last executing test programs: 9.847544084s ago: executing program 2 (id=512): shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) (async) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x2, 0x2, 0x5, 0x0, 0xc25, 0x7}) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) (async) shmctl$SHM_UNLOCK(r0, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}]}}]}, 0x40}}, 0x4048000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setfsuid(0xffffffffffffffff) (async) setfsuid(0xffffffffffffffff) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7.736775252s ago: executing program 2 (id=519): r0 = open(&(0x7f0000000180)='./bus\x00', 0xe687e, 0x57) utimensat(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x325, 0x70bd2a, 0x0, {0x8}}, 0x14}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x6}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) 7.628321801s ago: executing program 3 (id=520): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46e, 0x4) r1 = socket(0x5, 0x80000, 0x4) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="3303160081fd140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @broadcast}, 0x14) 7.504703129s ago: executing program 2 (id=522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @local, 0x1}, 0x1c) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRESHEX=r4], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4044080) writev(r0, &(0x7f0000000040), 0x2) syz_open_dev$sndmidi(&(0x7f0000000180), 0xac64, 0x80800) 7.00255403s ago: executing program 3 (id=523): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x23, 0x107, 0x70bd2a, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0xc000) keyctl$clear(0x5, 0xffffffffffffffff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000002c0)="b9310900711010a8300000652e670f01c20f300fc73666b8bca08ec00f01cbb805000000b9050000000f01d9c7a72406000000000f011c24c4e169e32d00000000640f01c4b8000000000f23c00f21f835000003000f23f866bad004b8f1000000", 0x61}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}, {0x20, '+'}, {0x20, '#'}, {0x20, '_'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "65781d4a821c4e5fef587a318474b851e2f71101624650f15d4e7cf48dbff8ee90965405"}, 0x5d) ioctl$KVM_CAP_HYPERV_SEND_IPI(r4, 0x4068aea3, 0x0) connect$unix(r8, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.806688538s ago: executing program 4 (id=524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x4804) 6.420203421s ago: executing program 2 (id=525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000008ac054d02400001020301090224000101073002093d0c50f93e51dd51dd0f3a04006f010301021c09210104030122"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x400100, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) unshare(0x22020400) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x2000000d}) read$char_usb(r5, &(0x7f0000000200)=""/89, 0x59) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0x10000004}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4, 0x0, 0xffffffffffffffff}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r9 = accept4$inet6(r8, &(0x7f0000019080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000190c0)=0x1c, 0x0) connect$inet6(r9, &(0x7f0000019100)={0xa, 0x4e21, 0x0, @private1, 0x1}, 0x1c) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) 6.419454297s ago: executing program 4 (id=526): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d001931a0e69ee517d34460bc0600e8ea2c0000a705251e6182949a3651f60a84c9f4d4938000e70e4509c5bb937762376e5eb58a72", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d001931a0e69ee517d34460bc0600e8ea2c0000a705251e6182949a3651f60a84c9f4d4938000e70e4509c5bb937762376e5eb58a72", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0xf, 0x400) (async) syz_open_dev$sg(&(0x7f0000000040), 0xf, 0x400) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0d0000001e0000f52abd7000fbdbdf2500000000"], 0x14}}, 0x20000050) 6.260466645s ago: executing program 4 (id=527): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x80000) sendto$packet(r2, &(0x7f0000000280)="2b3bcac1c5af6126850af2", 0xb, 0x100, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0xfffffff7, 0x6, 0x80000001, 0x1000, 0x5}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x4000010) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x1, {0x1, 0xf0, 0x3}, 0xff}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x10, 0x6f, 0x9, 0x11, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x700, 0x5, 0x7}}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}, {&(0x7f0000000840)=""/144, 0x82}], 0x2, &(0x7f0000001fc0)=""/65, 0xfffffffffffffe76}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r8, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "24051047"}]}}, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@ipv4_getnetconf={0x64, 0x52, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xcc}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x70000000}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7fff}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x10001}]}, 0x64}}, 0x0) 5.672196022s ago: executing program 0 (id=529): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r5, 0x2) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 5.473902745s ago: executing program 1 (id=530): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = open(0x0, 0x64842, 0x389b0d52417bb201) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e23, @empty}}) (async) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000580)) pwritev2(r1, 0x0, 0x0, 0x7000, 0x0, 0x3) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000480)={0x3, @raw_data="fa9582577d9adca1d027282de60de2d47e7403f50d430393c00b6ec1e340a44d8e7e979e838c29aa1f83af9765cb8117f1622282867852267a3955d99954954fc277e913af81cf60c4b1a80b6a174487ed4ca24a52616ab42a3c994ea13d834426ed19d1d0f53d346bcb7d29d5ff82feda2cf901dd6c553254a1212a28de59f866451d370906a32bac103a4d6204e2922eb994d4321dfc702ede03403cf4dc712c333de3f2da45b5575237c1804ad222b02e4b03816c5c899bfe175f1be0fa6754e10161e60b5d88"}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r4, 0x34, 0x0, @val=@perf_event}, 0x18) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async, rerun: 64) r5 = dup(0xffffffffffffffff) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000240)={0x0, @rand_addr, @local}, &(0x7f00000003c0)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x280, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x140, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async, rerun: 64) write$rfkill(r5, &(0x7f0000000400)={0x8, 0x7, 0x2, 0x0, 0x1}, 0x8) (async, rerun: 64) syz_usb_connect$uac1(0x2, 0xf5, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x0, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2800}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x3, 0xd8, 0x9, 0x1, 0x2}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x3, "461c4c9cfa07"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x4, 0x3, 0x5, 0xf9, 0xd}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0xa9, "6750eea6d5"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x5, 0x6, 0x2, 0x9, 0xfa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x1, 0x7, "ca99"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x5, 0x10, "cc"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x2, 0x1, 0x24, "c462"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x2, 0x6, "65e6bb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x4c, 0xc, {0x7, 0x25, 0x1, 0x2, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0x10, 'Y'}, @as_header={0x7, 0x24, 0x1, 0x80, 0xda, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x1, 0x81, 0xf7, "d02eaae3cb086fcf55"}]}, {{0x9, 0x5, 0x82, 0x9, 0x7df, 0x6, 0xaf, 0x8, {0x7, 0x25, 0x1, 0x1, 0x5d, 0x800}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xa, 0xff, 0x0, 0xff, 0x5}, 0x49, &(0x7f00000002c0)={0x5, 0xf, 0x49, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x7f, 0x9, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0xa, 0xa}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x100, 0xf, 0x7f, [0x3fc0, 0x600f, 0x30, 0x0, 0xff3f30, 0xffff0f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x2, 0x9, 0x7ff, 0x3}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1404}}]}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f0000000040)=[0x3, 0x2]) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x2000784) 4.919240698s ago: executing program 1 (id=531): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000001740)=[@set_irq_handler={0xc8, 0x20, {0xf6, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control64=0x2025, 0x6, 0x8, 0x7}}, @wr_crn={0x67, 0x20, {0x3, 0x5}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xbe, 0x7, 0x8, 0x1}}, @wr_drn={0x68, 0x20, {0x1, 0x7}}, @code={0xa, 0x67, {"0f01df48b800000000000000000f23d00f21f835100000000f23f82e660f388037440f22c066470fc77602f2a566ba400066b8002066efb96b0900000f320f01b02b970000b9a50a0000b828b60000ba000000000f30"}}, @code={0xa, 0x43, {"640f01c2c4c3791d43000bb9be0800000f32450f01c366b8ce008ed0b8010000000f01c13e410f2158660ff23e0f080f21d8"}}], 0x1b2}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000001540)={0xa100, r1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xfffffffffffffffb, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2c19d1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x58, r6, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8}]}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000000)={0x1, 0x900, {0x4}}) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000540)={{r8}, r9, 0x0, @unused=[0x4, 0xcf, 0x1, 0x4], @subvolid=0x3}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 4.332176472s ago: executing program 1 (id=532): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) (async) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0xf, 0x10001) (async) r5 = syz_open_dev$loop(&(0x7f0000000040), 0xf, 0x10001) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r9, 0x0, 0x2, 0x0) (async) wait4(r9, 0x0, 0x2, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r8, 0x6989dd5c, {0x0, 0x0, 0x0, 0xeae4, 0xffffffff, 0x0, 0x5, 0x4, 0x0, "a510ea0a0ed6290c4733308a9c5577ba4abfa7c0bdaaa124c7bfd5582da1c040b8a3d5f37f5af9cc4b03183541b3355e9a1b3fa46f0b09589e5362e6eb3faa92", "76550dbaf44662abf84693e791bbaffc424039dbdfba27898d7df0e077771b695f9c96c7b588395707133a4a1f49d612a5d1daa67db8c95d553b469f51f9b248", "ff6ed4dc7c41a3bb4ce2aaf0d26fb51b627a18e61a1afc0655ebed2be965387e", [0x4, 0x6]}}) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' '], 0x86) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r10, r4, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x400, 0x60080) (async) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x400, 0x60080) 4.15740488s ago: executing program 4 (id=533): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r2}) (async) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000080)="99", 0x1) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async, rerun: 64) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00') (rerun: 64) 3.561026217s ago: executing program 3 (id=534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb166d37da496ee8d}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_getnexthop={0x20, 0x6a, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x22000081}, 0x20000080) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x5], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x18}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7f}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x48, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x1000, 0x8, 0x9, 0x1, 0x0, 0x40, 0x0, 0x9, 0x20, 0x4}, {0x5000, 0x4, 0x4, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x3000, 0x0, 0xa, 0x7a, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1, 0xfc}, {0x0, 0xeeee0000, 0xa, 0x4, 0x2, 0x7, 0xa0, 0x20, 0x4, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x6}, {0xdddd1000}, 0x40000000, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x7ffffffe, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.356281049s ago: executing program 0 (id=535): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10ca, &(0x7f0000000000)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000080)=0xff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.662239649s ago: executing program 4 (id=536): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x24000041) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000280)={0x0, 0x400000b4, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000005, 0x8010, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x29}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x3c, 0x0, '\x00', [@padn]}, @dstopts={0x16, 0x1e5, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @generic={0x5, 0x26, "0f3a11a53fd31f165302088693e344625bb102d43ee33c1e88c9425dd667e3d9c117ac38fe1b"}, @generic={0x22, 0xef0, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x1000, 0x3}, 0x20) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x7ff) socket$nl_generic(0x10, 0x3, 0x10) 2.388655146s ago: executing program 3 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @phonet={0x23, 0xc0, 0x10, 0x4}, @tipc=@name={0x1e, 0x2, 0x0, {{0x2, 0x2}, 0x4}}, @isdn={0x22, 0x3, 0x0, 0x2, 0xfe}, 0xfffb, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7fffffffffffffff, 0x100}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.192253377s ago: executing program 2 (id=538): r0 = fanotify_init(0x200, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) (async) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000040)={0x8, @vbi={0x4, 0xfff, 0xc64d, 0x32314d54, [0xffff, 0x4], [0x3, 0xbe], 0x1}}) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000eb7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x7d, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x17, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xf000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0x2, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x1000, 0xe, 0x2, 0x3, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xeeef0000, 0x3, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0xc0010005, 0x0, 0x6000, 0x100449, 0x5, 0xa800, 0x8000900, 0x0, [0x6, 0x2, 0x3, 0x1]}) r6 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r7 = dup(r6) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/sync_on_suspend', 0x40901, 0x0) write$FUSE_DIRENT(r8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r8], 0x200001d0) (async) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) (async) sendmsg$can_bcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="04", @ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001000000040000e0150104"], 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x8090) fanotify_mark(r0, 0x1, 0x48000046, r7, 0x0) (async, rerun: 64) r11 = dup(r6) (rerun: 64) write$binfmt_elf64(r11, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/888], 0x378) (async) syz_clone3(&(0x7f0000000280)={0x2c024500, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x24}, &(0x7f0000000100)=""/207, 0xcf, &(0x7f0000000300)=""/12, &(0x7f0000000240)=[0x0], 0x1, {r7}}, 0x58) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.824775616s ago: executing program 2 (id=539): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x189842, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xfffffe0000000002, 0x3fb, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x123) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB="4f2719b462058cdca636e8159e76a03068ea82919dbedd5150fcf2f14c544504fca307e0469bcf0b4986d3b3b3af8a4ccaba876380ef574201fd733dd568354a9fa86e246398525a446ec219df986eb796976c9fa571704df0ba6e2fee01fdadd19fde088ef80f8b5eeb9154888a098e69a0014997fecfd2746d4be29a81763652e7aa85ccffbb5dbaa2349e97576b1abefa3fcc7a70d8a66173b5e2996fd61d49458bcfc4f9ce31c05e9a22d8a229bbd3c1fe09093be10538278a3f35bee2db016d2b", @ANYRES8=r3, @ANYRES8=r3]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0xffffffffffffffe1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100020000004043554d00000000000001090224000100003000090400907f09000000092100000001220a0009058103"], 0x0) syz_usb_control_io(r7, &(0x7f0000000380)={0xffffff79, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0xc, 0x8, "6c749423", "04010100"}}, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, 0x0, r4}, 0x68) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x3e9b, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r8, 0x2219, 0x7721, 0x12, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 1.748157195s ago: executing program 3 (id=540): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@local, 0x8000000}, @any, 0x0, 0x0, 0x421}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x400000) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r6 = openat$cgroup_int(r4, &(0x7f0000000100)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000200)) r8 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r8, 0x2007ffd) sendfile(r6, r7, 0x0, 0x1000a3) 1.660214767s ago: executing program 1 (id=541): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) (async) r2 = dup(0xffffffffffffffff) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xf8d, 0x6, 0x81, 0x40002, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x3}, 0x50) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x3, 0xe616, 0xd670, 0x1010, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffff7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0xd5c2, 0xb1, &(0x7f00000000c0)=""/177, 0x8965387868c11aef, 0x99, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x0, 0x7, 0x81}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f00000003c0)=[r1, r2, r3, r4, r5], &(0x7f0000000400)=[{0x0, 0x1, 0xc, 0x8}, {0x5, 0x1, 0x8}, {0x4, 0x1, 0x1}, {0x5, 0x1, 0x2, 0x2}, {0x3, 0x1, 0xc, 0x8}, {0x5, 0x5, 0xa, 0x7}, {0x0, 0x4, 0x2, 0x4}, {0x5, 0x4, 0x2, 0x1}, {0x2, 0x5, 0xa, 0x8}, {0x1, 0x4, 0x0, 0xb}], 0x10, 0x5}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009937f0103c41d281e8250102030109021b0002000000000904d5000005de67000904008000ff"], 0x0) 1.468821726s ago: executing program 4 (id=542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d05}]}) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xe) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000ba7000/0x400000)=nil) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000100)={0xeeee0000, 0x110000, 0x8}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010066d5067f102505a8a44000010203010902"], &(0x7f0000000540)={0x0, 0x0, 0x139, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}) 1.239091381s ago: executing program 0 (id=543): syz_emit_ethernet(0x76, &(0x7f0000000500)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x1, {0x6, 0x6, "c1665d", 0xfffb, 0x0, 0x1, @loopback, @mcast2, [@routing={0x33, 0x0, 0x0, 0x46}, @fragment={0x33, 0x0, 0xcf, 0x1, 0x0, 0x1e, 0x64}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x17f, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa6286dd604dd31801490600fc010000000000000000000000000000fe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYBLOB="7002000490"], 0x0) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, r1) 1.000528842s ago: executing program 1 (id=544): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x27) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) pipe2(&(0x7f0000000000), 0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)={0x86c9460748f085ce}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000010}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000200)={0xe0000003}) 706.807154ms ago: executing program 0 (id=545): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0xfd, 0xd, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xfffd, @dev}}]}, 0x58}, 0x1, 0x7, 0x0, 0x20000000}, 0x0) 376.810846ms ago: executing program 3 (id=546): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001500)={0x10001, 0x8, 0x40}) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0x0, 0x0, 0x1, 0x99, 0x8, 0xd21, 0x152, 0x6, 0x101, 0x9, 0x65c}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000001500)={0x10001, 0x8, 0x40}) (async) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000140)={r2, 0x0, 0x0, 0x1, 0x99, 0x8, 0xd21, 0x152, 0x6, 0x101, 0x9, 0x65c}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) (async) 141.015131ms ago: executing program 0 (id=547): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x2e) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) 63.711083ms ago: executing program 1 (id=548): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x9, 0x34524742, 0x280, 0x7, 0x0, @stepwise={{0x63, 0x1}, {0x2d, 0x7ff}, {0x3, 0x1}}}) socket$rxrpc(0x21, 0x2, 0xa) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = msgget$private(0x0, 0x0) (rerun: 32) msgsnd(r6, &(0x7f0000000240)=ANY=[@ANYRES16], 0x2000, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180500000020732500000000002020207b1af8ff000000003fa100000000000007810000f8ffffffb702000008000000b703000000000028850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94) (async, rerun: 64) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 64) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) r9 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r9}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r8}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240640c4) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2b}, 0x94) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(r6, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) (async) msgctl$IPC_SET(r6, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x13, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r11, 0x2ce18, 0x16201}}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) (async, rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f0000000080)={0x2c, 0x1, '\x00', [@ra={0x5, 0x2, 0xded6}, @jumbo={0xc2, 0x4, 0x7ff}]}, 0x18) (rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 0s ago: executing program 0 (id=549): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x200000000003, 0x87) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x80, 0x6, 0x0, @empty, @local, 0x80, 0x0, 0x2, 0x89}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x7, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}]}, 0x38}, 0x1, 0x400000000000000}, 0x0) syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r5, 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r6 = dup2(r3, r3) socket(0x2b, 0x1, 0x1) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) r7 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r7, 0x851, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20008041) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): .464541][ T5970] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 142.615198][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 142.703502][ T5916] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 142.712606][ T5916] usb 1-1: config 0 has no interface number 0 [ 142.723516][ T5916] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 142.737859][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.753611][ T5916] usb 1-1: Product: syz [ 142.764556][ T5916] usb 1-1: Manufacturer: syz [ 142.773256][ T5916] usb 1-1: SerialNumber: syz [ 142.794023][ T5970] usb 3-1: config 0 has an invalid interface number: 234 but max is 0 [ 142.811508][ T5916] usb 1-1: config 0 descriptor?? [ 142.820022][ T5970] usb 3-1: config 0 has no interface number 0 [ 142.833218][ T5916] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 142.842894][ T5970] usb 3-1: config 0 interface 234 has no altsetting 0 [ 142.854095][ T5970] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31 [ 142.863547][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.874830][ T5970] usb 3-1: Product: syz [ 142.883137][ T5970] usb 3-1: Manufacturer: syz [ 142.903479][ T5970] usb 3-1: SerialNumber: syz [ 142.913812][ T5970] usb 3-1: config 0 descriptor?? [ 143.096874][ T5916] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 143.115741][ T5916] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 143.257469][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 143.317411][ T6568] pim6reg: entered allmulticast mode [ 143.339137][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 143.461815][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 143.475746][ T5915] usb 1-1: USB disconnect, device number 9 [ 143.498771][ T5915] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 143.538006][ T5970] pegasus 3-1:0.234: probe with driver pegasus failed with error -71 [ 143.587451][ T5915] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 143.611708][ T5915] quatech2 1-1:0.51: device disconnected [ 143.637680][ T5970] usb 3-1: USB disconnect, device number 12 [ 143.665940][ T5916] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 143.828202][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.837361][ T5916] usb 2-1: config 1 has no interface number 0 [ 143.843770][ T5916] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.855223][ T5916] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 143.867560][ T5916] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 143.878394][ T5916] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 143.889867][ T5916] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.904756][ T5916] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.914496][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.922670][ T5916] usb 2-1: Product: syz [ 143.927392][ T5916] usb 2-1: Manufacturer: syz [ 143.932170][ T5916] usb 2-1: SerialNumber: syz [ 143.942822][ T6580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.163547][ T6580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.404308][ T6580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.860513][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.871853][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.888568][ T6580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.899198][ T5916] cdc_ncm 2-1:1.1: bind() failure [ 145.039057][ T6596] netlink: 'syz.4.171': attribute type 3 has an invalid length. [ 145.088924][ T6596] netlink: 46 bytes leftover after parsing attributes in process `syz.4.171'. [ 145.113328][ T5901] usb 2-1: USB disconnect, device number 16 [ 145.642807][ T5916] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.765024][ T5901] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 145.810704][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 145.823326][ T5916] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 145.852645][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.874920][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.912159][ T6615] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 145.914776][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.945270][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 145.953895][ T5916] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.967727][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.979347][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.994709][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.994963][ T5901] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 146.020896][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.024604][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.048595][ T5901] usb 3-1: config 0 descriptor?? [ 146.137307][ T6615] bond1: entered promiscuous mode [ 146.142449][ T6615] bond1: entered allmulticast mode [ 146.266623][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.298160][ T5916] usb 4-1: usb_control_msg returned -32 [ 146.312454][ T5916] usbtmc 4-1:16.0: can't read capabilities [ 146.531830][ T5901] savu 0003:1E7D:2D5A.0004: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 146.615738][ T5915] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 146.681891][ T5901] usb 3-1: USB disconnect, device number 13 [ 146.814708][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 147.020617][ T5915] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 147.029744][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.038459][ T5915] usb 5-1: Product: syz [ 147.042661][ T5915] usb 5-1: Manufacturer: syz [ 147.094251][ T5915] usb 5-1: SerialNumber: syz [ 147.127650][ T5915] usb 5-1: config 0 descriptor?? [ 147.178419][ T5915] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 148.375232][ T5927] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 148.554502][ T5927] usb 3-1: device descriptor read/64, error -71 [ 148.834548][ T5927] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 149.055867][ T5927] usb 3-1: device descriptor read/64, error -71 [ 149.185001][ T5927] usb usb3-port1: attempt power cycle [ 149.249204][ T5915] gspca_m5602: Failed to find a sensor [ 149.257544][ T5915] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 149.291115][ T5915] usb 5-1: USB disconnect, device number 11 [ 149.463565][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.181'. [ 149.604522][ T5927] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 149.628214][ T5927] usb 3-1: device descriptor read/8, error -71 [ 149.684522][ T5915] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 149.867811][ T5915] usb 5-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 149.884795][ T5927] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 149.893772][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.906843][ T5915] usb 5-1: Product: syz [ 149.916147][ T5927] usb 3-1: device descriptor read/8, error -71 [ 149.924543][ T5915] usb 5-1: Manufacturer: syz [ 149.929344][ T5915] usb 5-1: SerialNumber: syz [ 149.946444][ T5915] usb 5-1: config 0 descriptor?? [ 149.970264][ T5915] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 150.037105][ T5927] usb usb3-port1: unable to enumerate USB device [ 150.277132][ T5915] pwc: Failed to set LED on/off time (-71) [ 150.296322][ T5915] pwc: send_video_command error -71 [ 150.301655][ T5915] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 150.336631][ T6650] netlink: 10 bytes leftover after parsing attributes in process `syz.0.183'. [ 150.354696][ T5915] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 150.384115][ T5915] usb 5-1: USB disconnect, device number 12 [ 150.403591][ T6654] xt_l2tp: v2 tid > 0xffff: 1114244 [ 150.414376][ T6654] xt_TCPMSS: Only works on TCP SYN packets [ 150.734619][ T5915] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 150.904675][ T5915] usb 5-1: Using ep0 maxpacket: 8 [ 150.919601][ T5915] usb 5-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 150.939428][ T5915] usb 5-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 150.951330][ T5915] usb 5-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 150.964876][ T5915] usb 5-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 150.980614][ T5915] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 150.990530][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.998969][ T5915] usb 5-1: Product: syz [ 151.003465][ T5915] usb 5-1: Manufacturer: syz [ 151.009120][ T5915] usb 5-1: SerialNumber: syz [ 151.030419][ T5915] hso 5-1:6.0: Can't find BULK OUT endpoint [ 151.231765][ T9] usb 5-1: USB disconnect, device number 13 [ 151.634873][ T5915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 151.784603][ T5915] usb 2-1: device descriptor read/64, error -71 [ 151.875320][ T5927] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 152.034755][ T5915] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 152.054515][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 152.062540][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.072646][ T5927] usb 3-1: config 6 has an invalid interface number: 41 but max is 1 [ 152.081654][ T5927] usb 3-1: config 6 has an invalid interface number: 6 but max is 1 [ 152.092731][ T5927] usb 3-1: config 6 has no interface number 0 [ 152.099341][ T5927] usb 3-1: config 6 has no interface number 1 [ 152.109210][ T5927] usb 3-1: config 6 interface 41 has no altsetting 0 [ 152.116408][ T5927] usb 3-1: config 6 interface 6 has no altsetting 0 [ 152.127204][ T5927] usb 3-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 152.137723][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.146619][ T5927] usb 3-1: Product: syz [ 152.151257][ T5927] usb 3-1: Manufacturer: syz [ 152.156598][ T5927] usb 3-1: SerialNumber: syz [ 152.164557][ T5915] usb 2-1: device descriptor read/64, error -71 [ 152.186225][ T6627] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 152.204596][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 152.241216][ T5888] usb 4-1: USB disconnect, device number 8 [ 152.282394][ T5915] usb usb2-port1: attempt power cycle [ 152.374559][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 152.388577][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 152.388608][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.388626][ T9] usb 5-1: Product: syz [ 152.388639][ T9] usb 5-1: Manufacturer: syz [ 152.388652][ T9] usb 5-1: SerialNumber: syz [ 152.399546][ T9] usb 5-1: config 0 descriptor?? [ 152.638239][ T5915] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 152.695477][ T5915] usb 2-1: device descriptor read/8, error -71 [ 152.827667][ T9] airspy 5-1:0.0: Board ID: 00 [ 152.832698][ T9] airspy 5-1:0.0: Firmware version: [ 152.996356][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 153.047528][ T5915] usb 2-1: device descriptor read/8, error -71 [ 153.185284][ T5915] usb usb2-port1: unable to enumerate USB device [ 153.537074][ T5927] smsusb:smsusb_probe: board id=15, interface number 41 [ 153.567604][ T5927] smsusb:smsusb_probe: board id=15, interface number 6 [ 153.582786][ T5927] smsusb:smsusb_probe: Device initialized with return code -19 [ 153.598506][ T6698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.657161][ T6698] bridge_slave_0: left allmulticast mode [ 153.662909][ T6698] bridge_slave_0: left promiscuous mode [ 153.712390][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.746017][ T5927] usb 3-1: USB disconnect, device number 18 [ 153.807452][ T6698] bridge_slave_1: left allmulticast mode [ 153.833693][ T9] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 153.852377][ T6698] bridge_slave_1: left promiscuous mode [ 153.860112][ T9] airspy 5-1:0.0: Registered as swradio24 [ 153.874984][ T9] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 153.875432][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.926763][ T9] usb 5-1: USB disconnect, device number 14 [ 153.977802][ T6698] bond0: (slave bond_slave_0): Releasing backup interface [ 154.062782][ T6698] bond0: (slave bond_slave_1): Releasing backup interface [ 154.152757][ T6698] team0: Port device team_slave_0 removed [ 154.231700][ T6698] team0: Port device team_slave_1 removed [ 154.245925][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.260359][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.285307][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.292902][ T6698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.314071][ T6698] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.357105][ T6699] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 154.384165][ T6699] macvtap1: entered promiscuous mode [ 154.410447][ T6699] macvtap1: entered allmulticast mode [ 154.426787][ T6699] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 154.464676][ T5901] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 154.636363][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 154.650824][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 154.668926][ T5901] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 154.684707][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.704562][ T5927] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 154.734317][ T5901] usb 3-1: config 0 descriptor?? [ 154.741844][ T6707] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.754647][ T5914] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 154.898447][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.921045][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 154.951033][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.986174][ T5914] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 155.005899][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 155.016554][ T5914] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.019645][ T5927] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.033953][ T5914] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.045132][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 155.076846][ T5901] usb 3-1: USB disconnect, device number 19 [ 155.084797][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.115566][ T5927] usb 5-1: config 0 descriptor?? [ 155.178701][ T5914] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.202932][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.214531][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.238615][ T6723] batman_adv: batadv0: Adding interface: dummy0 [ 155.245020][ T6723] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.318986][ T5914] usb 2-1: Product: syz [ 155.323584][ T5914] usb 2-1: Manufacturer: syz [ 155.328660][ T5914] usb 2-1: SerialNumber: syz [ 155.348215][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 155.387455][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 155.405209][ T6723] batman_adv: batadv0: Interface activated: dummy0 [ 155.457258][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.514945][ T5927] usb 5-1: USB disconnect, device number 15 [ 155.558873][ T6724] batadv0: mtu less than device minimum [ 155.566453][ T6724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.578788][ T6724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.589163][ T6714] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 155.589185][ T6714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.199'. [ 155.607957][ T6724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.620173][ T6724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.632310][ T6724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.633922][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.646973][ T6724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.664460][ T6724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 155.696237][ T9] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 155.708582][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.759273][ T5901] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 155.772046][ T9] usb 1-1: config 0 descriptor?? [ 155.907409][ T5914] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 155.929205][ T6714] dummy0: entered promiscuous mode [ 155.943250][ T6714] bridge0: port 3(dummy0) entered blocking state [ 155.952808][ T6714] bridge0: port 3(dummy0) entered disabled state [ 155.980611][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 155.984369][ T6714] dummy0: entered allmulticast mode [ 155.994562][ T5927] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 156.014697][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 156.037152][ T5901] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 156.047423][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.067719][ T6714] bridge0: port 3(dummy0) entered blocking state [ 156.074312][ T6714] bridge0: port 3(dummy0) entered forwarding state [ 156.093183][ T5901] usb 3-1: config 0 descriptor?? [ 156.194496][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 156.206137][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.224568][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.244559][ T5927] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 156.270032][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.303251][ T5927] usb 5-1: config 0 descriptor?? [ 156.527254][ T5901] hid-multitouch 0003:0EEF:72C4.0005: reserved main item tag 0xd [ 156.564972][ T5901] hid-multitouch 0003:0EEF:72C4.0005: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 156.741688][ T5914] usb 2-1: current rate 9315074 is different from the runtime rate 9338507 [ 156.785756][ T795] usb 3-1: USB disconnect, device number 20 [ 156.796590][ T5927] kye 0003:0458:5016.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 156.823430][ T6726] fido_id[6726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 156.841436][ T5927] kye 0003:0458:5016.0006: unknown main item tag 0x0 [ 156.869899][ T5927] kye 0003:0458:5016.0006: hidraw1: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 156.927746][ T5927] kye 0003:0458:5016.0006: tablet-enabling feature report not found [ 156.961147][ T5927] kye 0003:0458:5016.0006: tablet enabling failed [ 157.044147][ T5927] usb 5-1: USB disconnect, device number 16 [ 157.133180][ T6729] fido_id[6729]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 157.185607][ T5914] usb 2-1: USB disconnect, device number 21 [ 157.269821][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.771366][ T6733] sit1: entered promiscuous mode [ 158.066138][ T5927] usb 1-1: USB disconnect, device number 10 [ 158.211741][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 158.221203][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 158.272079][ T3963] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.281790][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 158.291744][ T3963] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.302239][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 158.312542][ T3963] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.323821][ T3963] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.414789][ T5927] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 158.438640][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 158.472302][ T6759] ptrace attach of "./syz-executor exec"[6762] was attempted by "./syz-executor exec"[6759] [ 158.487327][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 158.594771][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 158.598896][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 158.611946][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.633047][ T5927] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 158.678026][ T5927] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 158.689010][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.698488][ T30] audit: type=1326 audit(1766035339.314:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 158.741400][ T5927] usb 2-1: Product: syz [ 158.765077][ T5927] usb 2-1: Manufacturer: syz [ 158.769748][ T5927] usb 2-1: SerialNumber: syz [ 158.778794][ T30] audit: type=1326 audit(1766035339.354:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 158.830314][ T30] audit: type=1326 audit(1766035339.354:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 158.859283][ T6768] program syz.4.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.895205][ T6768] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 158.913140][ T30] audit: type=1326 audit(1766035339.354:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 158.952755][ T30] audit: type=1326 audit(1766035339.354:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 158.994879][ T44] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 159.037454][ T5927] kvaser_usb 2-1:251.0: error -ENODEV: Cannot get usb endpoint(s) [ 159.298040][ T30] audit: type=1326 audit(1766035339.354:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 159.321481][ T5927] usb 2-1: USB disconnect, device number 22 [ 159.337723][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 159.366435][ T44] usb 3-1: config 162 has an invalid interface number: 20 but max is 0 [ 159.402190][ T44] usb 3-1: config 162 has no interface number 0 [ 159.412382][ T30] audit: type=1326 audit(1766035339.354:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 159.435168][ T44] usb 3-1: config 162 interface 20 has no altsetting 0 [ 159.449225][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 159.487717][ T44] usb 3-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=ec.eb [ 159.498988][ T30] audit: type=1326 audit(1766035339.354:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 159.522232][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.539024][ T44] usb 3-1: Product: syz [ 159.548409][ T44] usb 3-1: Manufacturer: syz [ 159.558668][ T44] usb 3-1: SerialNumber: syz [ 159.565767][ T30] audit: type=1326 audit(1766035339.354:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 159.654625][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.662503][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.724173][ T30] audit: type=1326 audit(1766035339.354:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.2.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 160.028166][ T6788] xt_hashlimit: max too large, truncated to 1048576 [ 160.090550][ T6789] binder_alloc: 6787: pid 6787 spamming oneway? 1 buffers allocated for a total size of 4096 [ 160.234946][ T6788] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 160.288964][ T44] HFC-S_USB 3-1:162.20: probe with driver HFC-S_USB failed with error -5 [ 160.330547][ T44] usb 3-1: USB disconnect, device number 21 [ 160.338824][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.376300][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.583292][ T6768] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 160.596961][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.648448][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.678472][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.711756][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.732069][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'. [ 161.117772][ T6809] program syz.2.221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.254566][ T44] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.271890][ T6815] syzkaller0: entered promiscuous mode [ 161.278296][ T6815] syzkaller0: entered allmulticast mode [ 161.409484][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.428287][ T44] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.440863][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.470881][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.494346][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.511041][ T44] usb 1-1: Product: syz [ 161.516004][ T44] usb 1-1: Manufacturer: syz [ 161.520894][ T44] usb 1-1: SerialNumber: syz [ 161.532131][ T44] hub 1-1:1.0: bad descriptor, ignoring hub [ 161.539252][ T44] hub 1-1:1.0: probe with driver hub failed with error -5 [ 161.740466][ T44] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 161.844685][ T6681] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.996740][ T6830] sctp: [Deprecated]: syz.0.222 (pid 6830) Use of int in maxseg socket option. [ 161.996740][ T6830] Use struct sctp_assoc_value instead [ 162.028280][ T6681] usb 4-1: Using ep0 maxpacket: 16 [ 162.043998][ T6681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.058923][ T6681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.059627][ T44] usb 1-1: USB disconnect, device number 11 [ 162.069829][ T6681] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.089832][ T6681] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.100522][ T6681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.140059][ T6681] usb 4-1: config 0 descriptor?? [ 162.559492][ T6681] usbhid 4-1:0.0: can't add hid device: -71 [ 162.580083][ T6681] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 162.598059][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 162.615688][ T6681] usb 4-1: USB disconnect, device number 9 [ 162.708266][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 162.766401][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.776286][ T44] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.792764][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.809454][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 163.254623][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.274272][ T44] usb 1-1: Product: syz [ 163.325169][ T44] usb 1-1: Manufacturer: syz [ 163.340587][ T44] usb 1-1: SerialNumber: syz [ 163.395477][ T44] hub 1-1:1.0: bad descriptor, ignoring hub [ 163.411357][ T44] hub 1-1:1.0: probe with driver hub failed with error -5 [ 163.464883][ T5888] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 163.609805][ T6805] usblp0: removed [ 163.693576][ T6878] tipc: Started in network mode [ 163.707831][ T44] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 163.726834][ T6878] tipc: Node identity 7f000001, cluster identity 4711 [ 163.854523][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 163.876916][ T44] usb 1-1: USB disconnect, device number 12 [ 163.885235][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.915350][ T6878] tipc: Enabling of bearer rejected, failed to enable media [ 163.924967][ T6883] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 163.950163][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.980783][ T44] usblp0: removed [ 164.007959][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 164.044990][ T5888] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.064689][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.080762][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 164.080781][ T30] audit: type=1326 audit(1766035344.694:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e78f749 code=0x7ffc0000 [ 164.141354][ T5888] usb 5-1: config 0 descriptor?? [ 164.305327][ T30] audit: type=1326 audit(1766035344.734:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e78f749 code=0x7ffc0000 [ 164.455042][ T44] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 164.681574][ T6830] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 164.706435][ T6830] macvtap1: left promiscuous mode [ 164.714071][ T6830] macvtap1: left allmulticast mode [ 164.800776][ T44] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 164.974286][ T5888] HID 045e:07da: Invalid code 65791 type 1 [ 164.984680][ T44] usb 4-1: config 0 has no interface number 0 [ 165.028315][ T5888] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input5 [ 165.040026][ T44] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 165.199965][ T44] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.516844][ T44] usb 4-1: config 0 interface 113 has no altsetting 0 [ 165.533064][ T30] audit: type=1326 audit(1766035344.734:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff88e791667 code=0x7ffc0000 [ 165.595785][ T5888] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 165.671233][ T1917] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.707766][ T44] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 165.737621][ T1917] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.751511][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.779561][ T44] usb 4-1: Product: syz [ 165.801043][ T30] audit: type=1326 audit(1766035344.734:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff88e7915dc code=0x7ffc0000 [ 165.845247][ T44] usb 4-1: Manufacturer: syz [ 165.872286][ T44] usb 4-1: SerialNumber: syz [ 165.945798][ T44] usb 4-1: config 0 descriptor?? [ 165.980048][ C1] usb 4-1: NFC: Urb failure (status -71) [ 165.994639][ T30] audit: type=1326 audit(1766035344.734:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff88e791514 code=0x7ffc0000 [ 166.043580][ T44] usb 4-1: NFC: Unable to get FW version [ 166.058498][ T44] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 166.134480][ T30] audit: type=1326 audit(1766035344.734:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff88e791514 code=0x7ffc0000 [ 166.254615][ T30] audit: type=1326 audit(1766035344.734:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff88e78e3aa code=0x7ffc0000 [ 166.284559][ T30] audit: type=1326 audit(1766035344.734:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e78f749 code=0x7ffc0000 [ 166.488089][ T1917] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.524513][ T5930] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 166.571776][ T1917] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.619773][ T30] audit: type=1326 audit(1766035344.734:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88e78f749 code=0x7ffc0000 [ 166.802027][ T30] audit: type=1326 audit(1766035344.734:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff88e78f749 code=0x7ffc0000 [ 167.031702][ T6906] IPVS: set_ctl: invalid protocol: 33627 172.30.0.1:20004 [ 167.469921][ T44] usb 5-1: USB disconnect, device number 17 [ 168.734625][ T5888] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 168.860573][ T44] usb 4-1: USB disconnect, device number 10 [ 168.934560][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 168.967501][ T5888] usb 3-1: config 0 has no interfaces? [ 168.976154][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 168.988442][ T5888] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 169.034795][ T5888] usb 3-1: Manufacturer: syz [ 169.046319][ T5917] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 169.065777][ T5888] usb 3-1: config 0 descriptor?? [ 169.113636][ T6946] netlink: 'syz.1.251': attribute type 2 has an invalid length. [ 169.141564][ T6946] : entered promiscuous mode [ 169.292600][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 169.529496][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 169.547010][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.658968][ T5917] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 169.672968][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.754252][ T5917] usb 1-1: Product: syz [ 169.810688][ T5917] usb 1-1: Manufacturer: syz [ 169.815726][ T5917] usb 1-1: SerialNumber: syz [ 169.850902][ T5917] usb 1-1: config 0 descriptor?? [ 169.869890][ T5917] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 169.900200][ T5917] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 170.375048][ T5914] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 170.521797][ T5917] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 170.530364][ T5917] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 170.544802][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 170.554079][ T5914] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 170.566072][ T5914] usb 5-1: config 0 has no interface number 0 [ 170.581507][ T5914] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 170.603061][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.620755][ T5914] usb 5-1: Product: syz [ 170.632054][ T5914] usb 5-1: Manufacturer: syz [ 170.641552][ T5914] usb 5-1: SerialNumber: syz [ 170.666337][ T5914] usb 5-1: config 0 descriptor?? [ 170.702533][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input6 [ 170.754940][ T5970] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 170.927533][ T5970] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 170.953743][ T5970] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 170.967747][ T6944] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 171.013932][ T5970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.051154][ T5970] usb 4-1: config 0 has no interface number 0 [ 171.075672][ T5970] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 171.124870][ T5970] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.153024][ T5970] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 171.199985][ T5970] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 171.230453][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.283994][ T5970] usb 4-1: config 0 descriptor?? [ 171.368404][ T5970] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 171.516522][ T6623] usb 4-1: Failed to submit usb control message: -71 [ 171.517658][ T5970] usb 4-1: USB disconnect, device number 11 [ 171.530406][ T6623] usb 4-1: unable to send the bmi data to the device: -71 [ 171.578452][ T6623] usb 4-1: unable to get target info from device [ 171.593997][ T6623] usb 4-1: could not get target info (-71) [ 171.602067][ T6623] usb 4-1: could not probe fw (-71) [ 171.788698][ T6879] usb 5-1: USB disconnect, device number 18 [ 171.977480][ T5917] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 171.988733][ T5917] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 172.015456][ T5917] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 172.043197][ T5917] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 172.073700][ T5917] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 172.100709][ T5917] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 172.147193][ T5917] usb 1-1: USB disconnect, device number 13 [ 172.192740][ T5888] usb 3-1: USB disconnect, device number 22 [ 172.510323][ T6972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.598465][ T6980] loop6: detected capacity change from 0 to 524287999 [ 172.617020][ T6972] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.617523][ T6985] vim2m vim2m.0: vidioc_s_fmt queue busy [ 172.701915][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.259'. [ 172.728143][ T6988] netlink: 48 bytes leftover after parsing attributes in process `syz.2.258'. [ 172.969590][ T6972] net_ratelimit: 12 callbacks suppressed [ 172.969602][ T6972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.993926][ T6980] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4113724763 (65819596208 ns) > initial count (25955439072 ns). Using initial count to start timer. [ 173.701822][ T6994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.185661][ T5914] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 174.324902][ T5914] usb 5-1: device descriptor read/64, error -71 [ 174.364504][ T44] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 174.524579][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 174.547926][ T44] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 174.564731][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.573028][ T44] usb 2-1: Product: syz [ 174.578205][ T44] usb 2-1: Manufacturer: syz [ 174.582868][ T44] usb 2-1: SerialNumber: syz [ 174.595169][ T5914] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 174.607593][ T44] usb 2-1: config 0 descriptor?? [ 174.626952][ T44] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 174.744645][ T6879] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 174.744985][ T5914] usb 5-1: device descriptor read/64, error -71 [ 174.831896][ T44] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 174.844885][ T44] visor 2-1:0.0: probe with driver visor failed with error -5 [ 174.865181][ T5914] usb usb5-port1: attempt power cycle [ 174.907195][ T6879] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.923690][ T6879] usb 3-1: config 0 has no interface number 0 [ 174.941864][ T6879] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.963428][ T6879] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 174.985633][ T6879] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 175.004680][ T6879] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 175.026446][ T6879] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 175.044614][ T6879] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.068314][ T5888] usb 2-1: USB disconnect, device number 23 [ 175.074515][ T6879] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 175.107938][ T6879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.120977][ T6879] usb 3-1: config 0 descriptor?? [ 175.128043][ T7014] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 175.159104][ T6879] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 175.254690][ T5914] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 175.270248][ T7016] syzkaller0: entered promiscuous mode [ 175.276158][ T7016] syzkaller0: entered allmulticast mode [ 175.286081][ T5914] usb 5-1: device descriptor read/8, error -71 [ 175.358068][ T7014] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 175.368586][ T5970] usb 3-1: USB disconnect, device number 23 [ 175.381838][ T5970] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 175.534637][ T5914] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 175.565219][ T5914] usb 5-1: device descriptor read/8, error -71 [ 175.685543][ T5914] usb usb5-port1: unable to enumerate USB device [ 175.984522][ T5914] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 176.135775][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 176.152744][ T5914] usb 2-1: too many endpoints for config 1 interface 0 altsetting 248: 255, using maximum allowed: 30 [ 176.165749][ T5914] usb 2-1: config 1 interface 0 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 176.180234][ T5914] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.192026][ T5914] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.211618][ T5914] usb 2-1: config 1 interface 0 has no altsetting 0 [ 176.238036][ T5914] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.254952][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.263041][ T5914] usb 2-1: Product: syz [ 176.297203][ T5914] usb 2-1: Manufacturer: syz [ 176.305469][ T5914] usb 2-1: SerialNumber: syz [ 176.370543][ T7029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.272'. [ 176.439285][ T7029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.272'. [ 176.625213][ T5914] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 176.832623][ T5914] usb 3-1: not running at top speed; connect to a high speed hub [ 176.843377][ T5914] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 177.630325][ T5914] usb 3-1: config 95 has no interface number 0 [ 177.643671][ T5914] usb 3-1: config 95 interface 1 has no altsetting 0 [ 178.095943][ T5914] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 178.135549][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.153919][ T5914] usb 3-1: Product: syz [ 178.161213][ T5914] usb 3-1: Manufacturer: syz [ 178.171539][ T5914] usb 3-1: SerialNumber: syz [ 178.365421][ T5917] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 178.528291][ T5917] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 178.536822][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.571354][ T5917] usb 4-1: config 0 has no interface number 0 [ 178.586059][ T5917] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 178.598689][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.614765][ T5917] usb 4-1: Product: syz [ 178.619081][ T5917] usb 4-1: Manufacturer: syz [ 178.631062][ T5917] usb 4-1: SerialNumber: syz [ 178.742394][ T5917] usb 4-1: config 0 descriptor?? [ 178.776062][ T5917] hub 4-1:0.31: bad descriptor, ignoring hub [ 178.804536][ T5917] hub 4-1:0.31: probe with driver hub failed with error -5 [ 178.842060][ T5917] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 178.882141][ T5917] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 178.901587][ T5970] usb 2-1: USB disconnect, device number 24 [ 179.006183][ T5917] uvcvideo 4-1:0.31: Failed to create links for entity 6 [ 179.023815][ T5917] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 179.145258][ T5917] usb 4-1: USB disconnect, device number 12 [ 179.342097][ T7049] xt_hashlimit: max too large, truncated to 1048576 [ 179.946352][ T1036] wlan0: Trigger new scan to find an IBSS to join [ 180.124510][ T5914] usb 3-1: USB disconnect, device number 24 [ 180.224528][ T44] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 180.356120][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.397821][ T44] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 180.424175][ T44] usb 4-1: config 0 has no interface number 0 [ 180.435519][ T44] usb 4-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 180.463992][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.485936][ T44] usb 4-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 180.522493][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.544203][ T44] usb 4-1: config 0 interface 153 has no altsetting 0 [ 180.613603][ T44] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 180.628762][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.637553][ T44] usb 4-1: Product: syz [ 180.642110][ T44] usb 4-1: Manufacturer: syz [ 180.648043][ T44] usb 4-1: SerialNumber: syz [ 180.656420][ T44] usb 4-1: config 0 descriptor?? [ 180.675104][ T5888] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 180.794811][ T7072] capability: warning: `syz.2.282' uses deprecated v2 capabilities in a way that may be insecure [ 180.834889][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 180.837087][ T5888] usb 2-1: config 222 has an invalid interface number: 31 but max is 0 [ 180.837119][ T5888] usb 2-1: config 222 has no interface number 0 [ 180.837205][ T5888] usb 2-1: config 222 interface 31 altsetting 11 bulk endpoint 0xE has invalid maxpacket 16 [ 180.837233][ T5888] usb 2-1: config 222 interface 31 has no altsetting 0 [ 180.840082][ T5888] usb 2-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 180.840115][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.840166][ T5888] usb 2-1: Product: syz [ 180.840193][ T5888] usb 2-1: Manufacturer: syz [ 180.840210][ T5888] usb 2-1: SerialNumber: syz [ 180.849860][ T7072] fuse: Unknown parameter '0x000000000000000cأ0K\p;C´'M00000000000000000003' [ 180.850374][ T7059] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.024631][ T5930] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 181.125039][ T5836] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 181.177500][ T5930] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 181.188237][ T5930] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 181.201672][ T5930] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 181.213634][ T5930] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 181.227403][ T5930] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 181.237864][ T5930] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 181.257562][ T5930] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 181.267160][ T5836] usb 1-1: device descriptor read/64, error -71 [ 181.276595][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.286462][ T5930] usb 5-1: Product: syz [ 181.294326][ T5930] usb 5-1: Manufacturer: syz [ 181.316866][ T5930] usb 5-1: SerialNumber: syz [ 181.340448][ T5930] usb 5-1: ucan: probing device on interface #0 [ 181.362499][ T5930] usb 5-1: ucan: invalid endpoint configuration [ 181.377567][ T5930] usb 5-1: ucan: probe failed; try to update the device firmware [ 181.524590][ T5836] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 181.624546][ T5914] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 181.654606][ T5836] usb 1-1: device descriptor read/64, error -71 [ 181.754696][ T5914] usb 3-1: device descriptor read/64, error -71 [ 181.765655][ T5836] usb usb1-port1: attempt power cycle [ 182.014664][ T5914] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 182.067585][ T5930] usb 5-1: USB disconnect, device number 23 [ 182.104596][ T5836] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 182.137887][ T5836] usb 1-1: device descriptor read/8, error -71 [ 182.154555][ T5914] usb 3-1: device descriptor read/64, error -71 [ 182.284964][ T5914] usb usb3-port1: attempt power cycle [ 182.384602][ T5836] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 182.405398][ T5836] usb 1-1: device descriptor read/8, error -71 [ 182.464789][ T5930] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 182.514815][ T5836] usb usb1-port1: unable to enumerate USB device [ 182.605724][ T5930] usb 5-1: device descriptor read/64, error -71 [ 182.634600][ T5914] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 182.655293][ T5914] usb 3-1: device descriptor read/8, error -71 [ 182.708093][ T44] hub 4-1:0.153: bad descriptor, ignoring hub [ 182.723201][ T44] hub 4-1:0.153: probe with driver hub failed with error -5 [ 182.733609][ T44] sierra 4-1:0.153: Sierra USB modem converter detected [ 182.795000][ T44] usb 4-1: USB disconnect, device number 13 [ 182.810898][ T44] sierra 4-1:0.153: device disconnected [ 182.856081][ T5930] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 182.895067][ T5914] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 182.936557][ T5914] usb 3-1: device descriptor read/8, error -71 [ 182.985626][ T3465] wlan0: Trigger new scan to find an IBSS to join [ 182.994658][ T5930] usb 5-1: device descriptor read/64, error -71 [ 183.033825][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 183.099658][ T5914] usb usb3-port1: unable to enumerate USB device [ 183.116171][ T5930] usb usb5-port1: attempt power cycle [ 183.371125][ T5888] ldusb 2-1:222.31: Interrupt out endpoint not found (using control endpoint instead) [ 183.404163][ T5888] ldusb 2-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 183.431374][ T5888] usb 2-1: USB disconnect, device number 25 [ 183.455573][ T5930] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 183.464106][ T5888] ldusb 2-1:222.31: LD USB Device #0 now disconnected [ 183.495079][ T5930] usb 5-1: device descriptor read/8, error -71 [ 183.747784][ T5930] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 183.776463][ T5888] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 183.797704][ T5930] usb 5-1: device descriptor read/8, error -71 [ 183.906935][ T5930] usb usb5-port1: unable to enumerate USB device [ 183.957113][ T5888] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 183.957168][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.961365][ T5888] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 183.986226][ T5888] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 183.986254][ T5888] usb 2-1: Manufacturer: syz [ 183.992006][ T5888] usb 2-1: config 0 descriptor?? [ 184.035696][ T30] audit: type=1326 audit(1766035364.654:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800018f749 code=0x7ffc0000 [ 184.075866][ T30] audit: type=1326 audit(1766035364.694:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f800018f749 code=0x7ffc0000 [ 184.107909][ T30] audit: type=1326 audit(1766035364.694:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800018f749 code=0x7ffc0000 [ 184.108034][ T30] audit: type=1326 audit(1766035364.694:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800018f749 code=0x7ffc0000 [ 184.108074][ T30] audit: type=1326 audit(1766035364.694:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f800018f749 code=0x7ffc0000 [ 184.108112][ T30] audit: type=1326 audit(1766035364.694:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800018f749 code=0x7ffc0000 [ 184.108160][ T30] audit: type=1326 audit(1766035364.694:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800018f749 code=0x7ffc0000 [ 184.108203][ T30] audit: type=1326 audit(1766035364.694:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f800018f749 code=0x7ffc0000 [ 184.108246][ T30] audit: type=1326 audit(1766035364.694:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800018f749 code=0x7ffc0000 [ 184.108300][ T30] audit: type=1326 audit(1766035364.694:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f800018f749 code=0x7ffc0000 [ 184.176456][ T7094] mmap: syz.3.291 (7094) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.198694][ T5888] rc_core: IR keymap rc-hauppauge not found [ 184.342446][ T5888] Registered IR keymap rc-empty [ 184.353598][ T5888] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 184.365598][ T5888] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 184.464521][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 184.590184][ T7097] rc rc0: two consecutive events of type space [ 184.614960][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 184.646057][ T44] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 184.656088][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.717788][ T44] usb 4-1: config 0 has no interface number 0 [ 184.740365][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 184.752083][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.762799][ T44] usb 4-1: Product: syz [ 184.767222][ T44] usb 4-1: Manufacturer: syz [ 184.771943][ T44] usb 4-1: SerialNumber: syz [ 184.816584][ T44] usb 4-1: config 0 descriptor?? [ 184.822377][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.839237][ T44] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 184.847689][ T44] uvcvideo 4-1:0.105: No valid video chain found. [ 184.865042][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.892938][ T44] usb 2-1: USB disconnect, device number 26 [ 185.394601][ T44] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 185.546960][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 185.571479][ T44] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 185.595541][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.623725][ T44] usb 3-1: Product: syz [ 185.637964][ T44] usb 3-1: Manufacturer: syz [ 185.653441][ T44] usb 3-1: SerialNumber: syz [ 185.678700][ T44] usb 3-1: config 0 descriptor?? [ 185.696559][ T44] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 185.897925][ T44] usb 3-1: USB disconnect, device number 29 [ 185.944652][ T12] wlan0: Trigger new scan to find an IBSS to join [ 186.649983][ T7143] syzkaller1: entered promiscuous mode [ 186.675044][ T7143] syzkaller1: entered allmulticast mode [ 186.877904][ T5914] usb 4-1: USB disconnect, device number 14 [ 186.919255][ T5967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.664551][ T795] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 187.895663][ T795] usb 2-1: Using ep0 maxpacket: 16 [ 187.911524][ T795] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 187.923544][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 188.289141][ T5914] IPVS: starting estimator thread 0... [ 188.298475][ T795] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 188.324876][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.344549][ T795] usb 2-1: Product: syz [ 188.348971][ T795] usb 2-1: Manufacturer: syz [ 188.396059][ T795] usb 2-1: SerialNumber: syz [ 188.438401][ T7172] IPVS: using max 30 ests per chain, 72000 per kthread [ 188.450091][ T795] usb 2-1: config 0 descriptor?? [ 188.468093][ T795] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 188.483546][ T795] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 189.066136][ T795] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 189.077131][ T795] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 189.095855][ T795] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 189.113641][ T795] em28xx 2-1:0.0: No AC97 audio processor [ 189.157993][ T795] usb 2-1: USB disconnect, device number 27 [ 189.183302][ T795] em28xx 2-1:0.0: Disconnecting em28xx [ 189.209952][ T795] em28xx 2-1:0.0: Freeing device [ 189.314346][ T7186] pim6reg1: entered promiscuous mode [ 189.331996][ T7186] pim6reg1: entered allmulticast mode [ 189.734785][ T795] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 189.904549][ T795] usb 1-1: Using ep0 maxpacket: 8 [ 189.940906][ T795] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 189.992132][ T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.043632][ T795] usb 1-1: Product: syz [ 190.060337][ T795] usb 1-1: Manufacturer: syz [ 190.081681][ T795] usb 1-1: SerialNumber: syz [ 190.114183][ T795] usb 1-1: config 0 descriptor?? [ 190.138363][ T795] redrat3 1-1:0.0: Couldn't find all endpoints [ 190.191941][ T7193] netlink: 'syz.4.315': attribute type 1 has an invalid length. [ 190.305486][ T7193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.323603][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.403907][ T7197] bond1: (slave batadv1): making interface the new active one [ 190.481630][ T7197] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 190.588826][ T795] usb 1-1: USB disconnect, device number 18 [ 190.856486][ T7205] xt_recent: Unsupported userspace flags (000000de) [ 192.378660][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 192.378679][ T30] audit: type=1326 audit(1766035372.994:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.4.329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb884b8f749 code=0x0 [ 192.407283][ T44] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 192.564501][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 192.571709][ T44] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 192.580378][ T44] usb 1-1: config 0 has no interface number 0 [ 192.586846][ T44] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.611672][ T44] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 192.639712][ T44] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.670972][ T44] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.724571][ T44] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 192.733657][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.752013][ T44] usb 1-1: config 0 descriptor?? [ 192.795038][ T44] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 194.014592][ T795] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 194.174925][ T795] usb 5-1: Using ep0 maxpacket: 8 [ 194.185298][ T795] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 194.195154][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.215716][ T795] usb 5-1: Product: syz [ 194.223863][ T795] usb 5-1: Manufacturer: syz [ 194.234769][ T795] usb 5-1: SerialNumber: syz [ 194.253238][ T795] usb 5-1: config 0 descriptor?? [ 194.319397][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 194.329164][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.338'. [ 194.349584][ T795] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 194.359988][ T795] dvb-usb: bulk message failed: -22 (2/0) [ 194.367679][ T7277] netlink: 6 bytes leftover after parsing attributes in process `syz.1.338'. [ 194.386052][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.395914][ T7276] netlink: 6 bytes leftover after parsing attributes in process `syz.1.338'. [ 194.407469][ T795] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 194.427159][ T795] usb 5-1: media controller created [ 194.533539][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.570529][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.597316][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.684911][ T795] cxusb: set interface failed [ 194.704836][ T795] dvb-usb: bulk message failed: -22 (1/0) [ 194.883391][ T795] DVB: Unable to find symbol mt352_attach() [ 194.903623][ T795] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 194.933558][ T44] usb 1-1: USB disconnect, device number 19 [ 194.995135][ T44] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 195.114970][ T795] rc_core: IR keymap rc-dvico-portable not found [ 195.145999][ T795] Registered IR keymap rc-empty [ 195.165317][ T7291] futex_wake_op: syz.1.342 tries to shift op by 32; fix this program [ 195.196388][ T795] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 195.265418][ T795] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 195.359626][ T795] dvb-usb: schedule remote query interval to 100 msecs. [ 195.383088][ T795] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 195.402104][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 195.430886][ T795] usb 5-1: USB disconnect, device number 28 [ 195.544665][ T5914] dvb-usb: bulk message failed: -22 (1/0) [ 196.699100][ T7300] syz.1.344 (7300): drop_caches: 2 [ 197.080124][ T795] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 197.434834][ T795] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 197.604490][ T795] usb 5-1: Using ep0 maxpacket: 16 [ 197.615681][ T795] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 197.641860][ T795] usb 5-1: config 0 has no interface number 0 [ 197.661956][ T795] usb 5-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 197.688100][ T795] usb 5-1: New USB device strings: Mfr=1, Product=132, SerialNumber=45 [ 197.712888][ T795] usb 5-1: Product: syz [ 197.736285][ T795] usb 5-1: Manufacturer: syz [ 197.751057][ T795] usb 5-1: SerialNumber: syz [ 197.771896][ T795] usb 5-1: config 0 descriptor?? [ 197.838054][ T5914] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 197.917779][ T7316] loop6: detected capacity change from 0 to 524288000 [ 198.031066][ T5914] usb 2-1: config 54 has an invalid interface number: 154 but max is 0 [ 198.049962][ T795] go7007 5-1:0.41: probe with driver go7007 failed with error -12 [ 198.067619][ T7316] netlink: 388 bytes leftover after parsing attributes in process `syz.3.348'. [ 198.110081][ T5914] usb 2-1: config 54 has an invalid descriptor of length 108, skipping remainder of the config [ 198.134320][ T795] usb 5-1: USB disconnect, device number 29 [ 198.162402][ T5914] usb 2-1: config 54 has no interface number 0 [ 198.184072][ T5914] usb 2-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.233729][ T5914] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 198.255832][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.294503][ T5914] usb 2-1: Product: syz [ 198.311465][ T7320] bond2: option ad_user_port_key: invalid value (55139) [ 198.327189][ T7320] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 198.336075][ T5914] usb 2-1: Manufacturer: syz [ 198.368528][ T7320] bond2 (unregistering): Released all slaves [ 198.377046][ T5914] usb 2-1: SerialNumber: syz [ 198.614994][ T5914] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 198.616648][ T36] usb 2-1: Failed to submit usb control message: -71 [ 198.656642][ T36] usb 2-1: unable to send the bmi data to the device: -71 [ 198.678973][ T5914] usb 2-1: USB disconnect, device number 28 [ 198.694887][ T36] usb 2-1: unable to get target info from device [ 198.701447][ T36] usb 2-1: could not get target info (-71) [ 198.707885][ T36] usb 2-1: could not probe fw (-71) [ 198.734488][ T5888] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 198.799473][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 198.817496][ T7337] netlink: 'syz.4.353': attribute type 30 has an invalid length. [ 198.832763][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 198.876098][ T5888] usb 3-1: device descriptor read/64, error -71 [ 199.121444][ T5888] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 199.221912][ T44] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 199.266309][ T5888] usb 3-1: device descriptor read/64, error -71 [ 199.387860][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 199.393812][ T5888] usb usb3-port1: attempt power cycle [ 199.413188][ T44] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 199.438889][ T44] usb 5-1: config 0 has no interface number 0 [ 199.466181][ T44] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 199.488172][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.496144][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.505398][ T44] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 199.516146][ T44] usb 5-1: config 0 interface 126 has no altsetting 0 [ 199.526047][ T44] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 199.535929][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.552273][ T44] usb 5-1: Product: syz [ 199.556910][ T44] usb 5-1: Manufacturer: syz [ 199.562003][ T44] usb 5-1: SerialNumber: syz [ 199.593404][ T44] usb 5-1: config 0 descriptor?? [ 199.624054][ T7346] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.646338][ T7346] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.769337][ T5888] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 199.805687][ T5888] usb 3-1: device descriptor read/8, error -71 [ 199.936499][ T795] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 200.054543][ T5888] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 200.100534][ T5888] usb 3-1: device descriptor read/8, error -71 [ 200.115221][ T795] usb 2-1: Using ep0 maxpacket: 32 [ 200.142569][ T795] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 200.170486][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.198568][ T795] usb 2-1: Product: syz [ 200.202804][ T795] usb 2-1: Manufacturer: syz [ 200.225404][ T5888] usb usb3-port1: unable to enumerate USB device [ 200.227365][ T795] usb 2-1: SerialNumber: syz [ 200.258129][ T795] usb 2-1: config 0 descriptor?? [ 200.283821][ T795] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 201.179379][ T7388] random: crng reseeded on system resumption [ 201.299352][ T7392] fuse: Bad value for 'group_id' [ 201.304621][ T7392] fuse: Bad value for 'group_id' [ 201.329315][ T30] audit: type=1326 audit(1766035381.944:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f572698f749 code=0x0 [ 201.655541][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 201.658060][ T5888] delete_channel: no stack [ 201.670833][ T7399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.363'. [ 201.697848][ T3963] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.730169][ T7399] team0: Device ipip0 is up. Set it down before adding it as a team port [ 201.916080][ T3963] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.938524][ T3963] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.956524][ T3963] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.994244][ T44] ir_usb 5-1:0.126: IR Dongle converter detected [ 202.017350][ T44] usb 5-1: IRDA class descriptor not found, device not bound [ 202.086595][ T44] usb 5-1: USB disconnect, device number 30 [ 202.155672][ T7410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.365'. [ 202.453084][ T7424] tc_dump_action: action bad kind [ 202.474519][ T5914] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 202.511028][ T795] gspca_ov534_9: reg_r err -71 [ 202.670149][ T5914] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=32.00 [ 202.690527][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.724447][ T795] gspca_ov534_9: Unknown sensor 0000 [ 202.724787][ T795] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 202.738404][ T5914] usb 3-1: Product: syz [ 202.742618][ T5914] usb 3-1: Manufacturer: syz [ 202.774507][ T5914] usb 3-1: SerialNumber: syz [ 202.819963][ T5914] usb 3-1: config 0 descriptor?? [ 202.843321][ T795] usb 2-1: USB disconnect, device number 29 [ 202.896336][ T5914] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 202.922811][ T5914] usb 3-1: Detected FT233HP [ 202.993313][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.370'. [ 203.007718][ T7443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.370'. [ 203.085849][ T5914] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 203.101071][ T5914] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 203.119127][ T7445] xt_TCPMSS: Only works on TCP SYN packets [ 203.129128][ T5914] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 203.193555][ T5914] usb 3-1: USB disconnect, device number 34 [ 203.285862][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 203.332659][ T5914] ftdi_sio 3-1:0.0: device disconnected [ 203.445713][ T7452] syz_tun: entered allmulticast mode [ 204.132053][ T7461] macvtap2: entered promiscuous mode [ 204.147491][ T7461] macvtap2: entered allmulticast mode [ 204.165462][ T7461] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 204.200591][ T7449] syz_tun: left allmulticast mode [ 204.423075][ T7473] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 204.469514][ T7473] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 204.525575][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 204.567812][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.380'. [ 204.593303][ T7484] Cannot find set identified by id 65534 to match [ 204.712814][ T7484] ucma_write: process 260 (syz.1.378) changed security contexts after opening file descriptor, this is not allowed. [ 204.834969][ T5914] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 205.004780][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 205.016117][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.038909][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.061421][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 205.080069][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.217038][ T5914] usb 3-1: config 0 descriptor?? [ 205.643985][ T5914] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 205.684040][ T5914] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 205.703351][ T5914] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 205.732174][ T5914] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 205.752595][ T5914] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 205.767799][ T5914] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 205.803842][ T5914] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 205.814853][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.833232][ T5914] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 205.861899][ T5914] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 205.896161][ T5914] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 205.926595][ T5914] logitech 0003:046D:C50C.0008: collection stack underflow [ 205.934177][ T5914] logitech 0003:046D:C50C.0008: item 0 0 0 12 parsing failed [ 206.004572][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 206.013079][ T5914] logitech 0003:046D:C50C.0008: parse failed [ 206.021929][ T5914] logitech 0003:046D:C50C.0008: probe with driver logitech failed with error -22 [ 206.041191][ T44] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 206.082080][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.106168][ T44] usb 4-1: Product: syz [ 206.110521][ T44] usb 4-1: Manufacturer: syz [ 206.124773][ T44] usb 4-1: SerialNumber: syz [ 206.150427][ T5914] usb 3-1: USB disconnect, device number 35 [ 206.189968][ T44] usb 4-1: config 0 descriptor?? [ 206.473058][ T44] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 015 [ 206.751471][ T44] usb 4-1: USB disconnect, device number 15 [ 207.211398][ T7539] program syz.1.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.233773][ T7539] program syz.1.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.995171][ T5930] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 208.183628][ T5930] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.218096][ T5930] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.249478][ T5930] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.258915][ T44] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 208.282908][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.336277][ T7527] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.399838][ T5930] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.424985][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 208.442500][ T44] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 208.468824][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.507499][ T44] usb 1-1: Product: syz [ 208.557457][ T44] usb 1-1: Manufacturer: syz [ 208.570344][ T44] usb 1-1: SerialNumber: syz [ 208.674716][ T44] usb 1-1: config 0 descriptor?? [ 208.695270][ T44] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 208.834561][ T5930] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 208.853773][ T5914] usb 5-1: USB disconnect, device number 31 [ 208.916537][ T30] audit: type=1326 audit(1766035389.534:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 208.970001][ T7571] veth0: entered promiscuous mode [ 208.978540][ T30] audit: type=1326 audit(1766035389.564:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 209.024876][ T5930] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 209.036433][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.063036][ T30] audit: type=1326 audit(1766035389.564:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 209.093450][ T5930] usb 2-1: Product: syz [ 209.109009][ T7574] veth0: left promiscuous mode [ 209.117844][ T5930] usb 2-1: Manufacturer: syz [ 209.122747][ T5930] usb 2-1: SerialNumber: syz [ 209.144883][ T30] audit: type=1326 audit(1766035389.564:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 209.170977][ T5930] usb 2-1: config 0 descriptor?? [ 209.197257][ T5930] ch341 2-1:0.0: ch341-uart converter detected [ 209.283586][ T30] audit: type=1326 audit(1766035389.564:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe21738f749 code=0x7ffc0000 [ 209.335725][ T7560] erspan0: entered promiscuous mode [ 209.370885][ T44] gspca_ov534_9: reg_w failed -71 [ 209.684532][ T44] gspca_ov534_9: Unknown sensor 0000 [ 209.684612][ T44] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 209.744850][ T44] usb 1-1: USB disconnect, device number 20 [ 209.799521][ T5930] usb 2-1: failed to send control message: -71 [ 209.819849][ T5930] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 209.888761][ T5930] usb 2-1: USB disconnect, device number 30 [ 209.947630][ T5930] ch341 2-1:0.0: device disconnected [ 210.759398][ T7597] binder: 7596:7597 ioctl c018620c 200000000340 returned -1 [ 210.769659][ T7597] binder: 7596:7597 ioctl c0306201 200000000300 returned -11 [ 210.821975][ T7595] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[7595] [ 211.084827][ T5930] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 211.265670][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 211.273382][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.436813][ T7612] netlink: 88 bytes leftover after parsing attributes in process `syz.3.407'. [ 211.655501][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.694506][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.714904][ T5930] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.725790][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.744624][ T5930] usb 2-1: config 0 descriptor?? [ 212.269248][ T5930] hid_parser_main: 109 callbacks suppressed [ 212.269267][ T5930] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 212.295969][ T5930] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 212.334579][ T5914] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 212.337452][ T5930] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 212.404843][ T5930] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 212.422476][ T5930] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 212.424555][ T795] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 212.442299][ T5930] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 212.462536][ T5930] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 212.471740][ T5930] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 212.475222][ T5914] usb 3-1: device descriptor read/64, error -71 [ 212.514481][ T5930] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 212.532295][ T5930] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 212.563850][ T5930] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 212.590950][ T795] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 212.603592][ T5930] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 212.628879][ T5930] microsoft 0003:045E:07DA.0009: no inputs found [ 212.635751][ T5930] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 212.638560][ T795] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 212.656249][ T5930] usb 2-1: USB disconnect, device number 31 [ 212.665874][ T795] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 212.707149][ T795] usb 5-1: Manufacturer: syz [ 212.712247][ T795] usb 5-1: SerialNumber: syz [ 212.784791][ T5914] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 212.806848][ T7630] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.412'. [ 212.853433][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 212.868338][ T7627] fido_id[7627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 212.887374][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 212.912643][ T7630] fuse: Bad value for 'user_id' [ 212.928892][ T7630] fuse: Bad value for 'user_id' [ 212.944965][ T5914] usb 3-1: device descriptor read/64, error -71 [ 212.946388][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 212.971594][ T795] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 212.981215][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.005828][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.019019][ T795] usb 5-1: USB disconnect, device number 32 [ 213.045584][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.061829][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.074884][ T5914] usb usb3-port1: attempt power cycle [ 213.100959][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.125200][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.147215][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.175259][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.204603][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.227508][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.254165][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.284534][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.305784][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.326426][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.360528][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.380827][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.401120][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.421412][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.447747][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.458214][ T5914] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 213.475212][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.485658][ T5914] usb 3-1: device descriptor read/8, error -71 [ 213.514604][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.524321][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.544908][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.564596][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.577287][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.585521][ T7635] netlink: 'syz.1.414': attribute type 30 has an invalid length. [ 213.587944][ T7629] dlm: plock device version mismatch: kernel (1.2.0), user (50399745.4293263360.0) [ 213.734670][ T5914] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 213.755488][ T5914] usb 3-1: device descriptor read/8, error -71 [ 213.830173][ T7643] tipc: Started in network mode [ 213.835359][ T7643] tipc: Node identity ac1414aa, cluster identity 4711 [ 213.843314][ T7643] tipc: Enabled bearer , priority 10 [ 213.851662][ T5930] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 213.876279][ T7644] netlink: 180 bytes leftover after parsing attributes in process `syz.4.418'. [ 213.886152][ T7644] xt_time: unknown flags 0xf4 [ 213.887261][ T5914] usb usb3-port1: unable to enumerate USB device [ 214.037037][ T5930] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 214.048204][ T5930] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 214.059847][ T5930] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 214.070981][ T5930] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 214.089929][ T5930] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 214.103285][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.121898][ T7635] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.177034][ T5914] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 214.331591][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.340730][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.353339][ T5914] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 214.370694][ T5914] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.427791][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 214.444868][ T5914] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 214.454292][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.484339][ T5914] usb 5-1: config 0 descriptor?? [ 214.643736][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.654043][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.734492][ T5914] usb 5-1: string descriptor 0 read error: -71 [ 214.769415][ T5914] usb 5-1: USB disconnect, device number 33 [ 214.967721][ T5836] tipc: Node number set to 2886997162 [ 215.227876][ T5930] ath6kl: Failed to submit usb control message: -110 [ 215.251704][ T5930] ath6kl: unable to send the bmi data to the device: -110 [ 215.269283][ T5930] ath6kl: Unable to send get target info: -110 [ 215.295639][ T5930] ath6kl: Failed to init ath6kl core: -110 [ 215.320810][ T5930] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 215.484488][ T5836] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 215.495391][ T5914] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 215.634833][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 215.646852][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.661296][ T5914] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.673748][ T5836] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.675387][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.683445][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806beadc00: rx timeout, send abort [ 215.701572][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806beadc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 215.720860][ T5914] usb 3-1: Product: 寿퐽텝涓㝁十쉓ﯫ산ሲ⮡뱸磅⹁乷쐙沸⧰誱럵⸍덓᭵ኆ⥁쏪紥⥢犦밡唇⻄㢙蜶깴鎘攛盜㝑鏤ഒ쾒탪왛ꮅ᯺ﳊ燸锨瀟禧矞徠༺蕷Үꁐᆺᣋ覫껐 [ 215.781534][ T5836] usb 1-1: New USB device found, idVendor=045e, idProduct=3ff9, bcdDevice=67.09 [ 215.802111][ T5836] usb 1-1: New USB device strings: Mfr=191, Product=0, SerialNumber=0 [ 215.810592][ T5914] usb 3-1: Manufacturer: ᐄ [ 215.810625][ T5914] usb 3-1: SerialNumber: syz [ 215.846590][ T5930] usb 2-1: USB disconnect, device number 32 [ 215.857690][ T5836] usb 1-1: Manufacturer: syz [ 215.887656][ T5836] usb 1-1: config 0 descriptor?? [ 216.044793][ T5914] cdc_ncm 3-1:1.0: bind() failure [ 216.070212][ T7675] netlink: 27 bytes leftover after parsing attributes in process `syz.4.427'. [ 216.092152][ T5914] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 216.111486][ T5914] cdc_ncm 3-1:1.1: bind() failure [ 216.141463][ T5914] usb 3-1: USB disconnect, device number 40 [ 216.223576][ T7675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.232877][ T7675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.243086][ T7675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.251840][ T7675] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.258248][ T7675] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 216.557365][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 216.684552][ T5836] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 216.815408][ T5836] usb 2-1: device descriptor read/64, error -71 [ 216.844681][ T5914] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 217.007670][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.018706][ T5914] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 217.029009][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.040157][ T5914] usb 3-1: config 0 descriptor?? [ 217.052238][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 217.054684][ T5836] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 217.084579][ T5970] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 217.194578][ T5836] usb 2-1: device descriptor read/64, error -71 [ 217.247465][ T5970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.259946][ T5970] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 217.269668][ T5970] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 217.279698][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.303754][ T5970] usb 4-1: config 0 descriptor?? [ 217.306672][ T5836] usb usb2-port1: attempt power cycle [ 217.338354][ T5970] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 217.357462][ T5970] dvb-usb: bulk message failed: -22 (3/0) [ 217.369666][ T7697] tipc: Started in network mode [ 217.376741][ T5970] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 217.392062][ T7697] tipc: Node identity 924b80f2bfb1, cluster identity 4711 [ 217.400442][ T5970] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 217.407794][ T5970] usb 4-1: media controller created [ 217.413275][ T7697] tipc: Enabled bearer , priority 0 [ 217.423008][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.433838][ T7698] syzkaller0: entered promiscuous mode [ 217.441998][ T7698] syzkaller0: entered allmulticast mode [ 217.452960][ T5970] dvb-usb: bulk message failed: -22 (6/0) [ 217.461234][ T5970] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 217.481024][ T5970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 217.497593][ T7697] tipc: Resetting bearer [ 217.526251][ T5970] dvb-usb: schedule remote query interval to 150 msecs. [ 217.549815][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.560938][ T5970] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 217.580957][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.633540][ T7694] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 217.659072][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.430'. [ 217.665188][ T5836] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 217.688413][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 217.693857][ T7694] team0: Cannot enslave team device to itself [ 217.698625][ T7703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.712934][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 217.713424][ T7704] dibusb: i2c wr: len=8192 is too big! [ 217.713424][ T7704] [ 217.729133][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 217.735212][ T5836] usb 2-1: device descriptor read/8, error -71 [ 217.746952][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 217.765021][ T5970] dvb-usb: error while querying for an remote control event. [ 217.774313][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 217.944571][ T5970] dvb-usb: bulk message failed: -22 (1/0) [ 217.950431][ T5970] dvb-usb: error while querying for an remote control event. [ 217.974712][ T5836] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 217.991996][ T5914] pwc: recv_control_msg error -71 req 04 val 1400 [ 218.016279][ T5914] pwc: recv_control_msg error -71 req 02 val 2000 [ 218.028980][ T5836] usb 2-1: device descriptor read/8, error -71 [ 218.046328][ T5914] pwc: recv_control_msg error -71 req 02 val 2100 [ 218.057802][ T795] usb 4-1: USB disconnect, device number 16 [ 218.076922][ T5914] pwc: recv_control_msg error -71 req 04 val 1500 [ 218.091652][ T5914] pwc: recv_control_msg error -71 req 02 val 2500 [ 218.103031][ T795] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 218.118631][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 218.129043][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 218.142669][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 218.147890][ T5836] usb usb2-port1: unable to enumerate USB device [ 218.163492][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 218.172686][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 218.180143][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 218.187728][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 218.224047][ T5836] usb 1-1: USB disconnect, device number 21 [ 218.237563][ T5914] pwc: Registered as video103. [ 218.258036][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 218.268801][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.269201][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 218.274877][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 218.274937][ T5149] Bluetooth: hci4: command 0x0c1a tx timeout [ 218.307615][ T5914] usb 3-1: USB disconnect, device number 41 [ 218.494620][ T795] tipc: Node number set to 771391730 [ 218.665942][ T5836] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 218.854638][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 218.864078][ T5836] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 218.949483][ T5836] usb 1-1: config 0 has no interface number 0 [ 218.962525][ T5836] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 218.980389][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.994537][ T795] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 219.002950][ T5836] usb 1-1: Product: syz [ 219.008391][ T5836] usb 1-1: Manufacturer: syz [ 219.013362][ T5836] usb 1-1: SerialNumber: syz [ 219.031706][ T5836] usb 1-1: config 0 descriptor?? [ 219.049383][ T5836] smsc95xx v2.0.0 [ 219.177834][ T795] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 219.199034][ T795] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.263854][ T795] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.281232][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.329182][ T795] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.404054][ T795] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 219.459261][ T5836] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 219.474596][ T5836] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 219.506589][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 219.542787][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.556595][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.379551][ T7740] input: syz0 as /devices/virtual/input/input13 [ 221.581210][ T795] usb 3-1: USB disconnect, device number 42 [ 222.322613][ T7763] binder: BINDER_SET_CONTEXT_MGR already set [ 222.443568][ T5836] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 222.457928][ T7763] binder: 7751:7763 ioctl 4018620d 200000000100 returned -16 [ 222.487918][ T5836] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 222.512704][ T5836] usb 1-1: USB disconnect, device number 22 [ 223.554522][ T795] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 223.604770][ T5836] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 223.721652][ T7785] program syz.0.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.723207][ T7786] netlink: 52 bytes leftover after parsing attributes in process `syz.0.452'. [ 223.731631][ T795] usb 5-1: Using ep0 maxpacket: 32 [ 223.773237][ T795] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 223.788606][ T5836] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 223.803052][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.804838][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 223.878597][ T795] usb 5-1: Product: syz [ 223.882925][ T795] usb 5-1: Manufacturer: syz [ 223.895766][ T795] usb 5-1: SerialNumber: syz [ 223.916666][ T5836] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 223.942569][ T5836] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 223.967544][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.976175][ T795] usb 5-1: config 0 descriptor?? [ 223.987822][ T5836] usb 4-1: Product: syz [ 223.992844][ T5836] usb 4-1: Manufacturer: syz [ 224.002118][ T5836] usb 4-1: SerialNumber: syz [ 224.027770][ T5836] usb 4-1: config 0 descriptor?? [ 224.043517][ T7793] @: renamed from ip6tnl0 (while UP) [ 224.051279][ T7781] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 224.080300][ T7781] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 224.107606][ T5836] usb 4-1: ucan: probing device on interface #0 [ 224.430821][ T795] airspy 5-1:0.0: Board ID: 00 [ 224.435811][ T795] airspy 5-1:0.0: Firmware version: [ 224.616395][ T7804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.456'. [ 225.500368][ T795] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 225.535199][ T795] airspy 5-1:0.0: Registered as swradio24 [ 225.568283][ T795] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 226.710133][ T5836] ucan 4-1:0.0: probe with driver ucan failed with error -110 [ 226.717910][ T795] usb 5-1: USB disconnect, device number 34 [ 227.014933][ T795] usb 4-1: USB disconnect, device number 17 [ 227.363197][ T7764] syz.2.444 (7764): drop_caches: 2 [ 228.054821][ T795] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 228.286336][ T795] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 228.320581][ T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.341174][ T795] usb 1-1: Product: syz [ 228.352210][ T795] usb 1-1: Manufacturer: syz [ 228.362687][ T795] usb 1-1: SerialNumber: syz [ 228.403226][ T795] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 228.441853][ T5914] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 228.860812][ T5836] usb 1-1: USB disconnect, device number 23 [ 229.555158][ T5914] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 229.562211][ T5914] ath9k_htc: Failed to initialize the device [ 229.619359][ T5836] usb 1-1: ath9k_htc: USB layer deinitialized [ 229.988471][ T7870] fuse: Invalid gid '00000000000000000003' [ 230.124626][ T5836] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 230.584575][ T44] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 230.634558][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 230.646464][ T5836] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 230.658353][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.744530][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 230.752272][ T44] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.775643][ T5836] usb 1-1: config 0 descriptor?? [ 230.780911][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.798043][ T5836] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 230.804504][ T44] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 230.813626][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.145496][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 231.390308][ T44] usb 5-1: config 0 descriptor?? [ 231.848250][ T7883] tipc: Started in network mode [ 231.853247][ T7883] tipc: Node identity 2d1c58828ceda994002e, cluster identity 4711 [ 232.070938][ T44] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 232.261058][ T5836] gspca_sonixj: reg_w1 err -71 [ 232.275344][ T795] usb 5-1: USB disconnect, device number 35 [ 232.284896][ T5836] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 232.321762][ T5836] usb 1-1: USB disconnect, device number 24 [ 232.487774][ T7889] fido_id[7889]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 232.931102][ T7898] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 234.094526][ T5888] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 234.124690][ T5836] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 234.254765][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 234.266792][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.285918][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.297362][ T5888] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 234.310798][ T5836] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 234.320272][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.328840][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.344636][ T5836] usb 1-1: Product: syz [ 234.348956][ T5836] usb 1-1: Manufacturer: syz [ 234.353623][ T5836] usb 1-1: SerialNumber: syz [ 234.361531][ T5888] usb 5-1: config 0 descriptor?? [ 234.399216][ T5836] usb 1-1: config 0 descriptor?? [ 234.643890][ T5836] usb-storage 1-1:0.0: USB Mass Storage device detected [ 234.731298][ T5836] usb 1-1: USB disconnect, device number 25 [ 234.792041][ T5888] hid_parser_main: 1 callbacks suppressed [ 234.792065][ T5888] ft260 0003:0403:6030.000B: unknown main item tag 0x7 [ 234.824583][ T795] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 234.837455][ T7936] vlan2: entered promiscuous mode [ 234.842558][ T7936] bond0: entered promiscuous mode [ 234.976994][ T5888] ft260 0003:0403:6030.000B: chip code: 6524 8100 [ 235.009435][ T795] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 235.025513][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.033586][ T795] usb 3-1: Product: syz [ 235.044457][ T795] usb 3-1: Manufacturer: syz [ 235.053062][ T795] usb 3-1: SerialNumber: syz [ 235.086498][ T795] usb 3-1: config 0 descriptor?? [ 235.097501][ T795] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 235.177618][ T5888] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 235.328054][ T7928] syzkaller1: entered promiscuous mode [ 235.346963][ T7928] syzkaller1: entered allmulticast mode [ 235.396366][ T5888] ft260 0003:0403:6030.000B: failed to retrieve status: -32 [ 235.618270][ T7941] ft260 0003:0403:6030.000B: ft260_i2c_read: failed with -38 [ 235.628943][ T5914] usb 5-1: USB disconnect, device number 36 [ 235.940647][ T7949] futex_wake_op: syz.3.490 tries to shift op by 32; fix this program [ 235.989172][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 236.044312][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 236.506626][ T795] gspca_sunplus: reg_w_riv err -71 [ 236.522414][ T795] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 236.657052][ T795] usb 3-1: USB disconnect, device number 43 [ 236.936288][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.496'. [ 237.874610][ T5888] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 238.004629][ T5888] usb 3-1: device descriptor read/64, error -71 [ 238.244587][ T5888] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 238.394734][ T5888] usb 3-1: device descriptor read/64, error -71 [ 238.531920][ T5888] usb usb3-port1: attempt power cycle [ 238.723003][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 238.731973][ T7999] openvswitch: netlink: Message has -1 unknown bytes. [ 239.006334][ T5888] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 239.042643][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 239.056223][ T5888] usb 3-1: device descriptor read/8, error -71 [ 239.076636][ T8003] openvswitch: netlink: Message has -1 unknown bytes. [ 239.334594][ T5888] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 239.376205][ T5888] usb 3-1: device descriptor read/8, error -71 [ 239.506031][ T5888] usb usb3-port1: unable to enumerate USB device [ 239.694493][ T5888] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 239.884594][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 239.892521][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.902003][ T5888] usb 4-1: config 1 has an invalid interface number: 125 but max is 0 [ 239.933327][ T5888] usb 4-1: config 1 has no interface number 0 [ 239.933385][ T5888] usb 4-1: config 1 interface 125 has no altsetting 0 [ 239.936240][ T5888] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=3c.51 [ 239.936273][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.936296][ T5888] usb 4-1: Product: ࡠ [ 239.936312][ T5888] usb 4-1: Manufacturer: ⠊ [ 239.936328][ T5888] usb 4-1: SerialNumber: syz [ 240.094634][ T44] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 240.118674][ T8028] netlink: 'syz.1.510': attribute type 10 has an invalid length. [ 240.145248][ T5888] qmi_wwan 4-1:1.125: probe with driver qmi_wwan failed with error -22 [ 240.174891][ T8028] bridge0: port 3(dummy0) entered disabled state [ 240.193461][ T8028] dummy0: left allmulticast mode [ 240.212230][ T8028] dummy0: left promiscuous mode [ 240.217799][ T5888] usb 4-1: USB disconnect, device number 18 [ 240.230620][ T8028] bridge0: port 3(dummy0) entered disabled state [ 240.254684][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 240.264218][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.281573][ T44] usb 1-1: config 0 has no interface number 0 [ 240.297487][ T44] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 240.312096][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.330596][ T44] usb 1-1: Product: syz [ 240.341238][ T8028] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 240.342259][ T44] usb 1-1: Manufacturer: syz [ 240.370852][ T44] usb 1-1: SerialNumber: syz [ 240.385601][ T44] usb 1-1: config 0 descriptor?? [ 240.414913][ T44] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 240.446265][ T44] usb 1-1: selecting invalid altsetting 1 [ 240.462616][ T44] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 240.492386][ T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 240.515004][ T44] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 240.537089][ T44] usb 1-1: media controller created [ 240.592926][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.620665][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.652040][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.714226][ T44] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 240.737792][ T44] zl10353_read_register: readreg error (reg=127, ret==-71) [ 240.775082][ T44] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 240.938448][ T44] usb 1-1: USB disconnect, device number 26 [ 241.131850][ T795] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 241.202774][ T8046] program syz.1.516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.324472][ T795] usb 4-1: Using ep0 maxpacket: 8 [ 241.342293][ T795] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.367330][ T795] usb 4-1: config 4 has an invalid interface number: 146 but max is 0 [ 241.384719][ T795] usb 4-1: config 4 has no interface number 0 [ 241.401328][ T795] usb 4-1: config 4 interface 146 has no altsetting 0 [ 241.412197][ T795] usb 4-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 241.424626][ T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.453216][ T795] usb 4-1: Product: syz [ 241.466684][ T795] usb 4-1: Manufacturer: syz [ 241.506738][ T5914] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 241.514731][ T795] usb 4-1: SerialNumber: syz [ 241.519525][ T5917] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 241.844538][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 241.854979][ T5917] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 241.863053][ T5917] usb 5-1: config 0 has no interface number 0 [ 241.872526][ T5914] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 241.882286][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.901050][ T5917] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 241.943822][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.954900][ T44] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 241.972819][ T5917] usb 5-1: Product: syz [ 241.986348][ T5917] usb 5-1: Manufacturer: syz [ 241.991028][ T5917] usb 5-1: SerialNumber: syz [ 241.997133][ T5914] usb 2-1: config 0 descriptor?? [ 242.028594][ T795] comedi comedi5: could not set alternate setting 3 in high speed [ 242.038637][ T5914] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 242.056157][ T5917] usb 5-1: config 0 descriptor?? [ 242.067591][ T5914] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 242.076514][ T795] usbduxsigma 4-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 242.093229][ T5917] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 242.114920][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 242.140058][ T44] usb 1-1: config 0 has no interfaces? [ 242.146142][ T5917] usb 5-1: selecting invalid altsetting 1 [ 242.153116][ T5917] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 242.159725][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 242.179604][ T795] usbduxsigma 4-1:4.146: probe with driver usbduxsigma failed with error -71 [ 242.213377][ T5914] usb 2-1: USB disconnect, device number 37 [ 242.220860][ T44] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 242.254336][ T5917] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 242.265392][ T795] usb 4-1: USB disconnect, device number 19 [ 242.283027][ T44] usb 1-1: Manufacturer: syz [ 242.340738][ T5917] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 242.355831][ T44] usb 1-1: config 0 descriptor?? [ 242.398223][ T5917] usb 5-1: media controller created [ 242.550313][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.748687][ T5917] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 242.776370][ T5917] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 243.112734][ T5917] DVB: Unable to find symbol mxl5005s_attach() [ 243.369961][ T5917] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 243.519112][ T5917] usb 5-1: USB disconnect, device number 37 [ 244.287774][ T8092] netem: change failed [ 244.355979][ T5888] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 244.634545][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 244.650706][ T5888] usb 3-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 244.670579][ T5888] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 244.693798][ T5888] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 244.704546][ T5917] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 244.723461][ T5836] usb 1-1: USB disconnect, device number 27 [ 244.754990][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.763050][ T5888] usb 3-1: Product: syz [ 244.793616][ T5888] usb 3-1: Manufacturer: syz [ 244.812018][ T5888] usb 3-1: SerialNumber: syz [ 244.883718][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.914756][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.944925][ T5917] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 244.954033][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.014190][ T5917] usb 5-1: config 0 descriptor?? [ 245.059075][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.125703][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.515081][ T5917] cm6533_jd 0003:0D8C:0022.000C: invalid report_count 1192232228 [ 245.536524][ T5917] cm6533_jd 0003:0D8C:0022.000C: item 0 4 1 9 parsing failed [ 245.572148][ T5917] cm6533_jd 0003:0D8C:0022.000C: parse failed [ 245.609833][ T5917] cm6533_jd 0003:0D8C:0022.000C: probe with driver cm6533_jd failed with error -22 [ 245.716528][ T5917] usb 5-1: USB disconnect, device number 38 [ 246.587898][ T30] audit: type=1326 audit(1766035427.184:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.4.533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fb884b8f749 code=0x0 [ 248.130886][ T5888] usb 3-1: USB disconnect, device number 48 [ 248.259968][ T8138] bond0: entered promiscuous mode [ 248.273089][ T8138] bond_slave_0: entered promiscuous mode [ 248.280365][ T8138] bond_slave_1: entered promiscuous mode [ 248.296535][ T8138] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 248.315416][ T8138] batadv0: entered promiscuous mode [ 248.327530][ T8138] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 248.369340][ T8138] bond0: left promiscuous mode [ 248.382973][ T8138] bond_slave_0: left promiscuous mode [ 248.407365][ T8138] bond_slave_1: left promiscuous mode [ 248.430162][ T8138] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 248.475517][ T8138] batadv0: left promiscuous mode [ 248.941838][ T8148] fuse: Bad value for 'user_id' [ 248.946904][ T8148] fuse: Bad value for 'user_id' [ 249.077052][ T8152] cgroup: fork rejected by pids controller in /syz1 [ 249.215154][ T5917] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 249.329474][ T795] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 249.440727][ T5917] usb 3-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 249.483770][ T5917] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.529368][ T5917] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.554571][ T795] usb 5-1: Using ep0 maxpacket: 16 [ 249.560173][ T5917] usb 3-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 249.590127][ T795] usb 5-1: descriptor type invalid, skip [ 249.598774][ T795] usb 5-1: config 0 has no interfaces? [ 249.618880][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.628741][ T795] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 249.646123][ T5917] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 249.656482][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.686883][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.695044][ T795] usb 5-1: Product: syz [ 249.699625][ T795] usb 5-1: Manufacturer: syz [ 249.704254][ T795] usb 5-1: SerialNumber: syz [ 249.720276][ T5917] usb 3-1: config 0 descriptor?? [ 249.750260][ T795] usb 5-1: config 0 descriptor?? [ 249.819690][ T5917] hub 3-1:0.0: USB hub found [ 249.951901][ T5917] hub 3-1:0.0: 4 ports detected [ 249.992794][ T795] usb 5-1: USB disconnect, device number 39 [ 250.646411][ T6623] ================================================================== [ 250.654536][ T6623] BUG: KASAN: slab-use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 250.662661][ T6623] Read of size 8 at addr ffff88801e7c0108 by task kworker/u8:20/6623 [ 250.670845][ T6623] [ 250.673226][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: kworker/u8:20 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.673259][ T6623] Tainted: [L]=SOFTLOCKUP [ 250.673265][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.673291][ T6623] Workqueue: netns cleanup_net [ 250.673328][ T6623] Call Trace: [ 250.673339][ T6623] [ 250.673348][ T6623] dump_stack_lvl+0x189/0x250 [ 250.673384][ T6623] ? rcu_is_watching+0x15/0xb0 [ 250.673425][ T6623] ? __kasan_check_byte+0x12/0x40 [ 250.673479][ T6623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.673501][ T6623] ? rcu_is_watching+0x15/0xb0 [ 250.673524][ T6623] ? lock_release+0x4b/0x3b0 [ 250.673550][ T6623] ? __virt_addr_valid+0x1c8/0x5c0 [ 250.673570][ T6623] ? __virt_addr_valid+0x4a5/0x5c0 [ 250.673591][ T6623] print_report+0xca/0x240 [ 250.673626][ T6623] ? nf_hook_entry_head+0x1f1/0x2c0 [ 250.673663][ T6623] kasan_report+0x118/0x150 [ 250.673687][ T6623] ? nf_hook_entry_head+0x1f1/0x2c0 [ 250.673720][ T6623] nf_hook_entry_head+0x1f1/0x2c0 [ 250.673742][ T6623] __nf_unregister_net_hook+0x74/0x6f0 [ 250.673783][ T6623] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 250.673815][ T6623] __nft_release_hook+0x180/0x350 [ 250.673850][ T6623] nf_tables_pre_exit_net+0xa7/0x110 [ 250.673873][ T6623] ops_undo_list+0x187/0x990 [ 250.673891][ T6623] ? __pfx_ops_undo_list+0x10/0x10 [ 250.673939][ T6623] ? do_raw_spin_unlock+0x122/0x240 [ 250.673971][ T6623] cleanup_net+0x4d8/0x7a0 [ 250.673993][ T6623] ? __pfx_cleanup_net+0x10/0x10 [ 250.674014][ T6623] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.674046][ T6623] ? process_scheduled_works+0x9ef/0x1770 [ 250.674061][ T6623] ? process_scheduled_works+0x9ef/0x1770 [ 250.674075][ T6623] process_scheduled_works+0xad1/0x1770 [ 250.674121][ T6623] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.674149][ T6623] worker_thread+0x8a0/0xda0 [ 250.674171][ T6623] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.674206][ T6623] ? __kthread_parkme+0x7b/0x200 [ 250.674226][ T6623] kthread+0x711/0x8a0 [ 250.674260][ T6623] ? __pfx_worker_thread+0x10/0x10 [ 250.674282][ T6623] ? __pfx_kthread+0x10/0x10 [ 250.674307][ T6623] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.674336][ T6623] ? lockdep_hardirqs_on+0x98/0x140 [ 250.674374][ T6623] ? __pfx_kthread+0x10/0x10 [ 250.674399][ T6623] ret_from_fork+0x599/0xb30 [ 250.674420][ T6623] ? __pfx_ret_from_fork+0x10/0x10 [ 250.674451][ T6623] ? __switch_to_asm+0x39/0x70 [ 250.674475][ T6623] ? __switch_to_asm+0x33/0x70 [ 250.674502][ T6623] ? __pfx_kthread+0x10/0x10 [ 250.674521][ T6623] ret_from_fork_asm+0x1a/0x30 [ 250.674562][ T6623] [ 250.674571][ T6623] [ 250.928695][ T6623] Allocated by task 8003: [ 250.933052][ T6623] kasan_save_track+0x3e/0x80 [ 250.937773][ T6623] __kasan_slab_alloc+0x6c/0x80 [ 250.942705][ T6623] kmem_cache_alloc_node_noprof+0x43c/0x720 [ 250.948668][ T6623] kmalloc_reserve+0xbd/0x290 [ 250.953385][ T6623] __alloc_skb+0x27e/0x430 [ 250.957848][ T6623] netlink_ack+0x146/0xa50 [ 250.962315][ T6623] netlink_rcv_skb+0x28c/0x470 [ 250.967136][ T6623] genl_rcv+0x28/0x40 [ 250.971160][ T6623] netlink_unicast+0x82f/0x9e0 [ 250.975988][ T6623] netlink_sendmsg+0x805/0xb30 [ 250.980909][ T6623] __sock_sendmsg+0x21c/0x270 [ 250.985633][ T6623] ____sys_sendmsg+0x505/0x820 [ 250.990559][ T6623] ___sys_sendmsg+0x21f/0x2a0 [ 250.995312][ T6623] __x64_sys_sendmsg+0x19b/0x260 [ 251.000300][ T6623] do_syscall_64+0xfa/0xf80 [ 251.004856][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.010792][ T6623] [ 251.013129][ T6623] Freed by task 23: [ 251.016973][ T6623] kasan_save_track+0x3e/0x80 [ 251.021680][ T6623] kasan_save_free_info+0x46/0x50 [ 251.026734][ T6623] __kasan_slab_free+0x5c/0x80 [ 251.031569][ T6623] kmem_cache_free+0x197/0x620 [ 251.036518][ T6623] skb_release_data+0x62d/0x7c0 [ 251.041433][ T6623] sk_skb_reason_drop+0x127/0x170 [ 251.046546][ T6623] skb_queue_purge_reason+0x2c8/0x360 [ 251.052005][ T6623] netlink_sock_destruct+0x2d/0x1a0 [ 251.057246][ T6623] __sk_destruct+0x85/0x880 [ 251.061785][ T6623] rcu_core+0xd70/0x1870 [ 251.066092][ T6623] handle_softirqs+0x27d/0x850 [ 251.070915][ T6623] run_ksoftirqd+0x9b/0x100 [ 251.075456][ T6623] smpboot_thread_fn+0x542/0xa60 [ 251.080470][ T6623] kthread+0x711/0x8a0 [ 251.084590][ T6623] ret_from_fork+0x599/0xb30 [ 251.089224][ T6623] ret_from_fork_asm+0x1a/0x30 [ 251.094037][ T6623] [ 251.096385][ T6623] The buggy address belongs to the object at ffff88801e7c0000 [ 251.096385][ T6623] which belongs to the cache skbuff_small_head of size 704 [ 251.110986][ T6623] The buggy address is located 264 bytes inside of [ 251.110986][ T6623] freed 704-byte region [ffff88801e7c0000, ffff88801e7c02c0) [ 251.124877][ T6623] [ 251.127243][ T6623] The buggy address belongs to the physical page: [ 251.133692][ T6623] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e7c0 [ 251.142487][ T6623] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 251.151025][ T6623] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 251.158991][ T6623] page_type: f5(slab) [ 251.163011][ T6623] raw: 00fff00000000040 ffff88801d6fbb40 ffffea000186e100 0000000000000003 [ 251.171773][ T6623] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 251.180400][ T6623] head: 00fff00000000040 ffff88801d6fbb40 ffffea000186e100 0000000000000003 [ 251.189350][ T6623] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 251.198075][ T6623] head: 00fff00000000002 ffffea000079f001 00000000ffffffff 00000000ffffffff [ 251.206791][ T6623] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 251.215494][ T6623] page dumped because: kasan: bad access detected [ 251.221947][ T6623] page_owner tracks the page as allocated [ 251.227689][ T6623] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 0, tgid 0 (swapper/0), ts 219948570585, free_ts 219626543275 [ 251.247875][ T6623] post_alloc_hook+0x234/0x290 [ 251.252684][ T6623] get_page_from_freelist+0x2365/0x2440 [ 251.258294][ T6623] __alloc_frozen_pages_noprof+0x181/0x370 [ 251.264155][ T6623] alloc_pages_mpol+0x232/0x4a0 [ 251.269041][ T6623] allocate_slab+0x86/0x3b0 [ 251.273592][ T6623] ___slab_alloc+0xf2b/0x1960 [ 251.278318][ T6623] __slab_alloc+0x65/0x100 [ 251.282793][ T6623] kmem_cache_alloc_node_noprof+0x4ce/0x720 [ 251.288740][ T6623] kmalloc_reserve+0xbd/0x290 [ 251.293476][ T6623] __alloc_skb+0x27e/0x430 [ 251.297920][ T6623] ndisc_alloc_skb+0x9f/0x480 [ 251.302650][ T6623] ndisc_send_rs+0x2b5/0x630 [ 251.307277][ T6623] addrconf_rs_timer+0x369/0x6a0 [ 251.312263][ T6623] call_timer_fn+0x16e/0x590 [ 251.316901][ T6623] __run_timer_base+0x61a/0x860 [ 251.321798][ T6623] run_timer_softirq+0xb7/0x180 [ 251.326671][ T6623] page last free pid 7719 tgid 7719 stack trace: [ 251.333068][ T6623] __free_frozen_pages+0xbc8/0xd30 [ 251.338241][ T6623] device_release+0x9e/0x1d0 [ 251.342881][ T6623] kobject_put+0x228/0x570 [ 251.347336][ T6623] netdev_run_todo+0xd2c/0xea0 [ 251.352144][ T6623] tun_chr_close+0x13c/0x1c0 [ 251.356761][ T6623] __fput+0x44c/0xa70 [ 251.360766][ T6623] task_work_run+0x1d4/0x260 [ 251.365412][ T6623] exit_to_user_mode_loop+0xff/0x4f0 [ 251.370764][ T6623] do_syscall_64+0x2d0/0xf80 [ 251.375390][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.381321][ T6623] [ 251.383688][ T6623] Memory state around the buggy address: [ 251.389324][ T6623] ffff88801e7c0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.397429][ T6623] ffff88801e7c0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.405514][ T6623] >ffff88801e7c0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.413604][ T6623] ^ [ 251.417952][ T6623] ffff88801e7c0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.426045][ T6623] ffff88801e7c0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 251.434124][ T6623] ================================================================== [ 251.453712][ T5917] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 251.613695][ T6623] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 251.620960][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: kworker/u8:20 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.632113][ T6623] Tainted: [L]=SOFTLOCKUP [ 251.636462][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.646552][ T6623] Workqueue: netns cleanup_net [ 251.651366][ T6623] Call Trace: [ 251.654670][ T6623] [ 251.657630][ T6623] dump_stack_lvl+0x99/0x250 [ 251.662257][ T6623] ? __asan_memcpy+0x40/0x70 [ 251.666876][ T6623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.672110][ T6623] ? __pfx__printk+0x10/0x10 [ 251.676745][ T6623] vpanic+0x237/0x6d0 [ 251.680767][ T6623] ? __pfx_vpanic+0x10/0x10 [ 251.685300][ T6623] ? preempt_schedule+0xae/0xc0 [ 251.690179][ T6623] ? __pfx_preempt_schedule+0x10/0x10 [ 251.695589][ T6623] panic+0xb9/0xc0 [ 251.699363][ T6623] ? __pfx_panic+0x10/0x10 [ 251.703815][ T6623] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 251.709783][ T6623] ? nf_hook_entry_head+0x1f1/0x2c0 [ 251.715073][ T6623] check_panic_on_warn+0x89/0xb0 [ 251.720080][ T6623] ? nf_hook_entry_head+0x1f1/0x2c0 [ 251.725322][ T6623] end_report+0x6f/0x140 [ 251.729606][ T6623] kasan_report+0x129/0x150 [ 251.734235][ T6623] ? nf_hook_entry_head+0x1f1/0x2c0 [ 251.739476][ T6623] nf_hook_entry_head+0x1f1/0x2c0 [ 251.744651][ T6623] __nf_unregister_net_hook+0x74/0x6f0 [ 251.750148][ T6623] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 251.756519][ T6623] __nft_release_hook+0x180/0x350 [ 251.761778][ T6623] nf_tables_pre_exit_net+0xa7/0x110 [ 251.767188][ T6623] ops_undo_list+0x187/0x990 [ 251.772007][ T6623] ? __pfx_ops_undo_list+0x10/0x10 [ 251.777162][ T6623] ? do_raw_spin_unlock+0x122/0x240 [ 251.782451][ T6623] cleanup_net+0x4d8/0x7a0 [ 251.786909][ T6623] ? __pfx_cleanup_net+0x10/0x10 [ 251.791973][ T6623] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.797218][ T6623] ? process_scheduled_works+0x9ef/0x1770 [ 251.802999][ T6623] ? process_scheduled_works+0x9ef/0x1770 [ 251.808792][ T6623] process_scheduled_works+0xad1/0x1770 [ 251.814476][ T6623] ? __pfx_process_scheduled_works+0x10/0x10 [ 251.820499][ T6623] worker_thread+0x8a0/0xda0 [ 251.825122][ T6623] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 251.831525][ T6623] ? __kthread_parkme+0x7b/0x200 [ 251.836684][ T6623] kthread+0x711/0x8a0 [ 251.840792][ T6623] ? __pfx_worker_thread+0x10/0x10 [ 251.846110][ T6623] ? __pfx_kthread+0x10/0x10 [ 251.850734][ T6623] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.855976][ T6623] ? lockdep_hardirqs_on+0x98/0x140 [ 251.861205][ T6623] ? __pfx_kthread+0x10/0x10 [ 251.865840][ T6623] ret_from_fork+0x599/0xb30 [ 251.870482][ T6623] ? __pfx_ret_from_fork+0x10/0x10 [ 251.875635][ T6623] ? __switch_to_asm+0x39/0x70 [ 251.880459][ T6623] ? __switch_to_asm+0x33/0x70 [ 251.885260][ T6623] ? __pfx_kthread+0x10/0x10 [ 251.889890][ T6623] ret_from_fork_asm+0x1a/0x30 [ 251.894702][ T6623] [ 251.898406][ T6623] Kernel Offset: disabled [ 251.902735][ T6623] Rebooting in 86400 seconds..