last executing test programs:

13.626669335s ago: executing program 1 (id=224):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x39515a625330a8f9}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setresuid(0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
statx(0xffffffffffffffff, 0x0, 0x4400, 0x800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r2, {0x1}}, './file0\x00'})
sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
r5 = socket(0x11, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', <r7=>0x0})
sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r7, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302", 0x3}], 0x1}, 0x40011)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})

9.811403469s ago: executing program 4 (id=233):
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x598080, 0x184)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x6, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x2040400)
r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r4, 0x0, 0x0)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe20, 0x0, @private1, 0x4000}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
fchdir(r7)
sendmmsg$unix(r6, &(0x7f0000002d80)=[{{0x0, 0x53fe0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004)
socket$nl_netfilter(0x10, 0x3, 0xc)

8.847016299s ago: executing program 1 (id=235):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000f4ff00000000000000000010ff020000000000000000000000000001"], 0x340a)

8.437522298s ago: executing program 1 (id=236):
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' ', @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}})

7.937933483s ago: executing program 1 (id=239):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x46)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
socket(0x11, 0x3, 0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa9737a9b94c2300000000"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000)
io_uring_enter(r1, 0x2f48, 0x8948, 0x10, &(0x7f00000000c0)={[0x9]}, 0x8)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000002980)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0x0, r6, {0x7, 0x2b, 0x5, 0x8000000, 0x7, 0x40, 0x2, 0xf, 0x0, 0x0, 0x100, 0x1}}, 0x50)
poll(&(0x7f00000022c0)=[{r5}], 0x1, 0xb9)
sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

7.54121992s ago: executing program 0 (id=241):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000)
syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @broadcast}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
syz_usb_connect$uac1(0x0, 0xce, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0xd, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x80}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x3, 0x7f, 0x0, 0xa, 0xa}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x5}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0x5, 0x7, "98a60f73ad"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x8, 0x1, "c3"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0xf, 0x3, "0e4bf4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xc8, 0x9, 0x2, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x1, 0xd, "3512db58cdaa7b3714"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x401, 0x7, 0x5, "5ef57311"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x10, 0x4, "ba4488b8c5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0x1, 0x1, {0x7, 0x25, 0x1, 0x2, 0x7f, 0xa}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0xe, 0xe, 0x20, 0x1}, 0x1e, &(0x7f0000000180)={0x5, 0xf, 0x1e, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0x4, 0xf00, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x71, 0x4, 0x40}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1001}}]})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xe}, 0x8)
r3 = syz_usb_connect$hid(0x5, 0x8f, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x3, 0x0)
sendto$inet6(r2, &(0x7f00000004c0)="d2", 0x1, 0xc4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1={0xfc, 0x1, '\x00', 0x9}, 0x8}, 0x1c)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r4, &(0x7f0000006540)={0x2020}, 0x5b3)
ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000640)={0xc})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000540)=0x80000001, 0x4)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x1, 0x4)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="20011100005a32ccb6b7d89337b3ba4c6cd83cc5310800"], 0x0, 0x0, 0x0, 0x0})

7.510334558s ago: executing program 4 (id=242):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$unix(0x1, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c25000000000020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000beda00", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}})

7.262135708s ago: executing program 4 (id=243):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e1d}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r7, 0x2007ffb)
close(r7)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x102)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x1, 0x0, 0x9, 0x0, 0xffeffe0000000001, 0xfa11}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x105000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@empty, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 'bond_slave_0\x00', 'team_slave_1\x00', {0xff}, {}, 0x1, 0x3, 0x40}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x93, 0x2, 0xaa78, 'syz1\x00', 'syz0\x00', {0x4}}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0x0, 0xffffff00, 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x8, 0x2}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x1, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'veth1_vlan\x00', {0x5911}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000b80)={'dummy0\x00', &(0x7f0000000680)=@ethtool_rxfh={0x46, 0x5, 0x200, 0x0, 0x4, "2722ed", 0x80000005, [0x8, 0x8, 0xffffffff, 0x0, 0xffff0000, 0x4, 0x1fc, 0x0]}})

5.83356751s ago: executing program 3 (id=244):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000220700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c00008008000340", @ANYBLOB], 0xf8}}, 0x0)

5.513410542s ago: executing program 3 (id=245):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16], 0x2c}}, 0x4000)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)

5.447227854s ago: executing program 4 (id=246):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
socket$inet(0x2, 0x2, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a3100000000050001000700e8ff050005000a0000000500040001000000"], 0x4c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r1], 0x4c}}, 0x40000)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f8666bf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
sendmsg$alg(r2, 0x0, 0x0)
recvmsg$can_raw(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40010022)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540", @ANYBLOB="655c5ec10a0e12b7cf7b9d4f374c894d5f5a5e9f66289ee09512aaba441d32d48494240d2c75c85bbc872c907cecb8aa9a554c460a639996b786b65aaba031073c15dcf29254df77e9c094d7091c8e33ef4deca232c7c781aee487", @ANYRESDEC=r3], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20048005}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f23039204253612516ccb7ecd101090212000100c0100009040c0200c17f0c00"], 0x0)

5.366644258s ago: executing program 3 (id=247):
socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000001f600f2c428e3c4013c6744826ebf136265c17dc4b7223480000000"], 0x17)
mmap(&(0x7f0000a45000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x1000000)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000100)={0x2, @win={{0xe36a, 0x5, 0xfffff9b6, 0x4}, 0x0, 0xffffffa5, 0x0, 0x10, 0x0, 0x60}})
r5 = fsopen(&(0x7f0000000280)='securityfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r6, 0x0, 0x0)
r7 = fsmount(r5, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x40, 0x0, 0x0, 0x0, r7}, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0)
syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)

5.190961484s ago: executing program 1 (id=248):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000010c0)=@abs, 0x38)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r3)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x21)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0)
r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r5, &(0x7f0000001480)={0x0, &(0x7f0000001140)=[@uexit={0x0, 0x18, 0x2}, @nested_load_code={0x12e, 0x7e, {0x3, "430f01cf66baf80cb8c9cec08cef66bafc0cb000eec7442400760a0e2ac74424020b000000c7442406000000000f011c24c421c972f6b4450f01c3470f35f30fc7753b66baf80cb860817883ef66bafc0cb8e5710000ef262666430f388017c403997a730002"}}, @cpuid={0x64, 0x18, {0x9, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xa2, 0x6, 0x9, 0x1000}}, @rdmsr={0x66, 0x18, {0xabe}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x1b4}}, @code={0xa, 0x6a, {"670fc73bc4c38141af001800005e66baa00066ed664a0f38f57c605566ba4100b87f000000ef0f01c5f3400fc7b17c770000660faef348b804000000000000000f23c80f21f8350400f0000f23f80f20e035000004000f22e0"}}, @nested_create_vm={0x12d, 0x18, 0x3}, @uexit={0x0, 0x18}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x20000000}, @cpuid={0x64, 0x18, {0x10, 0x7}}, @rdmsr={0x66, 0x18, {0xf19}}, @nested_load_code={0x12e, 0x75, {0x1, "67450fc7b7bcd899eb66b8f4000f00d8b98b0000000f3264666566440fd6feb9380300000f32660fc73748b800600000000000000f23c80f21f8350c0010000f23f83e670fc5d4f266baf80cb895980f86ef66bafc0cecc402b0f3595d"}}], 0x29d})
getdents64(r4, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048080}, 0x0)
getsockopt(r0, 0x1, 0xe, &(0x7f0000002a40)=""/152, &(0x7f0000002b00)=0x98)
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040))
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002f61afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

5.108626449s ago: executing program 2 (id=249):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x101}]})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x20, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000000e4ffffff", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}})

3.673479984s ago: executing program 0 (id=250):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000013800000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027"], 0x124}}, 0x0)

3.621118577s ago: executing program 2 (id=251):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000e00000000000000000011000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d"], 0xfdef)

3.612896583s ago: executing program 0 (id=252):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x40000008, {{0xa, 0x4e21, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @empty, 0x4}}}, 0x108)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)
r1 = socket$inet6(0xa, 0x3, 0x4a)
unshare(0x2040400)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000002040)=<r6=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r10=>0x0})
bind$packet(r9, &(0x7f0000000300)={0x11, 0x0, r10, 0x1, 0x8, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x4a, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e218d47747968168657b69d7addbd3abdf6f0e7c4c1b2359b6c2ca02d3fd49f7cdc201c7277ff205c3bbd8332b59d93df47debad55fd008076b75e7e1d759517d153344c33147386fe5d93d56dab0cd35ceed5e8acb1201be", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002001190780002"], 0x0)
io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0)
r11 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r12 = dup(r11)
write$binfmt_elf64(r12, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x23e, 0x3, 0x3e, 0xcd, 0x4000000000001d4, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x501}, [{0x3, 0x81, 0xff, 0xff5, 0x100000000, 0x1b8, 0x7}], "", ['\x00']}, 0x6b)
execveat(r12, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
writev(r3, &(0x7f0000004400)=[{&(0x7f0000002000)="87", 0x1}], 0x1)
getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/216, &(0x7f0000000040)=0xd8)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x15, 0x9, 0x0, 0x1, [@nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @fd}]}, @generic="1ebadb1f5e"]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)

3.261225389s ago: executing program 0 (id=253):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$unix(0x1, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c25000000000020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000001fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}})

3.260516312s ago: executing program 2 (id=254):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x3, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000000000000000000100", 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5)

2.98475086s ago: executing program 2 (id=255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x10}, {0xffffffff, 0xfffffff8, 0x9, 0xfffffffb}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x80)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x13e}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)="e481", 0x2}, {&(0x7f00000007c0)="79b2fd25622cf5564441", 0xa}], 0x2}, 0x40010)

2.861187632s ago: executing program 0 (id=256):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES16]) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) (async)
ptrace(0x10, 0x1) (async)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) (async)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = fsmount(r1, 0x0, 0x1e) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)={0xff, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}, 0x10) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "00cd83f39500", "7979c06f94e1f3ed1945a2b2c7ff1bd557b28d5a73226a963826af565862c109", '\vv?\f', "dbdf3ad7d6801cf6"}, 0x38) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x11a, 0x4, 0x0, 0x0) (async)
fchdir(r2) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
ftruncate(r4, 0x472e) (async)
write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000080)={0x14}, 0x14)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])

2.644411142s ago: executing program 2 (id=257):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16], 0x2c}}, 0x4000)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)

2.480004114s ago: executing program 2 (id=258):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r4)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r5 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r7, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r8, 0x5404)
ioctl$SNDCTL_TMR_TEMPO(r8, 0xc0045405, &(0x7f0000000040)=0xa5)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000440)=@userptr={0x0, 0xa, 0x4, 0x0, 0x18aec3a0, {}, {0x1, 0xc, 0x6, 0x3, 0x2, 0x7, 'wCZb'}, 0x6, 0x2, {&(0x7f0000000400)}, 0x3})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000680001000000000000000000020000000000000008000600f200000008000500", @ANYRES32=r9], 0x28}}, 0x0)

2.258984809s ago: executing program 4 (id=259):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) (async)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) (async)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
timer_create(0x3, 0x0, &(0x7f00000000c0)=<r3=>0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000600)={0x7, 0x0, [{0xdddd0000, 0x8a, &(0x7f0000000100)=""/138}, {0xd000, 0x84, &(0x7f00000002c0)=""/132}, {0x1, 0xe9, &(0x7f0000000400)=""/233}, {0x40000, 0x1000, &(0x7f0000001040)=""/4096}, {0x4000, 0x42, &(0x7f0000000500)=""/66}, {0xffff1000, 0x2f, &(0x7f0000000000)=""/47}, {0xa000, 0x6a, &(0x7f0000000580)=""/106}]}) (async)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), &(0x7f00000001c0), 0x2, 0x1)
timer_settime(r3, 0x0, 0x0, 0x0) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) (async)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000740)={0x18, 0x88, 0xfa00, {r5, 0x0, 0x2, @in6={0xa, 0x4e1d, 0x8be, @remote, 0xe}}}, 0x90) (async)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

1.28928936s ago: executing program 4 (id=260):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000380), 0x4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000140), 0xd, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f00000005c0)={{0x8, 0x5, 0x7, 0x81, 'syz1\x00', 0x7fffffff}, 0x1, [0xfffffffffffffffc, 0x539a, 0xff, 0x8, 0x100000001, 0x0, 0xf, 0x10000000000fff, 0x1, 0x4, 0x800000, 0x5, 0x9, 0x9, 0x8, 0x2, 0x2, 0x6, 0xd, 0x1, 0x7fffffff, 0x6, 0x7fff, 0x6, 0x5, 0xff, 0x2, 0x7, 0x6, 0x5, 0x9, 0x6ec, 0x100000001, 0x7, 0xfffffffffffffffb, 0x8, 0x8, 0xe, 0xfffffffffffeffff, 0x10001, 0xffe0000000000000, 0x5, 0x10001, 0xfffffffffffffff5, 0x3, 0x5, 0x8, 0x4, 0x7, 0x9, 0x180, 0x7, 0xc2c, 0x7894b85d, 0x66f0000000, 0x5, 0x1, 0xe, 0x6, 0x3, 0x2, 0x8, 0x4, 0x3, 0x7, 0x8, 0x80000000, 0x5, 0x8, 0xffffffffffffffff, 0x2, 0xa, 0xfffffffffffeffff, 0xc, 0x5b16, 0x5, 0x6, 0x660, 0x60, 0x9, 0x7ff, 0x6, 0xffffffffffffffa0, 0x50000000, 0xff, 0xffffffffffffffff, 0x8001, 0x10, 0x7fffffff, 0x4, 0x8000, 0x3, 0x8, 0xce02, 0x7, 0xeed8, 0xb, 0x4, 0x7fffffffffffffff, 0x823, 0x2, 0x9, 0x9, 0x3, 0x10000, 0x6, 0xf864, 0x1000, 0xfffffffffffffff9, 0x3ff, 0x5, 0x3, 0x7, 0x3, 0x4, 0x8000000000000000, 0x3, 0x55, 0x6, 0x5, 0x5, 0x618084a8, 0xa108, 0x984, 0x1000, 0x1ff, 0x8, 0x6]})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='ext4_other_inode_update_time\x00', r5}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'hsr0\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x10000180, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x19ba5feb, [0x1]}})
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
setfsuid(0xffffffffffffffff)

1.181427227s ago: executing program 1 (id=261):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000)
syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @broadcast}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
syz_usb_connect$uac1(0x0, 0xce, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0xd, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x80}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x3, 0x7f, 0x0, 0xa, 0xa}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x5}, @extension_unit={0xc, 0x24, 0x8, 0x1, 0x5, 0x7, "98a60f73ad"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x8, 0x1, "c3"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0xf, 0x3, "0e4bf4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xc8, 0x9, 0x2, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x1, 0xd, "3512db58cdaa7b3714"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x401, 0x7, 0x5, "5ef57311"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x10, 0x4, "ba4488b8c5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0x1, 0x1, {0x7, 0x25, 0x1, 0x2, 0x7f, 0xa}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0xe, 0xe, 0x20, 0x1}, 0x1e, &(0x7f0000000180)={0x5, 0xf, 0x1e, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0x4, 0xf00, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x71, 0x4, 0x40}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1001}}]})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xe}, 0x8)
r3 = syz_usb_connect$hid(0x5, 0x8f, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x3, 0x0)
sendto$inet6(r2, &(0x7f00000004c0)="d2", 0x1, 0xc4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1={0xfc, 0x1, '\x00', 0x9}, 0x8}, 0x1c)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r4, &(0x7f0000006540)={0x2020}, 0x5b3)
ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000640)={0xc})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000540)=0x80000001, 0x4)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x1, 0x4)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="20011100005a32ccb6b7d89337b3ba4c6cd83cc5310800"], 0x0, 0x0, 0x0, 0x0})

1.07306542s ago: executing program 0 (id=262):
mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010e01000009210000000122050009058103", @ANYRES16], 0x0)
mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0)
munlockall()
madvise(&(0x7f00003aa000/0x4000)=nil, 0x4000, 0x0)
fcntl$notify(r0, 0x402, 0x8000000a)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = open(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e3042, 0x9c)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00')
fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2})
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x1d8, 0x14, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0xd4}, [@INET_DIAG_REQ_BYTECODE={0x92, 0x1, "8ce9340d6309769c1af0eda917aa897db5dfca20cc883619d345b38b0aeb33c8105ee8099f34405582edbbaca1a56c4a4ab5a055ad1cfe73ae93adacffbad7e80c97b9fbfecf5792bc566a3c17fa6d38c1722543eecb41c2df0aadfe5b651a45868514194a7155d6a829d60b656b3186b0ebce9dd963aac54856a9c5d4734c0701a202e3bd8d92ce3d8e85e7d556"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "08e22eb3d81ad69d70ac5fb335f358242dca42f59450063c30b89f9c578ff5f0"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "09256ad52d42bfc71340b755de986ff7cd849ddd660826bd5fe0c3f4c0250676412f918dfe0b575f9b3caf8250ec28754795bf4b1c64bc6ea6b333e6baf36becdecfa5bc25fdf2e0ab4b0ee109ccd14f2c44c5d9222c28bee137326a875e3e979bc9238431a78527dbe32941572bb8a5d000d8af"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "795cf7fd54338e172f1eb7f7a780d83e87d9c6ee80cd94c335925778575b2c59bf2738daa0d604fee4e3bdc0b0ce3d785cb306297983c2e1a3175ffdd77ac893d2c3a8899fe80406b07660132bbba5c78d1e3aa79b008be025bc52b28c852cff336a2bbc3e5e1207cd6837b732cb534804a55f042244848949ccfeea55fa96dda55699496486f0e47a57c8cf6b"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092ddee10030410600200050003010902120001000000000904"], 0x0)

912.806611ms ago: executing program 3 (id=263):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50)
read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007"], 0x38}}, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000002200)={0x2e, 0x6, 0x0, {0x1, 0x6, 0x5, 0x0, 'wsync'}}, 0x2e)
syz_fuse_handle_req(r0, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b0495619a60bf5d77e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d13", 0x2000, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x0, 0x1, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0xa000, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x0, 0x1, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0xa000, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

420.025591ms ago: executing program 3 (id=264):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000001100000000000000000011000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d"], 0xfdef)

0s ago: executing program 3 (id=265):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x29cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x14a0000, 0x800, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xbc, 0x0, 0x71, 0x2a82, 0x6, 0x2, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x3, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x0, 0x1, 0x2], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x313, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x9, 0x1, 0x2000002, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x8, 0x2, 0x7f, 0x9, 0x401, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x802, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0x19bd, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0xfffffffe, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x5, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2)
preadv(r1, &(0x7f0000000100)=[{0x0, 0x1100}, {&(0x7f0000000800)=""/21, 0x15}], 0x2, 0x40001001, 0x3)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0], 0x38}}, 0x10)

kernel console output (not intermixed with test programs):

etrying later): interface not active
[   93.741222][ T5856] team0: Port device team_slave_0 added
[   93.775969][ T5845] Bluetooth: hci4: command tx timeout
[   93.797691][ T5856] team0: Port device team_slave_1 added
[   93.816508][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.823518][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.849737][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.887653][ T5854] team0: Port device team_slave_0 added
[   93.893976][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.901497][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.928022][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.940201][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.947538][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.973831][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.986609][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.993612][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.019653][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.045246][ T5854] team0: Port device team_slave_1 added
[   94.076202][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.083179][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.109342][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.148145][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.155155][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.181748][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.212175][ T5852] hsr_slave_0: entered promiscuous mode
[   94.218754][ T5852] hsr_slave_1: entered promiscuous mode
[   94.255649][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.262651][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.288759][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.301880][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.309000][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.334930][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.403507][ T5855] hsr_slave_0: entered promiscuous mode
[   94.410059][ T5855] hsr_slave_1: entered promiscuous mode
[   94.416790][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   94.422600][ T5855] Cannot create hsr debugfs directory
[   94.452268][ T5851] hsr_slave_0: entered promiscuous mode
[   94.459057][ T5851] hsr_slave_1: entered promiscuous mode
[   94.465151][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   94.471077][ T5851] Cannot create hsr debugfs directory
[   94.520463][ T5856] hsr_slave_0: entered promiscuous mode
[   94.527021][ T5856] hsr_slave_1: entered promiscuous mode
[   94.534516][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   94.540441][ T5856] Cannot create hsr debugfs directory
[   94.601738][ T5854] hsr_slave_0: entered promiscuous mode
[   94.608309][ T5854] hsr_slave_1: entered promiscuous mode
[   94.614475][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   94.620297][ T5854] Cannot create hsr debugfs directory
[   95.104825][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.121745][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.133159][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.152213][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.210368][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.232448][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.252817][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.263892][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.332305][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   95.349704][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   95.375118][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   95.390335][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.506545][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.518651][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.530381][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.546792][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.611295][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.683261][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   95.703002][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   95.719542][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   95.728181][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   95.739817][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   95.763811][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.776311][ T5845] Bluetooth: hci0: command tx timeout
[   95.776369][ T5850] Bluetooth: hci1: command tx timeout
[   95.781744][ T5843] Bluetooth: hci2: command tx timeout
[   95.788230][ T5841] Bluetooth: hci3: command tx timeout
[   95.809121][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.816363][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.839015][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.846274][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.857266][ T5841] Bluetooth: hci4: command tx timeout
[   95.909374][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   95.923209][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.961516][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.968676][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.001913][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.009113][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.027153][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   96.070767][  T138] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.077948][  T138] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.112159][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.127083][  T138] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.134249][  T138] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.201260][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   96.243897][ T3658] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.251114][ T3658] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.272894][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.284407][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.291604][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.303431][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.381610][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   96.425520][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.432660][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.444158][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.473376][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.480542][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.513439][ T5852] veth0_vlan: entered promiscuous mode
[   96.531193][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.561936][ T5852] veth1_vlan: entered promiscuous mode
[   96.632287][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.658720][ T5855] veth0_vlan: entered promiscuous mode
[   96.686373][ T5852] veth0_macvtap: entered promiscuous mode
[   96.703501][ T5851] veth0_vlan: entered promiscuous mode
[   96.719325][ T5852] veth1_macvtap: entered promiscuous mode
[   96.733102][ T5851] veth1_vlan: entered promiscuous mode
[   96.745010][ T5855] veth1_vlan: entered promiscuous mode
[   96.773742][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.807584][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.843376][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.864090][ T5856] veth0_vlan: entered promiscuous mode
[   96.882599][ T5851] veth0_macvtap: entered promiscuous mode
[   96.889677][ T3453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.901063][ T3453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.919055][ T5855] veth0_macvtap: entered promiscuous mode
[   96.927331][ T3470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.944066][ T3470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.954945][ T5851] veth1_macvtap: entered promiscuous mode
[   96.970875][ T5855] veth1_macvtap: entered promiscuous mode
[   96.989656][ T5856] veth1_vlan: entered promiscuous mode
[   97.040423][ T5854] veth0_vlan: entered promiscuous mode
[   97.059500][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.077793][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.095141][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.134092][  T138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.143903][  T138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.160845][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.169833][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.176159][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.186386][ T5854] veth1_vlan: entered promiscuous mode
[   97.195787][  T138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.214060][  T138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.243449][  T138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.252410][  T138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.278020][  T138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.289394][  T138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.310468][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.318831][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.336809][ T5856] veth0_macvtap: entered promiscuous mode
[   97.416079][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   97.419334][ T5856] veth1_macvtap: entered promiscuous mode
[   97.491388][ T5854] veth0_macvtap: entered promiscuous mode
[   97.547045][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.554913][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.603350][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.610782][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.636186][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.642008][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.654995][ T5854] veth1_macvtap: entered promiscuous mode
[   97.690116][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.702251][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.815946][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.920305][ T5841] Bluetooth: hci3: command tx timeout
[   97.920417][ T5845] Bluetooth: hci0: command tx timeout
[   97.932181][ T5850] Bluetooth: hci1: command tx timeout
[   97.937758][ T5841] Bluetooth: hci4: command tx timeout
[   97.943682][ T5843] Bluetooth: hci2: command tx timeout
[   97.994314][ T3493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.027368][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.068668][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.069933][ T3493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.148803][ T3493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.214975][ T3493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.332221][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.343753][ T3493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.351344][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.361671][ T3493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.384837][ T3493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.553051][ T3493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.553092][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.615746][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.625354][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.655482][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   98.725493][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.850093][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.866824][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.909509][ T5920] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   98.951584][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.997080][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.120356][ T5920] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   99.147638][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.179949][ T5920] usb 2-1: config 0 descriptor??
[   99.194744][ T5920] cp210x 2-1:0.0: cp210x converter detected
[   99.206188][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.232077][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.233088][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   99.395413][ T5931] Zero length message leads to an empty skb
[   99.416012][ T5920] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[   99.463488][ T5920] cp210x 2-1:0.0: querying part number failed
[   99.555870][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.560840][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.581630][ T5920] usb 2-1: cp210x converter now attached to ttyUSB0
[   99.595617][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.649487][ T5920] usb 2-1: USB disconnect, device number 2
[   99.700020][ T5943] netlink: 'syz.3.6': attribute type 2 has an invalid length.
[   99.710132][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   99.746962][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   99.767671][ T5920] cp210x 2-1:0.0: device disconnected
[   99.795552][ T5943] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6'.
[   99.937515][ T5843] Bluetooth: hci3: command tx timeout
[  100.019023][ T5850] Bluetooth: hci4: command tx timeout
[  100.019052][ T5841] Bluetooth: hci1: command tx timeout
[  100.031562][ T5843] Bluetooth: hci0: command tx timeout
[  100.035952][ T5845] Bluetooth: hci2: command tx timeout
[  100.715799][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.727334][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  101.417254][ T5981] syzkaller0: entered promiscuous mode
[  101.423059][ T5981] syzkaller0: entered allmulticast mode
[  101.687981][ T5983] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  102.289964][ T5989] loop2: detected capacity change from 0 to 7
[  102.311246][ T5989] Dev loop2: unable to read RDB block 7
[  102.319846][ T5989]  loop2: unable to read partition table
[  102.325734][ T5989] loop2: partition table beyond EOD, truncated
[  102.345828][ T5989] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  102.510944][ T5198] Dev loop2: unable to read RDB block 7
[  102.517763][ T5198]  loop2: unable to read partition table
[  102.540114][ T5198] loop2: partition table beyond EOD, truncated
[  102.795418][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  102.955294][   T24] usb 5-1: Using ep0 maxpacket: 8
[  102.997065][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  103.235495][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.243619][   T24] usb 5-1: Product: syz
[  103.263789][   T24] usb 5-1: Manufacturer: syz
[  103.268622][   T24] usb 5-1: SerialNumber: syz
[  103.312526][   T24] usb 5-1: config 0 descriptor??
[  103.325921][   T24] gspca_main: vc032x-2.14.0 probing 046d:0896
[  103.391499][ T5839] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  103.645931][ T5839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.669788][ T5839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  103.788445][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.857086][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.944660][ T5839] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  103.954607][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  103.963040][ T5839] usb 3-1: SerialNumber: syz
[  104.035925][   T24] gspca_vc032x: reg_w err -110
[  104.041818][   T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -110
[  104.226218][ T6007] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  104.414355][ T5839] usb 3-1: 0:2 : does not exist
[  104.537708][ T5839] usb 3-1: USB disconnect, device number 2
[  104.561863][ T6015] netlink: 44 bytes leftover after parsing attributes in process `syz.1.23'.
[  104.865312][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  104.916676][ T5900] usb 5-1: USB disconnect, device number 2
[  105.076525][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  105.101918][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  105.116438][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  105.126292][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.184433][   T10] usb 2-1: Product: syz
[  105.216594][   T10] usb 2-1: Manufacturer: syz
[  105.221256][   T10] usb 2-1: SerialNumber: syz
[  105.256808][   T10] usb 2-1: config 0 descriptor??
[  105.313332][ T6024] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET)
[  105.621926][ T6015] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  105.708053][   T30] audit: type=1326 audit(1767972499.622:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617858f749 code=0x7ffc0000
[  105.778479][   T30] audit: type=1326 audit(1767972499.622:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f617858f749 code=0x7ffc0000
[  105.838676][   T30] audit: type=1326 audit(1767972499.622:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617858f749 code=0x7ffc0000
[  105.895412][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  105.940007][   T30] audit: type=1326 audit(1767972499.622:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617858f749 code=0x7ffc0000
[  105.967841][   T10] usb 2-1: USB disconnect, device number 3
[  106.002849][   T30] audit: type=1326 audit(1767972499.622:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f617858f749 code=0x7ffc0000
[  106.035418][   T24] usb 4-1: device descriptor read/64, error -71
[  106.043990][   T40] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  106.100607][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.229943][   T30] audit: type=1326 audit(1767972499.622:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617858f749 code=0x7ffc0000
[  106.286393][   T40] usb 3-1: Using ep0 maxpacket: 16
[  106.299643][   T40] usb 3-1: config 252 has an invalid interface number: 15 but max is 0
[  106.308842][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  106.355808][   T40] usb 3-1: config 252 has no interface number 0
[  106.362525][   T30] audit: type=1326 audit(1767972499.622:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f617858f749 code=0x7ffc0000
[  106.386848][   T40] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  106.399979][   T40] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 17407, setting to 1024
[  106.414659][   T30] audit: type=1326 audit(1767972499.622:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617858f749 code=0x7ffc0000
[  106.456944][ T6039] syzkaller0: entered promiscuous mode
[  106.464091][   T40] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  106.473476][ T6039] syzkaller0: entered allmulticast mode
[  106.480595][   T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.491389][   T40] usb 3-1: Product: syz
[  106.496608][   T24] usb 4-1: device descriptor read/64, error -71
[  106.509264][   T30] audit: type=1326 audit(1767972499.622:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f617858f749 code=0x7ffc0000
[  106.546513][   T40] usb 3-1: Manufacturer: syz
[  106.551203][   T40] usb 3-1: SerialNumber: syz
[  106.563899][   T30] audit: type=1326 audit(1767972500.082:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617858f749 code=0x7ffc0000
[  106.629363][   T24] usb usb4-port1: attempt power cycle
[  106.666166][   T40] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  107.056031][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  107.086027][   T24] usb 4-1: device descriptor read/8, error -71
[  107.237398][ T6054] fuse: Bad value for 'rootmode'
[  107.325997][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  107.357286][   T24] usb 4-1: device descriptor read/8, error -71
[  107.593651][   T24] usb usb4-port1: unable to enumerate USB device
[  107.698194][ T3658] usb 3-1: Failed to submit usb control message: -110
[  107.707202][ T3658] usb 3-1: unable to send the bmi data to the device: -110
[  107.789595][ T3658] usb 3-1: unable to get target info from device
[  107.789636][ T3658] usb 3-1: could not get target info (-110)
[  107.789785][ T3658] usb 3-1: could not probe fw (-110)
[  108.565968][ T6070] netlink: 'syz.3.37': attribute type 3 has an invalid length.
[  108.675296][ T6070] netlink: 'syz.3.37': attribute type 1 has an invalid length.
[  108.758018][ T6070] netlink: 120 bytes leftover after parsing attributes in process `syz.3.37'.
[  109.026683][   T10] usb 3-1: USB disconnect, device number 3
[  109.765612][   T40] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  109.935361][   T40] usb 2-1: Using ep0 maxpacket: 16
[  109.969043][   T40] usb 2-1: config 0 has no interfaces?
[  109.994601][   T40] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  110.026261][   T40] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  110.057748][   T40] usb 2-1: Manufacturer: syz
[  110.117950][   T40] usb 2-1: config 0 descriptor??
[  110.316903][ T6092] syzkaller0: entered promiscuous mode
[  110.349372][ T6092] syzkaller0: entered allmulticast mode
[  110.523908][ T6099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.531407][ T6099] IPv6: NLM_F_CREATE should be set when creating new route
[  110.538824][ T6099] IPv6: NLM_F_CREATE should be set when creating new route
[  110.546115][ T6099] IPv6: NLM_F_CREATE should be set when creating new route
[  110.879252][ T6105] fuse: Bad value for 'fd'
[  111.091973][ T6105] ipip0: entered promiscuous mode
[  111.116740][ T6105] ipip0: entered allmulticast mode
[  112.257911][   T10] usb 2-1: USB disconnect, device number 4
[  112.445336][ T5834] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  112.625388][ T5834] usb 4-1: Using ep0 maxpacket: 8
[  112.645324][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  112.678023][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  112.678328][   T30] audit: type=1326 audit(1767972506.622:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6acd8f749 code=0x7ffc0000
[  112.737772][ T5834] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  112.775270][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.808299][   T30] audit: type=1326 audit(1767972506.622:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6acd8f749 code=0x7ffc0000
[  112.835349][ T5834] usb 4-1: config 0 descriptor??
[  112.875368][   T30] audit: type=1326 audit(1767972506.622:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd6acd8f749 code=0x7ffc0000
[  112.906481][ T6121] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  112.918749][   T40] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  112.995283][   T30] audit: type=1326 audit(1767972506.622:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6acd8f749 code=0x7ffc0000
[  113.050486][ T5834] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  113.095155][   T30] audit: type=1326 audit(1767972506.622:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6acd8f749 code=0x7ffc0000
[  113.121774][   T40] usb 2-1: config 9 has an invalid interface number: 3 but max is 0
[  113.139158][   T40] usb 2-1: config 9 has no interface number 0
[  113.155931][   T40] usb 2-1: config 9 interface 3 has no altsetting 0
[  113.180751][   T40] usb 2-1: New USB device found, idVendor=0fcf, idProduct=1003, bcdDevice=87.04
[  113.192569][   T30] audit: type=1326 audit(1767972506.692:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd6acd8f749 code=0x7ffc0000
[  113.216850][ T6125] loop4: detected capacity change from 0 to 7
[  113.223270][   T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.223306][   T40] usb 2-1: Product: syz
[  113.223322][   T40] usb 2-1: Manufacturer: syz
[  113.223337][   T40] usb 2-1: SerialNumber: syz
[  113.261468][ T6112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'.
[  113.294106][ T5854]  loop4: [POWERTEC] p1 p2 p3
[  113.308178][ T5854] loop4: p1 start 1600481121 is beyond EOD, truncated
[  113.317608][   T30] audit: type=1326 audit(1767972506.692:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6acd8f749 code=0x7ffc0000
[  113.341175][ T5854] loop4: p2 size 1952776192 extends beyond EOD, truncated
[  113.353075][ T5854] loop4: p3 start 16778495 is beyond EOD, truncated
[  113.362455][   T30] audit: type=1326 audit(1767972506.692:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6acd8f749 code=0x7ffc0000
[  113.388209][ T6125]  loop4: [POWERTEC] p1 p2 p3
[  113.396121][ T6125] loop4: p1 start 1600481121 is beyond EOD, truncated
[  113.403168][ T6125] loop4: p2 size 1952776192 extends beyond EOD, truncated
[  113.422705][ T6125] loop4: p3 start 16778495 is beyond EOD, truncated
[  113.429679][   T30] audit: type=1326 audit(1767972506.692:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd6acd8f749 code=0x7ffc0000
[  113.453699][ T6116] netlink: 'syz.1.49': attribute type 10 has an invalid length.
[  113.463022][   T10] usb 4-1: USB disconnect, device number 6
[  113.463278][    C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  113.491597][ T5198]  loop4: [POWERTEC] p1 p2 p3
[  113.507898][ T5198] loop4: p1 start 1600481121 is beyond EOD, truncated
[  113.523879][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'.
[  113.535568][ T5198] loop4: p2 size 1952776192 extends beyond EOD, truncated
[  113.552526][   T30] audit: type=1326 audit(1767972506.692:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6acd8f749 code=0x7ffc0000
[  113.578845][ T5198] loop4: p3 start 16778495 is beyond EOD, truncated
[  113.587144][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.611879][ T6116] team0: Port device bond0 added
[  113.783288][   T40] hub 2-1:9.3: bad descriptor, ignoring hub
[  113.970328][   T40] hub 2-1:9.3: probe with driver hub failed with error -5
[  114.004201][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  114.027085][   T40] cp210x 2-1:9.3: cp210x converter detected
[  114.033784][   T40] cp210x 2-1:9.3: failed to get vendor val 0x370b size 1: -71
[  114.072409][   T40] cp210x 2-1:9.3: querying part number failed
[  114.082781][   T40] usb 2-1: cp210x converter now attached to ttyUSB0
[  114.120482][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  114.161402][   T40] usb 2-1: USB disconnect, device number 5
[  114.242692][   T40] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  114.300271][   T40] cp210x 2-1:9.3: device disconnected
[  114.449781][ T5834] IPVS: starting estimator thread 0...
[  114.468304][ T6142] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002
[  114.469563][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  114.547966][ T6142] IPVS: rr: FWM 3 0x00000003 - no destination available
[  114.657451][ T6151] IPVS: using max 42 ests per chain, 100800 per kthread
[  115.732220][ T6171] netlink: 408 bytes leftover after parsing attributes in process `syz.2.62'.
[  115.875438][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'.
[  117.645316][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  117.805338][ T5834] usb 1-1: Using ep0 maxpacket: 8
[  117.812925][ T5834] usb 1-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11
[  117.824566][ T5834] usb 1-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  117.897294][ T5834] usb 1-1: config 0 interface 0 has no altsetting 0
[  117.920707][ T5834] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  117.968632][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.997860][ T5834] usb 1-1: config 0 descriptor??
[  118.164668][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'.
[  118.621192][ T6188] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  119.085293][ T5900] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  119.235273][ T5900] usb 2-1: Using ep0 maxpacket: 8
[  119.242593][ T5900] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  119.256505][ T5900] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.311662][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.339199][ T5900] usb 2-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00
[  119.445303][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.463323][ T5900] usb 2-1: config 0 descriptor??
[  119.885787][ T5900] apple 0003:05AC:8102.0001: unknown main item tag 0x0
[  119.893399][ T5900] apple 0003:05AC:8102.0001: unknown main item tag 0x0
[  119.900781][ T5900] apple 0003:05AC:8102.0001: unknown main item tag 0x0
[  119.989366][ T5900] apple 0003:05AC:8102.0001: hidraw0: USB HID v0.03 Device [HID 05ac:8102] on usb-dummy_hcd.1-1/input0
[  120.096861][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.135078][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.272615][ T6218] capability: warning: `syz.4.73' uses deprecated v2 capabilities in a way that may be insecure
[  120.317618][ T6219] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  120.334130][ T5900] usb 2-1: USB disconnect, device number 6
[  120.402546][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'.
[  120.455999][ T5834] usbhid 1-1:0.0: can't add hid device: -71
[  120.467229][ T5834] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  120.511897][ T6214] fido_id[6214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  120.533731][ T5834] usb 1-1: USB disconnect, device number 2
[  120.900897][ T6232] team_slave_0: entered promiscuous mode
[  120.906737][ T6232] team_slave_1: entered promiscuous mode
[  120.917168][ T6232] macsec1: entered promiscuous mode
[  120.930623][ T6232] team0: entered promiscuous mode
[  120.946697][ T6232] team0: Device macsec1 is already an upper device of the team interface
[  120.962298][ T6232] team0: left promiscuous mode
[  120.968719][ T6232] team_slave_0: left promiscuous mode
[  120.974243][ T6232] team_slave_1: left promiscuous mode
[  121.021718][ T5834] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  121.195808][ T5834] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  121.281701][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.303756][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.325492][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  121.412034][ T5834] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  121.446638][ T5834] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  121.465006][ T5834] usb 1-1: Manufacturer: syz
[  121.479007][ T5834] usb 1-1: config 0 descriptor??
[  122.257209][ T6245] netlink: 'syz.4.80': attribute type 39 has an invalid length.
[  122.325150][ T5834] usbhid 1-1:0.0: can't add hid device: -71
[  122.346209][ T5834] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  122.423130][ T5834] usb 1-1: USB disconnect, device number 3
[  122.722415][ T6253] netlink: 200 bytes leftover after parsing attributes in process `syz.4.81'.
[  122.759312][ T6253] netlink: 200 bytes leftover after parsing attributes in process `syz.4.81'.
[  122.935260][ T5834] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  123.178260][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.270001][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.305619][ T5834] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  123.344147][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.354013][ T6276] netlink: 'syz.0.90': attribute type 8 has an invalid length.
[  123.376210][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'.
[  123.398349][ T5834] usb 4-1: config 0 descriptor??
[  123.693824][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'.
[  123.786183][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'.
[  123.841283][ T5834] usb 4-1: string descriptor 0 read error: -32
[  123.861452][ T5834] uclogic 0003:256C:006D.0002: interface is invalid, ignoring
[  123.905586][ T5920] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  123.926796][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'.
[  123.959929][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'.
[  124.048866][ T5834] usb 4-1: USB disconnect, device number 7
[  124.085469][ T5920] usb 3-1: Using ep0 maxpacket: 32
[  124.225117][ T5920] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  124.252628][ T5920] usb 3-1: config 0 has no interface number 0
[  124.269102][ T5920] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 254, changing to 11
[  124.286764][ T5920] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[  124.361547][ T5920] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  124.391577][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.429067][ T5920] usb 3-1: Product: syz
[  124.453976][ T5920] usb 3-1: Manufacturer: syz
[  124.474739][ T5920] usb 3-1: SerialNumber: syz
[  124.482251][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'.
[  124.501205][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'.
[  124.523316][ T5920] usb 3-1: config 0 descriptor??
[  124.529972][ T6282] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  124.595297][ T5834] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  124.755292][ T5834] usb 4-1: Using ep0 maxpacket: 16
[  124.769815][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short
[  124.786196][ T5834] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  124.809956][ T5834] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  124.842719][ T5834] usb 4-1: config 1 has no interface number 1
[  124.901647][ T5834] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  124.915237][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.933532][ T5834] usb 4-1: Product: syz
[  124.947761][ T5834] usb 4-1: Manufacturer: syz
[  124.955290][ T5920] radio-si470x 3-1:0.35: DeviceID=0x9242 ChipID=0x0000
[  124.968310][ T5834] usb 4-1: SerialNumber: syz
[  124.989750][ T5920] radio-si470x 3-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  125.153187][ T5920] radio-si470x 3-1:0.35: software version 146, hardware version 66
[  125.172929][ T5920] radio-si470x 3-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  125.211307][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.220921][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.240299][ T5834] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  125.253362][ T5834] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  125.269440][ T5834] usb 4-1: 2:1 : invalid channels 0
[  125.353723][ T5920] radio-si470x 3-1:0.35: si470x_set_report: usb_control_msg returned -71
[  125.364591][ T5834] usb 4-1: USB disconnect, device number 8
[  125.396461][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.404191][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.410943][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.417672][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.424443][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.431311][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.438177][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.444916][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.451717][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.461066][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.467871][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.474486][ T5920] radio-si470x 3-1:0.35: si470x_set_report: usb_control_msg returned -71
[  125.483023][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.492063][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.498710][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.505375][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.511968][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.518629][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.525260][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.531864][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.538612][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.545326][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.551947][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.559013][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.565841][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.572488][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.579208][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.588367][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.595274][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.602122][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.608843][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.616488][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.623556][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.630282][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.636995][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.643740][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.650476][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.657203][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.663885][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.670658][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.677351][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.684990][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.691786][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.698475][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.705228][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.711972][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.718725][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.725471][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.732214][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.738948][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.745660][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.752484][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.759174][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.765877][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.772569][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.779286][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.786583][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.793815][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.800542][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.807547][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.814324][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.821071][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.829065][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.835869][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.842589][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.849349][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.857748][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.864797][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.871511][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.878201][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.887617][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.894408][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.901160][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.907942][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.914620][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.921361][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.928047][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.934720][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.941443][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.948130][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.954836][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.961551][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.968244][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.974918][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.981589][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.989594][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  125.996323][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.003035][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.009716][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.016436][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.023123][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.029816][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.036505][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.043182][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.050145][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.056857][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.063566][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.070278][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.077005][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.083687][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.093149][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.100358][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.107033][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.113739][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.120409][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.127114][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.133782][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.140468][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.147145][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.153843][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.160578][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.168181][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.174925][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.181663][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.188434][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.196103][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.202879][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.215281][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.222028][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.228869][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.235660][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.242956][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.250305][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.257143][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.263898][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.270648][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.277416][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.284152][    C1] radio-si470x 3-1:0.35: non-zero urb status (-71)
[  126.295885][ T5920] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -22
[  126.355654][ T5920] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  126.366749][ T5920] usb 3-1: USB disconnect, device number 4
[  126.630465][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  126.630478][   T30] audit: type=1326 audit(1767972520.572:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  126.695427][   T30] audit: type=1326 audit(1767972520.602:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  126.817703][   T30] audit: type=1326 audit(1767972520.602:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  126.922043][   T30] audit: type=1326 audit(1767972520.602:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08b0b8f34b code=0x7ffc0000
[  127.025701][   T30] audit: type=1326 audit(1767972520.602:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08b0b8f34b code=0x7ffc0000
[  127.095296][   T30] audit: type=1326 audit(1767972520.602:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08b0b8f34b code=0x7ffc0000
[  127.191804][   T30] audit: type=1326 audit(1767972520.602:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08b0b8f34b code=0x7ffc0000
[  127.297132][   T30] audit: type=1326 audit(1767972520.602:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08b0b8f34b code=0x7ffc0000
[  127.431239][ T6332] trusted_key: encrypted_key: insufficient parameters specified
[  127.432491][   T30] audit: type=1326 audit(1767972520.612:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08b0b8f34b code=0x7ffc0000
[  127.548863][   T30] audit: type=1326 audit(1767972520.692:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz.4.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08b0b8f34b code=0x7ffc0000
[  128.106035][ T5900] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  128.133317][ T6352] mmap: syz.2.110 (6352) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  128.175925][  T933] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  128.315566][ T5900] usb 2-1: Using ep0 maxpacket: 32
[  128.326129][  T933] usb 1-1: Using ep0 maxpacket: 8
[  128.333819][ T5900] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  128.342357][ T5900] usb 2-1: config 0 has no interface number 0
[  128.350545][ T5900] usb 2-1: config 0 interface 184 has no altsetting 0
[  128.359317][  T933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  128.371828][  T933] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  128.381230][  T933] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  128.394603][ T5900] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  128.406602][  T933] usb 1-1: Product: syz
[  128.421015][  T933] usb 1-1: Manufacturer: syz
[  128.425694][  T933] usb 1-1: SerialNumber: syz
[  128.432426][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.459508][ T5900] usb 2-1: Product: syz
[  128.482801][ T5900] usb 2-1: Manufacturer: syz
[  128.489097][ T5900] usb 2-1: SerialNumber: syz
[  128.515815][ T5900] usb 2-1: config 0 descriptor??
[  128.537210][ T5900] smsc75xx v1.0.0
[  128.782344][  T933] usb 1-1: palm_os_3_probe - error -110 getting connection information
[  128.923073][  T933] visor 1-1:1.0: probe with driver visor failed with error -110
[  130.037610][ T5900] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  130.147921][ T5900] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  130.631289][ T5900] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  130.654566][ T5900] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  130.688131][ T5900] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  130.713799][ T5900] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  130.752668][ T5900] usb 2-1: USB disconnect, device number 7
[  131.408093][ T6376] Cannot find add_set index 0 as target
[  131.903557][ T5834] usb 1-1: USB disconnect, device number 4
[  133.692564][ T6390] ip6erspan0: entered allmulticast mode
[  133.906250][ T6405] netlink: 'syz.4.123': attribute type 39 has an invalid length.
[  133.969830][ T6409] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[  133.993375][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.126'.
[  134.003091][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.126'.
[  134.019883][ T6408] erspan0: entered promiscuous mode
[  134.026856][ T6408] dummy0: entered promiscuous mode
[  134.105252][  T933] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  134.216495][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  134.216512][   T30] audit: type=1326 audit(1767972528.162:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.2.130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f617858f749 code=0x0
[  134.255750][  T933] usb 4-1: device descriptor read/64, error -71
[  134.327079][ T6417] loop3: detected capacity change from 0 to 7
[  134.337209][ T5833]  loop3: [POWERTEC] p1
[  134.342226][ T5833] loop3: p1 size 10176 extends beyond EOD, truncated
[  134.356562][ T6417]  loop3: [POWERTEC] p1
[  134.363526][ T6417] loop3: p1 size 10176 extends beyond EOD, truncated
[  134.375354][ T5900] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  134.388761][ T5834] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  134.496821][  T933] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  134.545374][ T5900] usb 5-1: Using ep0 maxpacket: 16
[  134.557575][ T5900] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  134.557703][ T5834] usb 2-1: descriptor type invalid, skip
[  134.572047][ T5834] usb 2-1: descriptor type invalid, skip
[  134.578813][ T5900] usb 5-1: config 0 has no interface number 0
[  134.584470][ T5834] usb 2-1: descriptor type invalid, skip
[  134.587303][ T5900] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  134.601711][ T5834] usb 2-1: descriptor type invalid, skip
[  134.613780][ T5834] usb 2-1: config 7 has an invalid interface number: 210 but max is 0
[  134.622657][ T5834] usb 2-1: config 7 has no interface number 0
[  134.624782][ T5900] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  134.640049][ T5834] usb 2-1: config 7 interface 210 has no altsetting 0
[  134.641677][  T933] usb 4-1: device descriptor read/64, error -71
[  134.653646][ T5834] usb 2-1: New USB device found, idVendor=04f2, idProduct=aff8, bcdDevice=31.a2
[  134.663373][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.671830][ T5834] usb 2-1: Product: syz
[  134.676323][ T5900] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  134.676806][ T5834] usb 2-1: Manufacturer: syz
[  134.690510][ T5834] usb 2-1: SerialNumber: syz
[  134.695660][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  134.695688][ T5900] usb 5-1: Product: syz
[  134.695705][ T5900] usb 5-1: SerialNumber: syz
[  134.725010][ T5900] usb 5-1: config 0 descriptor??
[  134.742536][ T5900] cm109 5-1:0.8: invalid payload size 0, expected 4
[  134.756501][ T5900] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input6
[  134.766859][  T933] usb usb4-port1: attempt power cycle
[  134.932025][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.941821][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.962521][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.989911][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.003936][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.016433][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.034995][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.050575][ T6411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.076408][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.097911][ T6411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.107158][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.127767][  T933] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  135.137791][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.178586][  T933] usb 4-1: device descriptor read/8, error -71
[  135.217579][ T5834] usb 2-1: USB disconnect, device number 8
[  135.237460][ T6411] netlink: 64 bytes leftover after parsing attributes in process `syz.4.128'.
[  135.314837][ T6424] loop2: detected capacity change from 0 to 7
[  135.325951][ T5833] Dev loop2: unable to read RDB block 7
[  135.332105][ T5833]  loop2: unable to read partition table
[  135.338382][ T5833] loop2: partition table beyond EOD, truncated
[  135.346160][ T6424] Dev loop2: unable to read RDB block 7
[  135.363314][ T6424]  loop2: unable to read partition table
[  135.373215][ T6424] loop2: partition table beyond EOD, truncated
[  135.382857][ T6424] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  135.424931][ T6427] netlink: 'syz.0.134': attribute type 8 has an invalid length.
[  135.437076][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.134'.
[  135.446177][  T933] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  135.458135][ T6427] FAULT_INJECTION: forcing a failure.
[  135.458135][ T6427] name failslab, interval 1, probability 0, space 0, times 1
[  135.471014][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.0.134 Not tainted syzkaller #0 PREEMPT(full) 
[  135.471041][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  135.471063][ T6427] Call Trace:
[  135.471072][ T6427]  <TASK>
[  135.471080][ T6427]  dump_stack_lvl+0xe8/0x150
[  135.471124][ T6427]  should_fail_ex+0x414/0x560
[  135.471163][ T6427]  should_failslab+0xa8/0x100
[  135.471192][ T6427]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  135.471227][ T6427]  ? __alloc_skb+0x1dc/0x3a0
[  135.471247][ T6427]  ? __local_bh_enable_ip+0xd0/0x130
[  135.471270][ T6427]  ? __alloc_skb+0x198/0x3a0
[  135.471291][ T6427]  __alloc_skb+0x1dc/0x3a0
[  135.471317][ T6427]  rtmsg_ifinfo_build_skb+0x84/0x260
[  135.471367][ T6427]  rtmsg_ifinfo+0x8c/0x1a0
[  135.471406][ T6427]  netif_state_change+0x289/0x380
[  135.471430][ T6427]  ? __pfx_netif_state_change+0x10/0x10
[  135.471447][ T6427]  ? console_unlock+0x13a/0x190
[  135.471477][ T6427]  ? validate_linkmsg+0x765/0x950
[  135.471512][  T933] usb 4-1: device descriptor read/8, error -71
[  135.471514][ T6427]  do_setlink+0x35de/0x41c0
[  135.471540][ T6427]  ? __wake_up_klogd+0xe6/0x120
[  135.471647][ T6427]  ? __pfx_do_setlink+0x10/0x10
[  135.471772][ T6427]  ? macsec_changelink_common+0x72f/0xa50
[  135.471869][ T6427]  ? macsec_changelink+0x1d4/0x480
[  135.471941][ T6427]  ? macsec_changelink+0x3ca/0x480
[  135.472014][ T6427]  ? __pfx_macsec_changelink+0x10/0x10
[  135.472092][ T6427]  ? rcu_is_watching+0x15/0xb0
[  135.472202][ T6427]  ? rtnl_newlink+0x8ec/0x1c90
[  135.472271][ T6427]  ? __pfx___mutex_lock+0x10/0x10
[  135.472360][ T6427]  ? ns_capable+0x8a/0xf0
[  135.472431][ T6427]  rtnl_newlink+0x161c/0x1c90
[  135.472521][ T6427]  ? __pfx_rtnl_newlink+0x10/0x10
[  135.472572][ T6427]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  135.472620][ T6427]  ? do_syscall_64+0xec/0xf80
[  135.472673][ T6427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.472820][ T6427]  ? kasan_quarantine_put+0xbb/0x1f0
[  135.472871][ T6427]  ? lockdep_hardirqs_on+0x7b/0x110
[  135.472939][ T6427]  ? kmem_cache_free+0x197/0x620
[  135.472988][ T6427]  ? nlmon_xmit+0xb0/0x100
[  135.473115][ T6427]  ? __lock_acquire+0x6b6/0x2cf0
[  135.473216][ T6427]  ? __local_bh_enable_ip+0xd0/0x130
[  135.473274][ T6427]  ? lockdep_hardirqs_on+0x7b/0x110
[  135.473336][ T6427]  ? __dev_queue_xmit+0x289/0x31c0
[  135.473400][ T6427]  ? __local_bh_enable_ip+0xd0/0x130
[  135.473452][ T6427]  ? __dev_queue_xmit+0x289/0x31c0
[  135.473544][ T6427]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  135.473641][ T6427]  ? __pfx_rtnl_newlink+0x10/0x10
[  135.473702][ T6427]  rtnetlink_rcv_msg+0x7cf/0xb70
[  135.473774][ T6427]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  135.473828][ T6427]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  135.473887][ T6427]  ? ref_tracker_free+0x63a/0x7d0
[  135.473946][ T6427]  ? __asan_memcpy+0x40/0x70
[  135.474026][ T6427]  ? __pfx_ref_tracker_free+0x10/0x10
[  135.474088][ T6427]  ? __skb_clone+0x63/0x7a0
[  135.474179][ T6427]  netlink_rcv_skb+0x208/0x470
[  135.474251][ T6427]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  135.474321][ T6427]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  135.474425][ T6427]  ? netlink_deliver_tap+0x2e/0x1b0
[  135.474551][ T6427]  netlink_unicast+0x82f/0x9e0
[  135.474645][ T6427]  ? __pfx_netlink_unicast+0x10/0x10
[  135.474700][ T6427]  ? __alloc_skb+0x198/0x3a0
[  135.474762][ T6427]  ? netlink_sendmsg+0x642/0xb30
[  135.474824][ T6427]  ? skb_put+0x11b/0x210
[  135.474905][ T6427]  netlink_sendmsg+0x805/0xb30
[  135.475004][ T6427]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.475081][ T6427]  ? aa_sock_msg_perm+0xf1/0x1b0
[  135.475158][ T6427]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  135.475201][ T6427]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.475271][ T6427]  __sock_sendmsg+0x21c/0x270
[  135.475364][ T6427]  ____sys_sendmsg+0x52d/0x820
[  135.475444][ T6427]  ? __pfx_____sys_sendmsg+0x10/0x10
[  135.475527][ T6427]  ? import_iovec+0x74/0xa0
[  135.475603][ T6427]  ___sys_sendmsg+0x21f/0x2a0
[  135.475675][ T6427]  ? __pfx____sys_sendmsg+0x10/0x10
[  135.475749][ T6427]  ? kstrtouint+0x6e/0xe0
[  135.475935][ T6427]  ? __fget_files+0x2a/0x420
[  135.476004][ T6427]  ? __fget_files+0x3a0/0x420
[  135.476097][ T6427]  __sys_sendmmsg+0x227/0x430
[  135.476193][ T6427]  ? __pfx___sys_sendmmsg+0x10/0x10
[  135.476235][ T6427]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  135.476362][ T6427]  ? ksys_write+0x22a/0x250
[  135.476416][ T6427]  ? __pfx_ksys_write+0x10/0x10
[  135.476488][ T6427]  __x64_sys_sendmmsg+0xa0/0xc0
[  135.476561][ T6427]  do_syscall_64+0xec/0xf80
[  135.476613][ T6427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.476659][ T6427]  ? trace_irq_disable+0x37/0x100
[  135.476731][ T6427]  ? clear_bhb_loop+0x60/0xb0
[  135.476795][ T6427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.476848][ T6427] RIP: 0033:0x7fd6acd8f749
[  135.476910][ T6427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.476953][ T6427] RSP: 002b:00007fd6adba3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  135.477023][ T6427] RAX: ffffffffffffffda RBX: 00007fd6acfe5fa0 RCX: 00007fd6acd8f749
[  135.477065][ T6427] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005
[  135.477100][ T6427] RBP: 00007fd6adba3090 R08: 0000000000000000 R09: 0000000000000000
[  135.477140][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.477165][ T6427] R13: 00007fd6acfe6038 R14: 00007fd6acfe5fa0 R15: 00007fd6ad10fa28
[  135.477275][ T6427]  </TASK>
[  135.645477][ T5834] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  135.870707][  T933] usb usb4-port1: unable to enumerate USB device
[  136.035493][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  136.036000][ T6308] usb 5-1: USB disconnect, device number 3
[  136.043004][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  136.256229][ T6308] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  136.323107][   T30] audit: type=1326 audit(1767972530.262:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8804d8f749 code=0x7ffc0000
[  136.465285][ T5834] usb 3-1: Using ep0 maxpacket: 8
[  136.479133][ T5834] usb 3-1: no configurations
[  136.484327][   T30] audit: type=1326 audit(1767972530.292:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f8804d8f749 code=0x7ffc0000
[  136.530514][ T5834] usb 3-1: can't read configurations, error -22
[  136.561907][   T30] audit: type=1326 audit(1767972530.292:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8804d8f749 code=0x7ffc0000
[  136.596489][ T6439] vivid-000: disconnect
[  136.662527][   T30] audit: type=1326 audit(1767972530.312:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8804d8f749 code=0x7ffc0000
[  136.685382][ T5834] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  136.756598][   T30] audit: type=1326 audit(1767972530.312:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8804d8f749 code=0x7ffc0000
[  136.954045][   T30] audit: type=1326 audit(1767972530.312:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8804d8f749 code=0x7ffc0000
[  136.976481][ T5834] usb 3-1: Using ep0 maxpacket: 8
[  136.982639][ T5834] usb 3-1: no configurations
[  136.990911][ T5834] usb 3-1: can't read configurations, error -22
[  137.012158][ T5834] usb usb3-port1: attempt power cycle
[  137.039014][   T30] audit: type=1326 audit(1767972530.342:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f8804d8f749 code=0x7ffc0000
[  137.109468][   T30] audit: type=1326 audit(1767972530.342:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8804d8f749 code=0x7ffc0000
[  137.197513][   T30] audit: type=1326 audit(1767972530.342:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6432 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8804d8f749 code=0x7ffc0000
[  137.263800][ T5198] Dev loop2: unable to read RDB block 7
[  137.300390][ T6436] vivid-000: reconnect
[  137.315021][ T5198]  loop2: unable to read partition table
[  137.333657][ T5198] loop2: partition table beyond EOD, truncated
[  137.344345][ T6443] syzkaller0: entered promiscuous mode
[  137.350062][ T6443] syzkaller0: entered allmulticast mode
[  137.365356][ T5834] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  137.386630][ T5834] usb 3-1: Using ep0 maxpacket: 8
[  137.392618][ T5834] usb 3-1: no configurations
[  137.417812][ T5834] usb 3-1: can't read configurations, error -22
[  137.595960][ T5834] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  137.646103][ T5834] usb 3-1: Using ep0 maxpacket: 8
[  137.651756][ T5834] usb 3-1: no configurations
[  137.662694][ T5834] usb 3-1: can't read configurations, error -22
[  137.684214][ T5834] usb usb3-port1: unable to enumerate USB device
[  138.059879][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  138.067330][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  138.325345][ T5923] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  138.814709][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.882279][ T5923] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  138.946308][ T5923] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[  139.030213][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.054927][ T5923] usb 1-1: config 0 descriptor??
[  139.919636][ T6459] cgroup: fork rejected by pids controller in /syz1
[  140.465284][ T5923] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  140.590954][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'.
[  140.655738][ T5923] usb 5-1: Using ep0 maxpacket: 8
[  140.689696][ T5923] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  140.699053][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.719466][ T5923] usb 5-1: Product: syz
[  140.749611][ T5923] usb 5-1: Manufacturer: syz
[  140.768223][ T5923] usb 5-1: SerialNumber: syz
[  140.790170][ T5923] usb 5-1: config 0 descriptor??
[  141.016462][ T6308] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  141.026444][ T5923] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  141.257918][ T6308] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  141.266257][ T6308] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.276512][ T6308] usb 4-1: config 0 has no interface number 0
[  141.288087][ T6308] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  141.297560][ T6308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.305675][ T6308] usb 4-1: Product: syz
[  141.309970][ T6308] usb 4-1: Manufacturer: syz
[  141.314613][ T6308] usb 4-1: SerialNumber: syz
[  141.330883][ T6308] usb 4-1: config 0 descriptor??
[  141.352503][ T6308] ims_pcu 4-1:0.41: Missing CDC union descriptor
[  141.406504][ T6308] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22
[  141.536685][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'.
[  141.631064][ T6308] usb 4-1: USB disconnect, device number 13
[  141.703712][   T37] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.713587][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'.
[  141.729372][   T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.762318][   T37] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.794794][   T37] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.914577][   T10] usb 1-1: USB disconnect, device number 5
[  142.383616][ T7207] syzkaller0: entered promiscuous mode
[  142.415052][ T7207] syzkaller0: entered allmulticast mode
[  142.479138][ T7211] x_tables: duplicate underflow at hook 2
[  142.735587][ T5923] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  142.787783][ T5922] IPVS: starting estimator thread 0...
[  142.885587][ T5920] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  142.903785][ T7219] IPVS: using max 25 ests per chain, 60000 per kthread
[  142.942568][ T7222] syzkaller1: entered promiscuous mode
[  142.961708][ T7222] syzkaller1: entered allmulticast mode
[  143.074536][ T7225] : renamed from veth0_to_bond (while UP)
[  143.080492][ T5920] usb 4-1: Using ep0 maxpacket: 32
[  143.110165][ T5920] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  143.126209][ T7222] kAFS: unable to lookup cell '�'
[  143.132353][ T5920] usb 4-1: config 0 has no interface number 0
[  143.213206][ T5920] usb 4-1: config 0 interface 184 has no altsetting 0
[  143.238972][ T5920] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  143.269479][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.294644][ T5920] usb 4-1: Product: syz
[  143.308708][ T5920] usb 4-1: Manufacturer: syz
[  143.324653][ T5920] usb 4-1: SerialNumber: syz
[  143.347714][ T5920] usb 4-1: config 0 descriptor??
[  143.534204][ T5920] smsc75xx v1.0.0
[  143.725380][ T5923] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  143.843759][ T6308] usb 5-1: USB disconnect, device number 4
[  143.951892][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.372990][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.424280][ T5923] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  144.444498][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.493534][ T5923] usb 3-1: config 0 descriptor??
[  144.576398][ T7238] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.159'.
[  145.250703][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.375834][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.407386][ T7232] GUP no longer grows the stack in syz.2.157 (7232): 200000004000-200000005000 (200000001000)
[  145.418263][ T7232] CPU: 0 UID: 0 PID: 7232 Comm: syz.2.157 Not tainted syzkaller #0 PREEMPT(full) 
[  145.418305][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  145.418315][ T7232] Call Trace:
[  145.418322][ T7232]  <TASK>
[  145.418329][ T7232]  dump_stack_lvl+0xe8/0x150
[  145.418375][ T7232]  __get_user_pages+0x2465/0x29f0
[  145.418429][ T7232]  ? __gup_longterm_locked+0xc63/0x1660
[  145.418463][ T7232]  ? down_read_killable+0x1bc/0x350
[  145.418482][ T7232]  ? try_get_folio+0xec/0x660
[  145.418507][ T7232]  __gup_longterm_locked+0xde4/0x1660
[  145.418585][ T7232]  gup_fast_fallback+0x1d26/0x2290
[  145.418645][ T7232]  ? __pfx_gup_fast_fallback+0x10/0x10
[  145.418683][ T7232]  ? is_valid_gup_args+0x11f/0x200
[  145.418717][ T7232]  ? get_user_pages_fast+0x4d/0xb0
[  145.418747][ T7232]  __iov_iter_get_pages_alloc+0x39f/0xb40
[  145.418783][ T7232]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  145.418805][ T7232]  ? wait_for_space+0x248/0x2d0
[  145.418844][ T7232]  iov_iter_get_pages2+0x5e/0xa0
[  145.418880][ T7232]  __se_sys_vmsplice+0x548/0x10d0
[  145.418933][ T7232]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  145.418955][ T7232]  ? __pfx_futex_wait+0x10/0x10
[  145.419057][ T7232]  do_syscall_64+0xec/0xf80
[  145.419080][ T7232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.419104][ T7232]  ? trace_irq_disable+0x37/0x100
[  145.419124][ T7232]  ? clear_bhb_loop+0x60/0xb0
[  145.419143][ T7232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.419177][ T7232] RIP: 0033:0x7f617858f749
[  145.419197][ T7232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.419214][ T7232] RSP: 002b:00007f61793b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  145.419236][ T7232] RAX: ffffffffffffffda RBX: 00007f61787e5fa0 RCX: 00007f617858f749
[  145.419257][ T7232] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007
[  145.419267][ T7232] RBP: 00007f6178613f91 R08: 0000000000000000 R09: 0000000000000000
[  145.419276][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.419285][ T7232] R13: 00007f61787e6038 R14: 00007f61787e5fa0 R15: 00007f617890fa28
[  145.419326][ T7232]  </TASK>
[  146.195434][ T5839] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  146.206211][ T5923] usbhid 3-1:0.0: can't add hid device: -71
[  146.246622][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  146.303131][ T5923] usb 3-1: USB disconnect, device number 9
[  146.358935][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.413789][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.477124][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  146.550571][ T5839] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  146.585257][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.636228][ T5920] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  146.656219][ T5839] usb 2-1: config 0 descriptor??
[  146.671875][ T5920] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  146.709086][ T5920] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  146.769736][ T5920] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  146.852513][ T5920] usb 4-1: USB disconnect, device number 14
[  147.107930][ T7259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.281389][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.392279][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.616040][ T5839] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  147.655260][ T5923] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  147.885289][ T5923] usb 5-1: device descriptor read/64, error -71
[  148.072920][ T7248] fuse: Unknown parameter 'user_?i00000000000000000000'
[  148.135704][ T5923] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  148.248551][ T7248] usb 2-1: string descriptor 0 read error: -71
[  148.258837][   T10] usb 2-1: USB disconnect, device number 9
[  148.275275][ T5923] usb 5-1: device descriptor read/64, error -71
[  148.491118][ T5923] usb usb5-port1: attempt power cycle
[  148.775275][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  148.865293][ T5923] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  148.896088][ T5923] usb 5-1: device descriptor read/8, error -71
[  148.968037][   T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  149.018742][   T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  149.064088][   T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  149.116922][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.162828][ T7248] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  149.170360][ T5923] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  149.200533][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  149.211686][ T5923] usb 5-1: device descriptor read/8, error -71
[  149.339821][ T5923] usb usb5-port1: unable to enumerate USB device
[  150.182017][ T6308] usb 2-1: USB disconnect, device number 10
[  150.515308][ T5977] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  150.889165][ T5977] usb 3-1: Using ep0 maxpacket: 32
[  150.985341][ T5977] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  151.076970][ T5977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.097657][ T5977] usb 3-1: config 0 has no interface number 0
[  151.107897][ T5977] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  151.209221][ T5977] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  151.227529][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.394989][ T5977] usb 3-1: Product: syz
[  151.414946][ T5977] usb 3-1: Manufacturer: syz
[  151.466049][ T5977] usb 3-1: SerialNumber: syz
[  151.509687][ T5977] usb 3-1: config 0 descriptor??
[  151.563324][ T5977] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  151.805846][ T5977] usb 3-1: qt2_setup_urbs - submit read urb failed -8
[  151.893438][ T5977] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8
[  151.976758][ T7302] syzkaller0: entered promiscuous mode
[  151.982270][ T7302] syzkaller0: entered allmulticast mode
[  153.483983][ T7314] vlan0: entered promiscuous mode
[  153.624352][ T7317] netlink: 'syz.4.177': attribute type 1 has an invalid length.
[  153.632366][ T7317] netlink: 'syz.4.177': attribute type 2 has an invalid length.
[  153.644251][ T7318] syzkaller0: entered promiscuous mode
[  153.674408][ T7318] syzkaller0: entered allmulticast mode
[  154.004235][  T933] usb 3-1: USB disconnect, device number 10
[  154.025374][ T7328] netlink: 'syz.0.180': attribute type 39 has an invalid length.
[  154.637905][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'.
[  154.648191][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'.
[  154.689997][ T7340] netlink: 'syz.3.183': attribute type 7 has an invalid length.
[  154.698111][ T7340] netlink: 'syz.3.183': attribute type 8 has an invalid length.
[  154.705859][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'.
[  154.811442][ T7341] netlink: 'syz.3.183': attribute type 7 has an invalid length.
[  154.844114][ T7341] netlink: 'syz.3.183': attribute type 8 has an invalid length.
[  154.890096][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'.
[  155.219568][ T7344] syzkaller0: entered promiscuous mode
[  155.263345][ T7344] syzkaller0: entered allmulticast mode
[  155.582531][ T7352] loop5: detected capacity change from 0 to 3367
[  155.676705][ T7352]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[  155.729837][ T5833] Buffer I/O error on dev loop5, logical block 420, async page read
[  156.107526][ T5833] Buffer I/O error on dev loop5, logical block 420, async page read
[  156.745304][ T5900] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  156.897844][ T5900] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  156.906320][ T5900] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  156.967618][ T5900] usb 3-1: config 0 interface 0 has no altsetting 0
[  156.998688][ T5900] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  157.016119][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  157.025721][ T5900] usb 3-1: Product: syz
[  157.066589][ T5900] usb 3-1: Manufacturer: syz
[  157.075533][ T5900] usb 3-1: SerialNumber: syz
[  157.121946][ T5900] usb 3-1: config 0 descriptor??
[  157.148042][ T5900] hub 3-1:0.0: bad descriptor, ignoring hub
[  157.159268][ T5900] hub 3-1:0.0: probe with driver hub failed with error -5
[  157.187219][ T5900] usb 3-1: selecting invalid altsetting 0
[  157.696277][ T7356] usb 3-1: reset high-speed USB device number 11 using dummy_hcd
[  158.217911][ T5923] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  158.386275][ T5923] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  158.394570][ T5923] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  158.404656][ T5923] usb 1-1: config 0 interface 0 has no altsetting 0
[  158.413631][ T5923] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  158.423142][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  158.431435][ T5923] usb 1-1: Product: syz
[  158.435680][ T5923] usb 1-1: Manufacturer: syz
[  158.440544][ T5923] usb 1-1: SerialNumber: syz
[  158.453558][ T5923] usb 1-1: config 0 descriptor??
[  158.470820][ T5923] hub 1-1:0.0: bad descriptor, ignoring hub
[  158.476973][ T5923] hub 1-1:0.0: probe with driver hub failed with error -5
[  158.489083][ T5923] usb 1-1: selecting invalid altsetting 0
[  158.624061][ T7377] loop2: detected capacity change from 0 to 7
[  158.632345][ T5833] Dev loop2: unable to read RDB block 7
[  158.639206][ T5833]  loop2: unable to read partition table
[  158.645096][ T5833] loop2: partition table beyond EOD, truncated
[  158.661463][ T7377] Dev loop2: unable to read RDB block 7
[  158.669271][ T7377]  loop2: unable to read partition table
[  158.683686][ T7377] loop2: partition table beyond EOD, truncated
[  158.704638][ T7377] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  158.915609][ T5977] usb 1-1: USB disconnect, device number 6
[  158.962170][ T5923] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  159.075305][  T933] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  159.095266][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  159.126932][ T5923] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 253, using maximum allowed: 30
[  159.142733][ T5923] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.153957][ T5923] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.164102][ T5923] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  159.178899][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0
[  159.187594][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  159.196747][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.207918][ T5923] usb 2-1: config 0 descriptor??
[  159.236904][  T933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.248043][ T5977] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  159.255759][  T933] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  159.264858][  T933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.274322][   T10] usb 5-1: Using ep0 maxpacket: 16
[  159.281707][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.293909][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.305338][  T933] usb 4-1: config 0 descriptor??
[  159.311403][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  159.331107][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  159.340456][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.352525][   T10] usb 5-1: config 0 descriptor??
[  159.427460][ T5977] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  159.435889][ T5977] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  159.446202][ T5977] usb 1-1: config 0 interface 0 has no altsetting 0
[  159.455721][ T5977] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  159.464900][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  159.474774][ T5977] usb 1-1: Product: syz
[  159.479456][ T5977] usb 1-1: Manufacturer: syz
[  159.484120][ T5977] usb 1-1: SerialNumber: syz
[  159.492595][ T5977] usb 1-1: config 0 descriptor??
[  159.501561][ T5977] hub 1-1:0.0: bad descriptor, ignoring hub
[  159.507832][ T5977] hub 1-1:0.0: probe with driver hub failed with error -5
[  159.520179][ T5977] usb 1-1: selecting invalid altsetting 0
[  159.631663][ T5923] logitech 0003:046D:C50C.0004: collection stack underflow
[  159.640220][ T5923] logitech 0003:046D:C50C.0004: item 0 4 0 12 parsing failed
[  159.649425][ T5923] logitech 0003:046D:C50C.0004: parse failed
[  159.655704][ T5923] logitech 0003:046D:C50C.0004: probe with driver logitech failed with error -22
[  159.737985][  T933] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  159.752542][  T933] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input8
[  159.773528][   T10] microsoft 0003:045E:07DA.0006: invalid report_count -1865544580
[  159.790633][   T10] microsoft 0003:045E:07DA.0006: item 0 4 1 9 parsing failed
[  159.799323][   T10] microsoft 0003:045E:07DA.0006: parse failed
[  159.805965][   T10] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22
[  159.848132][   T10] usb 2-1: USB disconnect, device number 11
[  159.907130][  T933] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  159.975103][  T933] usb 5-1: USB disconnect, device number 9
[  160.659267][ T7396] loop5: detected capacity change from 0 to 2935
[  160.676652][ T7396]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[  160.747083][ T5833] Buffer I/O error on dev loop5, logical block 366, async page read
[  160.796254][ T7382] bridge0: port 3(team0) entered blocking state
[  160.806214][ T7382] bridge0: port 3(team0) entered disabled state
[  160.859857][ T5833] Buffer I/O error on dev loop5, logical block 366, async page read
[  160.873738][ T7382] team0: entered allmulticast mode
[  160.883468][ T7382] team_slave_0: entered allmulticast mode
[  160.927839][ T7382] team_slave_1: entered allmulticast mode
[  161.161381][ T7382] team0: entered promiscuous mode
[  161.184250][ T7382] team_slave_0: entered promiscuous mode
[  161.206713][ T7382] team_slave_1: entered promiscuous mode
[  161.219348][ T7382] bridge0: port 3(team0) entered blocking state
[  161.226077][ T7382] bridge0: port 3(team0) entered forwarding state
[  161.934806][  T933] usb 4-1: USB disconnect, device number 15
[  163.012227][ T7356] usb 3-1: device descriptor read/64, error -110
Stopping sshd: [  163.255335][ T7356] usb 3-1: reset high-speed USB device number 11 using dummy_hcd
stopped /usr/sbin/sshd (pid 5590)
[  163.439374][ T7356] usb 3-1: device descriptor read/64, error -32
OK
[  163.685438][ T7356] usb 3-1: reset high-speed USB device number 11 using dummy_hcd
[  163.705701][ T7356] usb 3-1: device descriptor read/8, error -32
Stopping crond: [  163.905513][ T7356] raw-gadget.0 gadget.2: failed to queue resume event
[  163.966468][ T7356] usb 3-1: reset high-speed USB device number 11 using dummy_hcd
stopped /usr/sbin/crond (pid 5573)
[  164.019670][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  164.027155][ T7356] usb 3-1: device descriptor read/8, error -32
OK
[  164.052087][ T7430] loop9: detected capacity change from 0 to 7
[  164.063341][ T7430] Dev loop9: unable to read RDB block 7
[  164.069404][ T7430]  loop9: unable to read partition table
[  164.076079][ T7430] loop9: partition table beyond EOD, truncated
[  164.135476][ T7356] raw-gadget.0 gadget.2: failed to queue suspend event
[  164.136112][ T7430] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  164.176922][ T5900] usb 3-1: USB disconnect, device number 11
[  164.320771][ T5900] raw-gadget.0 gadget.2: failed to queue reset event
[  164.345296][ T7356] raw-gadget.0 gadget.2: failed to queue disconnect event
[  164.491174][ T5921] usb 1-1: USB disconnect, device number 7
[  164.565384][ T7437] netlink: 'syz.0.205': attribute type 39 has an invalid length.
[  164.593677][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  164.593695][   T30] audit: type=1326 audit(1767972558.532:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7435 comm="syz.4.207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x0
[  164.716799][ T7443] loop3: detected capacity change from 0 to 6
[  164.761758][ T7443]  loop3: [POWERTEC] p1
Stopping dhcpcd...
[  164.782705][ T7443] loop3: p1 size 10176 extends beyond EOD, truncated
stopped /sbin/dhcpcd (pid 5492)
[  165.275325][ T5921] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  165.572841][ T5921] usb 1-1: too many configurations: 45, using maximum allowed: 8
[  165.614713][ T5921] usb 1-1: unable to read config index 0 descriptor/start: -61
[  165.634432][ T5921] usb 1-1: can't read configurations, error -61
Stopping network: [  165.775411][ T5921] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  165.839347][   T30] audit: type=1326 audit(1767972559.782:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.4.212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x0
[  165.944693][ T7472] loop3: detected capacity change from 0 to 7
[  165.957716][ T5833]  loop3: [POWERTEC] p1
[  165.957748][ T5921] usb 1-1: too many configurations: 45, using maximum allowed: 8
[  165.964023][ T5833] loop3: p1 size 10176 extends beyond EOD, 
[  165.995274][ T5921] usb 1-1: unable to read config index 0 descriptor/start: -61
[  166.018337][ T5833] truncated
[  166.045426][ T5921] usb 1-1: can't read configurations, error -61
[  166.054208][ T7472]  loop3: [POWERTEC] p1
[  166.072615][ T5921] usb usb1-port1: attempt power cycle
[  166.097054][ T7472] loop3: p1 size 10176 extends beyond EOD, truncated
[  166.135286][ T6308] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  166.348373][ T6308] usb 3-1: Using ep0 maxpacket: 32
[  166.364527][ T6308] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  166.398282][ T6308] usb 3-1: config 0 has no interface number 0
[  166.420930][ T6308] usb 3-1: config 0 interface 12 has no altsetting 0
[  166.456339][ T5921] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  166.470294][ T6308] usb 3-1: New USB device found, idVendor=5342, idProduct=2561, bcdDevice=cc.16
[  166.508472][ T6308] usb 3-1: New USB device strings: Mfr=183, Product=236, SerialNumber=209
[  166.518707][ T5921] usb 1-1: too many configurations: 45, using maximum allowed: 8
[  166.549375][ T5921] usb 1-1: unable to read config index 0 descriptor/start: -61
[  166.569198][ T6308] usb 3-1: Product: syz
[  166.573420][ T6308] usb 3-1: Manufacturer: syz
[  166.589546][ T5921] usb 1-1: can't read configurations, error -61
[  166.611197][ T6308] usb 3-1: SerialNumber: syz
[  166.655269][ T5198]  loop3: [POWERTEC] p1
[  166.659731][ T5198] loop3: p1 size 10176 extends beyond EOD, truncated
[  166.667655][ T6308] usb 3-1: config 0 descriptor??
[  166.755408][ T5921] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  166.799752][ T5921] usb 1-1: too many configurations: 45, using maximum allowed: 8
[  166.809999][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  166.830944][ T5921] usb 1-1: unable to read config index 0 descriptor/start: -61
[  166.855225][ T5921] usb 1-1: can't read configurations, error -61
[  166.894757][ T5921] usb usb1-port1: unable to enumerate USB device
[  166.971952][ T6308] usb 3-1: USB disconnect, device number 13
[  167.195226][ T5834] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  167.286361][ T5921] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  167.379465][ T7493] FAULT_INJECTION: forcing a failure.
[  167.379465][ T7493] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  167.397407][ T5834] usb 4-1: Using ep0 maxpacket: 32
[  167.404046][ T7493] CPU: 0 UID: 0 PID: 7493 Comm: syz.1.217 Not tainted syzkaller #0 PREEMPT(full) 
[  167.404073][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  167.404086][ T7493] Call Trace:
[  167.404094][ T7493]  <TASK>
[  167.404103][ T7493]  dump_stack_lvl+0xe8/0x150
[  167.404136][ T7493]  should_fail_ex+0x414/0x560
[  167.404174][ T7493]  _copy_from_iter+0x1cd/0x1630
[  167.404204][ T7493]  ? rep_movs_alternative+0x4a/0x90
[  167.404238][ T7493]  ? __pfx__copy_from_iter+0x10/0x10
[  167.404258][ T7493]  ? sock_alloc_send_pskb+0x86b/0x980
[  167.404292][ T7493]  ? __pfx__copy_from_iter+0x10/0x10
[  167.404317][ T7493]  ? page_copy_sane+0x16a/0x280
[  167.404360][ T7493]  copy_page_from_iter+0xdd/0x170
[  167.404389][ T7493]  skb_copy_datagram_from_iter+0x306/0x720
[  167.404439][ T7493]  tun_get_user+0x1683/0x3dc0
[  167.404485][ T7493]  ? aa_file_perm+0x44c/0x1530
[  167.404515][ T7493]  ? __pfx_tun_get_user+0x10/0x10
[  167.404544][ T7493]  ? __lock_acquire+0x6b6/0x2cf0
[  167.404569][ T7493]  ? kstrtoull+0x12f/0x1d0
[  167.404610][ T7493]  ? ref_tracker_alloc+0x318/0x460
[  167.404630][ T7493]  ? get_pid_task+0x20/0x1f0
[  167.404659][ T7493]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  167.404681][ T7493]  ? tun_get+0x1c/0x2f0
[  167.404704][ T7493]  ? tun_get+0x1c/0x2f0
[  167.404734][ T7493]  ? tun_get+0x1c/0x2f0
[  167.404758][ T7493]  ? tun_get+0x1c/0x2f0
[  167.404788][ T7493]  tun_chr_write_iter+0x113/0x200
[  167.404815][ T7493]  vfs_write+0x5c9/0xb30
[  167.404841][ T7493]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  167.404869][ T7493]  ? __pfx_vfs_write+0x10/0x10
[  167.404900][ T7493]  ? __fget_files+0x2a/0x420
[  167.404936][ T7493]  ksys_write+0x145/0x250
[  167.404960][ T7493]  ? __pfx_ksys_write+0x10/0x10
OK[  167.405012][ T7493]  do_syscall_64+0xec/0xf80
[  167.405034][ T7493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.405054][ T7493]  ? trace_irq_disable+0x37/0x100
[  167.405082][ T7493]  ? clear_bhb_loop+0x60/0xb0
[  167.405107][ T7493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.405127][ T7493] RIP: 0033:0x7f8804d8e1ff

[  167.405145][ T7493] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  167.405161][ T7493] RSP: 002b:00007f8805bde000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  167.405183][ T7493] RAX: ffffffffffffffda RBX: 00007f8804fe5fa0 RCX: 00007f8804d8e1ff
[  167.405199][ T7493] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8
[  167.405212][ T7493] RBP: 00007f8805bde090 R08: 0000000000000000 R09: 0000000000000000
[  167.405225][ T7493] R10: 000000000000fef3 R11: 0000000000000293 R12: 0000000000000001
[  167.405237][ T7493] R13: 00007f8804fe6038 R14: 00007f8804fe5fa0 R15: 00007f880510fa28
[  167.405270][ T7493]  </TASK>
[  167.417723][ T5834] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  167.689710][ T5834] usb 4-1: config 0 has no interface number 0
[  167.706275][ T5921] usb 5-1: Using ep0 maxpacket: 32
[  167.735776][ T5921] usb 5-1: config 1 has an invalid interface number: 15 but max is 1
[  167.745013][ T5921] usb 5-1: config 1 has no interface number 0
[  167.752428][ T5834] usb 4-1: config 0 interface 12 has no altsetting 0
[  167.760004][ T5921] usb 5-1: config 1 interface 1 altsetting 248 bulk endpoint 0x3 has invalid maxpacket 1024
[  167.774581][ T5921] usb 5-1: config 1 interface 1 altsetting 248 has an invalid descriptor for endpoint zero, skipping
[  167.790010][ T5834] usb 4-1: New USB device found, idVendor=5342, idProduct=2561, bcdDevice=cc.16
[  167.816117][ T5834] usb 4-1: New USB device strings: Mfr=183, Product=236, SerialNumber=209
[  167.864648][ T5834] usb 4-1: Product: syz
[  167.871315][ T5834] usb 4-1: Manufacturer: syz
[  167.876083][ T5921] usb 5-1: config 1 interface 15 has no altsetting 0
[  167.882794][ T5921] usb 5-1: config 1 interface 1 has no altsetting 0
[  167.895249][ T5834] usb 4-1: SerialNumber: syz
[  167.908130][ T5834] usb 4-1: config 0 descriptor??
[  167.916626][ T5921] usb 5-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=a3.a2
[  167.946062][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.964382][ T5921] usb 5-1: Product: 䀊
Stopping iptables: [  167.984600][ T5921] usb 5-1: Manufacturer: 쏄㎲䲯ʴ僗㍥횱슗ࡎ챏렽᡹橃ꄯ伯㸦岵釯腟ӄ檁慳⛕鐌რ읿昦徭ᆻޭꏰꐜ⇧ヽ떂⧵극Ɑ릡읠㗢싌肁門಄▨ꬡ❕溺㍶삓맇恲븨療溊⃸砒ợ阹洡⻟暑曨氆ℛ
[  168.078280][ T5921] usb 5-1: SerialNumber: ⑗ꡏ䋋귀ᐓ뾧뼢쨜ਜ਼湺兒㟸䫂닰⇋焵㌒ꊉ夻褆潒뵒褨빺큟Ỷ淚ꋭ蔘죑㱴풰겻㎙⨐僽癧쐓曏ꑇ篑ꞧල깤깺ⴐ﮾㯕芔㥥〸꣓ꃟ減对壇놯廛诹⾣쥒褕萖蔰ᒤଡ톼惕奈뗘ᨅ削ὧ轙ἴ羯
[  168.135382][ T5839] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  168.188900][ T5834] usb 4-1: USB disconnect, device number 16
[  168.240262][ T7506] netlink: 104 bytes leftover after parsing attributes in process `syz.0.220'.
OK
[  168.277352][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'.
[  168.300192][ T5839] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  168.318137][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.350525][ T7506] netlink: 7 bytes leftover after parsing attributes in process `syz.0.220'.
[  168.361465][ T7506] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[  168.395328][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  168.436795][ T5839] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  168.479348][ T5839] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  168.519306][ T5839] usb 3-1: Manufacturer: syz
[  168.541094][ T5839] usb 3-1: config 0 descriptor??
[  168.615296][ T5839] igorplugusb 3-1:0.0: incorrect number of endpoints
Stopping system message bus: [  168.848868][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.899762][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.129606][ T7520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.140419][ T7520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.310153][ T7523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.332199][ T7523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.426024][ T7527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.218'.
[  169.499427][ T7530] loop2: detected capacity change from 0 to 7
[  169.517972][ T5833] Dev loop2: unable to read RDB block 7
[  169.525564][ T5833]  loop2: AHDI p1 p2 p3
[  169.530760][ T5833] loop2: partition table partially beyond EOD, truncated
[  169.539581][ T5833] loop2: p1 start 1601398130 is beyond EOD, truncated
[  169.546708][ T5833] loop2: p2 start 1702059890 is beyond EOD, truncated
[  169.556120][ T7530] Dev loop2: unable to read RDB block 7
[  169.561755][ T7530]  loop2: AHDI p1 p2 p3
[  169.572546][ T7530] loop2: partition table partially beyond EOD, truncated
[  169.580878][ T7530] loop2: p1 start 1601398130 is beyond EOD, truncated
[  169.597526][ T7530] loop2: p2 start 1702059890 is beyond EOD, truncated
[  169.695560][ T5900] usb 2-1: new high-speed USB device number 12 using dummy_hcd
done
[  169.855716][ T5900] usb 2-1: Using ep0 maxpacket: 8
[  169.866568][ T5900] usb 2-1: config 0 has an invalid interface number: 101 but max is 12
[  169.876281][ T5900] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  169.893894][ T5900] usb 2-1: config 0 has no interface number 0
[  169.902228][ T5900] usb 2-1: too many endpoints for config 0 interface 101 altsetting 115: 51, using maximum allowed: 30
[  169.917918][ T5900] usb 2-1: config 0 interface 101 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 51
[  169.932405][ T5900] usb 2-1: config 0 interface 101 has no altsetting 0
[  169.944226][ T5900] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  169.954631][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.974600][ T5900] usb 2-1: Product: syz
[  169.984402][ T5900] usb 2-1: Manufacturer: syz
[  169.990173][ T5900] usb 2-1: SerialNumber: syz
[  169.998963][ T5900] usb 2-1: config 0 descriptor??
[  170.215070][ T5900] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  170.642573][ T5921] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx
[  170.686846][ T5921] usb 5-1: selecting invalid altsetting 0
[  170.711219][ T5921] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx
[  170.725634][ T5921] usb 5-1: selecting invalid altsetting 0
[  170.731255][ T2343] pvrusb2: Invalid write control endpoint
[  170.769112][ T5921] usb 5-1: USB disconnect, device number 10
[  170.780199][ T2343] usb 5-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2
[  170.856249][ T2343] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw
[  171.057127][   T30] audit: type=1326 audit(1767972565.002:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  171.231107][   T30] audit: type=1326 audit(1767972565.002:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  171.425464][   T30] audit: type=1326 audit(1767972565.022:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  171.537026][ T5900] gspca_zc3xx: reg_w_i err -71
[  171.589723][   T30] audit: type=1326 audit(1767972565.022:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  172.008354][ T5920] usb 3-1: USB disconnect, device number 14
[  172.066813][   T30] audit: type=1326 audit(1767972565.022:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  172.129321][ T7558] FAULT_INJECTION: forcing a failure.
[  172.129321][ T7558] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.143985][ T7558] CPU: 0 UID: 0 PID: 7558 Comm: syz.4.230 Not tainted syzkaller #0 PREEMPT(full) 
[  172.144013][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  172.144024][ T7558] Call Trace:
[  172.144031][ T7558]  <TASK>
[  172.144038][ T7558]  dump_stack_lvl+0xe8/0x150
[  172.144065][ T7558]  should_fail_ex+0x414/0x560
[  172.144095][ T7558]  _copy_from_iter+0x1cd/0x1630
[  172.144115][ T7558]  ? rep_movs_alternative+0x4a/0x90
[  172.144143][ T7558]  ? __pfx__copy_from_iter+0x10/0x10
[  172.144158][ T7558]  ? sock_alloc_send_pskb+0x86b/0x980
[  172.144185][ T7558]  ? __pfx__copy_from_iter+0x10/0x10
[  172.144204][ T7558]  ? page_copy_sane+0x16a/0x280
[  172.144223][ T7558]  copy_page_from_iter+0xdd/0x170
[  172.144244][ T7558]  skb_copy_datagram_from_iter+0x306/0x720
[  172.144276][ T7558]  tun_get_user+0x1683/0x3dc0
[  172.144311][ T7558]  ? aa_file_perm+0x44c/0x1530
[  172.144334][ T7558]  ? __pfx_tun_get_user+0x10/0x10
[  172.144356][ T7558]  ? __lock_acquire+0x6b6/0x2cf0
[  172.144375][ T7558]  ? kstrtoull+0x12f/0x1d0
[  172.144405][ T7558]  ? ref_tracker_alloc+0x318/0x460
[  172.144421][ T7558]  ? get_pid_task+0x20/0x1f0
[  172.144443][ T7558]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  172.144462][ T7558]  ? tun_get+0x1c/0x2f0
[  172.144481][ T7558]  ? tun_get+0x1c/0x2f0
[  172.144504][ T7558]  ? tun_get+0x1c/0x2f0
[  172.144523][ T7558]  ? tun_get+0x1c/0x2f0
[  172.144546][ T7558]  tun_chr_write_iter+0x113/0x200
[  172.144568][ T7558]  vfs_write+0x5c9/0xb30
[  172.144588][ T7558]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  172.144608][ T7558]  ? __pfx_vfs_write+0x10/0x10
[  172.144631][ T7558]  ? __fget_files+0x2a/0x420
[  172.144658][ T7558]  ksys_write+0x145/0x250
[  172.144675][ T7558]  ? __pfx_ksys_write+0x10/0x10
[  172.144704][ T7558]  do_syscall_64+0xec/0xf80
[  172.144721][ T7558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.144737][ T7558]  ? trace_irq_disable+0x37/0x100
[  172.144759][ T7558]  ? clear_bhb_loop+0x60/0xb0
[  172.144784][ T7558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.144801][ T7558] RIP: 0033:0x7f08b0b8e1ff
[  172.144816][ T7558] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  172.144830][ T7558] RSP: 002b:00007f08b1a01000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  172.144847][ T7558] RAX: ffffffffffffffda RBX: 00007f08b0de5fa0 RCX: 00007f08b0b8e1ff
[  172.144859][ T7558] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8
[  172.144870][ T7558] RBP: 00007f08b1a01090 R08: 0000000000000000 R09: 0000000000000000
[  172.144880][ T7558] R10: 000000000000fef3 R11: 0000000000000293 R12: 0000000000000002
[  172.144889][ T7558] R13: 00007f08b0de6038 R14: 00007f08b0de5fa0 R15: 00007f08b0f0fa28
[  172.144914][ T7558]  </TASK>
[  172.698274][ T5900] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  172.704614][ T5900] gspca_zc3xx 2-1:0.101: probe with driver gspca_zc3xx failed with error -71
[  172.757992][ T5900] usb 2-1: USB disconnect, device number 12
Stopping klogd: OK
[  174.620463][ T7587] loop4: detected capacity change from 0 to 7
Stopping acpid: [  174.635456][ T7587]  loop4: [POWERTEC] p1 p2 p3
[  174.682878][ T7587] loop4: p1 start 1600481121 is beyond EOD, truncated
[  174.729198][ T7587] loop4: p2 size 1952776192 extends beyond EOD, truncated
[  174.761078][ T7587] loop4: p3 start 16778495 is beyond EOD, truncated
[  175.605442][ T7610] process 'syz.2.240' launched './file1' with NULL argv: empty string added
[  175.715294][ T5834] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  175.752745][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'.
[  175.907136][ T5834] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  175.955309][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.259885][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
OK
[  176.410735][   T30] audit: type=1800 audit(1767972570.342:110): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.243" name="bus" dev="ramfs" ino=15238 res=0 errno=0
[  176.449530][ T5834] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  176.482055][ T5834] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
Stopping syslogd: [  176.624461][ T5834] usb 1-1: Manufacturer: syz
stopped /sbin/syslogd (pid 5180)
OK
[  176.770670][ T5834] usb 1-1: config 0 descriptor??
[  176.847922][ T5834] igorplugusb 1-1:0.0: incorrect number of endpoints
[  177.086542][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.095547][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.456537][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.498815][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.612847][ T7633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.241'.
umount: can't remount debugfs read-only
[  178.255429][ T5834] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  178.275924][   T30] audit: type=1326 audit(1767972572.222:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f617858f749 code=0x0
[  178.368946][ T7646] loop3: detected capacity change from 0 to 6
[  178.376572][ T7646]  loop3: [POWERTEC] p1
[  178.380945][ T7646] loop3: p1 size 10176 extends beyond EOD, truncated
[  178.415223][ T5834] usb 4-1: Using ep0 maxpacket: 32
[  178.442971][ T5834] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  178.459059][ T5834] usb 4-1: config 0 has no interface number 0
[  178.488295][ T5834] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  178.498259][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.506591][ T5834] usb 4-1: Product: syz
[  178.524176][ T5834] usb 4-1: Manufacturer: syz
[  178.540181][ T5834] usb 4-1: SerialNumber: syz
[  178.562651][ T5834] usb 4-1: config 0 descriptor??
[  178.592839][ T5834] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  178.623495][ T5834] usb 4-1: selecting invalid altsetting 1
[  178.642347][ T5834] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  178.678644][ T5834] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  178.714130][ T5834] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  178.736683][ T5834] usb 4-1: media controller created
[  178.804359][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.150445][ T6308] usb 1-1: USB disconnect, device number 12
[  179.216935][ T7648] netlink: 'syz.0.250': attribute type 39 has an invalid length.
[  179.705097][ T7654] loop9: detected capacity change from 0 to 7
[  179.713698][ T7654] Dev loop9: unable to read RDB block 7
[  179.722320][ T7654]  loop9: unable to read partition table
[  179.731404][ T7654] loop9: partition table beyond EOD, truncated
[  179.767281][ T7656] syzkaller0: entered promiscuous mode
[  179.772981][ T7656] syzkaller0: entered allmulticast mode
[  179.785575][ T7654] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  179.935834][ T5834] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  179.943522][ T5834] zl10353_read_register: readreg error (reg=127, ret==-110)
[  180.043368][ T7658] syzkaller0: entered promiscuous mode
[  180.062983][ T7658] syzkaller0: entered allmulticast mode
[  180.505342][ T5834] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  180.685351][ T5834] usb 1-1: Using ep0 maxpacket: 8
[  180.692276][ T5834] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  180.703152][ T5834] usb 1-1: config 179 has no interface number 0
[  180.729303][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[  180.748144][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  180.778929][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  180.891618][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  180.935253][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  181.064389][ T5834] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  181.150537][ T5834] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  181.242644][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.356561][ T7662] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  181.590059][ T7662] ptrace attach of "./syz-executor exec"[5852] was attempted by ""[7662]
[  181.631259][ T5834] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input9
[  181.685406][ T6308] usb 4-1: USB disconnect, device number 17
[  181.758865][ T5900] usb 1-1: USB disconnect, device number 13
[  181.758873][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  181.758988][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  181.944727][ T7683] tipc: Started in network mode
[  181.955493][ T7683] tipc: Node identity 7f000001, cluster identity 4711
[  181.980372][   T30] audit: type=1326 audit(1767972575.882:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  182.085717][ T7683] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  182.135260][   T30] audit: type=1326 audit(1767972575.882:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  182.174850][ T7685] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  182.196680][ T7685] tipc: Enabled bearer <udp:syz0>, priority 10
[  182.231058][  T933] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  182.240160][ T7688] netlink: 32 bytes leftover after parsing attributes in process `syz.3.263'.
[  182.271962][ T7689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.263'.
[  182.305410][   T30] audit: type=1326 audit(1767972575.882:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  182.328970][   T30] audit: type=1326 audit(1767972575.882:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  182.354509][   T30] audit: type=1326 audit(1767972575.882:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b0b8f749 code=0x7ffc0000
[  182.385535][   T30] audit: type=1326 audit(1767972575.882:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08b0b91667 code=0x7ffc0000
[  182.407948][   T30] audit: type=1326 audit(1767972575.882:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f08b0b915dc code=0x7ffc0000
[  182.472666][   T30] audit: type=1326 audit(1767972575.882:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f08b0b91514 code=0x7ffc0000
[  182.511585][  T933] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  182.538339][  T933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.569419][  T933] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  182.589918][ T5900] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  182.617965][   T30] audit: type=1326 audit(1767972575.882:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f08b0b91514 code=0x7ffc0000
[  182.629045][  T933] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  182.710496][  T933] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  182.727882][  T933] usb 2-1: Manufacturer: syz
[  182.733193][   T30] audit: type=1326 audit(1767972575.882:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.4.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f08b0b8e3aa code=0x7ffc0000
[  182.788218][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
[  182.843569][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[  182.855898][  T933] usb 2-1: config 0 descriptor??
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[  182.927536][  T933] igorplugusb 2-1:0.0: incorrect number of endpoints
[  183.005236][ T5900] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  183.035299][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Connection to 10.128.0.72 closed by remote host.
[  183.066526][ T5900] usb 1-1: config 0 descriptor??
[  183.178457][ T6308] usb 2-1: USB disconnect, device number 13
[  183.191176][ T5900] usb 1-1: can't set config #0, error -71
[  183.220536][ T5834] tipc: Node number set to 2130706433
[  183.237059][ T5900] usb 1-1: USB disconnect, device number 14
Sent SIGKILL to all processes
Requesting system poweroff
[  184.292435][ T6149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.304653][ T6149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.424329][ T6149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.440218][ T6149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.542294][ T6149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.557122][ T6149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.660020][ T6149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.685221][ T6149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.851319][ T6149] bridge_slave_1: left allmulticast mode
[  184.857128][ T6149] bridge_slave_1: left promiscuous mode
[  184.863545][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.878878][ T6149] bridge_slave_0: left allmulticast mode
[  184.884528][ T6149] bridge_slave_0: left promiscuous mode
[  184.890469][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.184029][ T6149] team0: Port device bond0 removed
[  185.186970][ T7694] smc: removing smcd device lo
[  185.195925][ T2343] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing.
[  185.196601][ T6149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.204715][ T2343] pvrusb2: Did you install the pvrusb2 firmware files in their proper location?
[  185.229272][ T2343] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-24xxx-01.fw
[  185.240002][ T2343] pvrusb2: Failure uploading firmware1
[  185.241193][ T6149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.245615][ T2343] pvrusb2: Device initialization was not successful.
[  185.245626][ T2343] pvrusb2: Giving up since device microcontroller firmware appears to be missing.
[  185.270902][ T5921] pvrusb2: Device being rendered inoperable
[  185.274162][ T6149] bond0 (unregistering): Released all slaves
[  185.280583][ T2343] pvrusb2: Invalid write control endpoint
[  185.292658][ T2343] usb 5-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2
[  185.305330][ T2343] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw
[  185.314229][ T2343] ------------[ cut here ]------------
[  185.319752][ T2343] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa40, CPU#0: pvrusb2-context/2343
[  185.332645][ T2343] Modules linked in:
[  185.337122][ T2343] CPU: 0 UID: 0 PID: 2343 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) 
[  185.347123][ T2343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  185.357437][ T2343] RIP: 0010:firmware_fallback_sysfs+0x746/0xa40
[  185.363694][ T2343] Code: ec fb e9 5d fc ff ff e8 08 07 ec fb c6 05 c9 4b 97 09 01 48 c7 c7 80 1d e9 8b e8 55 b7 52 fb e9 85 fc ff ff e8 eb 06 ec fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 80 1e e9 8b 4c 89 e2 e8 55 1f 57 fb e9
[  185.384791][ T2343] RSP: 0018:ffffc900052575f0 EFLAGS: 00010293
[  185.391819][ T2343] RAX: ffffffff85d4f0d5 RBX: dffffc0000000000 RCX: ffff88802a0b5b80
[  185.400244][ T2343] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000
[  185.408473][ T2343] RBP: 0000000000000001 R08: ffffffff8f822377 R09: 1ffffffff1f0446e
[  185.416661][ T2343] R10: dffffc0000000000 R11: fffffbfff1f0446f R12: ffffffff8c412b60
[  185.424639][ T2343] R13: 0000000000001770 R14: ffff888056f4a0b0 R15: 00000000fffffff5
[  185.432804][ T2343] FS:  0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000
[  185.441987][ T2343] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.448808][ T2343] CR2: 00007f89621f84c0 CR3: 000000000dd3a000 CR4: 00000000003526f0
[  185.457116][ T2343] Call Trace:
[  185.460405][ T2343]  <TASK>
[  185.463350][ T2343]  ? kmem_cache_free+0x197/0x620
[  185.468610][ T2343]  ? _request_firmware+0xe69/0x1680
[  185.473857][ T2343]  ? _request_firmware+0x5d6/0x1680
[  185.479330][ T2343]  _request_firmware+0xfa4/0x1680
[  185.485247][ T2343]  ? __pfx__request_firmware+0x10/0x10
[  185.490753][ T2343]  request_firmware+0x36/0x50
[  185.496324][ T2343]  pvr2_locate_firmware+0xb3/0x500
[  185.501452][ T2343]  pvr2_upload_firmware1+0x1b4/0x900
[  185.507024][ T2343]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  185.513033][ T2343]  ? __pfx_pvr2_upload_firmware1+0x10/0x10
[  185.519051][ T2343]  pvr2_hdw_initialize+0x3df/0x3ac0
[  185.524264][ T2343]  ? finish_task_switch+0x23d/0x940
[  185.529670][ T2343]  ? __mutex_trylock_common+0x153/0x260
[  185.535481][ T2343]  ? __pfx_pvr2_hdw_initialize+0x10/0x10
[  185.541151][ T2343]  ? rcu_is_watching+0x15/0xb0
[  185.545964][ T2343]  ? trace_contention_end+0x39/0x100
[  185.551260][ T2343]  ? pvr2_context_thread_func+0x263/0xaf0
[  185.557058][ T2343]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  185.562722][ T2343]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  185.568741][ T2343]  ? schedule+0x91/0x360
[  185.572989][ T2343]  ? schedule+0x16f/0x360
[  185.577405][ T2343]  pvr2_context_thread_func+0x487/0xaf0
[  185.582993][ T2343]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[  185.589688][ T2343]  ? __pfx_autoremove_wake_function+0x10/0x10
[  185.596528][ T2343]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  185.602414][ T2343]  ? __kthread_parkme+0x7b/0x200
[  185.607453][ T2343]  ? __kthread_parkme+0x1a1/0x200
[  185.612512][ T2343]  kthread+0x711/0x8a0
[  185.616633][ T2343]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[  185.622713][ T2343]  ? __pfx_kthread+0x10/0x10
[  185.627361][ T2343]  ? _raw_spin_unlock_irq+0x23/0x50
[  185.632636][ T2343]  ? __pfx_kthread+0x10/0x10
[  185.637269][ T2343]  ret_from_fork+0x510/0xa50
[  185.641873][ T2343]  ? __pfx_ret_from_fork+0x10/0x10
[  185.647023][ T2343]  ? __switch_to+0xc9e/0x1480
[  185.651709][ T2343]  ? __pfx_kthread+0x10/0x10
[  185.656339][ T2343]  ret_from_fork_asm+0x1a/0x30
[  185.661128][ T2343]  </TASK>
[  185.664151][ T2343] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  185.671427][ T2343] CPU: 0 UID: 0 PID: 2343 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) 
[  185.681137][ T2343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  185.691195][ T2343] Call Trace:
[  185.694472][ T2343]  <TASK>
[  185.697426][ T2343]  vpanic+0x1e0/0x670
[  185.701419][ T2343]  panic+0xb9/0xc0
[  185.705168][ T2343]  ? __pfx_panic+0x10/0x10
[  185.709600][ T2343]  ? ret_from_fork_asm+0x1a/0x30
[  185.714543][ T2343]  __warn+0x317/0x4b0
[  185.718532][ T2343]  ? firmware_fallback_sysfs+0x746/0xa40
[  185.724213][ T2343]  ? firmware_fallback_sysfs+0x746/0xa40
[  185.729864][ T2343]  __report_bug+0x288/0x500
[  185.734368][ T2343]  ? firmware_fallback_sysfs+0x746/0xa40
[  185.740010][ T2343]  ? __pfx___report_bug+0x10/0x10
[  185.745033][ T2343]  ? __up_read+0x25d/0x670
[  185.749458][ T2343]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  185.755274][ T2343]  ? firmware_fallback_sysfs+0x746/0xa40
[  185.760910][ T2343]  report_bug+0x16a/0x220
[  185.765252][ T2343]  ? firmware_fallback_sysfs+0x746/0xa40
[  185.770937][ T2343]  ? firmware_fallback_sysfs+0x748/0xa40
[  185.776587][ T2343]  handle_bug+0x98/0x200
[  185.780838][ T2343]  exc_invalid_op+0x1a/0x50
[  185.785360][ T2343]  asm_exc_invalid_op+0x1a/0x20
[  185.790221][ T2343] RIP: 0010:firmware_fallback_sysfs+0x746/0xa40
[  185.796509][ T2343] Code: ec fb e9 5d fc ff ff e8 08 07 ec fb c6 05 c9 4b 97 09 01 48 c7 c7 80 1d e9 8b e8 55 b7 52 fb e9 85 fc ff ff e8 eb 06 ec fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 80 1e e9 8b 4c 89 e2 e8 55 1f 57 fb e9
[  185.816164][ T2343] RSP: 0018:ffffc900052575f0 EFLAGS: 00010293
[  185.822256][ T2343] RAX: ffffffff85d4f0d5 RBX: dffffc0000000000 RCX: ffff88802a0b5b80
[  185.830229][ T2343] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000
[  185.838209][ T2343] RBP: 0000000000000001 R08: ffffffff8f822377 R09: 1ffffffff1f0446e
[  185.846194][ T2343] R10: dffffc0000000000 R11: fffffbfff1f0446f R12: ffffffff8c412b60
[  185.854171][ T2343] R13: 0000000000001770 R14: ffff888056f4a0b0 R15: 00000000fffffff5
[  185.862176][ T2343]  ? firmware_fallback_sysfs+0x745/0xa40
[  185.867840][ T2343]  ? kmem_cache_free+0x197/0x620
[  185.872815][ T2343]  ? _request_firmware+0xe69/0x1680
[  185.878045][ T2343]  ? _request_firmware+0x5d6/0x1680
[  185.883260][ T2343]  _request_firmware+0xfa4/0x1680
[  185.888306][ T2343]  ? __pfx__request_firmware+0x10/0x10
[  185.893801][ T2343]  request_firmware+0x36/0x50
[  185.898508][ T2343]  pvr2_locate_firmware+0xb3/0x500
[  185.903635][ T2343]  pvr2_upload_firmware1+0x1b4/0x900
[  185.908921][ T2343]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  185.914906][ T2343]  ? __pfx_pvr2_upload_firmware1+0x10/0x10
[  185.920723][ T2343]  pvr2_hdw_initialize+0x3df/0x3ac0
[  185.925931][ T2343]  ? finish_task_switch+0x23d/0x940
[  185.931145][ T2343]  ? __mutex_trylock_common+0x153/0x260
[  185.936702][ T2343]  ? __pfx_pvr2_hdw_initialize+0x10/0x10
[  185.942345][ T2343]  ? rcu_is_watching+0x15/0xb0
[  185.947110][ T2343]  ? trace_contention_end+0x39/0x100
[  185.952437][ T2343]  ? pvr2_context_thread_func+0x263/0xaf0
[  185.958188][ T2343]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  185.963840][ T2343]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  185.969828][ T2343]  ? schedule+0x91/0x360
[  185.974076][ T2343]  ? schedule+0x16f/0x360
[  185.978409][ T2343]  pvr2_context_thread_func+0x487/0xaf0
[  185.983972][ T2343]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[  185.990066][ T2343]  ? __pfx_autoremove_wake_function+0x10/0x10
[  185.996165][ T2343]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  186.002015][ T2343]  ? __kthread_parkme+0x7b/0x200
[  186.006954][ T2343]  ? __kthread_parkme+0x1a1/0x200
[  186.011984][ T2343]  kthread+0x711/0x8a0
[  186.016076][ T2343]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[  186.022209][ T2343]  ? __pfx_kthread+0x10/0x10
[  186.026837][ T2343]  ? _raw_spin_unlock_irq+0x23/0x50
[  186.032047][ T2343]  ? __pfx_kthread+0x10/0x10
[  186.036647][ T2343]  ret_from_fork+0x510/0xa50
[  186.041240][ T2343]  ? __pfx_ret_from_fork+0x10/0x10
[  186.046356][ T2343]  ? __switch_to+0xc9e/0x1480
[  186.051036][ T2343]  ? __pfx_kthread+0x10/0x10
[  186.055631][ T2343]  ret_from_fork_asm+0x1a/0x30
[  186.060415][ T2343]  </TASK>
[  186.064039][ T2343] Kernel Offset: disabled
[  186.068456][ T2343] Rebooting in 86400 seconds..