last executing test programs: 3m15.900711011s ago: executing program 2 (id=396): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x80000000, 0x7}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x82040, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000240)={0x7ff, [0x4ee, 0x7, 0xb, 0x3fc1, 0x2, 0x9, 0x80, 0x800, 0x4, 0x7, 0x3, 0x8, 0x3, 0x1, 0xd02d, 0x1, 0x1ff, 0x2, 0x7fff, 0x3, 0x2, 0xa, 0x9, 0x800, 0x800, 0x8, 0x400, 0x8, 0x3, 0xa3d, 0x9, 0x5, 0xd7f0, 0xffff, 0xfffd, 0x7, 0x1, 0x3ff, 0x7, 0x1, 0xd1, 0x6, 0x10, 0x7, 0x400, 0x3, 0x0, 0x3], 0x7}) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000100)=0xff) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0x40) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f00000002c0)={0x56, 0xb49d, 0x4, 0x6, 0xffffffff}) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x4, 0xc9, 0x7, 0x1, 0x3, 0x5}}}, 0xc) write$tun(r5, &(0x7f0000000640)={@void, @val={0x0, 0x1, 0x8, 0xd, 0x1, 0x8000}, @ipv4=@icmp={{0x19, 0x4, 0x0, 0x13, 0x6c, 0x67, 0x0, 0x3, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1, {[@timestamp={0x44, 0x8, 0xd8, 0x0, 0x6, [0x7]}, @cipso={0x86, 0x45, 0x1, [{0x6, 0xf, "6d14dd1d2d893d92f44103bb96"}, {0x7, 0xe, "09e35a2bb8f92939fb929432"}, {0x2, 0xffffffffffffff2b, "26e179e69159381a"}, {0x1, 0xc, "65dc8630b54085f46f51"}, {0x2, 0x7, "5c52027833b879dc5a8a"}]}]}}, @address_reply={0x12, 0x0, 0x0, 0x9}}}, 0x76) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000b75e9cb5db435f569256c42a91881f588701318fcf42bc55400f324ab9c8d3d3da3d9ecd087dab9f64208a8cb39633903db7167e26fae6c08a0b9bc2df1259390cb5131713f9815cf55b2ba9266fcbe4a316f4", 0xaf}, {&(0x7f0000000440)="d557aafcfc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7d42c3c73399450b3", 0xbf}, {&(0x7f00000017c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x4000010) 3m15.833125956s ago: executing program 2 (id=398): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000400)={0x10, 0x0, "04615890bd042f35069ea5f86c18c7f6"}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100010038d408f01002204ddc0102030109022d00f4da06800809045f40030a0000400905ff0f010202040c09050a0c400001c60d090582", @ANYRESOCT], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0xc0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x8, 0xf9}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xa6, 0x40}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x2, 0x7, 0x8, 0x40, 0x8}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x43, &(0x7f0000000480)=ANY=[@ANYBLOB="43034fc21d8a68d532abb4bd818f86727f40bd6d0ca6a7dd5becc489dd33f91b6c66c0da366d36f49963edf071b7f29cca79e68398e941a6b15831a40426cab1e42a3d"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0a}}, {0xd2, &(0x7f0000000240)=@string={0xd2, 0x3, "9e3dfd6c7bb9a212dbd87875d7678d5b3da6697dad319074b9248f4260b5c5868e6ae74ddeb09c5dabb44025a2af719b381eeedc2df41466c1326ffcafd3dbf2e84f45dc2ea082848cc66a2067695c8819fcbd55d07b3a134c95176602f7b29e3a681d2c81fe638e15fe5bd285ad1ba98cd1dfb84d7c98d0fd865a1f8ddd344af9334be3e9e90cae98489c5aabe9c3af864866b580b159d738fda339ddf868052b163a5a0966afa1414b231841548d1e21b7608653d2be81f888adf64e0eb1e8a167494136da221aca185dd8272f561d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0a}}]}) 3m14.533836532s ago: executing program 2 (id=414): r0 = socket(0xa, 0x5, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x20, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x10000]}}, 0x5c) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 3m14.426854753s ago: executing program 2 (id=415): r0 = socket(0x0, 0x80801, 0x1) setuid(0xee00) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000240)={0x7, 'vlan0\x00', {0xc6}, 0xccd}) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e23, 0x80, @loopback, 0x1000}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8010000, @empty}, 0x1c) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2, @mcast2, 0x9, 0x4}, 0x20) 3m14.289099688s ago: executing program 2 (id=417): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000100)='7', 0x1, 0x3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) open(&(0x7f0000000240)='./file0\x00', 0x3b72a3f1fb1771e1, 0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) r3 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x3, {}, {0x0, 0x4}, @result={0x1, 0x2}}, {0x33, 0x0, 0xff, 0x3, @tick=0xf27, {0x3, 0x31}, {0x8}, @addr={0x4, 0x5}}], 0x38) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001140)=""/134, 0x86}], 0x1) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000000)='0\x00', 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000000)=0x4, 0x13) r6 = accept4(r4, 0x0, 0x0, 0x800) socket$inet6(0xa, 0x3, 0x2f) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'lo\x00', @multicast}) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f1", 0x64}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3m14.171325004s ago: executing program 2 (id=419): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x64}, {0x6}]}) pipe2$9p(&(0x7f0000000000), 0x4000) 2m59.130549682s ago: executing program 32 (id=419): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x64}, {0x6}]}) pipe2$9p(&(0x7f0000000000), 0x4000) 2m0.727925106s ago: executing program 3 (id=947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x5, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000b06010400000000000000005e616bf9d0000000040900020073797a30000000000500000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x88c1}, 0x20004000) 2m0.559620435s ago: executing program 3 (id=950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000000)="00050002", 0x4) r1 = socket(0x1d, 0x2, 0x6) accept4$unix(r1, 0x0, 0x0, 0x80800) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000001040)=ANY=[@ANYRES64], 0xffe) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) flistxattr(r2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000000)="00050002", 0x4) (async) socket(0x1d, 0x2, 0x6) (async) accept4$unix(r1, 0x0, 0x0, 0x80800) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r4) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f0000001040)=ANY=[@ANYRES64], 0xffe) (async) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async) flistxattr(r2, 0x0, 0x0) (async) connect$inet6(r0, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) (async) 2m0.454372069s ago: executing program 3 (id=952): socket$kcm(0x10, 0x5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000d, 0x4008031, 0xffffffffffffffff, 0x2000) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = fsopen(&(0x7f0000000240)='securityfs\x00', 0x0) r4 = fcntl$dupfd(r1, 0x406, r3) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000), 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a000000000c00048008000140000000030f2cec71185378857baa015efc1e2f2ac791e91a825dcd2ca69572fdaa5092ad26581b7f6f821eb4bd5e7210bb9ab7b0934b4d246ed315f036d220a27b560800000000000000b28f310dc51f83a3e11b66d3d9b19d67f79d4879d6324bdccd3193cbddb5a89917e2b703d135d506166337b85a305c5c1518803f4ae1728b04b30c50346a7593d7d29d42a1fd9b8cd345f14528d9a81678f842c0551b3cc5c4063e067a321fad3fc3021065ffcf5c070a29dc828e778b93b267d91176a41339208ca743771c67606f2e215126f026f300"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0014"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x1e, 0x0, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r12, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r8, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf252100000044002d80080002000100000008000300040000000800020000000000080002000200000005000100400000000800020001000000080003000200000005000400000000000c000600020000000200000008000300", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="3c002d800800030008000000050001005c00000005000100030000000500010000000000080002000300000005000100f900000008000300030000000c002d800500040001000000"], 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', r14, 0x10, 0x7f40, 0x81, 0x7, {{0x8, 0x4, 0x2, 0x8, 0xfffffeca, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @multicast1, {[@generic={0x86, 0xa, "a824c75dd0bee48a"}]}}}}}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 1m59.503424119s ago: executing program 3 (id=963): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r0) 1m56.396866599s ago: executing program 3 (id=982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r4, 0x80184151, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x10201, 0x2, 0x1, 0x1000, &(0x7f0000012000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="f3aac17af0000ffbae00000100f30fc7b666e1ad6b66bad00466edc4e1fb2d624c0f01b32a0000000f00d0d1f42e660f38810f", 0x33}], 0x1, 0x11, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) write(r7, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) sendto(r7, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/280, 0x118}, {&(0x7f0000004c40)=""/4097, 0x1001}, {&(0x7f0000000700)=""/129, 0x81}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f00000002c0)=""/183, 0xb7}], 0x5}, 0x401}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = accept$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x1c) sendto$inet6(r9, &(0x7f0000000600)="138644b9413c0e33b263412f6b5e0de2e8578f5352f1cd6ccc6013a48a9114d5aae3bbe6216b9a895e6250653fda86ea425c4c301d8bad28450ca1ba9e872140c0ade067ad77020488562f0f6b176ddbd7df5f4120ca965d0cea958e6d7b97049f7cd846b122a69e1f75da641a57ed471d6463226b679e6e856d1d077fbf911ec9cc51d2c185b32f865ebeada36d240a15b1", 0x92, 0x1, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @local, 0x6}, 0x1c) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m53.268949828s ago: executing program 3 (id=1005): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f00000010c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x802}, 0x80, 0x0}, 0xe07e872420dfefca) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r4, 0x6, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r7, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f11000/0x4000)=nil, r7, 0x0, 0x110, r3, 0x0) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000200)={0x1, 0x0, 0x6, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$9p(&(0x7f0000000240), 0x0) 1m38.182955446s ago: executing program 33 (id=1005): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f00000010c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x802}, 0x80, 0x0}, 0xe07e872420dfefca) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r4, 0x6, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r7, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f11000/0x4000)=nil, r7, 0x0, 0x110, r3, 0x0) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000200)={0x1, 0x0, 0x6, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x41, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$9p(&(0x7f0000000240), 0x0) 4.828433394s ago: executing program 1 (id=1655): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioperm(0x3, 0x5, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325240, 0x6, [0x2, r2], [0x80ffff, 0xffffffff], [0x2, 0x0, 0x0, 0x10004], [0xd29, 0x0, 0xfffffffffffffffc]}) r3 = fsopen(&(0x7f0000000540)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='\x96\x98{\xaf\xf1_\x85PYyd', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) semget(0x3, 0x3d8320cfaffe1bf9, 0x75b16f8fb84d9a21) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000240)=""/188, 0xbc}], 0x2) 4.636865442s ago: executing program 1 (id=1656): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="60090c00000000004700002040f400bec073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x2c, 0x2c, 0x107, 0x2, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x84}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xe1, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) r3 = socket$packet(0x11, 0x2, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x181140, 0x80) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x181140, 0x80) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000140)={0x4, r4, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x7) (async) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x8, 0x6, @multicast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e788d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0/file1\x00'}) bind$rose(r8, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) (async) bind$rose(r8, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x6, &(0x7f0000000440)={0x8, 0x1000, 0x6db3, 0x7fff, 0x3ff, 0xffffffffab9bb560, 0x6, 0x9, 0xffffffffffffffff, 0x1000, 0x19, 0x10000, 0x87f, 0x5, 0x9, 0x44, 0xffffffffffffffff, 0x80000000, 0x78b6, 0x0, 0xffffffffffffc4f9, 0x4, 0x4, 0x80000000, 0x95, 0xb3f3}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000140018000080007564703a73797a32064c710b1c"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0031280000003d5fd26e523ccff6a6e058541e233d050b0aac7fad24401fe2bcabbd3bf77bba9355adec6c02caf04a1c1f047962f08e9b538cf3a6a681970600da44403cf24311a07c2c0d08ed13f0901c10cc96a28b13d5c74170556e4f1ddaf592da369679a08fe32d7adaf54a2e17bfbf62c722eb5102bbf87dddb7ffe50ccb6212def1779fb60ca8a6cf73ac022ffa587489e7ad1134068240c982ba6940650f3191a4a5e08e4df2c29c"], 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1}}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0031280000003d5fd26e523ccff6a6e058541e233d050b0aac7fad24401fe2bcabbd3bf77bba9355adec6c02caf04a1c1f047962f08e9b538cf3a6a681970600da44403cf24311a07c2c0d08ed13f0901c10cc96a28b13d5c74170556e4f1ddaf592da369679a08fe32d7adaf54a2e17bfbf62c722eb5102bbf87dddb7ffe50ccb6212def1779fb60ca8a6cf73ac022ffa587489e7ad1134068240c982ba6940650f3191a4a5e08e4df2c29c"], 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1}}) 3.919806299s ago: executing program 1 (id=1660): r0 = semget(0x2, 0x1, 0x2b2) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000200)=""/43) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @p_u8=&(0x7f0000000240)}}) fchdir(r1) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000100)={0x2, @capture={0x0, 0x0, {0x1, 0x10000}, 0x3004, 0x7ff}}) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000040)={0x2, 0x5}) semget(0x2, 0x1, 0x2b2) (async) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000200)=""/43) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @p_u8=&(0x7f0000000240)}}) (async) fchdir(r1) (async) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000100)={0x2, @capture={0x0, 0x0, {0x1, 0x10000}, 0x3004, 0x7ff}}) (async) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000040)={0x2, 0x5}) (async) 3.872404443s ago: executing program 1 (id=1661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfdb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x40, 0x1}, 0x3}}, 0x10) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x12541, 0x12) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000200)={{0x2, 0x1, 0x5, 0x1, 0x3}, 0xc379, 0x2, 0xf9dd}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000280)) map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r5 = fcntl$getown(r4, 0x9) fcntl$lock(r4, 0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9, r5}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r3, 0x10000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) close(r6) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) fcntl$setflags(r0, 0x2, 0x0) flock(r2, 0xe) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)=""/154, &(0x7f00000004c0)=0x9a) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x0, &(0x7f0000000500)=""/209, &(0x7f0000000600)=0xd1) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000640)='/dev/kvm\x00', 0x9) r9 = syz_open_dev$hiddev(&(0x7f0000000680), 0xb9a9, 0x4800) read$hiddev(r9, &(0x7f00000006c0)=""/250, 0xfa) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd0, r10, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x92e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffffff8}, {0xc, 0x90, 0x8000000000000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6be5}, {0xc, 0x90, 0x231}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x683a22b1ca899640) bind$isdn_base(r3, &(0x7f00000009c0)={0x22, 0x4, 0x3, 0x8, 0x3}, 0x6) 3.776733702s ago: executing program 1 (id=1662): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000040)) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000000140)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000100)=0x14}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f0000000180)=""/140, 0x8c, 0x6, 0x2}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x26a, 0x0, 0xffffffff}]}) ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x1000) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000380)={r5, 0x5, 0x88, 0x80000001, 0x3, [0x0, 0x0], [0x3c4, 0x1ff, 0x3, 0x100], [0x7, 0x101, 0x585c4dcc, 0x1], [0x46, 0x7, 0x400, 0x81]}) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r9 = getuid() r10 = geteuid() mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x7c800, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '$[!}'}}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, ']{'}}, {@euid_lt={'euid<', r9}}, {@fowner_lt={'fowner<', r10}}, {@flag='lazytime'}, {@permit_directio}]}}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x6, 0xf, 0x0, 0x9, 0x4, 0xfffffffffffffffa}, {0x3, 0x7, 0x911, 0x7, 0x80ca, 0x1}], ['\x00', '\x00']}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f00000006c0)=0x5, 0xbd, 0x7) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r4) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000700), 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x220, r11, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d5df0977fd512ff15858b8c0ff02561966d3609f"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "c8fcf16872148551e80054ffef2630b7d42f5bb2cd457e35dccc58"}}, @TIPC_NLA_NODE_ID={0x21, 0x3, "7d53147d18a073fcd7e1d4670b4ba1b728c7ac3b03c0d3165336649ef8"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfda0}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ID={0x12, 0x3, "522eae629e6677836529bb73484b"}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20008810}, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000a40)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000a80)={r5, 0x4, 0x4, 0xfff, 0x1, [r6, r6, r6, r12], [0x1ff, 0x1000, 0x100, 0xfffffffe], [0x1, 0xff, 0x85, 0xc1], [0x7, 0x0, 0x6, 0x2]}) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000b00)={0x3, 0x0, 0x0, 0x8}) r13 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000b40)={0x10000, 0x1, 0xdddd0000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000b80)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000bc0)={0x28, 0x6, r14, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r8, 0xf50f, 0x0) syz_open_dev$usbmon(&(0x7f0000000c00), 0xfffffffffffffffe, 0x103) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 3.763843415s ago: executing program 1 (id=1663): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='stat\x00') renameat2(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00', 0x5) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c2", 0x4}], 0x1}}], 0x1, 0x20008000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000400)='/dev/loop#\x00', &(0x7f0000000440)='./file0\x00', r2) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x39, &(0x7f0000000740)="67ba158fc793035de8de2fd0f8817f15e2f28291e0ed731dc4ae1371a6830505822f8e1f51931bd1e4abf827f37edd28f0fc6d3d9f42574251") r4 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.183767804s ago: executing program 0 (id=1666): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x23, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xae, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) msgget$private(0x0, 0x410) 2.595163248s ago: executing program 4 (id=1669): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffff80, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xff, @media='ib\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x5, 0x9, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x10ed, @rand_addr=' \x01\x00', 0xbcd}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x70}}, 0x84) 2.55109232s ago: executing program 0 (id=1670): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c007b84", @ANYRES16=r1, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_usb_connect(0x5, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000d09050b"], 0x0) 2.441050424s ago: executing program 4 (id=1671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000540)={0x1, 0x0, [{0x29b, 0x0, 0x7}]}) 2.437276537s ago: executing program 4 (id=1672): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r0, 0x80047456, &(0x7f0000000340)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$x25(r4, &(0x7f0000000200), 0x12) r6 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x141e40, 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, &(0x7f0000000480)={@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @remote}}, {&(0x7f0000000240)=""/162, 0xa2}, &(0x7f0000000180), 0xd}, 0xa0) bind$x25(r2, &(0x7f0000000080), 0x12) dup3(r1, r2, 0x80000) 2.204809987s ago: executing program 4 (id=1674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x1}, {0x0, 0x47}, {0x0, 0x4}, {}, {}, {0x20}, {}, {}, {}, {0x4}, {0x21}, {}, {}, {0x3, 0x0, 0xcc}, {}, {}, {}, {}, {}, {0xfe}, {0x0, 0x0, 0x40}]}}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f0000000180)={0xa, 0x80000001, 0xffffffffffffffff, 0x2, 0x12, 0x20000008, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r7, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/135, 0x87}], 0x1, 0x7, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000200)="66b9800000c00f326635010000000f30b8fb058ec0d9f0660fc77706660f38800a260f23a5360fc7350f01c50f9dcff2aa", 0x31}], 0x1, 0x51, 0x0, 0x0) (async) r9 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) (async) sendto$inet(r9, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) (async) recvmsg$unix(r9, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.17115064s ago: executing program 4 (id=1675): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106d0419c200006d17000109022400010000000c090400000203000000092101007101220500090581030004ff0000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x18, 0x7, {0x7, 0xd, "a18265cc32"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.869166122s ago: executing program 0 (id=1677): r0 = socket$pppoe(0x18, 0x1, 0x0) setpgid(0x0, 0x0) (async) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x3, @multicast, 'macvlan1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @link_local, 'veth1\x00'}}) 1.838262222s ago: executing program 0 (id=1678): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="757365722e0025ed6d3b40baad9ed46ca775373d1205f22d18894d245ece6c0ee96f48de80c9a17b31b0d8f7c180b91ac33abe5638c5cdde6aaa014394cc61fdef1540379e800b6e8015e9a67cef266fc84fa77d3d1ac06af1343f4413363fcb102231647b92c8317fc66974bc96b554b0d0345a1fe3e52776bd7fbd9560bf6fee35446713c5a3920199ee3fb313aa7ffe8b5b9f239e23c7063fd4f301e2dd2a48491306df322b23bdc66a8c225e0ca1668dc6817222c984a81cda0ec63e5617fa06ff8e4214bea680734451073a214b8659b3bea9668cacec90d72b978a69c792fa72920387aa097c356c67f9a33d2f40a05d16"], 0x0, 0x0, 0x2) (rerun: 32) 1.78873487s ago: executing program 5 (id=1679): r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x5, 0x0) (async) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000380)={0x44, r4, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdfc}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x4, 0x1, 0x7f30}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x34040814}, 0x8844) 1.684761244s ago: executing program 0 (id=1680): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043209aaaa"], 0xc) syz_usb_connect$uac1(0x2, 0xae, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x40, 0x80, 0x4, 0x8, 0xff, 0x80}, 0x44, &(0x7f0000000080)=ANY=[], 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44c}}, {0x26, &(0x7f0000000040)=@string={0x26, 0x3, "ebeb70d1c3d3a0f22c94ee51f12f18ca204e30acc90840ac2247a4990e13d46346f474d1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x402}}]}) r1 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, r2}, 0x68) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a0104e5ff0000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000310c000b400000000000000000140000001000010000000000000000000084000a"], 0x78}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x417d, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80400001600010a00000000000000000a000000a404ca809d0401"], 0x4b8}, 0x1, 0x0, 0x0, 0x844}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0x4000000000000, 0xf000, 0x2}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9e7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30bfdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf2805372a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f0050079601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5820a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac980acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de628d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64ffff5208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e55037859293e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd41d704bbdba7d282aac778b7ec769ef984527c8112d56e75ab77ff8898d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a5518b3c1de451f220c418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77030094543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7073b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2dbed5d52c8e976744da29f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3ad34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f6373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f00000000dfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.684473012s ago: executing program 5 (id=1681): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="e9", 0x1}], 0x1}}], 0x1, 0x2000c000) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r1, 0xab05) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='d', 0x1, 0x4044, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) read(r0, &(0x7f0000002400)=""/4076, 0xfec) 1.597991952s ago: executing program 5 (id=1682): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x87, @private=0xa010100, 0x4e21, 0x4, 'lblc\x00', 0xf, 0xfffffff5, 0x35}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0xd, 0x1, 0x4}}, 0x44) syz_io_uring_setup(0x6c6, &(0x7f0000000000)={0x0, 0xef6d, 0x20, 0x2, 0xff}, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a275", 0x2}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x98ae, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000003c0)='/KlZ', 0x4}], 0x1}}], 0x2, 0xc010) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, &(0x7f00000002c0)=0x1, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRES8=r3], 0x1018}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.541365906s ago: executing program 4 (id=1683): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000012", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3}}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, &(0x7f00000001c0)={0x0, 0x22, 0xf0, {0xf0, 0x22, "f992be06125d1e9097623d00acff0a38ebcd5791def955cfa42ff3ecf7918a6680b3915387e781861e9a82cc7e0ae7a052e43727f7638af692aa7177d39dee1ebf9f7235e0c304267446b106495723a46c39fb86695b04d4736bb3e2d50d8351706e2ab50c7ab043faf731c7fb066e931efb857cf010b567cfb62616f192faecebf523cc39a0c791e4531142c46f98b8da80c2d831bbd402e6d754e0234beef1c672adf5456490de157253de4496443dae66bcc2cc86cd969a6ed4992a2eccc38cc8030cbc1ddc462d1d58b7735e8a03c5a61051b136e11fc1900dbb80b0c07b280248a8e68dafbf75d5aa4d30f7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x79, @string={0x79, 0x3, "fb22122ded0f227f101d9ecc6a551e90357c180bcd7734ed3d05240f8a6897ce49601aaf3ab0d36993e587e87a6ec7d96f007b5dfa220b1b6cadfaa4ab0335f91aa5fbfff4b0ffa614630aec8e34c551ed186085c5973ee16222b6bf02623869bdff727fe0f445e46b15ef9d5443866bd1eaf4f9f7f24c"}}}, &(0x7f0000000340)={0x1c, &(0x7f00000002c0)={0x20, 0x9, 0x12, "3b60379616626aa1224f28a7c028c4ca3f91"}, &(0x7f0000000d40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000300)}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80e85411, &(0x7f00000022c0)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000700)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendfile(r3, r2, 0x0, 0x8020000023894) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1.408556977s ago: executing program 5 (id=1684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x50c0) (async) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000180)=[@wr_crn={0x46, 0x20, {0x0, 0xffffffffffff0001}}, @rdmsr={0x32, 0x18, {0x481}}, @wrmsr={0x1e, 0x20, {0x226, 0x800}}, @out_dx={0xaa, 0x28, {0x93bc, 0x7, 0x8001}}, @wrmsr={0x1e, 0x20, {0x215, 0x80}}, @wrmsr={0x1e, 0x20, {0x8f2, 0x3}}], 0xc0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000280)={[0x400, 0x8, 0x7fffffff, 0xfff, 0x8, 0x1, 0x9, 0x1, 0x3, 0x2a21ef30, 0x40, 0x0, 0x593, 0x100, 0xe80, 0x800, 0x3, 0x0, 0xfffffffa, 0x3ff, 0x400, 0x9, 0x5, 0x3, 0xffffffff, 0x9, 0x7, 0x7fff, 0x3, 0x7, 0x0, 0x2, 0xe6, 0x0, 0x2, 0x1ff, 0x7b, 0x9, 0x3, 0x800, 0xe47, 0x7, 0x3, 0x9, 0x6f9, 0x2, 0xd285, 0x3, 0x1ff, 0x5, 0xc6, 0x7, 0x4, 0x2, 0x1cc5, 0x35, 0x1, 0x6, 0x9, 0x9, 0x6, 0x85c0, 0x7, 0xe1, 0xfffffffe, 0x34ba, 0x9, 0x101, 0x5, 0x9, 0x4, 0x7, 0xc6, 0xde, 0x6, 0x6, 0x96f, 0x6, 0xfd8, 0x9, 0xffffffe0, 0xfff, 0x400, 0x5065, 0x9821, 0x8, 0x9b, 0x6, 0x1, 0x100, 0x80000001, 0xa3, 0x10000, 0x1, 0x10000, 0x51, 0xffff0000, 0x3, 0xff, 0x8, 0x72f, 0xb40, 0xfffff800, 0x280000, 0x3, 0x7, 0x9, 0x76, 0x8, 0x3, 0x3, 0x400, 0x4, 0x3, 0xb, 0x0, 0x8001, 0x400, 0x4, 0x0, 0x2, 0x6, 0x7, 0x175, 0x0, 0x85a, 0x2, 0x7d4, 0xb, 0xffffffa5, 0x0, 0x9, 0x7f, 0x6, 0x44b7, 0x2, 0x987, 0x30, 0x200, 0x100, 0x5, 0x80000000, 0x9, 0x71a, 0x9, 0x2, 0x83ae, 0x6, 0xfff, 0x8000, 0x8, 0x5, 0x6, 0x1, 0x7, 0x7, 0x1, 0x9, 0x2, 0x63, 0x0, 0x7, 0x0, 0x100, 0x6, 0x3, 0x10, 0x10, 0x5, 0x8, 0x5, 0xa, 0xc0000000, 0x2, 0x10000, 0x170c2e9b, 0x5, 0x5b, 0x2, 0x3, 0xd, 0xa7, 0x2, 0xff, 0x9, 0x1, 0x0, 0x1, 0xfffffc01, 0x5, 0x9, 0x4, 0xb0e, 0x0, 0x5, 0x4, 0x80000001, 0x5, 0x7, 0x92, 0x8, 0x2, 0xfffffff7, 0xc, 0x2, 0x9, 0x9, 0xf, 0x7, 0x1, 0xfffffffb, 0x0, 0x14c2, 0x1, 0x3ff, 0x5, 0xa, 0x1, 0x0, 0x5, 0x10, 0x7, 0x1, 0x3, 0x8000, 0x4, 0x5, 0x4, 0x9, 0xa0000, 0x2, 0xfff, 0x8, 0x3800, 0x1, 0x5, 0x40000, 0x6, 0x39, 0x4, 0x1, 0x5, 0x8, 0x6, 0x3, 0x1, 0xa87, 0x1, 0xd, 0x2, 0xffffff7f, 0x3, 0xf, 0x3, 0xb, 0x800, 0xa44, 0x6, 0x1, 0x0, 0x3, 0x9, 0x4, 0x1, 0x1c, 0x3914, 0xa, 0x7fffffff, 0x1, 0x3, 0xff, 0x200, 0x3, 0x53, 0x5, 0x6, 0x3, 0x0, 0xafd, 0xfffffff7, 0x4, 0x7, 0x8, 0x2, 0x8, 0x2, 0x0, 0x1, 0x60, 0x0, 0x6, 0x8, 0x7, 0x0, 0x80000000, 0x4, 0x6, 0x80000001, 0x5ab, 0xfffffffb, 0xe, 0x9, 0x8001, 0x6, 0x4, 0x3, 0x1, 0x1ff, 0x0, 0xfffffff9, 0x5, 0x4, 0x67c6, 0x6, 0x3269, 0x7fffffff, 0xd, 0x8, 0x9, 0x80000000, 0xcea6, 0x49, 0xfffffff8, 0x2, 0x1000, 0x81, 0x8aa, 0x4, 0x5, 0x2, 0x4, 0x5, 0x4, 0x4, 0x0, 0x8001, 0xd020, 0x1, 0x2, 0x7, 0x100, 0x10001, 0x8, 0x7fffffff, 0x1, 0x1000, 0x7, 0x3, 0x9f, 0x9, 0x8, 0x5, 0x23b2, 0x0, 0x42, 0x4, 0x5, 0x2, 0x6, 0x1, 0x8, 0x2, 0x3, 0x2, 0x8, 0x1, 0x2, 0x6, 0x1d9803ff, 0x1, 0x8, 0x81, 0x9, 0x9, 0xffffffff, 0xffffffff, 0x2a, 0xffffffff, 0x5, 0x4, 0x3, 0x9fd, 0x7, 0x96, 0x9, 0x7, 0x8, 0x6, 0xfffffffa, 0xfffffc00, 0x9, 0x6, 0xfff, 0x94f, 0x7, 0xa, 0x8, 0x4, 0x48, 0x5, 0xbf, 0x5, 0xfffff294, 0x800, 0x28000, 0x3, 0x6, 0x0, 0xfff, 0x80000000, 0x5, 0x2, 0x9, 0x5, 0x8, 0x7, 0x2, 0xc8, 0x1ff, 0xff, 0x9, 0x1, 0xffffff80, 0xd, 0x400, 0x9, 0xfffffff9, 0x2, 0x2, 0x9, 0x80000001, 0x895, 0x1, 0x1b, 0x2, 0x1, 0x4, 0x1f, 0x8, 0x1, 0x65, 0xd, 0x9, 0x2, 0xa8, 0x93, 0x9, 0x4, 0x100, 0x7, 0x9, 0xffffffff, 0x9, 0xfffffffa, 0x2, 0x12efd3d9, 0x6, 0x0, 0x4, 0xb, 0x8, 0x9, 0x800, 0xb00, 0x8, 0x0, 0x2, 0x40, 0x8, 0x8, 0x10000, 0xffffffff, 0x4c1, 0x100, 0x7, 0x8cef, 0x4, 0x2, 0x49cb50a, 0x14b5, 0x2, 0x0, 0x1, 0x4, 0x2ce9, 0xffff0000, 0x5, 0x3, 0x1c0000, 0x1, 0x7fffffff, 0x5, 0x7, 0x80000000, 0xf2, 0x3, 0x65c, 0x10000, 0x3, 0x4, 0xff, 0x2, 0x9, 0x7ff, 0x7, 0x4, 0x1, 0x9, 0x2, 0x7, 0x1000, 0x145, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x2, 0x800, 0x5, 0x4, 0x81, 0x2, 0x0, 0x0, 0x400, 0x7fffffff, 0x0, 0x2, 0xfffffffd, 0x6, 0x0, 0xfffff00f, 0x926f, 0x32, 0x1, 0x4, 0x3, 0xd, 0x7, 0x8, 0x82, 0xe, 0xeaaf0bcb, 0x0, 0xf0, 0xcc0e, 0xd, 0x6, 0x800, 0x1c, 0x4, 0xca4e, 0x5, 0xfffffff5, 0x0, 0x8, 0x6, 0x4, 0x6, 0x2, 0x2, 0x4, 0x7f, 0x0, 0x7, 0x1, 0x0, 0x7, 0x7, 0x6, 0x3ff, 0xdb4fb7c4, 0x200, 0x8000, 0x5, 0x3, 0x476, 0x4, 0x2, 0x2, 0x3, 0x3ff, 0x7, 0x0, 0x5, 0x1000, 0x2, 0x6, 0xe, 0x4, 0xfffffffa, 0x1, 0x98, 0x8, 0xff, 0x9a6, 0x1, 0xffff, 0xf, 0x6, 0x7, 0x289e, 0x206, 0x1, 0x0, 0x8, 0x4, 0x7fffffff, 0x8, 0x2, 0x9, 0x4, 0x3, 0x3, 0x4, 0x2, 0x93bd, 0x7fff, 0x4, 0x86b, 0xff, 0x80000001, 0x7, 0x80000001, 0xfebb, 0x9, 0x1, 0xffffffff, 0x80, 0x2649, 0x4a, 0xfffffffa, 0x3, 0x4, 0x800, 0x723, 0xd, 0xd, 0x4, 0x400, 0x8, 0x7, 0x6, 0x5, 0x2, 0x7fffffff, 0x9, 0x1, 0x1000, 0xc000, 0x0, 0x7fff, 0x3, 0x1, 0x3, 0x5d9ff727, 0x10001, 0x8, 0x12000, 0xc, 0xee76, 0x1, 0x1e46, 0x9, 0x5, 0x80000000, 0x800, 0x401, 0x7fffffff, 0x3, 0x9, 0x101, 0xffffffd7, 0xfffffffc, 0x3, 0x1, 0x7, 0x5, 0x8, 0x9e0, 0x5, 0xd, 0x7, 0x2, 0x8, 0x95e8, 0x1, 0x0, 0xfffffff9, 0x7, 0xfffffff9, 0x80000001, 0x0, 0x5, 0x7, 0x7, 0xf, 0x95, 0x124e, 0x53648000, 0x101, 0x4, 0x9, 0x1, 0x4, 0x8, 0x49, 0x82c00000, 0x0, 0x9e, 0x3, 0x101, 0x3, 0x8bc, 0x10000, 0x6, 0x10001, 0x9, 0x4, 0xa267, 0x7, 0x8, 0x5, 0x9, 0x5, 0xc, 0x6, 0x8000, 0x8, 0xec09, 0x1, 0x7, 0x0, 0xfff, 0x1, 0x0, 0x1, 0x4, 0xffffa00a, 0x2, 0x6, 0x9, 0xfffffc01, 0x7fee003e, 0x400, 0x4, 0x3, 0x6, 0x6, 0x7, 0x2, 0x5, 0xe5, 0x2, 0x3, 0x432, 0x82ca, 0x8, 0x8, 0xffffff91, 0x40, 0xffffffff, 0x5, 0x5, 0x5, 0xe, 0x0, 0x1, 0x7, 0x61f1, 0xc3f, 0x1, 0xfff, 0x0, 0xfffffffa, 0x4654ff88, 0x3, 0x1, 0xffffffff, 0x81, 0x3, 0x202c, 0x94, 0x8, 0x100, 0x0, 0xfe3, 0x9, 0x936, 0xe440, 0x8, 0x80000000, 0x7, 0xffffffff, 0x9, 0xff, 0x6e, 0x1ff, 0xf0, 0x7, 0x9, 0x8523, 0x0, 0x3, 0x2, 0x1, 0x40, 0xa075, 0x3, 0x76, 0x1551, 0xc0, 0xf2, 0xb0a5, 0x200, 0x4, 0x5, 0x3ea, 0x7, 0xffffffff, 0x3, 0x9, 0x5, 0x2, 0x5, 0x7, 0x8, 0x40, 0xfffffffe, 0x9, 0x4, 0x4, 0x8, 0x0, 0x5, 0x7, 0x8, 0x1, 0x2, 0x7, 0x1f, 0x7, 0x7, 0x4, 0x8, 0x2, 0x7, 0xffffffff, 0x1000, 0x1, 0x9, 0x7, 0x9, 0x5, 0xfffffffa, 0x1, 0x1, 0x4, 0x9, 0x0, 0x9, 0xb, 0x4, 0x3, 0x7, 0x8, 0xf6e, 0x6, 0x8, 0x4, 0x2, 0x9, 0x7, 0x8, 0x7, 0x5, 0x4, 0x4029, 0x59, 0xbde3, 0x21, 0x8, 0x9, 0x10000, 0x6, 0xf48d, 0x8, 0x8, 0x0, 0x6feb, 0x4, 0x9, 0x0, 0x400, 0xffa, 0x1, 0x5, 0x8, 0x3, 0xc, 0xff, 0x2, 0xe, 0x3, 0x0, 0x2d0, 0xa, 0x10001, 0x8, 0x5, 0x7, 0x7, 0x9, 0x2, 0x1, 0x9, 0x9, 0x8, 0x6, 0x9, 0x3ff, 0x8000000, 0x97c2, 0x3, 0x8, 0x7, 0x0, 0x77b, 0x8000, 0x81, 0x74, 0x8000, 0x4, 0x101, 0xc, 0x5712, 0xeb, 0x81, 0x38, 0x92ae, 0xb9, 0xd5, 0x1000, 0x80000000, 0x4, 0x6, 0x6, 0x9, 0x8, 0x2f2, 0x7a, 0x4, 0x7ff, 0x2, 0x9, 0xe, 0x10000, 0x4, 0x4, 0x6, 0x2, 0xc7, 0xffffff6b, 0x1, 0x0, 0x6, 0xae2, 0xb8f, 0x5, 0x4, 0x5, 0x5, 0x5, 0x9, 0x3, 0x2, 0x2, 0x6, 0x83, 0x9, 0xffffffa4, 0x5, 0xf44, 0xab, 0x3ff, 0x1, 0x0, 0x36, 0x8, 0x10001, 0x8001, 0x5, 0xfffffff3, 0x9, 0x2400000, 0x2, 0x4, 0x0, 0x4, 0x6, 0x1, 0x3, 0x10001, 0x2, 0x76, 0xfe7, 0x1, 0x40, 0x4, 0x6, 0x2, 0x80000001, 0x9, 0xfffffff9, 0x9, 0x2, 0x22, 0x2, 0x7, 0x8, 0x6, 0x10000, 0x9]}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_CAP_PTP_KVM(r3, 0x4068aea3, &(0x7f0000001280)) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000001300)) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001380)={'IDLETIMER\x00'}, &(0x7f00000013c0)=0x1e) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5c}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4001) (async) syz_open_dev$dri(&(0x7f0000001500), 0xd, 0x200002) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001540), 0x2a300) (async, rerun: 32) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000001580)={0x9, 0x5}) (async, rerun: 32) fsetxattr$trusted_overlay_upper(r4, &(0x7f00000015c0), &(0x7f0000001600)={0x0, 0xfb, 0xba, 0x5, 0xb, "a4aadf9bc3226513428c725edd46f8b1", "094947426944350864b50a021254269ebb4b6a72581da2de34ccdbcb8e9934a98b524b60cc59dab30c189260c971089fa04f813f32dcc8434ac71f1183519a8669827f26d92acb1d99ee8928a15298813345bae3bef285f7aa7bad40dc3f88c37880e657213b917722be5a54fecdc573f7c1720a175eeec61fed243a6841075c5e3d0e5fb4e55483e0e0748fada12edfab2f76584084fe8554874fcb28f22db493bb59bf0a"}, 0xba, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = syz_open_dev$vcsu(&(0x7f00000016c0), 0x6, 0x0) bind$l2tp(r6, &(0x7f0000001700)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, 0x2}, 0x10) (async, rerun: 64) lseek(r6, 0xffff, 0x0) (async, rerun: 64) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000001740), &(0x7f0000001780)={'U+', 0x6}, 0x16, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000017c0)={0x3, 'erspan0\x00', {0x4}, 0x5}) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001800)='/sys/power/pm_freeze_timeout', 0x901, 0x101) (async) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000001840), 0x200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000001880)={0x1, 0x1, 0x80a0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x3dbd226d, r8}) (async) write$tun(r8, &(0x7f0000001940)={@void, @void, @ipv6=@gre_packet={0x2, 0x6, "5ff80f", 0x52f, 0x2f, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x3c, 0x10, 0x4, 0x8, 0x4, 0x8, 0x8e, [@dev={0xfe, 0x80, '\x00', 0x21}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast2]}, @hopopts={0x88, 0x2c, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x9, [0x517, 0x4, 0xb, 0x3]}}, @generic={0xc1, 0xe7, "cdaf91080a401d1adc57259251dafb8e16a11bdb267d231e83a64c629087730557a8946bcba70db69226f0d54b88a0650c5fc89a9a7307283d6336250fa3579838abea5d5cbe099a6b3d6584374f6b1c5e4a8f677bee0619bc7a4a65b2dd2a37637cd749a71f5adaf041c215ffa6d4c4b999ae3f4d6fd75bc25c05ea54b8ae88c3828db76c3e4bd7a74e8237024f753a34749e8d8ca71ee12f8461161fe2f8295931b90745f02f962bcca634ad51c0ea7c28bd669fa74741c2c83b41846d51102d5cf796c35138c6111361fd54eb7ed700dc47f555c0669ef5bdd1fb2c5297d1064b0093a09534"}, @hao={0xc9, 0x10, @private1}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x0, 0x6, 0x6, 0x120, [0xfffffffffffffff5, 0xa000000000, 0x8]}}, @jumbo={0xc2, 0x4, 0xffff8000}]}, @dstopts={0x71, 0xc, '\x00', [@generic={0xd, 0x40, "6ebeb899bc8d7b8a66fe63048eae8424ceb90169fcb33233365808c0d684694d224702ecf2262b0b07850711bad498c931cf0d04ea3bdbb4a072f72047e7102a"}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @pad1, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2, 0x8, 0x2, 0x0, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @hopopts={0x33, 0x0, '\x00', [@pad1]}, @hopopts={0x33, 0x0, '\x00', [@pad1]}, @srh={0x2f, 0xa, 0x4, 0x5, 0x77, 0x10, 0x11da, [@rand_addr=' \x01\x00', @local, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x16}, @empty]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd3, 0x3, [0x2, 0x5], "23016cb588554fe96ac69fb55963134117f921e98d85bf0065d16c12f02985795daca0cbb15d6c8ead8bac0a21bb63992bd0aeb56bc33dac9920f0394ed177c8f9b6d769d2b0f94f3d001cc5263faae07f8c1b36d98099e89033dbdb11e18d13a9faa9b952fcddd08fb220e1f791cc69800c13793eeac5829b77e01fbb153bd1c59399b11097ada9cde89c50bfef91135ef7e0ec479b2f5b8336e51e9f8c8cb39ee145c49889f60183d59724a4c5bc92c04c14e1382d87ed5a030f8ad4ab765c49615308e6415876ae4f4821215a3837a3ad1f"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x1], "4b77aa03d75eb4fb6e85c87e8da8f814522f4b19f791b0aecc60cb095afc861072db9aa3c183746c31938a9f62725a517b3c0198a5015af6b3d64b2f4a"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x60], "64b0e207542c118f1018927cca01e58b5f9379befdb45bb1a27c63b1ac4385300c03b3fd99cf759775bfd5dbb169a2a65b797c0cba698d4057e17c9dd2c7e308fec74ad143bbe3cfe68b0617208e7acdd58e520f24170efab2377c6dc01e79f0fa0f112a1423a0a3f031"}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x48, 0x1, 0x0, 0x1, 0x7, 0x9}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6}, 0x2, {0x8000, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x2, "0b07cb52f914a40dd3fea7f9cc2c684a01abdbd939a942deb9ae61002f475203451c691c190b0f56c74705249d8b1e8e75fd462be8ccdbef1b04081a47be17d61beee38d87bf8d2a7d"}}}}}, 0x557) (async) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000001ec0)=@fragment={0x62, 0x0, 0x7, 0x0, 0x0, 0x5, 0x64}, 0x8) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 32) close_range(r9, r0, 0x2) close_range(r9, r6, 0x0) 1.360061705s ago: executing program 5 (id=1685): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x11, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x1a, &(0x7f0000000340)=0x7ff, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r3], 0x0) 799.458348ms ago: executing program 0 (id=1686): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x29, 0x5, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) r4 = dup(r2) r5 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) fsetxattr$security_ima(r0, &(0x7f0000003240), &(0x7f0000003280)=ANY=[@ANYBLOB="060323"], 0xb, 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x604800, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r10, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3000000000000000290000000b0000000002000000000000000000440000aa00"/48], 0x30}, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x40901, 0x10) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000000440)={r12, 0x0, {0x0, 0x0, 0x0, 0x400, 0xfff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d2000000000000004db5ca3000", "24431a1e77a68e174b0000000000000c0010e200000000000000000200000200", [0x0, 0xfffffffffffffffe]}}) syz_kvm_setup_cpu$x86(r12, r9, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000002c0)="66b9800000c00f326635000800000f30f20fe6530066b8fb0000000f23c00f21f86635020000000f23f866b9620200000f3265640fc75c02d9fa82aa500e80660fc7700f66b9800000c00f326635000100000f3036660f5ad7", 0x59}], 0x1, 0x10, &(0x7f0000000380)=[@cstype3={0x5, 0xd}], 0x1) 0s ago: executing program 5 (id=1688): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLERROR(r0, &(0x7f00000000c0)={0x17, 0x7, 0x2, {0xe, ']]-[-<}:*-}.%.'}}, 0x17) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) kernel console output (not intermixed with test programs): , SerialNumber=35 [ 286.533410][ T5889] usb 1-1: Product: syz [ 286.537909][ T5889] usb 1-1: Manufacturer: syz [ 286.542599][ T5889] usb 1-1: SerialNumber: syz [ 286.559404][ T5889] usb 1-1: config 0 descriptor?? [ 286.777850][ T5889] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 286.784660][ T5889] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 286.836959][ T8922] syz.3.912 (8922): drop_caches: 2 [ 286.874102][ T5908] az6027: usb out operation failed. (-71) [ 286.883835][ T5908] stb0899_attach: Driver disabled by Kconfig [ 286.901764][ T5908] az6027: no front-end attached [ 286.901764][ T5908] [ 286.911266][ T5908] az6027: usb out operation failed. (-71) [ 286.917595][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 286.936233][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 286.952384][ T5908] dvb-usb: schedule remote query interval to 400 msecs. [ 286.960217][ T5908] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 286.974201][ T5908] usb 4-1: USB disconnect, device number 95 [ 286.985822][ T5889] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 287.024761][ T5889] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 287.038068][ T5889] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 287.052185][ T5889] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 287.078108][ T5908] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 287.655364][ T5889] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 287.664117][ T5889] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 287.681009][ T5889] usb 1-1: USB disconnect, device number 86 [ 287.807693][ T9003] nfs4: Unknown parameter '+V\-' [ 288.412831][ T9017] tmpfs: Bad value for 'mpol' [ 288.688755][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.947'. [ 288.841332][ T9049] overlayfs: failed to clone lowerpath [ 288.995742][ T5908] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 289.021805][ T9057] netlink: 56 bytes leftover after parsing attributes in process `syz.1.954'. [ 289.175832][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 289.182832][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.205240][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.225694][ T5908] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 289.234770][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.273123][ T5908] usb 1-1: config 0 descriptor?? [ 289.298787][ T5908] hub 1-1:0.0: USB hub found [ 289.513305][ T5908] hub 1-1:0.0: 1 port detected [ 289.730065][ T5908] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 289.746039][ T5908] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 289.765099][ T5908] usbhid 1-1:0.0: can't add hid device: -71 [ 289.778058][ T5908] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 289.826569][ T5908] usb 1-1: USB disconnect, device number 87 [ 289.944353][ T9101] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.965'. [ 289.996728][ T9103] /dev/nullb0: Can't lookup blockdev [ 290.105763][ T5861] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 290.245841][ T5861] usb 4-1: device descriptor read/64, error -71 [ 290.367943][ T9113] netlink: 'syz.4.970': attribute type 13 has an invalid length. [ 290.377010][ T9113] netlink: 164 bytes leftover after parsing attributes in process `syz.4.970'. [ 290.386605][ T9113] syz_tun: refused to change device tx_queue_len [ 290.495731][ T5861] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 290.515756][ T5889] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 290.625749][ T5861] usb 4-1: device descriptor read/64, error -71 [ 290.677239][ T5889] usb 1-1: config 0 has no interfaces? [ 290.684942][ T5889] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 290.695078][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.703915][ T5889] usb 1-1: Product: syz [ 290.708140][ T5889] usb 1-1: Manufacturer: syz [ 290.713378][ T5889] usb 1-1: SerialNumber: syz [ 290.720607][ T5889] usb 1-1: config 0 descriptor?? [ 290.736074][ T5861] usb usb4-port1: attempt power cycle [ 290.932051][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.947148][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.979489][ T5889] usb 1-1: USB disconnect, device number 88 [ 291.075761][ T5861] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 291.096368][ T5861] usb 4-1: device descriptor read/8, error -71 [ 291.335735][ T5861] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 291.357098][ T5861] usb 4-1: device descriptor read/8, error -71 [ 291.415767][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 291.466380][ T5861] usb usb4-port1: unable to enumerate USB device [ 291.545920][ T10] usb 1-1: device descriptor read/64, error -71 [ 291.669101][ T9125] overlayfs: failed to clone upperpath [ 291.758203][ T9128] overlayfs: failed to clone lowerpath [ 291.787478][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 291.935861][ T10] usb 1-1: device descriptor read/64, error -71 [ 292.046868][ T10] usb usb1-port1: attempt power cycle [ 292.385818][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 292.406373][ T10] usb 1-1: device descriptor read/8, error -71 [ 292.457546][ T9135] netlink: 'syz.4.978': attribute type 39 has an invalid length. [ 292.645767][ T10] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 292.666678][ T10] usb 1-1: device descriptor read/8, error -71 [ 292.777306][ T10] usb usb1-port1: unable to enumerate USB device [ 293.285744][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 293.352850][ T9155] loop5: detected capacity change from 0 to 7 [ 293.362252][ T6354] Dev loop5: unable to read RDB block 7 [ 293.369018][ T6354] loop5: unable to read partition table [ 293.375505][ T6354] loop5: partition table beyond EOD, truncated [ 293.389345][ T9155] Dev loop5: unable to read RDB block 7 [ 293.397675][ T9155] loop5: unable to read partition table [ 293.403503][ T9155] loop5: partition table beyond EOD, truncated [ 293.410305][ T9155] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 293.435700][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 293.464482][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 293.477284][ T10] usb 4-1: config 0 has no interface number 0 [ 293.483443][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.495905][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.508656][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 293.523214][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 293.532750][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.541477][ T10] usb 4-1: Product: syz [ 293.546837][ T10] usb 4-1: Manufacturer: syz [ 293.551451][ T10] usb 4-1: SerialNumber: syz [ 293.563512][ T10] usb 4-1: config 0 descriptor?? [ 293.623765][ T9160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.986'. [ 293.641892][ T9162] [syz.4.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 293.655527][ T9162] netlink: 'syz.4.987': attribute type 4 has an invalid length. [ 293.915767][ T5861] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 294.065894][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 294.073892][ T5861] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 294.082487][ T5861] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.092985][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.103332][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.113365][ T5861] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.126475][ T5861] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.135530][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.232847][ T9170] netlink: 'syz.1.990': attribute type 4 has an invalid length. [ 294.244458][ T9170] netlink: 152 bytes leftover after parsing attributes in process `syz.1.990'. [ 294.264065][ T9170] .`: renamed from bond0 (while UP) [ 294.431212][ T9179] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 295.405570][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 295.992365][ T10] appletouch 4-1:0.85: Failed to read mode from device. [ 296.009109][ T10] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 296.032384][ T10] usb 4-1: USB disconnect, device number 100 [ 296.224016][ T9223] 9pnet_fd: Insufficient options for proto=fd [ 296.631891][ T24] usb 1-1: USB disconnect, device number 93 [ 297.526628][ T9242] netlink: 'syz.0.1013': attribute type 33 has an invalid length. [ 297.534482][ T9242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1013'. [ 297.639221][ T9245] netlink: 'syz.1.1014': attribute type 29 has an invalid length. [ 297.647103][ T9245] netlink: 'syz.1.1014': attribute type 3 has an invalid length. [ 297.654837][ T9245] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1014'. [ 297.743213][ T9251] fuse: Bad value for 'fd' [ 298.055803][ T55] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 298.217378][ T55] usb 1-1: config 0 interface 0 has no altsetting 0 [ 298.225026][ T55] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 298.237267][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.252230][ T9263] veth1_to_bond: entered allmulticast mode [ 298.255069][ T55] usb 1-1: config 0 descriptor?? [ 298.330251][ T9264] veth1_to_bond: left allmulticast mode [ 298.687037][ T55] waltop 0003:172F:0500.0013: unknown main item tag 0x0 [ 298.694134][ T55] waltop 0003:172F:0500.0013: item fetching failed at offset 3/5 [ 298.708892][ T55] waltop 0003:172F:0500.0013: probe with driver waltop failed with error -22 [ 299.515534][ T5829] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 300.862111][ T10] usb 1-1: USB disconnect, device number 94 [ 301.020003][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 301.265727][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 301.417780][ T10] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 301.427917][ T10] usb 1-1: config 0 has no interface number 0 [ 301.434260][ T10] usb 1-1: config 0 interface 120 has no altsetting 0 [ 301.441802][ T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=d6.f3 [ 301.452623][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.468106][ T10] usb 1-1: config 0 descriptor?? [ 301.680387][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.707190][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.732073][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.756181][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.779002][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.792412][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.823654][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.847229][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.860773][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.871051][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.897942][ T10] usb 1-1: string descriptor 0 read error: -71 [ 301.913773][ T10] cytherm 1-1:0.120: Cypress thermometer device now attached [ 301.939440][ T10] usb 1-1: USB disconnect, device number 95 [ 301.953876][ T10] cytherm 1-1:0.120: Cypress thermometer now disconnected [ 302.493112][ T9315] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.650507][ T9320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.732481][ T9322] x_tables: duplicate entry at hook 2 [ 303.060795][ T9337] overlayfs: failed to clone upperpath [ 304.030546][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 304.043147][ T9370] bridge_slave_1: left allmulticast mode [ 304.050302][ T9370] bridge_slave_1: left promiscuous mode [ 304.056546][ T9370] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.068939][ T9370] bridge_slave_0: left allmulticast mode [ 304.074610][ T9370] bridge_slave_0: left promiscuous mode [ 304.080837][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.426569][ T9380] can: request_module (can-proto-0) failed. [ 304.624656][ T9389] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1053'. [ 304.831374][ T9393] syzkaller1: entered promiscuous mode [ 304.837155][ T9393] syzkaller1: entered allmulticast mode [ 304.878741][ T9393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.186037][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 305.349606][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 305.368576][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 305.385679][ T10] usb 1-1: config 220 has no interface number 2 [ 305.399101][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 305.415369][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 305.422795][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 305.432574][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 305.441566][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 305.442732][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 305.468411][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.479101][ T10] usb 1-1: Product: syz [ 305.483276][ T10] usb 1-1: Manufacturer: syz [ 305.488391][ T10] usb 1-1: SerialNumber: syz [ 305.709799][ T10] usb 1-1: selecting invalid altsetting 0 [ 305.733199][ T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 305.748785][ T10] uvcvideo 1-1:220.0: No valid video chain found. [ 305.769605][ T10] usb 1-1: selecting invalid altsetting 0 [ 305.775378][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 305.797492][ T10] usb 1-1: USB disconnect, device number 96 [ 305.930067][ T9421] netlink: 'syz.1.1062': attribute type 3 has an invalid length. [ 305.938150][ T9421] netlink: 'syz.1.1062': attribute type 3 has an invalid length. [ 306.598596][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 307.233231][ T9467] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1070'. [ 307.407581][ T9472] pim6reg: entered allmulticast mode [ 307.447247][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 307.765705][ T24] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 307.889434][ T9483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1074'. [ 307.926314][ T9484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1074'. [ 307.937586][ T24] usb 1-1: config 0 has an invalid interface number: 243 but max is 0 [ 307.955801][ T24] usb 1-1: config 0 has no interface number 0 [ 307.962039][ T24] usb 1-1: config 0 interface 243 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.995233][ T24] usb 1-1: New USB device found, idVendor=0846, idProduct=6a00, bcdDevice=de.c6 [ 308.014618][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.023753][ T24] usb 1-1: Product: ﴠ믹㌔蹊쟂찒偲菝闑ᶅ頡됗⓭❏挕㐽爉鳖򬸅脈뜰꩜ὑ똅✳瓢韒舼뼈㍘좿ข悆狀䘔쐾裂鑑롹黌킗ᄽЧ穛ﱕ [ 308.075841][ T24] usb 1-1: Manufacturer: ы [ 308.080396][ T24] usb 1-1: SerialNumber: syz [ 308.106638][ T24] usb 1-1: config 0 descriptor?? [ 310.333263][ T5861] usb 1-1: USB disconnect, device number 97 [ 310.405228][ T9527] input: syz1 as /devices/virtual/input/input30 [ 310.765832][ T5861] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 310.928286][ T5861] usb 1-1: unable to get BOS descriptor or descriptor too short [ 310.940299][ T5861] usb 1-1: config 9 has an invalid interface number: 145 but max is 0 [ 310.949147][ T5861] usb 1-1: config 9 has no interface number 0 [ 310.956498][ T5861] usb 1-1: config 9 interface 145 has no altsetting 0 [ 310.968854][ T5861] usb 1-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=66.17 [ 310.978237][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.990292][ T5861] usb 1-1: Product: syz [ 310.994574][ T5861] usb 1-1: Manufacturer: syz [ 311.000756][ T5861] usb 1-1: SerialNumber: syz [ 311.368083][ T5861] quatech2 1-1:9.145: Quatech 2nd gen USB to Serial Driver converter detected [ 311.401794][ T5861] usb 1-1: qt2_attach - failed to power on unit: -71 [ 311.420554][ T5861] quatech2 1-1:9.145: probe with driver quatech2 failed with error -71 [ 311.431290][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.441322][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.451546][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.462593][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.471284][ T5861] usb 1-1: USB disconnect, device number 98 [ 311.477882][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.530290][ T9544] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1093'. [ 311.927368][ T9541] chnl_net:caif_netlink_parms(): no params data found [ 312.133366][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.144793][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 312.155893][ T10] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 312.157469][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.172335][ T9541] bridge_slave_0: entered allmulticast mode [ 312.180439][ T9541] bridge_slave_0: entered promiscuous mode [ 312.190045][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.197555][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.204798][ T9541] bridge_slave_1: entered allmulticast mode [ 312.212880][ T9541] bridge_slave_1: entered promiscuous mode [ 312.262754][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.279542][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.289067][ T10] usb 1-1: device descriptor read/64, error -71 [ 312.342354][ T9541] team0: Port device team_slave_0 added [ 312.352081][ T9541] team0: Port device team_slave_1 added [ 312.401328][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.409684][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.439903][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.454388][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.461532][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.489354][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.555953][ T10] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 312.565386][ T9541] hsr_slave_0: entered promiscuous mode [ 312.572854][ T9541] hsr_slave_1: entered promiscuous mode [ 312.579511][ T9541] debugfs: 'hsr0' already exists in 'hsr' [ 312.585309][ T9541] Cannot create hsr debugfs directory [ 312.696646][ T10] usb 1-1: device descriptor read/64, error -71 [ 312.799861][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 312.809217][ T10] usb usb1-port1: attempt power cycle [ 312.816746][ T30] audit: type=1326 audit(1762832796.028:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1099" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f222958f6c9 code=0x0 [ 312.960965][ T9541] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 312.974582][ T9541] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 312.988586][ T9541] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.017574][ T9541] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 313.185725][ T10] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 313.206521][ T10] usb 1-1: device descriptor read/8, error -71 [ 313.230845][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.284534][ T9541] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.314972][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.322247][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.362933][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.370158][ T7851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.445979][ T10] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 313.488929][ T10] usb 1-1: device descriptor read/8, error -71 [ 313.538047][ T5825] Bluetooth: hci5: command tx timeout [ 313.606734][ T10] usb usb1-port1: unable to enumerate USB device [ 313.874690][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.374472][ T9541] veth0_vlan: entered promiscuous mode [ 314.419500][ T9541] veth1_vlan: entered promiscuous mode [ 314.473770][ T9541] veth0_macvtap: entered promiscuous mode [ 314.493482][ T9541] veth1_macvtap: entered promiscuous mode [ 314.525980][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.547511][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.564156][ T7851] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.584298][ T7851] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.597552][ T7851] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.630074][ T7851] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.768700][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.817779][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.900543][ T7851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.912843][ T7851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.047704][ T9603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.080587][ T9603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.267154][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 315.405693][ T9] usb 1-1: device descriptor read/64, error -71 [ 315.507681][ T9623] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 315.526092][ T9623] kvm: apic: phys broadcast and lowest prio [ 315.615789][ T5825] Bluetooth: hci5: command tx timeout [ 315.645768][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 315.785714][ T9] usb 1-1: device descriptor read/64, error -71 [ 315.896347][ T9] usb usb1-port1: attempt power cycle [ 315.925975][ T55] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 316.065839][ T55] usb 6-1: device descriptor read/64, error -71 [ 316.265748][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 316.287163][ T9] usb 1-1: device descriptor read/8, error -71 [ 316.305833][ T55] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 316.445830][ T55] usb 6-1: device descriptor read/64, error -71 [ 316.535757][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 316.557049][ T9] usb 1-1: device descriptor read/8, error -71 [ 316.569150][ T55] usb usb6-port1: attempt power cycle [ 316.634393][ T9640] trusted_key: encrypted_key: master key parameter '' is invalid [ 316.668163][ T9] usb usb1-port1: unable to enumerate USB device [ 316.916083][ T55] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 316.946489][ T55] usb 6-1: device descriptor read/8, error -71 [ 317.044596][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.069773][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.093568][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.115198][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.147906][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.154355][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.165050][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.173341][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.183527][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.191080][ T55] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 317.195789][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.215729][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.222748][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.226556][ T55] usb 6-1: device descriptor read/8, error -71 [ 317.237005][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.254185][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.281071][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.304580][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.325645][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.343486][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.356190][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.363245][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.372712][ T55] usb usb6-port1: unable to enumerate USB device [ 317.379272][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.388497][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.396298][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.416409][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.438576][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.460165][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.482251][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.504391][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.511450][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.518411][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.525371][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.532376][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.541423][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.549286][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.556520][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.563465][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.570817][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.578399][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.585361][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.592871][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.618002][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.629351][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.645086][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.653705][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.661489][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.668880][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.676610][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.683683][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.691580][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.701302][ T5825] Bluetooth: hci5: command tx timeout [ 317.709335][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.716792][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.723824][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.731196][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.739663][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.749026][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.756298][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.763251][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.770592][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.779376][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.786745][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.793675][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.801000][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.808270][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.820019][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.828987][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.836303][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.843388][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.852167][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.859715][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.867024][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.873965][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.881346][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.888593][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.895520][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.904297][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.911558][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.918799][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.926721][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.933676][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.941006][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.952204][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.963476][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.973678][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.981364][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.988642][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 317.996198][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.003309][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.010769][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.018919][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.046008][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.074887][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.082467][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.125816][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.132721][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.140049][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.150233][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.160284][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.169433][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.180367][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.197335][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.204221][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.211557][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.218765][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.225944][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.232817][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.242773][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.267723][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.274613][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.284515][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.317210][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.324318][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.331818][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.340041][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.347383][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.354244][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.375342][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.389915][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.399102][ T30] audit: type=1326 audit(1762832801.608:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222958f6c9 code=0x50000 [ 318.436303][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.445719][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.450010][ T30] audit: type=1326 audit(1762832801.608:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222958f6c9 code=0x50000 [ 318.452592][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.495933][ T30] audit: type=1326 audit(1762832801.608:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222958f6c9 code=0x50000 [ 318.555754][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.573569][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.573611][ T30] audit: type=1326 audit(1762832801.608:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222958f6c9 code=0x50000 [ 318.585785][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.617005][ T30] audit: type=1326 audit(1762832801.628:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222958f6c9 code=0x50000 [ 318.642379][ T30] audit: type=1326 audit(1762832801.628:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222958f6c9 code=0x50000 [ 318.655731][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.673120][ T30] audit: type=1326 audit(1762832801.628:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222958f6c9 code=0x50000 [ 318.696477][ T30] audit: type=1326 audit(1762832801.628:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222958f6c9 code=0x50000 [ 318.715729][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.720263][ T30] audit: type=1326 audit(1762832801.628:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222958f6c9 code=0x50000 [ 318.725202][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.725219][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.725233][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.829667][ T30] audit: type=1326 audit(1762832801.628:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222958f6c9 code=0x50000 [ 318.851834][ T9] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 318.855782][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.888366][ T9680] futex_wake_op: syz.5.1128 tries to shift op by -1; fix this program [ 318.905993][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.912885][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.945780][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.955664][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.977321][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 318.984209][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.005906][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.012790][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.027390][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.035704][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.037702][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 319.044076][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.062721][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.088468][ T9] usb 1-1: config 0 descriptor?? [ 319.102342][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.125699][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.132597][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.155716][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.162619][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.175702][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 319.185659][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.192709][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.205830][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.212798][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.245677][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.252573][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.275692][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.283277][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.306211][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.313106][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.343271][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.354824][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.360701][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 319.372681][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.386798][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.392159][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.415379][ T10] usb 6-1: config 0 has no interface number 0 [ 319.425461][ T10] usb 6-1: too many endpoints for config 0 interface 1 altsetting 84: 241, using maximum allowed: 30 [ 319.425918][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.455729][ T10] usb 6-1: config 0 interface 1 altsetting 84 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 319.471170][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.491419][ T10] usb 6-1: config 0 interface 1 has no altsetting 0 [ 319.494854][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.506196][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.510754][ T9] uclogic 0003:28BD:0055.0014: interface is invalid, ignoring [ 319.527042][ T10] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 319.536663][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.545102][ T10] usb 6-1: Product: syz [ 319.547145][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.556540][ T10] usb 6-1: Manufacturer: syz [ 319.556560][ T10] usb 6-1: SerialNumber: syz [ 319.589178][ T10] usb 6-1: config 0 descriptor?? [ 319.603396][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.611281][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.620296][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.629438][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.638460][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.645425][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.652704][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.659791][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.666977][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.673946][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.681796][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.694241][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.702701][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.709810][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.718327][ T9] usb 1-1: USB disconnect, device number 107 [ 319.722629][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.732181][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.743977][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.758862][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.767484][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.774428][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.781879][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.786594][ T5825] Bluetooth: hci5: command tx timeout [ 319.795559][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.802539][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.809554][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.816826][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.824195][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.831479][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.840335][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 319.847178][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.854205][ T10] gspca_spca1528: reg_w err -71 [ 319.860269][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.867289][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.874371][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.881586][ T10] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 319.891564][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.901429][ T10] usb 6-1: USB disconnect, device number 6 [ 319.912561][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.920163][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.927251][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.934256][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.941539][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.948804][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.956962][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.963969][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 319.970970][ T9642] get_swap_device: Bad swap offset entry 3ffffffffffff [ 320.565850][ T24] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 320.725731][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 320.732513][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 320.741922][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 320.752360][ T24] usb 1-1: config 1 interface 0 altsetting 208 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.766767][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 320.778314][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 320.787696][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.797054][ T24] usb 1-1: Product: syz [ 320.801500][ T24] usb 1-1: Manufacturer: syz [ 320.806364][ T24] usb 1-1: SerialNumber: syz [ 320.885821][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 320.893939][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.903525][ T10] usb 6-1: config 0 has no interface number 0 [ 320.912459][ T10] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 320.924503][ T10] usb 6-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 320.937955][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.947460][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.956136][ T10] usb 6-1: Product: syz [ 320.960660][ T10] usb 6-1: Manufacturer: syz [ 320.965369][ T10] usb 6-1: SerialNumber: syz [ 320.975406][ T10] usb 6-1: config 0 descriptor?? [ 320.990491][ T10] smsc95xx v2.0.0 [ 320.994837][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 321.006449][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 321.041798][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input31 [ 321.058173][ T5179] bcm5974 1-1:1.0: could not read from device [ 321.065156][ T5179] bcm5974 1-1:1.0: could not read from device [ 321.075271][ T5179] bcm5974 1-1:1.0: could not read from device [ 321.087562][ T24] usb 1-1: USB disconnect, device number 108 [ 321.091516][ T5179] bcm5974 1-1:1.0: could not read from device [ 322.760412][ T9745] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1144'. [ 322.781870][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 323.547177][ T10] usb 6-1: USB disconnect, device number 7 [ 323.925749][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 323.928004][ T9765] netlink: 'syz.4.1151': attribute type 4 has an invalid length. [ 323.947296][ T9765] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1151'. [ 324.115700][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 324.125356][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.136394][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.146226][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 324.155279][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.174035][ T10] usb 6-1: config 0 descriptor?? [ 324.603922][ T10] savu 0003:1E7D:2D5A.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 324.803517][ T5861] usb 6-1: USB disconnect, device number 8 [ 325.237504][ T9787] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.1157'. [ 325.615780][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 325.797654][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.818986][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 325.845825][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 325.872111][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 325.905523][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.933518][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.945828][ T10] usb 6-1: Product: syz [ 325.950029][ T10] usb 6-1: Manufacturer: syz [ 325.962907][ T10] usb 6-1: SerialNumber: syz [ 325.989420][ T9791] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 326.016322][ T10] cdc_mbim 6-1:1.0: skipping garbage [ 326.209112][ T9791] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 326.226068][ T9791] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 326.480654][ T10] cdc_mbim 6-1:1.0: bind() failure [ 326.523453][ T10] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 326.546526][ T10] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 326.573033][ T10] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 326.596984][ T9811] syzkaller1: entered promiscuous mode [ 326.602957][ T10] usb 6-1: USB disconnect, device number 9 [ 326.623141][ T9811] syzkaller1: entered allmulticast mode [ 326.938981][ T9824] overlayfs: failed to resolve './file1': -2 [ 326.956198][ T9824] overlayfs: failed to resolve './file1': -2 [ 327.765711][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 327.795696][ T10] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 327.917931][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 327.926235][ T24] usb 6-1: config 0 has no interface number 0 [ 327.932414][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.945359][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.955494][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 327.965035][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.978819][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 327.992424][ T24] usb 6-1: config 0 descriptor?? [ 327.995714][ T10] usb 1-1: config 0 has no interface number 0 [ 328.003467][ T10] usb 1-1: too many endpoints for config 0 interface 1 altsetting 8: 64, using maximum allowed: 30 [ 328.035700][ T10] usb 1-1: config 0 interface 1 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 328.065689][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 328.072357][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 328.095117][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.115769][ T10] usb 1-1: config 0 descriptor?? [ 328.128883][ T10] usb 1-1: selecting invalid altsetting 1 [ 328.136674][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 328.143027][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 328.215151][ T10] DVB: Unable to find symbol cx22700_attach() [ 328.261681][ T10] DVB: Unable to find symbol tda10046_attach() [ 328.271231][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 328.418023][ T24] prodikeys 0003:041E:2801.0016: collection stack underflow [ 328.433276][ T24] prodikeys 0003:041E:2801.0016: item 0 1 0 12 parsing failed [ 328.442053][ T24] prodikeys 0003:041E:2801.0016: hid parse failed [ 328.449132][ T24] prodikeys 0003:041E:2801.0016: probe with driver prodikeys failed with error -22 [ 328.637333][ T24] usb 6-1: USB disconnect, device number 10 [ 329.626208][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 329.780863][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.790283][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.798855][ T10] usb 6-1: Product: syz [ 329.803281][ T10] usb 6-1: Manufacturer: syz [ 329.808360][ T10] usb 6-1: SerialNumber: syz [ 329.816946][ T10] usb 6-1: config 0 descriptor?? [ 330.036707][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 330.492771][ T5861] usb 1-1: USB disconnect, device number 109 [ 330.580940][ T9877] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1190'. [ 330.746764][ T9879] kernel read not supported for file /file1 (pid: 9879 comm: syz.1.1191) [ 330.787386][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 330.787402][ T30] audit: type=1800 audit(1762832814.008:98): pid=9879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1191" name="file1" dev="mqueue" ino=11293 res=0 errno=0 [ 331.022807][ T9900] overlayfs: failed to resolve './file1': -2 [ 331.235710][ T892] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 331.387595][ T892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 331.415648][ T892] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 331.435536][ T892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 331.447072][ T892] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 331.457329][ T892] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 331.467927][ T892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.482102][ T892] usb 1-1: config 0 descriptor?? [ 331.711803][ T892] hdpvr 1-1:0.0: firmware version 0x88 dated _=&ˆ}nDT,w#ORCf( [ 331.722279][ T892] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 332.154921][ T892] hdpvr 1-1:0.0: Could not setup controls [ 332.177792][ T892] hdpvr 1-1:0.0: registering videodev failed [ 332.219329][ T892] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 332.240293][ T892] usb 1-1: USB disconnect, device number 110 [ 332.257232][ T9867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.268077][ T9867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.278716][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 332.305477][ T10] usb 6-1: USB disconnect, device number 11 [ 332.810021][ T9928] syzkaller1: entered promiscuous mode [ 332.816548][ T9928] syzkaller1: entered allmulticast mode [ 333.116062][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 333.185726][ T892] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 333.275696][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 333.282394][ T10] usb 6-1: config 0 has an invalid interface number: 111 but max is 0 [ 333.290773][ T10] usb 6-1: config 0 has no interface number 0 [ 333.297206][ T10] usb 6-1: config 0 interface 111 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 333.316203][ T10] usb 6-1: config 0 interface 111 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 333.326369][ T10] usb 6-1: config 0 interface 111 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 333.336388][ T10] usb 6-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 333.336658][ T892] usb 1-1: Using ep0 maxpacket: 8 [ 333.347237][ T10] usb 6-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 333.347267][ T10] usb 6-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 333.347287][ T10] usb 6-1: config 0 interface 111 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 333.347304][ T10] usb 6-1: config 0 interface 111 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 333.347322][ T10] usb 6-1: config 0 interface 111 altsetting 0 endpoint 0x5 has invalid maxpacket 62340, setting to 64 [ 333.349479][ T10] usb 6-1: New USB device found, idVendor=0421, idProduct=00ab, bcdDevice=76.14 [ 333.362971][ T892] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 333.363411][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.395112][ T892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.415650][ T10] usb 6-1: Product: syz [ 333.433321][ T892] usb 1-1: Product: syz [ 333.451016][ T892] usb 1-1: Manufacturer: syz [ 333.456140][ T892] usb 1-1: SerialNumber: syz [ 333.463986][ T892] usb 1-1: config 0 descriptor?? [ 333.475749][ T10] usb 6-1: Manufacturer: syz [ 333.479425][ T892] usb 1-1: invalid MIDI EP [ 333.480544][ T10] usb 6-1: SerialNumber: syz [ 333.493669][ T892] usb 1-1: snd-bcd2000: error during probing [ 333.496322][ T10] usb 6-1: config 0 descriptor?? [ 333.503278][ T892] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 333.505998][ T9930] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.540025][ T9930] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.552989][ T9930] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.567163][ T10] rndis_host 6-1:0.111: skipping garbage [ 333.572837][ T10] usb 6-1: bad CDC descriptors [ 333.579292][ T10] cdc_acm 6-1:0.111: skipping garbage [ 333.684071][ T10] usb 1-1: USB disconnect, device number 111 [ 333.752152][ T9943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1214'. [ 333.785658][ T55] usb 6-1: USB disconnect, device number 12 [ 334.665708][ T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 334.815875][ T55] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 334.816750][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 334.833272][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 334.841835][ T10] usb 1-1: config 0 has no interface number 0 [ 334.853532][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 334.863151][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.874389][ T10] usb 1-1: Product: syz [ 334.879771][ T10] usb 1-1: Manufacturer: syz [ 334.884610][ T10] usb 1-1: SerialNumber: syz [ 334.892484][ T10] usb 1-1: config 0 descriptor?? [ 334.909191][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 334.955740][ T55] usb 6-1: device descriptor read/64, error -71 [ 335.116979][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 335.136220][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 335.197784][ T55] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 335.285339][ T9959] traps: syz.1.1219[9959] attempts to use CLI/STI, pretending it's a NOP, ip:200000000002 [ 335.312135][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1220'. [ 335.326020][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 335.329452][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 335.359007][ T55] usb 6-1: device descriptor read/64, error -71 [ 335.467233][ T55] usb usb6-port1: attempt power cycle [ 335.527198][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1215'. [ 335.542103][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 335.542542][ T892] usb 1-1: USB disconnect, device number 112 [ 335.590814][ T892] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 335.632057][ T892] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 335.657643][ T892] quatech2 1-1:0.51: device disconnected [ 335.825926][ T55] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 335.847007][ T55] usb 6-1: device descriptor read/8, error -71 [ 336.097557][ T55] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 336.128200][ T55] usb 6-1: device descriptor read/8, error -71 [ 336.153345][ T9983] IPVS: length: 70 != 8 [ 336.256304][ T55] usb usb6-port1: unable to enumerate USB device [ 337.345787][ T5889] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 337.515971][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 337.529717][ T5889] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.562021][ T5889] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.585974][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 337.600739][ T5889] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 337.622796][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.642525][ T5889] usb 1-1: config 0 descriptor?? [ 338.156888][ T5889] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 338.164444][ T5889] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 338.172369][ T5889] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 338.185584][ T5889] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 338.192846][ T5889] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 338.205838][ T5889] samsung 0003:0419:0001.0017: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 338.307883][T10017] overlayfs: failed to clone upperpath [ 338.685701][ T5889] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 338.855703][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 338.862580][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 338.874604][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 338.885864][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 338.898817][ T5889] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 338.923377][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.944580][ T5889] usb 6-1: config 0 descriptor?? [ 338.972193][T10023] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 339.416312][ T5889] acrux 0003:1A34:0802.0018: hidraw1: USB HID v0.05 Device [HID 1a34:0802] on usb-dummy_hcd.5-1/input0 [ 339.445696][ T5889] acrux 0003:1A34:0802.0018: no inputs found [ 339.451733][ T5889] acrux 0003:1A34:0802.0018: Failed to enable force feedback support, error: -19 [ 339.608309][ T5908] usb 6-1: USB disconnect, device number 17 [ 339.669026][ T30] audit: type=1326 audit(1762832822.888:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10052 comm="syz.4.1249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f222958f6c9 code=0x0 [ 339.721416][T10054] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 340.168751][ T5889] usb 1-1: USB disconnect, device number 113 [ 340.389213][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1253'. [ 340.406018][T10067] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1253'. [ 340.557012][ T5889] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 340.674450][T10078] fuse: blksize only supported for fuseblk [ 340.730511][T10083] overlayfs: failed to clone upperpath [ 340.737882][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.749766][ T5889] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 340.759282][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.771738][ T5889] usb 1-1: config 0 descriptor?? [ 340.805743][ T5861] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 340.957804][ T5861] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 340.967451][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.983023][ T5861] usb 6-1: config 0 descriptor?? [ 341.003462][ T5861] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 341.204793][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.218177][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.240623][ T5889] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 341.266120][ T5889] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0019/input/input32 [ 341.420142][ T5889] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 341.448884][T10091] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1260'. [ 341.460427][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.472168][ T5861] gspca_stv06xx: I2C: Read error writing address: -71 [ 341.496669][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.507415][ T5861] usb 6-1: USB disconnect, device number 18 [ 341.873627][ T5889] usb 1-1: USB disconnect, device number 114 [ 342.081615][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.122580][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.163093][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.193173][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.216376][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.227417][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.236715][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.245583][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.260397][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.271901][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.315738][ T5908] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 342.476017][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 342.483368][ T5908] usb 6-1: config 7 has an invalid interface number: 112 but max is 0 [ 342.491971][ T5908] usb 6-1: config 7 has no interface number 0 [ 342.502549][ T5908] usb 6-1: New USB device found, idVendor=19d2, idProduct=1136, bcdDevice=25.87 [ 342.517832][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.527440][ T5908] usb 6-1: Product: syz [ 342.531676][ T5908] usb 6-1: Manufacturer: syz [ 342.536403][ T5908] usb 6-1: SerialNumber: syz [ 342.675700][ T5861] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 342.769207][ T5908] usb 6-1: bad CDC descriptors [ 342.781915][ T5908] usb 6-1: USB disconnect, device number 19 [ 342.830422][ T5861] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 342.842534][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.851142][ T5861] usb 1-1: Product: syz [ 342.865134][ T5861] usb 1-1: Manufacturer: syz [ 342.875261][ T5861] usb 1-1: SerialNumber: syz [ 342.892947][ T5861] usb 1-1: config 0 descriptor?? [ 343.116282][ T5861] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 344.537170][T10109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.574220][T10109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.051154][T10162] overlayfs: missing 'workdir' [ 345.345885][ T892] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 345.429854][ T5861] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 345.451034][ T5861] usb 1-1: USB disconnect, device number 115 [ 345.526780][ T892] usb 6-1: Using ep0 maxpacket: 32 [ 345.546487][ T892] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 345.566417][ T892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.587860][ T892] usb 6-1: Product: syz [ 345.597540][ T892] usb 6-1: Manufacturer: syz [ 345.605703][ T892] usb 6-1: SerialNumber: syz [ 345.624803][ T892] usb 6-1: config 0 descriptor?? [ 345.657967][T10171] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1282'. [ 345.851206][ T892] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 345.883172][ T892] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 345.914076][ T892] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 346.020965][ T892] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 346.069060][T10169] could not allocate digest TFM handle hmac(sha1-avx2) [ 347.598270][ T892] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 347.767159][ T892] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 347.783995][ T892] usb 1-1: config 0 has no interface number 0 [ 347.792680][ T892] usb 1-1: New USB device found, idVendor=0d8e, idProduct=7812, bcdDevice=6d.3c [ 347.802753][ T892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.815656][ T892] usb 1-1: config 0 descriptor?? [ 347.841912][ T892] usb 1-1: Could not find all expected endpoints [ 348.064839][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.096387][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.203338][ T5861] usb 6-1: USB disconnect, device number 20 [ 348.534468][ T5861] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 348.707408][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.717661][ T5861] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.731105][ T5861] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 348.740445][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.760108][ T5861] usb 6-1: config 0 descriptor?? [ 349.002192][T10228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.011374][T10228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.212991][ T5861] uclogic 0003:5543:0064.001A: item fetching failed at offset 0/1 [ 349.233931][ T5861] uclogic 0003:5543:0064.001A: parse failed [ 349.247050][ T5861] uclogic 0003:5543:0064.001A: probe with driver uclogic failed with error -22 [ 349.263212][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 349.416108][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.426572][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.439611][T10223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.451797][T10223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.467678][ T55] usb 6-1: USB disconnect, device number 21 [ 350.361234][T10258] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 350.368166][T10258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.382050][T10258] vhci_hcd vhci_hcd.0: Device attached [ 350.630471][ T55] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 350.710197][ T5889] usb 1-1: USB disconnect, device number 116 [ 350.748071][ T5861] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 350.955182][ T5861] usb 6-1: config 0 has no interfaces? [ 350.960986][ T5861] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 350.972493][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.985077][ T5861] usb 6-1: config 0 descriptor?? [ 351.155667][ T5889] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 351.214478][ T5825] Bluetooth: Wrong link type (-71) [ 351.215251][ T5861] usb 6-1: USB disconnect, device number 22 [ 351.223058][T10271] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1310'. [ 351.231341][T10259] vhci_hcd: connection closed [ 351.240223][ T49] vhci_hcd vhci_hcd.5: stop threads [ 351.251798][ T49] vhci_hcd vhci_hcd.5: release socket [ 351.258553][ T49] vhci_hcd vhci_hcd.5: disconnect device [ 351.282823][ T55] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 351.347182][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 351.359465][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 351.379339][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 351.412694][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 351.427329][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 351.439976][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.457868][ T5889] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 351.467720][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.476068][ T5889] usb 1-1: Product: syz [ 351.480369][ T5889] usb 1-1: Manufacturer: syz [ 351.484973][ T5889] usb 1-1: SerialNumber: syz [ 351.497586][ T5889] usb 1-1: config 0 descriptor?? [ 351.517270][ T5889] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 351.683765][T10278] netlink: 'syz.1.1312': attribute type 3 has an invalid length. [ 351.691962][T10278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1312'. [ 351.737669][ T892] usb 1-1: USB disconnect, device number 117 [ 352.427140][T10306] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1318'. [ 352.482868][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1320'. [ 352.536272][T10309] overlayfs: failed to clone upperpath [ 352.748115][ T55] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 352.798714][T10325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.827520][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1325'. [ 352.923235][ T55] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 352.977632][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.985998][ T55] usb 1-1: Product: syz [ 352.991991][T10325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.002600][ T55] usb 1-1: Manufacturer: syz [ 353.009009][ T55] usb 1-1: SerialNumber: syz [ 353.017385][ T55] usb 1-1: config 0 descriptor?? [ 353.053481][ T5825] Bluetooth: hci6: urb ffff888145719100 submission failed (2) [ 353.117882][T10325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.215382][T10325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.260568][ T55] usb 1-1: USB disconnect, device number 118 [ 353.530152][ T7851] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.593597][ T7851] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.656860][ T7851] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.697961][ T7851] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.960813][ T7851] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.982657][ T5829] Bluetooth: hci4: unexpected event for opcode 0x200b [ 354.202191][ T55] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 354.378258][ T55] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 354.395677][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.414649][ T55] usb 1-1: Product: syz [ 354.425455][ T55] usb 1-1: Manufacturer: syz [ 354.430598][ T55] usb 1-1: SerialNumber: syz [ 354.707098][ T30] audit: type=1800 audit(1762832837.440:100): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1332" name="bus" dev="tmpfs" ino=1595 res=0 errno=0 [ 354.830760][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.875949][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.881472][ T55] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 354.918721][ T55] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 354.938892][T10359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1334'. [ 355.071370][ T5889] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 355.396956][T10373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1337'. [ 355.409598][T10372] x_tables: duplicate underflow at hook 1 [ 355.472370][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1338'. [ 355.541783][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 355.548280][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 355.575877][T10374] ceph: No mds server is up or the cluster is laggy [ 356.504586][ T5889] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 356.696295][ T5889] usb 6-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 356.707591][ T5889] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 356.717483][ T5889] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=ad.73 [ 356.729550][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.748401][ T5889] usb 6-1: config 0 descriptor?? [ 356.977593][ T24] usb 6-1: USB disconnect, device number 24 [ 357.392717][ T30] audit: type=1326 audit(1762832839.946:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f222958f6c9 code=0x0 [ 357.450751][T10413] overlayfs: failed to clone upperpath [ 357.460653][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 357.692276][T10421] efs: cannot read volume header [ 358.045626][T10427] No control pipe specified [ 358.170973][T10437] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1355'. [ 358.594361][ T55] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -EPROTO [ 358.620014][ T55] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 358.641932][ T55] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 358.653198][ T55] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 358.672334][ T55] usb 1-1: USB disconnect, device number 119 [ 358.759329][T10437] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.785079][T10437] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.795610][T10437] .` (unregistering): Released all slaves [ 359.229351][ T3556] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.359702][ T3556] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.518493][ T3556] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.644365][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.655157][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.663573][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.694528][ T892] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 359.711464][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.724496][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 359.748324][ T3556] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.883985][ T892] usb 1-1: Using ep0 maxpacket: 16 [ 359.896172][ T892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.911733][ T892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.946269][ T892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 359.976799][ T892] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 360.021644][ T892] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.072617][ T892] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 360.116077][ T892] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 360.129965][ T892] usb 1-1: Manufacturer: syz [ 360.167135][ T892] usb 1-1: config 0 descriptor?? [ 360.227368][ T3556] bridge_slave_1: left allmulticast mode [ 360.236377][ T3556] bridge_slave_1: left promiscuous mode [ 360.249818][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.288250][ T3556] bridge_slave_0: left allmulticast mode [ 360.301939][ T3556] bridge_slave_0: left promiscuous mode [ 360.318818][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.356924][ T3556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.375006][ T3556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.386981][ T3556] bond0 (unregistering): Released all slaves [ 361.773826][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 361.934485][ T5825] Bluetooth: hci5: command tx timeout [ 361.980387][T10461] chnl_net:caif_netlink_parms(): no params data found [ 362.007521][T10527] 9pnet_virtio: no channels available for device ./file0 [ 362.067810][ T3556] hsr_slave_0: left promiscuous mode [ 362.087835][ T3556] hsr_slave_1: left promiscuous mode [ 362.105402][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.115849][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.125231][ T3556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.146010][ T3556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.196642][ T3556] veth1_macvtap: left promiscuous mode [ 362.222848][ T3556] veth0_macvtap: left promiscuous mode [ 362.233813][ T3556] veth1_vlan: left promiscuous mode [ 362.244071][ T3556] veth0_vlan: left promiscuous mode [ 362.844747][ T892] rc_core: IR keymap rc-hauppauge not found [ 362.850864][ T892] Registered IR keymap rc-empty [ 362.865249][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 362.896390][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 362.945391][ T892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 362.973297][ T892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 363.011597][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 363.035403][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 363.068975][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 363.099523][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 363.134514][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 363.163670][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 363.188056][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 363.206389][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 363.238666][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 363.271062][ T892] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 363.310677][ T892] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 363.320281][ T892] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 363.335329][ T892] usb 1-1: USB disconnect, device number 120 [ 363.511698][ T3556] team0 (unregistering): Port device team_slave_1 removed [ 363.561924][ T3556] team0 (unregistering): Port device team_slave_0 removed [ 363.688857][ T892] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 363.860543][ T892] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 363.881690][ T892] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 363.909239][ T892] usb 1-1: config 1 interface 0 has no altsetting 0 [ 363.920423][ T892] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 363.941066][ T892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.950605][ T892] usb 1-1: Product: syz [ 363.965824][ T892] usb 1-1: Manufacturer: syz [ 363.970428][ T892] usb 1-1: SerialNumber: syz [ 364.003209][T10557] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 364.018825][T10557] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 364.158206][ T5825] Bluetooth: hci5: command tx timeout [ 364.217704][T10528] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1376'. [ 364.477188][T10461] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.522099][T10461] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.553471][T10461] bridge_slave_0: entered allmulticast mode [ 364.587986][T10461] bridge_slave_0: entered promiscuous mode [ 364.594910][ T892] rtl8150 1-1:1.0: couldn't reset the device [ 364.607961][ T892] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 364.619090][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.632872][T10461] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.663302][T10461] bridge_slave_1: entered allmulticast mode [ 364.675727][ T892] usb 1-1: USB disconnect, device number 121 [ 364.695873][T10461] bridge_slave_1: entered promiscuous mode [ 364.850148][T10461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.880799][T10461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.918218][T10576] netlink: 'syz.1.1383': attribute type 2 has an invalid length. [ 365.037528][T10461] team0: Port device team_slave_0 added [ 365.060018][T10461] team0: Port device team_slave_1 added [ 365.215980][T10587] netlink: 'syz.1.1386': attribute type 4 has an invalid length. [ 365.235007][T10587] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1386'. [ 365.251077][T10461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.258042][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.293686][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 365.323694][T10461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.357003][T10461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.363975][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.470535][T10461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.689503][T10461] hsr_slave_0: entered promiscuous mode [ 365.729821][T10461] hsr_slave_1: entered promiscuous mode [ 365.747641][T10461] debugfs: 'hsr0' already exists in 'hsr' [ 365.773840][T10461] Cannot create hsr debugfs directory [ 366.158298][T10605] fuse: Bad value for 'fd' [ 366.382613][ T5825] Bluetooth: hci5: command tx timeout [ 367.290308][ T30] audit: type=1326 audit(1762832849.203:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.1.1391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4241d8f6c9 code=0x0 [ 367.359572][T10461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 367.381690][T10461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 367.411657][T10461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 367.438532][T10461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 367.775805][T10461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.842323][T10461] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.880523][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.887773][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.938137][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.945388][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.193367][T10644] x_tables: duplicate underflow at hook 1 [ 368.608066][ T5825] Bluetooth: hci5: command tx timeout [ 368.743374][T10461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.574214][T10461] veth0_vlan: entered promiscuous mode [ 369.606752][T10461] veth1_vlan: entered promiscuous mode [ 369.707827][T10461] veth0_macvtap: entered promiscuous mode [ 369.732940][T10461] veth1_macvtap: entered promiscuous mode [ 369.800110][T10461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.861582][T10461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.917125][ T1003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.946946][ T1003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.985002][ T1003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.014995][ T1003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.149452][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.198893][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.292799][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.309882][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.959367][ T5889] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 371.130517][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 371.148774][ T5889] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.170069][ T5889] usb 1-1: config 0 has no interface number 0 [ 371.205113][ T5889] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 371.225642][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.225790][T10751] batadv_slave_0: entered promiscuous mode [ 371.239662][ T5889] usb 1-1: Product: syz [ 371.239682][ T5889] usb 1-1: Manufacturer: syz [ 371.239696][ T5889] usb 1-1: SerialNumber: syz [ 371.256790][ T5889] usb 1-1: config 0 descriptor?? [ 371.273856][ T5889] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 371.312707][ T5861] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 371.359667][T10751] batadv_slave_0: left promiscuous mode [ 371.495918][ T5861] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.512021][ T5861] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 371.538915][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.576386][ T5861] usb 6-1: config 0 descriptor?? [ 371.595504][ T5861] pwc: Askey VC010 type 2 USB webcam detected. [ 371.608813][T10765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1409'. [ 371.877103][T10772] netlink: 'syz.4.1411': attribute type 2 has an invalid length. [ 371.970457][T10775] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 371.995112][T10775] batman_adv: batadv0: Adding interface: team0 [ 372.007967][T10775] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.017443][ T5861] pwc: recv_control_msg error -32 req 02 val 2b00 [ 372.061411][T10775] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 372.114485][ T5861] pwc: recv_control_msg error -32 req 02 val 2700 [ 372.132306][ T5861] pwc: recv_control_msg error -71 req 02 val 2c00 [ 372.181609][ T5861] pwc: recv_control_msg error -71 req 04 val 1000 [ 372.226921][ T5861] pwc: recv_control_msg error -71 req 04 val 1300 [ 372.262415][T10736] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 372.266379][ T5861] pwc: recv_control_msg error -71 req 04 val 1400 [ 372.301927][ T5861] pwc: recv_control_msg error -71 req 02 val 2000 [ 372.331769][ T5861] pwc: recv_control_msg error -71 req 02 val 2100 [ 372.345438][ T5861] pwc: recv_control_msg error -71 req 04 val 1500 [ 372.381805][ T5861] pwc: recv_control_msg error -71 req 02 val 2500 [ 372.410409][ T5861] pwc: recv_control_msg error -71 req 02 val 2400 [ 372.424873][ T5861] pwc: recv_control_msg error -71 req 02 val 2600 [ 372.443784][ T5861] pwc: recv_control_msg error -71 req 02 val 2900 [ 372.461325][ T5889] gspca_spca1528: reg_w err -110 [ 372.468637][ T5861] pwc: recv_control_msg error -71 req 02 val 2800 [ 372.478052][ T5889] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 372.501997][ T5861] pwc: recv_control_msg error -71 req 04 val 1100 [ 372.520688][ T5861] pwc: recv_control_msg error -71 req 04 val 1200 [ 372.551027][ T5861] pwc: Registered as video103. [ 372.572724][ T5861] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 372.640486][ T5861] usb 6-1: USB disconnect, device number 25 [ 372.949379][T10807] netlink: 'syz.0.1417': attribute type 10 has an invalid length. [ 372.986125][T10807] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1417'. [ 373.076951][ T5861] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 373.271140][ T5861] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 373.281220][ T5861] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.311997][ T5861] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 373.333419][ T5861] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 373.354012][ T5861] usb 6-1: config 0 interface 0 has no altsetting 0 [ 373.367907][ T5861] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 373.386801][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.394871][ T5861] usb 6-1: Product: syz [ 373.405559][ T5861] usb 6-1: Manufacturer: syz [ 373.418887][ T5861] usb 6-1: SerialNumber: syz [ 373.439074][ T5861] usb 6-1: config 0 descriptor?? [ 373.614309][T10814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.645296][T10814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.691315][ T5861] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input36 [ 373.720470][ T5179] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 373.760031][ T5179] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 373.770480][ T5179] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 373.825712][ T5179] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 373.854471][ T6387] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 373.876163][ T5179] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 373.936177][ T5179] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 374.003002][ T5861] usb 6-1: USB disconnect, device number 26 [ 374.521527][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.535818][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.779329][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.800022][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.825487][T10860] qrtr: Invalid version 43 [ 375.379940][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 375.466408][T10873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.481129][T10873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.505319][T10873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.514132][T10873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.230678][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.247508][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.329303][T10897] sp0: Synchronizing with TNC [ 376.560238][T10903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.573587][T10903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.584567][T10903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.596712][T10903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.606998][ T5825] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 377.118708][T10914] tmpfs: Unknown parameter 'nr_inodes' [ 377.380802][T10920] (syz.0.1452,10920,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 377.389986][T10920] (syz.0.1452,10920,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 377.461175][ T5889] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 377.478642][T10924] binder: Unknown parameter 'fsuuid' [ 377.632276][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 377.643269][ T5889] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.653425][ T5889] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.678753][ T5889] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.689291][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.699767][ T5889] usb 6-1: Product: syz [ 377.708689][ T5889] usb 6-1: Manufacturer: syz [ 377.718076][ T5889] usb 6-1: SerialNumber: syz [ 377.797760][T10935] omfs: Invalid superblock (0) [ 377.810224][T10937] netlink: 'syz.4.1456': attribute type 4 has an invalid length. [ 377.819177][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1456'. [ 377.819196][T10935] ieee802154 phy0 wpan0: encryption failed: -90 [ 377.966009][T10941] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 377.980154][T10941] /dev/sg0: Can't lookup blockdev [ 378.043774][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.054164][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.066484][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.078756][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.270803][T10946] netlink: 'syz.1.1460': attribute type 2 has an invalid length. [ 378.533104][ T5889] usb 6-1: 0:2 : does not exist [ 378.580102][ T5889] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 378.628608][ T5889] usb 6-1: USB disconnect, device number 27 [ 378.708813][ T6354] udevd[6354]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.978915][T10974] kernel read not supported for file /file1 (pid: 10974 comm: syz.5.1468) [ 378.990894][ T30] audit: type=1800 audit(1762832860.154:103): pid=10974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1468" name="file1" dev="mqueue" ino=34615 res=0 errno=0 [ 379.386291][ T5908] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 379.570768][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 379.583092][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 379.594566][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.607700][ T5908] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.617011][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.638080][ T5908] usb 6-1: config 0 descriptor?? [ 380.310800][ T5908] usbhid 6-1:0.0: can't add hid device: -71 [ 380.317953][ T5908] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 380.336345][ T5908] usb 6-1: USB disconnect, device number 28 [ 380.768184][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.774702][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.789247][T11010] IPVS: Scheduler module ip_vs_sip not found [ 381.954407][T11020] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1483'. [ 382.031650][T11025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.041108][T11025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.053418][T11025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.059582][ T5889] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 382.063285][T11025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.230579][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 382.247529][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.260374][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.270361][ T5889] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 382.279774][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.307044][ T5889] usb 6-1: config 0 descriptor?? [ 382.430210][T11031] veth1_macvtap: left promiscuous mode [ 382.435875][T11031] macsec0: entered allmulticast mode [ 382.454149][T11031] veth1_macvtap: entered promiscuous mode [ 382.463785][T11031] veth1_macvtap: entered allmulticast mode [ 382.471238][T11031] macsec0: left allmulticast mode [ 382.476304][T11031] veth1_macvtap: left allmulticast mode [ 382.579934][T11033] can: request_module (can-proto-4) failed. [ 382.750982][ T5889] ft260 0003:0403:6030.001B: unknown main item tag 0x7 [ 382.798421][T11045] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.1491'. [ 382.916542][T11049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.931850][T11050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.945927][T11049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.958103][T11050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.966072][ T5889] ft260 0003:0403:6030.001B: chip code: 6424 8183 [ 383.633628][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.642738][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.806047][T11066] netlink: 'syz.1.1498': attribute type 39 has an invalid length. [ 383.959723][T11070] gadgetfs: Unknown parameter 'usrquo|a' [ 383.971592][T11070] overlayfs: failed to clone upperpath [ 384.294071][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.313723][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.331223][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.341323][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.615401][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1504'. [ 384.631911][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 384.644136][T11092] fuse: Bad value for 'user_id' [ 384.649319][T11092] fuse: Bad value for 'user_id' [ 384.657624][T11092] netlink: 'syz.1.1504': attribute type 16 has an invalid length. [ 384.668505][T11092] netlink: 51802 bytes leftover after parsing attributes in process `syz.1.1504'. [ 385.049877][T11099] netlink: 'syz.4.1507': attribute type 12 has an invalid length. [ 385.060551][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1506'. [ 385.769929][ T892] usb 6-1: USB disconnect, device number 29 [ 385.996495][T11138] program syz.0.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.022441][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.051202][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.130956][T11142] program syz.0.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.208890][ T892] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 386.369104][ T892] usb 6-1: Using ep0 maxpacket: 16 [ 386.395669][ T892] usb 6-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 386.411889][ T892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.430733][ T892] usb 6-1: Product: syz [ 386.443731][ T892] usb 6-1: Manufacturer: syz [ 386.454794][ T892] usb 6-1: SerialNumber: syz [ 386.493503][ T892] usb 6-1: config 0 descriptor?? [ 386.719753][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.731115][ T892] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 386.777350][ T892] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 386.792700][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.798988][T11156] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1525'. [ 386.808852][ T892] usb 6-1: USB disconnect, device number 30 [ 387.579013][T11170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.620897][T11170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.832131][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1530'. [ 387.887981][T11182] netlink: 'syz.4.1530': attribute type 1 has an invalid length. [ 388.011463][T11188] dvmrp1: entered allmulticast mode [ 388.057484][ T30] audit: type=1326 audit(1762832868.617:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.1.1532" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4241d8f6c9 code=0x0 [ 388.104516][T11190] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1534'. [ 388.176017][T11194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.185782][T11195] random: crng reseeded on system resumption [ 388.209747][T11194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.240293][T11197] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 388.248451][T11197] netlink: 'syz.4.1537': attribute type 2 has an invalid length. [ 388.600610][T11212] netlink: 'syz.4.1541': attribute type 10 has an invalid length. [ 388.639959][T11212] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 388.877000][T11218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.922569][T11218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.106937][ T5889] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 389.283016][ T5889] usb 6-1: config 9 has an invalid interface number: 133 but max is 0 [ 389.299315][ T5889] usb 6-1: config 9 has no interface number 0 [ 389.312802][ T5889] usb 6-1: config 9 interface 133 has no altsetting 0 [ 389.333416][ T5889] usb 6-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=93.9b [ 389.342867][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.355530][ T5889] usb 6-1: Product: syz [ 389.360984][ T5889] usb 6-1: Manufacturer: syz [ 389.369289][ T5889] usb 6-1: SerialNumber: syz [ 389.617221][ T5889] pegasus 6-1:9.133: probe with driver pegasus failed with error -71 [ 389.647871][ T5889] usb 6-1: USB disconnect, device number 31 [ 389.740814][T11240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.747216][T11239] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1551'. [ 389.766043][T11239] kAFS: unable to lookup cell '' [ 389.777367][T11240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.061018][T11247] 9p: Bad value for 'rfdno' [ 390.142756][T11240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.188772][T11240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.218049][T11240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.230175][T11240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.273425][T11252] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1555'. [ 390.450779][T11254] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 390.464919][T11254] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 390.484468][T11254] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 390.505595][T11254] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 390.689409][T11256] bond0: (slave gretap0): Opening slave failed [ 390.712177][T11256] loop2: detected capacity change from 0 to 7 [ 390.734804][T11256] Dev loop2: unable to read RDB block 7 [ 390.751113][T11256] loop2: AHDI p1 p2 p3 [ 390.763736][T11256] loop2: partition table partially beyond EOD, truncated [ 390.787985][T11256] loop2: p1 start 1601398130 is beyond EOD, truncated [ 390.805350][T11256] loop2: p2 start 1702059890 is beyond EOD, truncated [ 391.235636][ T5889] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 391.397031][ T5889] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 391.419101][ T5889] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 391.433728][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.438739][T11276] netlink: 'syz.0.1564': attribute type 28 has an invalid length. [ 391.451127][ T5889] usb 6-1: Product: syz [ 391.466203][ T5889] usb 6-1: Manufacturer: syz [ 391.471172][ T5889] usb 6-1: SerialNumber: syz [ 391.496707][ T5889] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 391.756993][T11210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.148043][T11298] netlink: 'syz.4.1572': attribute type 22 has an invalid length. [ 392.165252][T11298] netlink: 14380 bytes leftover after parsing attributes in process `syz.4.1572'. [ 392.357440][T11304] overlayfs: failed to clone upperpath [ 392.614371][ T5889] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 392.640990][T11258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.651851][T11258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.296450][T11319] fuse: Bad value for 'user_id' [ 393.308317][T11319] fuse: Bad value for 'user_id' [ 393.600642][T11322] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 393.910030][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 394.225001][ T5889] usb 6-1: USB disconnect, device number 32 [ 395.019777][T11356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1594'. [ 395.779935][ T5889] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 395.961668][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 395.968711][ T5889] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 395.979805][ T5889] usb 6-1: config 0 has no interface number 0 [ 395.993709][ T5889] usb 6-1: config 0 interface 12 has no altsetting 0 [ 396.006205][ T5889] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 396.025578][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.037838][ T5889] usb 6-1: Product: syz [ 396.042036][ T5889] usb 6-1: Manufacturer: syz [ 396.046658][ T5889] usb 6-1: SerialNumber: syz [ 396.071725][ T5889] usb 6-1: config 0 descriptor?? [ 396.273817][T11387] overlayfs: failed to clone upperpath [ 396.529204][T11373] netlink: 'syz.5.1599': attribute type 12 has an invalid length. [ 396.734864][ T5889] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 396.750646][ T5889] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 396.771803][ T5889] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 396.790632][ T5889] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 396.819039][ T5889] usb 6-1: USB disconnect, device number 33 [ 397.115312][T11416] fuse: Bad value for 'fd' [ 397.338618][T11418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.365464][T11418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.768722][ T5889] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 397.929416][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 397.937379][ T5889] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 397.958312][ T5889] usb 6-1: can't read configurations, error -22 [ 398.090973][T11430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.099787][T11430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.114249][ T5889] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 398.127659][T11430] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1618'. [ 398.140338][T11430] ksmbd: Unknown IPC event: 3, ignore. [ 398.195191][ T30] audit: type=1326 audit(1762832878.099:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.0.1619" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f206058f6c9 code=0x0 [ 398.282038][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 398.299173][ T5889] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 398.314944][ T5889] usb 6-1: can't read configurations, error -22 [ 398.329827][ T5889] usb usb6-port1: attempt power cycle [ 398.699200][ T5889] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 398.731903][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 398.739506][ T5889] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 398.749925][ T5889] usb 6-1: can't read configurations, error -22 [ 398.892090][ T5889] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 398.935943][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 398.943382][ T5889] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 398.952630][ T5889] usb 6-1: can't read configurations, error -22 [ 398.968661][ T5889] usb usb6-port1: unable to enumerate USB device [ 399.250539][T11446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.265385][T11446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.025140][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.046065][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.070333][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.084949][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.120930][T11468] overlayfs: failed to clone lowerpath [ 400.138714][T11468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 400.929023][T11488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.938012][T11488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.148076][ T892] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 401.308314][ T892] usb 6-1: Using ep0 maxpacket: 16 [ 401.315815][ T892] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.328802][ T892] usb 6-1: config 0 interface 0 has no altsetting 0 [ 401.337989][ T892] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 401.349546][ T892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.370124][ T892] usb 6-1: config 0 descriptor?? [ 401.579220][T11490] sctp: [Deprecated]: syz.4.1639 (pid 11490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.579220][T11490] Use struct sctp_sack_info instead [ 401.596806][T11490] netlink: 'syz.4.1639': attribute type 27 has an invalid length. [ 401.836954][ T892] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 401.852467][ T892] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 401.871167][ T892] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 401.886048][ T892] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 401.893503][ T892] nzxt-smart2 0003:1E71:2009.001C: unknown main item tag 0x0 [ 401.930481][ T892] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 402.109783][T11497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.134478][T11497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.168988][ C1] usb 6-1: input irq status -75 received [ 402.352059][T11490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.405359][T11490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.929092][ T1003] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.946942][ T1003] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.964443][ T1003] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.003910][T11499] overlay: Unknown parameter 'uid<00000000000000000000' [ 403.016728][T11499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1640'. [ 403.513570][ T892] usb 6-1: USB disconnect, device number 38 [ 404.027378][ T5861] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 404.108098][T11514] bad cache= option: none[()bvتr [ 404.108098][T11514] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 404.108098][T11514] [ 404.154729][T11514] CIFS: VFS: bad cache= option: none[()bvتr [ 404.154729][T11514] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 404.177166][T11516] /dev/nbd4: Can't lookup blockdev [ 404.217339][ T5861] usb 6-1: Using ep0 maxpacket: 32 [ 404.224351][ T5861] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 404.234109][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.240556][ T30] audit: type=1326 audit(1762832883.756:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11517 comm="syz.1.1649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4241d8f6c9 code=0x0 [ 404.257826][ T5861] usb 6-1: config 0 descriptor?? [ 404.351239][ T5825] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 404.382548][ T5825] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 404.537741][T11546] x_tables: duplicate underflow at hook 1 [ 404.586344][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.611490][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.981530][ T5861] usbhid 6-1:0.0: can't add hid device: -71 [ 404.991528][ T5861] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 405.013385][ T5861] usb 6-1: USB disconnect, device number 39 [ 405.341201][T11562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.361790][T11562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.521712][ T5861] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 405.661475][ T5861] usb 6-1: device descriptor read/64, error -71 [ 405.928130][ T5861] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 406.078678][ T5861] usb 6-1: device descriptor read/64, error -71 [ 406.161185][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.172663][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.217718][ T5861] usb usb6-port1: attempt power cycle [ 406.591625][ T5861] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 406.598248][T11589] sock: sock_set_timeout: `syz.4.1667' (pid 11589) tries to set negative timeout [ 406.608937][T11590] sock: sock_set_timeout: `syz.4.1667' (pid 11590) tries to set negative timeout [ 406.619014][ T5861] usb 6-1: device descriptor read/8, error -71 [ 406.683903][T11592] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1668'. [ 406.795396][T11596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.804286][T11596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.880837][ T5861] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 406.902038][ T5861] usb 6-1: device descriptor read/8, error -71 [ 407.021223][ T5861] usb usb6-port1: unable to enumerate USB device [ 407.562577][T11623] netlink: 'syz.5.1679': attribute type 1 has an invalid length. [ 407.668094][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.698044][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.744667][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.780919][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.812326][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.822215][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.833547][T11629] random: crng reseeded on system resumption [ 408.259328][ T892] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 408.421704][ T892] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.434030][ T892] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.445695][ T892] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.456826][ T892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.464997][ T892] usb 6-1: Product: syz [ 408.469516][ T892] usb 6-1: Manufacturer: syz [ 408.477119][ T892] usb 6-1: SerialNumber: syz [ 408.584088][T11643] loop9: detected capacity change from 0 to 6 [ 408.600950][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.610416][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.619303][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.628491][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.638072][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.647291][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.657726][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.666963][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.675409][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.684629][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.693229][ T6387] ldm_validate_partition_table(): Disk read failed. [ 408.702513][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.706878][ T892] usb 6-1: 0:2 : does not exist [ 408.711746][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.713542][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.728291][ T892] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 408.733872][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.742158][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.758203][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.766838][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.776048][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.785408][ T6387] Dev loop9: unable to read RDB block 0 [ 408.792284][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 408.801492][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 408.810776][ T6387] loop9: unable to read partition table [ 408.826068][ T892] usb 6-1: USB disconnect, device number 44 [ 408.842926][ T6387] loop9: partition table beyond EOD, truncated [ 408.874479][T11643] ldm_validate_partition_table(): Disk read failed. [ 408.903573][T11643] Dev loop9: unable to read RDB block 0 [ 408.914614][T11643] loop9: unable to read partition table [ 408.931271][T11643] loop9: partition table beyond EOD, truncated [ 408.951931][ T6354] udevd[6354]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.975558][T11643] loop_reread_partitions: partition scan of loop9 (3 xC) failed (rc=-5) [ 409.205056][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 409.215534][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 409.225404][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 409.237369][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 409.245978][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 409.478658][T10025] ------------[ cut here ]------------ [ 409.484206][T10025] WARNING: ./include/linux/ns_common.h:255 at put_mnt_ns+0x152/0x190, CPU#1: syz.1.1239/10025 [ 409.495392][T10025] Modules linked in: [ 409.499339][T10025] CPU: 1 UID: 0 PID: 10025 Comm: syz.1.1239 Not tainted syzkaller #0 PREEMPT(full) [ 409.509159][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.520236][T10025] RIP: 0010:put_mnt_ns+0x152/0x190 [ 409.526095][T10025] Code: 79 00 00 bf 01 00 00 00 89 ee e8 09 17 7e ff 85 ed 7e 1f e8 c0 12 7e ff 5b 41 5e 41 5f 5d e9 c5 83 21 09 cc e8 af 12 7e ff 90 <0f> 0b 90 e9 33 ff ff ff e8 a1 12 7e ff 4c 89 f7 be 03 00 00 00 5b [ 409.546051][T10025] RSP: 0018:ffffc9000b717a68 EFLAGS: 00010293 [ 409.553121][T10025] RAX: ffffffff82434a61 RBX: ffff8880271d1400 RCX: ffff88804d8c5b80 [ 409.562158][T10025] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 409.570206][T10025] RBP: 00000000ffffffff R08: ffff8880271d14bb R09: 1ffff11004e3a297 [ 409.578267][T10025] R10: dffffc0000000000 R11: ffffed1004e3a298 R12: dffffc0000000000 [ 409.586516][T10025] R13: 0000000000000009 R14: ffff8880271d14b8 R15: dffffc0000000000 [ 409.594500][T10025] FS: 0000000000000000(0000) GS:ffff888125b83000(0000) knlGS:0000000000000000 [ 409.603493][T10025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.610132][T10025] CR2: 00005555903b7808 CR3: 000000007e7b4000 CR4: 00000000003526f0 [ 409.618271][T10025] Call Trace: [ 409.621564][T10025] [ 409.624496][T10025] free_nsproxy+0x46/0x560 [ 409.628965][T10025] do_exit+0x6b8/0x2300 [ 409.633144][T10025] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 409.638538][T10025] ? do_raw_spin_lock+0x121/0x290 [ 409.643653][T10025] ? __pfx_do_exit+0x10/0x10 [ 409.648275][T10025] do_group_exit+0x21c/0x2d0 [ 409.652981][T10025] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.658743][T10025] get_signal+0x1285/0x1340 [ 409.663793][T10025] arch_do_signal_or_restart+0x9a/0x7a0 [ 409.669374][T10025] ? __pfx_hrtimer_wakeup+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 409.674667][T10025] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 409.680861][T10025] ? exit_to_user_mode_loop+0x55/0x4f0 [ 409.686400][T10025] exit_to_user_mode_loop+0x87/0x4f0 [ 409.691696][T10025] ? rcu_is_watching+0x15/0xb0 [ 409.696564][T10025] do_syscall_64+0x2e9/0xfa0 [ 409.701168][T10025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.707350][T10025] ? clear_bhb_loop+0x60/0xb0 [ 409.712081][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.718108][T10025] RIP: 00fb:0x294e66b3c7c44cb4 [ 409.722906][T10025] Code: Unable to access opcode bytes at 0x294e66b3c7c44c8a. [ 409.730350][T10025] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 409.738921][T10025] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 409.746974][T10025] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 409.754962][T10025] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 409.763032][T10025] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 409.771594][T10025] R13: a8d7b5dbf29d588f R14: 9ba473c1014f02b4 R15: 107b9d1451766018 [ 409.780202][T10025] [ 409.783607][T10025] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 409.790890][T10025] CPU: 1 UID: 0 PID: 10025 Comm: syz.1.1239 Not tainted syzkaller #0 PREEMPT(full) [ 409.800252][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.810392][T10025] Call Trace: [ 409.813663][T10025] [ 409.816604][T10025] dump_stack_lvl+0x99/0x250 [ 409.821190][T10025] ? __asan_memcpy+0x40/0x70 [ 409.825775][T10025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.831070][T10025] ? __pfx__printk+0x10/0x10 [ 409.835659][T10025] vpanic+0x237/0x6d0 [ 409.839628][T10025] ? __pfx_vpanic+0x10/0x10 [ 409.844116][T10025] ? is_bpf_text_address+0x292/0x2b0 [ 409.849390][T10025] ? is_bpf_text_address+0x26/0x2b0 [ 409.854581][T10025] panic+0xb9/0xc0 [ 409.858297][T10025] ? __pfx_panic+0x10/0x10 [ 409.862711][T10025] __warn+0x334/0x4c0 [ 409.866691][T10025] ? put_mnt_ns+0x152/0x190 [ 409.871198][T10025] ? put_mnt_ns+0x152/0x190 [ 409.875710][T10025] report_bug+0x2be/0x4f0 [ 409.880043][T10025] ? put_mnt_ns+0x152/0x190 [ 409.884543][T10025] ? put_mnt_ns+0x152/0x190 [ 409.889034][T10025] ? put_mnt_ns+0x154/0x190 [ 409.893545][T10025] handle_bug+0x84/0x160 [ 409.897775][T10025] exc_invalid_op+0x1a/0x50 [ 409.902265][T10025] asm_exc_invalid_op+0x1a/0x20 [ 409.907103][T10025] RIP: 0010:put_mnt_ns+0x152/0x190 [ 409.912213][T10025] Code: 79 00 00 bf 01 00 00 00 89 ee e8 09 17 7e ff 85 ed 7e 1f e8 c0 12 7e ff 5b 41 5e 41 5f 5d e9 c5 83 21 09 cc e8 af 12 7e ff 90 <0f> 0b 90 e9 33 ff ff ff e8 a1 12 7e ff 4c 89 f7 be 03 00 00 00 5b [ 409.931806][T10025] RSP: 0018:ffffc9000b717a68 EFLAGS: 00010293 [ 409.937867][T10025] RAX: ffffffff82434a61 RBX: ffff8880271d1400 RCX: ffff88804d8c5b80 [ 409.945822][T10025] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 409.953781][T10025] RBP: 00000000ffffffff R08: ffff8880271d14bb R09: 1ffff11004e3a297 [ 409.961739][T10025] R10: dffffc0000000000 R11: ffffed1004e3a298 R12: dffffc0000000000 [ 409.969697][T10025] R13: 0000000000000009 R14: ffff8880271d14b8 R15: dffffc0000000000 [ 409.977659][T10025] ? put_mnt_ns+0x151/0x190 [ 409.982157][T10025] ? put_mnt_ns+0x151/0x190 [ 409.986648][T10025] free_nsproxy+0x46/0x560 [ 409.991072][T10025] do_exit+0x6b8/0x2300 [ 409.995243][T10025] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 410.000619][T10025] ? do_raw_spin_lock+0x121/0x290 [ 410.005643][T10025] ? __pfx_do_exit+0x10/0x10 [ 410.010236][T10025] do_group_exit+0x21c/0x2d0 [ 410.014819][T10025] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.020008][T10025] get_signal+0x1285/0x1340 [ 410.024512][T10025] arch_do_signal_or_restart+0x9a/0x7a0 [ 410.030049][T10025] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 410.035240][T10025] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 410.041399][T10025] ? exit_to_user_mode_loop+0x55/0x4f0 [ 410.046849][T10025] exit_to_user_mode_loop+0x87/0x4f0 [ 410.052117][T10025] ? rcu_is_watching+0x15/0xb0 [ 410.056867][T10025] do_syscall_64+0x2e9/0xfa0 [ 410.061712][T10025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.067769][T10025] ? clear_bhb_loop+0x60/0xb0 [ 410.072522][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.078411][T10025] RIP: 00fb:0x294e66b3c7c44cb4 [ 410.083156][T10025] Code: Unable to access opcode bytes at 0x294e66b3c7c44c8a. [ 410.090504][T10025] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 410.098907][T10025] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 410.107059][T10025] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 410.115033][T10025] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 410.123010][T10025] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 410.130988][T10025] R13: a8d7b5dbf29d588f R14: 9ba473c1014f02b4 R15: 107b9d1451766018 [ 410.138965][T10025] [ 410.142555][T10025] Kernel Offset: disabled [ 410.146883][T10025] Rebooting in 86400 seconds..