last executing test programs: 19m44.065598097s ago: executing program 3 (id=1031): r0 = epoll_create1(0x80000) openat$vimc1(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) epoll_wait(r0, 0x0, 0x0, 0x9ffa) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, 0x0}, 0x20008800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50080, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x8000) 19m43.701414472s ago: executing program 3 (id=1033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 19m42.401503932s ago: executing program 3 (id=1040): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xf, &(0x7f0000000380)) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) 19m38.55479353s ago: executing program 3 (id=1050): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 19m37.130660656s ago: executing program 3 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) 19m34.975219327s ago: executing program 3 (id=1060): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x82, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x101, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20004000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m34.558488364s ago: executing program 32 (id=1060): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x82, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x101, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20004000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.250587339s ago: executing program 1 (id=4009): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7c, 0xb, 0xc000, 0xec8f, 0x6, 0x84, 0xffffffbf, 0x1, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x81}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0x1}, 0x48) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="7800000019001f05b9409b0dffff000d0207be040205060506144007430005000f000000fac8388827a685a168d9a446040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x8, @mcast2, 0xf}}, 0x0, 0x0, 0x3, 0x0, "bbd6140100190000000080735e5b95aab8940000000000000040079f3c7ec0682e000034c688d5f3fcb74e706d0cfb1bca8814edc42596e918a802afa9b2c1b314badac22000"}, 0xd8) setuid(0xee01) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x5, 0xed, 0xa, 0x0, 0x2, 0x0, 0xd46e, 0x5f, r2}, 0x20) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 18.672116725s ago: executing program 1 (id=4010): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xfffffff8}}}, 0x104) 14.528460646s ago: executing program 0 (id=4017): r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xdaf}}, './file0\x00'}) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000100037042dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83040400f7ffffff300012800b000164e70000002000028004001200060002"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) 14.380289048s ago: executing program 5 (id=4018): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(&(0x7f0000000080)={0xd60b, 0x2}, 0x18, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x1003, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r2, 0x3532, 0x32c9, 0x45, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 12.942131105s ago: executing program 4 (id=4020): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r0, &(0x7f0000000080)='./file0\x00', r5, r6, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 12.154770737s ago: executing program 0 (id=4021): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000980)={0xd3d, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000280)) connect$tipc(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x1000, 0xe, 0x72, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x2000, 0xb, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xc7}, {0xeeee8000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0x8000000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x6, 0x3}, {0x25000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0xf, 0x7, 0x3, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x1}, {0xb000, 0x1000, 0x10, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x2, 0x7, 0x20, 0xf8}, {0x100000, 0x8000000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff43, 0x401, 0x8, 0x6]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000300)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 11.649378271s ago: executing program 5 (id=4022): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b000000000000020000000018000000000000002900000039000000000000000000000038"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c31ffba527c5dfb132cb48cbc2e0f", 0x6a}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}], 0x5}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000e40)={0x2, 0x0, @private}, &(0x7f0000000e80)=0x10, 0x40800) getsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000ec0), &(0x7f0000001000)=0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x10c, 0x3, {{0x0}, 0x0, 0x19}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x6}}], 0x60, 0x45}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.463151281s ago: executing program 2 (id=4023): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)=ANY=[], 0x18c) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x280, 0x2e8, 0x2e8, 0x280, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0xff], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x110, 0x140, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x10}, {0x8000000000000001}]}}, @common=@frag={{0x30}, {[0x4, 0x7fffffff], 0x4, 0x10, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @remote, [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'geneve1\x00', 'netpci0\x00', {}, {0xff}, 0x32, 0x4, 0x4, 0x4}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x8, 0x7, 0x1, [0x9, 0x4, 0x13, 0x0, 0x6, 0x6, 0x8, 0x1fd, 0x2, 0x401, 0x800, 0x6, 0x6, 0x5fd8, 0x8000, 0x81], 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) futex_waitv(&(0x7f0000002d40)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) read$dsp(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x7, 0xfffffffffffffffd, 0x9, 0x40, 0x1, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 10.366230792s ago: executing program 4 (id=4024): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) 10.003040585s ago: executing program 0 (id=4025): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280)) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x1000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x2000, 0xb, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xc7}, {0xd000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0x8000000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x6, 0x3}, {0x2, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x1}, {0x6000, 0x1000, 0x10, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0x8000000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x6]}) r8 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) syz_usb_disconnect(r8) close_range(r0, 0xffffffffffffffff, 0x0) 9.936808594s ago: executing program 1 (id=4026): socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) epoll_create(0x10000e9) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0x80000000000ffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2b0840, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x46, &(0x7f0000000300)=0x9, 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r4, &(0x7f0000000080), 0xf) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 9.917499414s ago: executing program 5 (id=4027): writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_seqnum', 0x149b82, 0xb300bb1401d27a12) write$cgroup_int(r3, &(0x7f0000000000)=0x800, 0x12) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 9.363842556s ago: executing program 4 (id=4028): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000900) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) openat$sw_sync_info(0xffffff9c, &(0x7f0000000200), 0x400, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9, 0x3, 0x0, 'queue0\x00', 0x6}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000140)={0x1, 0x3, 0x46, 0x0, 0x4}) 7.618982143s ago: executing program 2 (id=4029): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000100)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020000000080800470000300000000000069078ac141400ac1e00010707070000000000000000005f744ea158fa32830708c1c0633a36a90b48413f9cc81727e893c6a69649980ccdb20d529d6b9fcd39479efb7da2b42438eea3bdef0ba0a5134a238d7c25821b31cbbac1ce9b307016cc1c427ec8a9d167d7240933ae85779165d35dd7420567d677f144e3872ffcc7f48c07a222e9457f3a76cfaa36c4b7772eba688b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 7.085186251s ago: executing program 4 (id=4030): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0x6, 0xfffffe0000000004, 0x1000fa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000002900000037000000000000000000000004a7f86dbdd824ac5c6642e1f4017400000000000edb74357c3c368c437c2a"], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000040601010400000000000003000000000500010007000000a6abba935ed959291a15ba549f08ec39cf62bd59fdbf76055f8414f9914c0f17d75625a129a5586ecba0b1ab973eb96293f871e4713af7d911d8174114b3610a9efd2ee8207931d713157b856a6085c1008e64d3a45a7592d8f91b1a70f0c44c634c740ea0c8ee9fe319dab19fe015121a616511f3023e06246fdecd1c58cf2e17d621ec"], 0x1c}}, 0x0) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x564) 6.911149667s ago: executing program 1 (id=4031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4814) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_ACT={0x4}]}}]}, 0x38}}, 0x24000000) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, 0x0}, 0x20) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.867638609s ago: executing program 5 (id=4032): sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe95, 0x20004880, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r5, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={0x0}}, 0x20) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcdee6"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100000000ff", 0x24) 4.908128695s ago: executing program 0 (id=4033): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r0, &(0x7f0000000080)='./file0\x00', r5, r7, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 4.905209261s ago: executing program 4 (id=4034): socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = memfd_create(0x0, 0xe) ftruncate(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = syz_open_dev$vivid(0x0, 0x3, 0x2) lstat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000140)=@mmap={0x5, 0x8, 0x4, 0xfd58a39f5f8a9514, 0x3, {}, {0x1, 0x0, 0x0, 0xc, 0xa, 0x4, "930ee09c"}, 0x4}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001b40)='//\xf2/\x06\b///o\xdc\xea\r\x00\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000f9a000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x18c244}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f00000000c0)='tunl0\x00', 0x6) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28801, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r7) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000000)={0x100000, 0x308000, 0x8}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x4, 0x2}]}, 0x18}}, 0x0) 3.438952179s ago: executing program 2 (id=4036): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=0x6e5, 0x8, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x49323159}) r3 = socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) readv(r4, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}, {0x0}], 0x2) 3.152932776s ago: executing program 0 (id=4037): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c000000019000100ff010000fcdbdf25e0000002000000000000000000000000ae14140d00000000000000000000000000000000000000000200a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f0000000000000000000000000200000000000000000000000000000000000000000000030900000000000000ffffffffffffffff000000000000000000000000000000000000000000000000010000020000000008001d009e970000"], 0xc0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000240)={0x18, 0x0, 0xdd703f61efd88e4, 0x0, 0x0, 0x8}) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 2.978002892s ago: executing program 1 (id=4038): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200", @ANYRES8=r2], 0x108}}], 0x2, 0xc040) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100666962000c00028008000240000000030900020073797a3200000000140000001100010000000000000000000100000afdb67f35a63cab0600fcdde57017efa0ad9787aa77e2ec3246854ee8e29d0b748cdb10ed5715ab222b83db580838f60700000000000000af22152f3c8c1598955b97abe43d329bcb34e711e2fa78caf4c14dc4333419fa7ed2a27c3ceb7c94b6aa19645f98d85b7c8f5a4d0f0c3ba208559bc8f6becea57318a09831f18338bc6d78d41d497aea53ac61b0c0cb26e71bd2b3ee823a43b57fac3e16017cd27f155a6a7d53557b149d42d46af7822cb5"], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) 2.438997462s ago: executing program 5 (id=4039): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x80000000, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{0x0}], 0x1) fcntl$setlease(r8, 0x400, 0x1) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.381468764s ago: executing program 2 (id=4040): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) dup3(0xffffffffffffffff, r2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) memfd_create(0x0, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002000128009000100626f6e640000000010000280040008800800070005000000d11c5d31ca034faacca9c554b8cbaf6a9b48e8ca9df81baad82305b15a"], 0x40}, 0x1, 0x0, 0x0, 0x40060880}, 0x240400c0) 1.926167299s ago: executing program 1 (id=4041): socket$kcm(0x29, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x3}, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000722000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x1, 'syz0\x00', 0xfffd}, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0xffff, 0xfff, 'syz1\x00', 0x2}) 1.166409894s ago: executing program 4 (id=4042): openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = msgget$private(0x0, 0x184) msgsnd(r2, &(0x7f0000000140)=ANY=[], 0xfd1, 0x0) msgctl$IPC_RMID(r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r6, 0x303, 0x80000000, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 730.872069ms ago: executing program 0 (id=4043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)={0x268, 0x17, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x17c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x268}, 0x1, 0x0, 0x0, 0xc051}, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x1215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x586c, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x7, {0x7, 0x29, "9652c5ae90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffe, 0x0, 0x622b, 0x12, "8016fa7d820005ff8b89848a889b02d6002000"}) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)='D', 0x1, 0x805, &(0x7f0000000300)={0x11, 0x9, r7, 0x1, 0xf7}, 0x14) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000000)={0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000010000000000000000000a808000000000000000001e9322aa1cfe7882bb38ab5ff7069f770000000000000008000000000000000000587a3cde0d9cbcef294c3478c384a39771cdf2c104f10e9b172dde9bb1d970a0dec41952f62d084a9b0cc76d5268d6c348acdd978868f36ff6c36215000000000000000000000000dd0000"], 0x44}, 0x1, 0x0, 0x0, 0x4044801}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100"/47], 0x5c}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 88.994177ms ago: executing program 2 (id=4044): socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x108843, 0x98) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c000) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0xcb, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) 0s ago: executing program 5 (id=4045): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x6c}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) unshare(0x28040680) r1 = timerfd_create(0x0, 0x0) timerfd_gettime(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r4], 0x5c}, 0x1, 0xba01}, 0x0) close(r4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0417c100000000000109022400010000000009040009010300010009210500c70122050009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600ad000000", @ANYRES32=r1, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): er=3 [ 1133.267388][T14406] usb 6-1: Product: syz [ 1133.298372][T14406] usb 6-1: Manufacturer: syz [ 1133.317847][T14406] usb 6-1: SerialNumber: syz [ 1133.388513][T14406] usb 6-1: config 0 descriptor?? [ 1133.427635][T14406] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1133.757418][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3235'. [ 1133.786231][T14406] gspca_sunplus: reg_r err -71 [ 1133.800634][T14406] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1133.809392][ T5823] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 1133.870342][T14406] usb 6-1: USB disconnect, device number 28 [ 1133.969737][ T5823] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1133.981751][ T5823] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1134.041686][ T5823] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1134.121370][ T5823] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1134.174897][ T5823] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1134.253487][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'. [ 1134.265053][ T5823] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1134.283623][T14394] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1134.317441][ T5823] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1134.353108][ T5823] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1134.391204][ T5823] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1134.430997][ T5823] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1134.484780][ T5823] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1134.513998][ T5823] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1134.562792][ T5823] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1134.625598][ T5823] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1134.653293][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3239'. [ 1134.681433][ T5823] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1134.722871][ T5823] usb 2-1: string descriptor 0 read error: -22 [ 1134.729466][ T5823] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1134.760582][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.828443][ T5823] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1135.731746][T14394] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1135.825307][T14394] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1135.909484][T17771] QAT: failed to copy from user. [ 1135.921256][T14394] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1135.984203][T14394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.543100][T17749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1136.643323][T14394] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1136.869462][ T6269] usb 2-1: USB disconnect, device number 60 [ 1137.898626][ T5823] usb 5-1: USB disconnect, device number 48 [ 1138.100629][T17797] netlink: 'syz.4.3247': attribute type 1 has an invalid length. [ 1138.265902][T17802] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1138.323509][T17802] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1138.534351][T17797] bond9: (slave gretap1): making interface the new active one [ 1138.580682][T17797] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 1138.676107][T17808] macvlan3: entered promiscuous mode [ 1138.723023][T17808] macvlan3: entered allmulticast mode [ 1138.768355][T17808] bond9: entered promiscuous mode [ 1138.786155][T17808] gretap1: entered promiscuous mode [ 1138.853979][T17808] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1138.909400][T17812] kvm: kvm [17811]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3f00000304 [ 1138.934189][T17808] bond9: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1139.005013][T17808] bond9: left promiscuous mode [ 1139.042238][T17808] gretap1: left promiscuous mode [ 1139.423888][T17810] syzkaller0: entered promiscuous mode [ 1139.444760][T17810] syzkaller0: entered allmulticast mode [ 1139.890800][T17808] syz.4.3247 (17808) used greatest stack depth: 17440 bytes left [ 1140.301355][ T6269] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1140.471823][ T6269] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1140.516921][ T6269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.646962][ T6269] usb 3-1: config 0 descriptor?? [ 1140.673309][ T6269] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1141.011472][ T5823] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1141.171479][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 1141.179200][ T5823] usb 5-1: config 0 has an invalid interface number: 223 but max is 0 [ 1141.211229][ T5823] usb 5-1: config 0 has no interface number 0 [ 1141.238942][ T5823] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=10.fe [ 1141.285052][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.335472][ T5823] usb 5-1: Product: syz [ 1141.372345][ T5823] usb 5-1: Manufacturer: syz [ 1141.381892][ T6269] gspca_spca508: reg_read err -110 [ 1141.391668][ T6269] gspca_spca508: reg_read err -32 [ 1141.402994][ T6269] gspca_spca508: reg_read err -32 [ 1141.409619][ T6269] gspca_spca508: reg_read err -32 [ 1141.417975][ T5823] usb 5-1: SerialNumber: syz [ 1141.444727][ T6269] gspca_spca508: reg write: error -32 [ 1141.450488][ T6269] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 1141.477334][ T5823] usb 5-1: config 0 descriptor?? [ 1141.748226][ T6269] usb 5-1: USB disconnect, device number 49 [ 1142.943831][ T6269] usb 3-1: USB disconnect, device number 57 [ 1143.685799][T17849] netlink: set zone limit has 4 unknown bytes [ 1150.328018][T17899] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.3265'. [ 1150.614327][T17910] usb usb8: usbfs: process 17910 (syz.5.3269) did not claim interface 0 before use [ 1151.011536][T14387] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1151.577700][T17916] input: syz1 as /devices/virtual/input/input64 [ 1151.608341][T17916] input: failed to attach handler leds to device input64, error: -6 [ 1152.608457][T17926] block device autoloading is deprecated and will be removed. [ 1152.891546][T14394] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1153.086178][T14394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.108818][T14394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.146943][T14394] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1153.179391][T14394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.225754][T14394] usb 6-1: config 0 descriptor?? [ 1153.689835][T14394] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 1153.715059][T14394] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 1153.796357][T14394] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.001C/input/input65 [ 1154.035425][T14394] cm6533_jd 0003:0D8C:0022.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 1154.614317][T14394] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1154.815028][T14394] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1154.845457][T14394] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1154.901780][T14394] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1154.937950][T14394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.969619][T17938] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1154.996829][T17938] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1155.032765][T14394] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1155.082572][ T5823] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 1156.662582][T14408] usb 6-1: USB disconnect, device number 29 [ 1157.863261][T14394] usb 3-1: USB disconnect, device number 58 [ 1159.422021][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1159.422041][ T30] audit: type=1326 audit(1766103171.889:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1159.610854][ T30] audit: type=1326 audit(1766103171.909:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1159.707308][ T30] audit: type=1326 audit(1766103171.909:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1159.749684][T17986] tipc: Enabled bearer , priority 0 [ 1159.773597][T17986] syzkaller0: entered promiscuous mode [ 1159.794965][T17986] syzkaller0: entered allmulticast mode [ 1159.845575][T17986] tipc: Resetting bearer [ 1159.860715][ T30] audit: type=1326 audit(1766103171.909:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1159.870597][T17986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.985596][T17985] tipc: Resetting bearer [ 1160.013866][ T30] audit: type=1326 audit(1766103171.909:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1160.049558][T17985] tipc: Disabling bearer [ 1160.091924][ T30] audit: type=1326 audit(1766103171.919:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1160.217855][ T30] audit: type=1326 audit(1766103171.919:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1160.367629][ T30] audit: type=1326 audit(1766103171.919:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1160.432861][ T30] audit: type=1326 audit(1766103171.919:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1160.519426][ T30] audit: type=1326 audit(1766103171.919:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17974 comm="syz.1.3285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1160.811389][T18002] macvlan0: entered promiscuous mode [ 1160.879350][T18002] netlink: 'syz.5.3289': attribute type 1 has an invalid length. [ 1160.936256][T18002] netlink: 'syz.5.3289': attribute type 2 has an invalid length. [ 1162.404744][T18016] syzkaller0: entered promiscuous mode [ 1162.430227][T18016] syzkaller0: entered allmulticast mode [ 1162.881282][T14408] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1163.073536][T14408] usb 3-1: config 0 has no interfaces? [ 1163.085432][T14408] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1163.099442][T14408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.109881][T14408] usb 3-1: Product: syz [ 1163.114351][T14408] usb 3-1: Manufacturer: syz [ 1163.119140][T14408] usb 3-1: SerialNumber: syz [ 1163.188825][T14408] usb 3-1: config 0 descriptor?? [ 1163.452731][T14408] usb 3-1: USB disconnect, device number 59 [ 1163.611326][ T5823] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1163.761232][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 1163.811264][ T5823] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1163.863484][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1163.921250][ T5823] usb 2-1: Product: syz [ 1163.953665][ T5823] usb 2-1: Manufacturer: syz [ 1164.015325][ T5823] usb 2-1: SerialNumber: syz [ 1164.071820][ T5823] usb 2-1: config 0 descriptor?? [ 1164.227096][T18043] kAFS: unable to lookup cell '' [ 1166.659134][ T5823] usb 2-1: USB disconnect, device number 61 [ 1166.971392][T14408] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1167.163709][T14408] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1167.185402][T14408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.208165][T14408] usb 1-1: Product: syz [ 1167.219183][T14408] usb 1-1: Manufacturer: syz [ 1167.237479][T14408] usb 1-1: SerialNumber: syz [ 1167.258207][T14408] usb 1-1: config 0 descriptor?? [ 1167.351700][T14406] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1167.511515][T14406] usb 5-1: Using ep0 maxpacket: 32 [ 1167.548110][T14406] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.576249][T14408] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 1167.589759][T14406] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1167.612860][T14408] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1167.649031][T14406] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1167.661565][T14408] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 1167.700884][T14406] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1167.719303][T14408] usb 1-1: USB disconnect, device number 59 [ 1167.740118][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 1167.769556][T14406] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1167.808296][T14406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.844126][T14406] usb 5-1: Product: syz [ 1167.858073][T14406] usb 5-1: Manufacturer: syz [ 1167.879168][T14406] usb 5-1: SerialNumber: syz [ 1167.934469][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1167.966719][T14406] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input66 [ 1168.149616][T14406] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1168.174524][T14406] (id 0x00) [ 1168.339307][T14406] rc_core: IR keymap rc-imon-pad not found [ 1168.362499][T14406] Registered IR keymap rc-empty [ 1168.378265][T14406] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1168.404037][T14406] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1168.452946][T14406] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1168.505225][T14406] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input67 [ 1168.563805][T14406] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:50> initialized [ 1168.841283][T14394] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1169.061204][T14394] usb 6-1: Using ep0 maxpacket: 32 [ 1169.091657][T14394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.095550][T18095] imon:send_packet: task interrupted [ 1169.134778][T18095] imon:send_packet: packet tx failed (-512) [ 1169.156842][T14394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.184800][T18095] imon:vfd_write: send packet #1 failed [ 1169.209267][T18095] imon:send_packet: task interrupted [ 1169.209304][T14394] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1169.232716][T14394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.274486][T14394] usb 6-1: config 0 descriptor?? [ 1169.293889][T18095] imon:send_packet: packet tx failed (-512) [ 1169.329691][T18095] imon:vfd_write: send packet #0 failed [ 1169.378102][T18095] imon:send_packet: packet tx failed (-32) [ 1169.410201][T18095] imon:vfd_write: send packet #0 failed [ 1169.452570][ T6269] usb 5-1: USB disconnect, device number 50 [ 1169.697196][T14394] usbhid 6-1:0.0: can't add hid device: -71 [ 1169.719405][T14394] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1169.786326][T14394] usb 6-1: USB disconnect, device number 30 [ 1170.651502][T14394] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1170.842849][T14394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.863657][T14394] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1170.892217][T14394] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1170.947989][T14394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.060411][T14394] usb 1-1: config 0 descriptor?? [ 1171.170152][T18107] bond5: (slave dummy0): Releasing active interface [ 1171.214420][T18107] dummy0: left allmulticast mode [ 1171.533259][T14394] ortek 0003:1223:3F07.001D: unknown main item tag 0x3 [ 1171.540216][T14394] ortek 0003:1223:3F07.001D: item fetching failed at offset 1/5 [ 1171.614041][T14394] ortek 0003:1223:3F07.001D: probe with driver ortek failed with error -22 [ 1171.891434][T14406] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1172.061228][T14406] usb 5-1: Using ep0 maxpacket: 8 [ 1172.092995][T14406] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.131526][T14406] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.161646][T14406] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1172.168374][T14406] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1172.203020][T14406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.211389][T14394] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1172.252145][T14406] usb 5-1: config 0 descriptor?? [ 1172.421640][T14394] usb 2-1: Using ep0 maxpacket: 8 [ 1172.435806][T14394] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1172.452706][T14394] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1172.469507][T14394] usb 2-1: string descriptor 0 read error: -22 [ 1172.483453][T14394] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1172.510415][T14394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.583787][T14394] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1172.635091][T14394] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1172.682965][T14406] smartjoyplus 0003:0B43:0003.001E: ignoring exceeding usage max [ 1172.705937][T14406] smartjoyplus 0003:0B43:0003.001E: unbalanced collection at end of report description [ 1172.722105][T14394] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1172.737267][T14394] usb 2-1: media controller created [ 1172.751957][T14406] smartjoyplus 0003:0B43:0003.001E: parse failed [ 1172.763145][T14406] smartjoyplus 0003:0B43:0003.001E: probe with driver smartjoyplus failed with error -22 [ 1172.839184][T14394] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1172.875362][T14406] usb 5-1: USB disconnect, device number 51 [ 1172.895825][T18125] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 1173.465850][ T6269] usb 1-1: USB disconnect, device number 60 [ 1173.598686][T14394] zl10353_read_register: readreg error (reg=127, ret==0) [ 1173.793867][T14394] usb 2-1: USB disconnect, device number 62 [ 1173.879001][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1173.879019][ T30] audit: type=1326 audit(1766103186.339:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.1.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1173.921797][T18146] syz.1.3325(18146): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1174.057011][ T30] audit: type=1326 audit(1766103186.379:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.1.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1174.195406][ T30] audit: type=1326 audit(1766103186.389:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.1.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1174.326578][ T30] audit: type=1326 audit(1766103186.419:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.1.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1174.437793][ T30] audit: type=1326 audit(1766103186.419:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.1.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1174.566358][ T30] audit: type=1326 audit(1766103186.419:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.1.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1174.684314][ T30] audit: type=1326 audit(1766103186.419:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.1.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1174.830397][ T30] audit: type=1326 audit(1766103186.419:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.1.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1174.961863][ T30] audit: type=1326 audit(1766103186.419:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.1.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1175.086131][ T30] audit: type=1326 audit(1766103186.419:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18145 comm="syz.1.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa85f8f749 code=0x7ffc0000 [ 1177.231883][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.245284][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.893746][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1178.893765][ T30] audit: type=1800 audit(1766103191.359:281): pid=18193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3336" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1180.675747][ T30] audit: type=1326 audit(1766103193.129:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354258f749 code=0x7ffc0000 [ 1180.752123][ T30] audit: type=1326 audit(1766103193.129:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f354258f749 code=0x7ffc0000 [ 1180.863947][ T30] audit: type=1326 audit(1766103193.129:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354258f749 code=0x7ffc0000 [ 1180.933984][ T30] audit: type=1326 audit(1766103193.129:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f354258f749 code=0x7ffc0000 [ 1180.996179][ T30] audit: type=1326 audit(1766103193.129:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354258f749 code=0x7ffc0000 [ 1181.068169][ T30] audit: type=1326 audit(1766103193.129:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f354258f749 code=0x7ffc0000 [ 1181.119328][ T30] audit: type=1326 audit(1766103193.129:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354258f749 code=0x7ffc0000 [ 1181.244630][ T30] audit: type=1326 audit(1766103193.129:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f354258f749 code=0x7ffc0000 [ 1181.308777][ T30] audit: type=1326 audit(1766103193.139:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.2.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354258f749 code=0x7ffc0000 [ 1182.253197][T18227] tipc: Enabled bearer , priority 0 [ 1182.304539][T18228] syzkaller0: entered promiscuous mode [ 1182.310254][T18228] syzkaller0: entered allmulticast mode [ 1182.416568][T18227] tipc: Resetting bearer [ 1182.495706][T18226] tipc: Resetting bearer [ 1182.585329][T18226] tipc: Disabling bearer [ 1185.284024][T18266] ip6gretap0: entered promiscuous mode [ 1185.425332][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3351'. [ 1186.503509][T14394] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1186.743088][T14394] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1186.792487][T14394] usb 6-1: config 0 has no interface number 0 [ 1186.821532][T14394] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1186.881161][T14394] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1186.931518][T14394] usb 6-1: config 0 interface 113 has no altsetting 0 [ 1187.012532][T14394] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1187.034297][T14394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.061338][T14394] usb 6-1: Product: syz [ 1187.081389][T14394] usb 6-1: Manufacturer: syz [ 1187.086104][T14394] usb 6-1: SerialNumber: syz [ 1187.197824][T14394] usb 6-1: config 0 descriptor?? [ 1187.241126][ C1] usb 6-1: NFC: Urb failure (status -71) [ 1187.252678][T14394] usb 6-1: NFC: Unable to get FW version [ 1187.314354][T14394] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 1187.493416][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3355'. [ 1189.453818][T14394] usb 6-1: USB disconnect, device number 31 [ 1189.953951][T18320] netlink: 'syz.4.3363': attribute type 1 has an invalid length. [ 1190.046348][T18323] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1190.092698][T18323] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 1190.407571][T18320] bond10: (slave bridge3): Enslaving as an active interface with a down link [ 1190.435942][T18326] macvlan3: entered promiscuous mode [ 1190.456581][T18326] macvlan3: entered allmulticast mode [ 1190.480726][T18326] bond10: entered promiscuous mode [ 1190.504871][T18326] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1190.566171][T18326] bond10: left promiscuous mode [ 1191.870244][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3366'. [ 1193.964084][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 1194.034959][ T5841] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1194.861257][T14406] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1195.688552][T14406] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.725578][T14406] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1195.770064][T14406] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1195.832595][T14406] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1195.922762][T14406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.370257][T14406] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1196.450427][T14406] usb 6-1: invalid MIDI out EP 0 [ 1196.616586][T14406] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1196.740857][T18391] udevd[18391]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1196.945223][T14406] usb 6-1: USB disconnect, device number 32 [ 1201.981466][ T6269] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1202.196127][ T6269] usb 2-1: config 0 has no interfaces? [ 1202.244911][ T6269] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1202.293148][ T6269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.398483][ T6269] usb 2-1: config 0 descriptor?? [ 1202.794174][T14406] usb 2-1: USB disconnect, device number 63 [ 1204.693193][T18471] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 1205.130314][T18489] netlink: 'syz.0.3403': attribute type 1 has an invalid length. [ 1205.641257][ T5823] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1205.806195][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.825245][ T5823] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1205.876496][ T5823] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1205.920686][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.783312][ T5823] usb 1-1: config 0 descriptor?? [ 1209.033104][ T5823] usb 1-1: USB disconnect, device number 61 [ 1209.615777][T18530] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1210.154330][T18540] openvswitch: netlink: Flow key attr not present in new flow. [ 1211.427483][T18551] syzkaller1: entered promiscuous mode [ 1211.458900][T18551] syzkaller1: entered allmulticast mode [ 1212.463146][T14406] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1212.611859][T14406] usb 6-1: device descriptor read/64, error -71 [ 1212.647917][T18567] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 1212.892285][T14406] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1213.042073][T14406] usb 6-1: device descriptor read/64, error -71 [ 1213.176484][T14406] usb usb6-port1: attempt power cycle [ 1213.601843][T14406] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1213.635181][T14406] usb 6-1: device descriptor read/8, error -71 [ 1213.891672][T14406] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1213.942531][T14406] usb 6-1: device descriptor read/8, error -71 [ 1214.083567][T14406] usb usb6-port1: unable to enumerate USB device [ 1214.876561][ T6269] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1215.064514][ T6269] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1215.096433][ T6269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.146107][ T6269] usb 5-1: config 0 descriptor?? [ 1215.393284][ T6269] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1216.708519][T18609] program syz.2.3429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1217.395684][T18620] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1217.429162][T18620] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 1217.751826][T14406] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1217.971894][T14406] usb 6-1: Using ep0 maxpacket: 32 [ 1217.984843][T14406] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.049353][T14406] usb 6-1: config 0 has no interfaces? [ 1218.068879][T14406] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1218.156235][T14406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.225633][T14406] usb 6-1: config 0 descriptor?? [ 1218.479029][T18619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.522496][T18619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.542670][T14406] usb 6-1: USB disconnect, device number 37 [ 1218.558286][ T6269] [drm:udl_init] *ERROR* Selecting channel failed [ 1218.659005][ T6269] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1218.694916][ T6269] [drm] Initialized udl on minor 2 [ 1218.720607][ T6269] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1218.766592][ T6269] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1218.792609][T14394] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1218.805720][ T6269] usb 5-1: USB disconnect, device number 52 [ 1218.825209][T14394] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1219.231335][ T6269] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1219.400531][ T6269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.440621][ T6269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.478205][ T6269] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1219.509205][ T6269] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1219.540362][ T6269] usb 5-1: Manufacturer: syz [ 1219.574267][ T6269] usb 5-1: config 0 descriptor?? [ 1219.636821][T18644] trusted_key: encrypted_key: insufficient parameters specified [ 1220.030637][ T6269] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1220.042760][ T6269] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1220.051665][ T6269] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1220.058888][ T6269] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1220.073250][ T6269] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1220.080637][ T6269] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1220.088669][ T6269] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1220.134844][ T6269] pyra 0003:1E7D:2CF6.001F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1220.891853][T14406] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1221.061753][ T6269] pyra 0003:1E7D:2CF6.001F: couldn't init struct pyra_device [ 1221.103274][ T6269] pyra 0003:1E7D:2CF6.001F: couldn't install mouse [ 1221.132938][ T6269] pyra 0003:1E7D:2CF6.001F: probe with driver pyra failed with error -71 [ 1221.155219][ T6269] usb 5-1: USB disconnect, device number 53 [ 1221.242087][T14406] usb 2-1: Using ep0 maxpacket: 8 [ 1221.305635][T18667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1221.344694][T14406] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.382289][T14406] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1221.424106][T14406] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1221.455916][T14406] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1221.478364][T18665] fido_id[18665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1221.500394][T14406] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1221.529679][T14406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.563962][T14406] usbtmc 2-1:16.0: bulk endpoints not found [ 1224.235094][ T6269] usb 2-1: USB disconnect, device number 64 [ 1224.629820][T18712] random: crng reseeded on system resumption [ 1225.427567][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3455'. [ 1226.598323][T18732] kernel profiling enabled (shift: 6) [ 1226.767844][T18732] input: syz0 as /devices/virtual/input/input68 [ 1227.111243][ T6269] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1227.293011][ T6269] usb 5-1: Using ep0 maxpacket: 32 [ 1227.316016][ T6269] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 1227.356190][ T6269] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1227.380104][ T6269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.408124][ T6269] usb 5-1: Product: syz [ 1227.429337][ T6269] usb 5-1: Manufacturer: syz [ 1227.449286][ T6269] usb 5-1: SerialNumber: syz [ 1227.478212][ T6269] usb 5-1: config 0 descriptor?? [ 1227.503158][T18732] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1227.550833][ T6269] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1227.598783][T18742] netlink: 'syz.0.3462': attribute type 2 has an invalid length. [ 1227.694200][T18742] : entered promiscuous mode [ 1227.854411][ T6269] usb 5-1: USB disconnect, device number 54 [ 1227.974312][T18392] udevd[18392]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1229.295886][T18762] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1229.302463][T18762] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1229.375012][T18765] netlink: 'syz.5.3464': attribute type 2 has an invalid length. [ 1229.402400][T18762] vhci_hcd vhci_hcd.0: Device attached [ 1229.693844][T18763] vhci_hcd: connection closed [ 1229.694420][ T1011] vhci_hcd vhci_hcd.5: stop threads [ 1229.711222][ T6269] usb 44-1: SetAddress Request (6) to port 0 [ 1229.727995][ T1011] vhci_hcd vhci_hcd.5: release socket [ 1229.737972][ T6269] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1229.752069][ T1011] vhci_hcd vhci_hcd.5: disconnect device [ 1229.806662][ T6269] usb 44-1: enqueue for inactive port 0 [ 1230.208238][ T6269] usb usb44-port1: attempt power cycle [ 1230.812487][ T6269] usb usb44-port1: unable to enumerate USB device [ 1231.931263][ T6269] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1232.141553][ T6269] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1232.189703][ T6269] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 1232.204265][ T6269] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1232.311275][ T6269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.360650][ T6269] usb 6-1: config 0 descriptor?? [ 1232.392040][T18787] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1232.685306][T18786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.715531][T18786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.763905][T18786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.782349][T18786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.840109][ T6269] ath6kl: Failed to submit usb control message: -71 [ 1232.866376][ T6269] ath6kl: unable to send the bmi data to the device: -71 [ 1232.881684][ T5823] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1232.881795][ T6269] ath6kl: Unable to send get target info: -71 [ 1232.897387][ T6269] ath6kl: Failed to init ath6kl core: -71 [ 1232.904701][ T6269] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1232.965871][ T6269] usb 6-1: USB disconnect, device number 38 [ 1233.074144][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 1233.083298][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.100339][ T5823] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1233.129527][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.163008][ T5823] usb 3-1: config 0 descriptor?? [ 1233.769980][ T5823] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1234.212318][T18790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.262238][T18790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.327162][ T6269] usb 3-1: USB disconnect, device number 60 [ 1235.154627][ T6269] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1235.352138][ T6269] usb 1-1: Using ep0 maxpacket: 32 [ 1235.378881][ T6269] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1235.436529][ T6269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.452116][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3480'. [ 1235.561818][ T6269] usb 1-1: config 0 descriptor?? [ 1235.620532][ T6269] as10x_usb: device has been detected [ 1235.650823][ T6269] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1235.719792][ T6269] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1235.807904][ T6269] as10x_usb: error during firmware upload part1 [ 1235.850482][ T6269] Registered device nBox DVB-T Dongle [ 1236.287508][T18828] bridge_slave_0: entered promiscuous mode [ 1236.385668][T18832] binder: 18827:18832 ioctl c0306201 0 returned -14 [ 1236.789483][ T6269] usb 1-1: USB disconnect, device number 62 [ 1236.849989][ T6269] Unregistered device nBox DVB-T Dongle [ 1236.855554][ T6269] as10x_usb: device has been disconnected [ 1238.237097][T18837] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 1238.664465][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.681516][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.631666][T14406] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1239.794133][T14406] usb 1-1: config 0 has an invalid interface number: 44 but max is 1 [ 1239.810525][T14406] usb 1-1: config 0 has an invalid interface number: 92 but max is 1 [ 1239.829023][T14406] usb 1-1: config 0 has no interface number 0 [ 1239.852605][T14406] usb 1-1: config 0 has no interface number 1 [ 1239.868507][T14406] usb 1-1: config 0 interface 44 has no altsetting 0 [ 1239.888924][T14406] usb 1-1: config 0 interface 92 has no altsetting 0 [ 1239.915348][T14406] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01ab, bcdDevice=85.24 [ 1239.955006][T14406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.996679][T18867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3490'. [ 1240.015333][T14406] usb 1-1: Product: syz [ 1240.026215][T14406] usb 1-1: Manufacturer: syz [ 1240.055116][T14406] usb 1-1: SerialNumber: syz [ 1240.093648][T14406] usb 1-1: config 0 descriptor?? [ 1240.391954][T14406] ftdi_sio 1-1:0.44: FTDI USB Serial Device converter detected [ 1240.443742][T14406] ftdi_sio ttyUSB0: unknown device type: 0x8524 [ 1240.493604][T14406] ftdi_sio 1-1:0.92: FTDI USB Serial Device converter detected [ 1240.545435][T14406] ftdi_sio ttyUSB1: unknown device type: 0x8524 [ 1240.591914][T14406] usb 1-1: USB disconnect, device number 63 [ 1240.615366][T14406] ftdi_sio 1-1:0.44: device disconnected [ 1240.646352][T14406] ftdi_sio 1-1:0.92: device disconnected [ 1241.201519][ T6269] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1241.770009][ T6269] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.770083][ T6269] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1241.770105][ T6269] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.770138][ T6269] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1241.770155][ T6269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.850920][ T6269] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1241.855815][ T6269] usb 3-1: invalid MIDI out EP 0 [ 1242.109894][T18275] udevd[18275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1242.155047][ T6269] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1242.582707][T18875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.607201][T18875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.666747][T18898] program syz.4.3497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1244.117385][ T6269] usb 3-1: USB disconnect, device number 61 [ 1247.231743][T14412] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1247.733643][T14412] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1247.773340][T14412] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1247.837604][T14412] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1248.043476][T14412] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1248.074637][T14412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.119238][T14412] usb 5-1: Product: syz [ 1248.151601][T14412] usb 5-1: Manufacturer: syz [ 1248.199315][T14412] usb 5-1: SerialNumber: syz [ 1248.235018][T14412] usb 5-1: config 0 descriptor?? [ 1248.406662][T18946] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1248.425940][T18946] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1248.528464][T14412] usb 5-1: ucan: probing device on interface #0 [ 1249.055988][T14412] usb 5-1: ucan: device reported invalid tx-fifo size [ 1249.072385][T14412] usb 5-1: ucan: probe failed; try to update the device firmware [ 1250.750611][ T5823] usb 5-1: USB disconnect, device number 55 [ 1251.311691][T14406] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1251.475195][T14406] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.499240][T14406] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1251.542055][T14406] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1251.563340][T14406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1251.586844][T14406] usb 3-1: SerialNumber: syz [ 1251.827864][T14406] usb 3-1: 0:2 : does not exist [ 1251.838940][T14406] usb 3-1: unit 5: unexpected type 0x0a [ 1251.875643][T14406] usb 3-1: USB disconnect, device number 62 [ 1251.925338][T18275] udevd[18275]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1253.571500][ T6269] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1253.754883][ T6269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1253.790611][ T6269] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1253.879067][ T6269] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 1253.925340][ T6269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.961970][ T6269] usb 1-1: Product: syz [ 1254.003908][ T6269] usb 1-1: Manufacturer: syz [ 1254.054266][ T6269] usb 1-1: SerialNumber: syz [ 1254.108086][ T6269] usb 1-1: config 0 descriptor?? [ 1254.398633][ T6269] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1254.675178][ T6269] usb 1-1: USB disconnect, device number 64 [ 1254.836150][T19023] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 1254.849302][T19023] CPU: 0 UID: 0 PID: 19023 Comm: syz.4.3522 Tainted: G L syzkaller #0 PREEMPT(full) [ 1254.849339][T19023] Tainted: [L]=SOFTLOCKUP [ 1254.849349][T19023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1254.849372][T19023] Call Trace: [ 1254.849381][T19023] [ 1254.849392][T19023] dump_stack_lvl+0x189/0x250 [ 1254.849530][T19023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1254.849559][T19023] ? __pfx__printk+0x10/0x10 [ 1254.849604][T19023] ? kernfs_path_from_node+0x2f/0x290 [ 1254.849689][T19023] ? kernfs_path_from_node+0x250/0x290 [ 1254.849711][T19023] ? kernfs_path_from_node+0x2f/0x290 [ 1254.849740][T19023] sysfs_warn_dup+0x8e/0xa0 [ 1254.849784][T19023] sysfs_do_create_link_sd+0xc0/0x110 [ 1254.849817][T19023] device_add_class_symlinks+0x1cf/0x240 [ 1254.849883][T19023] device_add+0x475/0xb80 [ 1254.849910][T19023] wiphy_register+0x1d2e/0x2d20 [ 1254.850053][T19023] ? __pfx_wiphy_register+0x10/0x10 [ 1254.850085][T19023] ? __pfx_netdev_run_todo+0x10/0x10 [ 1254.850198][T19023] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1254.850288][T19023] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1254.850349][T19023] ieee80211_register_hw+0x34a7/0x4110 [ 1254.850411][T19023] ? ieee80211_register_hw+0x1471/0x4110 [ 1254.850448][T19023] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1254.850474][T19023] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1254.850579][T19023] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1254.850614][T19023] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1254.850657][T19023] ? __hrtimer_setup+0x181/0x200 [ 1254.850705][T19023] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1254.850839][T19023] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 1254.850895][T19023] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1254.850916][T19023] ? __kmalloc_node_track_caller_noprof+0x594/0x820 [ 1254.850983][T19023] ? kstrndup+0xbf/0x160 [ 1254.851056][T19023] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1254.851086][T19023] ? __pfx___nla_validate_parse+0x10/0x10 [ 1254.851177][T19023] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1254.851208][T19023] ? rcu_is_watching+0x15/0xb0 [ 1254.851261][T19023] ? __nla_parse+0x40/0x60 [ 1254.851298][T19023] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1254.851368][T19023] genl_family_rcv_msg_doit+0x215/0x300 [ 1254.851398][T19023] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1254.851436][T19023] ? bpf_lsm_capable+0x9/0x20 [ 1254.851515][T19023] ? security_capable+0x7e/0x2e0 [ 1254.851600][T19023] genl_rcv_msg+0x60e/0x790 [ 1254.851629][T19023] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1254.851648][T19023] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1254.851686][T19023] netlink_rcv_skb+0x208/0x470 [ 1254.851735][T19023] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1254.851758][T19023] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1254.851807][T19023] ? down_read+0x274/0x2e0 [ 1254.851830][T19023] ? genl_rcv+0xd/0x40 [ 1254.851851][T19023] genl_rcv+0x28/0x40 [ 1254.851869][T19023] netlink_unicast+0x82f/0x9e0 [ 1254.851906][T19023] ? __pfx_netlink_unicast+0x10/0x10 [ 1254.851933][T19023] ? netlink_sendmsg+0x642/0xb30 [ 1254.851960][T19023] ? skb_put+0x11b/0x210 [ 1254.852011][T19023] netlink_sendmsg+0x805/0xb30 [ 1254.852052][T19023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1254.852083][T19023] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1254.852156][T19023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1254.852203][T19023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1254.852233][T19023] __sock_sendmsg+0x21c/0x270 [ 1254.852300][T19023] ____sys_sendmsg+0x505/0x820 [ 1254.852356][T19023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1254.852396][T19023] ? import_iovec+0x74/0xa0 [ 1254.852456][T19023] ___sys_sendmsg+0x21f/0x2a0 [ 1254.852487][T19023] ? __pfx____sys_sendmsg+0x10/0x10 [ 1254.852524][T19023] ? futex_wait+0x285/0x360 [ 1254.852589][T19023] ? __fget_files+0x2a/0x420 [ 1254.852678][T19023] ? __fget_files+0x3a0/0x420 [ 1254.852718][T19023] __x64_sys_sendmsg+0x19b/0x260 [ 1254.852748][T19023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1254.852793][T19023] ? do_syscall_64+0xbe/0xf80 [ 1254.852845][T19023] do_syscall_64+0xfa/0xf80 [ 1254.852869][T19023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.852915][T19023] ? clear_bhb_loop+0x60/0xb0 [ 1254.852943][T19023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.852970][T19023] RIP: 0033:0x7f972f58f749 [ 1254.852991][T19023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1254.853013][T19023] RSP: 002b:00007f97304d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1254.853038][T19023] RAX: ffffffffffffffda RBX: 00007f972f7e6180 RCX: 00007f972f58f749 [ 1254.853054][T19023] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1254.853067][T19023] RBP: 00007f972f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1254.853080][T19023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1254.853092][T19023] R13: 00007f972f7e6218 R14: 00007f972f7e6180 R15: 00007f972f90fa28 [ 1254.853128][T19023] [ 1257.476342][T19052] bond2: entered promiscuous mode [ 1257.483177][T19052] bond2: entered allmulticast mode [ 1257.492230][T19052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1259.723800][T19080] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1259.857854][T19083] syz_tun: entered allmulticast mode [ 1259.991322][T14394] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1260.201220][T14394] usb 5-1: Using ep0 maxpacket: 32 [ 1260.216872][T14394] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1260.284875][T14394] usb 5-1: config 0 has no interface number 0 [ 1260.322611][T14394] usb 5-1: config 0 interface 255 altsetting 148 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1260.399900][T14394] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1260.498947][T14394] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1260.565936][T14394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.624100][T14394] usb 5-1: Product: syz [ 1260.656517][T14394] usb 5-1: Manufacturer: syz [ 1260.712118][T14394] usb 5-1: SerialNumber: syz [ 1260.751712][T14394] usb 5-1: config 0 descriptor?? [ 1261.016548][T14394] RobotFuzz Open Source InterFace, OSIF 5-1:0.255: failure sending bit rate [ 1261.091243][T14394] RobotFuzz Open Source InterFace, OSIF 5-1:0.255: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1261.201475][T14394] usb 5-1: USB disconnect, device number 56 [ 1261.214994][T19082] syz_tun: left allmulticast mode [ 1264.424057][ T5823] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1264.615844][ T5823] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.640945][ T5823] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1264.675212][ T5823] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1264.705447][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.740054][ T5823] usb 3-1: Product: syz [ 1264.775281][ T5823] usb 3-1: Manufacturer: syz [ 1264.797043][ T5823] usb 3-1: SerialNumber: syz [ 1265.100789][ T5823] usb 3-1: USB disconnect, device number 63 [ 1268.010335][T19138] tipc: Resetting bearer [ 1270.121737][T14394] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1270.332010][T14394] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1270.363154][T14394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.441850][T14394] usb 3-1: config 0 descriptor?? [ 1270.902510][T14394] ath6kl: Unsupported hardware version: 0x0 [ 1271.032958][T14394] ath6kl: Failed to init ath6kl core: -22 [ 1271.070053][T14394] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1271.191811][T14394] usb 3-1: USB disconnect, device number 64 [ 1271.375973][T19209] netlink: 'syz.1.3553': attribute type 16 has an invalid length. [ 1271.412362][T19209] netlink: 'syz.1.3553': attribute type 17 has an invalid length. [ 1271.437326][T19209] netlink: 'syz.1.3553': attribute type 27 has an invalid length. [ 1273.271846][T14406] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1273.452257][T14406] usb 2-1: Using ep0 maxpacket: 16 [ 1273.512658][T14406] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1273.614937][T14406] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1273.708912][T14406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.761825][T14406] usb 2-1: Product: syz [ 1273.768853][T14406] usb 2-1: Manufacturer: syz [ 1273.828787][T14406] usb 2-1: SerialNumber: syz [ 1273.863978][T14406] usb 2-1: config 0 descriptor?? [ 1275.628713][T19296] binder: 19284:19296 ioctl aea2 1ff returned -22 [ 1276.143520][T14394] usb 2-1: USB disconnect, device number 65 [ 1276.676239][T19317] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1278.278281][T19342] netlink: 'syz.4.3569': attribute type 13 has an invalid length. [ 1278.973754][T19346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1279.548933][T19354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3573'. [ 1279.591381][T19354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3573'. [ 1280.994339][T19366] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1281.369871][T19368] hfs: unable to load iocharset "io#harset" [ 1282.231782][T19377] fuse: Bad value for 'fd' [ 1284.884928][T14406] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1285.091847][T14406] usb 6-1: Using ep0 maxpacket: 32 [ 1285.134211][T14406] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1285.186711][T14406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.247048][T14406] usb 6-1: Product: syz [ 1285.287307][T14406] usb 6-1: Manufacturer: syz [ 1285.318132][T14406] usb 6-1: SerialNumber: syz [ 1285.366374][T14406] usb 6-1: config 0 descriptor?? [ 1285.848351][T19409] KVM: debugfs: duplicate directory 19409-7 [ 1287.125007][T19411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.185183][T19411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.478392][T14406] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 1287.488347][T14406] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 1287.605960][T19424] bond5: Removing last arp target with arp_interval on [ 1288.246266][T19424] bond5: entered allmulticast mode [ 1288.309383][T19424] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1288.950479][T19440] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 1290.564061][T19450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3593'. [ 1290.663605][T19450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'. [ 1292.420764][T14406] usb 6-1: USB disconnect, device number 39 [ 1294.358423][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'. [ 1296.301712][T14394] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1296.522098][T14394] usb 6-1: Using ep0 maxpacket: 16 [ 1296.540957][T14394] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1296.557215][T14394] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1296.578184][T14394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.605715][T14394] usb 6-1: Product: syz [ 1296.610225][T14394] usb 6-1: Manufacturer: syz [ 1296.617154][T14394] usb 6-1: SerialNumber: syz [ 1296.636512][T14394] usb 6-1: config 0 descriptor?? [ 1297.814635][T19541] futex_wake_op: syz.0.3612 tries to shift op by -1; fix this program [ 1299.039770][ T5823] usb 6-1: USB disconnect, device number 40 [ 1299.501591][ T5823] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1299.678016][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1299.694073][ T5823] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1299.725513][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1299.783803][ T5823] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1299.814397][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.848371][ T5823] usb 6-1: Product: syz [ 1299.864311][ T5823] usb 6-1: Manufacturer: syz [ 1299.879986][ T5823] usb 6-1: SerialNumber: syz [ 1299.912521][ T5823] usb 6-1: config 0 descriptor?? [ 1299.929377][ T5823] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1300.106788][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.121693][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.141300][T19556] netlink: 'syz.5.3615': attribute type 2 has an invalid length. [ 1300.622515][T14406] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1300.791777][T14406] usb 1-1: Using ep0 maxpacket: 8 [ 1300.804923][T14406] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.833829][T14406] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1300.861826][T14406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1300.884596][T14406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1300.911226][T14406] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1301.094724][T14406] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1301.116368][T14406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1301.145141][T14406] usb 1-1: Product: syz [ 1301.155290][T14406] usb 1-1: Manufacturer: syz [ 1301.175502][T14406] usb 1-1: SerialNumber: syz [ 1301.285805][T14406] usb 1-1: config 0 descriptor?? [ 1301.502235][T14406] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1301.518451][T14406] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1301.704332][T14406] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1301.719213][T14406] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1301.752162][T14406] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 1301.798051][T19567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.831749][T19567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.927358][T14406] usb 1-1: USB disconnect, device number 65 [ 1302.199120][T14394] usb 6-1: USB disconnect, device number 41 [ 1302.528619][T19577] fuse: Bad value for 'fd' [ 1304.539243][T19602] binder: BINDER_SET_CONTEXT_MGR already set [ 1304.661451][T19602] binder: 19599:19602 ioctl 4018620d 2000000000c0 returned -16 [ 1308.223922][T19641] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1308.241217][T19641] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1309.830226][T19661] vxcan1: entered promiscuous mode [ 1312.892103][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3644'. [ 1313.034632][T19687] bond_slave_0: entered promiscuous mode [ 1313.040647][T19687] bond_slave_1: entered promiscuous mode [ 1313.083709][T19687] macvtap0: entered promiscuous mode [ 1313.102702][T19687] bond0: entered promiscuous mode [ 1313.151234][T19687] macvtap0: entered allmulticast mode [ 1313.169918][T19687] bond0: entered allmulticast mode [ 1313.195639][T19687] bond_slave_0: entered allmulticast mode [ 1313.203545][T19687] bond_slave_1: entered allmulticast mode [ 1313.213305][T19687] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 1317.231148][T14394] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1317.400642][T14394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.448593][T14394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.504798][T14394] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1317.572423][T14394] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1317.592102][T14394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.622272][T14394] usb 1-1: config 0 descriptor?? [ 1318.141900][T14394] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1319.501822][ T5823] usb 1-1: reset high-speed USB device number 66 using dummy_hcd [ 1319.731834][T14412] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1319.903767][T14412] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.926679][T14412] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1319.970207][T14412] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1320.001786][T14412] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1320.042054][T14412] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1320.102057][T14412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.263141][T19751] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1320.364857][T14412] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1320.393671][T14412] usb 6-1: invalid MIDI out EP 0 [ 1320.599799][T19392] udevd[19392]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.734846][T14412] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1320.902379][T14408] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1321.118475][T14408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.155137][T14408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.198927][T14408] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1321.276414][T14408] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1321.327726][T19771] tipc: Resetting bearer [ 1321.347482][T14408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.438745][T14408] usb 2-1: config 0 descriptor?? [ 1321.662696][T14406] usb 1-1: USB disconnect, device number 66 [ 1322.108706][T14408] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1322.592487][T14408] usb 2-1: USB disconnect, device number 66 [ 1322.645897][T19759] usb 2-1: string descriptor 0 read error: -19 [ 1323.011338][T19767] syz.4.3660 (19767): drop_caches: 2 [ 1323.731682][T14408] usb 6-1: USB disconnect, device number 42 [ 1325.546379][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3669'. [ 1328.402810][ T5823] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1328.961182][T14394] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1329.169630][T14394] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1329.214034][T14394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.238726][T14394] usb 6-1: Product: syz [ 1329.251692][T14394] usb 6-1: Manufacturer: syz [ 1329.267313][T14394] usb 6-1: SerialNumber: syz [ 1329.310569][T14394] usb 6-1: config 0 descriptor?? [ 1329.404391][ T5823] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1329.416639][ T5823] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.440925][ T5823] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1329.467739][ T5823] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1329.564081][ T5823] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1329.581930][T14394] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1329.603662][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1329.622155][ T5823] usb 5-1: Product: syz [ 1329.631929][ T5823] usb 5-1: Manufacturer: syz [ 1329.955941][ T5823] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1330.322897][ T5823] usb 5-1: USB disconnect, device number 57 [ 1331.276128][T14394] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1331.573067][T14394] usb 6-1: USB disconnect, device number 43 [ 1332.861486][T14394] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1333.031481][T14394] usb 6-1: Using ep0 maxpacket: 32 [ 1333.070834][T14394] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.093395][T14394] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1333.116704][T14394] usb 6-1: config 1 has no interface number 1 [ 1333.165303][T14394] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1333.230968][T14394] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1333.261912][T14394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.290398][T14394] usb 6-1: Product: syz [ 1333.304729][T14394] usb 6-1: Manufacturer: syz [ 1333.310532][T14394] usb 6-1: SerialNumber: syz [ 1333.599748][T14394] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1333.636759][T14394] usb 6-1: 2:1 : format type 6 is not supported yet [ 1333.800163][T14394] usb 6-1: USB disconnect, device number 44 [ 1333.934310][T19854] udevd[19854]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.591810][T14408] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1334.754240][T14408] usb 6-1: Using ep0 maxpacket: 8 [ 1334.775714][T14408] usb 6-1: config 0 has no interfaces? [ 1334.793952][T14408] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1334.832189][T14408] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.861806][T14408] usb 6-1: Product: syz [ 1334.872241][T14408] usb 6-1: Manufacturer: syz [ 1334.884304][T14408] usb 6-1: SerialNumber: syz [ 1334.906684][T14408] usb 6-1: config 0 descriptor?? [ 1335.347395][T14408] usb 6-1: USB disconnect, device number 45 [ 1336.522751][ T5823] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1336.707801][ T5823] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1336.743364][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.783683][ T5823] usb 2-1: Product: syz [ 1336.803564][ T5823] usb 2-1: Manufacturer: syz [ 1336.826315][ T5823] usb 2-1: SerialNumber: syz [ 1336.864836][ T5823] usb 2-1: config 0 descriptor?? [ 1336.904598][ T5823] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1337.433854][T19920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 1337.443117][ T5823] gspca_sunplus: reg_r err -110 [ 1337.448130][ T5823] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1337.513764][ T5823] usb 2-1: USB disconnect, device number 67 [ 1339.093239][T14394] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1339.287640][T14394] usb 3-1: config 0 has no interfaces? [ 1339.298730][T14394] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1339.332159][T14394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.394782][T14394] usb 3-1: config 0 descriptor?? [ 1339.681541][T14394] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1339.709222][ T5823] usb 3-1: USB disconnect, device number 65 [ 1340.238647][T14394] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1340.290381][T14394] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1340.328928][T14394] usb 1-1: can't read configurations, error -71 [ 1340.697654][T19975] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1340.738053][T19974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3707'. [ 1340.753182][T19974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3707'. [ 1341.114500][T19979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3709'. [ 1341.211868][T19979] macvtap1: entered promiscuous mode [ 1341.240196][T19979] bond0: entered promiscuous mode [ 1341.269088][T19979] bond_slave_0: entered promiscuous mode [ 1341.311336][T19979] bond_slave_1: entered promiscuous mode [ 1341.348115][T19979] macvtap1: entered allmulticast mode [ 1341.380056][T19979] bond0: entered allmulticast mode [ 1341.408078][T19979] bond_slave_0: entered allmulticast mode [ 1341.443496][T19979] bond_slave_1: entered allmulticast mode [ 1341.485891][T19979] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1341.549482][T19982] bond0: left allmulticast mode [ 1341.585348][T19982] bond_slave_0: left allmulticast mode [ 1341.615512][T19982] bond_slave_1: left allmulticast mode [ 1341.650924][T19982] bond0: left promiscuous mode [ 1341.683941][T19982] bond_slave_0: left promiscuous mode [ 1341.729779][T19982] bond_slave_1: left promiscuous mode [ 1342.387906][T19991] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1343.564366][T20013] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3714'. [ 1344.936513][T20021] netlink: 'syz.1.3716': attribute type 13 has an invalid length. [ 1345.578480][T20022] vxcan1: entered promiscuous mode [ 1345.607933][T20030] batadv_slave_1: entered promiscuous mode [ 1345.822050][T20032] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1346.171624][T14394] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1346.354649][T14394] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1346.397044][T14394] usb 3-1: config 0 has no interface number 0 [ 1346.431255][T14394] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1346.480147][T14394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.520698][T14394] usb 3-1: Product: syz [ 1346.545311][T14394] usb 3-1: Manufacturer: syz [ 1346.573141][T14394] usb 3-1: SerialNumber: syz [ 1346.579725][T20025] batadv_slave_1: left promiscuous mode [ 1346.603731][T14394] usb 3-1: config 0 descriptor?? [ 1346.875914][T14394] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1346.919423][T14394] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1346.963451][T14394] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1347.009552][T14394] usb 3-1: media controller created [ 1347.094724][T14394] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1347.122235][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3721'. [ 1347.199690][T20040] macvtap2: entered promiscuous mode [ 1347.228279][T20040] bond0: entered promiscuous mode [ 1347.241090][T20040] bond_slave_0: entered promiscuous mode [ 1347.303542][T20040] bond_slave_1: entered promiscuous mode [ 1347.322347][T20040] macvtap2: entered allmulticast mode [ 1347.342290][T20040] bond0: entered allmulticast mode [ 1347.363086][T20040] bond_slave_0: entered allmulticast mode [ 1347.379409][T20040] bond_slave_1: entered allmulticast mode [ 1347.399110][T20040] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1347.448384][T20045] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3722'. [ 1347.506074][T20043] bond0: left allmulticast mode [ 1347.518243][T20043] bond_slave_0: left allmulticast mode [ 1347.538044][T20043] bond_slave_1: left allmulticast mode [ 1347.551200][T20043] bond0: left promiscuous mode [ 1347.562785][T20043] bond_slave_0: left promiscuous mode [ 1347.577638][T20043] bond_slave_1: left promiscuous mode [ 1348.261612][T14394] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1350.080917][T20079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1353.951832][ T5823] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1353.972266][T20114] netlink: 'syz.4.3736': attribute type 2 has an invalid length. [ 1354.111223][ T5823] usb 1-1: Using ep0 maxpacket: 8 [ 1354.130842][ T5823] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1354.167379][ T5823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1354.190387][ T5823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1354.223185][ T5823] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1354.257596][ T5823] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1354.278936][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.544309][ T5823] usb 1-1: usb_control_msg returned -32 [ 1354.549921][ T5823] usbtmc 1-1:16.0: can't read capabilities [ 1354.917666][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1355.009880][T20118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.026990][T20118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.057860][T20118] binder: 20108:20118 ioctl c0046209 100000000000000 returned -22 [ 1355.087023][T20118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.106619][T20118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.664766][T20124] libceph: resolve '. [ 1355.664766][T20124] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1355.664766][T20124] ' (ret=-3): failed [ 1356.720648][T18136] usb 1-1: USB disconnect, device number 69 [ 1356.925776][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3739'. [ 1357.544969][T20114] : entered promiscuous mode [ 1358.093265][T20148] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1358.301122][ T6269] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1358.501371][ T6269] usb 1-1: Using ep0 maxpacket: 16 [ 1358.527117][ T6269] usb 1-1: config 0 has no interfaces? [ 1358.565842][ T6269] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1358.631857][ T6269] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1358.692817][ T6269] usb 1-1: Manufacturer: syz [ 1358.743777][ T6269] usb 1-1: config 0 descriptor?? [ 1359.950509][T20171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1359.989710][T20171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1361.359902][T14406] usb 1-1: USB disconnect, device number 70 [ 1361.489905][T20189] netlink: 'syz.2.3752': attribute type 1 has an invalid length. [ 1361.546096][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.553166][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.162662][T20210] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1364.088434][T20189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1364.480270][T20195] bond5: (slave ip6gretap1): making interface the new active one [ 1364.509825][T20195] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1365.846346][T20243] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3774'. [ 1365.929910][T20245] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3774'. [ 1366.130841][T20248] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3764'. [ 1366.140434][T20248] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3764'. [ 1368.688277][T20272] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1368.951139][ T6269] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1369.136544][ T6269] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1369.165955][ T6269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.198115][ T6269] usb 1-1: Product: syz [ 1369.226359][ T6269] usb 1-1: Manufacturer: syz [ 1369.246655][ T6269] usb 1-1: SerialNumber: syz [ 1369.289930][ T6269] usb 1-1: config 0 descriptor?? [ 1369.549793][ T6269] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1369.971729][T20288] loop6: detected capacity change from 0 to 4096 [ 1370.825028][T20296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1370.861154][T20296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1370.876134][T20296] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1370.891194][T20296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1371.204155][ T6269] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1371.259937][ T6269] usb 1-1: USB disconnect, device number 71 [ 1373.087582][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1373.098472][T20314] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1375.531709][ T6269] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1375.671311][T20337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3787'. [ 1375.726481][ T6269] usb 2-1: Using ep0 maxpacket: 32 [ 1375.752005][T20337] macvtap1: entered promiscuous mode [ 1375.762136][ T6269] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.774699][T20337] macvtap1: entered allmulticast mode [ 1375.797745][T20337] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1375.824120][ T6269] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1375.871242][ T6269] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1375.880454][ T6269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.942800][ T6269] usb 2-1: config 0 descriptor?? [ 1376.883019][T20359] bridge0: port 3(macsec0) entered blocking state [ 1376.890052][T20359] bridge0: port 3(macsec0) entered disabled state [ 1376.951784][T20359] macsec0: entered allmulticast mode [ 1376.981224][T20359] macsec0: entered promiscuous mode [ 1377.104221][T20361] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1377.211173][T14398] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1377.381685][T14398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.401402][T14398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.434491][T14398] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1377.462199][T14398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.483528][T14398] usb 1-1: config 0 descriptor?? [ 1377.900889][T20359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.917216][T20359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.952241][T14398] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 1377.970166][T14398] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 1378.009405][T14398] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0023/input/input73 [ 1378.089446][T14398] cm6533_jd 0003:0D8C:0022.0023: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1378.184880][T14398] usb 2-1: USB disconnect, device number 68 [ 1378.462568][T14398] usb 1-1: USB disconnect, device number 72 [ 1378.490762][T20375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.505166][T20375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.133031][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3800'. [ 1380.258680][T20393] macvtap2: entered promiscuous mode [ 1380.276122][T20393] macvtap2: entered allmulticast mode [ 1380.300818][T20393] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1381.001665][T20406] syzkaller0: entered promiscuous mode [ 1381.024089][T20406] syzkaller0: entered allmulticast mode [ 1383.763082][T20435] : renamed from bond_slave_0 [ 1383.848335][T20435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.911774][T20435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.987010][T20435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.028380][T20435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.057961][T20443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3811'. [ 1384.120403][T20443] macvtap3: entered promiscuous mode [ 1384.130391][T20443] macvtap3: entered allmulticast mode [ 1384.150484][T20443] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1384.627333][T20454] input: syz0 as /devices/virtual/input/input74 [ 1384.739729][T20456] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3814'. [ 1389.027624][T20494] openvswitch: netlink: Flow key attr not present in new flow. [ 1392.604014][T20522] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1394.963384][T20551] tipc: Failed to remove unknown binding: 66,1,1/745966797:2301870917/2301870919 [ 1394.998487][T20551] tipc: Failed to remove unknown binding: 66,1,1/745966797:2301870917/2301870919 [ 1396.226662][T20559] tipc: Enabled bearer , priority 0 [ 1396.260598][T20559] syzkaller0: entered promiscuous mode [ 1396.299326][T20559] syzkaller0: entered allmulticast mode [ 1396.396665][T20559] tipc: Resetting bearer [ 1396.457232][T20558] tipc: Resetting bearer [ 1396.523545][T20558] tipc: Disabling bearer [ 1396.941245][T14398] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1397.062040][T14406] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1397.224285][T14398] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.254913][T14398] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1397.266064][T14406] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1397.286115][T14406] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1397.299886][T14406] usb 1-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 1397.310380][T14406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.313087][T14398] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1397.349450][T14398] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1397.364486][T14406] usb 1-1: config 0 descriptor?? [ 1397.388681][T14398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.458492][T14398] hub 2-1:1.0: bad descriptor, ignoring hub [ 1397.498057][T14398] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1397.506599][T20575] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1397.523577][T14398] cdc_wdm 2-1:1.0: skipping garbage [ 1397.550432][T14398] cdc_wdm 2-1:1.0: skipping garbage [ 1397.564708][T14398] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1397.835278][T14406] thrustmaster 0003:044F:B320.0024: hidraw0: USB HID v0.00 Device [HID 044f:b320] on usb-dummy_hcd.0-1/input0 [ 1397.868664][T14406] thrustmaster 0003:044F:B320.0024: no inputs found [ 1397.892374][T20569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.928197][T20569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.208978][T20585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.243040][T20585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.679527][T20588] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1398.686093][T20588] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1398.764219][T20588] vhci_hcd vhci_hcd.0: Device attached [ 1398.820116][T20589] vhci_hcd: connection closed [ 1398.822535][ T9771] vhci_hcd vhci_hcd.4: stop threads [ 1398.883741][ T9771] vhci_hcd vhci_hcd.4: release socket [ 1398.931892][T14406] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1398.962279][ T9771] vhci_hcd vhci_hcd.4: disconnect device [ 1399.031927][T14406] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1399.041780][T14406] usb 41-1: enqueue for inactive port 0 [ 1399.121769][T14406] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1400.143874][T14408] usb 2-1: USB disconnect, device number 69 [ 1400.966465][T14408] usb 1-1: USB disconnect, device number 73 [ 1403.238814][T20651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.275895][T20651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.422142][T14398] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1404.622019][T14398] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1404.662985][T14398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.726762][T14398] usb 1-1: Product: syz [ 1404.764011][T14398] usb 1-1: Manufacturer: syz [ 1404.781061][T14398] usb 1-1: SerialNumber: syz [ 1404.810926][T14398] usb 1-1: config 0 descriptor?? [ 1405.087624][T14398] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1405.730809][T20676] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1406.981055][T14398] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1407.058336][T14398] usb 1-1: USB disconnect, device number 74 [ 1408.402428][T20707] team0: Device ipip0 is up. Set it down before adding it as a team port [ 1408.502295][T14408] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1408.603713][T14406] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1408.700099][T14408] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1408.739485][T14408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.786508][T14408] usb 5-1: Product: syz [ 1408.804256][T14408] usb 5-1: Manufacturer: syz [ 1408.828106][T14408] usb 5-1: SerialNumber: syz [ 1408.839146][T14406] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1408.880380][T14406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.926690][T14406] usb 2-1: Product: syz [ 1408.946265][T14406] usb 2-1: Manufacturer: syz [ 1408.963861][T14406] usb 2-1: SerialNumber: syz [ 1408.992640][T14406] usb 2-1: config 0 descriptor?? [ 1409.034823][T14406] ch341 2-1:0.0: ch341-uart converter detected [ 1409.546509][T14408] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1409.578154][T14408] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1409.635777][T14408] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1409.730146][T14408] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1409.962504][T20706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.007421][T20706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.068644][T14406] usb 2-1: failed to send control message: -71 [ 1410.097885][T14406] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1410.164837][T14406] usb 2-1: USB disconnect, device number 70 [ 1410.230986][T14406] ch341 2-1:0.0: device disconnected [ 1410.303685][T20724] fuse: Invalid rootmode [ 1411.301749][T14406] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1411.442395][T14408] usb 5-1: USB disconnect, device number 58 [ 1411.461776][T14406] usb 2-1: Using ep0 maxpacket: 16 [ 1411.476313][T14406] usb 2-1: config 0 has no interfaces? [ 1411.506795][T14406] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1411.552469][T14406] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1411.588883][T14406] usb 2-1: Manufacturer: syz [ 1411.627044][T14406] usb 2-1: config 0 descriptor?? [ 1412.984997][T14398] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1413.123809][T20760] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1413.173390][T14398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.186850][T14398] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1413.198593][T14398] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1413.208322][T14398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.287254][T14398] usb 1-1: config 0 descriptor?? [ 1414.538700][T14408] usb 2-1: USB disconnect, device number 71 [ 1414.805686][T20773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.840446][T20773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.271325][T14398] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1415.470639][T14398] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.527023][T14398] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1415.572909][T20784] ipt_ECN: cannot use operation on non-tcp rule [ 1415.597111][T14398] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1415.692593][T14398] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1415.766673][T20788] SET target dimension over the limit! [ 1415.778232][T14398] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1415.811072][T14398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.847061][T14398] usb 6-1: Product: syz [ 1415.864651][T14398] usb 6-1: Manufacturer: syz [ 1415.887127][T20791] IPVS: Error connecting to the multicast addr [ 1415.899813][T14398] usb 6-1: SerialNumber: syz [ 1415.922064][T14398] usb 6-1: config 0 descriptor?? [ 1415.950197][T14398] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1415.994863][T14398] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1416.006719][T14398] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1416.115844][T14408] usb 1-1: USB disconnect, device number 75 [ 1416.599260][T20797] netlink: 'syz.0.3890': attribute type 13 has an invalid length. [ 1418.125260][T14398] usb 6-1: USB disconnect, device number 46 [ 1418.139050][T14398] garmin_gps 6-1:0.0: device disconnected [ 1418.170626][T20803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3892'. [ 1418.544341][T20818] fuse: Bad value for 'fd' [ 1418.642757][T20818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3895'. [ 1420.512112][T14406] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1420.681670][T14406] usb 6-1: Using ep0 maxpacket: 16 [ 1420.689321][T14406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1420.889012][T14406] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1420.926412][T14406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.951730][T14406] usb 6-1: Product: syz [ 1420.958910][T14406] usb 6-1: Manufacturer: syz [ 1420.966249][T14406] usb 6-1: SerialNumber: syz [ 1420.974988][T14406] usb 6-1: config 0 descriptor?? [ 1420.984909][T14406] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1420.999197][T14406] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1421.151866][T14398] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1421.346745][T14398] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1421.381178][T14398] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.437189][T14398] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1421.471927][T14398] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1421.547738][T14398] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1421.589831][T14406] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1421.630873][T14398] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1421.654415][T14398] usb 2-1: Product: syz [ 1421.658656][T14398] usb 2-1: Manufacturer: syz [ 1421.691762][T14406] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1421.716036][T14406] em28xx 6-1:0.0: board has no eeprom [ 1421.738674][T14398] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1421.841875][T14406] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1421.856686][T14406] em28xx 6-1:0.0: dvb set to bulk mode. [ 1421.876325][T14408] em28xx 6-1:0.0: Binding DVB extension [ 1421.911934][T14406] usb 6-1: USB disconnect, device number 47 [ 1421.932765][T14406] em28xx 6-1:0.0: Disconnecting em28xx [ 1422.051949][T14408] em28xx 6-1:0.0: Registering input extension [ 1422.058408][T14406] em28xx 6-1:0.0: Closing input extension [ 1422.100277][T14406] em28xx 6-1:0.0: Freeing device [ 1422.131916][T20852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3906'. [ 1422.156651][T14408] usb 2-1: USB disconnect, device number 72 [ 1422.617906][T20860] kvm: user requested TSC rate below hardware speed [ 1422.922101][T14408] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1422.984824][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.991477][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.103876][T14408] usb 6-1: Using ep0 maxpacket: 8 [ 1423.130777][T14408] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1423.153979][T14408] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1423.212058][T14408] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1423.275158][T14408] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1423.367327][T14408] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1423.420580][T14408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.701911][T14398] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1423.935146][T14398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.002794][T14398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.059892][T14398] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1424.103139][T14398] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1424.144696][T14398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.186231][T14398] usb 5-1: config 0 descriptor?? [ 1424.865284][T14398] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1425.249077][T14398] usb 5-1: USB disconnect, device number 59 [ 1426.355717][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1426.355736][ T30] audit: type=1326 audit(1766103438.819:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.3914" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f354258f749 code=0x0 [ 1426.491787][T14408] usb 6-1: usb_control_msg returned -71 [ 1426.525402][T14408] usbtmc 6-1:16.0: can't read capabilities [ 1426.573939][T14408] usb 6-1: USB disconnect, device number 48 [ 1427.274126][T14398] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1427.329610][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1427.367004][T20901] macvtap3: entered promiscuous mode [ 1427.387230][T20901] bond0: entered promiscuous mode [ 1427.400380][T20901] bond_slave_0: entered promiscuous mode [ 1427.412054][T20901] bond_slave_1: entered promiscuous mode [ 1427.426635][T20901] macvtap3: entered allmulticast mode [ 1427.439424][T20901] bond0: entered allmulticast mode [ 1427.455043][T14398] usb 1-1: Using ep0 maxpacket: 16 [ 1427.464521][T20901] bond_slave_0: entered allmulticast mode [ 1427.482453][T14398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1427.499387][T20901] bond_slave_1: entered allmulticast mode [ 1427.522399][T20901] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1427.539986][T14398] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1427.570811][T20902] bond0: left allmulticast mode [ 1427.582596][T20902] bond_slave_0: left allmulticast mode [ 1427.582613][T14398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.628643][T14398] usb 1-1: Product: syz [ 1427.641815][T14398] usb 1-1: Manufacturer: syz [ 1427.656812][T20902] bond_slave_1: left allmulticast mode [ 1427.660568][T14398] usb 1-1: SerialNumber: syz [ 1427.694310][T14398] usb 1-1: config 0 descriptor?? [ 1427.732117][T20902] bond0: left promiscuous mode [ 1427.733151][T14398] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1427.767130][T20902] bond_slave_0: left promiscuous mode [ 1427.794124][T14398] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1427.794426][T20902] bond_slave_1: left promiscuous mode [ 1428.332360][T14398] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1428.417574][T14398] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1428.517376][T14398] em28xx 1-1:0.0: board has no eeprom [ 1428.712110][T14398] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1428.738086][T14398] em28xx 1-1:0.0: dvb set to bulk mode. [ 1428.754690][T18136] em28xx 1-1:0.0: Binding DVB extension [ 1428.775663][T14398] usb 1-1: USB disconnect, device number 76 [ 1428.805864][T14398] em28xx 1-1:0.0: Disconnecting em28xx [ 1428.971087][T18136] em28xx 1-1:0.0: Registering input extension [ 1429.004023][T14398] em28xx 1-1:0.0: Closing input extension [ 1429.083238][T14398] em28xx 1-1:0.0: Freeing device [ 1429.312249][T20919] netlink: 'syz.0.3921': attribute type 1 has an invalid length. [ 1429.464661][T20919] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1431.404806][T14398] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1431.441068][T18136] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1431.616060][T14398] usb 6-1: Using ep0 maxpacket: 32 [ 1431.634395][T14398] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1431.646090][T18136] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.657716][T14398] usb 6-1: config 0 has no interface number 0 [ 1431.672004][T14398] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1431.679074][T18136] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1431.713196][T18136] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1431.754369][T18136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.763920][T14398] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1431.777560][T14398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.799967][T18136] usb 2-1: config 0 descriptor?? [ 1431.810106][T14398] usb 6-1: Product: syz [ 1431.845755][T14398] usb 6-1: Manufacturer: syz [ 1431.856731][T14398] usb 6-1: SerialNumber: syz [ 1431.910204][T14398] usb 6-1: config 0 descriptor?? [ 1432.109314][T20956] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1432.470161][T18136] hid-alps 0003:044E:1215.0026: item fetching failed at offset 6/7 [ 1432.526835][T18136] hid-alps 0003:044E:1215.0026: parse failed [ 1432.559198][T18136] hid-alps 0003:044E:1215.0026: probe with driver hid-alps failed with error -22 [ 1433.641759][T18136] usb 2-1: USB disconnect, device number 73 [ 1434.131286][T18136] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1434.210172][ T6269] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1434.391160][T18136] usb 1-1: Using ep0 maxpacket: 16 [ 1434.430821][T14398] ipheth 6-1:0.196: Unable to find endpoints [ 1434.445317][T18136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.488694][T14398] usb 6-1: USB disconnect, device number 49 [ 1434.503239][T18136] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1434.551081][ T6269] usb 5-1: Using ep0 maxpacket: 16 [ 1434.571376][T18136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.585521][ T6269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1434.663372][T18136] usb 1-1: config 0 descriptor?? [ 1434.681995][ T6269] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1434.701266][ T6269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.730804][ T6269] usb 5-1: Product: syz [ 1434.743402][ T6269] usb 5-1: Manufacturer: syz [ 1434.751714][ T6269] usb 5-1: SerialNumber: syz [ 1434.777177][ T6269] usb 5-1: config 0 descriptor?? [ 1434.812827][ T6269] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1434.851675][ T6269] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1435.469471][ T6269] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1435.702905][ T6269] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1435.820455][ T6269] em28xx 5-1:0.0: board has no eeprom [ 1435.921424][ T6269] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1435.932102][ T6269] em28xx 5-1:0.0: dvb set to bulk mode. [ 1435.946918][T14398] em28xx 5-1:0.0: Binding DVB extension [ 1436.099543][ T6269] usb 5-1: USB disconnect, device number 60 [ 1436.145777][ T6269] em28xx 5-1:0.0: Disconnecting em28xx [ 1436.341238][T14398] em28xx 5-1:0.0: Registering input extension [ 1436.388175][ T6269] em28xx 5-1:0.0: Closing input extension [ 1436.550647][ T6269] em28xx 5-1:0.0: Freeing device [ 1438.091562][T18136] usbhid 1-1:0.0: can't add hid device: -71 [ 1438.111916][T18136] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1438.180854][T18136] usb 1-1: USB disconnect, device number 77 [ 1438.337162][T21009] binder_alloc: 21007: pid 21007 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1438.426007][T21013] binder_alloc: 21007: pid 21007 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1438.596522][T21014] ip6tnl0: Caught tx_queue_len zero misconfig [ 1440.641503][T21026] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1441.264641][T21037] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1444.384864][T21062] netlink: 'syz.1.3948': attribute type 4 has an invalid length. [ 1444.426669][T21062] netlink: 'syz.1.3948': attribute type 4 has an invalid length. [ 1446.096042][T21071] netlink: 'syz.5.3950': attribute type 4 has an invalid length. [ 1446.229324][T21073] netlink: 'syz.5.3950': attribute type 4 has an invalid length. [ 1446.614308][T21083] veth1: Caught tx_queue_len zero misconfig [ 1446.621855][T21083] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 1446.802265][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3953'. [ 1448.461096][T18136] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1448.646842][T18136] usb 6-1: config 0 has no interfaces? [ 1448.672546][T18136] usb 6-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1448.689648][T18136] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.710327][T21103] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1448.721777][T18136] usb 6-1: Product: syz [ 1448.731623][T18136] usb 6-1: Manufacturer: syz [ 1448.743131][T18136] usb 6-1: SerialNumber: syz [ 1448.752459][T18136] usb 6-1: config 0 descriptor?? [ 1449.123142][T21111] netlink: 'syz.2.3959': attribute type 5 has an invalid length. [ 1449.180631][T18136] usb 6-1: USB disconnect, device number 50 [ 1450.754532][T21120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3960'. [ 1451.261677][T14412] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1451.311364][T18136] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1451.491536][T18136] usb 2-1: Using ep0 maxpacket: 32 [ 1451.521090][T18136] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1451.549909][T18136] usb 2-1: config 0 has no interface number 0 [ 1451.562039][T18136] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1451.602096][T18136] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1451.631177][T18136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.651699][T18136] usb 2-1: Product: syz [ 1451.655997][T18136] usb 2-1: Manufacturer: syz [ 1451.682069][T18136] usb 2-1: SerialNumber: syz [ 1451.704177][T18136] usb 2-1: config 0 descriptor?? [ 1451.801673][T21125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.817240][T21125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.899605][T14412] usb 5-1: config 0 has no interfaces? [ 1451.952257][T21123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.986902][T21123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.045769][T14412] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1452.072074][T21123] vlan0: entered promiscuous mode [ 1452.077745][T14412] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.091750][T21123] veth0: entered promiscuous mode [ 1452.115091][T14412] usb 5-1: Product: syz [ 1452.128090][T21125] kAFS: unable to lookup cell ' [ 1452.128090][T21125] $)-.ײfYǝa2s [ 1452.128090][T21125] ' [ 1452.152194][T14412] usb 5-1: Manufacturer: syz [ 1452.162562][T14412] usb 5-1: SerialNumber: syz [ 1452.206170][T14412] usb 5-1: config 0 descriptor?? [ 1452.317295][T18136] ipheth 2-1:0.196: Unable to find endpoints [ 1452.395202][T21125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.414929][T18136] usb 2-1: USB disconnect, device number 74 [ 1452.424151][T21125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.785348][T21142] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3965'. [ 1455.056631][T14412] usb 5-1: USB disconnect, device number 61 [ 1455.531478][T21569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1455.580452][T21569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1456.773387][T21586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3975'. [ 1456.799866][T21586] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3975'. [ 1456.820631][T21586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3975'. [ 1456.840473][T21586] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3975'. [ 1457.794692][T21599] netlink: 'syz.4.3976': attribute type 13 has an invalid length. [ 1458.791964][T14412] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1458.959541][T14412] usb 6-1: not running at top speed; connect to a high speed hub [ 1458.973308][T14412] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.003975][T14412] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1459.067405][T14412] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1459.095068][T14412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.118661][T14412] usb 6-1: Product: ᐌ [ 1459.157754][T14412] usb 6-1: Manufacturer: О [ 1459.176926][T14412] usb 6-1: SerialNumber: syz [ 1459.889080][T14412] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1459.976632][T14412] usb 6-1: USB disconnect, device number 51 [ 1460.245630][T21616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3980'. [ 1461.948793][T21638] netlink: 'syz.2.3983': attribute type 39 has an invalid length. [ 1462.325366][T21641] IPVS: Error connecting to the multicast addr [ 1462.525857][T21650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3988'. [ 1462.598725][T18136] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1462.708322][T21653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3988'. [ 1462.788842][T18136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.812081][T21654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3988'. [ 1462.843475][T18136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.858619][T21651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3988'. [ 1462.891714][T18136] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1462.922741][T18136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.974736][T18136] usb 5-1: config 0 descriptor?? [ 1463.311338][T21650] team0 (unregistering): Port device team_slave_0 removed [ 1463.392837][T21650] team0 (unregistering): Port device team_slave_1 removed [ 1463.531608][T21646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.546070][T18136] hid-steam 0003:28DE:1142.0027: unknown main item tag 0x0 [ 1463.561582][T18136] hid-steam 0003:28DE:1142.0027: unknown main item tag 0x0 [ 1463.589601][T21646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.598389][T18136] hid-steam 0003:28DE:1142.0027: unknown main item tag 0x0 [ 1463.682028][T18136] hid-steam 0003:28DE:1142.0027: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1463.785551][T21646] kvm: kvm [21645]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 1464.349867][T21669] netlink: 'syz.2.3989': attribute type 21 has an invalid length. [ 1464.361909][T21669] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3989'. [ 1464.392802][T21669] netlink: 'syz.2.3989': attribute type 21 has an invalid length. [ 1464.405584][T21669] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3989'. [ 1464.853028][T18136] usb 5-1: reset high-speed USB device number 62 using dummy_hcd [ 1465.041171][T18136] usb 5-1: device descriptor read/64, error -32 [ 1465.291124][T18136] usb 5-1: reset high-speed USB device number 62 using dummy_hcd [ 1465.471068][T18136] usb 5-1: device descriptor read/64, error -32 [ 1465.701468][T14408] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1465.709957][T21681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.762200][T21681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.782734][T18136] usb 5-1: reset high-speed USB device number 62 using dummy_hcd [ 1465.863000][T18136] usb 5-1: device descriptor read/8, error -32 [ 1465.899034][T14408] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1465.923826][T14408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.953207][T14408] usb 1-1: Product: syz [ 1465.987851][T14408] usb 1-1: Manufacturer: syz [ 1466.004128][T14408] usb 1-1: SerialNumber: syz [ 1466.044162][T14408] usb 1-1: config 0 descriptor?? [ 1466.111356][T18136] usb 5-1: reset high-speed USB device number 62 using dummy_hcd [ 1466.183448][T18136] usb 5-1: device descriptor read/8, error -32 [ 1466.195410][ T5841] Bluetooth: hci5: urb ffff88803303f200 submission failed (2) [ 1466.351406][T18136] raw-gadget.1 gadget.4: failed to queue suspend event [ 1466.383163][ T6269] usb 5-1: USB disconnect, device number 62 [ 1466.471949][ T6269] raw-gadget.1 gadget.4: failed to queue reset event [ 1466.603290][ T6269] raw-gadget.1 gadget.4: failed to queue resume event [ 1466.723103][ T6269] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1466.766977][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 1466.775197][ T6269] raw-gadget.1 gadget.4: failed to queue reset event [ 1466.861187][ T6269] raw-gadget.1 gadget.4: failed to queue resume event [ 1466.961105][ T6269] usb 5-1: device descriptor read/64, error -32 [ 1467.113759][ T6269] raw-gadget.1 gadget.4: failed to queue suspend event [ 1467.160443][ T6269] raw-gadget.1 gadget.4: failed to queue reset event [ 1467.273008][ T6269] raw-gadget.1 gadget.4: failed to queue resume event [ 1467.372779][ T6269] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1467.421971][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 1467.429255][ T6269] raw-gadget.1 gadget.4: failed to queue reset event [ 1467.512303][ T6269] raw-gadget.1 gadget.4: failed to queue resume event [ 1467.648408][ T6269] usb 5-1: device descriptor read/64, error -32 [ 1467.738314][T14408] usb 1-1: USB disconnect, device number 78 [ 1467.791335][ T6269] raw-gadget.1 gadget.4: failed to queue suspend event [ 1467.798576][ T6269] usb usb5-port1: attempt power cycle [ 1467.839047][ T6269] raw-gadget.1 gadget.4: failed to queue disconnect event [ 1467.907668][ T6269] raw-gadget.1 gadget.4: failed to queue reset event [ 1468.003632][ T6269] raw-gadget.1 gadget.4: failed to queue resume event [ 1468.025970][ T6269] raw-gadget.1 gadget.4: failed to queue reset event [ 1468.235942][ T6269] raw-gadget.1 gadget.4: failed to queue resume event [ 1468.329973][ T6269] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1468.372634][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 1468.380094][ T6269] usb 5-1: device descriptor read/8, error -32 [ 1468.491208][ T6269] raw-gadget.1 gadget.4: failed to queue suspend event [ 1468.506341][ T6269] raw-gadget.1 gadget.4: failed to queue reset event [ 1468.603058][ T6269] raw-gadget.1 gadget.4: failed to queue resume event [ 1468.671371][ T6269] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1468.705521][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 1468.731695][ T6269] usb 5-1: device descriptor read/8, error -32 [ 1468.851861][ T6269] raw-gadget.1 gadget.4: failed to queue suspend event [ 1468.892337][ T6269] usb usb5-port1: unable to enumerate USB device [ 1469.842704][T14412] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1470.069073][T14412] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.145234][T14412] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1470.249579][T14412] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1470.326602][T14412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.387309][T14412] usb 6-1: config 0 descriptor?? [ 1471.258501][T14412] usb 6-1: USB disconnect, device number 52 [ 1472.082350][ T30] audit: type=1400 audit(1766103484.539:301): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="]" pid=21739 comm="syz.5.4004" [ 1472.318542][T21747] loop6: detected capacity change from 0 to 524288000 [ 1472.532112][T21747] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4005'. [ 1472.624672][T21754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.766027][T21745] bond3: option ad_user_port_key: invalid value (54958) [ 1472.817547][T21745] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 1472.943601][T21754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.963727][T21745] bond3 (unregistering): Released all slaves [ 1474.461636][T21763] netlink: 'syz.1.4009': attribute type 5 has an invalid length. [ 1474.924430][T21766] xt_TCPMSS: Only works on TCP SYN packets [ 1476.814452][T14406] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1476.991647][T14406] usb 1-1: Using ep0 maxpacket: 16 [ 1477.014493][T14406] usb 1-1: config 0 has no interfaces? [ 1477.075190][T14406] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1477.142819][T14406] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1477.223773][T14406] usb 1-1: Manufacturer: syz [ 1477.276292][T14406] usb 1-1: config 0 descriptor?? [ 1480.015352][T14406] usb 1-1: USB disconnect, device number 79 [ 1480.291892][ T6269] IPVS: starting estimator thread 0... [ 1480.411722][T21810] IPVS: using max 37 ests per chain, 88800 per kthread [ 1484.425394][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.435980][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.764657][T21847] xt_connbytes: Forcing CT accounting to be enabled [ 1485.063000][ T6269] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1485.861908][ T6269] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1485.910570][ T6269] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.971052][ T6269] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1486.034679][ T6269] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.307484][ T6269] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1486.347449][ T6269] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1486.409718][ T6269] usb 1-1: Product: syz [ 1486.436713][ T6269] usb 1-1: Manufacturer: syz [ 1486.622710][ T6269] cdc_wdm 1-1:1.0: skipping garbage [ 1486.628244][ T6269] cdc_wdm 1-1:1.0: skipping garbage [ 1486.700516][ T6269] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1487.423594][T14412] usb 1-1: USB disconnect, device number 80 [ 1487.772433][ T30] audit: type=1400 audit(1766103500.229:302): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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lo: Caught tx_queue_len zero misconfig [ 1489.809207][T21891] delete_channel: no stack [ 1489.832327][T21891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.848452][T21891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.273976][T21894] fuse: Bad value for 'fd' [ 1490.284762][T21894] fuse: Bad value for 'fd' [ 1491.466011][T21899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.584103][T21899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.439482][T21918] binder: BINDER_SET_CONTEXT_MGR already set [ 1492.465909][T21918] binder: 21913:21918 ioctl 4018620d 200000000100 returned -16 [ 1492.641065][T21918] binder: BINDER_SET_CONTEXT_MGR already set [ 1492.692340][T21918] binder: 21913:21918 ioctl 4018620d 200000000140 returned -16 [ 1492.854493][T21920] bond6: Removing last arp target with arp_interval on [ 1492.933320][T21920] bond6: entered allmulticast mode [ 1492.949995][T21920] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1493.456378][T21926] snd_dummy snd_dummy.0: control 0:0:1:syz0:65533 is already present [ 1494.221201][T14406] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1494.400470][T14406] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.442262][T14406] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1494.489843][T14406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.644971][T14406] usb 1-1: config 0 descriptor?? [ 1494.697057][T21939] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1494.827368][T21943] openvswitch: netlink: Flow key attr not present in new flow. [ 1494.981192][T14398] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1495.164602][T14398] usb 6-1: Using ep0 maxpacket: 16 [ 1495.178406][T14406] hid-alps 0003:044E:1215.0028: hidraw0: USB HID v58.6c Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 1495.179720][T14398] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.278084][T14398] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1495.302949][ T31] INFO: task kworker/1:11:14394 blocked for more than 143 seconds. [ 1495.320074][T14398] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1495.331013][ T31] Tainted: G L syzkaller #0 [ 1495.353497][T14398] usb 6-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1495.367014][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.414125][ T31] task:kworker/1:11 state:D stack:20400 pid:14394 tgid:14394 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1495.427362][T14398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.465880][ T31] Workqueue: usb_hub_wq hub_event [ 1495.473831][T14398] usb 6-1: config 0 descriptor?? [ 1495.497485][ T31] Call Trace: [ 1495.513907][T21947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4043'. [ 1495.541601][ T31] [ 1495.544741][ T31] __schedule+0x14bc/0x5000 [ 1495.549382][ T31] ? __pfx___schedule+0x10/0x10 [ 1495.572090][T21947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4043'. [ 1495.607650][ T31] ? schedule+0x91/0x360 [ 1495.624148][ T31] schedule+0x165/0x360 [ 1495.636058][ T31] schedule_timeout+0x9a/0x270 [ 1495.645005][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1495.657459][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1495.672976][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1495.683885][ T31] ? wait_for_completion+0x267/0x5d0 [ 1495.700860][ T31] wait_for_completion+0x2bf/0x5d0 [ 1495.719384][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1495.740483][ T31] i2c_del_adapter+0x591/0x760 [ 1495.753850][ T31] ? kfree+0x1c0/0x660 [ 1495.766983][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1495.783852][ T31] ? dvb_usbv2_exit+0x949/0xb90 [ 1495.796380][ T31] dvb_usbv2_probe+0x497/0x3c20 [ 1495.806144][T14406] usb 6-1: USB disconnect, device number 53 [ 1495.832031][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1495.844229][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 1495.850129][ T31] usb_probe_interface+0x668/0xc90 [ 1495.860090][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1495.868112][ T31] really_probe+0x26d/0xad0 [ 1495.873242][ T31] __driver_probe_device+0x18c/0x320 [ 1495.880052][ T31] driver_probe_device+0x4f/0x240 [ 1495.888811][ T31] __device_attach_driver+0x279/0x430 [ 1495.894988][ T31] bus_for_each_drv+0x251/0x2e0 [ 1495.901213][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1495.908223][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1495.921077][ T31] __device_attach+0x2b8/0x430 [ 1495.926040][ T31] ? __pfx___device_attach+0x10/0x10 [ 1495.933102][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1495.940224][ T31] device_initial_probe+0xa1/0xd0 [ 1495.947812][ T31] bus_probe_device+0x12a/0x220 [ 1495.956541][ T31] ? device_add+0x726/0xb80 [ 1495.961412][ T31] device_add+0x7b6/0xb80 [ 1495.966647][ T31] usb_set_configuration+0x1a87/0x2110 [ 1495.973632][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1495.980381][ T31] usb_probe_device+0x1c4/0x3c0 [ 1495.986368][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1495.992318][ T31] really_probe+0x26d/0xad0 [ 1495.998015][ T31] __driver_probe_device+0x18c/0x320 [ 1496.005108][ T31] driver_probe_device+0x4f/0x240 [ 1496.011730][ T31] __device_attach_driver+0x279/0x430 [ 1496.017456][ T31] bus_for_each_drv+0x251/0x2e0 [ 1496.028122][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1496.034561][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1496.041672][ T31] __device_attach+0x2b8/0x430 [ 1496.047809][ T31] ? __pfx___device_attach+0x10/0x10 [ 1496.054313][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1496.059650][ T31] device_initial_probe+0xa1/0xd0 [ 1496.067478][ T31] bus_probe_device+0x12a/0x220 [ 1496.072829][ T31] ? device_add+0x726/0xb80 [ 1496.078488][ T31] device_add+0x7b6/0xb80 [ 1496.083708][ T31] usb_new_device+0xa39/0x1720 [ 1496.089145][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1496.095443][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1496.101183][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1496.107243][ T31] hub_event+0x29b1/0x4ef0 [ 1496.116290][ T31] ? __pfx_hub_event+0x10/0x10 [ 1496.122586][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1496.129404][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1496.136563][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1496.142925][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1496.149846][ T31] process_scheduled_works+0xad1/0x1770 [ 1496.157861][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1496.165407][ T31] worker_thread+0x8a0/0xda0 [ 1496.170560][ T31] ? __kthread_parkme+0x7b/0x200 [ 1496.176357][ T31] kthread+0x711/0x8a0 [ 1496.185837][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1496.191445][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.197209][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1496.204165][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1496.210054][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.216526][ T31] ret_from_fork+0x599/0xb30 [ 1496.223234][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1496.229625][ T31] ? __switch_to_asm+0x39/0x70 [ 1496.236838][ T31] ? __switch_to_asm+0x33/0x70 [ 1496.243050][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.247970][ T31] ret_from_fork_asm+0x1a/0x30 [ 1496.254279][ T31] [ 1496.263458][T14398] usb 1-1: USB disconnect, device number 81 [ 1496.274096][ T31] [ 1496.274096][ T31] Showing all locks held in the system: [ 1496.296599][ T31] 1 lock held by kdevtmpfs/26: [ 1496.306019][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1496.316647][ T31] 1 lock held by khungtaskd/31: [ 1496.323564][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1496.335783][ T31] 1 lock held by udevd/5199: [ 1496.340514][ T31] 2 locks held by getty/5591: [ 1496.346236][ T31] #0: ffff88814e1c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1496.381633][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1496.401044][ T31] 1 lock held by syz-executor/9274: [ 1496.406383][ T31] 5 locks held by kworker/1:11/14394: [ 1496.431453][ T31] #0: ffff888142ab9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1496.458281][ T31] #1: ffffc9000bd37b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1496.486197][ T31] #2: ffff888143f22198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 1496.511726][ T31] #3: ffff88806a7f8198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 1496.531011][ T31] #4: ffff88804b6f4160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 1496.540403][ T31] 3 locks held by kworker/0:10/14412: [ 1496.561831][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1496.581040][ T31] #1: ffffc9000c337b80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1496.606588][ T31] #2: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1496.631679][ T31] 4 locks held by udevd/20037: [ 1496.636661][ T31] #0: ffff88807796ad58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 1496.661344][ T31] #1: ffff888021751888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1496.681734][ T31] #2: ffff88804dce1d28 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1496.693248][ T31] #3: ffff88806a7f8198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1496.703175][ T31] [ 1496.705588][ T31] ============================================= [ 1496.705588][ T31] [ 1496.716704][ T31] NMI backtrace for cpu 1 [ 1496.716726][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1496.716754][ T31] Tainted: [L]=SOFTLOCKUP [ 1496.716762][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1496.716776][ T31] Call Trace: [ 1496.716785][ T31] [ 1496.716795][ T31] dump_stack_lvl+0x189/0x250 [ 1496.716830][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1496.716857][ T31] ? __pfx__printk+0x10/0x10 [ 1496.716901][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1496.717028][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1496.717060][ T31] ? __pfx__printk+0x10/0x10 [ 1496.717108][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1496.717143][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1496.717174][ T31] sys_info+0x135/0x170 [ 1496.717198][ T31] watchdog+0xf95/0xfe0 [ 1496.717244][ T31] ? watchdog+0x20a/0xfe0 [ 1496.717280][ T31] kthread+0x711/0x8a0 [ 1496.717311][ T31] ? __pfx_watchdog+0x10/0x10 [ 1496.717338][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.717367][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1496.717398][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1496.717417][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.717444][ T31] ret_from_fork+0x599/0xb30 [ 1496.717466][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1496.717543][ T31] ? __switch_to_asm+0x39/0x70 [ 1496.717569][ T31] ? __switch_to_asm+0x33/0x70 [ 1496.717593][ T31] ? __pfx_kthread+0x10/0x10 [ 1496.717620][ T31] ret_from_fork_asm+0x1a/0x30 [ 1496.717667][ T31] [ 1496.717692][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1496.884102][ C0] NMI backtrace for cpu 0 [ 1496.884122][ C0] CPU: 0 UID: 0 PID: 5851 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1496.884147][ C0] Tainted: [L]=SOFTLOCKUP [ 1496.884154][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1496.884166][ C0] RIP: 0010:prepare_alloc_pages+0x1f1/0x650 [ 1496.884263][ C0] Code: 85 59 02 00 00 41 f7 c6 00 04 00 00 74 2b b8 00 08 00 00 41 23 45 00 75 20 48 c7 c7 27 bf 80 8d be 43 01 00 00 e8 8f 64 78 ff <2e> 2e 2e 31 c0 48 be 00 00 00 00 00 fc ff df 48 8b 7c 24 68 49 89 [ 1496.884280][ C0] RSP: 0018:ffffc900040bf110 EFLAGS: 00000246 [ 1496.884296][ C0] RAX: afc1f93a36f79100 RBX: ffffc900040bf1c0 RCX: afc1f93a36f79100 [ 1496.884311][ C0] RDX: ffff888032788000 RSI: ffffffff8d979233 RDI: ffffffff8bc08360 [ 1496.884324][ C0] RBP: 0000000000000000 R08: ffffffff821a26bd R09: ffffffff8e062360 [ 1496.884337][ C0] R10: ffffc900040bf1c0 R11: fffff52000817e3d R12: 1ffff110064f1005 [ 1496.884350][ C0] R13: ffff88803278802c R14: 0000000000000dc0 R15: 1ffff92000817e38 [ 1496.884364][ C0] FS: 0000555586966500(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 1496.884380][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1496.884392][ C0] CR2: 00007fbba55b42f8 CR3: 0000000064816000 CR4: 00000000003526f0 [ 1496.884408][ C0] Call Trace: [ 1496.884415][ C0] [ 1496.884428][ C0] __alloc_frozen_pages_noprof+0x123/0x370 [ 1496.884449][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1496.884469][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1496.884495][ C0] ? policy_nodemask+0x27c/0x720 [ 1496.884553][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1496.884577][ C0] alloc_pages_noprof+0xa9/0x190 [ 1496.884619][ C0] get_free_pages_noprof+0xf/0x80 [ 1496.884640][ C0] __kasan_populate_vmalloc+0x38/0x1d0 [ 1496.884693][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1496.884720][ C0] alloc_vmap_area+0xdc4/0x14e0 [ 1496.884796][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1496.884821][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1496.884866][ C0] ? __get_vm_area_node+0x13f/0x300 [ 1496.884892][ C0] ? alloc_counters+0xd3/0x6d0 [ 1496.884974][ C0] __get_vm_area_node+0x1f8/0x300 [ 1496.885004][ C0] __vmalloc_node_range_noprof+0x371/0x16a0 [ 1496.885022][ C0] ? alloc_counters+0xd3/0x6d0 [ 1496.885046][ C0] ? __mutex_trylock_common+0x153/0x260 [ 1496.885073][ C0] ? rcu_is_watching+0x15/0xb0 [ 1496.885097][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1496.885114][ C0] ? __mutex_lock+0x335/0x1350 [ 1496.885139][ C0] ? alloc_counters+0xd3/0x6d0 [ 1496.885156][ C0] vzalloc_noprof+0xb2/0xf0 [ 1496.885172][ C0] ? alloc_counters+0xd3/0x6d0 [ 1496.885190][ C0] alloc_counters+0xd3/0x6d0 [ 1496.885206][ C0] ? net_generic+0x1e/0x240 [ 1496.885263][ C0] ? net_generic+0x1e/0x240 [ 1496.885280][ C0] ? __pfx_alloc_counters+0x10/0x10 [ 1496.885301][ C0] ? xt_find_table_lock+0x35e/0x3e0 [ 1496.885322][ C0] do_ipt_get_ctl+0xaac/0x1180 [ 1496.885344][ C0] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 1496.885365][ C0] ? __mutex_trylock_common+0x153/0x260 [ 1496.885388][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1496.885413][ C0] ? rcu_is_watching+0x15/0xb0 [ 1496.885434][ C0] ? trace_contention_end+0x39/0x100 [ 1496.885461][ C0] ? nf_getsockopt+0x224/0x290 [ 1496.885506][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1496.885529][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1496.885551][ C0] ? __might_fault+0xb0/0x130 [ 1496.885601][ C0] nf_getsockopt+0x26e/0x290 [ 1496.885621][ C0] ip_getsockopt+0x1c4/0x220 [ 1496.885696][ C0] ? __pfx_ip_getsockopt+0x10/0x10 [ 1496.885721][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 1496.885750][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1496.885778][ C0] do_sock_getsockopt+0x2b4/0x3d0 [ 1496.885800][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1496.885820][ C0] ? do_syscall_64+0x80/0xf80 [ 1496.885845][ C0] __x64_sys_getsockopt+0x1a5/0x250 [ 1496.885865][ C0] ? do_syscall_64+0x80/0xf80 [ 1496.885884][ C0] ? do_syscall_64+0x80/0xf80 [ 1496.885903][ C0] do_syscall_64+0xfa/0xf80 [ 1496.885923][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.885945][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1496.885965][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.885982][ C0] RIP: 0033:0x7fbba539148a [ 1496.885997][ C0] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 1496.886012][ C0] RSP: 002b:00007fbba570f6b8 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 1496.886030][ C0] RAX: ffffffffffffffda RBX: 00007fbba570f740 RCX: 00007fbba539148a [ 1496.886044][ C0] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1496.886055][ C0] RBP: 0000000000000003 R08: 00007fbba570f6dc R09: 0079746972756365 [ 1496.886068][ C0] R10: 00007fbba570f740 R11: 0000000000000216 R12: 00007fbba55b9960 [ 1496.886080][ C0] R13: 00007fbba570f6dc R14: 0000000000000000 R15: 00007fbba55ba020 [ 1496.886102][ C0] [ 1497.384253][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1497.391134][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.401860][ T31] Tainted: [L]=SOFTLOCKUP [ 1497.406215][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1497.416317][ T31] Call Trace: [ 1497.419621][ T31] [ 1497.422564][ T31] dump_stack_lvl+0x99/0x250 [ 1497.427190][ T31] ? __asan_memcpy+0x40/0x70 [ 1497.431799][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1497.437113][ T31] ? __pfx__printk+0x10/0x10 [ 1497.441744][ T31] vpanic+0x237/0x6d0 [ 1497.445768][ T31] ? __pfx_vpanic+0x10/0x10 [ 1497.450304][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1497.455781][ T31] panic+0xb9/0xc0 [ 1497.459514][ T31] ? __pfx_panic+0x10/0x10 [ 1497.463950][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1497.469358][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1497.475531][ T31] watchdog+0xfdf/0xfe0 [ 1497.479709][ T31] ? watchdog+0x20a/0xfe0 [ 1497.484068][ T31] kthread+0x711/0x8a0 [ 1497.488177][ T31] ? __pfx_watchdog+0x10/0x10 [ 1497.492880][ T31] ? __pfx_kthread+0x10/0x10 [ 1497.497505][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1497.502738][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1497.507961][ T31] ? __pfx_kthread+0x10/0x10 [ 1497.512589][ T31] ret_from_fork+0x599/0xb30 [ 1497.517199][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1497.522345][ T31] ? __switch_to_asm+0x39/0x70 [ 1497.527146][ T31] ? __switch_to_asm+0x33/0x70 [ 1497.531935][ T31] ? __pfx_kthread+0x10/0x10 [ 1497.536579][ T31] ret_from_fork_asm+0x1a/0x30 [ 1497.541393][ T31] [ 1497.544593][ T31] Kernel Offset: disabled [ 1497.548920][ T31] Rebooting in 86400 seconds..