last executing test programs: 6.932228363s ago: executing program 0 (id=301): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80300, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xd, 0x0, 0x0, @ipv6=@loopback}]}]}, @typed={0x4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async, rerun: 64) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x707, 0x70bd2b, 0xfffffffe, {0xa, 0x0, 0x0, 0x0, r3}}, 0x1c}, 0x1, 0x0, 0x0, 0x20080080}, 0x0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) (async, rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r6 = accept4(r4, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x56f2be14c64fc14d}, 0x400c000) (async, rerun: 64) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) (async, rerun: 64) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x0, 0x7fff7ffc}]}) (rerun: 64) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000000)="8740468e16ee481c9437ab003a514d34", 0x10) (async, rerun: 64) close_range(r7, 0xffffffffffffffff, 0x2000000000000) (rerun: 64) 6.519253713s ago: executing program 0 (id=303): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80894) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x3}, 0x2000800, 0x1, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1c000000, 0x0, 0xb4b, 0x9, 0x10009, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x4801, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039040000000000000000350cb380", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) unshare(0x28000600) syz_clone(0xe8082000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 6.295497037s ago: executing program 3 (id=306): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001700)="c69fc75350f438b390e15c61c794234809a024000000000000e6596e4b", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x8810) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc5000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0xc0000000, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) r2 = socket(0x10, 0xa, 0x0) socket$packet(0x11, 0x2, 0x300) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7", 0x12, 0x800, &(0x7f0000000180)={0xc9, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10000000) bind$inet(r1, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 6.27624496s ago: executing program 4 (id=307): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "3f4051c4", "a44a889722b66244"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x91, 0xc, &(0x7f00000003c0)="b648489ede2a3a891565dacc795bd2036709d23170c475cd602af46621461810925f89ead9f8a6ec485d603be96fb3d76121328733d27a5becc6eac413bc526cb8604e7b0c4d3d0ec5bce8a4a8e9abb73c6b70338cb675776514883113dc1ece4f21d6178860b95f87c79cffa5fea4aeb1f80ab20b1b3313709022a4fbd3aea41ca47d717ba96bf85e88fd755eb12eecca"}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) recvmmsg(r2, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/65, 0x41}, {&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f00000007c0)=""/95, 0x5f}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/222, 0xde}, {&(0x7f0000000a40)=""/131, 0x83}], 0x7, &(0x7f0000000b80)=""/63, 0x3f}, 0x1}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000bc0)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/164, 0xa4}, {&(0x7f0000000d80)=""/155, 0x9b}, {&(0x7f0000000e40)=""/37, 0x25}, {&(0x7f0000000e80)=""/234, 0xea}], 0x5}, 0x5}, {{&(0x7f0000001000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001080)=""/28, 0x1c}, {&(0x7f0000000540)=""/6, 0x6}, {&(0x7f0000001100)=""/170, 0xaa}, {&(0x7f00000011c0)=""/52, 0x34}, {&(0x7f0000001200)=""/115, 0x73}, {&(0x7f0000001280)=""/55, 0x37}, {&(0x7f00000012c0)=""/150, 0x96}, {&(0x7f0000001380)=""/119, 0x77}, {&(0x7f0000001400)=""/158, 0x9e}, {&(0x7f00000014c0)=""/118, 0x76}], 0xa, &(0x7f0000001600)=""/254, 0xfe}, 0x100}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001700)=""/150, 0x96}, {&(0x7f00000017c0)=""/16, 0x10}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f0000001940)=""/222, 0xde}, {&(0x7f0000001a40)=""/28, 0x1c}, {&(0x7f0000001a80)=""/13, 0xd}, {&(0x7f0000001ac0)=""/131, 0x83}, {&(0x7f0000001b80)=""/103, 0x67}], 0x8, &(0x7f0000001c80)=""/214, 0xd6}, 0x5}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001d80)=""/94, 0x5e}, {&(0x7f0000001e00)=""/23, 0x17}], 0x2, &(0x7f0000002040)=""/135, 0x87}, 0x68}], 0x5, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x87b0cc373e1ddae9, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 5.556946039s ago: executing program 3 (id=308): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 5.421055587s ago: executing program 1 (id=309): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x1) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) creat(&(0x7f0000003480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19) 5.296171886s ago: executing program 1 (id=310): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r0, 0xc0086444, &(0x7f00000000c0)={r1}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x16, 0x0, 0x0, @private=0xa010102}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x16, 0x0, 0x0, @private=0xa010102}}}}}, 0x0) 5.249454697s ago: executing program 4 (id=311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0x7}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x97, 0x7ffffdbb}, {0x101, 0x0, 0x60, 0x6}]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x49240, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 5.108971829s ago: executing program 1 (id=313): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffff31c}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) (async) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) 4.832181566s ago: executing program 1 (id=314): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r3, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000002082057d004000010203010902600003010680070904000000010100000a2401a80f0a0002010209040100000102000009040101010102000009050109000406090007250104050100094002000001020000090402010101020000090582090100000000000000"], 0x0) 4.721594059s ago: executing program 3 (id=315): keyctl$clear(0x5, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=',$@\x00', 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000080)) close_range(r0, r0, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0x1, 0xf, 0xffffffff, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0xffff, 0x6}}}, 0x24}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000000000000000258c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) dup3(r5, r4, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r7 = syz_open_dev$usbfs(0x0, 0x204, 0x82) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) 4.720994728s ago: executing program 2 (id=316): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x28}}], 0x1, 0x854) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) socket$key(0xf, 0x3, 0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 4.428423358s ago: executing program 3 (id=317): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0x7}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x97, 0x7ffffdbb}, {0x101, 0x0, 0x60, 0x6}]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x49240, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 4.28346121s ago: executing program 0 (id=318): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x4048000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc5000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0xc0000000, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7", 0x12, 0x800, &(0x7f0000000180)={0xc9, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10000000) bind$inet(r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x44}}, {0x2, 0x4e1c, @empty}, 0x40, 0x0, 0x0, 0x0, 0xa009, 0x0, 0x8000000000200001, 0x1ff, 0x8}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmmsg(r1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 3.820403751s ago: executing program 4 (id=319): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x10080, 0x0) (rerun: 64) read$dsp(r3, &(0x7f0000000280)=""/197, 0xc5) (async, rerun: 64) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0800c300741300000800c4"], 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="fd030000", @ANYRES16=r4, @ANYBLOB="000225bd7000fddbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) (async, rerun: 32) r8 = socket(0x10, 0x2, 0x0) (rerun: 32) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) (async) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async, rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) (async, rerun: 64) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r10, 0x0, r10) (async, rerun: 64) r11 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES8=r9, @ANYRES32=0x0, @ANYRES16=r0], 0x23c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x10, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x8a01}, [@IFLA_IFNAME={0x14, 0x3, 'rose0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 3.478821799s ago: executing program 4 (id=320): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0xa, 0x1, 'A'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x9, 0x57, {0x57, 0x23, "9a0905f67298413388ea288fe1ac4fad6741cae267fd258e38c45339ec54b785308852b37912f03e3578278251816618ef01fb0093292ad09100fd7aae7304a99d7a967cca714199827f8008907f20c4e88055b19d"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x40, 0x1a, 0xfa, "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"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x81, 0x2, "d39b"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "198a13"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "ee8dcd"}, &(0x7f0000000400)={0x20, 0x84, 0x4, "0f6e6611"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "c594e7"}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) 3.123863037s ago: executing program 2 (id=321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0xc4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000300)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e24, 0x3, @remote, 0x5}], 0x58) 3.012152247s ago: executing program 2 (id=322): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ebd700e000000001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2.949014509s ago: executing program 3 (id=323): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x1, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) 2.770146996s ago: executing program 2 (id=324): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xffffbf41, 0x14000405, 0x101, 0x8, 0x8, "ffffff7f87e8d2b791f1bcce26d76d7fcb3679", 0x8, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x8, 0x30000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) unshare(0x22020600) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x4011) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) recvmsg(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getflags(r5, 0x40a) mlock(&(0x7f00001d3000/0x3000)=nil, 0x3000) 2.66946427s ago: executing program 1 (id=325): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r5, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x90}, 0x880) syz_genetlink_get_family_id$mptcp(0x0, r5) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x1, 0x5}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x6, 0x4, 0x5, 0x5, 0x5}, {0x1, 0xdddd1000, 0x9, 0x7, 0x5, 0x42, 0x2, 0xff, 0x8, 0x7, 0xe}, {0xffffffff, 0x3000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x9, 0x19, 0x9, 0xf7, 0x3}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x1000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0x3, 0x7, 0x1, 0x7, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x9}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100c00, [0x6800000000000000, 0x4, 0x6, 0x8]}) r6 = open(&(0x7f0000000300)='./file1\x00', 0x40, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r7, r6, 0x0, 0x1000000000002) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000226bd7000fbdbdf253a0000004c5a005b00e0187931dd8892f9f6c86f33ccf384b4d1408f101084960b495153e023a0adac7bab8f93831d438e5ec989686810e8fa489ea7eaba7f08cc38a5d2806a634a1a8f5f1666f2cef9df488248b191b1dfb037045d89b60c1902825bb943caf30000"], 0x70}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4014) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r10 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r11 = fcntl$dupfd(r10, 0x0, r10) write$binfmt_script(r11, 0x0, 0x0) write$binfmt_script(r11, &(0x7f0000001b00), 0xfffffd9d) preadv(r9, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200620134000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_udp_SIOCINQ(r2, 0x5760, 0x0) write(r0, 0x0, 0x0) 2.081888532s ago: executing program 0 (id=326): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007110180000000000cf050000000000009500000000000000579f4af7ae3640e7ec2131e2cbe9d684e1e42f26f5e3bd767cda3ae4a4616ef9186a6f1a9f57012c5e9f858dcf63fda603c9185a028ad74881d70b268477b3e9716fbf1975127ed29ebf909f39c5651821944b395e26995c8fb627d212db242288a09e689af2b896bc100b6e9d2f3411f504fbf73610d6007742fbfef93dbe251411c8f6b82ec1326d5d7f849dd040b378beb2d9e565c05a75896b000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) 1.810136517s ago: executing program 0 (id=327): keyctl$clear(0x5, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=',$@\x00', 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000080)) close_range(r0, r0, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x8, 0x80000000) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0x1, 0xf, 0xffffffff, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0xffff, 0x6}}}, 0x24}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000000000000000258c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) dup3(r5, r4, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r7 = syz_open_dev$usbfs(0x0, 0x204, 0x82) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) dup(0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) 1.553026236s ago: executing program 2 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000280)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = dup2(r1, r0) r4 = syz_open_pts(r3, 0x10800) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r2, @ANYRESHEX=r4], 0x1c}}, 0x0) 1.316915576s ago: executing program 2 (id=329): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8004, 0x0, 0x9, 0xda, 0x2, 0xfa11, 0x7}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x97, 0x7ffffdbb}, {0x101, 0x0, 0x60, 0x6}]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x49240, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) 1.008698531s ago: executing program 1 (id=330): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x87, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x840}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r1], 0x30}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f00000001c0)=@llc={0x1a, 0x30a, 0x59, 0x7, 0x8, 0x3, @random="a0c01c876f3a"}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000000400)="842e39551368c24fa1f403559ff91b7116c7cf2857c826a6326eacf95c9e8c9d9ad22818909213b64825d584467c020998e3b6def7c9d95ef14be1ca42cfbb18e2ce113dc4ab00a52f8f6400438bdb3717048ec60d9dcc5fc8ec1ca81f653e4475df686137b59d58b3a8c4ecb95e256f3990919fc37059ade578a7236200000000bdf930f1795e55ff8b860000", 0x8d}, {&(0x7f0000000280)="a8f0f2c9609a794d7debcab9fece80dda72b9ff77691dedd0d4c9c792cb70a7d8113f66e50b02b63c71894246c68c7a6f8f8bc20d32d76b8eb77b603b5a4bdac2c35120fca07edd7b5db98cecbd527d1744d288146cb53b417b972df3824de314bc7d53d45c5f7ff0b21dff10233df4b13a6e5cd9426c3cb6f9f2b59bd07545816cbafcb41602ce931eb8f1c7d2e22b2c9bd6dd1509ad1bb3194a1d63748ab56e0e78fbfb6572c9da73f", 0xaa}, {&(0x7f0000000940)="b0e0f884485cbbfd0ac80feb280256593f565a307afb8941764e90a54b6c6b0eb589b2c8b5bc26611cd3b5bd8e9e6ff2de095272f094ebdd435516ef626bcb538df3efedd42cafc441c0ce858f2debeb36f1e84146489b04a72c9896fb028b466e24d3302ad0d5df3c075fb05e8790fddd54aee8f2e3b4d5b0c0235bdfd2421edcf5fc7aef6d775bd42d51268faa4774b6f81177944956a4b207d37b1fb979142ac1a82c100d2dbf8f9d20ce37746d3c44ee779b66a931bc10295e60eb81ce1b350e309ea90f9347dbcafef089737d5de9a78dc682e41949aee2d61516aa3103512f4eb515ddb286ded388908f3fffc4d3e65c809578afbf8b4e78f0f6f5a9efa3efe0226d03a13c501d8be52980e1e949dac248d69dabf0049ec3857e2586ab48b88ca31831a98287567a0aacf59fc704a7cdd541800ba3bf046830c0cddea69bef63e3d4da1379eb757949c25a179bee1c592853800dd9d5d8a90b8ee9a1d75c2b6590317b3789c874145afc4f42932a5b9974f046584419234fe17b900cbf37336716ab4185a8d805601c7751e909ed054cc4a095a0e508cd8af0b22d44199cce89a38a4b598824d74fe1e652ecd5ecd569981fda6dc838dc1a0b99f0723bbc2295a23b5e20c29aee36aafd64ae8626b38f4395186043733f921685ade0e52590a08583a2b747bf67cd4dcc1960d6c0fe5c83c725a8b973b58864285d0ad5eba55aa9a917bf7a133f663162d62ececdd53ba7f8ab4867344f29adc51b8315c994ed682ea331d1b3cf0d62b1d7e28d00a1cf5753e4720aae71886699c873cdeab6708a4312d0a5757b35fcd297052652f2d04a7394906ba5881cb9cea17bc87ce6a1a1850e7d18a2e4c4d10de543e02eb75bdf8cbabcadd8591960c6685df81ddc234f3016a87418cfe1dd80eb83ebc989a658aa961ec9fdeef5c28743a477fcdcf221f14f59e1a6d753191d9e187a0b8510cfeb264f01b5bd6e4be372995bfac0059469f4b9a9cf978d78932aee508f6a0b8786ef34d083be4a167d3f828b7b222d7eb10c743470c46521c1cc2297dd360734ceda47694f92e2ec07452e8a97682a6c90f5e437579384bfd8969a4fc36341c153dad3cfa371a051b331f264dcfd73e4b78bf22432323fb22142796cbc565b704d48ede0b48ae5230de3db34bd4e56e535066a50dd370217a6998d46b346370602f2d25cf4ed6b2cf27c86a91632143d4e15d1e089316e453aaf8bc5a23e2f773f31fe82b6656a43f793908c99bb5b7310353d44045363c555652f619feab264cf3cba67798000a1ab5e921eda2c6d7b32be100a3e7737b81d9fde9293560545a1ff292fba4fe2e103be7675a67015414b23af1875c9176a9a2606c3b69334f5dbc139d3cd1f790809a0e92584f780b6c80c980cd6e3dac16767496f91c8e7cd1451f27c01fbb4184e05e6be6666d9917f28636b419f73c93ff31b1a5f01014a46febe1d14729f1eb04bd1567158067c1f739d6ebdda1c9db562b719176b4109fd17cf6664c449c56002289efd5cdcdf130590ac4781d7b13d6dba9c3319d21e0addc0dd06659c2a75b16e79ec0ef0e01dc16ce59b5a1fcd03204a547e51da0de9977c052fb2df3361bdc5545a90a75d1b7002b252c3c81c1ada21902d6813af58823febb68cb9fd8ec9321a181074f577a0e12fe2af7dd239b085e411aa77e00fc229b6925b31065998685a7934f78b541f17cb137f21f0c6469fa42c024fa1fc07d188718e29ddd3f71e23a0d9e3650c833651a2aefcfaf48c8bb2af2a4f2b4ce7d596fbcca662040bde464c84e9d81d6e3398545414d1b66680f1447636c4b7ce2a1829afea573cd84e15db65956b3f00a88db5a1eb33489e9c61c07ce08c6c5344202c07f09add38ee333c44eaf216714c402ac9e50a91829905d40490abb95a6fe03e2a6edff76bf851055d856314ee1517718b2475c10f0032dd2dcf44bbf09110573cacd2fef6842652f2369298dcbbae386f650176da2a81abb601f4a60851b63c37e7d5fff60ededf844d48b5c2d31c23b8a45f961c10e6614f1677e749fcd61c4ddc6f4fbf5a9b1725e8c5f5e1a3b2e801a06bb5e45e0b99a8ac37bc53a1ce307ec2188457d23860877660d7394cd5dbd4547f420258be0d523eb3a2c6eaafd1a350a75886ab66df1da682e95df1140e3284c302e39e719c51c98bd8469deee8373617902cdc266159b881e867e6a0e14019847e429c05a9105a702d78d375ac2ea9f4d331c420584132a89905601a0406c9570126a87ffc2312ff4408ed4d3bdee234107841006cad9610d31cc6b07fb2f4add31286585306a8cc61d20b298910a9d5c09266728ae3a9efb7585e4feb73d96235b60f9b9293fb33aa684220738135c5039e7827dd879514fa36b5993814e92443ba9241f7b1a35726759fda81c0e31a100596fcf451303439542f98313b1adf909914d9edf233d15d72e7d365c73502297a39b89c4106c8a8bf06f391f89bddf3a6e800a07336cee31625026295d2e349751c71cf8247b65383f5cc5f4e758a58dd6bbc1056fdb6451213846f3f39de5c6a3e17a694dd1eaaef11b16e0a27fd5d2fd10829b1fbb489b9ef582f0b1dec7c9d653cde8c7667f463c97624a9299e805fe4744ba76d7f906f9b5be6ab69cd63e06cf403e5fc2f6d78a142a250b0999b90698577a3724ddffe34ef5f6a0a3086212862bde872e7cd0a60c0ca7543f1735df326ef6a701643fb798b56db0eb69b23e94ce07d8611a4f6a86ce9588cc7489da44c2c6e324e6e6916f3c3a6f3e0903c0c979f7d14b7453b8d1066a635a4291138732ac495eb25ca6486d4dd0e19d614c066cb2384ccad18211f43cac8abdc53fce56e9d36acd1f976422b79ce9bd30285c785edbcec90b73348ba07f56900595c7dc0e6fa2e00505a121a3bbec549b27982e1f91cf397e8c5fc8510aaeec3ba76d8bf53cb99724cbe422f3023ab553068328f9f11d3eed58fcb2d848b60efd55c738e1d3f182ede139b19755081252bc5c391f22956dd8183a98e6b6e6cb102520946cd71d5760a678a79d96740c577b7cbde2f255ab4c69e163079ef88722226d27218599f5fa1800def74691623387e4b682213091ba3157e911f3310dd43a2e670f27dcb1a9243e44bcc8c9c3f899d11fac27f066b351a96a5b854c7f316945f9e484a768a51651721107bf5368f83c256d3b34d44841a50faae4043d0e5b053fac7572e34ef3895a17990cc49547bda6c03b130e28692ae57149d125566437d792845e3613091b5089d21066f965651cff11a33832fe88b4d351a4e5f5d8b667515cb79667ebc2bc4ba12d369fd731219c61b74587840503acb0e16513d3009a6c66df5ea13d7f160ff67d4d60c462bf6d6d3939c24ab72ea8fffa85f90e7d61a8fa86e69f106f2e8c749cbd7ef19f89d23eb1cc588bbd594a0d6c570977fe07cdae4af14a41ecd214e666b26d85e055fe8804e032917a5b61813e97508acc9f3d5a1a479b6fffc29fbed97f04a37a6cb6c21ea44bbd4e634fc65272da90e14b46d0f5e049f257900b0e8dbe81b785248102f1781ea12308c6402ef532ab6722dc6e9f648be0f702b0864db67ba3290d181d8fb24dd5c22ed2d40d969eda1a7489f521f9af97956554bf52e4e61fde3fa8ee08b1fef40f75c3d414b17a709801565dc3ffee8b6bd695c4ef1631fc45789f9e17892889efff68d65ee2766e2e1af5072ec6dcebb6bc90966e118d605b5f762b2fdac1d5b92f85568682d328a0711f004d3e3f636c5aea854495bd813c9cf36823f572fed8b0393b60c864dc7d94c69bc5e6883caeb05b74c2bf6d9c90f7f8eadd285a36f4b51adae5640824ced239e01ae2d17c4311b079a38153bcb3dbc1d2c7f25fc608d6798689f9943537d733d4298f5ab454ebf9c3d2b9fe474ed44dac8c424a3b655f3f0395bfd0fedeb6aa1b08eb801f702a5f67b2527d1751f9441d0059a5e3ca1905f18421e0aa0a2824e4cf38e68c1a7ef7aca7f6206fe9c69c8a5bd55b48f1f0eaa12e945e3c09b2b45046adc84076207d73378db9b696053c9b221c31838b16ba99f1fd71473be1ee0281568ca1d3f788759af43a3404ee560805573007d1280671bbb475c547ede3c46142d3dd364301a5bd7fe83845af82c248803cc8184fac9f7b3a7e63e88de9aafe9be145ab14615672009f960e19f67dd15d6a8d305b714ce9e6926e26fd6ed8497e55d94cf4bb981856287ae42c3f6329dd2d889aec11aaff9c8fd11e5cc648c95702bef4955b0633f8eb23cf1a15f590721b180daee9562aec31ec5f1c8288adc694370d8a3595b5f345c154cd4eaf0b3b8d0a6ae1ab8e0f12dd49b69f536e549bb995a669c7ef6098c56b06c0fa43891af634ef6a455a2f728711bb3097926aa5d7a2e90cff785fb04be3608ac5b5c8554efb493c70ac786a2920d97273dbffadfd38964bad08506d909a4443ff7dc4df3c4ed0b6db960c29de54a89ee37801b4eec57d35e76956a1c45404e0cbec765036e352fa27265737e080399bfd56b2370b989eae049ba5bd36b3dc882bf1341725c14503eac048f86ebdb0f3111544be491149c0f1df5e7756edcdad288ea30b541ef8d25b421aeb7ed8ebf33c8ca1693089e385715640bd2dbc6e11b4fa4e3c55db7f3dc0bbdea8d568c885a5ebdc18aec9d86923bc158878d2e457f76fb0f7fd88fc28552af9ce2804a38ebd5991dca7c01c1b5b5f0f52cf911578621b50b461c27c1fe051d904ce0d323a9513d2e3df4b10d92e18041dc9d5e5f8ed13e4b4d13cf21800953830bf2a9a0aa5cea15874cf15989422fef5718b1a2d8f7425a591c741ac3d212a31079ab27928cea6bb5b46cdd863739c3c99b81b45193f5d6cfdd0c667d705fda4edde16c931128a4e90ad13d07d6ea400ee869576271f62f3ca86af5948068916f46295ba9aad57c0c8f9b8dd7985b4832c63ac170b266c74b62a495032bd83d43c9ecba16189c186e88a61fa7808b20323b4786eb5850cde3158d98014ec90bf11164a57bcb3962f81f0ffd08442cc7e3ed382bef3873936a5df1549a60da2a7e6afd0432030ee16c14a8da7c06d7122390c20d2f1e726bf5542ac2dc65afb8f23ddedebb13b7263736657d726244ac4388d1758302585edfbecfa0a3f48f4460a18e268818aea78ebeeb737bdc6887df203f7d8b9a10a2e52efb0c116a335dc3f382a6d9be41fef4b3821198badc9ff9c1e5bacccb1d99ce04ab1032282e6234e44f8b2e773e5250fe6ddc5d026b649884e58ec7f0977d939e9e9847ce5c8dd21c809095226cd502c60c24c51986419a148b695386f8c841fa9b0846385bf82e7c5028f9f1cdb4b4a235020b9996f5838418f979de7ea087a4b748910cf40a2836d5065b577cc0866dff6de2bbaa9d772fdae6648f0dabbe0c704eaa0dd3b2b3bffd693d448358257ffa017190484f995b44cf8c1d34c3225ca1cd8e9eb58fffb24ff6d6f9340674938c82d840708194b91efa2e5ff77c83ee294289304cd103cf102cd341c3e24a7d4461dc644c16d18ee70e9d83282d7f1d8170c62a784a0729592b5324b7da1ee7efb0c1025f6056d54a09c78fc9881a1c758116b64b287fcde58e0b09fa5a8e80113df2b26a0aff9243de5d6cc38c65201fede5b0867656422590eab1051eca84f828da77beb4a684bf5988d87cc6f177e0d0f7d8bd97bb453c1df53df1ad7dadd7213f7ffb2494b031a1bceec89d92c008b2736a74e4d264f0ac0aa28267ab58e1be1e7c4d02f3928d37", 0x1000}, {&(0x7f0000001ac0)="b869f16293ed4b4c1ae4a08b83913a0b1a3b599948e606560579ee806e1ca40bcebac914fe2c4ace8c1986155be82936a24cc87b494e1abee8cb46393b4e26c6181b012c8dd1a24c6293f95e9ac667c2ef9c93ec3286b5f730bf3bfa006446d42e403cd1dfc2b68fcb81ce931912ab65944128f7fd779d3d9cdaca37884ac590ad2f49aacc1570", 0x87}, {&(0x7f0000000580)="35b3061c7fb500be8099e8e45b638eb1514268906368d9185d20b53281f7caac8db9ccf60b13514a50949bca4e37659796c0b12afb54eb4cc5900a920ed581a7282a9817c9d6707a7488798bd477b758a0ff08e912d6c0b228be09496ee13b5f19fa40189b009d66b5decf0d69b7f3b89ca11f16064af0dcfcfaf5298d7b09201e7422235ae4278a7e761628ad74bc0a38c18ce62e6f09de0a89024c15d262000000", 0xa2}, {&(0x7f0000001c40)="16795fe959bf71f0cc2097c23f5210317f8f3967cabe4603110d564225e71ea04c9593cae74d851b6f0f487b3fc3916ddfc329d41280fb0de197405967abefbca53844e79ffaad3a3d43700a052927c69e2037466e88f0e3f5869c2c2c3c4f2ac00d817ecb0541bbcb820d86f24f0bbc30e16513fc39efe8c22218312d665dc27d15a95446b2565dbffc197f98c859939b564f1e38936fccc15ac642993e8ff0c213d6e2d573d33c76520cf26f2c56f231f228e052f18deff59e30d6fdf7843e2f0b12e36d6540c366", 0xc9}, {&(0x7f0000001d40)="78e1c24cc299cbdc86a539bbee83173c55264f8e47dd6aa2c0ea9afe72cba14b2fb0a4ddcdaafbd6aa19015f470e006a0c482c6a8dff1cfb377ffaedf7a25f7b669334b36ad3672886eb807aa33f8b0ba711b700dd8a31bcce751628c22f8aa3451879abd8c4e71a83513fe7af5d5a959524641df071fd35ef4dda9455c89d965fe199702ac1dc50b65ac4c2386a8d3f961faf3d21874a6de8ba516c2c44a05a14f88288660f344896e7066e499c255ae8854869", 0xb4}, {&(0x7f0000001fc0)="280298ccdc1b48d71061eca158c2e15c7e8286ee283d82b3a94b1996ecacad01b5b37abb66ca38f703df7409c6780cd8669005bc7d098cc2c7440d620af84d72dde1117126d8d9f99364ae48c7a6c06e7abd86c261789832b37e256e7c19b9a4df2ed1f6cd56b8d14ea1edbc104072d9be8e0cb02b0805da76cdd7d8ce76e474d147248d89d9d2e2782165e82b737711f3bce9a7b8f7411041ab6f78701284cea84022ec1ee1591e5a1810c8aab97a2b51d2d5c0075250ab94c3648c9bcf32a90ea502c7550f5cd2e77bc4936efcfbfbff8104243d73d6099c1be1aab0e98aaa3610274a90e2d02ccc91a7502ecc5bee142c2fbe627a8287c5423298cf1df9da1c951c02767d9218651d7af2282c81cb5ba8fea6ae735ba23fbb51a9469007c8fc7930c12c6bad8cb8d272df340de4f4703da35db1ed6665243f2e9ec9d4fa8ba46bd1c188001612b4174fca92ec5e616e17d1f93349f10a27f9c270c5dd5014b52c14e3825e9218ca7cd8b80ad268d8dd729d9eb8281cfa6a8d31dd7e231655af316149267d15f749a224c909c19ec5c7c3d514832809a9df6fa6a31837855a7f58fdad0d69b4f689226dbc3b0ade60554e7adedaa1f8957480689f1088231cec3b6dd332d3f39cda4467425a46ca095428a6620e6410c6de2fa72e216d18f7327f7cf11cdfd3526f305094158351b2312290a2edd06ddcd3de48a82db9fd17bd8a435881920425ccdebbde719305145e6dd403b1d3d827ad898297e39929b6bba88392fb7610f2012154c1d4076d577e563df2fa96f9ed23d781af01bb5752dd2b8e1089f68dc1791dc1b705d90842228b723f0a252570fa3a5fb8218a35866406e3ad147c21016c139a1b33a73ace973c1b3c2104113c63e312c565b8d41e8b582e0368f0201fdade96f8568bfc7de5b4eedf52b340dc3b56042ec257337ca6d834fbed5c229c0e8eb86e4ad8a6ff18051b5e26a69b6774ae91e9d5f4afbe8e2645483492734637613d78df8361e2aaf9ec99dc38ae6969b21c36b83ebb9b5179b5303be14688e84418d3a1987f0bb31c2734e95ef014fddea8c1a79951f9f3540eaf8346eec8f5e4a7f361a8e44eea924a4aaad13d98e9316b57ada43d14b9603529130da5bfa2711df093de942938bfccc006d180ac0de2cb05ab5fb2a467a6a1ced5cac3c67fca28b07c5ca96c7e0ce9f08a0c7d5203acb590d5ffb324d73e8de9bd9c3d8b8e752c88e5a356902f62ac9221701e60bdbdbce1ac3a6f3647c7fd48a8cf91ca0ed6c347d249ac455b2fb5e0f0cf56455f087d60cc5116a0e8b77577df69c5f5f48b20971b20b9a19378d26744de674995d0ff7e4b9aec5b2c2ce99dbdb9be65e44c679bbc3ecd8d302bc4fd70518dddd4683ebc9cf5d910130c421316f230f70c8d7c26f75704825e268e3859448b26f78fe8300a27f3fe63b0ca349e9d547a366b9be3cb86faa6486e32e8507bdc62485d83b87b84c4d18a58667d1e9d6d18dd5173c59e78ad913c5fc2448d23d484ee4aa03e5dacd5fa56b4b1e99fd924f0dc5e77e188fc12e4c6f8488e9f42a697a4c773566a797467f6c1646a838f324a31be8b2724da131192ac413fbc95c3eb14100c10220e5a1139b2f5a80931622082127f90e91992ee8d85baf7dea2bcb4a29086c4032a9b8970e9403fd67e90d06220c0823ad593382c5bf6809c05d9c02f5343422250a61da87725e6e465e0d45d30eb32258669849747690ba1cff52249f712cc54915c59e55f2f2ded917167bc6b6095479872bfc502eb95c657cf6c4e11bc3e7e2bd3ab5a93227b957be199b5b0fd3208b0260b047e0ff0db3a05c828c75570d87b4489cd8db6667ac3c213c485d6633bdd676fca76f143b5cc07d7cafa872c045914ff0bf290fd25d4abbdc8061d42d7dcb789e3cfe99a4790ed21cf851f1f7bdaf60538d4a7ccd58d0a9b7b4bbbd4fe4ec75ef9410c0e3cc0281b7b9c1639cb61eecd72c7d6554c6154665d3201a0efb63893d10672fb7a89de70034d172aef9cbdf9952e548fc1a2683b7fcb410220ad9619965adaca4b54d1937c18b19582edf96b76ba44b41cda9068355bdc28e678e1d57f5509475703c69d921a12986d94bdb14c949012da339904f90c3ee41501d6b7889b3f20fc44d6d0703acc2de65d395b763a79cbfe8b4cc3f76fa9d75e37cd67232cfb675afdc5766ab42e49ccf50b5237ee1ccdaa9aa0e915906312aea60875b5928a27b807a1967b0241735815ed7a7b0c890835e6c4146447207f8308db7326992be942b1fba34cb0362869cadb1b39ae0488389b0a238d6a69eba575813e746abcf747b1f053f9ff033659c31f52b65fbe2aacaad8056cee61b4b179f32b2d350b647821e643b0fe715e4cc47ee04782ef12d59e79bbcf7b2fa027028083f1ddbdf3d268390d03f221ab7b94148ddbfac55d597e9e0252083fd56f95ff8b18b8f90149e0c5a578426cfe3740891b8874fe1379ba2348af11aafbb1ff834a36068c6eb496e83c957fd1420eb18a47a0c9da169f8c1439f130bd06027a9666b76dba16d0d74b7b173bb2cb28055475de4913dfcc3ad122a756e753cf3679a39aa0f9be9ca0bde9e0275cb7a30affedd4e5bf78b9296f5d02dc98890bcbd4b27d67a1505f0452132521859fab57b336064815c065234ab05349e23fd88fd5df9a499ee0c23d6433ebe2da4266e9ff4ecc2bd136bb09c4b4d9cf623f14c032eac8a8a374f7b381a3fff41a660dc578fe1dbd33313824deae49ce40483b044e62b0311d36a2c2c04940ef9aaa7a1d07b85798aa9281dc03b459bec720fa43f30ecee709011d82991a9f68420a375e627253ee0d45639e4723d879e25bb56fd35a21fa70789c572b2796c73b9a986ff918798b964d111dd26707d781f2f0a5cb21a17b93266a70209151a2c63ff4fce60c20fc21d7f0614081d7f36498430adbd4cbe8906be293d7643dbaee55e88de7c5382ab2d3f136a5b6f61f0c72b87ac288881406bcbc90fadf98ce097fe645274aedf732a0dbabc84982cef9e4d678bed66301af6fbe2a9ab5658193af34e4e20cceb616497a632679c34ef489e86f5eb4e15653893e5ca040b71a42bb54013baef652b1d85bbcc7e6ea20749e6ee9389e9848a675e234c72a5e80f6aa12161f8710b5ba55d2ace64db3aadb3f20fb5c7c231490f1447230fcb45df520e31a96aa6d8d12b6acf6870609001df4842b898fa75f52856749e1f82149d82f2033501bdd110c45171613faa2c667629c18f3eaf6367e68b64a2bd65a2983fd860432a61c66d8eda409737299907835d4f488fec41afd6bb8b607b8c343f29bd8cc256349c9fb092506dc8775e7b5a0546bd81eccc499676ad9723b36c8611b2343c16351632aa549d0c9eb1055d40cfa7cacdeb7a80d03782727df85349921e92bed9d2076e07ca9904d420b4cd462e5ad887cadc774b2e9384d06a11f069893e85c339aa1cf0cb3adbaa31c50a34e8629b4b91698a210ddadcfed086fbf1ff521203fe7ae090c992de41b7341bfcf39e8f6b9d1af957d9236dfd1308eec41291f4a29a7f54a4bfb082609cc169c09e115045e52100209692e9987fb24662bbafc2aa74dda908baa45f72bc6619213346e96014dfb48af08d75f54e93c70e280a4d14b83a0c9ff45b9ff849422497e417a12018d2568f66f3e2312dbdc9bb0943766dbedd260600900d9df32a69ea70bac27475db9419861502d734fb1824e104d8451a96212aa843c417a12b8ba52c0ee6563dee589951569611a8dd694c808e189ccdad97ffe65b8a9fed3e9cddd2cc500b985b0e2c31081f48afcfaa1bdf0cd73c0a7609b66e88fee4326ae91bf125670e547a05d8b9cad8c527126cf8a94ad73a2b048387ebca6f752bb01549697b4f88340961dc83634e2499c07f1f3b31cf5c470e7f810e0b9b0a3202417d5b188d42b7ffb7e89a89c49de240fd1f10b1dc4fbb104e95dc5311583a76fc2d515f29bc2eff45073bf716f56abbd0ba52a53f6a6b707501a5bee2513fec47c90dddd21f55f14920d7175b6b3e18a432c99d724808e9fdc15ecf7442d13f8d01fdb1dc70d3a3f58c7a9ebf8fa290bd6bedb5cc705596aff59af754acf39b6141f6603387a8728cbc8f4af139ca396b54156f29481cab6d22e9e89dcfbab060c69bc90df4ee7d84438b46c716c41c585a5a95128498281ba07c9ed096a72b29af629c8eb408440c705405bca240c88c9b503d4b9c1487245a75c65989da84532ca07408b2b4abe4cb0a6e3857c8755233ec2855118fa2113c7588476ee967169d7a13b98a28ce59ae2482dc051c326bdabbd0dbb6ecc4f083236623f652fc85e581ac0d6da945414c70b951e1df3678eb8f735328271f900e9a0a48ce3986b8c458d200dc7564d84e3503bc055a1eb06a6b02806c9eaaa5f8d16987e83ca7e9424429e36779191a84543857e3f517a248a1c05c514e8cbcb020ca116bf5cbb1e0a2d725d1400a11907310fc9340ca99894c4384fbb1b51281082f434a7beed14f7bb69f421a733ad426cc29bb8d847b6a0a1226bcd2047384e388e4ba312e06c9051d1998603c4191c57f760581bf500aa44ad1995a296ea4c4281d5ddddc6da89a3683897a7d2075b10be8026733d0e3aab900d6604cabcb1684fe1586654324f03c23ed7c9dce523484d0f73e8382f5aa415fc4003274b83713771e6ff54e5d0012df3030e2adba4e0c3b5b08cfe52f2058e628623ccd2d16d02e7da1e47fe266cefb972198ec1371d82ee29ea895f406182e57daf4e5e659c00dee07ab8c0b72e855386c46933082a5f77a2939b709f410799e87b7bee6e77580926af144f397db7c8b408383e8a747bf8c27d6860485e2318151c51bc75f55622c8f9893a7671e52dafcfad5e998538a715320219aecedfea82c083489939b1f0aeb0a86792be6830a60c780ee239318974aee99f48ec19d6f2f1031dc991a2c7990e2f1567ae7c28a1be6d5edffc551d79739307317c37e9024e7900a6e4edba2b2d80a7cacb8bdef43e4802711ddabb231debfadca12c0cc05884e4ae1052b78225832e582290558080ca2d8bde3c5c7d6ec909e9a4baef3b7654d1370a78606df6bfc95a3391b9ac446f7d79b4f37f6e304186c0abbe08b3942d561abb9471849b5460017cfa2571634931a6925c52a10737647dc5e9f31fd5cc9b6a6b69c4a66af2f38b5f18e12d3c9043f9049676fd8d3dcd466eaf3a39ad0921de2f015f902d09aded696bea6e62a1340cb0b6acc4b3ff2feb9e77ae17592f3b743204bc7194c6275c4c05577c1469c98c1fb8f14128d4338398837d1871d77b1a844ff1e630cdf3ccba4a2ed6940a0a4ed85bd6d443a7c4d99ffd3843f2e67ee0d330fddc66888ac29b70599035fbbc6c697fa59273e42048ed3658ff3b77973b00697dce038a7c4cad3ab30f8572a13ca671aad377262d73053b26fc166b176f0db41939434852ad51dd52960d7eb0e1f68b9fd49b04f974ea40f8be760121e6c8964be5c262908983ea95d29079509f67cb0759bdcaae0516783a2898aecca3de044352f6ec0865abb8ed024ab0717b2d201a51a5bde5f919c29e04fa0f61b0fceb7194458c633a36272253c86f403f611d2a491a8c4a0f704ee999bdc006d10d8f96277d73b75e70f1fe73818d3765d3a9a7500d04666963e5edd3f702d840e528dea056770db03b61388650af62ef967c116e4e901651efd3604a27508000a4fb23cf5d7e1d35bfcdac08f0517f03197b4630de803659a285f31a", 0x1000}, {&(0x7f0000002fc0)="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", 0x1000}], 0x9}, 0x4000040) syz_usb_control_io$uac2(r0, &(0x7f0000001a80)={0x14, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001f80)={0x2c, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="fc840080783549000000c65f4c7c5ee8957a023f4037a810599061e97f8e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.007723429s ago: executing program 0 (id=331): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f8666bf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x40, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x4, 0x9, 0x2, 0x4, 0xffffffff7fffffff, 0x1003, 0x3, 0x9b9, 0xfff, 0xf, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x1feb97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000180)={0x4}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000800)={{0xffffffffffffffff, 0x0, 0x400081, 0x0, 0x1, 0x0, 0x0}, 0x1, &(0x7f0000000780)=[{0x1, 0x1, &(0x7f0000000380)='/\x00', 0x0, 0x0, 0xa}]}) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r3, 0x8ae, 0x6931, 0x17, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xbc}}, 0x0) 839.460892ms ago: executing program 3 (id=332): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x1, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) 290.34437ms ago: executing program 4 (id=333): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1, 0x10, 0x0, 0x2, 0x5}, &(0x7f0000000040)=0x14) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9, [{0x3, 0xa, "a70000000000000081030c00000000000000aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27cf3e34066d42ca0a5c15b37adac1508edbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272471211e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000240)="beb972231d11eba2b713d6ded313eae1e25982acff6b06d9dd6578bd50ada6fc78e4f274eb360a932598f475e027e6318467f14bc277fddd271777d342e7e0110285da40d5e5ade7c0a3c886fa4d90820e019f3b89302273360d7cc10cabaf9801a98a39c65e51", 0x67, 0xfffffffffffffff8) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000780)="7a96287131e7fefa6bc3a2c2e92aed72472cc7c63289be5d8f69b716c01090ed5ed5b9df4cd623b8a190f1aec17b8a9e545bc43eed8994a0c6713374744980811bf997a274203977f8716a88d74f4c741c4cfaf3bedc957381af143f999ef424b744156f3dbd032397c19c76849381133bedb736388a2e041d08297a3b1cffc7a7870cf8ce79497f261545a94e9784ed0649cf1c83247410afb62374470bd1f22ae53baf5af13e249c35f69a29b4e0e5b99b15a7d9a07d4b245b886016f8ef2bdf47a6f00c67e8c6bbf7c64ca1", 0xcd, 0xfffffffffffffffc) r4 = add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)="a7b2ed17d1348f21806843a781397a3b00ed9a0532924a6d1b087915e8b5f36b22e8fbfa2a9682c262aa263fc0e4b29b5eb18057d2df6afce61cd3", 0x3b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000940)={r2, r3, r4}, &(0x7f0000000980)=""/162, 0xa2, 0x0) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) 0s ago: executing program 4 (id=334): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000001010200000000141a0000020000002400018014000180080003000000000000000200640101000c00028005000100000000005d3f23a7199bbe425f67a802e6bb1a52fa5e44d53901bf905fcfa58c42c58c31cce7118cbc1e3dd676d2263c4d22843fb6dc789887c70eee697fdfba6a3cb12762e762e0448327b9ef0e4e58e2f7527c970d05930b3f10614c4bb32d84f75493b133d6064386a50b48d1c439b0bde4592b"], 0x38}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) io_uring_enter(0xffffffffffffffff, 0x628c, 0x777d, 0x2, &(0x7f0000000400)={[0x9e]}, 0x8) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x185, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000100)) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="1e5600000000000044459d51404c7a26e265c64cdb3b7f5e301fe7a0b50a30f1f54b"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 42.394693][ T5488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.410443][ T5488] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. syzkaller login: [ 65.548000][ T5806] cgroup: Unknown subsys name 'net' [ 65.679880][ T5806] cgroup: Unknown subsys name 'cpuset' [ 65.688595][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.001990][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.556373][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.563953][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.575754][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.583802][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.591994][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.601392][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.602640][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.608918][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.618775][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.625757][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.631584][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.644861][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.645193][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.653185][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.661446][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.667458][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.675526][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.687289][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.689684][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.695863][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.710764][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.718480][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.756721][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.765659][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.773336][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.219377][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 71.403700][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.410475][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.426869][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 71.479390][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 71.529762][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.537615][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.544797][ T5835] bridge_slave_0: entered allmulticast mode [ 71.554086][ T5835] bridge_slave_0: entered promiscuous mode [ 71.592061][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.599385][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.606585][ T5835] bridge_slave_1: entered allmulticast mode [ 71.613623][ T5835] bridge_slave_1: entered promiscuous mode [ 71.621891][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 71.669328][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 71.733535][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.765932][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.773914][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.781407][ T5839] bridge_slave_0: entered allmulticast mode [ 71.788420][ T5839] bridge_slave_0: entered promiscuous mode [ 71.797997][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.828138][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.835273][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.843101][ T5839] bridge_slave_1: entered allmulticast mode [ 71.850379][ T5839] bridge_slave_1: entered promiscuous mode [ 71.921234][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.928474][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.935640][ T5838] bridge_slave_0: entered allmulticast mode [ 71.942804][ T5838] bridge_slave_0: entered promiscuous mode [ 71.952138][ T5835] team0: Port device team_slave_0 added [ 71.962350][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.997385][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.004542][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.012137][ T5838] bridge_slave_1: entered allmulticast mode [ 72.019016][ T5838] bridge_slave_1: entered promiscuous mode [ 72.027136][ T5835] team0: Port device team_slave_1 added [ 72.035102][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.101361][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.109279][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.116637][ T5836] bridge_slave_0: entered allmulticast mode [ 72.124263][ T5836] bridge_slave_0: entered promiscuous mode [ 72.131540][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.139065][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.146394][ T5837] bridge_slave_0: entered allmulticast mode [ 72.153667][ T5837] bridge_slave_0: entered promiscuous mode [ 72.182214][ T5839] team0: Port device team_slave_0 added [ 72.188114][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.195379][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.203189][ T5836] bridge_slave_1: entered allmulticast mode [ 72.210421][ T5836] bridge_slave_1: entered promiscuous mode [ 72.217891][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.225014][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.233426][ T5837] bridge_slave_1: entered allmulticast mode [ 72.240323][ T5837] bridge_slave_1: entered promiscuous mode [ 72.261995][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.272714][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.281386][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.307854][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.321770][ T5839] team0: Port device team_slave_1 added [ 72.375049][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.384815][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.392030][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.418069][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.435517][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.442712][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.468891][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.491096][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.522891][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.530015][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.556386][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.569359][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.580605][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.601726][ T5838] team0: Port device team_slave_0 added [ 72.616760][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.648696][ T5838] team0: Port device team_slave_1 added [ 72.659351][ T5835] hsr_slave_0: entered promiscuous mode [ 72.665703][ T5835] hsr_slave_1: entered promiscuous mode [ 72.739569][ T5837] team0: Port device team_slave_0 added [ 72.747009][ T5836] team0: Port device team_slave_0 added [ 72.757452][ T5830] Bluetooth: hci1: command tx timeout [ 72.757457][ T5144] Bluetooth: hci3: command tx timeout [ 72.757673][ T5144] Bluetooth: hci4: command tx timeout [ 72.763140][ T5830] Bluetooth: hci0: command tx timeout [ 72.783750][ T5836] team0: Port device team_slave_1 added [ 72.799639][ T5839] hsr_slave_0: entered promiscuous mode [ 72.806216][ T5839] hsr_slave_1: entered promiscuous mode [ 72.813175][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 72.819205][ T5839] Cannot create hsr debugfs directory [ 72.826829][ T5837] team0: Port device team_slave_1 added [ 72.837250][ T5830] Bluetooth: hci2: command tx timeout [ 72.847753][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.854891][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.881648][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.923917][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.931204][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.957208][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.983409][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.990625][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.016712][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.048815][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.055801][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.082409][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.094607][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.102183][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.128242][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.176308][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.183755][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.210252][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.302632][ T5836] hsr_slave_0: entered promiscuous mode [ 73.309710][ T5836] hsr_slave_1: entered promiscuous mode [ 73.315728][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 73.321919][ T5836] Cannot create hsr debugfs directory [ 73.352390][ T5837] hsr_slave_0: entered promiscuous mode [ 73.358722][ T5837] hsr_slave_1: entered promiscuous mode [ 73.364971][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 73.370856][ T5837] Cannot create hsr debugfs directory [ 73.408783][ T5838] hsr_slave_0: entered promiscuous mode [ 73.415226][ T5838] hsr_slave_1: entered promiscuous mode [ 73.421593][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 73.427383][ T5838] Cannot create hsr debugfs directory [ 73.780302][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.805014][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.822440][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.832656][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.874858][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.894625][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.907415][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.930514][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.994981][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.006291][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.016844][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.028770][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.168682][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.181926][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.199948][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.213278][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.234323][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.299772][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.321901][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.332783][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.343997][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.355104][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.372884][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.380172][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.402148][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.409326][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.426896][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.480843][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.504335][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.511470][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.531432][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.546201][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.553352][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.629248][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.692179][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.699386][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.709516][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.716709][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.738800][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.755731][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.790726][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.825057][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.832227][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.837202][ T5830] Bluetooth: hci0: command tx timeout [ 74.842397][ T5819] Bluetooth: hci4: command tx timeout [ 74.844912][ T5830] Bluetooth: hci1: command tx timeout [ 74.851628][ T5144] Bluetooth: hci3: command tx timeout [ 74.881172][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.888313][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.917941][ T5144] Bluetooth: hci2: command tx timeout [ 74.922107][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.942301][ T5835] veth0_vlan: entered promiscuous mode [ 74.977804][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.992278][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.008827][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.025659][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.032856][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.042655][ T5835] veth1_vlan: entered promiscuous mode [ 75.061607][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.068785][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.139076][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.155945][ T5835] veth0_macvtap: entered promiscuous mode [ 75.181370][ T5835] veth1_macvtap: entered promiscuous mode [ 75.191728][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.224178][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.249547][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.268326][ T5839] veth0_vlan: entered promiscuous mode [ 75.278158][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.311312][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.323271][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.342003][ T5839] veth1_vlan: entered promiscuous mode [ 75.351701][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.387922][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.406310][ T5837] veth0_vlan: entered promiscuous mode [ 75.416324][ T5836] veth0_vlan: entered promiscuous mode [ 75.435118][ T5837] veth1_vlan: entered promiscuous mode [ 75.465945][ T5839] veth0_macvtap: entered promiscuous mode [ 75.513489][ T5836] veth1_vlan: entered promiscuous mode [ 75.529491][ T5839] veth1_macvtap: entered promiscuous mode [ 75.560995][ T352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.574005][ T352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.602256][ T5838] veth0_vlan: entered promiscuous mode [ 75.641539][ T5837] veth0_macvtap: entered promiscuous mode [ 75.641775][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.660320][ T5837] veth1_macvtap: entered promiscuous mode [ 75.668354][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.679608][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.691514][ T5838] veth1_vlan: entered promiscuous mode [ 75.731042][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.750491][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.753438][ T5836] veth0_macvtap: entered promiscuous mode [ 75.784242][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.810419][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.825507][ T3567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.840263][ T5836] veth1_macvtap: entered promiscuous mode [ 75.883961][ T3567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.894910][ T3567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.911396][ T3567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.924830][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.935023][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.947467][ T5838] veth0_macvtap: entered promiscuous mode [ 75.964472][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.974216][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.995675][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.006024][ T5838] veth1_macvtap: entered promiscuous mode [ 76.054739][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.070508][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.096198][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.107938][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.127173][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.135116][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.149284][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.158871][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.191127][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.216654][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.233075][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.265674][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.301735][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.314170][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.333748][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.345644][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.356568][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.364480][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.374003][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.451055][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.481089][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.589005][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.619426][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.682844][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.892297][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.916870][ T5144] Bluetooth: hci1: command tx timeout [ 76.932758][ T5819] Bluetooth: hci0: command tx timeout [ 76.939174][ T5819] Bluetooth: hci3: command tx timeout [ 76.939188][ T5822] Bluetooth: hci4: command tx timeout [ 76.971886][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.980443][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.997109][ T5819] Bluetooth: hci2: command tx timeout [ 77.807091][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.858706][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.980025][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.993932][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.012325][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 78.025074][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 78.027380][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 78.033579][ T10] usb 3-1: Manufacturer: syz [ 78.051603][ T10] usb 3-1: config 0 descriptor?? [ 78.056374][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.077767][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 78.095318][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.126857][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.147165][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.203240][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 78.277665][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 78.287782][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.303437][ T24] usb 1-1: config 0 descriptor?? [ 78.480893][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 78.509712][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 78.564742][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 78.575039][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 78.586082][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 78.599926][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 78.647089][ T10] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 78.693872][ T10] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 79.004415][ T5819] Bluetooth: hci3: command tx timeout [ 79.021794][ T5144] Bluetooth: hci1: command tx timeout [ 79.021868][ T5830] Bluetooth: hci4: command tx timeout [ 79.027355][ T5144] Bluetooth: hci0: command tx timeout [ 79.086656][ T5830] Bluetooth: hci2: command tx timeout [ 79.149924][ T10] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 79.159025][ T10] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 79.170229][ T10] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -5 [ 79.196705][ T796] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.346674][ T796] usb 2-1: device descriptor read/64, error -71 [ 79.356790][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.410961][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.513837][ T5831] usb 3-1: USB disconnect, device number 2 [ 79.536286][ T5970] fido_id[5970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1E7D:2CF6.0001/report_descriptor': No such file or directory [ 79.621331][ T796] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.658164][ T5975] xt_hashlimit: size too large, truncated to 1048576 [ 79.770112][ T796] usb 2-1: device descriptor read/64, error -71 [ 79.881010][ T796] usb usb2-port1: attempt power cycle [ 79.890664][ T5983] fuse: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 80.264137][ T5992] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 80.356375][ T796] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.473629][ T796] usb 2-1: device descriptor read/8, error -71 [ 80.527142][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.710172][ T5937] usb 1-1: USB disconnect, device number 2 [ 80.757240][ T796] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.782052][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 80.791674][ T796] usb 2-1: device descriptor read/8, error -71 [ 80.809616][ T9] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 80.820155][ T9] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 80.994431][ T796] usb usb2-port1: unable to enumerate USB device [ 81.014784][ T5994] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20'. [ 81.016577][ T9] usb 5-1: config 63 has no interface number 0 [ 81.045603][ T9] usb 5-1: config 63 interface 66 has no altsetting 0 [ 81.101491][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 81.130825][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.146134][ T9] usb 5-1: Product: syz [ 81.150718][ T9] usb 5-1: Manufacturer: syz [ 81.156746][ T9] usb 5-1: SerialNumber: syz [ 81.248956][ T6000] process 'syz.0.22' launched '/dev/fd/5' with NULL argv: empty string added [ 81.363272][ T6002] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.385366][ T9] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 81.395477][ T5937] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.406263][ T9] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 81.423079][ T9] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 81.435807][ T9] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 81.446771][ T9] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 81.457508][ T9] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 81.468821][ T9] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 81.484265][ T9] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 81.505168][ T9] usb 5-1: USB disconnect, device number 2 [ 81.519948][ T6007] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.560461][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 81.570423][ T5937] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.596803][ T5937] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.608979][ T5937] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 81.619029][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.647693][ T29] cfg80211: failed to load regulatory.db [ 81.916622][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 81.985764][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.996586][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.071498][ T5937] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 82.097213][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.107241][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 82.128967][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 82.145843][ T9] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 82.170287][ T9] usb 5-1: string descriptor 0 read error: -22 [ 82.186707][ T9] usb 5-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=3d.a2 [ 82.221766][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.315090][ T5831] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 82.418509][ T6033] tipc: Started in network mode [ 82.486678][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 82.534292][ T5831] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 82.545552][ T6033] tipc: Node identity ac14140f, cluster identity 4711 [ 82.646640][ T5831] usb 2-1: config 127 has no interface number 1 [ 82.688672][ T6033] tipc: Enabling of bearer rejected, failed to enable media [ 82.698871][ T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.716879][ T5831] usb 2-1: config 127 interface 0 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 82.750921][ T5831] usb 2-1: config 127 interface 171 has no altsetting 0 [ 82.776574][ T5831] usb 2-1: config 127 interface 0 has no altsetting 0 [ 82.812207][ T5831] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 82.852698][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.887768][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 82.897430][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.901913][ T6064] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 82.910583][ T5831] usb 2-1: Product: syz [ 82.938846][ T29] usb 1-1: config 0 has no interfaces? [ 82.971167][ T5880] usb 3-1: USB disconnect, device number 3 [ 82.986514][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.016595][ T29] usb 1-1: config 0 has no interfaces? [ 83.022578][ T5831] usb 2-1: Manufacturer: syz [ 83.037576][ T5831] usb 2-1: SerialNumber: syz [ 83.060582][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.072231][ T29] usb 1-1: config 0 has no interfaces? [ 83.116726][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.132075][ T29] usb 1-1: config 0 has no interfaces? [ 83.140256][ T29] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 83.149802][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.170922][ T29] usb 1-1: config 0 descriptor?? [ 83.246449][ T6071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.331832][ T5831] xr_serial 2-1:127.171: xr_serial converter detected [ 83.350569][ T5831] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 83.366741][ T5831] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 83.435078][ T5831] usb 2-1: USB disconnect, device number 6 [ 83.552171][ T9] usb 5-1: USB disconnect, device number 3 [ 83.653460][ T5831] xr_serial 2-1:127.171: device disconnected [ 84.081568][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.259516][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 84.333945][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 84.350415][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.419039][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 84.519048][ T9] pvrusb2: ********** [ 84.547794][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 84.640804][ T9] pvrusb2: Important functionality might not be entirely working. [ 84.723889][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 84.790657][ T9] pvrusb2: ********** [ 84.840055][ T2345] pvrusb2: Invalid write control endpoint [ 85.032514][ T6080] pvrusb2: Invalid write control endpoint [ 85.040507][ T5831] usb 5-1: USB disconnect, device number 4 [ 85.129296][ T2345] pvrusb2: Invalid write control endpoint [ 85.136027][ T9] usb 1-1: USB disconnect, device number 3 [ 85.176641][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 85.227663][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 85.235698][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 85.297488][ T2345] pvrusb2: Device being rendered inoperable [ 85.319444][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 85.362616][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 85.402610][ T2345] pvrusb2: Attached sub-driver cx25840 [ 85.432623][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 85.466558][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 85.666690][ T29] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.839749][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 85.890740][ T29] usb 1-1: config 205 has an invalid descriptor of length 226, skipping remainder of the config [ 85.902393][ T29] usb 1-1: config 205 has 0 interfaces, different from the descriptor's value: 1 [ 85.917414][ T29] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=99.33 [ 85.926693][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.934697][ T29] usb 1-1: Product: syz [ 85.959948][ T29] usb 1-1: Manufacturer: syz [ 85.964600][ T29] usb 1-1: SerialNumber: syz [ 86.265680][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'. [ 86.473403][ T29] usb 1-1: USB disconnect, device number 4 [ 86.610247][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 87.539679][ T6130] syz.0.44 uses obsolete (PF_INET,SOCK_PACKET) [ 87.616914][ T6120] netlink: 'syz.3.41': attribute type 10 has an invalid length. [ 87.690349][ T6101] syz.4.37 (6101): drop_caches: 2 [ 87.769992][ T6120] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.896646][ T5937] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 88.077465][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 88.084837][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.105708][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.140561][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 88.170999][ T5937] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 88.216461][ T5937] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.274405][ T5937] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 88.283957][ T5937] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 88.292245][ T5937] usb 2-1: Manufacturer: syz [ 88.321617][ T5937] usb 2-1: config 0 descriptor?? [ 88.836754][ T5937] rc_core: IR keymap rc-hauppauge not found [ 88.842972][ T5937] Registered IR keymap rc-empty [ 88.854187][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.916769][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.097229][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.117580][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.188170][ T5937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 89.295402][ T5937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 89.423793][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.456728][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.511425][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.547373][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.626998][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.662143][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.679461][ T6168] netlink: 'syz.0.53': attribute type 3 has an invalid length. [ 89.729429][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.776667][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.813619][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.856727][ T5937] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.901101][ T5937] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 89.916657][ T5937] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 89.930007][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.984174][ T5937] usb 2-1: USB disconnect, device number 7 [ 90.189159][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.200051][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.215667][ T9] usb 1-1: Product: syz [ 90.224871][ T9] usb 1-1: Manufacturer: syz [ 90.231896][ T9] usb 1-1: SerialNumber: syz [ 90.253009][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 90.278626][ T796] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 90.406709][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.437569][ T5937] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 90.664637][ T29] usb 1-1: USB disconnect, device number 5 [ 90.750817][ T5937] usb 2-1: config 0 has no interfaces? [ 90.766392][ T5937] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 90.796338][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.829205][ T5937] usb 2-1: config 0 descriptor?? [ 91.106770][ T6165] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.150236][ T6175] Zero length message leads to an empty skb [ 91.157875][ T5937] usb 2-1: USB disconnect, device number 8 [ 91.331536][ T796] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 91.368157][ T796] ath9k_htc: Failed to initialize the device [ 91.386050][ T29] usb 1-1: ath9k_htc: USB layer deinitialized [ 91.532053][ T6184] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 91.959064][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 92.090651][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.197915][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.262410][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.380632][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 92.460630][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.534111][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 92.801940][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 92.846687][ T24] usb 5-1: Manufacturer: syz [ 92.904684][ T24] usb 5-1: config 0 descriptor?? [ 92.953299][ T6207] capability: warning: `syz.2.64' uses deprecated v2 capabilities in a way that may be insecure [ 93.767978][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'. [ 93.817969][ T24] rc_core: IR keymap rc-hauppauge not found [ 93.825031][ T24] Registered IR keymap rc-empty [ 93.846645][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.880261][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 93.908863][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 93.945408][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 94.038546][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 94.081177][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 94.156718][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 94.246669][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 94.278272][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 94.378469][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 94.470389][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 94.508330][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 94.574433][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 94.616881][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 94.639931][ T24] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 94.666648][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 94.733093][ T24] usb 5-1: USB disconnect, device number 5 [ 95.029149][ T6231] netlink: 'syz.2.70': attribute type 1 has an invalid length. [ 95.141926][ T6235] netlink: 'syz.1.71': attribute type 10 has an invalid length. [ 95.457174][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.605599][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.73'. [ 95.637404][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 95.652163][ T9] usb 3-1: config 10 has an invalid interface number: 251 but max is 0 [ 95.670401][ T9] usb 3-1: config 10 has no interface number 0 [ 95.683633][ T9] usb 3-1: config 10 interface 251 has no altsetting 0 [ 95.704457][ T9] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff [ 95.714172][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.723936][ T9] usb 3-1: Product: syz [ 95.730031][ T9] usb 3-1: Manufacturer: syz [ 95.783275][ T9] usb 3-1: SerialNumber: syz [ 96.130506][ T6231] macvlan2: entered promiscuous mode [ 96.150558][ T6231] macvlan2: entered allmulticast mode [ 96.262245][ T9] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 96.277017][ T9] gspca_sunplus: reg_r err -71 [ 96.287462][ T9] sunplus 3-1:10.251: probe with driver sunplus failed with error -71 [ 96.319137][ T9] usb 3-1: USB disconnect, device number 4 [ 96.746576][ T796] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 96.946572][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 96.973043][ T6272] bridge_slave_0: left allmulticast mode [ 96.991955][ T6272] bridge_slave_0: left promiscuous mode [ 97.009561][ T796] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 97.030895][ T796] usb 2-1: config 1 has no interface number 0 [ 97.035301][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.042235][ T796] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 97.081427][ T796] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 97.190160][ T796] usb 2-1: config 1 interface 105 has no altsetting 0 [ 97.200135][ T6272] bridge_slave_1: left allmulticast mode [ 97.201988][ T796] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 97.205931][ T6272] bridge_slave_1: left promiscuous mode [ 97.215289][ T796] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 97.466826][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.504163][ T6272] bond0: (slave bond_slave_0): Releasing backup interface [ 97.516614][ T796] usb 2-1: Product: syz [ 97.527619][ T796] usb 2-1: Manufacturer: syz [ 97.538238][ T6272] bond0: (slave bond_slave_1): Releasing backup interface [ 97.544191][ T796] usb 2-1: SerialNumber: syz [ 97.563918][ T6259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.583564][ T6259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.605631][ T6272] team0: Port device team_slave_0 removed [ 97.633436][ T6272] team0: Port device team_slave_1 removed [ 97.654288][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.673734][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.698905][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.706729][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.733145][ T6272] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.015992][ T6259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.023595][ T6259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.474865][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 98.664720][ T796] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 98.683893][ T796] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 98.822607][ T796] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b4:17:dc:b1:bf:b1 [ 98.922124][ T796] usb 2-1: USB disconnect, device number 9 [ 98.953429][ T6290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.88'. [ 98.992166][ T796] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 99.082709][ T796] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 99.115449][ T796] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 99.143240][ T796] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 99.957479][ T30] audit: type=1326 audit(1776017018.777:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.0.96" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8bd9c819 code=0x0 [ 100.225236][ T6331] loop2: detected capacity change from 0 to 7 [ 100.248335][ T5840] Dev loop2: unable to read RDB block 7 [ 100.255045][ T5840] loop2: unable to read partition table [ 100.392258][ T5840] loop2: partition table beyond EOD, truncated [ 100.421551][ T6331] Dev loop2: unable to read RDB block 7 [ 100.427970][ T6331] loop2: unable to read partition table [ 100.443260][ T6331] loop2: partition table beyond EOD, truncated [ 100.457106][ T6331] loop_reread_partitions: partition scan of loop2 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 100.575066][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 100.626377][ T24] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 100.709503][ T6344] trusted_key: encrypted_key: keylen parameter is missing [ 100.781878][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.826991][ T24] usb 2-1: config index 0 descriptor too short (expected 51227, got 27) [ 100.839143][ T24] usb 2-1: config 24 has too many interfaces: 199, using maximum allowed: 32 [ 100.854498][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.872646][ T24] usb 2-1: config 24 has an invalid descriptor of length 111, skipping remainder of the config [ 100.893105][ T24] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 199 [ 100.911752][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 100.921571][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.934384][ T24] usb 2-1: Product: syz [ 100.937548][ T5942] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 100.939269][ T24] usb 2-1: Manufacturer: syz [ 100.952424][ T24] usb 2-1: SerialNumber: syz [ 101.132436][ T5942] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 101.145678][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.186279][ T5942] usb 5-1: Product: syz [ 101.194551][ T5942] usb 5-1: Manufacturer: syz [ 101.202855][ T5942] usb 5-1: SerialNumber: syz [ 101.226947][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.230015][ T24] usb 2-1: USB disconnect, device number 10 [ 101.390513][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 101.403993][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.416638][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.463817][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.474426][ T5942] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.513606][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.556648][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.570728][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.577218][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.577267][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.577292][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.584796][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.584845][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.584870][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.585728][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.585772][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.585795][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.587453][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.587500][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.587523][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.590361][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.590405][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.590430][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.591427][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.591469][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.591493][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.601131][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 101.601162][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 101.601180][ T9] usb 4-1: Product: syz [ 101.601193][ T9] usb 4-1: Manufacturer: syz [ 101.601204][ T9] usb 4-1: SerialNumber: syz [ 101.602844][ T9] usb 4-1: config 0 descriptor?? [ 101.621388][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 101.754529][ T5942] usb 5-1: USB disconnect, device number 6 [ 101.832095][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.881093][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 101.882678][ T9] usb 4-1: USB disconnect, device number 2 [ 101.887341][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 102.346405][ T6370] netlink: 187468 bytes leftover after parsing attributes in process `syz.2.112'. [ 102.349751][ T6370] kernel profiling enabled (shift: 9) [ 102.526552][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.626552][ T5880] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.666807][ T24] usb 4-1: device descriptor read/64, error -71 [ 102.726685][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 102.776850][ T5831] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.812314][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.812336][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.812347][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.812371][ T5880] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.812382][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.814407][ T5880] usb 3-1: config 0 descriptor?? [ 102.886532][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 102.890001][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.890040][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.890054][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.890065][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.890076][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.893661][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.893681][ T29] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 102.893692][ T29] usb 5-1: Manufacturer: syz [ 102.895567][ T29] usb 5-1: config 0 descriptor?? [ 102.926644][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.058536][ T24] usb 4-1: device descriptor read/64, error -71 [ 103.075502][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 103.092892][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.092936][ T5831] usb 1-1: config 0 has no interfaces? [ 103.106434][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.106528][ T5831] usb 1-1: config 0 has no interfaces? [ 103.109304][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.109336][ T5831] usb 1-1: config 0 has no interfaces? [ 103.113573][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.113628][ T5831] usb 1-1: config 0 has no interfaces? [ 103.113658][ T5831] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 103.113679][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.117509][ T5831] usb 1-1: config 0 descriptor?? [ 103.167122][ T24] usb usb4-port1: attempt power cycle [ 103.255367][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.255418][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.255434][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.255449][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.255464][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.255479][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.255494][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.255508][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.255523][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.255550][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.255653][ T5880] plantronics 0003:047F:FFFF.0003: item fetching failed at offset 38/41 [ 103.256048][ T5880] plantronics 0003:047F:FFFF.0003: parse failed [ 103.256113][ T5880] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 103.475520][ T5880] usb 3-1: USB disconnect, device number 5 [ 103.506687][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.527448][ T24] usb 4-1: device descriptor read/8, error -71 [ 103.916608][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.147273][ T5831] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 104.155070][ T24] usb 4-1: device not accepting address 6, error -71 [ 104.175012][ T24] usb usb4-port1: unable to enumerate USB device [ 104.344802][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 104.381558][ T5831] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.389670][ T5831] usb 2-1: config 0 has no interface number 0 [ 104.395874][ T5831] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.416628][ T5831] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.426945][ T5831] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 104.441528][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.506717][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.516178][ T5831] usb 2-1: config 0 descriptor?? [ 104.660303][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.675480][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 104.691392][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 104.703789][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.721048][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 104.749006][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.764878][ T24] usb 4-1: config 0 descriptor?? [ 104.839929][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 104.943147][ T5831] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 104.953051][ T5831] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 104.963095][ T5831] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 104.973301][ T5831] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 104.982000][ T5831] uclogic 0003:28BD:0071.0004: probe with driver uclogic failed with error -71 [ 105.009068][ T5831] usb 2-1: USB disconnect, device number 11 [ 105.110381][ T6398] netlink: 220 bytes leftover after parsing attributes in process `syz.3.116'. [ 105.236650][ T5942] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 105.388635][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 105.400232][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 105.414806][ T5942] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 105.424681][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.433301][ T5942] usb 3-1: Product: syz [ 105.437783][ T5942] usb 3-1: Manufacturer: syz [ 105.442453][ T5942] usb 3-1: SerialNumber: syz [ 105.450868][ T5942] usb 3-1: config 0 descriptor?? [ 105.956511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 105.996500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.006507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.066502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.186510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.342125][ T29] rc_core: IR keymap rc-hauppauge not found [ 106.392897][ T29] Registered IR keymap rc-empty [ 106.393383][ T5942] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 106.448091][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.448868][ T5942] usb 3-1: USB disconnect, device number 6 [ 106.455419][ T5831] usb 1-1: USB disconnect, device number 6 [ 106.486674][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.531285][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 106.564983][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 106.628168][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.676704][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.786256][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.907596][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.946631][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.967354][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.112834][ T5942] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.179016][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.266034][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.311863][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.465005][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 107.497771][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 107.520784][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 107.532121][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 107.678187][ T5942] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 107.682454][ T29] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 107.688006][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.723984][ T29] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 107.762597][ T5942] usb 3-1: Product: syz [ 107.765807][ T29] usb 5-1: USB disconnect, device number 7 [ 107.806717][ T5942] usb 3-1: Manufacturer: syz [ 107.816679][ T5942] usb 3-1: SerialNumber: syz [ 107.839111][ T24] usb 4-1: USB disconnect, device number 7 [ 107.841095][ T5942] usb 3-1: config 0 descriptor?? [ 107.950546][ T5942] usb 3-1: can't set config #0, error -71 [ 108.018208][ T5942] usb 3-1: USB disconnect, device number 7 [ 108.246873][ T5880] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 108.514805][ T5880] usb 2-1: config 0 has too many interfaces: 161, using maximum allowed: 32 [ 108.529701][ T5880] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 108.542693][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.564585][ T5880] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 161 [ 108.566605][ T5942] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 108.592001][ T5880] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 108.604659][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.614509][ T6451] netlink: 'syz.0.133': attribute type 10 has an invalid length. [ 108.642621][ T5880] usb 2-1: config 0 descriptor?? [ 108.736708][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 108.750525][ T5942] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.766751][ T5942] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.776783][ T5942] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.789810][ T5942] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.796636][ T5942] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 108.806701][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.818047][ T5942] usb 3-1: config 0 descriptor?? [ 108.896695][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 108.909365][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.929034][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.952661][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.964942][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 108.977744][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.980163][ T9] usb 2-1: USB disconnect, device number 12 [ 109.013742][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.024606][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 109.033369][ T24] usb 4-1: Manufacturer: syz [ 109.056169][ T24] usb 4-1: config 0 descriptor?? [ 109.295983][ T6456] bridge_slave_0: left allmulticast mode [ 109.306625][ T6456] bridge_slave_0: left promiscuous mode [ 109.314681][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.318658][ T5942] usbhid 3-1:0.0: can't add hid device: -71 [ 109.341873][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 109.360783][ T6456] bridge_slave_1: left allmulticast mode [ 109.366988][ T5942] usb 3-1: USB disconnect, device number 8 [ 109.378199][ T6456] bridge_slave_1: left promiscuous mode [ 109.384460][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.404120][ T6456] bond0: (slave bond_slave_0): Releasing backup interface [ 109.430403][ T6456] bond0: (slave bond_slave_1): Releasing backup interface [ 109.462207][ T6456] team0: Port device team_slave_0 removed [ 109.483543][ T6456] team0: Port device team_slave_1 removed [ 109.497723][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.505300][ T6456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.515998][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.524945][ T6456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.534915][ T6456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 109.776579][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 110.061755][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 110.073314][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.081548][ T9] usb 2-1: Product: syz [ 110.088915][ T9] usb 2-1: Manufacturer: syz [ 110.094265][ T9] usb 2-1: SerialNumber: syz [ 110.114869][ T9] usb 2-1: config 0 descriptor?? [ 110.364203][ T6473] fuse: Unknown parameter 'f0xffffffffffffffff00000000000000000000' [ 110.639670][ T9] usb 2-1: Firmware: major: 2, minor: 0, hardware type: ATUSB (0) [ 110.666625][ T5942] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.830801][ T5942] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 110.842990][ T9] usb 2-1: no permanent extended address found, random address set [ 110.851477][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.861828][ T5942] usb 3-1: Product: syz [ 110.877930][ T5942] usb 3-1: Manufacturer: syz [ 110.945546][ T5942] usb 3-1: SerialNumber: syz [ 111.142802][ T9] usb 2-1: USB disconnect, device number 13 [ 111.362706][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.372158][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.381435][ T5942] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 111.395063][ T5942] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 111.616622][ T24] rc_core: IR keymap rc-hauppauge not found [ 111.622581][ T24] Registered IR keymap rc-empty [ 111.657046][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 111.697224][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 111.761785][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 111.778836][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 111.806123][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 111.861123][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 111.889211][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 111.899792][ T6495] bridge_slave_0: left allmulticast mode [ 111.905473][ T6495] bridge_slave_0: left promiscuous mode [ 111.940079][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 111.949499][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.968163][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 111.988781][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.001343][ T6495] bridge_slave_1: left allmulticast mode [ 112.012726][ T6495] bridge_slave_1: left promiscuous mode [ 112.021226][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.041061][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.049667][ T6495] bond0: (slave bond_slave_0): Releasing backup interface [ 112.057542][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.083123][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.084509][ T6495] bond0: (slave bond_slave_1): Releasing backup interface [ 112.106820][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 112.138238][ T6495] team0: Port device team_slave_0 removed [ 112.138814][ T24] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 112.152551][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 112.157804][ T6495] team0: Port device team_slave_1 removed [ 112.166109][ T24] usb 4-1: USB disconnect, device number 8 [ 112.184923][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.202751][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.218502][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.226132][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.281274][ T6506] Cannot find set identified by id 0 to match [ 112.344108][ T6506] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 112.372790][ T6495] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.159861][ T5942] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 113.176683][ T5942] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 113.193320][ T5942] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 113.216631][ T5942] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 113.263399][ T5942] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 113.283663][ T5942] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 113.312288][ T5942] usb 3-1: USB disconnect, device number 9 [ 113.370222][ T6520] tipc: Started in network mode [ 113.375257][ T6520] tipc: Node identity ac14140f, cluster identity 4711 [ 113.382833][ T6520] tipc: New replicast peer: 255.224.255.255 [ 113.427000][ T6520] tipc: Enabled bearer , priority 10 [ 113.476629][ T5937] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.642998][ T5937] usb 1-1: config 0 has no interfaces? [ 113.652286][ T5937] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 113.705883][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.751652][ T5937] usb 1-1: config 0 descriptor?? [ 113.889615][ T6533] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 113.935861][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'. [ 113.999558][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.041540][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 114.047092][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.086829][ T24] usb 1-1: USB disconnect, device number 7 [ 114.134983][ T6536] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 114.228577][ T6536] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 114.304042][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 114.348701][ T6538] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 114.361037][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.454556][ T29] tipc: Node number set to 2886997007 [ 114.489461][ T6533] macvlan2: entered promiscuous mode [ 114.517681][ T6533] macvlan2: entered allmulticast mode [ 114.528010][ T6533] bond1: entered promiscuous mode [ 114.540320][ T6533] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.560903][ T6533] bond1: left promiscuous mode [ 114.646609][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.686861][ T5880] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.796558][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 114.803995][ T24] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 114.816636][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.828271][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 114.837573][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 114.842962][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.851694][ T24] usb 1-1: Product: syz [ 114.856708][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 114.876557][ T5880] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 114.886494][ T24] usb 1-1: Manufacturer: syz [ 114.898852][ T24] usb 1-1: SerialNumber: syz [ 114.907133][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.945834][ T5880] usb 5-1: config 0 descriptor?? [ 115.253478][ T5880] usbhid 5-1:0.0: can't add hid device: -71 [ 115.271718][ T5880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 115.330680][ T24] usb 1-1: 0:2 : does not exist [ 115.337776][ T5880] usb 5-1: USB disconnect, device number 8 [ 116.007652][ T980] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 116.251188][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 116.348106][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.461625][ T980] usb 2-1: config 0 has no interfaces? [ 116.650225][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.690204][ T980] usb 2-1: config 0 has no interfaces? [ 116.706976][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.719164][ T980] usb 2-1: config 0 has no interfaces? [ 116.768960][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.792548][ T980] usb 2-1: config 0 has no interfaces? [ 116.932963][ T980] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 116.955263][ T6612] Cannot find set identified by id 0 to match [ 116.964297][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.118405][ T980] usb 2-1: config 0 descriptor?? [ 117.472094][ T24] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 117.771446][ T24] usb 1-1: USB disconnect, device number 8 [ 117.884843][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.973662][ T6619] loop5: detected capacity change from 0 to 7 [ 117.999568][ T6619] Dev loop5: unable to read RDB block 7 [ 118.016769][ T6619] loop5: unable to read partition table [ 118.035339][ T6619] loop5: partition table beyond EOD, truncated [ 118.053293][ T6619] loop_reread_partitions: partition scan of loop5 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 118.150215][ T6622] netlink: 'syz.4.171': attribute type 9 has an invalid length. [ 118.177297][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 118.225529][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 118.282084][ T6622] gretap0: entered promiscuous mode [ 118.288370][ T6622] macvlan2: entered promiscuous mode [ 118.298488][ T6622] macvlan2: entered allmulticast mode [ 118.334754][ T6622] gretap0: entered allmulticast mode [ 118.374101][ T6630] fuse: Unknown parameter '' [ 118.716587][ T24] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 119.089165][ T5942] usb 2-1: USB disconnect, device number 14 [ 119.200858][ T24] usb 5-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 119.346812][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.365554][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 119.422658][ T24] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 119.440882][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.506574][ T24] usb 5-1: Product: syz [ 119.532773][ T24] usb 5-1: Manufacturer: syz [ 119.546585][ T24] usb 5-1: SerialNumber: syz [ 119.566631][ T5942] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 119.707432][ T5942] usb 2-1: device descriptor read/64, error -71 [ 119.784106][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 119.817418][ T24] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 119.840270][ T24] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 119.850682][ T6644] netlink: 5 bytes leftover after parsing attributes in process `syz.2.177'. [ 119.866785][ T24] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 119.886904][ T24] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 119.966751][ T5942] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 120.049520][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 120.098098][ T24] usb 5-1: USB disconnect, device number 9 [ 120.144707][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.176702][ T5942] usb 2-1: device descriptor read/64, error -71 [ 120.249966][ T6652] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 120.278228][ T6652] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 120.294238][ T6652] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 120.302611][ T5942] usb usb2-port1: attempt power cycle [ 120.310600][ T6652] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 120.367100][ T6652] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 120.376341][ T6658] tipc: Started in network mode [ 120.401400][ T6652] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 120.418123][ T6658] tipc: Node identity ac14140f, cluster identity 4711 [ 120.425168][ T6658] tipc: New replicast peer: 255.224.255.255 [ 120.464788][ T6652] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 120.483044][ T6658] tipc: Enabled bearer , priority 10 [ 120.503312][ T6652] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 120.648716][ T6652] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 120.666639][ T5942] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 120.697342][ T5942] usb 2-1: device descriptor read/8, error -71 [ 120.716702][ T6652] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 120.967021][ T5942] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 121.056695][ T796] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 121.108608][ T5942] usb 2-1: device descriptor read/8, error -71 [ 121.190732][ T6680] loop5: detected capacity change from 0 to 7 [ 121.234557][ T5942] usb usb2-port1: unable to enumerate USB device [ 121.246661][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 121.254453][ T796] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 121.265031][ T5840] Dev loop5: unable to read RDB block 7 [ 121.266128][ T6682] xt_hashlimit: size too large, truncated to 1048576 [ 121.272107][ T796] usb 4-1: config 0 has no interface number 0 [ 121.289045][ T5840] loop5: unable to read partition table [ 121.294919][ T5840] loop5: partition table beyond EOD, truncated [ 121.311319][ T796] usb 4-1: config 0 interface 12 has no altsetting 0 [ 121.320924][ T796] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 121.331586][ T6680] Dev loop5: unable to read RDB block 7 [ 121.342471][ T6680] loop5: unable to read partition table [ 121.348409][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.356418][ T796] usb 4-1: Product: syz [ 121.363666][ T6680] loop5: partition table beyond EOD, truncated [ 121.378251][ T6680] loop_reread_partitions: partition scan of loop5 (ўшЂЋxќ—Ÿбр– ) failed (rc=-5) [ 121.387513][ T796] usb 4-1: Manufacturer: syz [ 121.387535][ T796] usb 4-1: SerialNumber: syz [ 121.390032][ T796] usb 4-1: config 0 descriptor?? [ 121.596596][ T980] tipc: Node number set to 2886997007 [ 121.624752][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.640652][ T6691] Cannot find set identified by id 0 to match [ 121.761207][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.799014][ T6694] bridge_slave_0: left allmulticast mode [ 121.884384][ T6694] bridge_slave_0: left promiscuous mode [ 121.905147][ T6696] usb usb8: usbfs: process 6696 (syz.2.187) did not claim interface 0 before use [ 121.918089][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.939195][ T6694] bridge_slave_1: left allmulticast mode [ 121.951132][ T6694] bridge_slave_1: left promiscuous mode [ 121.962588][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.985914][ T6694] bond0: (slave bond_slave_0): Releasing backup interface [ 122.004580][ T6694] bond0: (slave bond_slave_1): Releasing backup interface [ 122.040487][ T6694] team0: Port device team_slave_0 removed [ 122.062065][ T6694] team0: Port device team_slave_1 removed [ 122.097520][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.110916][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.299443][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.309608][ T6694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.327394][ T6694] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.457766][ T796] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 122.477444][ T796] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 122.506944][ T796] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 122.514886][ T796] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 122.611126][ T796] usb 4-1: USB disconnect, device number 9 [ 123.511538][ T6733] xt_hashlimit: size too large, truncated to 1048576 [ 123.726647][ T6743] xt_TCPMSS: Only works on TCP SYN packets [ 123.757548][ T6743] sit1: entered allmulticast mode [ 125.339610][ T6771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.682088][ T6773] libceph: resolve '0.' (ret=-3): failed [ 126.233042][ T6786] xt_TCPMSS: Only works on TCP SYN packets [ 126.304899][ T6788] Cannot find set identified by id 0 to match [ 127.207644][ T6802] xt_hashlimit: size too large, truncated to 1048576 [ 127.372994][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 127.652427][ T6810] netlink: 'syz.3.213': attribute type 10 has an invalid length. [ 127.708467][ T6810] netlink: 2 bytes leftover after parsing attributes in process `syz.3.213'. [ 127.736835][ T6810] bond0: entered promiscuous mode [ 127.760124][ T6810] bond_slave_0: entered promiscuous mode [ 127.818151][ T6810] bond_slave_1: entered promiscuous mode [ 127.824070][ T6810] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 127.841875][ T6823] trusted_key: encrypted_key: insufficient parameters specified [ 127.941617][ T6810] bridge0: port 3(bond0) entered blocking state [ 128.126806][ T6810] bridge0: port 3(bond0) entered disabled state [ 128.133425][ T6810] bond0: entered allmulticast mode [ 128.149286][ T6810] bond_slave_0: entered allmulticast mode [ 128.171772][ T6810] bond_slave_1: entered allmulticast mode [ 128.190117][ T6810] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 128.219507][ T6810] bridge0: port 3(bond0) entered blocking state [ 128.225885][ T6810] bridge0: port 3(bond0) entered forwarding state [ 128.431130][ T6833] fuse: Bad value for 'group_id' [ 128.462610][ T6833] fuse: Bad value for 'group_id' [ 128.526202][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 128.571177][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 128.649425][ T6831] fuse: Unknown parameter 'fd0x000000000000000e00000000000000000000' [ 129.266677][ T5937] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 129.695134][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 129.996937][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 130.017191][ T5937] usb 3-1: config 0 has no interfaces? [ 130.065248][ T5937] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 130.082516][ T5937] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 130.116635][ T5937] usb 3-1: Manufacturer: syz [ 130.136225][ T5937] usb 3-1: config 0 descriptor?? [ 130.230506][ T796] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.475360][ T796] usb 4-1: config 1 interface 0 has no altsetting 0 [ 130.513057][ T796] usb 4-1: string descriptor 0 read error: -22 [ 130.519580][ T796] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.40 [ 130.535648][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.663655][ T6861] autofs4:pid:6861:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 130.695703][ T6861] autofs4:pid:6861:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 130.810410][ T6863] xt_hashlimit: size too large, truncated to 1048576 [ 130.966556][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 131.075403][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.091001][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.107074][ T6867] fuse: Bad value for 'fd' [ 131.131242][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 131.142182][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.155881][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.173289][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.202261][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 131.213052][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.254688][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.272857][ T29] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.291682][ T29] usb 5-1: Manufacturer: syz [ 131.305853][ T29] usb 5-1: config 0 descriptor?? [ 131.512635][ T5880] hid_parser_main: 13 callbacks suppressed [ 131.512653][ T5880] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 131.550081][ T6878] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.228'. [ 131.558123][ T5880] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.758051][ T29] rc_core: IR keymap rc-hauppauge not found [ 131.777342][ T6880] fido_id[6880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.798697][ T29] Registered IR keymap rc-empty [ 131.810627][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 131.838074][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 131.880155][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 131.909828][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 131.929010][ T6882] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 131.951480][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 131.981519][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 132.001460][ T6882] bond1: entered promiscuous mode [ 132.028774][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 132.044792][ T6882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.059148][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 132.070043][ T5937] usb 3-1: USB disconnect, device number 10 [ 132.076748][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 132.107027][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 132.137120][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 132.149983][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.168328][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 132.190630][ T6883] bond1: (slave bridge1): making interface the new active one [ 132.208632][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 132.237478][ T6883] bridge1: entered promiscuous mode [ 132.246963][ T6883] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 132.262264][ T29] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 132.300809][ T29] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 132.319419][ T29] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 132.348628][ T29] usb 5-1: USB disconnect, device number 10 [ 132.626736][ T5937] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.801116][ T5937] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.821015][ T5937] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 132.831487][ T5937] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.844330][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.852728][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.861551][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.877044][ T6903] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.896115][ T5937] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.960894][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 133.024893][ T796] usbhid 4-1:1.0: can't add hid device: -71 [ 133.031238][ T796] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 133.155202][ T796] usb 4-1: USB disconnect, device number 10 [ 133.263992][ T29] usb 3-1: USB disconnect, device number 11 [ 133.716115][ T6933] netlink: 48 bytes leftover after parsing attributes in process `syz.1.240'. [ 133.730291][ T6933] binder: BINDER_SET_CONTEXT_MGR already set [ 133.738520][ T6933] binder: 6928:6933 ioctl 4018620d 200000004a80 returned -16 [ 134.573066][ T6948] xt_TCPMSS: Only works on TCP SYN packets [ 134.610526][ T6948] sit1: entered allmulticast mode [ 135.038758][ T6955] netlink: 'syz.1.248': attribute type 13 has an invalid length. [ 135.066625][ T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.349043][ T29] usb 1-1: config 1 interface 0 has no altsetting 0 [ 135.361833][ T29] usb 1-1: string descriptor 0 read error: -22 [ 135.371504][ T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.40 [ 135.398700][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.779838][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.797391][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.901107][ T6970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.206057][ T6975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.252'. [ 137.526568][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 137.579110][ T6979] tipc: Enabling of bearer rejected, already enabled [ 137.725976][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 137.735455][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.763524][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.773606][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 137.786159][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.801013][ T10] usb 2-1: config 0 descriptor?? [ 137.912908][ T6981] bond1: entered promiscuous mode [ 137.977616][ T29] usbhid 1-1:1.0: can't add hid device: -71 [ 137.983815][ T29] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 138.047424][ T10] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 138.054855][ T10] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 138.084734][ T29] usb 1-1: USB disconnect, device number 10 [ 138.192996][ T6988] netlink: 'syz.4.258': attribute type 1 has an invalid length. [ 138.221966][ T10] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 138.235368][ T10] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 138.263052][ T6988] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 138.274588][ T6988] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 138.406547][ T29] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 138.450649][ T10] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 138.474312][ T10] ft260 0003:0403:6030.0006: failed to retrieve status: -32 [ 138.490175][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 138.615820][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 138.650326][ T29] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 138.739379][ T29] usb 1-1: config 0 has no interface number 0 [ 138.752825][ T29] usb 1-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 138.792623][ T29] usb 1-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 138.829283][ T29] usb 1-1: config 0 interface 11 has no altsetting 0 [ 138.878690][ T29] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 138.905699][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.947506][ T7009] xt_TCPMSS: Only works on TCP SYN packets [ 138.972128][ T7009] sit1: entered allmulticast mode [ 139.036786][ T29] usb 1-1: Product: syz [ 139.041076][ T29] usb 1-1: Manufacturer: syz [ 139.061441][ T29] usb 1-1: SerialNumber: syz [ 139.246862][ T29] usb 1-1: config 0 descriptor?? [ 139.447035][ T5937] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 139.596897][ T5937] usb 2-1: device descriptor read/64, error -32 [ 139.745888][ T29] usb 1-1: Expected 3 endpoints, found: 0 [ 139.777228][ T29] usb 1-1: USB disconnect, device number 11 [ 139.855637][ T5937] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 140.010474][ T5937] usb 2-1: device descriptor read/64, error -32 [ 140.277034][ T5937] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 140.287416][ T7021] tipc: New replicast peer: 255.224.255.255 [ 140.345807][ T7021] tipc: Enabled bearer , priority 10 [ 140.353885][ T5937] usb 2-1: device descriptor read/8, error -71 [ 140.413469][ T7025] program syz.2.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.425556][ T7025] ptrace attach of "./syz-executor exec"[5838] was attempted by " Рџ аџ №Ѕ Рџ Рџ аџ рџ №џ Аџ Рџ џџџџ    Љ\x0c\x09 $ы$ /dev/sg# syz) "[7025] [ 140.798449][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 140.836785][ T5937] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 140.857106][ T5937] usb 2-1: device descriptor read/8, error -71 [ 140.969847][ T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 141.009883][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 141.026047][ T796] usb 2-1: USB disconnect, device number 19 [ 141.081789][ T10] usb 3-1: config 220 has no interface number 2 [ 141.192063][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 141.218152][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 141.288565][ T10] usb 3-1: config 220 interface 76 has no altsetting 0 [ 141.295504][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 141.350353][ T796] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 141.437200][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 141.474755][ T5937] tipc: Node number set to 2886997007 [ 141.494981][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.504110][ T796] usb 2-1: device descriptor read/64, error -71 [ 141.515260][ T7051] xt_hashlimit: size too large, truncated to 1048576 [ 141.736563][ T10] usb 3-1: Product: syz [ 141.745154][ T10] usb 3-1: Manufacturer: syz [ 141.752368][ T10] usb 3-1: SerialNumber: syz [ 141.826807][ T796] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 141.967318][ T796] usb 2-1: device descriptor read/64, error -71 [ 142.046335][ T10] usb 3-1: selecting invalid altsetting 0 [ 142.060006][ T10] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 142.079446][ T796] usb usb2-port1: attempt power cycle [ 142.086790][ T10] uvcvideo 3-1:220.0: No valid video chain found. [ 142.103072][ T10] usb 3-1: selecting invalid altsetting 0 [ 142.129273][ T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 142.289146][ T10] usb 3-1: USB disconnect, device number 12 [ 142.385934][ T7062] fuse: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 142.536561][ T796] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 142.647389][ T7066] tipc: Started in network mode [ 142.655343][ T7066] tipc: Node identity ac14140f, cluster identity 4711 [ 142.662912][ T7066] tipc: New replicast peer: 255.224.255.255 [ 142.669613][ T7066] tipc: Enabled bearer , priority 10 [ 142.810210][ T7065] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 142.860864][ T796] usb 2-1: device descriptor read/8, error -71 [ 143.016833][ T30] audit: type=1326 audit(1776017061.697:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8bd9c819 code=0x7ffc0000 [ 143.112030][ T30] audit: type=1326 audit(1776017061.697:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8bd9c819 code=0x7ffc0000 [ 143.188411][ T30] audit: type=1326 audit(1776017061.697:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8bd9c819 code=0x7ffc0000 [ 143.273629][ T30] audit: type=1326 audit(1776017061.697:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8bd9c819 code=0x7ffc0000 [ 143.360764][ T30] audit: type=1326 audit(1776017061.697:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c8bd9c582 code=0x7ffc0000 [ 143.476526][ T30] audit: type=1326 audit(1776017061.697:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5c8bd9c819 code=0x7ffc0000 [ 143.607170][ T30] audit: type=1326 audit(1776017061.697:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8bd9c819 code=0x7ffc0000 [ 143.696945][ T30] audit: type=1326 audit(1776017061.697:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8bd9c819 code=0x7ffc0000 [ 143.786602][ T5942] tipc: Node number set to 2886997007 [ 143.812315][ T30] audit: type=1326 audit(1776017062.267:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5c8bd9c617 code=0x7ffc0000 [ 144.326975][ T30] audit: type=1326 audit(1776017062.267:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.0.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5c8bd59511 code=0x7ffc0000 [ 144.375351][ T7086] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 144.382094][ T7086] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.476622][ T7086] vhci_hcd vhci_hcd.0: Device attached [ 144.554840][ T7087] vhci_hcd: connection closed [ 144.558248][ T58] vhci_hcd vhci_hcd.1: stop threads [ 144.595230][ T58] vhci_hcd vhci_hcd.1: release socket [ 144.624938][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 144.666626][ T5942] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 144.857953][ T5942] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 144.868633][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.882008][ T7100] xt_hashlimit: size too large, truncated to 1048576 [ 144.936869][ T5942] usb 1-1: config 1 has no interface number 0 [ 144.946904][ T5942] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.974401][ T7101] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 144.978675][ T5942] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.081799][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.100373][ T5942] usb 1-1: Product: syz [ 145.182793][ T5942] usb 1-1: Manufacturer: syz [ 145.204713][ T5942] usb 1-1: SerialNumber: syz [ 145.232965][ T5942] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 145.280866][ T5942] cdc_ncm 1-1:1.1: bind() failure [ 146.123785][ T796] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 146.583973][ T796] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 146.624768][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.643070][ T796] usb 2-1: Product: syz [ 146.653587][ T796] usb 2-1: Manufacturer: syz [ 146.664735][ T796] usb 2-1: SerialNumber: syz [ 146.681578][ T796] usb 2-1: config 0 descriptor?? [ 146.725945][ T796] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 146.859642][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 146.957861][ T7125] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 146.957861][ T7125] program syz.4.290 not setting count and/or reply_len properly [ 147.558415][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 147.580298][ T7141] netlink: 'syz.2.296': attribute type 20 has an invalid length. [ 147.597600][ T7141] netlink: 'syz.2.296': attribute type 21 has an invalid length. [ 148.106683][ T5880] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 148.234811][ T5937] usb 1-1: USB disconnect, device number 12 [ 148.276562][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 148.292191][ T7151] tipc: Enabling of bearer rejected, already enabled [ 148.310937][ T5880] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.336311][ T796] gspca_stk1135: reg_w 0x200 err -71 [ 148.344490][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 148.357522][ T796] gspca_stk1135: Sensor write failed [ 148.366506][ T5880] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.369125][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 148.399379][ T796] gspca_stk1135: Sensor write failed [ 148.406274][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 148.406294][ T5880] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 148.412731][ T796] gspca_stk1135: Sensor read failed [ 148.533768][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 148.548701][ T796] gspca_stk1135: Sensor read failed [ 148.572987][ T796] gspca_stk1135: Detected sensor type unknown (0x0) [ 148.591305][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 148.611512][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.614316][ T796] gspca_stk1135: Sensor read failed [ 148.650162][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 148.661193][ T796] gspca_stk1135: Sensor read failed [ 148.688173][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 148.717717][ T796] gspca_stk1135: Sensor write failed [ 148.726313][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 148.746138][ T796] gspca_stk1135: Sensor write failed [ 148.757134][ T796] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 148.777213][ T7158] binder: 7157:7158 ioctl 400c620e 200000000000 returned -22 [ 148.779824][ T796] usb 2-1: USB disconnect, device number 24 [ 148.912462][ T7145] IPVS: set_ctl: invalid protocol: 255 172.20.20.45:286 [ 148.944472][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.980666][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.175813][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 149.175851][ T30] audit: type=1326 audit(1776017068.007:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.1.305" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74b679c819 code=0x0 [ 149.359421][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.400139][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.463241][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 149.647997][ T5880] usbhid 3-1:128.0: can't add hid device: -71 [ 149.659212][ T5880] usbhid 3-1:128.0: probe with driver usbhid failed with error -71 [ 149.798461][ T5880] usb 3-1: USB disconnect, device number 13 [ 150.336837][ T7195] kvm: user requested TSC rate below hardware speed [ 150.749147][ T7207] xt_hashlimit: size too large, truncated to 1048576 [ 151.294047][ T7222] Cannot find set identified by id 0 to match [ 151.476602][ T980] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 151.643545][ T7211] create_pit_timer: 98 callbacks suppressed [ 151.643566][ T7211] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 151.648323][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 151.650294][ T7211] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 151.686276][ T980] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.699632][ T980] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.735308][ T980] usb 2-1: config 1 interface 2 has no altsetting 0 [ 151.752103][ T980] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 151.761615][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.774802][ T980] usb 2-1: Product: syz [ 151.792109][ T980] usb 2-1: Manufacturer: syz [ 151.801676][ T980] usb 2-1: SerialNumber: syz [ 152.143354][ T980] snd-ua101 2-1:1.1: sample format descriptor not found [ 152.152510][ T980] snd-ua101 2-1:1.0: invalid num_altsetting [ 152.160337][ T980] usb 2-1: selecting invalid altsetting 0 [ 152.175558][ T980] usb 2-1: selecting invalid altsetting 0 [ 152.191645][ T980] usbtest 2-1:1.2: probe with driver usbtest failed with error -22 [ 152.202983][ T980] usb 2-1: selecting invalid altsetting 0 [ 152.214047][ T980] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 152.232175][ T980] usb 2-1: selecting invalid altsetting 0 [ 152.243264][ T980] snd-ua101 2-1:1.2: probe with driver snd-ua101 failed with error -22 [ 152.272439][ T980] usb 2-1: USB disconnect, device number 25 [ 152.377105][ T796] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.564207][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 152.578498][ T796] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 152.605034][ T796] usb 5-1: config 0 has no interface number 0 [ 152.615320][ T796] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.628340][ T796] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 152.646559][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.656395][ T796] usb 5-1: Product: syz [ 152.661887][ T796] usb 5-1: Manufacturer: syz [ 152.674152][ T796] usb 5-1: SerialNumber: syz [ 152.704812][ T796] usb 5-1: config 0 descriptor?? [ 152.727564][ T796] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 152.818213][ T796] em28xx 5-1:0.132: Video interface 132 found: [ 153.131106][ T796] em28xx 5-1:0.132: chip ID is em2874 [ 153.695199][ T7264] xt_hashlimit: size too large, truncated to 1048576 [ 153.767122][ T796] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 153.791460][ T796] em28xx 5-1:0.132: board has no eeprom [ 153.906524][ T796] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 153.923421][ T796] em28xx 5-1:0.132: analog set to bulk mode. [ 153.944897][ T5937] em28xx 5-1:0.132: Registering V4L2 extension [ 154.364370][ T5937] em28xx 5-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 154.396941][ T796] usb 5-1: USB disconnect, device number 11 [ 154.402944][ T5937] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 154.416184][ T796] em28xx 5-1:0.132: Disconnecting em28xx [ 154.469018][ T7273] Cannot find set identified by id 0 to match [ 154.528040][ T7273] fuse: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 155.203419][ T5937] usb 5-1: Decoder not found [ 155.356596][ T5880] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 155.495729][ T5937] em28xx 5-1:0.132: failed to create media graph [ 155.637015][ T5937] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 155.651391][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.666279][ T5880] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7 [ 155.690522][ T5880] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 155.711579][ T7292] ================================================================== [ 155.719691][ T7292] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 155.727072][ T7292] Read of size 8 at addr ffff888033c00790 by task v4l_id/7292 [ 155.734516][ T7292] [ 155.736851][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 155.736866][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 155.736877][ T7292] Call Trace: [ 155.736882][ T7292] [ 155.736887][ T7292] dump_stack_lvl+0xe8/0x150 [ 155.736913][ T7292] print_report+0xba/0x230 [ 155.736925][ T7292] ? v4l2_fh_open+0xac/0x420 [ 155.736938][ T7292] kasan_report+0x117/0x150 [ 155.736952][ T7292] ? v4l2_fh_open+0xac/0x420 [ 155.736965][ T7292] v4l2_fh_open+0xac/0x420 [ 155.736978][ T7292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.736992][ T7292] em28xx_v4l2_open+0x157/0x9a0 [ 155.737004][ T7292] ? do_raw_spin_lock+0x12b/0x2f0 [ 155.737015][ T7292] v4l2_open+0x1bf/0x3a0 [ 155.737030][ T7292] chrdev_open+0x4cd/0x5e0 [ 155.737042][ T7292] ? __pfx_chrdev_open+0x10/0x10 [ 155.737053][ T7292] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 155.737064][ T7292] ? __pfx_chrdev_open+0x10/0x10 [ 155.737074][ T7292] do_dentry_open+0x785/0x14e0 [ 155.737089][ T7292] vfs_open+0x3b/0x340 [ 155.737101][ T7292] ? path_openat+0x2df0/0x3860 [ 155.737111][ T7292] path_openat+0x2e08/0x3860 [ 155.737124][ T7292] ? __pfx_stack_trace_save+0x10/0x10 [ 155.737134][ T7292] ? stack_depot_save_flags+0x33/0x810 [ 155.737150][ T7292] ? __pfx_path_openat+0x10/0x10 [ 155.737159][ T7292] ? __x64_sys_openat+0x138/0x170 [ 155.737171][ T7292] ? do_syscall_64+0x14d/0xf80 [ 155.737183][ T7292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.737194][ T7292] ? __lock_acquire+0x6b5/0x2cf0 [ 155.737208][ T7292] do_file_open+0x23e/0x4a0 [ 155.737219][ T7292] ? __pfx_do_file_open+0x10/0x10 [ 155.737232][ T7292] ? _raw_spin_unlock+0x28/0x50 [ 155.737242][ T7292] ? alloc_fd+0x64b/0x6c0 [ 155.737257][ T7292] do_sys_openat2+0x113/0x200 [ 155.737270][ T7292] ? __pfx_do_sys_openat2+0x10/0x10 [ 155.737282][ T7292] ? exc_page_fault+0x6a/0xc0 [ 155.737294][ T7292] ? do_user_addr_fault+0xc6f/0x1340 [ 155.737306][ T7292] __x64_sys_openat+0x138/0x170 [ 155.737320][ T7292] do_syscall_64+0x14d/0xf80 [ 155.737331][ T7292] ? trace_irq_disable+0x3b/0x150 [ 155.737340][ T7292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.737348][ T7292] ? clear_bhb_loop+0x40/0x90 [ 155.737360][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.737370][ T7292] RIP: 0033:0x7f18456a7407 [ 155.737384][ T7292] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 155.737393][ T7292] RSP: 002b:00007ffe872f4740 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 155.737406][ T7292] RAX: ffffffffffffffda RBX: 00007f1845e0d880 RCX: 00007f18456a7407 [ 155.737413][ T7292] RDX: 0000000000000000 RSI: 00007ffe872f4f1b RDI: ffffffffffffff9c [ 155.737420][ T7292] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 155.737425][ T7292] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 155.737431][ T7292] R13: 00007ffe872f4990 R14: 00007f1845f74000 R15: 00005614118ad4d8 [ 155.737441][ T7292] [ 155.737445][ T7292] [ 156.031371][ T7292] Allocated by task 5937: [ 156.035685][ T7292] kasan_save_track+0x3e/0x80 [ 156.040355][ T7292] __kasan_kmalloc+0x93/0xb0 [ 156.044936][ T7292] __kmalloc_cache_noprof+0x31c/0x660 [ 156.050300][ T7292] em28xx_v4l2_init+0x10b/0x2e70 [ 156.055228][ T7292] em28xx_init_extension+0x120/0x1c0 [ 156.060509][ T7292] process_scheduled_works+0xb6e/0x18c0 [ 156.066047][ T7292] worker_thread+0xa53/0xfc0 [ 156.070630][ T7292] kthread+0x388/0x470 [ 156.074687][ T7292] ret_from_fork+0x51e/0xb90 [ 156.079267][ T7292] ret_from_fork_asm+0x1a/0x30 [ 156.084025][ T7292] [ 156.086334][ T7292] Freed by task 5937: [ 156.090317][ T7292] kasan_save_track+0x3e/0x80 [ 156.095013][ T7292] kasan_save_free_info+0x46/0x50 [ 156.100055][ T7292] __kasan_slab_free+0x5c/0x80 [ 156.104821][ T7292] kfree+0x1c1/0x630 [ 156.108750][ T7292] em28xx_v4l2_init+0x1683/0x2e70 [ 156.113764][ T7292] em28xx_init_extension+0x120/0x1c0 [ 156.119048][ T7292] process_scheduled_works+0xb6e/0x18c0 [ 156.124588][ T7292] worker_thread+0xa53/0xfc0 [ 156.129172][ T7292] kthread+0x388/0x470 [ 156.133257][ T7292] ret_from_fork+0x51e/0xb90 [ 156.137850][ T7292] ret_from_fork_asm+0x1a/0x30 [ 156.142610][ T7292] [ 156.144922][ T7292] The buggy address belongs to the object at ffff888033c00000 [ 156.144922][ T7292] which belongs to the cache kmalloc-8k of size 8192 [ 156.158968][ T7292] The buggy address is located 1936 bytes inside of [ 156.158968][ T7292] freed 8192-byte region [ffff888033c00000, ffff888033c02000) [ 156.172935][ T7292] [ 156.175251][ T7292] The buggy address belongs to the physical page: [ 156.181658][ T7292] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33c00 [ 156.190410][ T7292] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 156.198896][ T7292] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 156.206441][ T7292] page_type: f5(slab) [ 156.210411][ T7292] raw: 00fff00000000040 ffff88813fea7280 dead000000000100 dead000000000122 [ 156.218985][ T7292] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 156.227559][ T7292] head: 00fff00000000040 ffff88813fea7280 dead000000000100 dead000000000122 [ 156.236217][ T7292] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 156.244879][ T7292] head: 00fff00000000003 ffffea0000cf0001 00000000ffffffff 00000000ffffffff [ 156.253540][ T7292] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 156.262197][ T7292] page dumped because: kasan: bad access detected [ 156.268609][ T7292] page_owner tracks the page as allocated [ 156.274309][ T7292] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5838, tgid 5838 (syz-executor), ts 71150892696, free_ts 43994620189 [ 156.295482][ T7292] post_alloc_hook+0x231/0x280 [ 156.300241][ T7292] get_page_from_freelist+0x24dc/0x2580 [ 156.305778][ T7292] __alloc_frozen_pages_noprof+0x18d/0x380 [ 156.311569][ T7292] allocate_slab+0x77/0x660 [ 156.316067][ T7292] refill_objects+0x331/0x3c0 [ 156.320821][ T7292] __pcs_replace_empty_main+0x2e6/0x730 [ 156.326360][ T7292] __kvmalloc_node_noprof+0x657/0x8a0 [ 156.331721][ T7292] pfifo_fast_init+0x372/0x6c0 [ 156.336476][ T7292] qdisc_create_dflt+0x13b/0x510 [ 156.341400][ T7292] dev_activate+0x378/0x1150 [ 156.345978][ T7292] __dev_open+0x67a/0x830 [ 156.350330][ T7292] __dev_change_flags+0x1f7/0x690 [ 156.355370][ T7292] netif_change_flags+0x88/0x1a0 [ 156.360307][ T7292] do_setlink+0xf82/0x4590 [ 156.364721][ T7292] rtnl_newlink+0x15ad/0x1bb0 [ 156.369391][ T7292] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 156.374319][ T7292] page last free pid 5488 tgid 5488 stack trace: [ 156.380633][ T7292] __free_frozen_pages+0xc2b/0xdb0 [ 156.385740][ T7292] __slab_free+0x263/0x2b0 [ 156.390143][ T7292] qlist_free_all+0x97/0x100 [ 156.394784][ T7292] kasan_quarantine_reduce+0x148/0x160 [ 156.400256][ T7292] __kasan_slab_alloc+0x22/0x80 [ 156.405094][ T7292] kmem_cache_alloc_node_noprof+0x384/0x690 [ 156.410975][ T7292] __alloc_skb+0x1d0/0x7d0 [ 156.415377][ T7292] alloc_skb_with_frags+0xca/0x890 [ 156.420476][ T7292] sock_alloc_send_pskb+0x878/0x990 [ 156.425664][ T7292] unix_dgram_sendmsg+0x460/0x18e0 [ 156.430767][ T7292] sock_write_iter+0x49b/0x4f0 [ 156.435546][ T7292] do_iter_readv_writev+0x619/0x8c0 [ 156.440733][ T7292] vfs_writev+0x33c/0x990 [ 156.445157][ T7292] do_writev+0x154/0x2e0 [ 156.449477][ T7292] do_syscall_64+0x14d/0xf80 [ 156.454065][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.459956][ T7292] [ 156.462272][ T7292] Memory state around the buggy address: [ 156.467887][ T7292] ffff888033c00680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.475980][ T7292] ffff888033c00700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.484116][ T7292] >ffff888033c00780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 156.492160][ T7292] ^ [ 156.496738][ T7292] ffff888033c00800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.504886][ T7292] ffff888033c00880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.512936][ T7292] ================================================================== [ 156.536744][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.552563][ T5880] usb 2-1: Product: syz [ 156.562093][ T5880] usb 2-1: Manufacturer: syz [ 156.567564][ T5880] usb 2-1: SerialNumber: syz [ 156.575545][ T5937] em28xx 5-1:0.132: Remote control support is not available for this card. [ 156.607620][ T796] em28xx 5-1:0.132: Closing input extension [ 156.634695][ T7299] netlink: 164 bytes leftover after parsing attributes in process `syz.0.335'. [ 157.137718][ T7292] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.144980][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 157.153923][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.164065][ T7292] Call Trace: [ 157.167356][ T7292] [ 157.170283][ T7292] vpanic+0x56c/0xa60 [ 157.174301][ T7292] ? __pfx_vpanic+0x10/0x10 [ 157.178901][ T7292] panic+0xc5/0xd0 [ 157.182635][ T7292] ? __pfx_panic+0x10/0x10 [ 157.187062][ T7292] ? preempt_schedule_thunk+0x16/0x30 [ 157.192434][ T7292] ? preempt_schedule_thunk+0x16/0x30 [ 157.197799][ T7292] ? v4l2_fh_open+0xac/0x420 [ 157.202413][ T7292] check_panic_on_warn+0x89/0xb0 [ 157.207373][ T7292] ? v4l2_fh_open+0xac/0x420 [ 157.212049][ T7292] end_report+0x73/0x180 [ 157.216373][ T7292] ? v4l2_fh_open+0xac/0x420 [ 157.220950][ T7292] kasan_report+0x128/0x150 [ 157.225446][ T7292] ? v4l2_fh_open+0xac/0x420 [ 157.230298][ T7292] v4l2_fh_open+0xac/0x420 [ 157.234895][ T7292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.240921][ T7292] em28xx_v4l2_open+0x157/0x9a0 [ 157.245774][ T7292] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.250798][ T7292] v4l2_open+0x1bf/0x3a0 [ 157.255056][ T7292] chrdev_open+0x4cd/0x5e0 [ 157.259468][ T7292] ? __pfx_chrdev_open+0x10/0x10 [ 157.264400][ T7292] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 157.270735][ T7292] ? __pfx_chrdev_open+0x10/0x10 [ 157.275702][ T7292] do_dentry_open+0x785/0x14e0 [ 157.280474][ T7292] vfs_open+0x3b/0x340 [ 157.284555][ T7292] ? path_openat+0x2df0/0x3860 [ 157.289311][ T7292] path_openat+0x2e08/0x3860 [ 157.293904][ T7292] ? __pfx_stack_trace_save+0x10/0x10 [ 157.299271][ T7292] ? stack_depot_save_flags+0x33/0x810 [ 157.304734][ T7292] ? __pfx_path_openat+0x10/0x10 [ 157.309687][ T7292] ? __x64_sys_openat+0x138/0x170 [ 157.314722][ T7292] ? do_syscall_64+0x14d/0xf80 [ 157.319479][ T7292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.325543][ T7292] ? __lock_acquire+0x6b5/0x2cf0 [ 157.330497][ T7292] do_file_open+0x23e/0x4a0 [ 157.334998][ T7292] ? __pfx_do_file_open+0x10/0x10 [ 157.340030][ T7292] ? _raw_spin_unlock+0x28/0x50 [ 157.344880][ T7292] ? alloc_fd+0x64b/0x6c0 [ 157.349304][ T7292] do_sys_openat2+0x113/0x200 [ 157.353982][ T7292] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.359177][ T7292] ? exc_page_fault+0x6a/0xc0 [ 157.363870][ T7292] ? do_user_addr_fault+0xc6f/0x1340 [ 157.369149][ T7292] __x64_sys_openat+0x138/0x170 [ 157.374012][ T7292] do_syscall_64+0x14d/0xf80 [ 157.378662][ T7292] ? trace_irq_disable+0x3b/0x150 [ 157.383699][ T7292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.389756][ T7292] ? clear_bhb_loop+0x40/0x90 [ 157.394426][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.400312][ T7292] RIP: 0033:0x7f18456a7407 [ 157.404736][ T7292] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 157.424626][ T7292] RSP: 002b:00007ffe872f4740 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 157.433045][ T7292] RAX: ffffffffffffffda RBX: 00007f1845e0d880 RCX: 00007f18456a7407 [ 157.441015][ T7292] RDX: 0000000000000000 RSI: 00007ffe872f4f1b RDI: ffffffffffffff9c [ 157.448986][ T7292] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 157.456949][ T7292] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 157.464916][ T7292] R13: 00007ffe872f4990 R14: 00007f1845f74000 R15: 00005614118ad4d8 [ 157.472888][ T7292] [ 157.476262][ T7292] Kernel Offset: disabled [ 157.480699][ T7292] Rebooting in 86400 seconds..