 206.859289][ T43] usb 4-1: Manufacturer: syz [ 206.878470][ T43] usb 4-1: SerialNumber: syz [ 206.894213][ T121] usb 2-1: Using ep0 maxpacket: 16 [ 206.907864][ T121] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 206.917787][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.931281][ T121] usb 2-1: Product: syz [ 206.942050][ T121] usb 2-1: Manufacturer: syz [ 206.946740][ T121] usb 2-1: SerialNumber: syz [ 206.960863][ T121] r8152-cfgselector 2-1: Unknown version 0x0000 [ 206.975220][ T121] r8152-cfgselector 2-1: config 0 descriptor?? [ 207.126892][ T43] usb 4-1: 0:2 : does not exist [ 207.137449][ T5942] sierra 5-1:0.132: Sierra USB modem converter detected [ 207.205303][ T43] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 207.220618][ T5942] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 207.302778][ T5942] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 207.325985][ T43] usb 4-1: USB disconnect, device number 29 [ 207.354558][ T5942] usb 5-1: Sierra USB modem converter now attached to ttyUSB2 [ 207.377547][ T7826] netlink: 'syz.5.445': attribute type 1 has an invalid length. [ 207.421362][ T5942] usb 5-1: USB disconnect, device number 28 [ 207.461825][ T5942] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 207.491252][ T5942] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 207.520477][ T5942] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 207.526127][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.534049][ T5942] sierra 5-1:0.132: device disconnected [ 207.619857][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.841724][ T7833] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.853735][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.033514][ T7841] binder_alloc: 7830: pid 7830 spamming oneway? 1 buffers allocated for a total size of 4096 [ 208.046670][ T7841] binder_alloc: 7830: pid 7830 spamming oneway? 2 buffers allocated for a total size of 5120 [ 208.210225][ T7843] openvswitch: netlink: Message has 24 unknown bytes. [ 208.235956][ T121] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 208.250827][ T7843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.313264][ T5981] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 208.444025][ T121] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 208.513542][ T121] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 208.539400][ T121] usb 5-1: config 1 interface 0 has no altsetting 0 [ 208.556216][ T121] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 208.568466][ T5981] usb 6-1: config 80 has too many interfaces: 64, using maximum allowed: 32 [ 208.577380][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.585439][ T121] usb 5-1: Product: syz [ 208.589610][ T121] usb 5-1: Manufacturer: syz [ 208.594269][ T121] usb 5-1: SerialNumber: syz [ 208.611844][ T7840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.622799][ T5981] usb 6-1: config 80 has 1 interface, different from the descriptor's value: 64 [ 208.632315][ T7840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.673609][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.718622][ T5981] usb 6-1: config 80 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 208.746974][ T5981] usb 6-1: config 80 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 208.785502][ T5981] usb 6-1: config 80 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 185, changing to 7 [ 208.836775][ T5981] usb 6-1: config 80 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 42299, setting to 1024 [ 208.845688][ T7840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.886172][ T7840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.040051][ T5981] usb 6-1: config 80 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 209.064802][ T5981] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 209.074033][ T5981] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 209.082280][ T5981] usb 6-1: Manufacturer: syz [ 209.094895][ T5981] smsusb:smsusb_probe: board id=9, interface number 0 [ 209.118047][ T5981] smsusb:siano_media_device_register: media controller created [ 209.132593][ T5981] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 209.144337][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.777093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.785243][ T1213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.793028][ T5928] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 209.972921][ T5981] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 210.024177][ T121] rtl8150 5-1:1.0: couldn't reset the device [ 210.031515][ T5981] ------------[ cut here ]------------ [ 210.033095][ T121] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 210.037997][ T5981] WARNING: CPU: 1 PID: 5981 at mm/slub.c:4805 free_large_kmalloc+0x15c/0x1f0 [ 210.052847][ T5986] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 210.055212][ T5981] Modules linked in: [ 210.066730][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 210.076161][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.086284][ T5981] Workqueue: usb_hub_wq hub_event [ 210.091326][ T5981] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 210.097174][ T5981] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 5e 7b 88 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 46 d7 64 09 cc 90 <0f> 0b 90 65 48 8b 05 39 7b 88 10 48 3b 44 24 08 75 32 48 89 df 48 [ 210.117270][ T5981] RSP: 0018:ffffc90004efeb00 EFLAGS: 00010206 [ 210.123641][ T5981] RAX: 00000000ff000000 RBX: ffffea00014f1880 RCX: 0000000000000000 [ 210.131621][ T5981] RDX: ffffc9001c201000 RSI: ffff888053c62000 RDI: ffffea00014f1880 [ 210.139931][ T5981] RBP: 0000000000000100 R08: ffff8880268aa703 R09: 1ffff11004d154e0 [ 210.148181][ T5981] R10: dffffc0000000000 R11: ffffed1004d154e1 R12: 1ffff1100fd44682 [ 210.153248][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 210.156181][ T5981] R13: 0000000000000000 R14: ffff8880268aa760 R15: dffffc0000000000 [ 210.169252][ T5981] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 210.178369][ T5981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.184994][ T5981] CR2: 0000200000273030 CR3: 0000000032544000 CR4: 00000000003526f0 [ 210.192974][ T5981] Call Trace: [ 210.194637][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.196284][ T5981] [ 210.209349][ T5981] usb_free_urb+0xd0/0x120 [ 210.213780][ T5981] smsusb_term_device+0x1d6/0x3b0 [ 210.218805][ T5981] smsusb_probe+0x1a04/0x2060 [ 210.223512][ T5981] ? __pfx_smsusb_probe+0x10/0x10 [ 210.228533][ T5981] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 210.234099][ T5981] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 210.239982][ T5981] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.246628][ T5981] ? __pm_runtime_set_status+0x785/0xa50 [ 210.252259][ T5981] usb_probe_interface+0x668/0xc30 [ 210.257709][ T5981] ? __pfx_usb_probe_interface+0x10/0x10 [ 210.263359][ T5981] really_probe+0x26a/0x9e0 [ 210.267875][ T5981] __driver_probe_device+0x18c/0x2f0 [ 210.273210][ T5981] driver_probe_device+0x4f/0x430 [ 210.278241][ T5981] __device_attach_driver+0x2ce/0x530 [ 210.283642][ T5981] bus_for_each_drv+0x251/0x2e0 [ 210.288477][ T5981] ? __pfx___device_attach_driver+0x10/0x10 [ 210.294389][ T5981] ? __pfx_bus_for_each_drv+0x10/0x10 [ 210.299752][ T5981] __device_attach+0x2b8/0x400 [ 210.304558][ T5981] ? __pfx___device_attach+0x10/0x10 [ 210.309841][ T5981] ? do_raw_spin_unlock+0x122/0x240 [ 210.315093][ T5981] bus_probe_device+0x185/0x260 [ 210.319962][ T5981] device_add+0x7b6/0xb50 [ 210.324327][ T5981] usb_set_configuration+0x1a87/0x20e0 [ 210.329801][ T5981] usb_generic_driver_probe+0x8d/0x150 [ 210.335287][ T5981] usb_probe_device+0x1c4/0x390 [ 210.340139][ T5981] ? __pfx_usb_probe_device+0x10/0x10 [ 210.345840][ T5981] really_probe+0x26a/0x9e0 [ 210.350381][ T5981] __driver_probe_device+0x18c/0x2f0 [ 210.355977][ T5981] driver_probe_device+0x4f/0x430 [ 210.361013][ T5981] __device_attach_driver+0x2ce/0x530 [ 210.366434][ T5981] bus_for_each_drv+0x251/0x2e0 [ 210.371288][ T5981] ? __pfx___device_attach_driver+0x10/0x10 [ 210.377201][ T5981] ? __pfx_bus_for_each_drv+0x10/0x10 [ 210.382576][ T5981] __device_attach+0x2b8/0x400 [ 210.387372][ T5981] ? __pfx___device_attach+0x10/0x10 [ 210.392650][ T5981] ? do_raw_spin_unlock+0x122/0x240 [ 210.397876][ T5981] bus_probe_device+0x185/0x260 [ 210.402715][ T5981] device_add+0x7b6/0xb50 [ 210.407083][ T5981] usb_new_device+0xa39/0x16f0 [ 210.411853][ T5981] ? __pfx_usb_new_device+0x10/0x10 [ 210.417180][ T5981] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.422389][ T5981] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.427632][ T5981] hub_event+0x2958/0x4a20 [ 210.432069][ T5981] ? __pfx_hub_event+0x10/0x10 [ 210.436854][ T5981] ? process_scheduled_works+0x9ef/0x17b0 [ 210.442584][ T5981] ? process_scheduled_works+0x9ef/0x17b0 [ 210.448657][ T5981] ? process_scheduled_works+0x9ef/0x17b0 [ 210.454643][ T5981] process_scheduled_works+0xae1/0x17b0 [ 210.460201][ T5981] ? __pfx_process_scheduled_works+0x10/0x10 [ 210.466241][ T5981] worker_thread+0x8a0/0xda0 [ 210.470846][ T5981] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.477271][ T5981] ? __kthread_parkme+0x7b/0x200 [ 210.482206][ T5981] kthread+0x70e/0x8a0 [ 210.486299][ T5981] ? __pfx_worker_thread+0x10/0x10 [ 210.491393][ T5981] ? __pfx_kthread+0x10/0x10 [ 210.495997][ T5981] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.501191][ T5981] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.506488][ T5981] ? __pfx_kthread+0x10/0x10 [ 210.511071][ T5981] ret_from_fork+0x439/0x7d0 [ 210.515776][ T5981] ? __pfx_ret_from_fork+0x10/0x10 [ 210.520876][ T5981] ? __switch_to_asm+0x39/0x70 [ 210.525689][ T5981] ? __switch_to_asm+0x33/0x70 [ 210.530439][ T5981] ? __pfx_kthread+0x10/0x10 [ 210.535048][ T5981] ret_from_fork_asm+0x1a/0x30 [ 210.539809][ T5981] [ 210.542807][ T5981] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.550077][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 210.559445][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.569484][ T5981] Workqueue: usb_hub_wq hub_event [ 210.574501][ T5981] Call Trace: [ 210.577760][ T5981] [ 210.580670][ T5981] dump_stack_lvl+0x99/0x250 [ 210.585243][ T5981] ? __asan_memcpy+0x40/0x70 [ 210.589815][ T5981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.595005][ T5981] ? __pfx__printk+0x10/0x10 [ 210.599625][ T5981] vpanic+0x281/0x750 [ 210.603610][ T5981] ? __pfx__printk+0x10/0x10 [ 210.608189][ T5981] ? __pfx_vpanic+0x10/0x10 [ 210.612673][ T5981] ? is_bpf_text_address+0x26/0x2b0 [ 210.617858][ T5981] panic+0xb9/0xc0 [ 210.621559][ T5981] ? __pfx_panic+0x10/0x10 [ 210.625963][ T5981] __warn+0x31b/0x4b0 [ 210.629924][ T5981] ? free_large_kmalloc+0x15c/0x1f0 [ 210.635106][ T5981] ? free_large_kmalloc+0x15c/0x1f0 [ 210.640292][ T5981] report_bug+0x2be/0x4f0 [ 210.644626][ T5981] ? free_large_kmalloc+0x15c/0x1f0 [ 210.649818][ T5981] ? free_large_kmalloc+0x15c/0x1f0 [ 210.655015][ T5981] ? free_large_kmalloc+0x15e/0x1f0 [ 210.660196][ T5981] handle_bug+0x84/0x160 [ 210.664417][ T5981] exc_invalid_op+0x1a/0x50 [ 210.668898][ T5981] asm_exc_invalid_op+0x1a/0x20 [ 210.673724][ T5981] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 210.679507][ T5981] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 5e 7b 88 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 46 d7 64 09 cc 90 <0f> 0b 90 65 48 8b 05 39 7b 88 10 48 3b 44 24 08 75 32 48 89 df 48 [ 210.699089][ T5981] RSP: 0018:ffffc90004efeb00 EFLAGS: 00010206 [ 210.705138][ T5981] RAX: 00000000ff000000 RBX: ffffea00014f1880 RCX: 0000000000000000 [ 210.713087][ T5981] RDX: ffffc9001c201000 RSI: ffff888053c62000 RDI: ffffea00014f1880 [ 210.721035][ T5981] RBP: 0000000000000100 R08: ffff8880268aa703 R09: 1ffff11004d154e0 [ 210.728984][ T5981] R10: dffffc0000000000 R11: ffffed1004d154e1 R12: 1ffff1100fd44682 [ 210.736932][ T5981] R13: 0000000000000000 R14: ffff8880268aa760 R15: dffffc0000000000 [ 210.744895][ T5981] usb_free_urb+0xd0/0x120 [ 210.749294][ T5981] smsusb_term_device+0x1d6/0x3b0 [ 210.754303][ T5981] smsusb_probe+0x1a04/0x2060 [ 210.758973][ T5981] ? __pfx_smsusb_probe+0x10/0x10 [ 210.763996][ T5981] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 210.769552][ T5981] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 210.775448][ T5981] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.781786][ T5981] ? __pm_runtime_set_status+0x785/0xa50 [ 210.787411][ T5981] usb_probe_interface+0x668/0xc30 [ 210.792514][ T5981] ? __pfx_usb_probe_interface+0x10/0x10 [ 210.798128][ T5981] really_probe+0x26a/0x9e0 [ 210.802621][ T5981] __driver_probe_device+0x18c/0x2f0 [ 210.807888][ T5981] driver_probe_device+0x4f/0x430 [ 210.812895][ T5981] __device_attach_driver+0x2ce/0x530 [ 210.818251][ T5981] bus_for_each_drv+0x251/0x2e0 [ 210.823077][ T5981] ? __pfx___device_attach_driver+0x10/0x10 [ 210.828953][ T5981] ? __pfx_bus_for_each_drv+0x10/0x10 [ 210.834333][ T5981] __device_attach+0x2b8/0x400 [ 210.839088][ T5981] ? __pfx___device_attach+0x10/0x10 [ 210.844363][ T5981] ? do_raw_spin_unlock+0x122/0x240 [ 210.849582][ T5981] bus_probe_device+0x185/0x260 [ 210.854416][ T5981] device_add+0x7b6/0xb50 [ 210.858739][ T5981] usb_set_configuration+0x1a87/0x20e0 [ 210.864200][ T5981] usb_generic_driver_probe+0x8d/0x150 [ 210.869648][ T5981] usb_probe_device+0x1c4/0x390 [ 210.874488][ T5981] ? __pfx_usb_probe_device+0x10/0x10 [ 210.879847][ T5981] really_probe+0x26a/0x9e0 [ 210.884339][ T5981] __driver_probe_device+0x18c/0x2f0 [ 210.889607][ T5981] driver_probe_device+0x4f/0x430 [ 210.894616][ T5981] __device_attach_driver+0x2ce/0x530 [ 210.899975][ T5981] bus_for_each_drv+0x251/0x2e0 [ 210.904803][ T5981] ? __pfx___device_attach_driver+0x10/0x10 [ 210.910677][ T5981] ? __pfx_bus_for_each_drv+0x10/0x10 [ 210.916031][ T5981] __device_attach+0x2b8/0x400 [ 210.920774][ T5981] ? __pfx___device_attach+0x10/0x10 [ 210.926040][ T5981] ? do_raw_spin_unlock+0x122/0x240 [ 210.931220][ T5981] bus_probe_device+0x185/0x260 [ 210.936051][ T5981] device_add+0x7b6/0xb50 [ 210.940377][ T5981] usb_new_device+0xa39/0x16f0 [ 210.945138][ T5981] ? __pfx_usb_new_device+0x10/0x10 [ 210.950335][ T5981] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.955561][ T5981] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.960757][ T5981] hub_event+0x2958/0x4a20 [ 210.965194][ T5981] ? __pfx_hub_event+0x10/0x10 [ 210.969942][ T5981] ? process_scheduled_works+0x9ef/0x17b0 [ 210.975651][ T5981] ? process_scheduled_works+0x9ef/0x17b0 [ 210.981383][ T5981] ? process_scheduled_works+0x9ef/0x17b0 [ 210.987081][ T5981] process_scheduled_works+0xae1/0x17b0 [ 210.992631][ T5981] ? __pfx_process_scheduled_works+0x10/0x10 [ 210.998614][ T5981] worker_thread+0x8a0/0xda0 [ 211.003196][ T5981] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 211.009671][ T5981] ? __kthread_parkme+0x7b/0x200 [ 211.014617][ T5981] kthread+0x70e/0x8a0 [ 211.018676][ T5981] ? __pfx_worker_thread+0x10/0x10 [ 211.023768][ T5981] ? __pfx_kthread+0x10/0x10 [ 211.028339][ T5981] ? _raw_spin_unlock_irq+0x23/0x50 [ 211.033518][ T5981] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.038708][ T5981] ? __pfx_kthread+0x10/0x10 [ 211.043301][ T5981] ret_from_fork+0x439/0x7d0 [ 211.047899][ T5981] ? __pfx_ret_from_fork+0x10/0x10 [ 211.052996][ T5981] ? __switch_to_asm+0x39/0x70 [ 211.057741][ T5981] ? __switch_to_asm+0x33/0x70 [ 211.062505][ T5981] ? __pfx_kthread+0x10/0x10 [ 211.067096][ T5981] ret_from_fork_asm+0x1a/0x30 [ 211.071851][ T5981] [ 211.075150][ T5981] Kernel Offset: disabled [ 211.079505][ T5981] Rebooting in 86400 seconds..