last executing test programs: 12.157426931s ago: executing program 2 (id=8763): socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_secret(0x80000) r1 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="4003219c10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000079109d00000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x51}, 0x2a) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x9, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x0, 0x5253bfbc6f536fcf}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x2}, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000002980), 0xd, 0x40001) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x51, 0x401}, &(0x7f0000001240)=0x10) ioctl$EVIOCGABS20(r3, 0x40044583, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x94, @tick=0x8001, 0x9, {0x9}, 0x81, 0x0, 0x3}) sigaltstack(&(0x7f0000000000)={0x0, 0x0, 0xd00d1e912b045f74}, 0x0) poll(0x0, 0x0, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @broadcast}, &(0x7f0000000040)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) rt_sigqueueinfo(r5, 0x34, &(0x7f00000005c0)={0xa, 0xfff, 0x8001}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.025233379s ago: executing program 2 (id=8778): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_init(0x200, 0x48801) write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000003c0)={0xfffffffd, 0x9, 0x0, 0x2, 0x2, 0x27a0}) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r7, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="0c032abd7000fedbdf250b0000002800018008000600000000000800070018d28ae10e7efcfb4e21963837f56b72", @ANYRES32=0x0, @ANYBLOB="1400040000000000000000ffff08000200070000000800030005000000080003000400000005000500020000000800020003000000050005007f00000000100000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$nl_netfilter(0x10, 0x3, 0xc) 7.321748818s ago: executing program 2 (id=8787): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864d2, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = dup(0xffffffffffffffff) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) r5 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x800000003, 0x719, 0x409, 0x8, 0x80, 0x11, 0x9, 0x8000000000000000, 0x2, 0x0, 0x3, 0x2, 0x4, 0xffffffffffffffff], 0x0, 0x194d40}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0xb, 0x80000001}, 0x10) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000400050008", 0x1f) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.219137482s ago: executing program 2 (id=8788): socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_secret(0x80000) r1 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="4003219c10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000079109d00000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x51}, 0x2a) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x9, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x0, 0x5253bfbc6f536fcf}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x2}, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000002980), 0xd, 0x40001) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x51, 0x401}, &(0x7f0000001240)=0x10) ioctl$EVIOCGABS20(r3, 0x40044583, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x94, @tick=0x8001, 0x9, {0x9}, 0x81, 0x0, 0x3}) sigaltstack(&(0x7f0000000000)={0x0, 0x0, 0xd00d1e912b045f74}, 0x0) poll(0x0, 0x0, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @broadcast}, &(0x7f0000000040)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) rt_sigqueueinfo(r5, 0x34, &(0x7f00000005c0)={0xa, 0xfff, 0x8001}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.091156653s ago: executing program 1 (id=8790): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x2}]}]}]}]}, 0x2c}}, 0x0) (fail_nth: 9) 6.860516686s ago: executing program 1 (id=8791): syz_emit_ethernet(0x0, 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x7, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xfffffffb}, {0x0, 0x400ffff}, {0x3}, {0x1}, {}, {}, {0xffffffff, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1b, 0x2, 0x5a0, 0x4d0, 0x1e0, 0xffffffff, 0x0, 0xf0, 0x4d0, 0x4d0, 0xffffffff, 0x4d0, 0x4d0, 0x5, 0x0, {[{{@ipv6={@loopback, @private2, [], [], 'veth1_virt_wifi\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@empty, @port, @icmp_id}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, [], [0x0, 0x0, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key=0xd, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @dev, @dev, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0xe}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b10c2b32d88332bae7eeec407d5b77fe6e35fc4922b23a0007d5e70f0891"}}, {{@ipv6={@remote, @local, [], [], 'batadv_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x600) (async) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48e, 0x8, 0x1, 0x58}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) r2 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'bridge_slave_1\x00'}, 0x18) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4, 0x20000000, @remote, 0x7}}, 0x0, 0x0, 0x4b, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 6.739856497s ago: executing program 1 (id=8792): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000021c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0x14, 0x2a, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1}}, 0x14}}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x400, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1e"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = dup2(r6, r4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8) r10 = syz_open_dev$cec(&(0x7f00000001c0), 0xffffffffffffffff, 0x200) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) syz_usb_connect(0x5, 0x2f, &(0x7f0000000480)=ANY=[@ANYBLOB="12011001c0b5fd08d219810400000002030109021d00010109900009047e0201020600"], 0x0) 5.293104876s ago: executing program 0 (id=8796): r0 = socket(0x5, 0x5, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'sit0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x8001, 0x5f02, {{0x36, 0x4, 0x3, 0x2e, 0xd8, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@rr={0x7, 0x1b, 0xce, [@broadcast, @multicast1, @local, @empty, @loopback, @rand_addr=0x64010101]}, @generic={0x82, 0xd, "4ff37f8141ce12bbc1f975"}, @cipso={0x86, 0x48, 0x2, [{0x2, 0xa, "4cacf105b21f0cb1"}, {0x0, 0xa, "523cd0db62dd5a8d"}, {0x7, 0xd, "8552cefe4df0af8efa7cee"}, {0x0, 0x11, "c512c4cfb00b7ea99a9354ebe0aa9a"}, {0x1, 0x10, "0da9c808a57fd565ffd7dea67421"}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x0, [{@local, 0x9}, {@empty, 0x400}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}]}, @timestamp={0x44, 0x8, 0xb0, 0x0, 0x6, [0x4]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xf2, 0x3, 0x2, [{@empty, 0x8}, {@private=0xa010101, 0x5}, {@local, 0x5}, {@local, 0x7f}]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x100, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {0xf, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0x4, 0xf32, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x81, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0xfffffffc, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x13, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x105, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x31, 0x0, 0x0, 0xfffd, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB="64020000", @ANYRES16=r2, @ANYBLOB="000125bd7000fcdbdf25010000000400028004000300700002800c0001800800010003000000040001800c0001800800010005000000340001800800010004000000080001000600000008000100080000000800010007000000080001000800000008000100030000001c0001800800010001000000080001000600000008000100010000000c00018008000300000000006800018014000200697036746e6c3000000000000000000014000200776c616e3000000000000000000000001400020077673000000000000000000000000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000100000008f0ff004400190008000100", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000000000000000140002007767300000000000000000000000000008000300000000000800030002000000dc0002800c00018008000100010000002400018008000100080000000800010006000000080001000300000008000100030000005400018008000100050000000800010003000000080001000400000008000100040000000800010002000000080001000700000008000100020000000800010003000000080001000200000008000100010000000c00018008000100040000000c00018008000100000000003c00018008000100060000000800010005000000080001000400000008000100020000000800010002000000080001000400000008000100010000004000018014000200767863616e31000000000000000000001400020076657468315f766972745f77696669001400020076657468305f746f5f6873720000000004000300"], 0x264}, 0x1, 0x0, 0x0, 0x15}, 0x24000804) 5.222975195s ago: executing program 0 (id=8798): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864d2, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = dup(0xffffffffffffffff) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) r5 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x800000003, 0x719, 0x409, 0x8, 0x80, 0x11, 0x9, 0x8000000000000000, 0x2, 0x0, 0x3, 0x2, 0x4, 0xffffffffffffffff], 0x0, 0x194d40}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0xb, 0x80000001}, 0x10) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000400050008", 0x1f) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.219796795s ago: executing program 3 (id=8799): openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb", 0x3f}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e", 0x85}], 0x3}, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) close_range(r1, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) syz_usb_connect(0x2, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100193ac931040206582a3b50102030109024d0001027f400909040c07027b855300"], 0x0) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44004) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$binfmt_misc(r5, &(0x7f0000000380), 0x0) r6 = io_uring_setup(0x3457, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 5.097315598s ago: executing program 0 (id=8800): socket$kcm(0x10, 0x2, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x1501, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x42a000, 0x1800, 0x2}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="0110000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB="b162375172ab883171"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe80000000000000000000000000000000020000000000000709"], 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x1004360, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0xbb, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000401e04df304000010203010902a90003010250030904000000010100000a2401070028000201020b240605020202000a004b0c240803070040335fe0f235072407030000030904010000010200000904010101010200000b2402020400070006c9d50a2402020600cee45a070a2402024cc701000d070c240201540100074212be140905010920001001000325010009af520904020000010200000904020101010200000905820920007b060807250118070300"], &(0x7f0000000fc0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x320, 0x81, 0x7, 0x10, 0xff}, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="594097d739857be637caa9700e61e448933a11f6b8ca44577dae8b33e556d80dac42ee70bda450c0e6fbe5e6cffbd4c4534376e7e115e52445392b7bf2ec6ba04dbb3176e6759a1b4f8b60ea72393bd9ce3af9b29a557753"], 0x8, [{0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="2d033ff1d92bf236703d426812e8"]}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x400a}}, {0xfd, &(0x7f0000001180)=ANY=[@ANYBLOB="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"]}, {0x0, 0x0}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x200a}}, {0xb2, &(0x7f0000000dc0)=@string={0xb2, 0x3, "d7fe80ce208a2b71cba65142dc49fac38e2b13ce6437d7dec7e6252a2d9dd3938f9ddc82d06340b4f31917d4f033d3cde7150ab1bff15d8ebc9b5d4b27031529e1c82686c1a4262e4245d167fdd6d567b26cc09e4cbb0305165b362e3fef8d3c0c21ea17c4c49a45ee84079b5cdfb654828e82f64b1b9a4192d11cd8a45464955212c65191710910685fe80ec21b9f760538a758a0c3e134f8778fb2f990f93071062505691177ee24639bad65be617e"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x412}}, {0xe2, &(0x7f0000000ec0)=@string={0xe2, 0x3, "971bba8a72ea1464298211879fd4bad4a2eef8e01653609b17163536b9df9f1cf322bed73aa32ccd90d122eb5cd9823f6c35af9a1e7af760161bba64afcee1cb78611e13470162be02d2e25305cd2b48790eb7bfd9d2696749e50cc8970ca97c0e0665474cd26f7e196c8e4459dd56fa067abc70862956c13d8eaa131af73b3682f4972a9db58c571444f18b53a679ca1d656d341ffc59334712aa1b7ebe0188e5920022e26f107d01b1944e380e002609a605b5f7401fb553721e9d763acf5df1fed43488108ce9ee9982c7ddb2ad7b5cd1334429d98d51c15ff4b414a5b755"}}]}) close(r3) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7cb, &(0x7f0000000100)={0x0, 0x0, 0x8}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r5 = io_uring_setup(0x1393, &(0x7f0000000d40)={0x0, 0x67ba, 0x2, 0x1, 0x29e}) io_uring_register$IORING_UNREGISTER_NAPI(r5, 0x1c, 0x0, 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0xa4e4, @remote, 0x3}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x1c, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0x27) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x3, 0x103400) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x0, 0x49, 0xff, 'syz0\x00', 0x7}, 0x0, [0x8d3, 0xf, 0x7, 0xfffffffffffff800, 0x4, 0xfa4f, 0x2, 0x8, 0xfdd, 0x143e9d3, 0x6, 0x6, 0x84, 0x7fffffff, 0x1ff, 0x6, 0x2, 0xfffffffffffffff7, 0xae49, 0x4, 0xe8, 0x0, 0x3, 0x8000, 0x0, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000000001, 0x2a91, 0x20, 0x5, 0xfffffffffffffff8, 0x81, 0x8, 0x6, 0x1, 0xfffffffffffffffc, 0x4, 0x5, 0x1, 0x4, 0x5, 0x47, 0x82a0, 0x4, 0x120000, 0x7fffffff, 0x5, 0x7, 0x4b5, 0x7, 0xffffffff80000000, 0xf, 0x2, 0x9, 0x1, 0x7fffffffffffffff, 0x0, 0xfb, 0x5930, 0x71, 0xe, 0x80000000, 0x8, 0x7, 0xffffffff, 0x8c25, 0x30c, 0x10001, 0x3, 0xfffffffffffffd07, 0x5, 0xfffffffffffeffff, 0x2, 0xa, 0x7, 0x7fffffff, 0x4b, 0x7, 0xffffffffffff44b4, 0xee, 0x6, 0x9, 0x200, 0x2, 0xa0c1, 0x0, 0x6, 0xfc, 0xff, 0x3, 0x9, 0x2, 0x6, 0xb7d3, 0xc, 0x5, 0xf5, 0x1, 0xffffffffffffff5f, 0x2, 0x100, 0x9, 0xf6, 0x6240, 0x0, 0x4, 0x8, 0x0, 0x5, 0xffffffffffffffff, 0x1e09, 0x5b4, 0x4, 0x6, 0x10001, 0x8, 0x4, 0x6, 0x8, 0x9, 0x6, 0x2, 0x8, 0x4, 0x6, 0xe7f]}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan0\x00'}) 3.829134572s ago: executing program 4 (id=8803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000140)=0xfffffffe) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x100f3, 0xfffffffe, 0x5, 0x722, 0x4, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 3.737803525s ago: executing program 2 (id=8804): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)={0x20, 0x15, 0x2, "7916"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000a80)={0x20, 0xf, 0x7, "d966278c40719a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.629306965s ago: executing program 1 (id=8805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0900020000005c00048010000180080001006c6f670004000280300001800e000100696d746564696174650000001c000280100002800c00028008000180fffffffe0800014000000000180001800e00010063800900010073797a30000000000900020073797a3200000000140000001100030000000000000000000000000a"], 0xb0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102f2e1d507090582030002800000090503"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x50}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x1000, 0x4) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000100001000800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.621254754s ago: executing program 0 (id=8806): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c0050904230001030000000905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="001503000000d81077dcc39242"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.550360993s ago: executing program 3 (id=8807): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x3b, 0x12, 0x1, 0x3, 0x0, [@empty, @remote, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private0, @mcast1, @loopback]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x108}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000002c0)=0x1) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0xf, @mcast1, 0xfffffffe}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x11, 0x0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0xa, 0x0, 0x10000, 0x80000}) r6 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a", 0x3a}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7", 0x21}, {&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x8, 0x4d9e, 0x8) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000440)="a711b9d66693e49cbba3fcc78cfbc50f3b40a08ea48a0c03ec6b22397640f7b7070594", 0x23}], 0x1}}], 0x1, 0x20000001) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000280)=0xe9, 0x4) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 3.486358533s ago: executing program 3 (id=8808): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r2, &(0x7f0000000000)="ab", 0x1, 0x4}, &(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x8, 0x8bd9, r2, 0x0, 0x0, 0x3}]) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.705823714s ago: executing program 4 (id=8809): r0 = socket(0x5, 0x5, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'sit0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x8001, 0x5f02, {{0x36, 0x4, 0x3, 0x2e, 0xd8, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@rr={0x7, 0x1b, 0xce, [@broadcast, @multicast1, @local, @empty, @loopback, @rand_addr=0x64010101]}, @generic={0x82, 0xd, "4ff37f8141ce12bbc1f975"}, @cipso={0x86, 0x48, 0x2, [{0x2, 0xa, "4cacf105b21f0cb1"}, {0x0, 0xa, "523cd0db62dd5a8d"}, {0x7, 0xd, "8552cefe4df0af8efa7cee"}, {0x0, 0x11, "c512c4cfb00b7ea99a9354ebe0aa9a"}, {0x1, 0x10, "0da9c808a57fd565ffd7dea67421"}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x0, [{@local, 0x9}, {@empty, 0x400}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}]}, @timestamp={0x44, 0x8, 0xb0, 0x0, 0x6, [0x4]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xf2, 0x3, 0x2, [{@rand_addr=0x64010102, 0x3}, {@private=0xa010101, 0x5}, {@local, 0x5}, {@local, 0x7f}]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x100, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {0xf, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0x4, 0xf32, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x81, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0xfffffffc, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x13, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x105, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x31, 0x0, 0x0, 0xfffd, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB="64020000", @ANYRES16=r2, @ANYBLOB="000125bd7000fcdbdf25010000000400028004000300700002800c0001800800010003000000040001800c0001800800010005000000340001800800010004000000080001000600000008000100080000000800010007000000080001000800000008000100030000001c0001800800010001000000080001000600000008000100010000000c00018008000300000000006800018014000200697036746e6c3000000000000000000014000200776c616e3000000000000000000000001400020077673000000000000000000000000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000100000008f0ff004400190008000100", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000000000000000140002007767300000000000000000000000000008000300000000000800030002000000dc0002800c00018008000100010000002400018008000100080000000800010006000000080001000300000008000100030000005400018008000100050000000800010003000000080001000400000008000100040000000800010002000000080001000700000008000100020000000800010003000000080001000200000008000100010000000c00018008000100040000000c00018008000100000000003c00018008000100060000000800010005000000080001000400000008000100020000000800010002000000080001000400000008000100010000004000018014000200767863616e31000000000000000000001400020076657468315f766972745f77696669001400020076657468305f746f5f6873720000000004000300"], 0x264}, 0x1, 0x0, 0x0, 0x15}, 0x24000804) 2.604978554s ago: executing program 4 (id=8810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) lseek(r1, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4010) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ptrace(0x10, r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ptrace$setregs(0x1a, r6, 0xc, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="84", 0x1, 0x2008015, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) 1.917408334s ago: executing program 0 (id=8811): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) epoll_create1(0x80000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {}, {0x3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x60008080}, 0x20000000) sendmmsg(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34324152, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(0x0, 0x0, &(0x7f0000000740), 0x0, 0xfffffffffffffff9) 1.706370029s ago: executing program 4 (id=8812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_init(0x200, 0x48801) write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f00000003c0)={0xfffffffd, 0x9, 0x0, 0x2, 0x2, 0x27a0}) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r7, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="0c032abd7000fedbdf250b0000002800018008000600000000000800070018d28ae10e7efcfb4e21963837f56b72", @ANYRES32=0x0, @ANYBLOB="1400040000000000000000ffff08000200070000000800030005000000080003000400000005000500020000000800020003000000050005007f00000000100000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x11}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$nl_netfilter(0x10, 0x3, 0xc) 1.60299446s ago: executing program 2 (id=8813): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x4, 0x20, 0x61, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ba"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x100, 0xff, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x9, 0x3e}, [@country_functional={0xe, 0x24, 0x7, 0x90, 0x9, [0x9, 0x0, 0x0, 0x3]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xfe, 0x1, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x8, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x5, 0xff}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xb2, 0x23, 0xf, 0x20, 0x2}, 0x77, &(0x7f00000000c0)={0x5, 0xf, 0x77, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x400, 0xf000, 0x29, [0xffff0f, 0xc0, 0xff, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc, 0x4, 0x2, 0xffff, 0x7}, @generic={0x4b, 0x10, 0x4, "3e8d2a266ca906f28da24c8b88de3ac18a8abbb895f5ce56d324f4576e4a79be96ef6f8113b907e4d2ffb2ba798e55a5d3a4dc0e074f81a3f47f592cbd5cf8a68f01e697e817c282"}]}, 0x4, [{0x73, &(0x7f0000000140)=@string={0x73, 0x3, "a0a58f680c34b074a69a9456aefc75316404a06ddaa48ae62e6874d2e336c2034fc717458fec623c032022c080bee1a5a4150871dd88351e6a057d0b52ba79a9ba934447149b10133b9ac24a7a590091dbdcfe0a0079300c6e977eb8bcd5d5946d0dea1e33fc5c00eea84833466ba650cb"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.038828946s ago: executing program 0 (id=8814): socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_secret(0x80000) r1 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="4003219c10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000079109d00000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x51}, 0x2a) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x9, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x0, 0x5253bfbc6f536fcf}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x2}, 0x0, 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000002980), 0xd, 0x40001) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x51, 0x401}, &(0x7f0000001240)=0x10) ioctl$EVIOCGABS20(r3, 0x40044583, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x94, @tick=0x8001, 0x9, {0x9}, 0x81, 0x0, 0x3}) sigaltstack(&(0x7f0000000000)={0x0, 0x0, 0xd00d1e912b045f74}, 0x0) poll(0x0, 0x0, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @broadcast}, &(0x7f0000000040)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) rt_sigqueueinfo(r5, 0x34, &(0x7f00000005c0)={0xa, 0xfff, 0x8001}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 943.399919ms ago: executing program 3 (id=8815): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101040) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0x1, 0x2, 'client0\x00', 0x4, "5becbbe449070139", "8dc536db7fb102019692b8946538e32167e062ab5190c99f4862d400e96ec934", 0x7, 0x6}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000001c0)={0x1, 0x5, 0xbd, &(0x7f0000000100)=""/189}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) timer_create(0x4, &(0x7f0000000200)={0x0, 0x1e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_gettime(r3, &(0x7f0000000280)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000000340)=""/238, &(0x7f0000000440)=0xee) ioctl$SNDCTL_DSP_GETCAPS(r4, 0x8004500f, &(0x7f0000000480)) fcntl$getown(r1, 0x9) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close$binfmt(r5) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000500)={0x0, 0x7}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x8ab, 0x0, 0x4, 0x1, r7}, &(0x7f00000005c0)=0x10) getsockopt$inet6_tcp_int(r6, 0x6, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x20c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xbf, 0x8, "f7c1ea1652d1d74bcbcb370722cc21248f7192b45ffdf6d4405176205f8c549071b59cf0fe54fdb38c7c742aeeeca215ae86b10ce3eb2c98c3aaa852879e62921e5e8bb75a9db9534d55c034f60d0eee312a6130237940ed91e44484a6314a241122e9f7fdbdeec834666589bccb92e7060311fe242cc578fdac7ce344f20528a2befff40341f49936e5f5ce6212aa4a872b31df8387bebd852f105c6f26d2ffac66f0b5fc5ea60aeecc41b575c503cadc03263b65e16cd2a718f4"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xfc, 0x8, "379f96089894e307db2f2f32065da27a214909ef247ab5af76f828277f0129e919bda83762fb9bec88a17d617dbfb2c9fba4ea583734179d70e271a84243bd8bcaee5c75cbc9b0785d9ce130b34bf75badc21fae2b352244cd817e7cd02ef790ae3eef44d21898728f4d4ea5ab159ce3e8492ec3fbac5eff0d68c41ae5e021fd448609073b81426ea0518deb2453953d9b7470e5f3679d442fd80083ef0a318bbfdfde873487594e51c892c97b20d8e6a54a5ee985542bbc9bd5b28a804ee5150e4c031fa2c82975817a62230dde6f5252f9baab06c9791a86c74aa4e40d590ce9c8088f5a9c385243df2346d342744764c5acf34b0f8908"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x6c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x1a0, 0x14, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xff, 0x8, "326f500add66623ca43ef52be10867ac7707bf89c2d3a06ab4e3ed0006cb1055fee7c0dce9bf076583c7d01e8b7322be88d771f7406a2186bf6e6b7b7ed8b8f556a7412bbc94e005197eaa97c3a0a8b9eea114d7674cb1287bc75d4d469ece0d8d358ce75c6366c91a4391303d7ccb2b36af17a2700e62da029f9bac5d376cd946289a5abef6995b530c82b070b755d6a8ba2860937139c2becee7d335b8b1d7ea24e294401f3c4332a53e89fdf052bba1027745ea582efaa017d9035fc1289e9801886c339252904a4219b4498633b00f957f4c1134c7fb0d500e5cfb03ffa59c7cd5994434a8f0638610212bc629c3162a966222da3454f13a7b"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x7d, 0x8, "260b292e1c1152649e55fb20c9677a4793efef3650d8a32716d7ac29045643511d3be2da7daf44ba5528177f326b370dac109964b306d4a1e6ba35367105a92e3c6c9f9069c005e1c030d8e9b0cc0e21cc2a6d14e73337118dad563f58063f4c351786f9e90c257d5541148fda3825f62f453b1b77d687dab5"}]}, @NFT_MSG_DELRULE={0x60, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x905, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x508}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) sendmsg$kcm(r6, &(0x7f0000000fc0)={&(0x7f0000000c80)=@phonet={0x23, 0x7, 0xa3, 0xd}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d00)="5fcd815bc6cb0489739f9133bd3b0fa5bc3e713b13ca3f76ab2361a2f1499a8f988237a504186e938b0b4d76bd6eb9983fea5dc6a8a55702b8eed3f41e52", 0x3e}, {&(0x7f0000000d40)="8e5e49043458", 0x6}, {&(0x7f0000000d80)="6c35e14755d1e1ec456755b6885279010846ef2571db9464d1e142f6fdfa8f997bd843f2fe67acdae3f70ecf7703f96053b9ec9e346abcf0e0fc268c2658b020cc5bd0717793633c74b73fec859bec69d9fbbae74259292c8e8b0e2dc5f44633b7a50c5bbf9a2d10895d159520aa28fd0f14e700d4921db39ec3f1384bd33c7e089786657171f9a97d3ddc19f847d687e310504a", 0x94}, {&(0x7f0000000e40)="c139b54171719917b1bc35bf7135447cc5e4e3f48236446f72a293bb345cb0a7ec9b135bca607c8cdf0099c49487c46d9c3921eb308b096b33cf691c6d071dc68869df4ffafe778739d0b7e2494fdadccd99bd9fed259410e04d620597a6", 0x5e}, {&(0x7f0000000ec0)="3098e21f7bdedd6e9e5ecff290434ff3e9aecfb5ee0285bd107b87f1238e299e5578e42abaf2c57adf7a7a320ccb97720a9d0936b3fcbbd0cb023577cb1faa2ff1581194bc3aa03e6703456c42e8c6665a68f83a50e27dbc66baf2abb90785be0e7acfda10b0fc782f9fda2442e56d", 0x6f}], 0x5}, 0x1) r8 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x800000, 0x50, r6, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000001000)="c199c10b7e31b8ffb440e87db025f6556b53c958d7d881713e59c34044731dba5c30625b8825cdf6ce8e09c034a7110a36814a3708e0a275987f63504ce38436678d93897745ea99", 0x0, 0x48) write$dsp(r2, &(0x7f0000001080)="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", 0x1000) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000021c0)={0x14, &(0x7f0000002080)={0x0, 0x11, 0xda, {0xda, 0xc, "20731ac915898124b06088765cda29c6bbd43b09d57ec536e85ccfcff7ba469e692ba7c9fdb538fa71bb946fe8be7c6ba672dadc561c07364fe5d42248b1c531159a598559c70ce2f36fb6eeea6f031168566ba1892225495917bd1505a7b69e7e0e3651b801469d7708c5c6daa55e3e3d8714eeff58b67582f78ace529fda181fa4ff8deee9e1433e806a64a6005cee03997fabef0d9fef18dd85e4e1acfef7d7fc13cfb8b52f21b5488770dd9305e7bc1ce513b9993cd02fe461bac965f6ce3ed58016de5bdf854cc8fbc0efa2b9d3470d3e8fa0060f62"}}, &(0x7f0000002180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000002380)={0x34, &(0x7f0000002200)={0x20, 0x10, 0x27, "f596bce73600733535e4b639e8d8265c3432fc659824a2a8d63733386dd0c8e220e7818aa0dc0f"}, &(0x7f0000002240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000022c0)={0xc0, 0xa1, 0x4, 0x54a}, &(0x7f0000002300)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000002340)={0xc0, 0xa2, 0x2f, "86a96f0646d4e70403c31449394f185e90910580fc81e420fc553103717736000908169abd382c9f035761289be2c9"}}) syz_memcpy_off$KVM_EXIT_MMIO(r8, 0x20, &(0x7f00000023c0)="cd43b757b029f088974f1768f32bf1a81bcc1051d46909bc", 0x0, 0x18) ioctl$I2C_FUNCS(r6, 0x705, &(0x7f0000002400)=0x5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000002440)={0x3, 0x0, [{0x94a, 0x0, 0x8}, {0xbba}, {0x375, 0x0, 0x3}]}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000002480), &(0x7f00000024c0)={'L+', 0x8000000000000000}, 0x16, 0x1) 488.624949ms ago: executing program 1 (id=8816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r1, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}, 0x339}, 0x0) 468.724348ms ago: executing program 1 (id=8817): openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb", 0x3f}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e", 0x85}], 0x3}, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) close_range(r1, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) syz_usb_connect(0x2, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100193ac931040206582a3b50102030109024d0001027f400909040c07027b855300"], 0x0) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44004) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$binfmt_misc(r5, &(0x7f0000000380), 0x0) r6 = io_uring_setup(0x3457, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 331.842005ms ago: executing program 3 (id=8818): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) gettid() syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0xffffffffffffffff, 0x3, 0x0, '\x00', {0x7ff, 0x80801, 0x79, 0x10, 0x0, 0x0, 0x8000, '\x00', 0x6, 0x8000000000000001, 0x1, 0x3, {0xa, 0x6}, {0x4000000000006, 0xca}, {0x2000004, 0xd}, {0x5, 0xa00}, 0x2002, 0x6, 0x8, 0x7}}}}) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x20, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) 223.354391ms ago: executing program 4 (id=8819): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000020070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800c000100636f756e746572001c0002800c00024000000000000009ce0c0002400000000000000000480000000c0a03000000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c00008008000340000000021400"], 0xf8}}, 0x0) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)="fc0508f23f00000000000000", 0xc, 0xfffffffffffffffe) 163.21862ms ago: executing program 3 (id=8820): fsopen(&(0x7f0000000040)='smb3\x00', 0x1) close(0x3) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) syz_usbip_server_init(0x1) r0 = syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) r1 = syz_usbip_server_init(0x1) r2 = syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) r3 = syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) pipe(&(0x7f0000000080)) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) ppoll(&(0x7f0000000140)=[{r1, 0x410}, {r3, 0x8}, {r2, 0x9100}, {r4, 0x20}], 0x4, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)={[0x7f]}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012200d4071040803dfe4000000010902b901010000003f0904"], 0x0) 0s ago: executing program 4 (id=8821): set_mempolicy(0x8006, 0x0, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x7214, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@mcast2, 0x0}, 0x0) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x0, r7, 0x1, 0x1, 0x6, @local}, 0x14) pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bind$inet(r8, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) kernel console output (not intermixed with test programs): 87682][T13521] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 1772.197692][T13521] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.212819][T13521] usb 3-1: config 0 descriptor?? [ 1772.225420][T13521] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 1772.394556][ T5730] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1772.422919][T13521] pwc: send_video_command error -71 [ 1772.430504][ T392] vhci_hcd: connection closed [ 1772.432247][ T388] vhci_hcd: connection closed [ 1772.437088][ T384] vhci_hcd: connection closed [ 1772.441906][ T381] vhci_hcd: connection closed [ 1772.447514][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1772.458675][T13521] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1772.466787][T21241] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1772.476619][T13521] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1772.479320][ T376] vhci_hcd: connection closed [ 1772.486125][ T369] vhci_hcd: connection reset by peer [ 1772.486280][ T61] vhci_hcd vhci_hcd.2: release socket [ 1772.490889][ T374] vhci_hcd: connection closed [ 1772.498929][T13521] usb 3-1: USB disconnect, device number 125 [ 1772.515117][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1772.525941][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1772.531226][ T61] vhci_hcd vhci_hcd.2: release socket [ 1772.538738][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1772.549559][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1772.558407][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.570714][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.580849][ T61] vhci_hcd vhci_hcd.2: release socket [ 1772.588421][ T5730] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1772.606758][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1772.622574][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1772.634499][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.642700][ T61] vhci_hcd vhci_hcd.2: release socket [ 1772.668797][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1772.676958][T21241] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1772.695684][ T5730] usb 4-1: config 0 descriptor?? [ 1772.702334][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1772.725549][ T61] vhci_hcd vhci_hcd.2: release socket [ 1772.748536][T21241] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1772.761522][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1772.775025][T21241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1772.783290][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1772.799347][ T61] vhci_hcd vhci_hcd.2: release socket [ 1772.811294][T21241] usb 1-1: Product: syz [ 1772.829680][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1772.835779][T21241] usb 1-1: Manufacturer: syz [ 1772.859368][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1772.871541][T21241] usb 1-1: SerialNumber: syz [ 1772.884959][ T61] vhci_hcd vhci_hcd.2: release socket [ 1772.899921][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1773.123470][ T5730] hid_parser_main: 28 callbacks suppressed [ 1773.123493][ T5730] playstation 0003:054C:0DF2.007C: unknown main item tag 0x0 [ 1773.148026][T21241] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1773.171521][ T5730] playstation 0003:054C:0DF2.007C: unknown main item tag 0x0 [ 1773.182391][ T5730] playstation 0003:054C:0DF2.007C: unknown main item tag 0x0 [ 1773.226864][T21241] usb 1-1: USB disconnect, device number 71 [ 1773.238494][ T5730] playstation 0003:054C:0DF2.007C: unknown main item tag 0x0 [ 1773.263943][ T5730] playstation 0003:054C:0DF2.007C: unknown main item tag 0x0 [ 1773.290817][T21241] usblp0: removed [ 1773.332356][ T5730] playstation 0003:054C:0DF2.007C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1773.404746][T13521] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1773.576399][T13521] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.607886][T13521] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1773.639791][T13521] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1773.655997][T13521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.670326][T13521] usb 5-1: Product: 慄쟘዗ࣣ쪊뛛钼蝄乸ꆠꁅ驔與䀍銱契쥪惓툯藳建ᚄ㣏₼祘婑ꗮ঻gꋪ朗።ﶢ懅ᅲ綶ꎬ៥坷鸱ཬ콭᯵䔛끙䪍㽜덇像嚲ᘿ蠻쐬쟋啑૯ￅᘲ똦堵㊡Ř鶖ຑ㈾駍ꗵ㮉ྋ웧簏ⶃ⺀묚쫠⛹汋丫抝⠹ᄏ煃瑙ꐰ뼋ﱷ呆훶봾굧╹၍꠩Ⓧ줐쐻ူ侐큰爉뿽訜珨菳蠺丨ⰶ骭耲Ꭿ [ 1773.737483][T13521] usb 5-1: Manufacturer: 䀊 [ 1773.838841][ T406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.850534][ T406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.854913][T21241] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1773.879055][ T5730] playstation 0003:054C:0DF2.007C: Failed to retrieve feature with reportID 5: -71 [ 1773.899803][ T5730] playstation 0003:054C:0DF2.007C: Failed to retrieve DualSense calibration info: -71 [ 1773.919657][ T5730] playstation 0003:054C:0DF2.007C: Failed to get calibration data from DualSense [ 1773.939038][ T5730] playstation 0003:054C:0DF2.007C: Failed to create dualsense. [ 1773.967258][ T5730] playstation 0003:054C:0DF2.007C: probe with driver playstation failed with error -71 [ 1773.989551][T13521] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1773.999040][ T5730] usb 4-1: USB disconnect, device number 25 [ 1774.006132][T13521] usb 5-1: 0:2 : does not exist [ 1774.026550][T21241] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 1774.035302][T21241] usb 3-1: config 0 has no interface number 0 [ 1774.047410][T21241] usb 3-1: config 0 interface 101 has no altsetting 0 [ 1774.072837][T21241] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1774.092432][T21241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.110578][T21241] usb 3-1: Product: syz [ 1774.115397][T13521] usb 5-1: USB disconnect, device number 30 [ 1774.121382][T21241] usb 3-1: Manufacturer: syz [ 1774.127034][T21241] usb 3-1: SerialNumber: syz [ 1774.135148][T21241] usb 3-1: config 0 descriptor?? [ 1774.402470][T13521] usb 3-1: USB disconnect, device number 126 [ 1774.754593][T21212] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1774.905473][T21212] usb 5-1: device descriptor read/64, error -71 [ 1774.964987][ T5760] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1775.124718][ T5760] usb 1-1: Using ep0 maxpacket: 16 [ 1775.131434][ T5760] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1775.144873][T21212] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1775.152479][ T5760] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1775.159534][ T5760] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1775.168864][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.180488][ T5760] usb 1-1: config 0 descriptor?? [ 1775.236076][T28169] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1775.304679][T21212] usb 5-1: device descriptor read/64, error -71 [ 1775.407696][T28169] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1775.419993][T28169] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59357, setting to 1024 [ 1775.431632][T21212] usb usb5-port1: attempt power cycle [ 1775.440102][T28169] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1775.449505][T28169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.458102][T28169] usb 3-1: Product: syz [ 1775.462304][T28169] usb 3-1: Manufacturer: syz [ 1775.468697][T28169] usb 3-1: SerialNumber: syz [ 1775.594888][T21241] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1775.603044][ T5760] lenovo 0003:17EF:6009.007D: unknown main item tag 0x0 [ 1775.610478][ T5760] lenovo 0003:17EF:6009.007D: unknown main item tag 0x0 [ 1775.621059][ T5760] lenovo 0003:17EF:6009.007D: unknown main item tag 0x0 [ 1775.629920][ T5760] lenovo 0003:17EF:6009.007D: unknown main item tag 0x0 [ 1775.638280][ T5760] lenovo 0003:17EF:6009.007D: unknown main item tag 0x0 [ 1775.651386][ T5760] lenovo 0003:17EF:6009.007D: hidraw0: USB HID v0.0b Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0 [ 1775.756103][T21241] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1775.766411][T21241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.774939][T21212] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1775.783839][T21241] usb 4-1: config 0 descriptor?? [ 1775.795176][T21212] usb 5-1: device descriptor read/8, error -71 [ 1775.817551][ T5760] usb 1-1: USB disconnect, device number 72 [ 1775.997671][ T444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.006715][ T444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.020485][T21241] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1776.030900][T21241] [drm:udl_init] *ERROR* Selecting channel failed [ 1776.050761][T21241] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1776.057994][T21241] [drm] Initialized udl on minor 2 [ 1776.065704][T21241] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1776.067589][T21212] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1776.075276][T21241] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1776.089127][T13521] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1776.103919][T21241] usb 4-1: USB disconnect, device number 26 [ 1776.110596][T13521] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1776.115583][T21212] usb 5-1: device descriptor read/8, error -71 [ 1776.235046][T21212] usb usb5-port1: unable to enumerate USB device [ 1776.501906][T28169] cdc_ncm 3-1:1.0: bind() failure [ 1776.511632][T28169] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1776.520287][T28169] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1776.529987][T28169] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1776.544348][T28169] usb 3-1: USB disconnect, device number 127 [ 1776.704568][T21212] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1776.804615][ T5632] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1776.875360][T21212] usb 1-1: Using ep0 maxpacket: 32 [ 1776.884109][T21212] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1776.893641][T21212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.904895][T21212] usb 1-1: Product: syz [ 1776.909109][T21212] usb 1-1: Manufacturer: syz [ 1776.913685][T21212] usb 1-1: SerialNumber: syz [ 1776.920497][T21212] usb 1-1: config 0 descriptor?? [ 1776.925716][ T5760] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1776.936294][T21212] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1777.106119][ T5760] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 1777.115030][ T5760] usb 4-1: config 128 has no interface number 0 [ 1777.121343][ T5760] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1777.131956][ T5760] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1777.144122][ T5760] usb 4-1: config 128 interface 148 has no altsetting 0 [ 1777.153437][ T5760] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 1777.163241][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.171400][ T5760] usb 4-1: Product: syz [ 1777.176044][ T5760] usb 4-1: Manufacturer: syz [ 1777.180686][ T5760] usb 4-1: SerialNumber: syz [ 1777.399233][ T5760] usb 4-1: USB disconnect, device number 27 [ 1777.854878][ T5760] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1777.944691][ T1226] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1777.953056][ T473] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1777.962669][T21212] gspca_ov534_9: reg_w failed -71 [ 1778.005215][ T5760] usb 4-1: Using ep0 maxpacket: 8 [ 1778.012700][ T5760] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1778.021912][ T5760] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1778.031876][ T5760] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1778.042215][ T5760] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1778.052406][ T5760] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1778.065853][T13328] usb usb38-port1: attempt power cycle [ 1778.071398][ T5760] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1778.080959][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.117959][ T1226] usb 5-1: config 2 has an invalid interface number: 12 but max is 0 [ 1778.127521][ T1226] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.137989][ T1226] usb 5-1: config 2 has no interface number 0 [ 1778.144167][ T1226] usb 5-1: config 2 interface 12 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1778.157299][ T1226] usb 5-1: config 2 interface 12 has no altsetting 0 [ 1778.166261][ T1226] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 1778.176775][ T1226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.185718][ T1226] usb 5-1: Product: syz [ 1778.189940][ T1226] usb 5-1: Manufacturer: syz [ 1778.195565][ T1226] usb 5-1: SerialNumber: syz [ 1778.294959][T21212] gspca_ov534_9: Unknown sensor 0000 [ 1778.295095][T21212] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1778.312296][ T5760] usb 4-1: usb_control_msg returned -32 [ 1778.320543][T21212] usb 1-1: USB disconnect, device number 73 [ 1778.328351][ T5760] usbtmc 4-1:16.0: can't read capabilities [ 1778.372985][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d84f000: rx timeout, send abort [ 1778.422675][ T469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1778.547242][ T1226] usb 5-1: USB disconnect, device number 35 [ 1778.631285][T13328] usb usb38-port1: unable to enumerate USB device [ 1778.854807][ T5632] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1778.881291][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d84f000: abort rx timeout. Force session deactivation [ 1778.888982][ T486] FAULT_INJECTION: forcing a failure. [ 1778.888982][ T486] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.906200][ T486] CPU: 0 UID: 0 PID: 486 Comm: syz.2.8557 Tainted: G L syzkaller #0 PREEMPT(full) [ 1778.906230][ T486] Tainted: [L]=SOFTLOCKUP [ 1778.906237][ T486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1778.906248][ T486] Call Trace: [ 1778.906256][ T486] [ 1778.906265][ T486] dump_stack_lvl+0xe8/0x150 [ 1778.906293][ T486] should_fail_ex+0x412/0x560 [ 1778.906319][ T486] should_failslab+0xa8/0x100 [ 1778.906338][ T486] ? __anon_vma_prepare+0x117/0x4a0 [ 1778.906362][ T486] kmem_cache_alloc_noprof+0x87/0x650 [ 1778.906385][ T486] ? __anon_vma_prepare+0xcb/0x4a0 [ 1778.906414][ T486] __anon_vma_prepare+0x117/0x4a0 [ 1778.906443][ T486] uffd_lock_vma+0x1f4/0x2d0 [ 1778.906465][ T486] mfill_get_vma+0xc5/0x6d0 [ 1778.906489][ T486] mfill_atomic_poison+0x179/0x1540 [ 1778.906514][ T486] ? __kernel_text_address+0xd/0x30 [ 1778.906538][ T486] ? unwind_get_return_address+0x4d/0x90 [ 1778.906559][ T486] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1778.906589][ T486] ? __might_fault+0xaf/0x130 [ 1778.906611][ T486] ? __might_fault+0xaf/0x130 [ 1778.906641][ T486] ? __pfx_mfill_atomic_poison+0x10/0x10 [ 1778.906674][ T486] userfaultfd_ioctl+0x2237/0x4a10 [ 1778.906696][ T486] ? __kasan_slab_free+0x5c/0x80 [ 1778.906718][ T486] ? kfree+0x1c5/0x640 [ 1778.906737][ T486] ? tomoyo_path_number_perm+0x501/0x630 [ 1778.906774][ T486] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1778.906823][ T486] ? kasan_quarantine_put+0xbb/0x1f0 [ 1778.906855][ T486] ? tomoyo_path_number_perm+0x219/0x630 [ 1778.906879][ T486] ? tomoyo_path_number_perm+0x219/0x630 [ 1778.906905][ T486] ? do_vfs_ioctl+0x1166/0x1530 [ 1778.906945][ T486] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1778.906983][ T486] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1778.907024][ T486] ? __fget_files+0x2a/0x420 [ 1778.907049][ T486] ? __fget_files+0x2a/0x420 [ 1778.907069][ T486] ? __fget_files+0x3a0/0x420 [ 1778.907088][ T486] ? __fget_files+0x2a/0x420 [ 1778.907112][ T486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1778.907139][ T486] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1778.907162][ T486] __se_sys_ioctl+0xfc/0x170 [ 1778.907187][ T486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.907207][ T486] do_syscall_64+0x174/0x580 [ 1778.907226][ T486] ? trace_irq_disable+0x3b/0x140 [ 1778.907251][ T486] ? clear_bhb_loop+0x40/0x90 [ 1778.907273][ T486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.907292][ T486] RIP: 0033:0x7f5c9939ce59 [ 1778.907310][ T486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.907325][ T486] RSP: 002b:00007f5c9a2bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1778.907346][ T486] RAX: ffffffffffffffda RBX: 00007f5c99615fa0 RCX: 00007f5c9939ce59 [ 1778.907359][ T486] RDX: 0000200000000080 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 1778.907371][ T486] RBP: 00007f5c9a2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.907383][ T486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1778.907394][ T486] R13: 00007f5c99616038 R14: 00007f5c99615fa0 R15: 00007f5c9973fa48 [ 1778.907424][ T486] [ 1779.310158][ T5632] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1779.320504][ T5632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.333266][ T5632] usb 1-1: config 0 descriptor?? [ 1779.535074][ T5760] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1779.548354][ T481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.558110][ T481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.570360][ T5632] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1779.578839][ T5632] [drm:udl_init] *ERROR* Selecting channel failed [ 1779.593124][ T5632] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1779.601049][ T5632] [drm] Initialized udl on minor 2 [ 1779.607843][ T5632] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1779.618610][ T5632] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1779.628621][T13328] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1779.638789][ T5632] usb 1-1: USB disconnect, device number 74 [ 1779.645815][T21241] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1779.656212][T13328] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1779.697049][ T5760] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1779.708086][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.718375][ T5760] usb 3-1: config 0 descriptor?? [ 1779.814804][T21241] usb 5-1: Using ep0 maxpacket: 16 [ 1779.821932][T21241] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1779.832483][T21241] usb 5-1: config 4 has an invalid interface number: 55 but max is 0 [ 1779.841390][T21241] usb 5-1: config 4 has no interface number 0 [ 1779.847929][T21241] usb 5-1: config 4 interface 55 has no altsetting 0 [ 1779.857524][T21241] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 1779.866817][T21241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.875377][T21241] usb 5-1: Product: syz [ 1779.879564][T21241] usb 5-1: Manufacturer: syz [ 1779.884148][T21241] usb 5-1: SerialNumber: syz [ 1779.929922][ T489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.939211][ T489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.949298][ T5760] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1779.958195][ T5760] [drm:udl_init] *ERROR* Selecting channel failed [ 1779.973967][ T5760] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1779.980916][ T5760] [drm] Initialized udl on minor 2 [ 1779.988119][ T5760] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1779.996983][ T5760] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1780.010206][T21212] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1780.020456][ T5760] usb 3-1: USB disconnect, device number 2 [ 1780.027316][T21212] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1780.105551][ T494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8560'. [ 1780.124294][ T493] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8560'. [ 1780.178391][ T493] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8560'. [ 1780.181617][ T498] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1780.294408][T21241] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1780.302144][T21241] gspca_mr97310a: reg write [21] error -22 [ 1780.308285][T21241] mr97310a 5-1:4.55: probe with driver mr97310a failed with error -22 [ 1780.319957][T21241] usb 5-1: USB disconnect, device number 36 [ 1780.404867][T21212] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1780.498191][T21241] usb 4-1: USB disconnect, device number 28 [ 1780.548038][T21212] usb 1-1: device descriptor read/64, error -71 [ 1780.814626][T21212] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1780.864749][ T1226] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1780.867179][T21241] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1780.920759][T31937] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1780.961202][T21212] usb 1-1: device descriptor read/64, error -71 [ 1781.029582][ T1226] usb 3-1: device descriptor read/64, error -71 [ 1781.054706][T21241] usb 4-1: Using ep0 maxpacket: 8 [ 1781.063197][T21241] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1781.073291][T21241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.081672][T21241] usb 4-1: Product: syz [ 1781.086202][T21241] usb 4-1: Manufacturer: syz [ 1781.090819][T21241] usb 4-1: SerialNumber: syz [ 1781.095217][T21212] usb usb1-port1: attempt power cycle [ 1781.103738][T21241] usb 4-1: config 0 descriptor?? [ 1781.274536][ T1226] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1781.314008][T21241] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1781.404597][ T1226] usb 3-1: device descriptor read/64, error -71 [ 1781.444872][T21212] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1781.465148][T21212] usb 1-1: device descriptor read/8, error -71 [ 1781.514976][ T1226] usb usb3-port1: attempt power cycle [ 1781.704610][T21212] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1781.725240][T21212] usb 1-1: device descriptor read/8, error -71 [ 1781.804836][ T5760] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1781.835180][T21212] usb usb1-port1: unable to enumerate USB device [ 1781.864822][ T1226] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1781.886640][ T1226] usb 3-1: device descriptor read/8, error -71 [ 1781.954753][ T5760] usb 5-1: Using ep0 maxpacket: 32 [ 1781.961480][ T5760] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1781.969747][ T5760] usb 5-1: config 0 has no interface number 0 [ 1781.977683][ T5760] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1781.986886][ T5760] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1781.996288][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.004925][ T5760] usb 5-1: Product: syz [ 1782.009144][ T5760] usb 5-1: Manufacturer: syz [ 1782.013732][ T5760] usb 5-1: SerialNumber: syz [ 1782.021436][ T5760] usb 5-1: config 0 descriptor?? [ 1782.134643][ T1226] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1782.155444][ T1226] usb 3-1: device descriptor read/8, error -71 [ 1782.275197][ T1226] usb usb3-port1: unable to enumerate USB device [ 1782.322954][T21241] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1782.339614][T21241] usb 4-1: USB disconnect, device number 29 [ 1782.493461][ T5760] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1782.505072][ T5760] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1782.515222][ T5760] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1782.525831][ T5760] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1782.918188][T31937] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1783.195259][ T5632] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1783.366946][ T5632] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.391333][ T5632] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1783.410176][ T5632] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1783.420050][ T5632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.428464][ T5632] usb 4-1: Product: 慄쟘዗ࣣ쪊뛛钼蝄乸ꆠꁅ驔與䀍銱契쥪惓툯藳建ᚄ㣏₼祘婑ꗮ঻gꋪ朗።ﶢ懅ᅲ綶ꎬ៥坷鸱ཬ콭᯵䔛끙䪍㽜덇像嚲ᘿ蠻쐬쟋啑૯ￅᘲ똦堵㊡Ř鶖ຑ㈾駍ꗵ㮉ྋ웧簏ⶃ⺀묚쫠⛹汋丫抝⠹ᄏ煃瑙ꐰ뼋ﱷ呆훶봾굧╹၍꠩Ⓧ줐쐻ူ侐큰爉뿽訜珨菳蠺丨ⰶ骭耲Ꭿ [ 1783.465017][ T5632] usb 4-1: Manufacturer: 䀊 [ 1783.705711][ T5632] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1783.717034][ T5632] usb 4-1: 0:2 : does not exist [ 1783.774377][ T5632] usb 4-1: USB disconnect, device number 30 [ 1783.827022][ T5651] udevd[5651]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1784.088730][T31937] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1784.125277][ T5760] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1784.295577][ T5760] usb 3-1: Using ep0 maxpacket: 8 [ 1784.310956][ T5760] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1784.326417][ T5760] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1784.339152][ T5760] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1784.349893][ T5760] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1784.376484][ T5760] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1784.387035][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.543430][ T552] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8580'. [ 1784.590664][ T5632] usb 5-1: USB disconnect, device number 37 [ 1784.606152][ T1226] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1784.634711][ T5760] usb 3-1: GET_CAPABILITIES returned 0 [ 1784.651358][ T5760] usbtmc 3-1:16.0: can't read capabilities [ 1784.784544][ T1226] usb 4-1: Using ep0 maxpacket: 16 [ 1784.797178][ T1226] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1784.826888][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1784.836809][ T1226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1784.864580][ T1226] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1784.883980][ T5632] usb 3-1: USB disconnect, device number 7 [ 1784.903514][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.951897][ T1226] usb 4-1: config 0 descriptor?? [ 1785.057043][ T559] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8581'. [ 1785.385720][ T1226] hid_parser_main: 33 callbacks suppressed [ 1785.385742][ T1226] lenovo 0003:17EF:6009.007E: unknown main item tag 0x0 [ 1785.401530][ T1226] lenovo 0003:17EF:6009.007E: unknown main item tag 0x0 [ 1785.411121][ T1226] lenovo 0003:17EF:6009.007E: unknown main item tag 0x0 [ 1785.422614][ T1226] lenovo 0003:17EF:6009.007E: unknown main item tag 0x0 [ 1785.441179][ T1226] lenovo 0003:17EF:6009.007E: unknown main item tag 0x0 [ 1785.452855][ T1226] lenovo 0003:17EF:6009.007E: unknown main item tag 0x0 [ 1785.473132][ T1226] lenovo 0003:17EF:6009.007E: unknown main item tag 0x0 [ 1785.490974][ T1226] lenovo 0003:17EF:6009.007E: unknown main item tag 0x0 [ 1785.532552][ T1226] lenovo 0003:17EF:6009.007E: unknown main item tag 0x0 [ 1785.582869][ T1226] lenovo 0003:17EF:6009.007E: unknown main item tag 0x0 [ 1785.646622][ T1226] lenovo 0003:17EF:6009.007E: hidraw0: USB HID v0.0b Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 1785.689078][ T1226] usb 4-1: USB disconnect, device number 31 [ 1785.707585][ T564] FAULT_INJECTION: forcing a failure. [ 1785.707585][ T564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1785.742774][ T562] fido_id[562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1785.761817][ T564] CPU: 0 UID: 0 PID: 564 Comm: syz.0.8584 Tainted: G L syzkaller #0 PREEMPT(full) [ 1785.761848][ T564] Tainted: [L]=SOFTLOCKUP [ 1785.761855][ T564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1785.761865][ T564] Call Trace: [ 1785.761872][ T564] [ 1785.761880][ T564] dump_stack_lvl+0xe8/0x150 [ 1785.761906][ T564] should_fail_ex+0x412/0x560 [ 1785.761939][ T564] _copy_from_user+0x2d/0xb0 [ 1785.761962][ T564] sk_setsockopt+0x26c/0x2d60 [ 1785.761988][ T564] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1785.762013][ T564] ? get_pid_task+0x20/0x1f0 [ 1785.762035][ T564] ? __pfx_sk_setsockopt+0x10/0x10 [ 1785.762061][ T564] ? __lock_acquire+0x6b5/0x2cf0 [ 1785.762096][ T564] ? aa_sk_perm+0x6d5/0x900 [ 1785.762121][ T564] udp_lib_setsockopt+0xbc/0x6b0 [ 1785.762230][ T564] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 1785.762257][ T564] ? __fget_files+0x2a/0x420 [ 1785.762277][ T564] ? aa_sock_opt_perm+0xff/0x1a0 [ 1785.762304][ T564] udpv6_setsockopt+0x67/0xb0 [ 1785.762383][ T564] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 1785.762407][ T564] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1785.762432][ T564] do_sock_setsockopt+0x17c/0x1b0 [ 1785.762462][ T564] __x64_sys_setsockopt+0x13d/0x1b0 [ 1785.762490][ T564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.762511][ T564] do_syscall_64+0x174/0x580 [ 1785.762530][ T564] ? trace_irq_disable+0x3b/0x140 [ 1785.762555][ T564] ? clear_bhb_loop+0x40/0x90 [ 1785.762578][ T564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.762596][ T564] RIP: 0033:0x7f47fe99ce59 [ 1785.762614][ T564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.762629][ T564] RSP: 002b:00007f47fcbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1785.762649][ T564] RAX: ffffffffffffffda RBX: 00007f47fec15fa0 RCX: 00007f47fe99ce59 [ 1785.762665][ T564] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000003 [ 1785.762676][ T564] RBP: 00007f47fcbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.762686][ T564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.762696][ T564] R13: 00007f47fec16038 R14: 00007f47fec15fa0 R15: 00007f47fed3fa48 [ 1785.762723][ T564] [ 1786.105345][T21241] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1786.244669][T21241] usb 3-1: device descriptor read/64, error -71 [ 1786.400713][T31937] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1786.484591][T21241] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1786.646099][T21241] usb 3-1: device descriptor read/64, error -71 [ 1786.755329][T21241] usb usb3-port1: attempt power cycle [ 1786.864689][ T5632] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1786.954551][T13521] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1787.015606][ T5632] usb 4-1: Using ep0 maxpacket: 32 [ 1787.023729][ T5632] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1787.033511][ T5632] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1787.044700][ T5632] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1787.054111][ T5632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1787.069663][ T5632] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1787.079928][ T5632] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1787.096085][ T5632] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1787.105424][T21241] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1787.113983][ T5632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.124365][T13521] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.138056][T21241] usb 3-1: device descriptor read/8, error -71 [ 1787.145816][T13521] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1787.160436][T13521] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1787.181536][ T5632] usb 4-1: config 0 descriptor?? [ 1787.189726][T13521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.216208][T13521] usb 5-1: Product: 慄쟘዗ࣣ쪊뛛钼蝄乸ꆠꁅ驔與䀍銱契쥪惓툯藳建ᚄ㣏₼祘婑ꗮ঻gꋪ朗።ﶢ懅ᅲ綶ꎬ៥坷鸱ཬ콭᯵䔛끙䪍㽜덇像嚲ᘿ蠻쐬쟋啑૯ￅᘲ똦堵㊡Ř鶖ຑ㈾駍ꗵ㮉ྋ웧簏ⶃ⺀묚쫠⛹汋丫抝⠹ᄏ煃瑙ꐰ뼋ﱷ呆훶봾굧╹၍꠩Ⓧ줐쐻ူ侐큰爉뿽訜珨菳蠺丨ⰶ骭耲Ꭿ [ 1787.253142][T13521] usb 5-1: Manufacturer: 䀊 [ 1787.374721][T21241] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1787.395268][T21241] usb 3-1: device descriptor read/8, error -71 [ 1787.409475][ T5632] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1787.424851][T21212] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1787.472405][T13521] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1787.494925][T13521] usb 5-1: 0:2 : does not exist [ 1787.505705][T21241] usb usb3-port1: unable to enumerate USB device [ 1787.551236][T13521] usb 5-1: USB disconnect, device number 38 [ 1787.594862][T21212] usb 1-1: Using ep0 maxpacket: 8 [ 1787.604294][T21212] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1787.618241][T21212] usb 1-1: config 0 has no interface number 0 [ 1787.631692][ T577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.632216][T21212] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1787.642040][ T577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.658839][T21212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.667223][T21241] usb 4-1: USB disconnect, device number 32 [ 1787.677216][T21212] usb 1-1: Product: syz [ 1787.681498][T21212] usb 1-1: Manufacturer: syz [ 1787.687964][T21241] usblp0: removed [ 1787.688680][T21212] usb 1-1: SerialNumber: syz [ 1787.701181][T21212] usb 1-1: config 0 descriptor?? [ 1787.916948][T21212] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1787.924396][T21212] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1787.939328][T21212] usb 1-1: USB disconnect, device number 79 [ 1788.092064][ T588] FAULT_INJECTION: forcing a failure. [ 1788.092064][ T588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.107209][ T588] CPU: 1 UID: 0 PID: 588 Comm: syz.4.8594 Tainted: G L syzkaller #0 PREEMPT(full) [ 1788.107239][ T588] Tainted: [L]=SOFTLOCKUP [ 1788.107246][ T588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1788.107257][ T588] Call Trace: [ 1788.107264][ T588] [ 1788.107273][ T588] dump_stack_lvl+0xe8/0x150 [ 1788.107300][ T588] should_fail_ex+0x412/0x560 [ 1788.107326][ T588] _copy_to_user+0x31/0xb0 [ 1788.107350][ T588] simple_read_from_buffer+0xe1/0x170 [ 1788.107375][ T588] proc_fail_nth_read+0x1bb/0x230 [ 1788.107394][ T588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1788.107409][ T588] ? rw_verify_area+0x2a6/0x4d0 [ 1788.107423][ T588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1788.107437][ T588] vfs_read+0x20c/0xa70 [ 1788.107453][ T588] ? __pfx___mutex_lock+0x10/0x10 [ 1788.107466][ T588] ? __pfx_vfs_read+0x10/0x10 [ 1788.107480][ T588] ? __fget_files+0x2a/0x420 [ 1788.107495][ T588] ? __fget_files+0x3a0/0x420 [ 1788.107509][ T588] ? __fget_files+0x2a/0x420 [ 1788.107526][ T588] ksys_read+0x150/0x270 [ 1788.107541][ T588] ? __pfx_ksys_read+0x10/0x10 [ 1788.107554][ T588] ? __pfx_sock_ioctl+0x10/0x10 [ 1788.107571][ T588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.107582][ T588] do_syscall_64+0x174/0x580 [ 1788.107593][ T588] ? trace_irq_disable+0x3b/0x140 [ 1788.107608][ T588] ? clear_bhb_loop+0x40/0x90 [ 1788.107620][ T588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.107630][ T588] RIP: 0033:0x7f3bfaf5d68e [ 1788.107641][ T588] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1788.107650][ T588] RSP: 002b:00007f3bfbdd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1788.107662][ T588] RAX: ffffffffffffffda RBX: 00007f3bfbdd56c0 RCX: 00007f3bfaf5d68e [ 1788.107670][ T588] RDX: 000000000000000f RSI: 00007f3bfbdd50a0 RDI: 0000000000000004 [ 1788.107676][ T588] RBP: 00007f3bfbdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.107682][ T588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.107688][ T588] R13: 00007f3bfb216038 R14: 00007f3bfb215fa0 R15: 00007f3bfb33fa48 [ 1788.107704][ T588] [ 1788.400752][ T592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.440310][ T592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.540926][ T600] FAULT_INJECTION: forcing a failure. [ 1788.540926][ T600] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.565422][ T600] CPU: 1 UID: 0 PID: 600 Comm: syz.4.8600 Tainted: G L syzkaller #0 PREEMPT(full) [ 1788.565453][ T600] Tainted: [L]=SOFTLOCKUP [ 1788.565460][ T600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1788.565472][ T600] Call Trace: [ 1788.565479][ T600] [ 1788.565488][ T600] dump_stack_lvl+0xe8/0x150 [ 1788.565515][ T600] should_fail_ex+0x412/0x560 [ 1788.565541][ T600] should_failslab+0xa8/0x100 [ 1788.565562][ T600] __kmalloc_noprof+0xe8/0x760 [ 1788.565587][ T600] ? tomoyo_encode+0x28b/0x550 [ 1788.565619][ T600] tomoyo_encode+0x28b/0x550 [ 1788.565650][ T600] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1788.565677][ T600] ? tomoyo_path_number_perm+0x219/0x630 [ 1788.565701][ T600] tomoyo_path_number_perm+0x246/0x630 [ 1788.565727][ T600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1788.565750][ T600] ? __lock_acquire+0x6b5/0x2cf0 [ 1788.565784][ T600] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1788.565825][ T600] ? __fget_files+0x2a/0x420 [ 1788.565849][ T600] ? __fget_files+0x2a/0x420 [ 1788.565869][ T600] ? __fget_files+0x3a0/0x420 [ 1788.565889][ T600] ? __fget_files+0x2a/0x420 [ 1788.565914][ T600] security_file_ioctl+0xc3/0x2a0 [ 1788.565939][ T600] __se_sys_ioctl+0x47/0x170 [ 1788.565964][ T600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.565984][ T600] do_syscall_64+0x174/0x580 [ 1788.566002][ T600] ? trace_irq_disable+0x3b/0x140 [ 1788.566027][ T600] ? clear_bhb_loop+0x40/0x90 [ 1788.566049][ T600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.566067][ T600] RIP: 0033:0x7f3bfaf9ce59 [ 1788.566085][ T600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.566101][ T600] RSP: 002b:00007f3bfbdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1788.566120][ T600] RAX: ffffffffffffffda RBX: 00007f3bfb215fa0 RCX: 00007f3bfaf9ce59 [ 1788.566134][ T600] RDX: 00002000000000c0 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1788.566146][ T600] RBP: 00007f3bfbdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.566157][ T600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.566168][ T600] R13: 00007f3bfb216038 R14: 00007f3bfb215fa0 R15: 00007f3bfb33fa48 [ 1788.566198][ T600] [ 1788.566486][ T600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1789.024671][T21241] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1789.094588][ T5632] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1789.175753][T21241] usb 1-1: Using ep0 maxpacket: 32 [ 1789.183074][T21241] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1789.192608][T21241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.204295][T21241] usb 1-1: config 0 descriptor?? [ 1789.220884][T21241] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1789.245783][ T5632] usb 5-1: Using ep0 maxpacket: 32 [ 1789.255221][T13521] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1789.264386][ T5632] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1789.272826][ T5632] usb 5-1: config 0 has no interface number 0 [ 1789.280750][ T5632] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1789.290723][ T5632] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1789.300245][ T5632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.308585][ T5632] usb 5-1: Product: syz [ 1789.312862][ T5632] usb 5-1: Manufacturer: syz [ 1789.318128][ T5632] usb 5-1: SerialNumber: syz [ 1789.327516][ T5632] usb 5-1: config 0 descriptor?? [ 1789.426681][T13521] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.438633][T13521] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.451775][T13521] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1789.465704][T13521] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1789.475106][T13521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.488881][T13521] usb 4-1: config 0 descriptor?? [ 1789.551260][ T612] FAULT_INJECTION: forcing a failure. [ 1789.551260][ T612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.566240][ T612] CPU: 0 UID: 0 PID: 612 Comm: syz.2.8605 Tainted: G L syzkaller #0 PREEMPT(full) [ 1789.566269][ T612] Tainted: [L]=SOFTLOCKUP [ 1789.566277][ T612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1789.566291][ T612] Call Trace: [ 1789.566299][ T612] [ 1789.566307][ T612] dump_stack_lvl+0xe8/0x150 [ 1789.566334][ T612] should_fail_ex+0x412/0x560 [ 1789.566360][ T612] _copy_to_user+0x31/0xb0 [ 1789.566384][ T612] simple_read_from_buffer+0xe1/0x170 [ 1789.566411][ T612] proc_fail_nth_read+0x1bb/0x230 [ 1789.566437][ T612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1789.566463][ T612] ? rw_verify_area+0x2a6/0x4d0 [ 1789.566488][ T612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1789.566512][ T612] vfs_read+0x20c/0xa70 [ 1789.566541][ T612] ? __pfx___mutex_lock+0x10/0x10 [ 1789.566562][ T612] ? __pfx_vfs_read+0x10/0x10 [ 1789.566588][ T612] ? __fget_files+0x2a/0x420 [ 1789.566613][ T612] ? __fget_files+0x3a0/0x420 [ 1789.566634][ T612] ? __fget_files+0x2a/0x420 [ 1789.566670][ T612] ksys_read+0x150/0x270 [ 1789.566696][ T612] ? __pfx_ksys_read+0x10/0x10 [ 1789.566728][ T612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.566749][ T612] do_syscall_64+0x174/0x580 [ 1789.566769][ T612] ? clear_bhb_loop+0x40/0x90 [ 1789.566791][ T612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.566810][ T612] RIP: 0033:0x7f5c9935d68e [ 1789.566827][ T612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1789.566842][ T612] RSP: 002b:00007f5c9a2befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1789.566862][ T612] RAX: ffffffffffffffda RBX: 00007f5c9a2bf6c0 RCX: 00007f5c9935d68e [ 1789.566875][ T612] RDX: 000000000000000f RSI: 00007f5c9a2bf0a0 RDI: 0000000000000004 [ 1789.566886][ T612] RBP: 00007f5c9a2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.566897][ T612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.566908][ T612] R13: 00007f5c99616038 R14: 00007f5c99615fa0 R15: 00007f5c9973fa48 [ 1789.566938][ T612] [ 1790.023546][ T5632] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1790.044893][ T5632] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1790.065752][ T5632] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1790.082741][ T5632] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1790.091930][T13521] plantronics 0003:047F:FFFF.007F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1790.111362][ T5632] usb 5-1: USB disconnect, device number 39 [ 1790.274545][T21212] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1790.438147][T21212] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1790.457533][T21212] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1790.482802][T21212] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1790.493054][T21212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.508939][T21212] usb 3-1: Product: syz [ 1790.515215][T21212] usb 3-1: Manufacturer: syz [ 1790.519979][T21212] usb 3-1: SerialNumber: syz [ 1790.546955][T21241] gspca_vc032x: reg_w err -110 [ 1790.556113][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.563357][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.572213][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.580232][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.587634][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.593231][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.605724][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.613418][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.621502][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.630708][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.642551][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.657271][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.667960][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.673348][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.683020][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.688693][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.696531][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.702448][T21241] gspca_vc032x: I2c Bus Busy Wait 00 [ 1790.709304][T21241] gspca_vc032x: Unknown sensor... [ 1790.715010][T21241] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1790.766726][T21212] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1790.776532][T21212] usb 3-1: unit 6 not found! [ 1790.844000][T21212] usb 3-1: USB disconnect, device number 12 [ 1790.893108][T25140] udevd[25140]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1790.924163][T13521] usb 1-1: USB disconnect, device number 80 [ 1791.155620][T21241] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1791.314890][T21241] usb 5-1: Using ep0 maxpacket: 8 [ 1791.327981][T21241] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.356357][T21241] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1791.379306][T21241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1791.394736][ C1] plantronics 0003:047F:FFFF.007F: usb_submit_urb(ctrl) failed: -1 [ 1791.414325][T21241] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1791.434567][T21241] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1791.453284][T21241] usb 5-1: Product: syz [ 1791.474563][T21241] usb 5-1: Manufacturer: syz [ 1791.480781][T21241] usb 5-1: SerialNumber: syz [ 1791.491674][T21241] usb 5-1: config 0 descriptor?? [ 1791.505155][ T647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8614'. [ 1791.515460][T21241] imon_raw 5-1:0.0: IR endpoint missing [ 1791.586651][ T647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8614'. [ 1791.618708][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.626464][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.746960][ T639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.781140][ T639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.936563][T21241] usb 5-1: USB disconnect, device number 40 [ 1791.947937][ T657] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8616'. [ 1792.176067][T13327] usb 4-1: USB disconnect, device number 33 [ 1792.513667][ T665] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1792.527197][ T665] bond11 (unregistering): Released all slaves [ 1792.695463][ T670] FAULT_INJECTION: forcing a failure. [ 1792.695463][ T670] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.748820][ T670] CPU: 1 UID: 0 PID: 670 Comm: syz.4.8622 Tainted: G L syzkaller #0 PREEMPT(full) [ 1792.748851][ T670] Tainted: [L]=SOFTLOCKUP [ 1792.748858][ T670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1792.748868][ T670] Call Trace: [ 1792.748875][ T670] [ 1792.748884][ T670] dump_stack_lvl+0xe8/0x150 [ 1792.748911][ T670] should_fail_ex+0x412/0x560 [ 1792.748936][ T670] should_failslab+0xa8/0x100 [ 1792.748954][ T670] ? skb_clone+0x212/0x3a0 [ 1792.748973][ T670] kmem_cache_alloc_noprof+0x87/0x650 [ 1792.749006][ T670] ? __netlink_lookup+0xc6/0x8b0 [ 1792.749029][ T670] skb_clone+0x212/0x3a0 [ 1792.749051][ T670] __netlink_deliver_tap+0x404/0x850 [ 1792.749089][ T670] ? netlink_deliver_tap+0x2e/0x1b0 [ 1792.749116][ T670] netlink_deliver_tap+0x19c/0x1b0 [ 1792.749143][ T670] netlink_unicast+0x730/0x8e0 [ 1792.749176][ T670] netlink_sendmsg+0x813/0xb40 [ 1792.749203][ T670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1792.749225][ T670] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1792.749252][ T670] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1792.749280][ T670] ____sys_sendmsg+0x972/0x9f0 [ 1792.749298][ T670] ? __might_fault+0xaf/0x130 [ 1792.749327][ T670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1792.749353][ T670] ? import_iovec+0x73/0xa0 [ 1792.749378][ T670] ___sys_sendmsg+0x2a5/0x360 [ 1792.749396][ T670] ? __lock_acquire+0x6b5/0x2cf0 [ 1792.749420][ T670] ? __pfx____sys_sendmsg+0x10/0x10 [ 1792.749471][ T670] ? __fget_files+0x2a/0x420 [ 1792.749492][ T670] ? __fget_files+0x3a0/0x420 [ 1792.749522][ T670] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1792.749543][ T670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1792.749571][ T670] ? __pfx_ksys_write+0x10/0x10 [ 1792.749604][ T670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.749623][ T670] do_syscall_64+0x174/0x580 [ 1792.749642][ T670] ? trace_irq_disable+0x3b/0x140 [ 1792.749668][ T670] ? clear_bhb_loop+0x40/0x90 [ 1792.749689][ T670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.749707][ T670] RIP: 0033:0x7f3bfaf9ce59 [ 1792.749724][ T670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1792.749739][ T670] RSP: 002b:00007f3bfbdd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1792.749759][ T670] RAX: ffffffffffffffda RBX: 00007f3bfb215fa0 RCX: 00007f3bfaf9ce59 [ 1792.749772][ T670] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1792.749784][ T670] RBP: 00007f3bfbdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.749796][ T670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1792.749808][ T670] R13: 00007f3bfb216038 R14: 00007f3bfb215fa0 R15: 00007f3bfb33fa48 [ 1792.749838][ T670] [ 1793.296170][T21241] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1793.334687][T13521] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1793.444542][T32346] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1793.458923][T21241] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.476902][T21241] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1793.489898][T21241] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1793.499646][T21241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.507898][T21241] usb 4-1: Product: syz [ 1793.513038][T21241] usb 4-1: Manufacturer: syz [ 1793.518549][T13521] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 1793.527588][T21241] usb 4-1: SerialNumber: syz [ 1793.532846][T13521] usb 1-1: config 0 has no interface number 0 [ 1793.544273][T21241] usb 4-1: config 0 descriptor?? [ 1793.551814][T13521] usb 1-1: config 0 interface 101 has no altsetting 0 [ 1793.565149][T13521] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1793.574551][T13521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.582579][T13521] usb 1-1: Product: syz [ 1793.587875][T13521] usb 1-1: Manufacturer: syz [ 1793.592906][T13521] usb 1-1: SerialNumber: syz [ 1793.602119][T13521] usb 1-1: config 0 descriptor?? [ 1793.607234][T32346] usb 5-1: Using ep0 maxpacket: 32 [ 1793.617869][T32346] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1793.630591][T32346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.669736][T32346] usb 5-1: config 0 descriptor?? [ 1793.687626][T32346] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1793.770085][ T675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1793.779099][ T675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.788158][T21241] usb 4-1: USB disconnect, device number 34 [ 1793.890768][T21212] usb 1-1: USB disconnect, device number 81 [ 1793.984597][T13521] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1794.142267][T13521] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 1794.152078][T13521] usb 3-1: config 0 has no interface number 0 [ 1794.158555][T13521] usb 3-1: config 0 interface 101 has no altsetting 0 [ 1794.171248][T13521] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1794.187577][T13521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.196664][T13521] usb 3-1: Product: syz [ 1794.200880][T13521] usb 3-1: Manufacturer: syz [ 1794.205613][T13521] usb 3-1: SerialNumber: syz [ 1794.212486][T13521] usb 3-1: config 0 descriptor?? [ 1794.803879][T13521] usb 3-1: USB disconnect, device number 13 [ 1794.816569][T32346] gspca_vc032x: reg_w err -110 [ 1794.833678][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.845993][T21212] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1794.849355][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.873532][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.893671][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.901524][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.907548][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.913047][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.918560][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.924068][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.932267][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.939351][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.946270][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.951761][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.958091][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.963618][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.972798][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.981519][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.987217][T32346] gspca_vc032x: I2c Bus Busy Wait 00 [ 1794.993381][T32346] gspca_vc032x: Unknown sensor... [ 1795.001532][T32346] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1795.023235][ T699] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1795.047155][T21212] usb 1-1: Using ep0 maxpacket: 16 [ 1795.061359][T21212] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1795.079240][T21212] usb 1-1: config 4 has an invalid interface number: 55 but max is 0 [ 1795.105580][T21212] usb 1-1: config 4 has no interface number 0 [ 1795.117977][T21212] usb 1-1: config 4 interface 55 has no altsetting 0 [ 1795.153788][T21212] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 1795.190938][T21212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.201351][T21212] usb 1-1: Product: syz [ 1795.218961][T21212] usb 1-1: Manufacturer: syz [ 1795.223646][T21212] usb 1-1: SerialNumber: syz [ 1795.379786][T21241] usb 5-1: USB disconnect, device number 41 [ 1795.440275][ T700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8632'. [ 1795.452373][ T698] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8632'. [ 1795.502885][ T698] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8632'. [ 1795.575944][T21212] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1795.582352][T21212] gspca_mr97310a: reg write [21] error -22 [ 1795.588499][T21212] mr97310a 1-1:4.55: probe with driver mr97310a failed with error -22 [ 1795.600067][T21212] usb 1-1: USB disconnect, device number 82 [ 1795.985085][T13521] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1796.015238][ T723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8637'. [ 1796.059377][T31937] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1796.136134][T13521] usb 3-1: device descriptor read/64, error -71 [ 1796.354615][T32346] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1796.394589][T13521] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1796.434732][T21241] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1796.505212][T32346] usb 5-1: Using ep0 maxpacket: 8 [ 1796.511878][T32346] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1796.521410][T32346] usb 5-1: config 0 has no interface number 0 [ 1796.527968][T13521] usb 3-1: device descriptor read/64, error -71 [ 1796.536242][T32346] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1796.545629][T32346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.553622][T32346] usb 5-1: Product: syz [ 1796.558273][T32346] usb 5-1: Manufacturer: syz [ 1796.562876][T32346] usb 5-1: SerialNumber: syz [ 1796.569970][T32346] usb 5-1: config 0 descriptor?? [ 1796.585019][T21241] usb 1-1: Using ep0 maxpacket: 16 [ 1796.592120][T21241] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1796.601009][T21241] usb 1-1: config 4 has an invalid interface number: 55 but max is 0 [ 1796.609198][T21241] usb 1-1: config 4 has no interface number 0 [ 1796.615589][T21241] usb 1-1: config 4 interface 55 has no altsetting 0 [ 1796.626571][T21241] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 1796.635719][T21241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.643709][T21241] usb 1-1: Product: syz [ 1796.648223][T21241] usb 1-1: Manufacturer: syz [ 1796.653074][T13521] usb usb3-port1: attempt power cycle [ 1796.659268][T21241] usb 1-1: SerialNumber: syz [ 1796.785072][T32346] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1796.804609][T32346] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1796.827188][T32346] usb 5-1: USB disconnect, device number 42 [ 1796.881909][ T730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8640'. [ 1796.895325][ T729] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8640'. [ 1796.928407][ T729] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8640'. [ 1797.004909][T13521] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1797.025311][T13521] usb 3-1: device descriptor read/8, error -71 [ 1797.036572][T21241] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1797.042896][T21241] gspca_mr97310a: reg write [21] error -22 [ 1797.048985][T21241] mr97310a 1-1:4.55: probe with driver mr97310a failed with error -22 [ 1797.059587][T21241] usb 1-1: USB disconnect, device number 83 [ 1797.104590][T13327] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1797.264536][T13521] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1797.266204][T13327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.283924][T13327] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1797.297502][T13327] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1797.303527][T13521] usb 3-1: device descriptor read/8, error -71 [ 1797.311834][T13327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.321848][T13327] usb 4-1: Product: syz [ 1797.326955][T13327] usb 4-1: Manufacturer: syz [ 1797.331850][T13327] usb 4-1: SerialNumber: syz [ 1797.342967][T13327] usb 4-1: config 0 descriptor?? [ 1797.435109][T13521] usb usb3-port1: unable to enumerate USB device [ 1797.571258][ T732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.601239][ T732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.629270][T13327] usb 4-1: USB disconnect, device number 35 [ 1798.024726][ T756] __vm_enough_memory: pid: 756, comm: syz.0.8647, bytes: 4503599627366400 not enough memory for the allocation [ 1798.297080][T31937] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1798.666131][ T5760] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1798.838103][ T770] tipc: Started in network mode [ 1798.843861][ T770] tipc: Node identity 5a40438a5434, cluster identity 4711 [ 1798.852589][ T5760] usb 5-1: Using ep0 maxpacket: 16 [ 1798.852762][ T770] tipc: Enabled bearer , priority 0 [ 1798.860333][ T5760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1798.887453][ T770] syzkaller0: entered promiscuous mode [ 1798.897804][ T770] syzkaller0: entered allmulticast mode [ 1798.898851][ T5760] usb 5-1: config 4 has an invalid interface number: 55 but max is 0 [ 1798.916320][ T5760] usb 5-1: config 4 has no interface number 0 [ 1798.943915][ T5760] usb 5-1: config 4 interface 55 has no altsetting 0 [ 1798.953150][ T5760] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 1798.962629][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.973729][ T770] tipc: Resetting bearer [ 1798.981764][ T5760] usb 5-1: Product: syz [ 1798.992590][ T5760] usb 5-1: Manufacturer: syz [ 1799.002109][ T5760] usb 5-1: SerialNumber: syz [ 1799.144840][T21241] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1799.244821][T32346] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1799.253899][ T765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8650'. [ 1799.266173][ T765] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8650'. [ 1799.304090][T21241] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.322309][T21241] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1799.336527][ T765] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8650'. [ 1799.355212][T21241] usb 3-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1799.367769][T21241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.386385][T21241] usb 3-1: Product: 慄쟘዗ࣣ쪊뛛钼蝄乸ꆠꁅ驔與䀍銱契쥪惓툯藳建ᚄ㣏₼祘婑ꗮ঻gꋪ朗።ﶢ懅ᅲ綶ꎬ៥坷鸱ཬ콭᯵䔛끙䪍㽜덇像嚲ᘿ蠻쐬쟋啑૯ￅᘲ똦堵㊡Ř鶖ຑ㈾駍ꗵ㮉ྋ웧簏ⶃ⺀묚쫠⛹汋丫抝⠹ᄏ煃瑙ꐰ뼋ﱷ呆훶봾굧╹၍꠩Ⓧ줐쐻ူ侐큰爉뿽訜珨菳蠺丨ⰶ骭耲Ꭿ [ 1799.434712][T32346] usb 1-1: Using ep0 maxpacket: 8 [ 1799.458546][T21241] usb 3-1: Manufacturer: 䀊 [ 1799.465049][T32346] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1799.474711][T32346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.482767][T32346] usb 1-1: Product: syz [ 1799.490096][T32346] usb 1-1: Manufacturer: syz [ 1799.496993][T32346] usb 1-1: SerialNumber: syz [ 1799.509108][T32346] usb 1-1: config 0 descriptor?? [ 1799.519853][T32346] gspca_main: se401-2.14.0 probing 047d:5003 [ 1799.562394][ T5760] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1799.571948][ T5760] gspca_mr97310a: reg write [21] error -22 [ 1799.579614][ T5760] mr97310a 5-1:4.55: probe with driver mr97310a failed with error -22 [ 1799.593100][ T5760] usb 5-1: USB disconnect, device number 43 [ 1799.712789][T21241] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1799.723767][T21241] usb 3-1: 0:2 : does not exist [ 1799.767823][T21241] usb 3-1: USB disconnect, device number 18 [ 1799.922805][T32346] gspca_se401: Bayer format not supported! [ 1799.974667][T32346] tipc: Node number set to 242500490 [ 1800.112179][T31937] Bluetooth: hci1: unexpected event 0x04 length: 3 < 10 [ 1800.361576][ T779] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1800.367777][ T779] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1800.447538][ T779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1800.454145][ T779] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1800.514546][ T5760] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1800.536072][ T779] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1800.542509][ T779] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1800.578862][ T779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1800.585504][ T779] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1800.674848][ T5760] usb 3-1: Using ep0 maxpacket: 8 [ 1800.685765][ T5760] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1800.699166][ T5760] usb 3-1: config 0 has no interface number 0 [ 1800.713513][ T5760] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1800.730273][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.748058][ T5760] usb 3-1: Product: syz [ 1800.752276][ T5760] usb 3-1: Manufacturer: syz [ 1800.758325][ T5760] usb 3-1: SerialNumber: syz [ 1800.760326][ T791] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8656'. [ 1800.766378][ T5760] usb 3-1: config 0 descriptor?? [ 1800.994132][ T5760] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1801.007151][ T5760] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1801.036002][ T5760] usb 3-1: USB disconnect, device number 19 [ 1801.370903][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8661'. [ 1801.412989][ T804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1801.603766][ T809] netlink: 'syz.1.8663': attribute type 10 has an invalid length. [ 1801.644611][ T5760] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1801.804552][ T5760] usb 4-1: device descriptor read/64, error -71 [ 1801.822574][T21241] usb 1-1: USB disconnect, device number 84 [ 1801.834353][ T817] FAULT_INJECTION: forcing a failure. [ 1801.834353][ T817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1801.867802][ T817] CPU: 0 UID: 0 PID: 817 Comm: syz.4.8666 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.867832][ T817] Tainted: [L]=SOFTLOCKUP [ 1801.867839][ T817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1801.867850][ T817] Call Trace: [ 1801.867858][ T817] [ 1801.867866][ T817] dump_stack_lvl+0xe8/0x150 [ 1801.867893][ T817] should_fail_ex+0x412/0x560 [ 1801.867918][ T817] _copy_from_user+0x2d/0xb0 [ 1801.867941][ T817] do_fb_ioctl+0x392/0x800 [ 1801.867966][ T817] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1801.868024][ T817] ? __fget_files+0x2a/0x420 [ 1801.868050][ T817] ? __fget_files+0x3a0/0x420 [ 1801.868070][ T817] ? __fget_files+0x2a/0x420 [ 1801.868094][ T817] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1801.868119][ T817] ? __pfx_fb_ioctl+0x10/0x10 [ 1801.868139][ T817] __se_sys_ioctl+0xfc/0x170 [ 1801.868165][ T817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.868185][ T817] do_syscall_64+0x174/0x580 [ 1801.868204][ T817] ? trace_irq_disable+0x3b/0x140 [ 1801.868237][ T817] ? clear_bhb_loop+0x40/0x90 [ 1801.868259][ T817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.868277][ T817] RIP: 0033:0x7f3bfaf9ce59 [ 1801.868295][ T817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.868311][ T817] RSP: 002b:00007f3bfbdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1801.868330][ T817] RAX: ffffffffffffffda RBX: 00007f3bfb215fa0 RCX: 00007f3bfaf9ce59 [ 1801.868344][ T817] RDX: 00002000000001c0 RSI: 0000000000004601 RDI: 0000000000000003 [ 1801.868356][ T817] RBP: 00007f3bfbdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.868367][ T817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1801.868378][ T817] R13: 00007f3bfb216038 R14: 00007f3bfb215fa0 R15: 00007f3bfb33fa48 [ 1801.868407][ T817] [ 1802.044693][ T5760] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1802.097695][ T770] tipc: Resetting bearer [ 1802.143020][ T770] tipc: Disabling bearer [ 1802.215578][ T5760] usb 4-1: device descriptor read/64, error -71 [ 1802.327049][ T5760] usb usb4-port1: attempt power cycle [ 1802.515577][T13328] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1802.575416][T21241] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1802.675579][ T5760] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1802.678649][T13328] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1802.704708][T13328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.715254][ T5760] usb 4-1: device descriptor read/8, error -71 [ 1802.720479][T13328] usb 1-1: config 0 descriptor?? [ 1802.766726][T21241] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 1802.784513][T21241] usb 5-1: config 0 has no interface number 0 [ 1802.804510][T21241] usb 5-1: config 0 interface 101 has no altsetting 0 [ 1802.814720][T21241] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1802.834830][T21241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.844392][T21241] usb 5-1: Product: syz [ 1802.854635][T21241] usb 5-1: Manufacturer: syz [ 1802.864478][T21241] usb 5-1: SerialNumber: syz [ 1802.878094][T21241] usb 5-1: config 0 descriptor?? [ 1802.943867][ T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.965232][ T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.966721][ T5760] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1803.000176][T13328] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1803.015338][ T5760] usb 4-1: device descriptor read/8, error -71 [ 1803.031369][T13328] [drm:udl_init] *ERROR* Selecting channel failed [ 1803.061237][T13328] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1803.080669][T13328] [drm] Initialized udl on minor 2 [ 1803.090095][T13328] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1803.112757][T13328] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1803.125617][T21241] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1803.139900][ T5760] usb usb4-port1: unable to enumerate USB device [ 1803.149621][T21241] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1803.157432][T13328] usb 1-1: USB disconnect, device number 85 [ 1803.232078][T21241] usb 5-1: USB disconnect, device number 44 [ 1804.112775][ T851] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1804.359782][ T859] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0025 with DS=0x6 [ 1804.498906][ T865] FAULT_INJECTION: forcing a failure. [ 1804.498906][ T865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1804.517225][ T865] CPU: 0 UID: 0 PID: 865 Comm: syz.3.8683 Tainted: G L syzkaller #0 PREEMPT(full) [ 1804.517257][ T865] Tainted: [L]=SOFTLOCKUP [ 1804.517264][ T865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1804.517275][ T865] Call Trace: [ 1804.517283][ T865] [ 1804.517292][ T865] dump_stack_lvl+0xe8/0x150 [ 1804.517318][ T865] should_fail_ex+0x412/0x560 [ 1804.517342][ T865] _copy_from_user+0x2d/0xb0 [ 1804.517365][ T865] kstrtouint_from_user+0xd6/0x180 [ 1804.517386][ T865] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1804.517421][ T865] proc_fail_nth_write+0x8e/0x210 [ 1804.517445][ T865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1804.517474][ T865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1804.517499][ T865] vfs_write+0x29a/0xb90 [ 1804.517533][ T865] ? __pfx_vfs_write+0x10/0x10 [ 1804.517559][ T865] ? __fget_files+0x2a/0x420 [ 1804.517585][ T865] ? __fget_files+0x3a0/0x420 [ 1804.517605][ T865] ? __fget_files+0x2a/0x420 [ 1804.517634][ T865] ksys_write+0x150/0x270 [ 1804.517660][ T865] ? __pfx_ksys_write+0x10/0x10 [ 1804.517696][ T865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.517716][ T865] do_syscall_64+0x174/0x580 [ 1804.517735][ T865] ? trace_irq_disable+0x3b/0x140 [ 1804.517761][ T865] ? clear_bhb_loop+0x40/0x90 [ 1804.517783][ T865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.517801][ T865] RIP: 0033:0x7fdee635d68e [ 1804.517819][ T865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1804.517835][ T865] RSP: 002b:00007fdee718bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1804.517853][ T865] RAX: ffffffffffffffda RBX: 00007fdee718c6c0 RCX: 00007fdee635d68e [ 1804.517866][ T865] RDX: 0000000000000001 RSI: 00007fdee718c0a0 RDI: 000000000000000b [ 1804.517878][ T865] RBP: 00007fdee718c090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.517890][ T865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1804.517900][ T865] R13: 00007fdee6616038 R14: 00007fdee6615fa0 R15: 00007fdee673fa48 [ 1804.517930][ T865] [ 1804.794840][ T5760] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1804.952050][ T5760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1804.966035][ T5760] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1804.975607][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.989448][ T5760] usb 5-1: config 0 descriptor?? [ 1805.184938][T21212] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1805.336441][T21212] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1805.354515][T21212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.376755][T21212] usb 3-1: config 0 descriptor?? [ 1805.417911][ T850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8679'. [ 1805.433622][ T5760] usbhid 5-1:0.0: can't add hid device: -71 [ 1805.444575][ T5760] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1805.456232][ T5760] usb 5-1: USB disconnect, device number 45 [ 1805.588130][ T872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.600187][ T872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.617550][T21212] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1805.636258][T21212] [drm:udl_init] *ERROR* Selecting channel failed [ 1805.684247][T21212] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1805.704977][T21212] [drm] Initialized udl on minor 2 [ 1805.712713][T21212] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1805.730724][T21212] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1805.747266][ T5760] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1805.759088][T21212] usb 3-1: USB disconnect, device number 20 [ 1805.767074][ T5760] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1806.134517][ T5760] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1806.306530][ T5760] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 1806.326615][ T5760] usb 1-1: config 0 has no interface number 0 [ 1806.345919][ T5760] usb 1-1: config 0 interface 101 has no altsetting 0 [ 1806.364359][ T5760] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1806.373958][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.390957][ T5760] usb 1-1: Product: syz [ 1806.399909][ T5760] usb 1-1: Manufacturer: syz [ 1806.416032][ T5760] usb 1-1: SerialNumber: syz [ 1806.436685][ T5760] usb 1-1: config 0 descriptor?? [ 1806.790905][T21241] usb 1-1: USB disconnect, device number 86 [ 1808.238843][ T913] sg_write: data in/out 714558/136 bytes for SCSI command 0x0-- guessing data in; [ 1808.238843][ T913] program syz.1.8699 not setting count and/or reply_len properly [ 1808.712736][ T917] bond13: Unable to set up delay as MII monitoring is disabled [ 1808.884763][ T917] bond13 (unregistering): Released all slaves [ 1809.184844][T21241] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1809.384994][T21241] usb 5-1: Using ep0 maxpacket: 16 [ 1809.392741][T21241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1809.405716][T21241] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1809.416538][T21241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.441679][T21241] usb 5-1: Product: syz [ 1809.448932][T21241] usb 5-1: Manufacturer: syz [ 1809.458651][T21241] usb 5-1: SerialNumber: syz [ 1809.494589][T21241] usb 5-1: config 0 descriptor?? [ 1809.517594][T21241] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1809.535687][T21241] usb 5-1: Detected FT232R [ 1809.604589][T13521] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1809.717184][T21241] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1809.719871][ T928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.741574][ T928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.756509][T13521] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1809.783814][T13521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.819488][T13521] usb 1-1: config 0 descriptor?? [ 1809.843429][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034cd4000: rx timeout, send abort [ 1810.037772][ T937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.054077][T21241] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32 [ 1810.061955][ T937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.085688][T21241] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1810.106642][T13521] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1810.125733][T21241] usb 5-1: USB disconnect, device number 46 [ 1810.133002][T13521] [drm:udl_init] *ERROR* Selecting channel failed [ 1810.145469][T21241] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1810.167596][T21241] ftdi_sio 5-1:0.0: device disconnected [ 1810.174187][T13521] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1810.213325][T13521] [drm] Initialized udl on minor 2 [ 1810.232670][T13521] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1810.247141][T13521] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1810.262105][T32346] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1810.274666][T32346] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1810.283353][T13521] usb 1-1: USB disconnect, device number 87 [ 1810.351689][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034cd4000: abort rx timeout. Force session deactivation [ 1810.421694][ T952] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8705'. [ 1810.683506][ T955] trusted_key: encrypted_key: keyword 'updatP' not recognized [ 1811.204538][T13521] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1811.386917][T13521] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.398936][T13521] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1811.437233][T13521] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1811.458621][T13521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1811.469941][T13521] usb 5-1: Product: syz [ 1811.474164][T13521] usb 5-1: Manufacturer: syz [ 1811.484277][T13521] usb 5-1: SerialNumber: syz [ 1811.554393][ T977] netlink: 'syz.2.8713': attribute type 8 has an invalid length. [ 1811.935040][T13521] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1811.955719][T32346] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1811.985955][ T994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8720'. [ 1812.116491][T13521] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.127138][T13521] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1812.136362][T13521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.145280][T32346] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 1812.155221][T13521] usb 1-1: config 0 descriptor?? [ 1812.166787][T13521] rndis_host 1-1:0.0: rndis: master #0/ffff888048eb2000 slave #1/0000000000000000 [ 1812.179855][T32346] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1812.190717][T32346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.198826][T32346] usb 3-1: Product: syz [ 1812.203018][T32346] usb 3-1: Manufacturer: syz [ 1812.207861][T32346] usb 3-1: SerialNumber: syz [ 1812.231598][T13521] usb 5-1: USB disconnect, device number 47 [ 1812.370284][T21241] usb 1-1: USB disconnect, device number 88 [ 1812.429470][ T981] fuse: Bad value for 'rootmode' [ 1813.669644][ T998] Cannot find del_set index 0 as target [ 1814.195603][ T1019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8729'. [ 1814.659058][T32346] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1814.693123][T32346] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1814.712974][T32346] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1814.718897][ T1226] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1814.739889][T32346] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1814.760853][T32346] usb 3-1: USB disconnect, device number 21 [ 1814.895119][ T1226] usb 4-1: Using ep0 maxpacket: 16 [ 1814.901832][ T1226] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1814.911582][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.921564][ T1226] usb 4-1: config 0 descriptor?? [ 1814.930829][ T1226] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1814.944769][ T5760] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1815.095183][ T5760] usb 1-1: no configurations [ 1815.099826][ T5760] usb 1-1: can't read configurations, error -22 [ 1815.115109][T21241] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1815.234845][ T5760] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1815.266830][T21241] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1815.275160][T21241] usb 5-1: config 0 has no interface number 0 [ 1815.283492][T21241] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1815.292787][T21241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.304906][T21241] usb 5-1: Product: syz [ 1815.309248][T21241] usb 5-1: Manufacturer: syz [ 1815.313868][T21241] usb 5-1: SerialNumber: syz [ 1815.321106][T21241] usb 5-1: config 0 descriptor?? [ 1815.395235][ T5760] usb 1-1: no configurations [ 1815.400070][ T5760] usb 1-1: can't read configurations, error -22 [ 1815.407892][ T5760] usb usb1-port1: attempt power cycle [ 1815.531105][ T1226] gspca_sonixj: reg_w1 err -71 [ 1815.531702][T21241] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1815.542487][ T1226] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1815.554182][ T1226] usb 4-1: USB disconnect, device number 40 [ 1815.744797][ T5760] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1815.766429][ T5760] usb 1-1: no configurations [ 1815.771081][ T5760] usb 1-1: can't read configurations, error -22 [ 1815.884627][T21212] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1815.904619][ T5760] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1815.925642][ T5760] usb 1-1: no configurations [ 1815.930450][ T5760] usb 1-1: can't read configurations, error -22 [ 1815.939281][ T5760] usb usb1-port1: unable to enumerate USB device [ 1816.034507][T21212] usb 3-1: Using ep0 maxpacket: 32 [ 1816.041240][T21212] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 1816.050304][T21212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.065085][T21212] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1816.074240][T21212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.083011][T21212] usb 3-1: Product: syz [ 1816.088541][T21212] usb 3-1: Manufacturer: syz [ 1816.093192][T21212] usb 3-1: SerialNumber: syz [ 1816.103537][T21212] usb 3-1: config 0 descriptor?? [ 1816.119010][T21212] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1816.404637][T13328] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1816.537733][T21241] gspca_m5602: Failed to find a sensor [ 1816.546785][T21241] ALi m5602 5-1:0.88: ALi m5602 webcam failed [ 1816.556656][T21241] usb 5-1: USB disconnect, device number 48 [ 1816.567702][T13328] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1816.579285][T13328] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1816.598409][T13328] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1816.607931][T13328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.616121][T13328] usb 4-1: Product: syz [ 1816.620330][T13328] usb 4-1: Manufacturer: syz [ 1816.625900][T13328] usb 4-1: SerialNumber: syz [ 1816.848352][T13328] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1816.888354][T13328] usb 4-1: USB disconnect, device number 41 [ 1816.920976][T25140] udevd[25140]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1817.225362][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1817.375019][ T1058] fuse: Bad value for 'fd' [ 1818.064596][ T5760] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1818.116644][T28169] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1818.235487][ T5760] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1818.257235][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.271616][ T5760] usb 5-1: Product: syz [ 1818.276192][ T5760] usb 5-1: Manufacturer: syz [ 1818.281086][ T5760] usb 5-1: SerialNumber: syz [ 1818.288766][T28169] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.313796][ T5760] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1818.325168][T28169] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1818.342345][T13327] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1818.361147][T28169] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1818.390847][T28169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.405224][T28169] usb 1-1: Product: 慄쟘዗ࣣ쪊뛛钼蝄乸ꆠꁅ驔與䀍銱契쥪惓툯藳建ᚄ㣏₼祘婑ꗮ঻gꋪ朗።ﶢ懅ᅲ綶ꎬ៥坷鸱ཬ콭᯵䔛끙䪍㽜덇像嚲ᘿ蠻쐬쟋啑૯ￅᘲ똦堵㊡Ř鶖ຑ㈾駍ꗵ㮉ྋ웧簏ⶃ⺀묚쫠⛹汋丫抝⠹ᄏ煃瑙ꐰ뼋ﱷ呆훶봾굧╹၍꠩Ⓧ줐쐻ူ侐큰爉뿽訜珨菳蠺丨ⰶ骭耲Ꭿ [ 1818.437527][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 1818.437553][ T29] audit: type=1326 audit(1780772757.707:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1088 comm="syz.3.8751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdee639ce59 code=0x0 [ 1818.442682][T28169] usb 1-1: Manufacturer: 䀊 [ 1818.499696][ T1093] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1818.506928][T21212] gspca_sunplus: reg_r err -71 [ 1818.527631][T21212] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1818.544218][T21212] usb 3-1: USB disconnect, device number 22 [ 1818.597332][ T1096] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 1818.607425][ T1096] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 1818.617216][T13328] usb 5-1: USB disconnect, device number 49 [ 1818.700677][T28169] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1818.707984][T28169] usb 1-1: 0:2 : does not exist [ 1818.740176][T28169] usb 1-1: USB disconnect, device number 93 [ 1818.767422][ T5651] udevd[5651]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1818.828819][ T1096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.842527][ T1096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.991054][ T1105] vlan2: entered allmulticast mode [ 1818.997012][ T1105] bond0: entered allmulticast mode [ 1819.002170][ T1105] bond_slave_0: entered allmulticast mode [ 1819.008749][ T1105] bond_slave_1: entered allmulticast mode [ 1819.284961][T21212] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1819.444801][T21212] usb 3-1: Using ep0 maxpacket: 8 [ 1819.451780][T21212] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1819.460198][T13327] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1819.468132][T13327] ath9k_htc: Failed to initialize the device [ 1819.474200][T21212] usb 3-1: config 0 has no interface number 0 [ 1819.488093][T21212] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1819.492805][T13328] usb 5-1: ath9k_htc: USB layer deinitialized [ 1819.497566][T21212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.513236][T21212] usb 3-1: Product: syz [ 1819.518509][T21212] usb 3-1: Manufacturer: syz [ 1819.523219][T21212] usb 3-1: SerialNumber: syz [ 1819.526519][T13521] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1819.539878][T21212] usb 3-1: config 0 descriptor?? [ 1819.604841][T21241] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1819.687946][T13521] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1819.697467][T13521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.708010][T13521] usb 4-1: config 0 descriptor?? [ 1819.759045][T21212] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1819.759743][T21241] usb 1-1: config 2 has an invalid interface number: 12 but max is 0 [ 1819.767702][T21212] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1819.790045][T21241] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.800680][T13328] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1819.806097][T21212] usb 3-1: USB disconnect, device number 23 [ 1819.813607][T21241] usb 1-1: config 2 has no interface number 0 [ 1819.824691][T21241] usb 1-1: config 2 interface 12 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1819.838140][T21241] usb 1-1: config 2 interface 12 has no altsetting 0 [ 1819.848704][T21241] usb 1-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 1819.858876][T21241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.867376][T21241] usb 1-1: Product: syz [ 1819.871654][T21241] usb 1-1: Manufacturer: syz [ 1819.877760][T21241] usb 1-1: SerialNumber: syz [ 1819.917346][ T1115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.926269][ T1115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.944626][T13328] usb 5-1: device descriptor read/64, error -71 [ 1820.067485][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803e8d7400: rx timeout, send abort [ 1820.173908][T21241] usb 1-1: USB disconnect, device number 94 [ 1820.184660][T13328] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1820.337685][T13328] usb 5-1: device descriptor read/64, error -71 [ 1820.349797][ T1125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8762'. [ 1820.447990][T13521] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1820.457151][T13328] usb usb5-port1: attempt power cycle [ 1820.464644][T13521] [drm:udl_init] *ERROR* Selecting channel failed [ 1820.483459][T13521] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1820.490331][T13521] [drm] Initialized udl on minor 2 [ 1820.499180][T13521] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1820.508030][T13521] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1820.516768][T21241] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1820.525954][T21241] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1820.536886][T13521] usb 4-1: USB disconnect, device number 42 [ 1820.576111][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803e8d7400: abort rx timeout. Force session deactivation [ 1820.600693][ T1131] netlink: 'syz.3.8765': attribute type 1 has an invalid length. [ 1820.621703][ T1131] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1820.633895][ T1131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8765'. [ 1820.643784][ T1131] bond11: entered promiscuous mode [ 1820.649055][ T1131] bond11: entered allmulticast mode [ 1820.663539][ T1131] bond11: (slave dummy0): making interface the new active one [ 1820.671629][T28169] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1820.680941][ T1131] dummy0: entered promiscuous mode [ 1820.693195][ T1131] dummy0: entered allmulticast mode [ 1820.700181][ T1131] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 1820.713384][ T1131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8765'. [ 1820.804841][T13328] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1820.825222][T13328] usb 5-1: device descriptor read/8, error -71 [ 1820.834523][T28169] usb 3-1: Using ep0 maxpacket: 32 [ 1820.841783][T28169] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 1820.850954][T28169] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.866736][T28169] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1820.876420][T28169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.884768][T28169] usb 3-1: Product: syz [ 1820.889641][T28169] usb 3-1: Manufacturer: syz [ 1820.894285][T28169] usb 3-1: SerialNumber: syz [ 1820.910210][T28169] usb 3-1: config 0 descriptor?? [ 1820.919383][T28169] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1821.014826][T13521] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1821.174526][T13521] usb 4-1: Using ep0 maxpacket: 8 [ 1821.181236][T13521] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.192435][T13521] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1821.207988][T13521] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1821.222673][T13521] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.230973][T13521] usb 4-1: Product: syz [ 1821.235441][T13521] usb 4-1: Manufacturer: syz [ 1821.240045][T13521] usb 4-1: SerialNumber: syz [ 1821.247218][T13521] usb 4-1: config 0 descriptor?? [ 1821.255796][T13521] radioshark 4-1:0.0: Invalid radioSHARK device [ 1821.262061][T13521] radioshark 4-1:0.0: probe with driver radioshark failed with error -22 [ 1821.271180][T13521] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1821.554529][T13328] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1821.586926][T13328] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1821.596056][T13328] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.607489][T13328] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1821.617997][T13328] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1821.637915][T13328] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1821.647998][T13328] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1821.656989][T13328] usb 5-1: Product: syz [ 1821.661644][T13328] usb 5-1: Manufacturer: syz [ 1821.674855][T13328] cdc_wdm 5-1:1.0: skipping garbage [ 1821.681412][T13328] cdc_wdm 5-1:1.0: skipping garbage [ 1821.681725][ T1149] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1821.688038][T13328] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1821.882132][T13328] usb 5-1: USB disconnect, device number 53 [ 1821.944676][ T5760] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1821.969645][T32346] usb 4-1: USB disconnect, device number 43 [ 1822.074553][ T5760] usb 1-1: device descriptor read/64, error -71 [ 1822.123282][ T1127] fuse: Bad value for 'fd' [ 1822.314514][T32346] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1822.314514][ T5760] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1822.324863][ T1226] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1822.445899][ T5760] usb 1-1: device descriptor read/64, error -71 [ 1822.495094][T32346] usb 4-1: Using ep0 maxpacket: 8 [ 1822.498057][ T1226] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1822.504328][T32346] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1822.509431][ T1226] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.520599][T32346] usb 4-1: config 0 has no interface number 0 [ 1822.527524][ T1226] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1822.536950][T32346] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1822.542769][ T1226] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1822.552279][T32346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.563672][ T5760] usb usb1-port1: attempt power cycle [ 1822.571025][T32346] usb 4-1: Product: syz [ 1822.581392][T32346] usb 4-1: Manufacturer: syz [ 1822.582965][ T1226] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1822.586601][T32346] usb 4-1: SerialNumber: syz [ 1822.596225][ T1226] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1822.602893][T32346] usb 4-1: config 0 descriptor?? [ 1822.608119][ T1226] usb 5-1: Product: syz [ 1822.608136][ T1226] usb 5-1: Manufacturer: syz [ 1822.632549][ T1226] cdc_wdm 5-1:1.0: skipping garbage [ 1822.637913][ T1226] cdc_wdm 5-1:1.0: skipping garbage [ 1822.643175][ T1226] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1822.825076][T32346] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1822.844532][T32346] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1822.861446][T32346] usb 4-1: USB disconnect, device number 44 [ 1822.936067][ T5760] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1822.955373][ T5760] usb 1-1: device descriptor read/8, error -71 [ 1823.093380][ T1154] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1823.146150][T28169] gspca_sunplus: reg_r err -71 [ 1823.154923][T28169] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1823.165735][T28169] usb 3-1: USB disconnect, device number 24 [ 1823.194832][ T5760] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1823.216094][ T5760] usb 1-1: device descriptor read/8, error -71 [ 1823.325069][ T5760] usb usb1-port1: unable to enumerate USB device [ 1823.379036][T32346] usb 5-1: USB disconnect, device number 54 [ 1823.834554][T32346] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1823.968936][ T1176] FAULT_INJECTION: forcing a failure. [ 1823.968936][ T1176] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.004976][ T1176] CPU: 0 UID: 0 PID: 1176 Comm: syz.3.8782 Tainted: G L syzkaller #0 PREEMPT(full) [ 1824.005006][ T1176] Tainted: [L]=SOFTLOCKUP [ 1824.005014][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1824.005025][ T1176] Call Trace: [ 1824.005032][ T1176] [ 1824.005041][ T1176] dump_stack_lvl+0xe8/0x150 [ 1824.005070][ T1176] should_fail_ex+0x412/0x560 [ 1824.005103][ T1176] should_failslab+0xa8/0x100 [ 1824.005125][ T1176] __kmalloc_noprof+0xe8/0x760 [ 1824.005149][ T1176] ? security_prepare_creds+0x52/0x360 [ 1824.005178][ T1176] security_prepare_creds+0x52/0x360 [ 1824.005204][ T1176] prepare_creds+0x57d/0x820 [ 1824.005231][ T1176] lookup_user_key+0x319/0x1170 [ 1824.005264][ T1176] ? __pfx_lookup_user_key+0x10/0x10 [ 1824.005285][ T1176] ? __might_fault+0xaf/0x130 [ 1824.005309][ T1176] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1824.005348][ T1176] __se_sys_add_key+0x315/0x420 [ 1824.005371][ T1176] ? __pfx___se_sys_add_key+0x10/0x10 [ 1824.005400][ T1176] ? __x64_sys_add_key+0x20/0xc0 [ 1824.005419][ T1176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.005438][ T1176] do_syscall_64+0x174/0x580 [ 1824.005457][ T1176] ? trace_irq_disable+0x3b/0x140 [ 1824.005482][ T1176] ? clear_bhb_loop+0x40/0x90 [ 1824.005505][ T1176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.005523][ T1176] RIP: 0033:0x7fdee639ce59 [ 1824.005540][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.005557][ T1176] RSP: 002b:00007fdee718c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1824.005577][ T1176] RAX: ffffffffffffffda RBX: 00007fdee6615fa0 RCX: 00007fdee639ce59 [ 1824.005590][ T1176] RDX: 0000200000000300 RSI: 0000200000000280 RDI: 00002000000000c0 [ 1824.005604][ T1176] RBP: 00007fdee718c090 R08: fffffffffffffffe R09: 0000000000000000 [ 1824.005616][ T1176] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 1824.005627][ T1176] R13: 00007fdee6616038 R14: 00007fdee6615fa0 R15: 00007fdee673fa48 [ 1824.005654][ T1176] [ 1824.007009][T32346] usb 5-1: config 2 has an invalid interface number: 12 but max is 0 [ 1824.205856][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880797d2c00: rx timeout, send abort [ 1824.243391][T32346] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.254642][T32346] usb 5-1: config 2 has no interface number 0 [ 1824.261678][T32346] usb 5-1: config 2 interface 12 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1824.276010][T32346] usb 5-1: config 2 interface 12 has no altsetting 0 [ 1824.286154][T32346] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 1824.296624][T32346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.308478][T32346] usb 5-1: Product: syz [ 1824.312861][T32346] usb 5-1: Manufacturer: syz [ 1824.318135][T32346] usb 5-1: SerialNumber: syz [ 1824.705911][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880797d2c00: abort rx timeout. Force session deactivation [ 1824.809457][T32346] usb 5-1: USB disconnect, device number 55 [ 1824.816013][T13521] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1824.994813][T13521] usb 4-1: Using ep0 maxpacket: 32 [ 1825.001742][T13521] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.018081][T13521] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.029138][T13521] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1825.041151][T13521] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.052491][T13521] usb 4-1: config 0 descriptor?? [ 1825.060754][T13521] hub 4-1:0.0: USB hub found [ 1825.104580][T13328] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1825.262931][T13521] hub 4-1:0.0: 1 port detected [ 1825.274567][T13328] usb 1-1: Using ep0 maxpacket: 8 [ 1825.281900][T13328] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1825.290567][T13328] usb 1-1: config 0 has no interface number 0 [ 1825.300300][T13328] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1825.318890][T13328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.334485][T13328] usb 1-1: Product: syz [ 1825.338743][T13328] usb 1-1: Manufacturer: syz [ 1825.343385][T13328] usb 1-1: SerialNumber: syz [ 1825.357910][T13328] usb 1-1: config 0 descriptor?? [ 1825.480296][ T1193] FAULT_INJECTION: forcing a failure. [ 1825.480296][ T1193] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.498830][ T1193] CPU: 1 UID: 0 PID: 1193 Comm: syz.1.8790 Tainted: G L syzkaller #0 PREEMPT(full) [ 1825.498860][ T1193] Tainted: [L]=SOFTLOCKUP [ 1825.498868][ T1193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1825.498878][ T1193] Call Trace: [ 1825.498886][ T1193] [ 1825.498894][ T1193] dump_stack_lvl+0xe8/0x150 [ 1825.498921][ T1193] should_fail_ex+0x412/0x560 [ 1825.498947][ T1193] should_failslab+0xa8/0x100 [ 1825.498966][ T1193] ? skb_clone+0x212/0x3a0 [ 1825.498985][ T1193] kmem_cache_alloc_noprof+0x87/0x650 [ 1825.499016][ T1193] skb_clone+0x212/0x3a0 [ 1825.499057][ T1193] __netlink_deliver_tap+0x404/0x850 [ 1825.499096][ T1193] ? netlink_deliver_tap+0x2e/0x1b0 [ 1825.499123][ T1193] netlink_deliver_tap+0x19c/0x1b0 [ 1825.499150][ T1193] netlink_sendskb+0x68/0x140 [ 1825.499177][ T1193] netlink_rcv_skb+0x2b6/0x4b0 [ 1825.499206][ T1193] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1825.499229][ T1193] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1825.499270][ T1193] ? down_read+0x270/0x2e0 [ 1825.499291][ T1193] ? genl_rcv+0xd/0x40 [ 1825.499313][ T1193] genl_rcv+0x28/0x40 [ 1825.499331][ T1193] netlink_unicast+0x75c/0x8e0 [ 1825.499366][ T1193] netlink_sendmsg+0x813/0xb40 [ 1825.499394][ T1193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1825.499415][ T1193] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1825.499444][ T1193] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1825.499471][ T1193] ____sys_sendmsg+0x972/0x9f0 [ 1825.499490][ T1193] ? __might_fault+0xaf/0x130 [ 1825.499519][ T1193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1825.499546][ T1193] ? import_iovec+0x73/0xa0 [ 1825.499573][ T1193] ___sys_sendmsg+0x2a5/0x360 [ 1825.499590][ T1193] ? __lock_acquire+0x6b5/0x2cf0 [ 1825.499614][ T1193] ? __pfx____sys_sendmsg+0x10/0x10 [ 1825.499667][ T1193] ? __fget_files+0x2a/0x420 [ 1825.499689][ T1193] ? __fget_files+0x3a0/0x420 [ 1825.499720][ T1193] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1825.499742][ T1193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1825.499771][ T1193] ? __pfx_ksys_write+0x10/0x10 [ 1825.499804][ T1193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.499825][ T1193] do_syscall_64+0x174/0x580 [ 1825.499843][ T1193] ? trace_irq_disable+0x3b/0x140 [ 1825.499869][ T1193] ? clear_bhb_loop+0x40/0x90 [ 1825.499891][ T1193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.499909][ T1193] RIP: 0033:0x7f918459ce59 [ 1825.499927][ T1193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1825.499942][ T1193] RSP: 002b:00007f91827f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1825.499962][ T1193] RAX: ffffffffffffffda RBX: 00007f9184815fa0 RCX: 00007f918459ce59 [ 1825.499976][ T1193] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1825.499988][ T1193] RBP: 00007f91827f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.499999][ T1193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1825.500009][ T1193] R13: 00007f9184816038 R14: 00007f9184815fa0 R15: 00007f918493fa48 [ 1825.500046][ T1193] [ 1825.558050][T32346] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1825.630101][T28169] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1825.647094][T13328] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1825.799335][T28169] usb 5-1: Using ep0 maxpacket: 32 [ 1825.808817][T13328] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1825.892618][T13328] usb 1-1: USB disconnect, device number 99 [ 1825.919759][T28169] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1825.928759][T28169] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.932275][T13521] hub 4-1:0.0: activate --> -90 [ 1825.949522][T28169] usb 5-1: config 0 has no interface number 0 [ 1825.961424][T28169] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1825.978512][T28169] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1826.000639][T28169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.009515][T28169] usb 5-1: Product: syz [ 1826.013735][T28169] usb 5-1: Manufacturer: syz [ 1826.018972][T28169] usb 5-1: SerialNumber: syz [ 1826.035716][T32346] usb 3-1: Using ep0 maxpacket: 32 [ 1826.037162][T28169] usb 5-1: config 0 descriptor?? [ 1826.045802][T32346] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 1826.054580][T32346] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.068721][T32346] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1826.071836][T28169] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1826.078364][T32346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.086182][T28169] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 1826.113973][T32346] usb 3-1: Product: syz [ 1826.119875][T32346] usb 3-1: Manufacturer: syz [ 1826.125103][T32346] usb 3-1: SerialNumber: syz [ 1826.133864][T32346] usb 3-1: config 0 descriptor?? [ 1826.172030][T32346] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1826.251987][T28169] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1826.284333][ T1201] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1826.455423][T28169] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 1826.666456][T13328] usb 5-1: USB disconnect, device number 56 [ 1826.677864][T13328] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 1826.753900][ T1183] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8785'. [ 1826.765495][T28169] usb 4-1: USB disconnect, device number 45 [ 1827.380273][ T1189] fuse: Bad value for 'fd' [ 1827.664571][T28169] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 1827.684613][ T5730] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1827.816542][T28169] usb 4-1: config 2 has an invalid interface number: 12 but max is 0 [ 1827.824940][T28169] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.835581][T28169] usb 4-1: config 2 has no interface number 0 [ 1827.841723][T28169] usb 4-1: config 2 interface 12 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1827.855613][T28169] usb 4-1: config 2 interface 12 has no altsetting 0 [ 1827.864990][T28169] usb 4-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 1827.869298][ T5730] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.874328][T28169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.885330][ T5730] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1827.892535][T28169] usb 4-1: Product: syz [ 1827.905948][T28169] usb 4-1: Manufacturer: syz [ 1827.907130][ T5730] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1827.910645][T28169] usb 4-1: SerialNumber: syz [ 1827.921523][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.933176][ T5730] usb 1-1: Product: 慄쟘዗ࣣ쪊뛛钼蝄乸ꆠꁅ驔與䀍銱契쥪惓툯藳建ᚄ㣏₼祘婑ꗮ঻gꋪ朗።ﶢ懅ᅲ綶ꎬ៥坷鸱ཬ콭᯵䔛끙䪍㽜덇像嚲ᘿ蠻쐬쟋啑૯ￅᘲ똦堵㊡Ř鶖ຑ㈾駍ꗵ㮉ྋ웧簏ⶃ⺀묚쫠⛹汋丫抝⠹ᄏ煃瑙ꐰ뼋ﱷ呆훶봾굧╹၍꠩Ⓧ줐쐻ူ侐큰爉뿽訜珨菳蠺丨ⰶ骭耲Ꭿ [ 1827.970181][ T5730] usb 1-1: Manufacturer: 䀊 [ 1828.120089][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c37b800: rx timeout, send abort [ 1828.227006][ T5730] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1828.248483][ T5730] usb 1-1: 0:2 : does not exist [ 1828.339034][ T5730] usb 1-1: USB disconnect, device number 100 [ 1828.349736][T28169] usb 4-1: USB disconnect, device number 46 [ 1828.439633][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1828.477866][T32346] gspca_sunplus: reg_r err -71 [ 1828.490761][T32346] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1828.511997][T32346] usb 3-1: USB disconnect, device number 25 [ 1828.628428][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c37b800: abort rx timeout. Force session deactivation [ 1828.857562][ T1236] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8803'. [ 1829.064783][T21212] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1829.204800][T13521] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1829.224507][T21212] usb 3-1: Using ep0 maxpacket: 32 [ 1829.236256][T21212] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1829.251040][T21212] usb 3-1: config 0 has no interface number 0 [ 1829.257876][T21212] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1829.272462][T21212] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1829.287777][T21212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.302567][T21212] usb 3-1: Product: syz [ 1829.310357][T21212] usb 3-1: Manufacturer: syz [ 1829.317022][T28169] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1829.326207][T21212] usb 3-1: SerialNumber: syz [ 1829.338467][T21212] usb 3-1: config 0 descriptor?? [ 1829.349671][ T1238] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1829.365316][T13521] usb 1-1: Using ep0 maxpacket: 32 [ 1829.373619][T13521] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1829.382609][T13521] usb 1-1: config 0 has no interface number 0 [ 1829.390249][T13521] usb 1-1: config 0 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1829.403885][T13521] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1829.413772][T13521] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.423650][T13521] usb 1-1: Product: syz [ 1829.428657][T13521] usb 1-1: Manufacturer: syz [ 1829.433347][T13521] usb 1-1: SerialNumber: syz [ 1829.446970][T13521] usb 1-1: config 0 descriptor?? [ 1829.464693][T13521] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1829.479807][T13521] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1829.489087][T28169] usb 4-1: Using ep0 maxpacket: 32 [ 1829.497615][T28169] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1829.507488][T28169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.532587][T28169] usb 4-1: config 0 descriptor?? [ 1829.556101][T28169] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1829.563532][ T1238] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1829.666805][T13521] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1829.885417][T13521] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 1830.024290][ T1256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.031816][ T1256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.083973][T13521] usb 1-1: USB disconnect, device number 101 [ 1830.097604][T13521] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 1830.181979][T21212] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1830.185021][ T1256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1830.193385][T21212] asix 3-1:0.188: probe with driver asix failed with error -61 [ 1830.204878][ T1256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1830.319041][ T904] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.338454][ T904] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.363562][ T904] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.377316][ T904] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.398276][ T5730] usb 3-1: USB disconnect, device number 26 [ 1830.982087][T28169] gspca_sunplus: reg_w_riv err -71 [ 1830.993457][T28169] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1831.011766][T28169] usb 4-1: USB disconnect, device number 47 [ 1831.214909][ T5730] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1831.385651][ T5730] usb 3-1: Using ep0 maxpacket: 32 [ 1831.394117][ T5730] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1831.408216][ T5730] usb 3-1: config 0 has no interface number 0 [ 1831.419358][ T5730] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1831.440879][ T5730] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1831.455800][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.474847][ T5730] usb 3-1: Product: syz [ 1831.486100][ T5730] usb 3-1: Manufacturer: syz [ 1831.497112][ T5730] usb 3-1: SerialNumber: syz [ 1831.515907][ T5730] usb 3-1: config 0 descriptor?? [ 1831.538773][ T5730] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1831.565761][ T5730] em28xx 3-1:0.132: Video interface 132 found: [ 1831.630225][ T1276] sctp: [Deprecated]: syz.3.8815 (pid 1276) Use of int in max_burst socket option. [ 1831.630225][ T1276] Use struct sctp_assoc_value instead [ 1831.795119][T28169] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1831.938582][ T1271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.944626][T28169] usb 1-1: Using ep0 maxpacket: 32 [ 1831.949674][ T1271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.957021][T28169] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 1831.968670][T28169] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.988404][ T5730] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1832.000955][T28169] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1832.011461][T28169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.028719][T28169] usb 1-1: Product: syz [ 1832.039367][T28169] usb 1-1: Manufacturer: syz [ 1832.044015][T28169] usb 1-1: SerialNumber: syz [ 1832.052544][T28169] usb 1-1: config 0 descriptor?? [ 1832.069335][T28169] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1832.398082][ T5730] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1832.419615][ T5730] em28xx 3-1:0.132: board has no eeprom [ 1832.427653][ T1291] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1832.434192][ T1291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1832.443824][ T1291] vhci_hcd vhci_hcd.0: Device attached [ 1832.452815][ T1291] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 1832.459360][ T1291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1832.467480][ T1291] vhci_hcd vhci_hcd.0: Device attached [ 1832.476358][ T1291] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 1832.482899][ T1291] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1832.492077][ T1291] vhci_hcd vhci_hcd.0: Device attached [ 1832.501226][ T1291] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 1832.507774][ T1291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1832.515884][ T5730] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1832.520721][ T1291] vhci_hcd vhci_hcd.0: Device attached [ 1832.527746][ T5730] em28xx 3-1:0.132: analog set to bulk mode. [ 1832.536305][T32346] em28xx 3-1:0.132: Registering V4L2 extension [ 1832.560180][ T1291] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 1832.566832][ T1291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1832.603773][ T86] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1832.619649][ T1291] vhci_hcd vhci_hcd.0: Device attached [ 1832.635535][ T86] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1832.643005][T13328] usb 3-1: USB disconnect, device number 27 [ 1832.660096][ T1291] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 1832.664164][ T86] usb 2-1: USB disconnect, device number 24 [ 1832.666725][ T1291] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1832.668356][T32346] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 1832.676830][T13328] em28xx 3-1:0.132: Disconnecting em28xx [ 1832.688897][ T1308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1832.704374][ T1308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1832.714463][ T1291] vhci_hcd vhci_hcd.0: Device attached [ 1832.714705][T13521] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1832.734042][ T1308] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(20) [ 1832.740677][ T1308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1832.762577][ T1308] vhci_hcd vhci_hcd.0: Device attached [ 1832.773175][ T1314] bridge_slave_0: left allmulticast mode [ 1832.785739][ T1314] bridge_slave_0: left promiscuous mode [ 1832.803161][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.806082][T32346] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1832.822321][T32346] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1832.831596][T32346] em28xx 3-1:0.132: No AC97 audio processor [ 1832.833913][ T1314] bridge_slave_1: left allmulticast mode [ 1832.848607][ T1314] bridge_slave_1: left promiscuous mode [ 1832.856411][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.863308][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054c8e800: rx timeout, send abort [ 1832.885851][ T1314] bond0: (slave bond_slave_0): Releasing backup interface [ 1832.888140][T32346] usb 3-1: Decoder not found [ 1832.910594][ T1314] bond0: (slave bond_slave_1): Releasing backup interface [ 1832.914905][T32346] em28xx 3-1:0.132: failed to create media graph [ 1832.930145][ T1314] team0: Port device team_slave_0 removed [ 1832.934718][T32346] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1832.946164][ T1314] team0: Port device team_slave_1 removed [ 1832.952997][ T1314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1832.964313][ T1314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1832.968913][T32346] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1832.980692][ T1318] ================================================================== [ 1832.981609][ T1314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1832.988760][ T1318] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0 [ 1832.988937][ T1318] Read of size 4 at addr ffff888080984860 by task v4l_id/1318 [ 1832.988954][ T1318] [ 1832.988967][ T1318] CPU: 0 UID: 0 PID: 1318 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1832.988994][ T1318] Tainted: [L]=SOFTLOCKUP [ 1832.989002][ T1318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1832.989014][ T1318] Call Trace: [ 1832.989023][ T1318] [ 1832.989031][ T1318] dump_stack_lvl+0xe8/0x150 [ 1832.989053][ T1318] print_address_description+0x55/0x1e0 [ 1832.989074][ T1318] ? v4l2_open+0x395/0x3a0 [ 1832.989097][ T1318] print_report+0x58/0x70 [ 1832.989114][ T1318] kasan_report+0x117/0x150 [ 1832.989134][ T1318] ? v4l2_open+0x395/0x3a0 [ 1832.989159][ T1318] v4l2_open+0x395/0x3a0 [ 1832.989184][ T1318] chrdev_open+0x4cd/0x5e0 [ 1832.989203][ T1318] ? __pfx_chrdev_open+0x10/0x10 [ 1832.989221][ T1318] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1832.989245][ T1318] ? __pfx_chrdev_open+0x10/0x10 [ 1832.989262][ T1318] do_dentry_open+0x822/0x13a0 [ 1832.989287][ T1318] vfs_open+0x3b/0x340 [ 1832.989306][ T1318] ? path_openat+0x2df0/0x3860 [ 1832.989331][ T1318] path_openat+0x2e08/0x3860 [ 1832.989360][ T1318] ? __pfx_stack_trace_save+0x10/0x10 [ 1832.989386][ T1318] ? stack_depot_save_flags+0x33/0x810 [ 1832.989411][ T1318] ? __pfx_path_openat+0x10/0x10 [ 1832.989433][ T1318] ? __x64_sys_openat+0x138/0x170 [ 1832.989456][ T1318] ? __lock_acquire+0x6b5/0x2cf0 [ 1832.989479][ T1318] do_file_open+0x23e/0x4a0 [ 1832.989505][ T1318] ? __pfx_do_file_open+0x10/0x10 [ 1832.989537][ T1318] ? _raw_spin_unlock+0x28/0x50 [ 1832.989562][ T1318] ? alloc_fd+0x64b/0x6c0 [ 1832.989586][ T1318] do_sys_openat2+0x113/0x200 [ 1832.989607][ T1318] ? __pfx_do_sys_openat2+0x10/0x10 [ 1832.989628][ T1318] ? exc_page_fault+0x6a/0xc0 [ 1832.989647][ T1318] ? do_user_addr_fault+0xc6f/0x1340 [ 1832.989667][ T1318] __x64_sys_openat+0x138/0x170 [ 1832.989689][ T1318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.989707][ T1318] do_syscall_64+0x174/0x580 [ 1832.989726][ T1318] ? trace_irq_disable+0x3b/0x140 [ 1832.989750][ T1318] ? clear_bhb_loop+0x40/0x90 [ 1832.989770][ T1318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.989789][ T1318] RIP: 0033:0x7fa8c58a7407 [ 1832.989806][ T1318] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1832.989822][ T1318] RSP: 002b:00007ffceeb9b6f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1832.989842][ T1318] RAX: ffffffffffffffda RBX: 00007fa8c5f8e880 RCX: 00007fa8c58a7407 [ 1832.989856][ T1318] RDX: 0000000000000000 RSI: 00007ffceeb9cf1a RDI: ffffffffffffff9c [ 1832.989869][ T1318] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1832.989881][ T1318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1832.989894][ T1318] R13: 00007ffceeb9b940 R14: 00007fa8c6093000 R15: 000055b696ce44d8 [ 1832.989921][ T1318] [ 1832.989928][ T1318] [ 1833.035674][ T1226] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1833.036798][ T1318] Allocated by task 32346: [ 1833.036813][ T1318] kasan_save_track+0x3e/0x80 [ 1833.036841][ T1318] __kasan_kmalloc+0x93/0xb0 [ 1833.036863][ T1318] __kmalloc_cache_noprof+0x31c/0x660 [ 1833.036885][ T1318] em28xx_v4l2_init+0x10b/0x2eb0 [ 1833.326945][ T1318] em28xx_init_extension+0x120/0x1c0 [ 1833.332300][ T1318] process_scheduled_works+0xb5d/0x1860 [ 1833.337828][ T1318] worker_thread+0xa53/0xfc0 [ 1833.342401][ T1318] kthread+0x389/0x470 [ 1833.346461][ T1318] ret_from_fork+0x514/0xb70 [ 1833.351034][ T1318] ret_from_fork_asm+0x1a/0x30 [ 1833.355779][ T1318] [ 1833.358088][ T1318] Freed by task 32346: [ 1833.362133][ T1318] kasan_save_track+0x3e/0x80 [ 1833.366796][ T1318] kasan_save_free_info+0x46/0x50 [ 1833.371802][ T1318] __kasan_slab_free+0x5c/0x80 [ 1833.376550][ T1318] kfree+0x1c5/0x640 [ 1833.380429][ T1318] em28xx_v4l2_init+0x1685/0x2eb0 [ 1833.385434][ T1318] em28xx_init_extension+0x120/0x1c0 [ 1833.390705][ T1318] process_scheduled_works+0xb5d/0x1860 [ 1833.396235][ T1318] worker_thread+0xa53/0xfc0 [ 1833.400810][ T1318] kthread+0x389/0x470 [ 1833.404862][ T1318] ret_from_fork+0x514/0xb70 [ 1833.409449][ T1318] ret_from_fork_asm+0x1a/0x30 [ 1833.414195][ T1318] [ 1833.416503][ T1318] The buggy address belongs to the object at ffff888080984000 [ 1833.416503][ T1318] which belongs to the cache kmalloc-8k of size 8192 [ 1833.430547][ T1318] The buggy address is located 2144 bytes inside of [ 1833.430547][ T1318] freed 8192-byte region [ffff888080984000, ffff888080986000) [ 1833.444497][ T1318] [ 1833.446808][ T1318] The buggy address belongs to the physical page: [ 1833.453216][ T1318] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x80980 [ 1833.461958][ T1318] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1833.470434][ T1318] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1833.477958][ T1318] page_type: f5(slab) [ 1833.481927][ T1318] raw: 00fff00000000040 ffff88813fe1c280 dead000000000100 dead000000000122 [ 1833.490497][ T1318] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1833.499064][ T1318] head: 00fff00000000040 ffff88813fe1c280 dead000000000100 dead000000000122 [ 1833.507715][ T1318] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1833.516369][ T1318] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1833.525023][ T1318] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1833.533671][ T1318] page dumped because: kasan: bad access detected [ 1833.540083][ T1318] page_owner tracks the page as allocated [ 1833.545782][ T1318] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 21052, tgid 21051 (syz.4.4817), ts 1026021021516, free_ts 1025947271727 [ 1833.566860][ T1318] post_alloc_hook+0x22d/0x280 [ 1833.571627][ T1318] get_page_from_freelist+0x2593/0x2610 [ 1833.577159][ T1318] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1833.582952][ T1318] allocate_slab+0x77/0x660 [ 1833.587437][ T1318] refill_objects+0x339/0x3d0 [ 1833.592100][ T1318] __pcs_replace_empty_main+0x321/0x720 [ 1833.597641][ T1318] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 1833.604039][ T1318] __alloc_skb+0x2c1/0x7d0 [ 1833.608446][ T1318] sctp_packet_transmit+0x290/0x2ac0 [ 1833.613807][ T1318] sctp_outq_flush+0xee8/0x31b0 [ 1833.618698][ T1318] sctp_do_sm+0x54c7/0x5cf0 [ 1833.623263][ T1318] sctp_assoc_bh_rcv+0x3f2/0x630 [ 1833.628189][ T1318] sctp_backlog_rcv+0x167/0x380 [ 1833.633031][ T1318] __release_sock+0x297/0x3a0 [ 1833.637693][ T1318] release_sock+0x190/0x260 [ 1833.642182][ T1318] sctp_wait_for_connect+0x38b/0x6f0 [ 1833.647455][ T1318] page last free pid 5632 tgid 5632 stack trace: [ 1833.653762][ T1318] __free_frozen_pages+0xc1c/0xd30 [ 1833.658863][ T1318] __slab_free+0x274/0x2c0 [ 1833.663266][ T1318] qlist_free_all+0x99/0x100 [ 1833.667845][ T1318] kasan_quarantine_reduce+0x148/0x160 [ 1833.673296][ T1318] __kasan_slab_alloc+0x22/0x80 [ 1833.678134][ T1318] kmem_cache_alloc_node_noprof+0x384/0x690 [ 1833.684015][ T1318] __alloc_skb+0x1d0/0x7d0 [ 1833.688420][ T1318] mld_newpack+0x14c/0xc90 [ 1833.692885][ T1318] add_grhead+0x5a/0x2a0 [ 1833.697115][ T1318] add_grec+0x1452/0x1740 [ 1833.701434][ T1318] mld_ifc_work+0x6e6/0xe70 [ 1833.705922][ T1318] process_scheduled_works+0xb5d/0x1860 [ 1833.711451][ T1318] worker_thread+0xa53/0xfc0 [ 1833.716022][ T1318] kthread+0x389/0x470 [ 1833.720081][ T1318] ret_from_fork+0x514/0xb70 [ 1833.724655][ T1318] ret_from_fork_asm+0x1a/0x30 [ 1833.729403][ T1318] [ 1833.731705][ T1318] Memory state around the buggy address: [ 1833.737315][ T1318] ffff888080984700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1833.745366][ T1318] ffff888080984780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1833.753412][ T1318] >ffff888080984800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1833.761448][ T1318] ^ [ 1833.768620][ T1318] ffff888080984880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1833.776663][ T1318] ffff888080984900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1833.784704][ T1318] ================================================================== [ 1833.794384][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054c8e800: abort rx timeout. Force session deactivation [ 1833.803182][ T86] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1833.814926][T13328] em28xx 3-1:0.132: Closing input extension [ 1833.825037][ T1318] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1833.832258][ T1318] CPU: 0 UID: 0 PID: 1318 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1833.842759][ T1318] Tainted: [L]=SOFTLOCKUP [ 1833.847082][ T1318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1833.857129][ T1318] Call Trace: [ 1833.860413][ T1318] [ 1833.863341][ T1318] vpanic+0x56c/0xa60 [ 1833.867329][ T1318] ? __pfx_vpanic+0x10/0x10 [ 1833.871832][ T1318] ? __pfx___schedule+0x10/0x10 [ 1833.876689][ T1318] panic+0xc5/0xd0 [ 1833.880400][ T1318] ? __pfx_panic+0x10/0x10 [ 1833.884803][ T1318] ? preempt_schedule_thunk+0x16/0x30 [ 1833.890199][ T1318] ? v4l2_open+0x395/0x3a0 [ 1833.894621][ T1318] check_panic_on_warn+0x89/0xb0 [ 1833.899559][ T1318] ? v4l2_open+0x395/0x3a0 [ 1833.903975][ T1318] end_report+0x73/0x170 [ 1833.908225][ T1318] ? v4l2_open+0x395/0x3a0 [ 1833.912643][ T1318] kasan_report+0x128/0x150 [ 1833.917136][ T1318] ? v4l2_open+0x395/0x3a0 [ 1833.921547][ T1318] v4l2_open+0x395/0x3a0 [ 1833.925786][ T1318] chrdev_open+0x4cd/0x5e0 [ 1833.930194][ T1318] ? __pfx_chrdev_open+0x10/0x10 [ 1833.935117][ T1318] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1833.941435][ T1318] ? __pfx_chrdev_open+0x10/0x10 [ 1833.946357][ T1318] do_dentry_open+0x822/0x13a0 [ 1833.951112][ T1318] vfs_open+0x3b/0x340 [ 1833.955169][ T1318] ? path_openat+0x2df0/0x3860 [ 1833.959925][ T1318] path_openat+0x2e08/0x3860 [ 1833.964507][ T1318] ? __pfx_stack_trace_save+0x10/0x10 [ 1833.969873][ T1318] ? stack_depot_save_flags+0x33/0x810 [ 1833.975325][ T1318] ? __pfx_path_openat+0x10/0x10 [ 1833.980249][ T1318] ? __x64_sys_openat+0x138/0x170 [ 1833.985265][ T1318] ? __lock_acquire+0x6b5/0x2cf0 [ 1833.990194][ T1318] do_file_open+0x23e/0x4a0 [ 1833.994693][ T1318] ? __pfx_do_file_open+0x10/0x10 [ 1833.999719][ T1318] ? _raw_spin_unlock+0x28/0x50 [ 1834.004562][ T1318] ? alloc_fd+0x64b/0x6c0 [ 1834.008889][ T1318] do_sys_openat2+0x113/0x200 [ 1834.013557][ T1318] ? __pfx_do_sys_openat2+0x10/0x10 [ 1834.018741][ T1318] ? exc_page_fault+0x6a/0xc0 [ 1834.023407][ T1318] ? do_user_addr_fault+0xc6f/0x1340 [ 1834.028678][ T1318] __x64_sys_openat+0x138/0x170 [ 1834.033523][ T1318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.039574][ T1318] do_syscall_64+0x174/0x580 [ 1834.044153][ T1318] ? trace_irq_disable+0x3b/0x140 [ 1834.049168][ T1318] ? clear_bhb_loop+0x40/0x90 [ 1834.053830][ T1318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.059707][ T1318] RIP: 0033:0x7fa8c58a7407 [ 1834.064119][ T1318] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1834.083721][ T1318] RSP: 002b:00007ffceeb9b6f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1834.092124][ T1318] RAX: ffffffffffffffda RBX: 00007fa8c5f8e880 RCX: 00007fa8c58a7407 [ 1834.100087][ T1318] RDX: 0000000000000000 RSI: 00007ffceeb9cf1a RDI: ffffffffffffff9c [ 1834.108049][ T1318] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1834.116009][ T1318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1834.123969][ T1318] R13: 00007ffceeb9b940 R14: 00007fa8c6093000 R15: 000055b696ce44d8 [ 1834.131933][ T1318] [ 1834.135224][ T1318] Kernel Offset: disabled [ 1834.139535][ T1318] Rebooting in 86400 seconds..