last executing test programs: 7.740424538s ago: executing program 4 (id=540): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0xbeb, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x8000, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x5, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x4, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x1, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x8000000, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0x1, 0x1000, 0x2, 0x10, 0x1, 0x0, 0xe55, 0x10, 0x80000001, 0x4, 0x1, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4000004, 0x1000, 0x1, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x100, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x2, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xffffdff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000000b80)=[{&(0x7f0000000a00)=""/113, 0x71}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f00000002c0)={0x3, "099fdbcd9b7f20bc91f5c2ef8e3b22bf2db466e70d01ed7d11f67f754354bf9e", 0x0, 0x0, 0x0, 0x0, 0x2020604}) syz_open_dev$I2C(&(0x7f0000000080), 0x3, 0x400001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22e02, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000fe6000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000ff5000/0x2000)=nil}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @mcast1, 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) 5.524407314s ago: executing program 2 (id=544): openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x0, 0xa1, 0xb47, 0x9, 0x7, 0x1, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) mkdir(0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) gettid() r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x33524742, 0x7, 0xa, [{}, {0x0, 0x8}, {0x0, 0x300}, {0x8000080}, {}, {0x0, 0xffffffff}, {0x4, 0x1000}, {0x0, 0x4}], 0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) 5.523607443s ago: executing program 4 (id=545): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r9, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8001}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x104) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x10020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 5.301328532s ago: executing program 3 (id=546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666edd7a13cf1cb25fdc448a5", 0xb4}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861e58b6956a4637c63f887490dbb3f389052a3342ca8de76c2bfe07bc19e9fb5182edf928524e30405f0dca1dc44c50a9382fdeb5b80e54ef8d74271ddd46d5f1334631495a3da56f6a674565cb9ce9f5a69dcc37b24895e51ec5d51ccd7bc70feaf3ca1912369ada1abc5cb415fb2175bfe30c6d48e7efe", 0xe9}], 0x2) (async) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x7, 0xfffffffd, 0xb830, 0x2, 0x4, 0x0, 0x7], [0x20000000, 0xca0, 0x2, 0x6, 0x75, 0x0, 0x5], [0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x9]], '\x00', [{0x0, 0x0, 0x0, 0x1, 0x1}, {0x97f, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5, 0x4}, {0x0, 0x9}, {}, {}, {}, {0x2000, 0x2}, {}, {0x0, 0x6}, {0x5}], '\x00', 0x20004b1}) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = getpgrp(0x0) r5 = syz_open_procfs(r4, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) (async) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r7 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000003c0), 0x141242, 0x0) ioctl$KDGKBTYPE(r7, 0x4b33, &(0x7f00000005c0)) timer_create(0x3, 0x0, &(0x7f00000000c0)) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) (async) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pipe2$watch_queue(&(0x7f0000002240), 0x80) 3.989170484s ago: executing program 4 (id=548): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r9, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8001}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x104) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x24}, 0x10020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 3.988853079s ago: executing program 0 (id=549): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}]}}]}, 0x138}}, 0x0) 3.986704789s ago: executing program 2 (id=551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffff5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 3.86923772s ago: executing program 3 (id=552): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgid(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000206010400000000000000000000000005000100070000000900020073797a19000000000500050002000000050004000800000015000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a00"/28], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000002280)='./file0\x00', 0x21, &(0x7f00000022c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit}]}}, 0x1, 0x0, &(0x7f00000023c0)="e95b2b7687cbca157cf6e40808d6e55dca5afee046ae1d82a0b1cf06ee4a9d880f43cc4e886757218380af2a3addc13306b73838488ae90d2d5b8c6a5b7efea729760ade2e12ed821747c12374acebe3e7f5ca1dc3c9a6d53ae8c1a325059264e4922d12b38242cb7b28e4b571a0ca70538b712fbf4c7e7b6c2459de1381482f3801d8634ef226453a03612b8a6ecd0e2043a7a23fd57fa63a20bf09939386e6577eadc28d9bb5363257617bdfef1bfe0fb837772e7ca6071fc2b1beb6ab29bf261c1c1bde1850375511b5dda5679229574fa3a78bef34397789c5bf24e6b0cb4860") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r5}}, './file0\x00'}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x121000) r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) readv(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f00000003c0)=""/73, 0x49}], 0x2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4e21, 0xd, @private2, 0x71}}}, 0xa0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xbc, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xbc}}, 0x8801) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x6, 0x80010, 0xffffffffffffffff, 0x0) 3.868265371s ago: executing program 1 (id=553): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x6c}}, 0x0) 3.789227521s ago: executing program 0 (id=554): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)) (fail_nth: 4) 3.72678666s ago: executing program 2 (id=555): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) r5 = socket$inet(0x2, 0x3, 0x4) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x2, 0x1, 0x2, 0x3572, 0x2}}, {0x4}}]}]}, 0x54}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2501000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x30040004) sendto$inet6(r2, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000003c0)="ad56b6c56dcd3292ea54c7ff0f0000000000005704cae881ef915d010000575609d847c920ba87a07c8be491b153dc66360964b118d2a691aca11bd9c47fb81460fa28f3ddf19b76af1ea16c92af4d2641ede3e1de35f353b350231e1c5b7f7dc2a7e1041458e6862f00000000b687a17d649b51e3613b5d7beb5325fb205964f221da8b138f3e90914c1eaebf49f505fedaedb1ac2f13fab8c100527847b055511795cc565044bf3401da74c87ea24000000000000087a60b55549aad7ffc2484d46aed588a4cb7f733814a5de173c4279fee0bed99487b18639cb76fab75487611c57e563c7cdc32f4f2fc74f6c6fa9148f42f1df0992840ed48f00e75f5979c6e89582b8c03e0f4c8469d8b", 0xfffffffffffffd99) r9 = accept4(r8, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 3.725453734s ago: executing program 1 (id=556): r0 = open(&(0x7f0000000000)='./file0\x00', 0x88100, 0x20) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000040)) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x1800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x1000, "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"}, &(0x7f0000001100)=0x1008) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001140)={r2, 0x2669, 0x8, [0x401, 0x4a32, 0x100, 0x5cb3, 0x5, 0x1, 0x9, 0x10]}, &(0x7f0000001180)=0x18) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=@getneigh={0x14, 0x1e, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r3 = openat$tun(0xffffff9c, &(0x7f00000012c0), 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001300)={0x0, 0x0, 0x0}, &(0x7f0000001340)=0xc) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000013c0)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @broadcast}, 0x41, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)='veth0_virt_wifi\x00', 0x7, 0xa, 0x7168}) fsetxattr(r1, &(0x7f0000001440)=@random={'security.', ':!-(@!{^\x00'}, &(0x7f0000001480)='.}\x06^%\x00', 0x6, 0x2) pipe2$watch_queue(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000001500)={{0x7, 0x2}, {0x8000000000000000, 0x4}, 0x7, 0x1}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000001540)={{0x7, 0x7}, {0x10000, 0x2}, 0x8, 0x1}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001580)=0x100000, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, &(0x7f00000015c0)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001600)={0x8, 0x1c, '\x00', [@ra={0x5, 0x2, 0x80}, @generic={0x84, 0x7a, "dbee7b6c1441d96a6fd429fc2638be5609ad4cd66b4ffe2c464f91467a6649808a0642934efe8bf88644baa243a4e854187b99f59a6ec7e02503265122478ded22a376f821f8e039c54132b5a718bafd1bf78052e7b9e93d83a6be616c5a43957ba09c3b9f43870fde0be556f8ee609e2cfa06ffc1df1a21f8e1"}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x28, {0x1, 0x8, 0x6, 0x9, [0x200, 0x0, 0x5, 0x9]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x52, 0x400, [0x2, 0x7, 0xaef4, 0x9, 0xa1]}}, @pad1]}, 0xf0) r8 = open$dir(&(0x7f0000001740)='./file0\x00', 0x400001, 0xb) renameat2(r5, &(0x7f0000001700)='./file0\x00', r8, &(0x7f0000001780)='./file0\x00', 0x4) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f00000018c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd=r3, 0x8, &(0x7f00000017c0)="3d78d409c613598452f6ab0e700d985861ff5f45f3b8c01b0072df82ae0de72e804033769b3b458271003057bdf6f4e6e900363d07dff593e4093b2af7d7f8556ea8ad4c6be7ca9caf46c6c66f1a13a4d827e8b6a904cd59915f3cfbdc44c2eea896186eb6de0a62f019183fa1b9f0162b18f7b5e33df69d1c91637b85a2821d37bce36947fcb6984912958165b31fe3ebd1e07906f1837ca317e575e7b1c6a18f6b879814fe48e1b6aad567323801023715ddee9eb61029b6704f85f133487b202d238e81fbce237129df79e51fbedee8c5489b836e6e8f25d3bae68cfa5f203f443d2cd6fc199d77e9f7f835ae", 0xee, 0x4, 0x1, {0x0, r10}}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000001900)={0x9, {{0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}, {{0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffb}}}, 0x104) pivot_root(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)='.\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001b00)='lo\x00', 0x10) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000001b40)={0x8, 0x81, 0x4}) 3.413637042s ago: executing program 1 (id=557): msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000480)=0xffffb1e0, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.180835052s ago: executing program 1 (id=558): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x4, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x1f) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x9) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000080)=0x2) write$evdev(r10, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2.516162541s ago: executing program 0 (id=559): r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) getsockname$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=@updsa={0x1f8, 0x1a, 0x300, 0x70bd2c, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0x4e24, 0x0, 0x4e24, 0x9b, 0xa, 0x80, 0x0, 0x32, 0x0, r2}, {@in=@multicast1, 0x4d2, 0x6c}, @in6=@private2, {0x5, 0x8, 0x10001, 0x5, 0x8, 0xded0, 0x2, 0x6}, {0x5, 0xe, 0x9, 0xfffffffffffffff8}, {0x8, 0x8000, 0x81}, 0x70bd25, 0x3504, 0x2, 0x2, 0x4, 0x50}, [@algo_comp={0x10b, 0x3, {{'deflate\x00'}, 0x618, "93b5142dcdd6c69a5d9fb78fd5a661c81acfc286e13b1dc5f3e4d15de86935cb63705572794fc320c94c79b5a8ce806bf7225f9b707aeb84b56f450c73be51a57d541e03701511aefc20afc2b325caa19499dad6a19ccaea1f5bd1b47b23b1902e81109bd40a05b40658acc4acb5813d3d4386a0dc31cf99eb347d73dae3b1122405f5852ddec06f4480192b7eb2213a2283f86f0a4f5fc8e2b3d069bf53b06794355a6a41591e96a35aa3b245a2aeaaf52f04203fe84e298f1b58c18b9220ebd96e63"}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_clone(0x108800, &(0x7f0000000540)="22a74461d962846ced659ef857efe3084b9315deb68216bd0ab85743f15a547a3a13f956e5585af03d01dfdc9f0230307b181c155b9d7f5ffdf05639ca29bfd84639528b74141c47e95b306b09f0c3c14693218804e10929e62fcfb674ebb0048044956802", 0x65, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="c545921e4729f6adc446fe91a9ad76e5d8d737492a4464ca8a92cc1ca3d1123684a02a7a81b039eff461e9abd0d92d36c7159c555b09d671c780df6a1ca83923abc527c7930a7d14c1da501a8e152d662db8df71a9821b44d1406725e1d44cfb379ace2c5a43bf3f04475fe1ea35c082a3b31e395208c8d294d3b72deb7f9802") prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x0, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000006c0)=""/42) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r4, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x74}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xaca3911e82159e3d}, 0x0) poll(&(0x7f0000000840)=[{r1, 0xc040}, {r0, 0x80}, {r1, 0x401}], 0x3, 0x7) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000880)={0xfe, 0x1e, 0x99f5, 0x8, "eefbd85df4753795f11918c8e8e55feaf26828a357eb62761b04ad70fe1aa9dc"}) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000008c0)={0x5, 0x4, [0xfffffffc]}) r5 = signalfd4(r1, &(0x7f0000000900)={[0x2, 0x8]}, 0x8, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000940)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000a40)=0xe4) setresuid(r2, r2, r6) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x3b88a14e0c059494}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x6b}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10080}, 0x2000c004) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000b80)=0x4, 0x4) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) ioctl$KVM_PPC_ALLOCATE_HTAB(r7, 0xc004aea7, &(0x7f0000000bc0)) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000c00)=0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000c40)={0x0, 0x4}, 0x8) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000e00)={&(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[{}, {}], &(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0], 0x2, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000f80)={&(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0], 0x2, 0xa, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000fc0)={0x1, r8, r9}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001140)={&(0x7f0000001000), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x44, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000004) keyctl$session_to_parent(0x12) 2.333563768s ago: executing program 3 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0xfe, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x2) 2.239430347s ago: executing program 0 (id=561): r0 = syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000440)={0x4, 0x5, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x9f0901, 0xfdd, '\x00', @string=&(0x7f0000000300)=0x1}}) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000002c0)={0x0, "d2134ca94a3d9754195040e5d53512f4ed69c9d649691b5ee7cb5f14bb97a4fa", 0x1, 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000602010018010000646c6c250000000000a02020731af8ff00000000bfa1000000000f4240010000f8ffffffb702000008000000b703000001000000850000000640000895"], &(0x7f0000000040)='GPL\x00', 0x6, 0x6f, &(0x7f0000000240)=""/35, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0xfffffffd, {0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x2000000, 0x0, 0x7fffb}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0xd0) preadv(r5, &(0x7f0000000500), 0x0, 0x3, 0x75) ioctl$UI_DEV_DESTROY(r4, 0x5502) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000280)) 2.168873339s ago: executing program 1 (id=562): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r9, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8001}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x104) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x10020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 2.135991966s ago: executing program 4 (id=563): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) wait4(r4, 0x0, 0x2, 0x0) r5 = syz_open_procfs(r4, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can={{}, 0x0, 0x3, 0x0, 0x0, "00ab4cbeca000003"}, 0x10}, 0x1, 0x0, 0x0, 0x84}, 0x44045) read(r7, &(0x7f0000002340)=""/232, 0xe8) r9 = socket(0x40000000015, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8001, 0x3}}, './bus\x00'}) ioctl$TIOCMBIS(r10, 0x5416, &(0x7f0000000100)=0x4b03) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0x6000201c}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) 1.976729462s ago: executing program 2 (id=564): ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000010c0)=""/144) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000002380)) preadv(r3, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x80046108, &(0x7f0000000040)={0x80000000000000d0, 0x2000000000000002, 0xfffff7, 0xe}) 1.905264664s ago: executing program 3 (id=565): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r9, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8001}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x104) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=[@rights={{0xc}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x10020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 1.840542188s ago: executing program 2 (id=566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @window={0x3, 0x0, 0x3}, @timestamp], 0x4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000e00)={0x178, 0x0, 0x20, 0x70b528, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x110, 0x84, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x19, 0x1, @random="63f9c3a1421d02d47d34f241b17dc03fb2ba9c6a31"}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xca4}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0xa470}, @NL80211_BAND_LC={0x8, 0x5, 0x3ff000}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x81}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xce1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffff9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1d, 0x1, @random="5addfe5579d576c7ddc87d604f666b02c8abf55b28349037d8"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}]}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8a8c}]}, 0x178}}, 0x800) statx(r4, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x80, &(0x7f00000005c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffff9) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r4, 0x0, 0x7ffff088) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4}}, &(0x7f0000000280)=0xe4) getresgid(&(0x7f00000002c0), &(0x7f0000000440)=0x0, &(0x7f0000000480)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f00000005c0)=0xe4) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000600)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@default_permissions}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/kvm\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@obj_user}, {@fsname={'fsname', 0x3d, '/dev/kvm\x00'}}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@euid_gt={'euid>', r9}}]}}, 0x0, 0x0, &(0x7f00000007c0)="8afa1416d94da302b9b7b9cad6aca07fb7c028") ioctl$TIOCSIG(r3, 0x40045436, 0x3e) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x2, @thr={&(0x7f00000000c0)="4a38cb70495f4ce01a473353f0c6f1d346f3540cf01712039634117cde8f2701e5680ff83601b8c3c8b5ee05ba059013aa6203cd1fc65b600970574c3261137946d2925b9f46e2b52159a7b1cf4de4c06108d717", &(0x7f0000000140)="46487229df505144b47467f2687848a1ee25d73cb0981284684e"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000004c0)=ANY=[@ANYBLOB]) 952.61752ms ago: executing program 4 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0xffffffffffffff69, &(0x7f0000001f40)={&(0x7f0000000140)=@newae={0x98, 0x1e, 0x509, 0x70bd29, 0x25dfdbfc, {{@in=@empty, 0x4d5, 0xa, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}, [@mark={0xc, 0x15, {0xfffffffd, 0x7}}, @replay_val={0x10, 0xa, {0x5, 0x70bd27}}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@local, 0x2, 0x9, 0x1}}, @mark={0xc, 0x15, {0x35075a, 0x70}}, @coaddr={0x0, 0xe, @in6=@mcast2}]}, 0x98}}, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) capget(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x8000, 0x9f, 0x3, 0x2, 0xf, 0x4}) (async) ptrace$peek(0x19, r5, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) openat$zero(0xffffff9c, &(0x7f0000000040), 0xab01, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1555555555555476, 0x0, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000180)={[0x5, 0x0, 0x7, 0x80, 0x9, 0x9, 0x1, 0x100000001, 0xa427, 0x9, 0x8000000000000001, 0x3, 0x1, 0x81, 0x80000001, 0x9], 0xeeee0000, 0x80}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 521.127623ms ago: executing program 0 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000020000103000000000000000002000008"], 0x24}}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x3000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 336.565633ms ago: executing program 4 (id=569): syz_usb_connect$lan78xx(0x0, 0x0, 0xfffffffffffffffe, 0x0) (async) r0 = syz_usb_connect$lan78xx(0x0, 0x0, 0xfffffffffffffffe, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="4001000000007236ae6a3dfb3f51542e1744ab9d3edf36bcad403af42a0bdf98af9e365a797176950a34ff43d23136a20d88b0e39bfbb164eda458787939313d35d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000180)={0x40, 0x7, 0x3, 'gy6'}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 205.393272ms ago: executing program 1 (id=570): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) sched_setattr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x21f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfcfb1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x100, r5}, 0x0) landlock_restrict_self(r4, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0x25, 0x0, 0x0, 0x9, 0x7ff0bdbe, 0x0, 0x0, 0xb5, 0x0}) 164.489576ms ago: executing program 3 (id=571): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x324, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fc1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff7ad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0880000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xdf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0xdf, 0x3, "4545089d07fb93c6c14d5aa1dc97eec08edeb9695c48e07b6b51551306d3ebecc3e4a6f32db3fa65d87289aa36428deb0bbe0b9ab2db039ce540261d5b4f6af380d8148399221941737a80a19756ea4ccfc9745ffb376a74074536bc377ff8b266d3a5be419bf0e67315ba0d7da2877f9a4f535b4029cb7d60def39b61ee7c8a657d5a76129e06c8b7e8334fe044d9dec5a050b12be1725aba38a85029d16953c814c2028f8d3fc88c6f803c7db9bd1b1cacbd5ee0f7a5992f2c5756cf75fa6ea1056d53c790893607a9c6e3300fe9a7dd28247d535137853cb909"}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe8, 0x3, "d633023ec73c558285b47ae400898a349743a08c035ab83d758e14e77db12c8598896e9a8f8b28ed4cc4df5e2cc114b337f01086a6428f0c481a8da6c06ab8972a87efb811f0eb3285c0563d2274d9fd8b59d4c8d47d1730e7af625eaee017e0806606210784f0188bf075d4d10a4c572cb76be9fd71eb73ec6d23f307eebabdea376f9b192099c4fbc911a063b166b5e7d1cd850cde2ad6be12005ebd360b4eb8c3f101039a3f32508be5d09d852aa07d9fb417e8dfef6b2a12b8c46c327b80ca659c171f8660d7239bf3fd2e3bc165f0f1f35c291ecbbd778915d588dd9016e7868338"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x324, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fc1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff7ad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0880000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xdf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0xdf, 0x3, "4545089d07fb93c6c14d5aa1dc97eec08edeb9695c48e07b6b51551306d3ebecc3e4a6f32db3fa65d87289aa36428deb0bbe0b9ab2db039ce540261d5b4f6af380d8148399221941737a80a19756ea4ccfc9745ffb376a74074536bc377ff8b266d3a5be419bf0e67315ba0d7da2877f9a4f535b4029cb7d60def39b61ee7c8a657d5a76129e06c8b7e8334fe044d9dec5a050b12be1725aba38a85029d16953c814c2028f8d3fc88c6f803c7db9bd1b1cacbd5ee0f7a5992f2c5756cf75fa6ea1056d53c790893607a9c6e3300fe9a7dd28247d535137853cb909"}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe8, 0x3, "d633023ec73c558285b47ae400898a349743a08c035ab83d758e14e77db12c8598896e9a8f8b28ed4cc4df5e2cc114b337f01086a6428f0c481a8da6c06ab8972a87efb811f0eb3285c0563d2274d9fd8b59d4c8d47d1730e7af625eaee017e0806606210784f0188bf075d4d10a4c572cb76be9fd71eb73ec6d23f307eebabdea376f9b192099c4fbc911a063b166b5e7d1cd850cde2ad6be12005ebd360b4eb8c3f101039a3f32508be5d09d852aa07d9fb417e8dfef6b2a12b8c46c327b80ca659c171f8660d7239bf3fd2e3bc165f0f1f35c291ecbbd778915d588dd9016e7868338"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r2, 0x212, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r2, 0x212, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf4, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x40040800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000007c0)={0x1, 0x2, 0x1}) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000800)={{0x0, @addr=0xff}, 0x8, 0x7, 0x9}) (async) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000800)={{0x0, @addr=0xff}, 0x8, 0x7, 0x9}) r4 = openat$cgroup_ro(r0, &(0x7f0000000840)='memory.numa_stat\x00', 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000880)={0x7, {0x20000000, 0x9, 0xa78, 0xfffe0000}, {0x6, 0x5, 0x3, 0xf5d3}, {0x1, 0xffff}}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x725}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x20000004) (async) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x725}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x20000004) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0xb, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x34}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x8804) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0xb, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x34}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x8804) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000b80)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x1}, [{0x2, 0x0, r6}], {0x4, 0x2}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, r8}], {}, {0x20, 0x1}}, 0x3c, 0x6) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000c80)={0x1, 'veth0_to_bridge\x00', {}, 0x6}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000cc0)) mq_getsetattr(r4, &(0x7f0000000d00)={0x11a, 0x6, 0x800, 0x400}, &(0x7f0000000d40)) (async) mq_getsetattr(r4, &(0x7f0000000d00)={0x11a, 0x6, 0x800, 0x400}, &(0x7f0000000d40)) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000dc0), r4) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x200000c0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r9, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x200000c0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000ec0)={0x0, {0xf, 0x6}}) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, &(0x7f0000000f00)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, &(0x7f0000000f00)) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000f40)={'wg2\x00'}) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000f40)={'wg2\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r11 = syz_open_dev$video(&(0x7f0000001080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r11, 0xc02c5625, &(0x7f00000010c0)={0x8, 0x1, @value}) (async) ioctl$VIDIOC_QUERYMENU(r11, 0xc02c5625, &(0x7f00000010c0)={0x8, 0x1, @value}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f00000013c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xd4, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8641ac0d0b13126}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc8d0}, 0x20020000) 65.113929ms ago: executing program 0 (id=572): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) sched_setattr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a000000000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900010073797a30000000000900010073797a3100000000100003800c0000800800034000000002906300000e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a31000000000900020073797a30000000004c6303808c160080980101803c000280080003400000000208000180fffffffb080003400000000208000340000000040900020073797a32000000000900020073797a320000000054000280080003400000000108000180fffffffb0900020073797a32000000000900020073797a31000000000900020073797a31000000000900020073797a310000000008000180ffffffff08000180fffffffe0c0002800800034000000004aa000100046b44df86c0144e2866b39386127a1ac6a7d87c001f5d7563cea6e970d41d4da24a31da0ad616df0e416dc2a1ad57860d2c0b72b9690f1d8791b5f53a489da18cebfd80fa2ffbe5bc0e5c1a08e589f6689a73304ec716ecf4c3de27fc63d0f1d458d59d55370654b2b5e4e32661aae4c4f7dc0ddfc7b75c33ad84d7ca6a7ddf7db7251ae84d3bbd55798649eeb84d97f4d11b806e8364fb3c19ab2d5a67709e37b1d39df3780000400002800900020073797a32000000000800034000000004080003400000000108000180fffffffb0900020073797a32000000000900020073797a30000000000c00028008000340000000040c0004400000000000000004b8100b80100001800c000100636f756e746572001c00018011000100666c6f775f6f66666c6f61640000000004000280100001800b0001007470726f78790000241001800b0001007461726765740000141002800b0001005450524f585900000410030021401f199733ca40598c1bab2662b5803a67277f1082c5bcceb30f0688176c89be05b0a2b9f569338a90e353fdaa3afe39d031c86b9754a70119ee0a0f764f645868006b621413c0a1aa92537d59ea6591e3e1994d442f96003853994213670ff2e0ab7b8aa89b903bb392a17225118dee83f841b9c2752135dd449e8fbb682dbf99a8ec96490de21c09ca926451503fc64cfed07c57b72e9b309b89f122cafd3f4671a53c848c7f016e279776e96379df766b7c7cf8f507b58ab69e331710129a0c84432f9a585f4011e0b0073d478ec75154206468285ddc7352c8432b7659c8fb231dbe4838e082a1798c6ee192699fa3a6e9667463216f6c2346e217cf7a8e38354c1e3a9e431ebac4d1ea304a43c58381a4130d62df8b6b94057f7e13e0bcdb55eb146fe47b79535738339dbe71f403e53762cd4391993d23696578c500a6124c32e7c90cb876a7035fdf2cc4f1af8a420a4279f322010f6c3400d4dff8919c559a025d61b728b62e8de2e0b5f3fbf061a6aa868d589e97cd9b87fc1b7a2762b34708d0ae6ae41304400160ad3d859437fd239c9ebf9700edf1f30e361536a259dd9834b4ebdb1f0766f46f0248b4646159f27842e1f987b8154fc481574afbf6daffe1f3322161b71105a3b547c46eaa77bb95d39c9e32704e219173751440c7cd1405580e79c7c1f704e3442def0d0257ec2601878998f1609c7622943e81abf5d98e8cac202f3a90e72494fdf9824df43b5c32252a633e16178d577498a7d904db2cc3ff61415af77bb799affab91b600900000078596017c205930e7ed45182248dbe6ae44c89f36f64e30c8b99ed2325329e9022419408585f1fe532cea4da3d0cb94dae1dbb9397b6551a60b91b661cc819306a37bdb6a44e6a73f8ab931a9b13b918e982ebcb45c1fb554a592a1fdf5d78af83d31e14b750c505a685009911365d3f692a546a4ade73c7f9173ca722c8cbb5242fb84a795b7ef52860dfeb028e087e958b292b3a615270da433db09c7402280f65ff47cc6ed075e16c5a40c1c977efa569c5d49f72d139c112104425cc33f33e1550b219cfe0847461b23fdb79a502f6b02f684affef020baafe28edcf964136d6cd6da8f8372e0a7ec57c8f93bb72360b1446545f1b1fc6edc83e6c0489a073b40a9d22f11161aa1ed6d9a867fc98d7f1e6cef8556e32b225beb7f788af2dd707936c0b3fde7245c1e60b5ec376bd4ae6127e39a3a2e569b372b7e7a0eb45b842223a11aa9711f6b6a52fd500439383c270f05463bf5f77dee3f6e7dea453550dec50430bc2a167978b12e9eb16ee568632fd407b427490e88f421205595f4ed65f543f2ad705644eb23f04837ff36b52bc9b2b2e4e79e589068a7290e7a7156327b02756dc79d28e8a45804adee73c14a600a87aab560a186a7edc5f880ff0935ab8e3d68808dc1bf0a978dab80f12467b45211b1795e9d5baa5b71e5b9e89afc57f2ccc573afd0284fd0ae101b7a3eee8d3115e40fc9db4f68112622f5aa5a75935d8c7d52f5f8dbbdc43c512036734ab0e81671f016eac75c3ffa9ef8531c85282451ae9acb45e1a98468334cf5d11987b909f3cd8f492b6216790e9a02089fd2a0b91173a8c42b74ee4ab9f4d8613399ef2aa5a91cb1216d44cec37bcece4d933f5e7713e34c8610783a649889fdf005bb427174e3b55bab144877c382feb8f8a5c6061754234c3cd4fcb53077d0a69f60a944437bf7fb4cf081eb4ea2b280961e995a2472579a4a19d2ca8d02a002e6c7222ab27d3fcad69a2f8fa62bb5b285e516d8051db0ab27bb53a9ff23944fda597569e811f19c31271438fdc3ecb90f5a0a01040f5c9c1bd33c09cf02ab2daffe17e3c327d3bb220720c09111da235b541e2d32169f8f4b84a8951d5c46a7cf9a7a901974270d1e0a876b95119b8e6c5de61eb946221ec513ca5abe63561309d82341cf557b2860767dcc56ba62a7f4073c8cd4656b90f45b5230320ac34cf528a27b1dd28548024526d4b120191b05b90040c04afa1ecbf3c48840eaed2b3d28864192463f280588f33d42090324b0b9b93995c0f21601975ba45c61f426ac82eff45ca28b5ebaa6d3b110b49a0447aa1a1a63bed64af8ad04cb137ac9c195dc4a9f51925086f8c7f427ffedd1651727834c412be5e0e9655b8e750e8ee5969da93e1103a6a4dc4800e99eec899983ccf6e5b02cfd258c796f137fb2ffa66bb24ef19f6cafb53344d1a67b25351630155bdf80ec00880336b51f44625c4a3de2fec38dd3ad376d118d39841681f235fd02fb1deb2321a49bb6085cc9894fd07e0f5f6d46a1dc6a36f98443595fbe15d69d96e1af7dbb090e8689468598efd919eb3c46bfb4d3b21a7e57ea9c7056aa7195f56116ae331c4ea6571b246aca031c3af057ab12564eb692ccdb6d70055f8ec7211ce837e8ac6dbc402313228addbaad86b8defc543c8a95e5b654f1c6c755a453ad20ce003cf560c88981f833e3724fb33714d0439fb7607089e1c86cf0f4536e829e2870ff332c9cb1fddde7206998f8200677910531ed1f1173b7779b6c93b092444fd389c90d31516f83290a3d114a51b8284a160e64adb6324395b5051c7373f6f6e9df060f5eb92b382bed62401e5cb0b6e71232c65b3b0a24e22f44baf3e14e8ec4e2b0bb7c6d28666c4bab66eb1d1f775458b8d4b3dc398288a9ea7f136ec9d2bdaf9630c886fe86ffac2dba50bec55aafc239df27ab10a8f433e7471d52e63ef0585aaf9bb431344ff11511bf698813cc4d93aa3b78a6b2c727e93ae43689b9d76a19115120317089dd72c096768800985f1a2a12fa85cb26921a4781ec147fe0af9ecad7f079a1f6ef79d0b2362278d05563da11f8929d0dfce3c3000e21239c37644fb16b670cf5857745f5b4b1b62df9f2606ea5b5128ea0d9932ec9222c892850e63981059a540a7b50e0531d9304ca8a5d7a1df5fb63dac3245774f937f320f71ac988288ff3e9620fa46e15d47dffa1d33e0f4c8a804f4360ae913a32a1a05c7dc14b69b9efbb8fd882dbf787f35b0cf3aa5a68f6b1fa29429127180a3503ddc7cc4466cbeffe4af8dc1e800e7f1602814cbbedcc04c715080d4b4ccf4d6dd677492399f75ad6d732bad4f0f01d9c01e58433b246237a4cf4102faa9cb9c867f3ac0704f1f693452738a83ae856241e53ad54aa8fef86506b09b245e44319a6e5a36098837594307d469e3190f8220b2df6b56460d04c78856f31c8d455851efbbaf546536c902a27e41abb20877252ca211b1edb6c6c745c9852ddec9a528bb6328381c84ff0494e504c0db5766913ce46ac9e82cc61b9becefe11212dd00feb25f39ffe2f574d12d78e89d97b92e8579b5369e0ece4edc56e26fc3e457d22de6feffd1a61a0b8dc68de97b1d3a6d2499cd2bf11317b1813891510476b7d141a34fbb9ec1fcc274a9ce2df40545b1242658276ba5194f3676c501576f84e1c01dff5d715f7f229551659fbf3b66fa0acd2842dbee98a2b92269c137fc5005ccd61f16c18a27f15a3ef2d4f21f102813ca77830878aa07dc44a97621d95f5ca5f2c2453318f9bb41acbc877a0940543861d4e814187b98b779a99747091508cbab9aae6a8b0c1619a44d8b9eca0a328c93733abf92a9479551c2a9474f7e19b641b515c8f5549df44e31eeaee74f97cb5c93d194ceee20a80d04c608da625f7eea637163079bbdb8a60f52089f17333ea0d1e962cfc2c3b1022e5bfbd65a2f72818f6ca76d6625c23bb12d8b26c3f7f833d05a51f99027a5c0b3200c44afc07c8831dd859754be67903ec32b341e5da8e283af72db6e2e07ebf862ad2714b75ebca9e026a93c39497c5822493669a114a012c8067653b62d7f6509cad9402dd61e83c4e0d7a6952ae7e2e1406cad1f3f717cae82e02dbb1a6daf7378435deca5d711e442075d59959d2caa5e123a877070b09f067f894a3c1560897c50e6a8c9ca9b745ec286eec364c8b89820ca33610ee6be11a12fdc581c9ff7573b50896c4c03c25928c7fbbb20d4702fa99164538c8c5d14c15b5b4e8f739032df82bef102651b09ed11f5f511f11ed58afa143fea40aa7f68cf2414acc39d9860f107efedf437202bd16442f2aee06372fb87d184327c236d35abef48698ff7304f7e5b216beddf51fd250daa818e7772d6eca4e651190a4cb3efab577151d509351d0f081c829167503f5c80d395f966569a3013f347eef4f718902bec1c06a009968813a0e36f2082e17dbb69e126054764c6a44974d8f88928cebc39e658f83eeec38f2d1a6f7ea3a165e99aa478bdf48213fdff7c895b5693d05a9f8419e3f4faa570ce22ff85a11f9ca2b420c4e24af175f10d7662f66440112c2500b5e92696098025a74938938a1a4af0911667636353e4d00c3b0330a3406596f64a8e05365616d1bf750d7d9c070a17ee997334ba20c5eb79348486c96f9ea83827ea93c6bfda98ab358c7ee8c862386267a2927d9b6227b4cac97367b5049cf530e18cb2c9869afb72770b29fa2036177747c71adaeef3ffbbcd71a63311708969dad255d60858b521a6096c96bba97af1ed3d73bde1f27f51532b01428adbce6c5495c91bbf809ab5541ab95441597742ca9801ca596df1dd004827a230db7526d6c5c4ec0c2cb7f0b90d7f651b7755e7d0463ea0f6ddacab8c5d4b47cb8d74533ebcde2625c695a00f287ce8ba8385099bb738d599523cce9e02ab7ff90410210ff8b6ed4e098c8f27f30e666d62096508852ea78876f4aef7c9be68d47454083b65c81213985dc5416c0ff409841676a706b6d83fff58b9b16793933f7f1bfd85bb3a493bba73492d38574159f11ef4d4a599aa4c6568d60467598f9db82bffca9f2581dc91c52e878a75cc9fc145df3f55e4aebdced259b96db169f6f905b91d400afcedcdc367b7252f461464ee113f16b2d71df1ca1e185a5842dae2f52c61b21813ab23b86ef4f06b3f4167db674d4e3ca308ea000a02bdd151a89148f32336464d42db2655d224be53e8fdc26aaa3e128c1bc01b62472b5e556e509464f0edc8d008471d082b60f345ae2127a4673204cc1a1cdf26ccfb448389c4190d1c3b9ba8f51b34b98907e3d2844169d6c5596d8ee6d7325b4b60da675eab50ccf535a09e252b185998926d3725c9f668063ae1526e6a2b2e1fe0f028d7fd7fbce67529b55de01ef45b668757768a7190ef92329d40a0fa847653380c2a80882774f94de2e2e0f08221f5f970f7011b7fe39bab60850c3405941e81bf5aa5f89cf511155abc3a6ad964d05c4adc2bb4257f08b93e8173963205605e5731a72aadecd8c2e8639bda938051bcc0e46d60908f8866e2dd1e8a6e7391e69c21cd1aa4eee84aaf1a1313fa2b38d4489870ac23e11635011ab4815a6642ae282dba52987302f33332252cb21ef1a54f43abc45245e26c192433495f93072e5f9944ea4364e7ccb92135d634672673874d21c5e4668a2c78a83e43d7e9657c0aa84a0556cf472879ba9dc7ec68cbc5f6deb392211233d5977bd2d6a4b7e4da39c49a1c3524e4610618040b3a569cc8abac5c061a741f4ac2089aafbcf607e5815c86ab8088a58080a7cc2f217885baa56e33e590ada3a1d559d78ee84bdf5dcee44b0a57e4acaebef8e3d27672a3128a43711b9fa3ace9545914f31b41f7649bcaf8293ae1b951f5f8f5bdc46a5da2b8484f9cff5385820e4ecc71defadae05a78106d2b2fb40a4373a24d11f8e85d865d66ac59fad296077ded6dcc68dca2cb42340001800b00010072656a656374000024000280080001400000000008000140000000010800014000000000080001400000000010000180090001007866726d00000000100001800c000100636f756e74657200c0010b801c0001800b00010065787468647200000c0002800800034000000058fc0001800b0001007461726765740000ec0002800c0001005345434d41524b00db000300369b20516fc56a23560fc740dd3c5339c4dad96ac3c55d71daf5336757d9287b8253ec1850bf00dac54e41c6007130267ab9178397dbb31092c6fe1c292311f25762ccea87c32e0214cc61473578084e82c94fdb253b8818cc13569296f3793318a36acd38d07710f9a06765ee3e4e93d3f44ad85c949050c6db148f50a8a8e13079a7b82b5503a26a0f2d5241e7c7d19dc4267ff7f6c4a8d31d2a9496660f219addedba6ab7cab86b710f3eadff8fc497c93718ee92c867ae6a40d335c74a15cf369a673de1199920db4fa5e9b61c6b11c681108bc5b9001c0001800a00010072656469720000000c0002800800014000000004140001800e000100696d6d6564696174650000002c0001800b0001006f626a72656600001c0002800800054000000001080003400000000e08000540000000001c0001800b0001006e756d67656e00000c00028008000440000000070c000180070001007274000010000180090001007866726d0000000010000180090001007866726d0000000074010b808c0001800c0001006269747769736500800000000000000071756575650000003400028006000140001000000600034000030000080004400000000d06000140000a0000060003400000000006000140000300001c0001800b000100736f636b657400000c000280080002400000000b100001800b0001006e756d67656e0000640001800b00010072656a6563740000540002800800014000000002050002000500000005000200040000000800014000000002050002007800000008000140000000020500020006000000050002000800000005000200090000000800014000000000100001800b00010074756e6e656c0000e3000640a5536f9c59b2b17fe9508045b9ac84d33048fe5d1f6409bda5e5e84ed18ca6249a0924b45a2721486e3489ba735d623a0da70ae4de60a8867e9cd715cca458265ecc46399271435dcd4d2bdc651ede35fb2fc8f94ec9347f07b8e1b452119d9b939af33c125ce4e44d875101bd7f1d152c7615b0670c8eb9b73dc548f2942c382393af104d24309a6fcc5b9c0241ca6ae3398beb4fe1e44f9ef7aa92f6ffa2ace37b20ea3bde0a3f261de5b3e88260b7395a1f8dba72bb39c0b189d78eebfb9875e0b90a9c1888e09070b77d791407c258b3f94e4855aff64665d20e1bb06d000c00054000000000000008000800034000000002100000800c00054000000001000000000c00008008000640302fa9f994360080b4110a80330001004378dbfa88217058b763f123a85faba9eb19bf874d30305e0f59dfe51cb4a7ddcceae146a6bbd765171d10bb817e77004000028008000180000000000900020073797a31000000000900020073797a31000000000900020073797a320000000008000180fffffffb08000340000000031400028008000180fffffffe08000180ffffffff0c00028008000340000000040c000280080003400000000135000100c3ca5812dfada0f4513ef988df1fa5be397a70f05c21ae9ae26803193c1b0a6d2964e8e4d3932d2e4592b114e0f822ff030000000c00010026cdc0ac57096dc0c50001002c37fd987e17e9ff378d9db0c43ce701015a0be58f18c2abaa98fc916446af979b234c5dae6aa48a306d3f35f3b83a794e3f68794deb8b952120dfdc3d350a012d8bace2e8d2773ff64734e75277c8eeeaba28f57da8879916583018c89cf90b01c430321f3169dfe10dc5b0dc506b48244e5958968a185ea2148771e0df13cc01cbaa64f41370d7948f24b567961b0cfc2b0c558ecc4187199728cdff3f88b30295ce31ab02f855c50f8c08851856eed5258134ad52d631a8a4836fa13ef80857000000041001005cbfc4013e52830f50a4f592897e771c1b8e2ff2e26914e0bdb8bdb1dcadd3e752c7075a4e0eb386db7e25232ee73e949001e25edd0d621670edbdf1a82d77e5b129fb7a2556660aba4a04c6e894178dcab84129b539a5cd58b87ed420ed517076a5f9e152415a8c156aa93efdcb1f73b73d27fb2bd9894404ee69cb62e6b6eca5139f544fb52c53cf408373bdda341e2c5565732a2869de8bf9d722cec1c8dbed28031b233dabde1380e8f460db189fa69a018aff992812fc585392d133901339cefbccea6204877278abb7c4237c61a108f39f7e944cb2cfb3daf8f637d473fd5e7eae46ddbbc1062a892f2c6b42e5a8fb11e21fcfe8545676a015e8b302d1365ff26419143ab5093f5df4b750204dd8a2148311dcc2a92590552b396c39497ab1eaebd49cceeb9926cb8a7ed9d3d0fd900758f39d43a7f60ba134d9717ff4fd01139fb8888e6778915a8f9fa91220fa4b5abf447e6946b75a3f5505e21cf6ac6f777aa4262902ee0653613d23068e8c801322463a252e204299efd1aedfff6bda3c2a1e1a2d914e0c14368c0e3dc05a65c53a8099beee7f073d1cf1d5c33355baf21638670f6adfe605bcb1e7847386862595806aed437936cd46a3ca80a3cf13d9377db8d3a1603cc0cddfbcbf263559add70a206c05b5fd258da0969abb57e83cdaf1f55d3a9d8adcd0759ebe6d89558e9777e3d7c7c2ca5bbc4f5ed521c6b6c0c1be6f3b3078a5cff9ab73cb60734ae66344f92706b6d4e9c2e9cbc0f7e168c7c9eaa8f8cfa5509cabb906aec06211dab7eb132482ee2ef4fc3680d129960c1d0fde0bf3327c1c8cd6e22c47b19da1848241f68097bedb6f487f63d76fe0be4d9912c78eb9ebadedc8d47cff3884dc625ae4b806e6baacb72f0f100a595594db6130fac001ad4565c7d6104370004e381a3781309d7f0bfebd6303f4efea55dfeb91e7a3793984cd26b008638dec97e4a74fdd3467225eba25aa0358fa197f6877d6daf702ae2375ca11c33d38e1f60f041107fcd88fc90822b496a96439d4aefd8d36743c453870e367d4b5c710bd5c66025bd3e83474adab923d7aab958c71b2d423c1ea47abbfbb9867fd7bbbc840c05ae6813788cc37a12d3c86042e6f16d1c64880997f618cade5652c6100d407455e365ac883804893e28d7aac1ee1c02194a6d42bac785e216778657a25a7ef3cdec66049a81d317589e4fd7e1090059e977bac89d61cd02698a0b0af11f4415f75d471b34940d927350dc679ea6fc736f6b3a39f0d86373508e3e108e95cecceff74a1b70c4e7a3f395605407114eef0a3c6e9a92fd99b9d667624ee3b4415246afa2d5bd478d9d308cdfe10fd631288cd79df226e75bff749b091e57b2ca1aeb1fb09174447124779f1c3a9131e202e1f3e984ae4a4009431f25703c9ff0f2f964c24f443825462b92b070b8102d395ce12c5b3ce39315f9316b10032bb22f11cc1673b2115f16385180bcc8f95ffbd782e88e174489a175eec63bc5edc4720f2324d3596a4ef2c447f2083493caff93bbc71f8526050bd31a0fa0401ad7837046c6e97f60734ad7f3d9a2b30e668adab19f6d9ef7816dce8544471c8f7f44a97be81625ec0debaf158989117d8be2c076ea41604e6ec932ee4cd298bc526b24a1b3592ce01826db5d90c7714066ccbdaf2a61ed399255c6b8107a3e2f6972fe7245da8859e221a003ee504ac88de27ecf9b41809c241ad4f080583ec60bdf740d4609acf25a4ce085409e779568ed2a872fcb65caa0fe958bc61c4f74c3958af50db1856e361649725e14159a9eba0163ac55d7811a9056a1cb9f4a265aa2372027ae711895fdb63eb10ca809a32f8cc13c3155e97df0326c351edc39f9910c4750618ab7c6b4eae07519d910dd9d457676e936e07885700f9473041a6a3b1540fa5a56c000be3fbab4b909073604d5ac556b643b6c2cc157cb955f470a6c3942d517fa6261a44196f5973e0dfc9ba93185701c4eb6ec41f1eb998661e1e1d62623628974c79ce20a890ec0b4be6bb591f47e10a2c22eae61a54311e04434b913a3b4f3b050eae4069ff1833e8942eaa93ae34c555c4babab0edf7f9eee754fc5dacfe59e2ea77ba1682f0f2b496b4aae3746d20065badb1e95cf34466258d464a2a0905d6e9483f5dfdd3d8e53cdd1f98f90bf2f180c8dabc131c866ecd559b449699d651e4b2d2692db758b5ed779c5225e85cd081a88bf5d18cf72149e4f4d52a085c71de58f4e96c640ce3cdb94f5dbfebbcab109d41060b1a9ca03c70217c5bb216c36941820804c833153b71c419c274df9d609ef9acac7e4bb3647c0ec10078cb341948e5204948eaf32e1ff21d0fc5c7403e78307c2bb84f2800bcede04deea6b417b24440a203d4151859dad35a8888e80aaa6e1bac929a8382ea27c7b73de93ed9a2278046841787b1ef6488132ac852e2f60285dac70f27332cec2cf60df4a30fb612524205d0b71aefc2a074b1e44575185b883f0eb51967e1d0df76426fa3741087be6070fab031ff7fed68fea22a3255c94700e0c96f1424017d407ea9140b8106c0c0c0a56595ba4e4f5d9f5c18ff34bad8ed191716ac2d4cfcecf40e019f89fc95dc4ae286f3f257f18c87b36c5b361556ad64b1453c7c092b7515ce1d0fa8c3224864c4884153aae6dad3c4bfc8d35d3cfca72edd38ae733f00d4fd3e79c38a0a772c187eab3090d2d65f0faa37400c360e0ce78404f294f935ba42338fed808119bcc529fc57235c74bcf52e0b17ac8b71e3aa78c76c687f79c68993cb0556baac3d05fad1ddb07e7dfaf4ab0bee1fe1d53af5be4b461cb607b951e296fb665cf8bba7d9e2c644442dbbf862682fd5cceba924eed57d51f8c80bfd5d1396c1eb744a599cd4c00017c1806e928e5a2bdbef7f753dfcc33abb3da303b0d973bec85f34c95e9ebfb7afb105d46dcec632f4b8b9af8db99217fb4db682468fba4a3dc9e0cdaeca5711c0690dfb69af5072588821b107133a3c82fa925d9db49a941329864aee225b15033667064fe5ea64d63fcfd392dedc974180b125a8719b3d8af3545d1b55d40099285da57ee605b85b966e4e62639f05bbdb33d0ed032c29799b1af0b53d545054e4f26652d0d0f38b9cb65d02991ed47e0e8a7f5e6f8e20b154a4f8e5e98c852bf45864e932c5b10238f8f06977df9eb1f6492f0df4f00f6829c02e23de3d632c7ccffa905ac777911447e3a895cfa79133d46f0f15ac6f77cfbfbf3c48af50ac8151f4080882b26e7d0fcedc87fc88b855aabf4734b6da72600707272c604c4ee605f6e5a7dbf899906f5cfc8a8bebaebca6a9e424e01975f98871ca7c7b328bad32fcf75eea428a4b7ef9358f9a368702d8b06f7a360ed3c982d2e2079327a4809dbd90f27ee295f4f3f65f1223d85681df7b12d0ecab2597e434694c2d2bf4e0dcc924dd2c742ba40a6a0a49a1d1ed8d365f4408e39a95a679f54254ba9192428e9f2b241982d7dd4c602c31477fc669b30f76fb93f33bf0603e9e554404ae52d3494732cdcb1c59828131935dcb86fff296ddadbdcf282f51769c9908b2741006f4664d00261d7511453316723699e7be038a7dda49904eda70e0ffb92b1b4d28027b27c237e05b7a3787a8b12fca720ae4bf0d5f3c5eac820a9fb9377b06b24956ca355397b0ad55c6526d4817540738e78de00d38f15538483ec2ced01969b5091213f9ad041e1e774647ce74fb97aa8f0f8e20d5b7d5a41acef590b2f808706a3fcaa612fe523ec0cea6414f6448844d9604b14741c9bd51941ecad38a5b564d4ad903e063de4772edfb632979ab622258df28693d0b72b935615b623afa88a00e957a3b23b65780097c903c8b25a02b54c6b82dac5d283a8388464ab52e7003f560606a320ac3f31d7aec85855f777bbbe37058be71b69ed70594f6f3e3a4717de2651966977db4d93c9fc38ea8e1f3f7937779c23865c6838766c61b8b4d11d35b7166e647acdc0afed4373aa5cd87720a47738b85535f21132edc2322d7f41785bf6275569dec817f58e9724fe1564aba44bcc171db78a48fd174932402c94255589f4d3838e0dd0e696003edd8c41ebe83717dc4de5bbff5987af54c8bb39891408e53c6a381a1cb7e4807a2c8b89ff5a51872065965ec2ff28f36693f6af572fc4bd8b025badb1f0a789030053a722bf378daec4f11ee692eefd6aba75a814322b2b4bb04a748d098e36413abf81a45a44d05a6893a889ca435bd28e2301ed3a94d219f53874da7609ccc95aa82d4e10b8502173f2d3f4aa6e16661289c59e8579bfcc9dbc0e779d681842a43e879617dfbc0df8cbf0894cd32051d470d1811154f570f9892f8ca072d30cf9bc30c674eac5647854a314e0382890dee14ba3fd564cc0e0785f37fdfb4db15b9b5a1d554e791c6cc39868a32cdf9784448a44ae16231d3b60f8e17c66b5c52278d461d9ee9ee27a919e0963a84ae2bf054ece0f564ccf7fc6503702462ed00314bc0f7ce9e3bd6d0433bd94685fb50f892edf28d55c5c7ccacd3354647976f51cc4b03aaeda010f9647ca9ef23e14539174e6cd8f796f8639658bddd2987803bb7e8a218d98759d6d29dd98290ebd57deac2c157a2a0446657e1caec087d42767834d01aeb16dff0e8a5177aeaf822e2f45cd7c26f6349892c28a3731f8cc884817b815295a66f82112143db117b0dca517ef49ca1b21760953b99d15957a6489cd4d03ec2ad7f4a1c1a3f15bc5ba0d290236cd181b71a3aa2c51ed488e20189aaf82a9894d583acde8a8775d3978086379807eebb7f0e7aa676254dc075db6c3cdb1cc3a49b979a3a97f5dee1f6a963fbe8b78385309a04b318b4ce75297bb3635e335481e920561d79324d4785c5f549d07f5a43f4d8c252c293c2b9d5dca7424d32ae4ec7a140713ba5aada6b9a389321a3a3f726d9f1d672e509f311ba0a58d6d2dd55bc7553238cf137d3761334d34928306ca02bdb789e1c218a33b48d1ce067dacaa8faa95287d4592372bcac6ceb311bf29b3c99cb08af8f0b1afe5d541f4f4f9c5bb35a7896569249ca332306c49e340651ab17cbe1ba2640242605e5972242a2473b52e832dfce8e8239d6676f7d1d5f61010697c37bdce2520523a6722ff1d498f64779ed6bff3aea0a9de39250c5955db14394576108f9fddb69ff981502ae9a0ccd833a435853ddbde8844df16c1ab3342992059e220eb1926c6f623664daccb5e536021b37588318906da33497208ff1a54a9d59e6295d3e7a961e2567eb0ac11248dcf560bc3119254c8d2f94e0217eb0cf880210062c92277fb0c08c921fd0f2d16dac6ab71e020ef639cc36a94db8db5794b05325d3a75ff4cb17c76b42716e1651e4a11dda2c467b0f6dbd9f9275a67d88ce1bf192c489f76f951fbb0395a01575f7d370505416acc0f847e694be49b33574801aca05ea0ba8dd78bb60277eb5a4644a1216a211c8a7efc4e2e6ae9334b21fe84cd0f9b20b378a68343f51e9acae3d65d50534fa7f7d349e551d2223701d608b8c036e8c1964e4e56c04e0c265d733738407c82ce7f335b7b4c6faa1091c0c9daff92659bd558bb3199afd5044d21a5b7eaf832390dc34b71cf40758ab55d6a4195a0cc288973bc86da33ccf30d2122c7ea9e376129e0de1e7f98568886e2ab6d5979e55016851d33078bbb848c467e407af8f8d0f373446bd2d24830b863c219433d2656d2a8d4d20caa4d65489e1f8d8eac9f03074255bbc4404c431aa139e76f9816e94aebebb8441d2e65c010280170001008d4695f46c13fb7febe42a5aacec7e9e4e035b004b000100f62dfed93434d94918e73c9f1cd1c6ee7ec6a4bff13081b96ddc90011a080c425b087d659e3c527c0471d81df15c3d4880d363891acfcdd1fa09789bb9c6afaa55bf267550b79800a80001001ffd7398ab0caec40935d7fef019e3d4e9eb9a1fe9d08ec93a72eb151ba09513bfaefdad84d32a95c0ce0850123c81451754108e23f7f054d85dd0261ee7d02792db0c2a5913e20f28a1bc7bf3c708a3ccc67e93938023a2f3d56b8664a14ebde6e77695991cfff0459b0e1372125a8627bd94a4acc33f08a1c2aedd116fee73ae6f0b561765600f56dc11657d564da1260bd0d0901fcefcc3439fdd02f2a16fe43338d52c000100a5ad1688c6d9c0663709e63951e5b9b4479bbc363f7686f8931b9e8cf3a54bfb458b8a5553f101732000028008000180fffffffe08000180ffffffff0900020073797a32000000000c00054000000000000000003c1202802f000100d12d47ca745baa321d2d30544c5e95d150096a108a3bbcd555b3ce18beac834d96f3d2376b199cdcc553a3004700010051248302e17e53a8ca5f24257336ac9ea6a2e114fcb0115439bdc9d507e14da75a055f13f286fad644e056837695d125af697678baed3e782ea7ee0584b4e620d7416500200002800900020073797a310000000008000180ffffffff08000340000000049200010078fe1d37c40bebe6debbcbdce1686ee520364d96731798bb3a65d6c83ae865a7c2813db1e5d2d19a934c16e2fa6adc4ca67b7306d4123f928bc9587fd07de48fbd68cba6b889904e87fd059feadc4b19a1ce8d1972621dca6430bb91aa89a0783d10e8c1a2a3740525e913d414d9f481d78de7611a0e4e9b28d03f753df87335de67f677493b88feb1a216f8e8d600001800028008000340000000020900020073797a3200000000041001008199a557656a9822759c592d9d0ef0734e50f8a03a7100c9ed24f4e0f1b3866da5ce9e0a20a14a040c1cde469c596aba104a895f4848b678ea1abc09a61ac7a5cfd4efeaf944526dab2d4dca409b11d5046d59fae6a1c3243314904e3aea08329c930547c81c9da19fd9b2b7d3f489aa82497074e89188140bb91dd7b9e778204d4c5ed4056597071d4bc458e52b20ba09ab87a62e1b54473d21e4e5812e06393863d6e8e3449e1344dc0c36dfddefad08d56f7afc191564112cf77554bf394964f466c43ceb80a8398d6eb82c3adfe64f4adefb12456790422ffcd6458d11afc8d290dc8566da2a633b03d391dbefb216f9c293e44eca0bf3f7b81f775c378679a00b4ed25e536e752750412af118dfd82f337a4174b4ab3928021280c9e01dba18c5544b6d8f2ef942715276c3038fd7b658dac7f6f6fed324db8bc9eaef5e8c48b6a2fc240d091c9245230ef35d18ca52d7d0684cec1dcccf52c101ec3ab878e58155aaf8f6fde2fdea972f87916338fca7f8cdc2f2e281f65c284da4193914f8c12a612709b6bbfabfa28b9f085062b3727891b241bc05d54fdf24a3db7d85df9a381579f198b16c74fec621ef8d1426170f765b43bc4a09e8f81cbe99bb8ae93dde5f1d5062fa84448f308e2410129eddcc6bfe6dbd5a1e603f52bf87f5c84ab5ba47b8c0da9716413c68d156692f9950756b42cea6d11bc4932218d8f55200d60dac851c58256659d6eadc8df3172429acc60f6f3b2f17cbc54650da2bb4ed0927fc18029c0d533750ada99a1f93f81038892ad485a6427ef95027661988c08d87d574fbcc6b0f192a3967409294bb889f20373d26dac3aa48a8049cdfb270a93c3b016f62b926fcf0cff15f88087186bcc7aac2e422d6dedc4ab6f43732d606c89918c7feff5f3cf982b75e2a839d580a73179ff4d1770465bc5345d725519d6cbce420ece953a08f7b3579dfeaded980dad99e25ad42baaee8ce538b20196ee02b14fce395fdc1bbeca6691b05fb5e266fe7315c1c185bfd77a8af725d7173e23103068a091f77456b737a90a04ff0e3d59c00fefc7bfcc36a6f0b8fcc058233ba0a551383de51a47112c6e1cac17ad227c2ea2d851cdbad952326f1e77ee8659747b8a8c99ed0f70026362a7692e81b6c63a844cc0a297ddebe5962f223d4959f645538c1a91610d43fda7c124a5371d59f80efc3242f918671edba32a0095afd74a5b34d2a04d53ac0e4750ee6eaeab1f0ada88bbc387cbab00f1aa0cec5d22a57d9bc279328549f4e46cbee8bb0cebe8f169a23daeb06e47215eb723940542f8121bb87179a1358196c0f29fc2206b8a901edbc3c14a27cb5edf2c46c348379d1d6802398daea357a328b87c7113ba21ef67dd9f2260e5f05df7d13c726bf4d799eec57dbbae79c7ff91225d0e9049473bf0b6059fe9be946f0ff6f3a88065dc735b26a707ac2e459fc1fb6e415f88ffdc69f1c6bd66e630acd51cb089fd9ef7725e4b1c9ac0c3cba343890c44a5364040412c729dd23b6871bff742b4d30d42d3e405a0e46924e342889fc439840d76e0b2653863d3828ad342c7ce85800f7f1f8a5551cfb196d136405de5c4ccf6a6cb0d5ca19ef4b2615ec9862180de703b38cbbfbc30ce52554d0a213b1064ffcfedd7ffea58c787c0567ce8c7b128542b95b82a93c04256e2404aaa6fbd8618b6ca7fb7f32604317f5f91f80d3395e08270bbb13b82de393dc3df6634b29fc2e3bb5f956017425a029b264628e8faa546a1df5dd16eba8c6be30621b6bd199d7ed6e70645b40763be2561e63c33ca5e9b560a95e01e879d06225dbde49bb63dffbede2f4251f629138e51c3924c4410d8be05c9ddd26c214cc25d24c292f0fc121d341fd0dc624b5ec2d92a903a77b576b8f0e323e6e48963017bc4f650f23ccd42b3bbc57d1b1015ac4f58e7e76524a2d818e04a52bae4aef8fffeef6ba7fc2e11f7dc231ca913d93054c83c7c2e316221479739b10f0715d3f622b4b337a4bacf759c52540eaa47eb7c2c5e747a5b352379e2815b661b857827919e0ece725c2a91fa7d8cd8a965cdf374ab056d6d53120f52684089a03fc6a08056bbdea4eb5d097774b34e794a2f6dec4281d535307f7dc8c7e561473e6f5a0ef125c4d3a6b0441cfc81dcf1bdcaaa39c5cc0001af9a9f587ff6f9990a7f1801a86c9f54feaa21ce572a3652ebe54ea4713cc3534b67c107bce1054dcc3c36ce44b60675f0309ba4ec3ec86c8f34a399972e97d88600e2a1cb7f563a3aefe526292083cee1677ef6730d9588e873087f6d76b6cea018696ab3619b60bfe797adaa477065011cd9ef9db138eb918405a088dd0aaf7e7c6d0476f3d074b71cc9511cd1a26e71b34dba351bec7778d5cb48e787b07a889ec52670bb78f1fcd07b3055e281f13bf788a24654ddf0fed83fe6171e1e3d91e68fe3ca2f23b9efb61bd93967fc0438506ea0e16d02eaff094cd201352c19ddb70cb5a8431593c6444098fcb771a513087f68219f7d21adab5821b01989f0795edae7dd3ee8bf41f87519e75bd4b6dc2f52928e842868f89c6725353e4d11c5aa6b6d4125637416cb5b735700ffb70eaafd212eff4b07e8f2725fb74f6b4d17df8e6d03a6bb344f85666a56b0cc06af7d172865d2e3045facd62169e38f1f14ebfd6f150aaaabab4620ed0b23b4b68d8e47bbccb98abeef01ab39f9fe58491316d6a7c209d275adfea8d84379c92cbcb28c3de0e93f3f478037599b8497192762a661a129a54f78e49ab199d9b48dcd3c4a8a938bdb8eae3c296317cb1724c954d7d304f1498ce9fed71f51cf0a3c4f89c2b3007332fcfa447e584557a96e258ff7a851f06428bef52bf19538d9d6e953435f19b6ed6d8f3260af1d7702b6c89cfb00b387baf299c53ce6308e9be62b1b594874b5e84e7d357d101f44b927c8db81bad30824683fa91ccdd113e3287edf21e0208faebda374a79e053c4630368c73c5168046797742f173857c13020d6bec8afed09878fef9cf2c2656c26ba14ed5971f5f6bed7377be7e8df9387dc946ba54995b5d9680f9eaa219ce77002e4e95f4acc20756fb15dffffff0745879bebbc2d69a6651ba51884006db425f2d9f5457ad37237a2f3cb6608a1f4388809669197f36a29dc28153f83850a8649636a70dfc3eec8b6635e9d3aa98201841a34475843decdb00ffaf5ffc5c6e78b8bc9e39b6e0e7fa19b3958b39f7c62b11734a2cb44e67dcfe8a3e038955b36275ae79b41a82b8da3dfa72c6919f684eae513f41659178a9dad9ab53f44ecc2dccbaff1377986fd7f4991ea6881b58e188378c6317e5e323617c7b1df2fd3db0df8b94ca23362364f1f41da45586d15938a5e4a56483a1e414cf74a18d1f6c9c60e843c9c9d79fea616403a6880b1d9e9af3d1541b47c86489eaacf3bcdb1b0e2834a3fb79fcdf6451dc7d41b3197575bb2b6fb4f3e7d9e0597d75873f5b4d9c38081bcf6991ceb5e710cbdef0c2e1f1dc44c7ca2a903b8326f56e1054193e68648df58e2429d25dd3e36e5f1bfd0725e2ede263b786fdcb8d117fd3c202d1433f184b067f66b39ac9b9d7e2d9b5792b2b44ea7f22e6103f7a411d311fc110ed9db7e4eb56699dd0c1894bd7ed3dd3709eb0390d3fe6115716675d9a81b8c4319386343442af2e62a8a1f8fd130e7b0ba79f6e0f86aa856a2c72e163fe21797e618fdfee637c0ea2188d7e0056dcd4170412eaae8110a3a29762932b1b584da9f633a6a83d1f864ba951a5a53028f597a7ca20c87fb2261d1fee8422fb3122d67a1caea45c4faff80d96a87e079ff389dd5a24d48b18ba72e8f97a728df949ac022ee086353a5141334ae10af3426d4af824931aa0020abdafa64ce225b33e8330a1dbd729967dbf0ad573fc199c9707af2ed28ee981b06347ce95882d92fd357478d28f35beede8e15d016fd4466b5af1faeb1190e5c86dec5209dece1c14a6ca8f9c97a646603f7c30b1a7505349a173f6d16411f8f750621581842885a269a745ce254c2c61879cf03b0822a1c105d4d7fbc8722f8a2f624801e559817733b835c914e07e94af1db1fe1b5bc44c9af1abac942ccb48fd2c5690f7560a3f49c58dd6f52139fad19d1a2934ca83a6fc0b25751c49b5c9611554b5a9e3fc46c242a6dda850ef9a2aa63e850c3e4422bb1df68fb68a4f63017478b4ab6b4550d3057214480aae8dac66f69dc0096f528251f6d45509e71e7600a7fc7e1a6feede234bee5cf24fec7c21b35cc4ed3351c9770205e71ef1faf799a7d920c7249acf3c531a4c8bb8f6024fc5105891a308a850e43dc6670faf375666d430cb21d293531dca44b35fabbf8ea820faa1b00de0eb8259b727d1c98734da5105b08ebbbe2f6985058de446db43d074ad713fbb954799b985bc39e7fe990cd40d1af3f5002e2fee7b2f25ba53e93a2adb9ac2bca278a2b4ec0b00be1ef03af31dec7ca1da52d696f30dcaac0a76782e8e35397ade09fe8b16eb32810138faa4aaed9eb54a723f69b7bb681862030e51d8a86f07fe51a0a66442e659b69d9792833db7c2943afde4e32298e18b9ee2890b783f5c64f5e0109568be41250f0a21b928470948b6089f01649032c7d7b65d2c970ff7969854046e0f185d0c5aa5d658061019dbe625b66236bee9f89e4215e0c0caae781951279565362bef0bba479e41eb5f1ad7416a7300c840e2723761d783287cdac7e6287a46be1d4b65cb9a56bdd0333e82c769734d9580c46ca8c66a9247866adcf1e86e973e579ea9e958a2306e65301e2a18ef449a12d94baa7ca843764ee6fb19418f60e793a6a5e308f8e7af797732053a5b326b402a5fa1d24361261e15d1343aa8fbf51b0e2007fc5703e7a32213d823d7335cba2e017402c75cbe949a227df7dbe745877aaa04e3ab6a2f92c0342ac596d2e78577789bb2fe477a52b44fe79211ae7b861dd23fe9ef05b78911e2cce531df538fee3f283efc3ccf33047e3b14d8c72df1481c8d603118ddd23a3d660c655da943033adfb204ac28db37c275dc40a199c06e7142fd8126219db3ea2da93233e2d292e5a98a40fda47db101bb96745a2f3e519a7eb57c4772069026a6431aba332a4f0eb290879a1fa9ba4098be7865389d2a6c35c99d8f3d06c2bde74e74278d309753ba31fa554916c6144bf08feef3c169302feb47da2619a1f4b55df4ef0ca7124ed6edaaa8f59065098bcc523cfbf274f4a0a782c22ce43d8f6649b89d42d06edea4a56d86cf7ceabbdd5dd0012b5b533ad5711dcb51bec2ba00f91701919970a4d4e08e7e16c21b62e916d097910675a26ba99f6af954a59ad6ea9fdc5a860c95f0be2f18808583107dd3d0745064c8e8d3d31c8af209a543d7f2d040df9004566e6608a020dc33eae3da4f4ba75fe09add62efcc6ecd0625b7590ed993155f50fa4e75c0728693a3fac301e08507e19d0752a28806fd23b9a0bcfb048ce70617e79b4c7c3f089ef43b144233174f84f4d51a9697b3eb9fdff6fae5375f312b7c72169a583db51023d58cb3aa536c3c419b5883d5a453ee077ebef1483fe643a091f77e704700d1882d2fa4b30c580cedd93dab8aec34232c630f19f7cdb05f1dcb1b49da5897b13f77d4d0e6e4d17a483756d5dbfbff8b14d4bca27a23f4970da78dc4941a38a9dbfb905a0e95383f53bdddd83de78e04209d44494bd7bb562784af1ac5891f35e9d58fd694f758b6048247c206bba2a95b3445072d3e8e663cfbab3fcb2f8c3c233bb3da25c85a4a194a19cef00010007abd36d12ed88c5dcbaa6a1f230cfdb7c9078a5fb0f79f3ae9442d49947950893c926560733719cbf39f71bb1b6b6ede89742905d503937828b42a5e793604f09061fb761a8a54a6e9b6cf72ebbe05bc37ac7f07bda27e69f33cbbf5e1af4ddd07c0a68ce641e5dbdc5628535555a9adf31910868170b2661e3ee076d72787cb37e9e7dd4b56cf8e50c7bb34a674bbdaeb745284f82c94e7689a76e12b45a88debfc6e277c35347a21ac1ee2c203d70554ab963b8d34c6f8ff57faadbc3d6f39e07f66a5b78706416876cdce5c878fecff71453e5cb006cf177147a9c69e9c238e1d196556375aa9efde8000900090073797a3100000000100007800b00010072656a65637400001c110280200002800900020073797a3200000000080003400000000208000180fffffffef30001009c887d6fa5e43f97581124e3d56c13435fd36a3cec4bde3d8579562005c46f84d6a01c4b2dca4e73459a0f2ca296c1aece88e818b605f4351aeca53c90a3b71f970d8d506826429df4fec194b66b557b786a6159c7911656ecb014f94670eacbcdfc3bf428985aa10eee855ae6e7359388e646d15771ef656a907a6079ca9685da29a7df905db629c1d7af12752303bda24f88ba6c4867ba6c012c383b064aebb81b0d83bf14f2b3531964fca63cdc08cfe075072d0c98296069cdb8c8f3dd6ce676f9efb8f446a9eee937bbeb2a56033ecf36301e188fa9ef6e74f059d6a8b1218e1c9ef6af61661047501faefae600041001002cffd7c8d978043e1f0ccc7edf87630ea650669dbd7bd9194134eaa63732e12ded95dc1b7717048a148682f1a24a2fa4fbb839b138a371b575509b53b362f4f7cdd91d24684f6c8f038f34bb1599df52e23d10ccae00192374364393c23bfe74396e91e58f62387384678d44f17c6c1e525b7bac7a38da40e81a48c86002a7e0c3b78010c5753f5751ddb709a86e7079dd630fdbd92e71e67637aecfeef63efd31eaef34cff7b2e2d86a3649f6a23b85ac4d4a1e337bc5e133f41730e7691e4a81fbfc0f473c42f24c2dcd2dcfafb199dc265bded20e96aad2e5e3664c507a563801bcd730a9f382d49998468f45d5eb0a98280b04a5a54bb50d4e92ea9bd4be6201095051d172ad148ea4353afb51047c40dbbc8e7f28751fb18fc787126ea8ac60d3b8cd81400d8d4705e4bd2e43da0fb8c544ea966d0eec4675661dcbcb96ba46f7d3fa1d031071d89790ccec1ad6ee254e048a295a6436c7d6003e0f18f7c962f9258fad1bfa390385180b1f8942f9c4c857bedf21d9f8a550e02627250c0281789ea9cfe98e5b40ac4c37974c0da8320c1a9deebe6393772f53777b59cfc0d8ee198e0c006f7731387db868bef292a17f8b8ca32b253b39f221fe8c3c473f357a9a677a9385f4cee0b112fca368cf5c0f524c64886e5546812750231f9ec15df0007afc2f988ae5f108a9cf5890f2585b3ce38af2293643cc8df66c30c1b1ebf0e81a41293331bde97b303944571b2dbbdae740735a9d12a3894521c86443ff3c5e71bcb5b33fe3f59d8a3d836343ec41196ca9883d8bf08b6fc1f28ade06e9fdc58a92321c757dc0cd2bf246d8a9f1d7eb17480daae11dd98f0c7fd047d6c5ed277c8e687a710246b687a21ebe472f00b7a169c75c2e23aabc4bec4c77d7d6df406ec26a36607a97f32b55cc21c43b32b1421a845fdff7945faf2b8f1ae7c65674690a7dc1f2c83345ed57cd3b0cd1a59c1aa83074a5bbc4fbb9b7dcf76023870eedc416b08cc97de39e6bab8ea3bbe1f5d341ba7ba03c9740b4badc671f506dd4c78bbcda4c0c502a96c09dfc02d138ca2eece2a5d039b5e0ffe8cd897ae28c2b34956ccb936c8dc32f32f2dc0ffb0a2464e0225c2748edd0e44f83c653173c03162a32c0886a407338f7baa48b9edd0f6d08668898234a42ed0593bb6400c472c3602c5cd724371ab596de95772ff5016a30dde72ac40fab68ffb1a9d9b34228bc8af621398553148a5e844c87b1827ca6a503872c00c9cdc9f54acb1e1be7ce39e17655a4340867eb8fc75b309d1ac9d6dcd0577cd6e1b5bff6eb8667bc0f2dce462bf6377687604bc9027d3f35cae19ec46fb489c9c87154054f969e06f7354a35a26a782ad4cf1a42f9d6bc297b45ee0f9e0e55dda9a40bc477ae0f1b5a8bc4bcd015bc4c89ced800c785992b6a0bc285ef50517b60c7a5ef905ed5f0eac7d72f5b59d609b76e48bdda602bfa6d18ce5fbba804858d8c506c7a32128995729ef766162b08f900cd87b75323626a88689e9987070992909757957c017c9e580b9ca1f16d8a2cf31146958614c03da7fcb58962a0a4b12e86e6578f8168180f4293630ea5143f40e4ac57ccd6958d296930e59334dd0e983653c3c74bc410f4385c59436b229d540a4c598eb860345478c11f02452fa4c95a756ecd452d62a55c09f946d43da30ca706cf95783ea72776dcf00c13110694df1b11d8432c5d4770073fe0b6cf7f501373c496c69fbe989f1192d18e23e61fbc66bad1ac9b6aea085945fe89edd1d4f9d8e53be941cc9ca6481bb00d50ac38f9671aae4befa0d4163f47e11884c04d1f722b9d2f7a8d056f08a400159b04702525b53b83b2085bdde50f487182692cf7fbfb1deef47e68b458730653c349adbaaaeed6a3903631142479e594573328503454984d3a46cd44ee42712b236a2bdbdfcf1068a0eb713d69801dce2d67e16079c3678b8b8c7cf065f08a5793e4248f6873abe41399a4549bf16dfd74504790f0f84e6629d47efc9fe4f267b5648b599e08be8e7cd2f8b5a41df6267d4a5a5f380be6fd3a2fccd539f0240be4e80b0c59afa849ba6764b16cfd2a92672590f36468988ac5a903ed748f6be1809d48465e3ee3b2ae6ef77a16663706968ad2af83c1ea6fc76540c6d9b1c2d46aa291cbe55f4cf8f96f9be3d13e532695b0f702fce559e415d13e9985f4d1aae1f615536e09caa427b0d73b12731d2be96b1fb31ffb7164fff8f76a7bf365251b2675f06ea90a3948804325846e3053dd9121ae812f88020e9cf9b70375cb60f41fd918e093298838011efca048187ae291b3e9b63ffa0ad6b9bad0f81285a25cb9b74ddaabd6f120fe2b74567c1c925193b2ab46bb960d4e9c0143ed22f8768f04e89e266df9ca0581df1a9d91527c93a976d1ee251c7fcb23cfad3f07be9bd8abd140b7c88c4e154a7260384896384b24ccb86426853ed7e4d09496ff3207a1005be4b62cb45d9bb9e15f46b8fa8d7ed4a7959fecf743e603e6b99918ac67aa5fe5471d510718d16cc249c02085ff78764a979a7ad78b9f20e577d4de52642d29901313d52886415d4146d865aaa02a3109881705d06962bf4fe8cde40140120827856df1a80dcfe90150b07a7d53f7f0204dd5aa934c05e5268b41347b8000168b89c8307a78a2e3b239ffe58d5021423e4b447dc3a4153d7127a0a15db47f53b7d89ff1c3ad1232969fe04083070c88b1b348f899cb7089b283e85dd0dfdbff4d5c9a1d5f274480b126bcd2b74faab8551cf3beba3411d3c6ce5c0fbc75e7bf8555a1fe8ebd6a3d60382e5cd6eb02b90b4a041e5318db913bd851c2a0291c6fb3342b0f0a99d77b396b8504fda658e8904cdc0592de3119b68043381fb0f20a2e469d5e7b7316dfb88bd7903f29b105bf1d52044e42489e42fc3ae42b6ae88383a34643c392f203d25175fe70ba8abd1df47cac5fee2f454bb5d544462b3d737768c7fab77ed7593a654e05ea97cbe4b8ab47586070730fafda01734fe7f588bb05ac22a28dbba1c8f8ca955b1031f718876e22159049e17c372dd08f6e463695ad550e22ea54ec78839abdcc461f9e06d6d41155c2a50a9d129246669f2e81791f5d5331e24bb3ae36f118b1ad71fdadcf8b221f6ec43d38b59b8733ab6e83d035b01c46f23530cf661675899f079ba93b949b096476240d594ab4ff32a5ba07e6f6da107316060691546e55f1bdce1bfaf0c21d5936d9be268e7d7b8caa4087b6b9d6d0985f1134531295b5b25a68dc1c6bb9dd4797e58df893952c17d4824577e5df53638cbaff7a45d01c778eb43ce7cacc829a76c3986950a80512bae5a2d421300afba811a4916ecfd2c500e5081754be3d9e82be13d47efa6c95f7b02cd6fc4e7131dc365970fb8772c75e401f567f83ad42ada0199cd71dfa883ac20a2b5c97a856ee8b27559dd871ba9f50beacb3257784aaa4d546689bfdde4f462473c77c1f24aba65a4d8c10995d8f4ece4ecaf0a037c8723ff06b6d99b1c3fc877600069ac1527676379a28d754edadcf14b373c05c30a7577007732909f2be73482c57491b960dc4ee99cebb0bbb566e50df8fa580fdc88aefee254e31f10a2bb51750ea61d9e7007af945cd2544005d7a75740ae16b26e09062ce0b9d72dfbd7d1bf9764884f81ebb5469812fd1e0cd499638f72ff5c792513de5fa39e642e967f7d4655a16b02e1d6d4e4e5dfa4b327ed9b40f3c145e92e8ca8d80c4cf2e2ca676d032547d3b4aea65be231e9ab7cd7fda4b91b9d01e32945427f25a4be2e4659a4316a0467ff28f9b48d7844657b687d8bc86d89b3941fc99e303af2d17b886a76ba44fdee409234b5232c8c207f26ccc27ec93345b815cc0dcf78ee64b537b716c7d5cd8906b0a85c77ecba8dc84f5981596e4a3cfaea4082a971e8a835a2422d55d1549a92bf12ed4b948a8f894475a8219ee2633205734006ee98d3476cba31072f033acff7c08a0d3bf2f9edab6d837bfae9f119d9b022df13ba815360d97bc673f123b8df606ec6d12381b1b5219245eed6d9251696f539c26e9d8c7c324a6ac0d35fc59e7bf92d7b708013cda2a142d9c33d4d6bd9be8daf99e8202ec54a94c6e4d48b2a47e8040da2cab4b97605417c93a0a33dd7f91d5f8a0df2eb35e2eae1e73d0997765719e800f87c9ae311cde8d63dee84337a05a926ae82cd7b8e2b72ee940cbafcc6ba90494352f0d45e509270df1b9881eb8e72a79eeddeebb3d59c9c98ecb7ce433a356ce05a2d3ff1eaf2bfdf22d42277f4fb88db307e18d416c856fca244b7c79e4366e492f0e4a9a5a07b91fef938d2cb2088fcd6c5cc479a7c4958081ad67cd5dfe375b8340bc44473a63729c6ae9a15197bbb615dabd73f91124164937c4da81dfe8772ae980571897e769ac956930f65fd0ac6448aa6240f5fb3180eb382b5f577d5828a652c926a9d6c0eb480c0dc4c8c233b7532a14760783334fd002690d1ff9fbfd77605e8bb8942ed915728a1eb2baea296691d79c9cc158c6884600c0a7d86d29c5eb555da4e60621d65c5fab84c2f9efc1839776f43d91fc569185fe55dd9c66058cc71ecc8d7b29963c4c2f7932c0dba5dd7739876258db1e4642d681e1466db8394cf62ae8fb2220a3d68eef38b26b3c1715bff5aaef81c88aff039610443ae09d131a08beb0c7bd2f8028114e27d0d779efe938ecc2433be5c0f5740f81393884b10cdc2016dd42895f5c434a8bd7f4ad39a020cbce7c2231676cfa7340abaeef53589ce0d3ba51625bf90c62439c4dbfde6c6240125bda6922789e5865f3becac35066291b88b4eba615ec8cf423ccb6c5ba5956d53cf3e8dfcdf3679cea8f8be9c3161820cf52fdf4a4b6352f089433c79e9df42124e001e09c57ced63c428befc4092e13c236dce227aa7f9f304d6c986393a03fede1693317b485fed31ad6b034a9c9134f983e6c7f9cd7e088bbafd8356c143f20a8177d275c257e583bfaf541739195355aaf1c3a77610ff9cbe6e86a6afa8272879242579e7602619d58f6a222d39332b969e5926e7e3c1cf2c2554203498a609329d884bd477e3415bc8216f72aa54b61f4cdea6e63ed70f576dd7bd56aeb93c2762db52a49ec5fd6135c659d12f811a4a18120f9ad7b2139ef5bd8c766041e37cb469267569251e6e71ae5258130a5e9061b2b086bc4c2b8377288e6e7aac8ef8249a54d480f35df10feff1dccf2402595397689a97c76a70384fbe82c6258942d7ed38d2e5f1989ec4c5e8507a0b78d10f7406d04321ee6a4cce5bf3baffefa613b3aa402a8458317924239538c87faef2dfcd9e73c52fe2e4cb8b7dd19e451014c8b7898d557e9193a91ca9aee5493323530e2464ee5ea12969102cc581d7c5b70c313e48bd5e521448d50701b58cfe73dc61a9866c3e434ceebdfb4d0e9c43f683a700be542a8b9e021cf7f72209ce05952b77e2324128df509784f06c391a4ca4ecbb4d1a5aa416c0864d18d0b3799051ceeddb42876ebd2520f8d94c19ca3a518303de85bbf4d096397782dc24eb7f358e18f2669cad5d153d2e8c46b8aa9fb903a8aa5fd4669444fa8fcc5ed514ede8defd81f04e319b11ecaec4815728c0133eac9552a66fb5b20dbbbe7b3baf0268b36d1cbacd96759af9f97637b20b0899699d3f7f0e9aaf5320edac363eaa17727c7992675fc49d1ec980e8f7f70dabc216376d2ccdde8f262d0d8ac6be146a603c0a8a0698ab0b8d885ecbece5673cf8dfeb8839070dad7a0c0168e8ef95f821a43b315d9417e84d7e01400800c000440fffffffffffffffe94000280180002800900020073797a300000000008000180fffffffe2400010002e0130c25428307159c1f5a7f0b594835b36f32f4b0ddebecc5e157c00e3c84160001004948c76cd3823e3032361f0b5389976d93e70000180002800900020073797a3200000000080003400000000324000280080003400000000208000180fffffffb08000180ffffffff080003400000000204000280f8000a802800028008000180fffffffd08000180fffffffd0900020073797a320000000008000180fffffffcc9000100185a33d1d69fdd307414c48b9974eec8ff25423f8d6dd3cabc0ddd3a484cbc4345048b598bd3d104bf0912697ae018f56277be714ca7e593532a4efbfc078ca915231e6b5c89bc9b78b48cb28c6a1c654e71d52c7fe0998a1349c564f2e87d76c6801d69682d3218140c29a84e911f33f09164c9bfca52f009b35970ebd68616e75c2164f274b72787a1edf4482f591e8eb3e158290c437925f3b69b309c8b42889e10e0d60830c2e10b44324554d1c01d1df5a0f67173ee89cc681eb7967431362cb6360d000000fc120a80a8000100c7fed66a2ac6f883ac42ce06e70ef1a5b5208af3305836f87e968ecbb72fb4c1a6e4c034f74147bf9f8d25a1820b8ccb7a24ebbe28ae049d027f6911358727ff73d88a145fe75af99de66cd3d250ea3b6c2a5a7631357f36b7a72d6115b4e971350833e8dbbe34969e5ad744ce253d9f9ddad2b0e38277b9ad917a24796469bd1a0f4aabd269fb13bdb4c447340d02863b8bd10ac44352bcaf31848f61213aceae07a6f31800028008000180000000000900020073797a31000000007400010044a0a500466881ef35639768756af827f295ee21044cbfd198dd77dc1efbc90022f701a450aab61e65f53751d38d9d2d418c922fee2ef51d81ec841aafcfdf3201909ab47b35097faf4a8a9c0386a1c73eeffa6ea9325943156c078d043c476f62dfad5a7ba72dc7788c2dae3cb9cf0b910001006d3a94df6597c6f20adb3a3a09080ff3e88fa7d9296c709ca6087f6c3cdc8d15967d8aa4636b9084c1273be19977defc05a3a36a4f7d64728d87d918b9e0c635b9e8a142d9cceec0dbeb488c418a8caee2a704ce83dd12a1f872d8882982174ee1214bb0996f2882405ebc23d602ab7dcb5e77970d0fca8c6bcddb1e6580d2396031c76535cf3d6d068de4aa2d000000ff000100ccf3933ba78ab277d149bb2365d3de78f2ff0f1c021c85910efa3c92da783fb132678b26e460bbe89f6ec8246d141f4b970e4c5efc35ebbe61bf82c053f8b5e7d3dc8ece093fcb0888a781119d9afbf46671113ef17be9f6970e88228a8a824f59e52c81bbd8780bed2236f88b8803d0a84f0eba80ec1460f875ed5ce82e63ac08cdee632e10c271ae6b3f35c52af55d72bcdc2dfed05e624d1004da637fc14382280fad5f8ba9352d874e9768ef36fcda62ce13f33d44b78dda60c58769b02ae802795914625ef6d558bbaf786c0b56086c865d7cb32df9ff879c5aa2624108a5a93755955513aea65e422d06f3fc94f7cec4b6f7ed8082c48f9a000400028004100100d5b2214aca97b7ff4ede7386a024b6cb0416e18f64cb6e11a6487405bcc4e1495092949535c864e53c8204ef17bcab73c1dd236e1dcfcb61a8505bcb69e97000c82219cf507ad0a7df1527e4351d8579846cae88edea928ccf5f8bcee77b36186e7fe4b913d4e15b2360c73503284abcfa700d9272e0afaaedf807fa229c57ad2ea1f227641b5205af4f31237dbe436012530c62e7753e45d940e70ec063cfc50e4e5cbbba3734a6942d4a102c4cf5ceed88e28702f6c42f68c329889e88e2ff64f986cccdee32c1fd908f7fc86c64ef9c99ffdd67af970714e57f75dc220384329936db14b1f01fede56b103abc17bc90f5471e3d3e32a99767e4743236447fc7993ca556cf41eec37ecac8ea950500fa61f4acd778795f031c625098421d28a38c4063a6b2ac8f5c56e1e32d3e053f0573689741b393c35dd48f13b9a328784ee042a3405730fc280e862b09d6f0fee47350d6b49fe52ca2ab08bb20dda738f156b56aac53bd7105c15e9bebe998bba97c79214bed4d200d55c7525ce78905a49aded5b7e0f5cff6850654591fd2426c8f6175e8b71307ec832cbff286fd0f699afa8d73840f3a3940b2f94db1dfb8bca65ce5de45c1b7f6ed137791e8246ddadaab197f8e7ec800111238431f74f75f5c6e7329b61c956e065d7ee3f77d27614b053f132dda8d6486a15ca2dbf262e680aa3ab67831b1636f0e7bbe9947c0f1bd7c96b5a52e68a572cab2872574883755749c6bdd38f218ab814322fff764f6cfb9b05b4fe585b50c89e8ae14f64a22a313dcbe4915ed9801001839c39419eeacd2abc447a7905755a253cab191a9fb136fdd2b46796ced240a5a551e87c5b006bd1a6d6b9e330b1631a9dfd6a8ac4fd3e51a351a6464b979c71b60cc32e84e3d12afeab0d38aa31145df0f075b4be3c808fca582429d205251703dc91f9a65855fb1f0b85ef21c146862dc7700827b1723e8770611df99c50f997483c94d38a15f6fb9bfa0e517bd2316a0dba41fdde86d1dfa2f386bc1070b35d49acca2985284d38f7bbbcbe59f29db3c26588f7a6daeecb45272b3cd4c9561bf71a101b0433b6471ea1fc5dfae7f3bc7b3683449d4447f8d7ad5972ccffa693a6a25d982bd21418a9d9f3682a82b4ab086ef94fdf6ad215ff356fa6a3581660bb19929e4587e288eaf6802d303123ad4517f240e35ca0fe9f6f13ff83cc9d58a0e30584337b8c5ac6d353debb7edf5f05b1e8227a4b29492e7cba2506e67caebfcff4c388f368ccce2aac1ba9b5df55a650b385cb6d453627e73305e3225fe833880a92b256c4953d67f6baca67d5a462ec7040db55b1450d5e5019e25cf883f84aff2d83181cf3c357816a1f760fa820c3f73c9b1c3aa5d07e0ad3bdf107ffe2ae149b9bcbd24feefff2ef1c85c6454a6dd3832fac76c8aa383a84f125f1b623a36c12a75fa2271c38cacf38045e3139f2a5da70d281aa933a215b2f2251123eb21430ff4edc40d0b42d5a83e073e88af618535f0314af7a6330d3de0270e412dad50e00236c04e3980bb810b912441fe1480a98e9335a0bf60cc72e17ed0d41b1270e28bcc80b5185f97b1c2ee51fbff9767adb7d323a3e5604ee96dfb0ff4e7bf1551e0540ee3786c80aed95715dfe24721ef4c6cf5d5e1d042c3bab397b8ee7ff9e42f62999b0a0ecb850186efaf14e17bbc9a029890cd426c90b701d379cef3780acad0c980ef08f117cfceaf5fe730fec5be4bb7eaa19932906812c0c7b5f58db1dc60ad5b309184bf80be1f865975c412c2b963a6408d1f804238992e744143be92acb724e895a0bcb7743c9362bcb1d94d5e722882a325710319ba66ddec62ff067de2da4a19b9d3d609c6ecc80aff2b7c12e7f4467704ddb473dcd95451fad7b9c4c1c6b37218ad67bb643599bc28bd8eeeea12c0ed4e08166d5196e200c5c4e5f30420bf85407af11c45843c505b45260a59fa8aaf8c66ac2b29bc20d81925cff85ec1421ce3f614b7ab95e47cbc0cfe02b4013a72d6b52f3f62c6780b2b796e74faa43ee4a445d5f588e838138d2faf3f4c908c4906074fd711fee06d24b27560af06c50a2e247dacf12f98501b1dbd5f62b04b91585f7e9abaac5e34698efc4a189a946254cded5e6d26d2ee52438530c32bce61f0b6e47f41570703a0ea7e0b0c3926ab39c5fe9d7ec8f6794ef91aa6fc8d0aea33c58c40b4c0435595e25b1c9aa7a199441dd1fd9cc7a550b614c2b1dae9bbf85498e35508f0ce12c4bce9a010d7f37568cc3919c883b78d83f59f264e64495bc22b0c831d9e6b5be79db8b05fae9f6de1ce4efa80f0c140a7d2ecff9c38c2d53832a0034031a5805f5032eb17653d6057ca6eeab3d81ea50e0a571aef05f44f59c31d23f9d943345dbf42bf50ee82f6f3e147548061dbf9b4ba0ca315ba050a5686c4a6c9a4faa9f518fc2ff464f024fbc9f6a1d21096471bdb869903946613f49b1f8da1d9eeaea1fc72cb43db1ccb3f32b693799cf37f23b5faf120f96bd6250f8184175ba5ccd281a61fcbce3a99e7f23dd32e563982c03bec169cda7c933cf1c6d1164cbc6f8419c9e326ec95fb0103933b9f9cf1411b532e13073b41d329ac3092c452bd320192756f0c0b7b3fb7d55603dc6266932487754c47506412f6ab04d3473dc4fa4b15a1574a37f9ea18799f4816805b1d3434fb2bd9e251c5dee4e809605ddd243fae4fcfd9e7517ba90e3c66f0083ca5abdc621adf5edd413d0c3e4bc4082a197dc8ce18e0a2770dfcc07f815893966bf2ebad2dd211dbd0fe0a4f99ea6361a0bd9aad11c3d53f458548a30a2a06f456ee1c23552a7f147c8ba7f4205df3e9af6dead4e45b45b04a0a0853cb238556abbaa0fe26cd7d4df2816f71195af1a81ff9922af5955fde0f1cfa04096d4f6f33fc82c1f2af581841a037c94fd20fc35d35359c9b1c61e5abb7b99db800ae9cd78c41782c93727dee5b809d4ee7fdd05bd0179e46ad9b9d95a1170b9db897400f7687c2389bda6d6bf69b54985be365077ea29382866efc9ed8f448829b3eb612f365bc9ee555212dafa4ba530959d6f0008f5195d37b7b95e2b0e284d006ae933801602ab994dfa6138d634457be1a0061947d73f2d3d3460d762507ce7b95ae0e1dee1d7d2afe3a3909439d20c4ee7d09aa9c0ddc717ebc9f4d04d08aaba40973a9994a4986ab7778254be33bd08654a620083bbb68df6c46fa91a8f87c99f7bac404c4e94f95090d272c4da466bab36afd604e154f7441d4c9c3f27b35eb5dd905353fb09a6a3496e0a1cead67f8644cf8b1b5579f7d130a96d89c606856df39bbcf9f308375d947d6473f91ef5c3ed3ff0dbc07b03dbd20121316eadb7cf411ca09be3f1971c3a4229c23f95e6413911da68e07d573545e336f82ee956625426ab92f5c0301388f9fc65ecf57ad3b2cbc48e28a7a51233143e059effb9bf1432ea358d1144fa4421342a7d68e39af26ad716c3634d3977b6a913fa6bd523f87d7e1c4c457e5c9f1124a6d449276e1c3af753954771416b4d852591e7be223b104d576ef2e365da18756652d67cfe3b7c27973319b015486b48b3bec77753230093be79998aa1d78854556b0229517c089dde566615d92c98da985e03ad2ac9f182a3360f020734b2362ae56dcd5a8f78717f915f0e0ef7d39ebcbd5a2bde7816f4edc356b1b08bafeb636904918c4ca0da02ae5e0cd7fe29aa16ac5e79b17dfd226db3a55a2bf2d922b6e0892fa76863bc09f1e1e298dbea92b097268916195520f55e71f16148b27824191b2f29b5bdf06d69142afb8f22d57c70d6c2f3a7da5e9dc550869aca3cf91c856c0566b09e17451f46faaf0bc4eb0fb3f179db037e9e60c47a3a0ca32cf02ec230cc4d0e21a596833c0f5bdbe3994e5abfba56946804e5a8e76a4c3bb6e2c5bb3f46ce2b3039aa8f16bc4190e830b266cdcfb07e417ed3208114115e1e9f9e3fa0778d6c7ad7d2dbb6ddfb8939d8c13d145d0a334aea65a0f659b969b0d2aca49cfb7db563b2607a4deadbfc050f3ec59fae6485291d2617fc0685814c81d269b5cf7640789aa0a4414d861024ca7afb22941d289cfd1897a7aeadba70ee845d07f9a051440213b2aae967788f085a7a3f3efd47cbb7b70398852bf6e5f78d9716bcdde5a470867f4643220ab64c4e2aae8912c572b7e375a061cf68f3a6ce8b76aab03398a61f08c92c68abeb7e67ca3d3b4673613a0b46a65324f125871aa5aa42a2fcddd77ede2bbf8fefda252f0818932073b9b4ab66b34f9855d8598643d5936d1268f63d8d5df99d6079cc71c574ee6b010565b6bbd410f072c512ae2b5a58b21b556842367dca8bd7f7229a0a04c46ffada8724184a037d0cadd0bd0a647269453aae7fad1237c4f6fed6749452cf268df2cb21635db3c4e4716b5215429dd9d0bcb0403fd8014ee0da0030a9e118e276e437144a3ef3150e747a257d24740015b66b438ebd80cb4685194c880a22b391e3f73812c4b21e19aea9edb84799ce75b93b591611a78cff9592a4d7c2f524e4ea9233dd2106cec1f629a542cc2ad5b3af75663172785fe9131a431d052828ad55f669b452f52f31cea25ee0f9d493aa3f7b2bed293f3f0f83d61e412ec05c082dd335e0cf8cf832680e4e4a374248de64272dbf81aedecb2b44da6d06c94b3760f6cb8e13f8c3ca598641eddaebaef9284a74fdb6731cb55dd4c69f95355c30b9b62cbc707a6db8c815f4cac641d281a0710a5027a5ef50a5fc3b6cc4bb16d15a105767076e737bd9c491a3db20ea66b7ad5a481f9f54ad1523d21fd4f30c2b5f9fe0c143f96f6d80683fe1216e755d5eb712cb182a7c5ee735b739da3eb75af02c1c39d866fa8c1931bde97377e82754446175fd90ae2318ed7f8d56ac2ee782df53451c9728d981780c6a973935ad8f8b46852aa726e39c6114c7e6d94362a0b81d0de02032d0d797775b16b5896caf69b904adba6dae4a191c9e2ff72c5f61f68ec472553624f7017d250e0ca60078b4428c23e197be8ea638ecc35a17cb96479cce114117c261f9d04107b6fcd3ed800f84ba7c94bf48b1507f19115f102323811b50db64324c787a60d238223a182884487bf05a37dde72e1d6de6b59c464bd7cd9fc00bb7ba2c30010031dd8fd787ada560a4ceed484b9a06924621efcc7e692e59100219bfc35f2c78971e618391d65e9bdfc156901a6244b591695fe472df6cde85271a3f94402bbc4383f2097fc93e71ad6de9528dc600a8aa05dae285b7cf39c2851f8e7b02b21b307ceb97d31f2b566b77f2e9c211ed8389a029e4a3d575783fb59b6db1ee394bf6ff09ddf446ca9ebb66b7ea142f718dca576d63d77c7db6cbd41c5827d16437ee6ce59acb0c906bff54cbb7abe9301a32e18092bc817382f2b39dd823f8f507a90db740fc891f46713a2adcb516d579306452da47446279d9ae6351a7a24a53bccb9e8b5f10ba5a9feaf8186ab9a9213e30500d4e1953d57432c2461c21656fa6c529b3640b696c6e8b370c948946da4b794e869305c19e247f28738a3964e2314f4a3a417c1fa165d55ffe8662e451d4d7c817b05e46c8f988897c94e53896881319d0eed2f702cde5cd067b0104e6c324de0250e6d09ce52947bdf431a1218310bd884ccdc75e9e6faa43508ae7b5276bdc7b78946314b5d8f86b29a3335c08d70ee0f77eed9fe49eacc124fbb877f351ff25fa2e2f3189378ff997fd92e965e1abb1d55d7a1e64eefcf9c7b5380066d5efb4ee10292784d8d633c41680695fe07111c00028008000180ffffffff080003400000000108000340000000010c00028008000180fffffffd44000a802800028008000340000000010900020073797a3100000000080003400000000108000340000000011800028008000180fffffffd0900020073797a300000000000010080200007800e000100627974656f726465720000000c000280080001400000001108000340000000030c000780080001006669620008000340000000000900090073797a30000000000c0004400000000000000008a6000640ce1f56096231efe32b298167164a3f9a49e4609fbb6346f57839b8e2f65774e665c10bf7a6c447cc82f97e177780bc14c3fe1ae0158f4fd4785c4e44848a59c6d850bfa18520e952e136a99fe42e1d22fd54b1b41b5891036e374965c86e55998d2849233b25519b6ed2ea5f47fb8a0ab333d1fd91bb01cee97ac7b39470949b57d33373596087ebb496990bb9892d50484617bf129bec9ae215394985db13563c1d00002c000080280002802400028008000180fffffffe08000180fffffffe54000180fffffffe08000340000000010900010073797a300000000014000000110001000000000000000000010000"], 0x6430}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfcfb1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x14200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x44}}, 0x0) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) landlock_restrict_self(r4, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}]}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000200)={r9, 0x9}, 0x8) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0x25, 0x0, 0x0, 0x9, 0x7ff0bdbe, 0x0, 0x0, 0xb5, 0x0}) 11.07354ms ago: executing program 2 (id=573): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x4, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x1f) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x9) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) ioctl$EVIOCGRAB(r10, 0x40044590, &(0x7f0000000080)=0x2) write$evdev(r10, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 0s ago: executing program 3 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}, 0x1, 0x300}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) kernel console output (not intermixed with test programs): [ T5923] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 125.532444][ T30] audit: type=1326 audit(1762767960.516:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 125.566607][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 125.584294][ T5923] usbhid 1-1:0.0: can't add hid device: -71 [ 125.597690][ T5880] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 125.615520][ T5923] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 125.628628][ T30] audit: type=1326 audit(1762767960.516:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 125.651098][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.705091][ T5880] usb 4-1: Product: syz [ 125.717713][ T5880] usb 4-1: Manufacturer: syz [ 125.729547][ T5923] usb 1-1: USB disconnect, device number 2 [ 125.742982][ T5880] usb 4-1: SerialNumber: syz [ 125.753224][ T30] audit: type=1326 audit(1762767960.516:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 125.804639][ T5880] r8152-cfgselector 4-1: Unknown version 0x0000 [ 125.812352][ T5880] r8152-cfgselector 4-1: config 0 descriptor?? [ 125.818880][ T30] audit: type=1326 audit(1762767960.516:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 125.849532][ T30] audit: type=1326 audit(1762767960.516:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 126.155592][ T6435] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 126.464411][ T6435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.522292][ T6445] fuse: blksize only supported for fuseblk [ 126.534433][ T5887] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 126.574771][ T6440] bond1: (slave geneve2): making interface the new active one [ 126.592747][ T6440] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 126.617176][ T6440] syz.0.112 (6440) used greatest stack depth: 18328 bytes left [ 126.860589][ T5887] usb 2-1: not running at top speed; connect to a high speed hub [ 126.909313][ T983] net_ratelimit: 6 callbacks suppressed [ 126.909327][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.938244][ T6446] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 126.971874][ T5880] r8152-cfgselector 4-1: Unknown version 0x0000 [ 126.995331][ T5887] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.009907][ T5880] r8152-cfgselector 4-1: bad CDC descriptors [ 127.022729][ T6446] bond1 (unregistering): Released all slaves [ 127.054067][ T5887] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.40 [ 127.063270][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.092952][ T5880] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 127.194272][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.203663][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.248656][ T5887] usb 2-1: Product: Љ [ 127.259709][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.271929][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.288626][ T5887] usb 2-1: Manufacturer: à – [ 127.295487][ T5887] usb 2-1: SerialNumber: ј [ 127.304248][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.375197][ T6430] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 127.534986][ T6454] FAULT_INJECTION: forcing a failure. [ 127.534986][ T6454] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.577122][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(full) [ 127.577148][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.577167][ T6454] Call Trace: [ 127.577174][ T6454] [ 127.577182][ T6454] dump_stack_lvl+0x189/0x250 [ 127.577216][ T6454] ? __pfx____ratelimit+0x10/0x10 [ 127.577238][ T6454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.577259][ T6454] ? __pfx__printk+0x10/0x10 [ 127.577277][ T6454] ? __might_fault+0xb0/0x130 [ 127.577310][ T6454] should_fail_ex+0x414/0x560 [ 127.577339][ T6454] _copy_from_user+0x2d/0xb0 [ 127.577360][ T6454] __se_sys_splice+0x207/0x460 [ 127.577389][ T6454] ? __pfx___se_sys_splice+0x10/0x10 [ 127.577409][ T6454] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 127.577433][ T6454] ? __ia32_sys_splice+0x21/0xf0 [ 127.577453][ T6454] __do_fast_syscall_32+0xb6/0x2b0 [ 127.577477][ T6454] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.577503][ T6454] do_fast_syscall_32+0x34/0x80 [ 127.577525][ T6454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.577545][ T6454] RIP: 0023:0xf7fa5539 [ 127.577568][ T6454] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 127.577586][ T6454] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 127.577604][ T6454] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 127.577616][ T6454] RDX: 0000000000000005 RSI: 00000000800002c0 RDI: 0000000000000010 [ 127.577626][ T6454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.577636][ T6454] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 127.577646][ T6454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.577673][ T6454] [ 127.761827][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.829957][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.979033][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.105990][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.038828][ T5894] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.104371][ T6482] kvm: kvm [6479]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 129.255315][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.282318][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.300393][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.335374][ T5894] usb 4-1: SerialNumber: syz [ 129.387473][ T5894] usb 4-1: bad CDC descriptors [ 129.517738][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 129.593023][ T5923] usb 4-1: USB disconnect, device number 4 [ 129.777341][ T5887] usbhid 2-1:1.0: can't add hid device: -71 [ 129.787043][ T5887] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 129.845330][ T5887] usb 2-1: USB disconnect, device number 2 [ 129.907339][ T6491] netlink: 'syz.1.129': attribute type 7 has an invalid length. [ 129.919889][ T6491] netlink: 140 bytes leftover after parsing attributes in process `syz.1.129'. [ 130.519066][ T6507] netlink: 'syz.3.131': attribute type 21 has an invalid length. [ 130.527071][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 130.725173][ T6511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.753690][ T6506] ipip0: entered promiscuous mode [ 130.759057][ T6506] ipip0: entered allmulticast mode [ 130.837943][ T6509] syz.3.131 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 131.624323][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 131.911912][ T6528] vcan0: tx drop: invalid sa for name 0x0000100000000000 [ 132.071457][ T6531] input: syz0 as /devices/virtual/input/input5 [ 132.389255][ T5887] net_ratelimit: 151 callbacks suppressed [ 132.389273][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.637622][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.798976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.868840][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.999192][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.005572][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.433730][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.798794][ T4911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.873606][ T6554] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.909588][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.166390][ T6564] FAULT_INJECTION: forcing a failure. [ 134.166390][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 134.215941][ T6564] CPU: 1 UID: 0 PID: 6564 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(full) [ 134.215966][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.215977][ T6564] Call Trace: [ 134.215984][ T6564] [ 134.215992][ T6564] dump_stack_lvl+0x189/0x250 [ 134.216018][ T6564] ? __pfx____ratelimit+0x10/0x10 [ 134.216040][ T6564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.216062][ T6564] ? __pfx__printk+0x10/0x10 [ 134.216081][ T6564] ? __pfx___might_resched+0x10/0x10 [ 134.216100][ T6564] ? fs_reclaim_acquire+0x7d/0x100 [ 134.216130][ T6564] should_fail_ex+0x414/0x560 [ 134.216159][ T6564] should_failslab+0xa8/0x100 [ 134.216178][ T6564] __kmalloc_cache_noprof+0x6f/0x6f0 [ 134.216200][ T6564] ? netlink_lookup+0x30/0x200 [ 134.216223][ T6564] ? genl_start+0x1c9/0x6c0 [ 134.216249][ T6564] genl_start+0x1c9/0x6c0 [ 134.216268][ T6564] ? netlink_lookup+0x30/0x200 [ 134.216297][ T6564] __netlink_dump_start+0x469/0x7e0 [ 134.216329][ T6564] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 134.216354][ T6564] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 134.216383][ T6564] ? __pfx_genl_start+0x10/0x10 [ 134.216400][ T6564] ? __pfx_genl_dumpit+0x10/0x10 [ 134.216417][ T6564] ? __pfx_genl_done+0x10/0x10 [ 134.216441][ T6564] ? bpf_lsm_capable+0x9/0x20 [ 134.216459][ T6564] ? security_capable+0x7e/0x2e0 [ 134.216488][ T6564] genl_rcv_msg+0x5da/0x790 [ 134.216516][ T6564] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.216534][ T6564] ? __pfx_batadv_orig_dump+0x10/0x10 [ 134.216559][ T6564] ? __asan_memcpy+0x40/0x70 [ 134.216579][ T6564] ? __pfx_ref_tracker_free+0x10/0x10 [ 134.216603][ T6564] netlink_rcv_skb+0x208/0x470 [ 134.216624][ T6564] ? __lock_acquire+0xab9/0xd20 [ 134.216641][ T6564] ? __pfx_genl_rcv_msg+0x10/0x10 [ 134.216662][ T6564] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.216703][ T6564] ? down_read+0x1ad/0x2e0 [ 134.216722][ T6564] genl_rcv+0x28/0x40 [ 134.216738][ T6564] netlink_unicast+0x82f/0x9e0 [ 134.216769][ T6564] ? __pfx_netlink_unicast+0x10/0x10 [ 134.216800][ T6564] ? netlink_sendmsg+0x642/0xb30 [ 134.216814][ T6564] ? skb_put+0x11b/0x210 [ 134.216834][ T6564] netlink_sendmsg+0x805/0xb30 [ 134.216859][ T6564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.216878][ T6564] ? __import_iovec+0x5d4/0x7f0 [ 134.216894][ T6564] ? aa_sock_msg_perm+0xf1/0x1d0 [ 134.216919][ T6564] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.216936][ T6564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.216952][ T6564] __sock_sendmsg+0x21c/0x270 [ 134.216975][ T6564] ____sys_sendmsg+0x505/0x830 [ 134.216998][ T6564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.217030][ T6564] ___sys_sendmsg+0x21f/0x2a0 [ 134.217051][ T6564] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.217106][ T6564] ? __fget_files+0x2a/0x420 [ 134.217121][ T6564] ? __fget_files+0x3a0/0x420 [ 134.217147][ T6564] __sys_sendmsg+0x164/0x220 [ 134.217167][ T6564] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.217195][ T6564] ? __pfx_ksys_write+0x10/0x10 [ 134.217221][ T6564] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 134.217245][ T6564] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.217270][ T6564] __do_fast_syscall_32+0xb6/0x2b0 [ 134.217294][ T6564] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.217319][ T6564] do_fast_syscall_32+0x34/0x80 [ 134.217342][ T6564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.217362][ T6564] RIP: 0023:0xf7fa4539 [ 134.217378][ T6564] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 134.217391][ T6564] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 134.217409][ T6564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004340 [ 134.217421][ T6564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.217429][ T6564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.217438][ T6564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.217447][ T6564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.217471][ T6564] [ 134.241694][ T6568] kvm: kvm [6566]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 134.469553][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.631863][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.667652][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.688881][ T5923] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.707920][ T6575] tipc: Started in network mode [ 134.713648][ T6575] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 134.727446][ T6575] tipc: Enabling of bearer rejected, failed to enable media [ 134.907602][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 134.922365][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.943600][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.978712][ T5923] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 134.991023][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 135.014401][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.046211][ T5923] usb 2-1: config 0 descriptor?? [ 135.460130][ T5923] glorious 0003:258A:0033.0002: item fetching failed at offset 0/3 [ 135.472057][ T5923] glorious 0003:258A:0033.0002: probe with driver glorious failed with error -22 [ 135.762714][ T6599] netlink: 156 bytes leftover after parsing attributes in process `syz.3.159'. [ 136.038645][ T5923] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 136.212367][ T5923] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 136.235079][ T5923] usb 4-1: config 5 has no interface number 0 [ 136.251971][ T5923] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 136.338686][ T5887] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.445617][ T5923] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 136.528501][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 136.554245][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.578986][ T5923] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 136.613429][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 97, changing to 10 [ 136.667722][ T5923] usb 4-1: config 5 interface 123 has no altsetting 0 [ 136.682352][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24929, setting to 1024 [ 136.986952][ T5887] usb 5-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 136.991427][ T5923] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 137.012617][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.020910][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.029817][ T5923] usb 4-1: Product: syz [ 137.034218][ T5923] usb 4-1: Manufacturer: syz [ 137.039348][ T5923] usb 4-1: SerialNumber: syz [ 137.058441][ T5887] usb 5-1: Product: syz [ 137.067733][ T5887] usb 5-1: Manufacturer: syz [ 137.077182][ T5887] usb 5-1: SerialNumber: syz [ 137.202790][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 137.498730][ T5880] net_ratelimit: 9 callbacks suppressed [ 137.498750][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.581580][ T5887] usb 5-1: config 0 descriptor?? [ 137.594084][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.671479][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.745840][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.070066][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.078256][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.122049][ T5887] usb 5-1: USB disconnect, device number 4 [ 138.179729][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.233164][ T10] usb 2-1: USB disconnect, device number 3 [ 138.629959][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.838783][ T6632] kvm: kvm [6624]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 138.940979][ T4911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.122546][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.139316][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.160758][ T5923] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 139.256483][ T5923] usb 4-1: USB disconnect, device number 5 [ 139.329941][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 139.369592][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.431171][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.485263][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.528690][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.589208][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.622879][ T24] usb 2-1: invalid MIDI out EP 0 [ 139.677908][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.748624][ T5923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.780307][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.935913][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 140.448183][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 140.893489][ T5923] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 140.907755][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.980752][ T5923] usb 4-1: config 0 has no interface number 0 [ 141.025756][ T5923] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 141.039391][ T5923] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 141.059089][ T5923] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 141.074248][ T5923] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 141.104729][ T5923] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 141.121342][ T5923] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 141.171199][ T5923] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 141.197464][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.217650][ T5923] usb 4-1: config 0 descriptor?? [ 141.234948][ T6639] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 141.282688][ T5923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.391634][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 141.430205][ T6438] udevd[6438]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.496301][ T5923] usb 4-1: USB disconnect, device number 6 [ 141.566281][ T6652] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 141.592182][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 141.602223][ T6652] netlink: 60 bytes leftover after parsing attributes in process `syz.2.175'. [ 141.728629][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880579ac800: rx timeout, send abort [ 141.736939][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805636e800: rx timeout, send abort [ 141.745457][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880579ac800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 141.759889][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805636e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 142.155553][ T5923] usb 2-1: USB disconnect, device number 4 [ 142.397748][ T6664] FAULT_INJECTION: forcing a failure. [ 142.397748][ T6664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.474316][ T6659] bond1: option ad_user_port_key: invalid value (4095) [ 142.488011][ T6664] CPU: 0 UID: 0 PID: 6664 Comm: syz.1.178 Not tainted syzkaller #0 PREEMPT(full) [ 142.488027][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.488034][ T6664] Call Trace: [ 142.488040][ T6664] [ 142.488045][ T6664] dump_stack_lvl+0x189/0x250 [ 142.488063][ T6664] ? __pfx____ratelimit+0x10/0x10 [ 142.488076][ T6664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.488088][ T6664] ? __pfx__printk+0x10/0x10 [ 142.488097][ T6664] ? __might_fault+0xb0/0x130 [ 142.488116][ T6664] should_fail_ex+0x414/0x560 [ 142.488132][ T6664] _copy_from_iter+0x1de/0x1790 [ 142.488147][ T6664] ? rcu_is_watching+0x15/0xb0 [ 142.488160][ T6664] ? kmalloc_reserve+0xbd/0x290 [ 142.488169][ T6664] ? __pfx__copy_from_iter+0x10/0x10 [ 142.488180][ T6664] ? __build_skb_around+0x262/0x3f0 [ 142.488196][ T6664] ? netlink_sendmsg+0x642/0xb30 [ 142.488204][ T6664] ? skb_put+0x11b/0x210 [ 142.488215][ T6664] netlink_sendmsg+0x6b2/0xb30 [ 142.488229][ T6664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.488239][ T6664] ? __import_iovec+0x5d4/0x7f0 [ 142.488249][ T6664] ? aa_sock_msg_perm+0xf1/0x1d0 [ 142.488263][ T6664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.488273][ T6664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.488282][ T6664] __sock_sendmsg+0x21c/0x270 [ 142.488296][ T6664] ____sys_sendmsg+0x505/0x830 [ 142.488309][ T6664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.488326][ T6664] ___sys_sendmsg+0x21f/0x2a0 [ 142.488337][ T6664] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.488364][ T6664] ? __fget_files+0x2a/0x420 [ 142.488373][ T6664] ? __fget_files+0x3a0/0x420 [ 142.488386][ T6664] __sys_sendmsg+0x164/0x220 [ 142.488397][ T6664] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.488411][ T6664] ? __pfx_ksys_write+0x10/0x10 [ 142.488426][ T6664] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 142.488440][ T6664] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.488454][ T6664] __do_fast_syscall_32+0xb6/0x2b0 [ 142.488467][ T6664] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.488481][ T6664] do_fast_syscall_32+0x34/0x80 [ 142.488494][ T6664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.488505][ T6664] RIP: 0023:0xf7f84539 [ 142.488520][ T6664] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 142.488533][ T6664] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 142.488549][ T6664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 142.488558][ T6664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.488567][ T6664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.488575][ T6664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.488583][ T6664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.488608][ T6664] [ 142.890305][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.966205][ T24] net_ratelimit: 12 callbacks suppressed [ 142.966218][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.050327][ T6659] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 143.120803][ T6659] bond1 (unregistering): Released all slaves [ 143.218935][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.227773][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.349268][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 143.567178][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.625519][ T6667] netlink: 'syz.1.179': attribute type 8 has an invalid length. [ 143.848644][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.889147][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.899469][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 3328, setting to 64 [ 143.937828][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.994251][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.083896][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.092462][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 144.181957][ T6671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.200764][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.214379][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.234445][ T43] usb 4-1: Product: syz [ 144.251986][ T43] usb 4-1: Manufacturer: syz [ 144.275746][ T43] usb 4-1: SerialNumber: syz [ 144.275906][ T6675] input: syz0 as /devices/virtual/input/input7 [ 144.540465][ T6671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.598736][ T43] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 144.679597][ T6659] loop2: detected capacity change from 0 to 7 [ 144.716289][ T43] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 144.728635][ T43] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 145.003590][ T43] usb 4-1: USB disconnect, device number 7 [ 145.728990][ T6689] loop4: detected capacity change from 0 to 7 [ 145.808284][ T6689] Dev loop4: unable to read RDB block 7 [ 145.893190][ T6689] loop4: unable to read partition table [ 145.971533][ T6689] loop4: partition table beyond EOD, truncated [ 146.008838][ T6689] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 146.060937][ T5198] Dev loop4: unable to read RDB block 7 [ 146.066561][ T5198] loop4: unable to read partition table [ 146.119884][ T5198] loop4: partition table beyond EOD, truncated [ 146.140466][ T6694] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 146.265049][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.188'. [ 146.320013][ T6694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.404856][ T6701] bond1: (slave geneve2): making interface the new active one [ 146.446850][ T6701] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 146.557409][ T6715] netlink: 'syz.3.193': attribute type 20 has an invalid length. [ 146.676468][ T6717] binder: 6709:6717 ioctl c018620c 800002c0 returned -1 [ 147.803337][ T6729] netlink: 576 bytes leftover after parsing attributes in process `syz.3.196'. [ 147.817648][ T6729] Invalid logical block size (218103808) [ 148.124644][ T6005] net_ratelimit: 145 callbacks suppressed [ 148.124660][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.238921][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.278685][ T6738] kvm: kvm [6733]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 148.281764][ T6736] netlink: 164 bytes leftover after parsing attributes in process `syz.3.199'. [ 148.308977][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.359284][ T6736] FAULT_INJECTION: forcing a failure. [ 148.359284][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 148.380676][ T6736] CPU: 1 UID: 0 PID: 6736 Comm: syz.3.199 Not tainted syzkaller #0 PREEMPT(full) [ 148.380702][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.380712][ T6736] Call Trace: [ 148.380720][ T6736] [ 148.380728][ T6736] dump_stack_lvl+0x189/0x250 [ 148.380749][ T6736] ? __pfx____ratelimit+0x10/0x10 [ 148.380761][ T6736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.380773][ T6736] ? __pfx__printk+0x10/0x10 [ 148.380787][ T6736] ? __pfx___might_resched+0x10/0x10 [ 148.380797][ T6736] ? fs_reclaim_acquire+0x7d/0x100 [ 148.380814][ T6736] should_fail_ex+0x414/0x560 [ 148.380832][ T6736] should_failslab+0xa8/0x100 [ 148.380843][ T6736] __kmalloc_noprof+0xcb/0x7f0 [ 148.380855][ T6736] ? ieee80211_assign_beacon+0x7a9/0x1cd0 [ 148.380869][ T6736] ieee80211_assign_beacon+0x7a9/0x1cd0 [ 148.380891][ T6736] ieee80211_start_ap+0x1b49/0x31b0 [ 148.380915][ T6736] ? __pfx_ieee80211_start_ap+0x10/0x10 [ 148.380932][ T6736] ? __pfx_nl80211_calculate_ap_params+0x10/0x10 [ 148.380949][ T6736] rdev_start_ap+0xff/0x270 [ 148.380963][ T6736] nl80211_start_ap+0x1e29/0x25c0 [ 148.380975][ T6736] ? __pfx___mutex_lock+0x10/0x10 [ 148.380997][ T6736] ? __pfx_nl80211_start_ap+0x10/0x10 [ 148.381009][ T6736] ? nl80211_pre_doit+0x4f1/0x930 [ 148.381023][ T6736] genl_family_rcv_msg_doit+0x215/0x300 [ 148.381039][ T6736] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 148.381057][ T6736] ? bpf_lsm_capable+0x9/0x20 [ 148.381068][ T6736] ? security_capable+0x7e/0x2e0 [ 148.381085][ T6736] genl_rcv_msg+0x60e/0x790 [ 148.381100][ T6736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.381110][ T6736] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 148.381119][ T6736] ? __pfx_nl80211_start_ap+0x10/0x10 [ 148.381128][ T6736] ? __pfx_nl80211_post_doit+0x10/0x10 [ 148.381139][ T6736] ? __asan_memcpy+0x40/0x70 [ 148.381151][ T6736] ? __pfx_ref_tracker_free+0x10/0x10 [ 148.381164][ T6736] netlink_rcv_skb+0x208/0x470 [ 148.381177][ T6736] ? __lock_acquire+0xab9/0xd20 [ 148.381187][ T6736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.381198][ T6736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.381224][ T6736] ? down_read+0x1ad/0x2e0 [ 148.381234][ T6736] genl_rcv+0x28/0x40 [ 148.381244][ T6736] netlink_unicast+0x82f/0x9e0 [ 148.381279][ T6736] ? __pfx_netlink_unicast+0x10/0x10 [ 148.381293][ T6736] ? netlink_sendmsg+0x642/0xb30 [ 148.381301][ T6736] ? skb_put+0x11b/0x210 [ 148.381312][ T6736] netlink_sendmsg+0x805/0xb30 [ 148.381327][ T6736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.381337][ T6736] ? __import_iovec+0x5d4/0x7f0 [ 148.381348][ T6736] ? aa_sock_msg_perm+0xf1/0x1d0 [ 148.381362][ T6736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.381371][ T6736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.381381][ T6736] __sock_sendmsg+0x21c/0x270 [ 148.381395][ T6736] ____sys_sendmsg+0x505/0x830 [ 148.381408][ T6736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.381427][ T6736] ___sys_sendmsg+0x21f/0x2a0 [ 148.381438][ T6736] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.381488][ T6736] ? __fget_files+0x2a/0x420 [ 148.381497][ T6736] ? __fget_files+0x3a0/0x420 [ 148.381514][ T6736] __sys_sendmsg+0x164/0x220 [ 148.381525][ T6736] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.381540][ T6736] ? __pfx_ksys_write+0x10/0x10 [ 148.381555][ T6736] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 148.381568][ T6736] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.381582][ T6736] __do_fast_syscall_32+0xb6/0x2b0 [ 148.381599][ T6736] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.381613][ T6736] do_fast_syscall_32+0x34/0x80 [ 148.381626][ T6736] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.381637][ T6736] RIP: 0023:0xf70ad539 [ 148.381648][ T6736] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 148.381658][ T6736] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 148.381669][ T6736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 148.381676][ T6736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.381681][ T6736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.381686][ T6736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 148.381692][ T6736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.381707][ T6736] [ 148.868768][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.261360][ T6757] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 149.270126][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.278235][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.323171][ T6760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.208'. [ 149.349018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.357795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.691459][ T5107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.848931][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.908822][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.988658][ T43] usb 3-1: device descriptor read/64, error -71 [ 150.261199][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.404817][ T43] usb 3-1: device descriptor read/64, error -71 [ 150.492757][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.219'. [ 150.509238][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.219'. [ 150.519178][ T43] usb usb3-port1: attempt power cycle [ 150.546891][ T6789] bridge0: entered promiscuous mode [ 150.564913][ T6789] ip6gretap0: entered promiscuous mode [ 150.698822][ T5894] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.869486][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 150.903223][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.914526][ T43] usb 3-1: device descriptor read/8, error -71 [ 150.916381][ T6799] pim6reg: entered allmulticast mode [ 150.920923][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.955739][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.980526][ T5894] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.011209][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.023091][ T5894] usb 1-1: config 0 descriptor?? [ 151.160323][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 151.193683][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 151.199322][ T43] usb 3-1: device descriptor read/8, error -71 [ 151.301352][ T6812] delete_channel: no stack [ 151.319501][ T43] usb usb3-port1: unable to enumerate USB device [ 151.619403][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.633897][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.689961][ T6812] veth1_to_team: entered promiscuous mode [ 151.696816][ T6812] bridge0: entered promiscuous mode [ 151.715164][ T6812] debugfs: 'hsr1' already exists in 'hsr' [ 152.070912][ T6812] Cannot create hsr debugfs directory [ 152.076710][ T6812] hsr1: entered allmulticast mode [ 152.100467][ T6812] veth1_to_team: entered allmulticast mode [ 152.155472][ T6812] bridge0: entered allmulticast mode [ 152.287809][ T5894] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 152.339041][ T5894] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 152.639959][ T5894] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 153.139178][ T43] net_ratelimit: 17 callbacks suppressed [ 153.139197][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.380604][ T5894] usb 4-1: Invalid ep0 maxpacket: 32 [ 153.438947][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.538642][ T5894] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 153.689848][ T5894] usb 4-1: Invalid ep0 maxpacket: 32 [ 153.696174][ T5894] usb usb4-port1: attempt power cycle [ 153.709788][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.821113][ T6846] trusted_key: syz.0.236 sent an empty control message without MSG_MORE. [ 153.869245][ T6846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.908953][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.970732][ T6846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.037277][ T6846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.070078][ T6846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.070568][ T5894] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 154.079246][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.093531][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.237'. [ 154.118061][ T6851] vlan2: entered promiscuous mode [ 154.123177][ T6851] bridge0: entered promiscuous mode [ 154.130161][ T5894] usb 4-1: Invalid ep0 maxpacket: 32 [ 154.144146][ T6846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.181220][ T6854] tipc: Cannot configure node identity twice [ 154.268916][ T5894] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 154.309303][ T5894] usb 4-1: Invalid ep0 maxpacket: 32 [ 154.317512][ T5894] usb usb4-port1: unable to enumerate USB device [ 154.403421][ T43] usb 1-1: USB disconnect, device number 3 [ 154.996690][ T6864] bridge1: entered promiscuous mode [ 156.982121][ T6899] netlink: 164 bytes leftover after parsing attributes in process `syz.4.250'. [ 157.169000][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 157.978732][ T5894] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.978744][ T983] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 158.199053][ T983] usb 3-1: Using ep0 maxpacket: 32 [ 158.220623][ T6005] net_ratelimit: 308 callbacks suppressed [ 158.220642][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.243443][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.252978][ T983] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 158.275146][ T983] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 158.288917][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 158.325976][ T983] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 158.393436][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.415904][ T983] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 158.450796][ T6913] openvswitch: netlink: IP tunnel dst address not specified [ 158.472388][ T983] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.493211][ T6914] openvswitch: netlink: IP tunnel dst address not specified [ 158.513711][ T983] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 158.533238][ T983] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 158.564408][ T983] usb 3-1: Product: syz [ 158.576623][ T983] usb 3-1: Manufacturer: syz [ 158.591239][ T983] usb 3-1: SerialNumber: syz [ 158.606750][ T983] usb 3-1: config 0 descriptor?? [ 158.620107][ T983] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 158.650960][ T983] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 158.829088][ T5887] usb 3-1: USB disconnect, device number 12 [ 158.829120][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 158.843858][ T5887] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 158.880154][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.909182][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.953748][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.018747][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.046131][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.063223][ T6925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.202241][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 159.264236][ T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.273489][ T24] usb 2-1: config 179 has no interface number 0 [ 159.284595][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 159.295830][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 159.307293][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.318734][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 159.351229][ T24] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.384923][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.395979][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.426938][ T6920] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 159.654742][ T6920] netlink: 324 bytes leftover after parsing attributes in process `syz.1.256'. [ 159.974605][ T6935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.256'. [ 160.010113][ T6935] netlink: 44 bytes leftover after parsing attributes in process `syz.1.256'. [ 160.119041][ T5923] usb 2-1: USB disconnect, device number 5 [ 160.119148][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 160.133958][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 160.416219][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.437990][ T5894] usb 5-1: no configurations [ 160.445691][ T5894] usb 5-1: can't read configurations, error -22 [ 160.896600][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.058599][ T24] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 161.069264][ T5894] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.076911][ T24] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 161.116998][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.136618][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.269346][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 161.277567][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 161.299427][ T5894] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 161.315071][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.347877][ T6960] fuse: Bad value for 'group_id' [ 161.352964][ T6960] fuse: Bad value for 'group_id' [ 161.374596][ T6960] kernel profiling enabled (shift: 6) [ 161.618689][ T6950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.666205][ T6950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.696704][ T6950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.710584][ T6950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.736567][ T6950] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.264'. [ 162.119202][ T5894] usb 5-1: Product: syz [ 162.123417][ T5894] usb 5-1: Manufacturer: syz [ 162.138979][ T5894] usb 5-1: SerialNumber: syz [ 162.177107][ T5894] usb 5-1: config 0 descriptor?? [ 162.226297][ T5894] hub 5-1:0.0: bad descriptor, ignoring hub [ 162.294877][ T5894] hub 5-1:0.0: probe with driver hub failed with error -5 [ 162.322988][ T5894] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 162.360985][ T5894] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 162.379095][ T5894] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 162.836449][ T6966] kvm: kvm [6962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 163.268905][ T5880] net_ratelimit: 166 callbacks suppressed [ 163.268918][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.529644][ T24] usb 1-1: USB disconnect, device number 4 [ 163.669608][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.678077][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.834695][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.043194][ T24] usb 5-1: USB disconnect, device number 6 [ 164.053821][ T5107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.073018][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.148813][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.240394][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.316139][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.403593][ T6991] kvm: kvm [6988]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 164.908337][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.927644][ T6997] netlink: 68 bytes leftover after parsing attributes in process `syz.2.277'. [ 165.314600][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 165.543230][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 165.543248][ T30] audit: type=1326 audit(1762768000.926:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 165.688905][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 165.778826][ T30] audit: type=1326 audit(1762768000.936:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 165.821513][ T7005] sctp: [Deprecated]: syz.4.279 (pid 7005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.821513][ T7005] Use struct sctp_sack_info instead [ 165.863942][ T7007] sctp: [Deprecated]: syz.4.279 (pid 7007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.863942][ T7007] Use struct sctp_sack_info instead [ 165.930580][ T30] audit: type=1326 audit(1762768000.936:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 166.000378][ T30] audit: type=1326 audit(1762768000.936:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 166.286807][ T30] audit: type=1326 audit(1762768000.936:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 166.286853][ T30] audit: type=1326 audit(1762768000.936:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 166.286889][ T30] audit: type=1326 audit(1762768000.936:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 166.286926][ T30] audit: type=1326 audit(1762768000.936:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 166.286962][ T30] audit: type=1326 audit(1762768000.936:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 166.286998][ T30] audit: type=1326 audit(1762768000.936:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 166.654817][ T43] IPVS: starting estimator thread 0... [ 166.726958][ T7034] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 166.791411][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'. [ 166.799069][ T7030] IPVS: using max 35 ests per chain, 84000 per kthread [ 166.883629][ T7028] fuse: Bad value for 'user_id' [ 166.906345][ T7028] fuse: Bad value for 'user_id' [ 168.048631][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 168.146723][ T7048] FAULT_INJECTION: forcing a failure. [ 168.146723][ T7048] name failslab, interval 1, probability 0, space 0, times 0 [ 168.159766][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.1.288 Not tainted syzkaller #0 PREEMPT(full) [ 168.159789][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.159799][ T7048] Call Trace: [ 168.159806][ T7048] [ 168.159814][ T7048] dump_stack_lvl+0x189/0x250 [ 168.159840][ T7048] ? __pfx____ratelimit+0x10/0x10 [ 168.159862][ T7048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.159884][ T7048] ? __pfx__printk+0x10/0x10 [ 168.159907][ T7048] ? __pfx___might_resched+0x10/0x10 [ 168.159930][ T7048] should_fail_ex+0x414/0x560 [ 168.159959][ T7048] should_failslab+0xa8/0x100 [ 168.159979][ T7048] __kmalloc_noprof+0xcb/0x7f0 [ 168.160000][ T7048] ? kfree+0x4d/0x6d0 [ 168.160017][ T7048] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 168.160048][ T7048] tomoyo_realpath_from_path+0xe3/0x5d0 [ 168.160074][ T7048] ? tomoyo_domain+0xd9/0x130 [ 168.160098][ T7048] tomoyo_path_perm+0x213/0x4b0 [ 168.160119][ T7048] ? tomoyo_path_perm+0x1e3/0x4b0 [ 168.160139][ T7048] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 168.160207][ T7048] security_inode_getattr+0x12f/0x330 [ 168.160227][ T7048] vfs_statx+0x18e/0x550 [ 168.160251][ T7048] ? __pfx_vfs_statx+0x10/0x10 [ 168.160271][ T7048] ? getname_flags+0x1e5/0x540 [ 168.160291][ T7048] __ia32_compat_sys_newlstat+0xf5/0x180 [ 168.160311][ T7048] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.160336][ T7048] ? __pfx___ia32_compat_sys_newlstat+0x10/0x10 [ 168.160377][ T7048] ? __pfx_ksys_write+0x10/0x10 [ 168.160396][ T7048] ? arch_syscall_is_vdso_sigreturn+0x175/0x1a0 [ 168.160415][ T7048] ? syscall_user_dispatch+0x4f/0x90 [ 168.160436][ T7048] __do_fast_syscall_32+0xb6/0x2b0 [ 168.160459][ T7048] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.160479][ T7048] do_fast_syscall_32+0x34/0x80 [ 168.160492][ T7048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.160503][ T7048] RIP: 0023:0xf7f84539 [ 168.160513][ T7048] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 168.160520][ T7048] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 000000000000006b [ 168.160531][ T7048] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000080000340 [ 168.160543][ T7048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.160549][ T7048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.160554][ T7048] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 168.160559][ T7048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.160573][ T7048] [ 168.160579][ T7048] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.420496][ T24] usb 4-1: device descriptor read/64, error -71 [ 168.428725][ T43] net_ratelimit: 15 callbacks suppressed [ 168.428742][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.458205][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.690968][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 168.828654][ T24] usb 4-1: device descriptor read/64, error -71 [ 168.834940][ T7059] kvm: kvm [7056]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 169.021334][ T24] usb usb4-port1: attempt power cycle [ 169.034121][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.239379][ T6019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.350897][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.359075][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 169.389254][ T24] usb 4-1: device descriptor read/8, error -71 [ 169.509136][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.517447][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.785183][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 169.839353][ T24] usb 4-1: device descriptor read/8, error -71 [ 170.083819][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.163624][ T7077] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 170.163715][ T7075] pim6reg: entered allmulticast mode [ 170.209567][ T24] usb usb4-port1: unable to enumerate USB device [ 170.308816][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.390589][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.520454][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 171.882425][ T7099] kvm: kvm [7098]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 172.131441][ T7106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.154083][ T7106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.466466][ T7108] netlink: 32 bytes leftover after parsing attributes in process `syz.1.303'. [ 173.441234][ T5934] net_ratelimit: 163 callbacks suppressed [ 173.441254][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.456260][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.542516][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.755397][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.763900][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.787871][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.783329][ T4911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.794567][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.939208][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.947730][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.043614][ T7121] binder: 7115:7121 ioctl c0306201 0 returned -14 [ 175.544562][ T7147] netlink: 48 bytes leftover after parsing attributes in process `syz.0.314'. [ 175.992157][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 176.013395][ T7155] bridge0: entered promiscuous mode [ 176.019249][ T7155] macvtap1: entered promiscuous mode [ 176.028808][ T7155] macvtap1: entered allmulticast mode [ 176.034252][ T7155] bridge0: entered allmulticast mode [ 176.399696][ T7155] bridge0: left allmulticast mode [ 176.406041][ T7155] bridge0: left promiscuous mode [ 176.684833][ T7168] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.811926][ T7164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.893511][ T7163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.126709][ T5880] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 178.462389][ T6002] net_ratelimit: 146 callbacks suppressed [ 178.462404][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.564306][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.614919][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 178.690789][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'. [ 178.816248][ T5880] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 178.835986][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.872013][ T5880] usb 4-1: Product: syz [ 178.899304][ T5880] usb 4-1: Manufacturer: syz [ 178.926964][ T5880] usb 4-1: SerialNumber: syz [ 178.958753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.967574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.989125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.998033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.007051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.015419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.023810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.032154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.096371][ T5880] usb 4-1: config 0 descriptor?? [ 179.134584][ T5880] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 179.153115][ T5880] usb 4-1: setting power ON [ 179.216676][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 179.396190][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.501691][ T5880] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 179.561534][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 179.628216][ T5880] usb 4-1: media controller created [ 179.748729][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 179.760475][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.835781][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.867931][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.896363][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.976143][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.008097][ T5880] usb 4-1: selecting invalid altsetting 6 [ 180.008308][ T24] usb 3-1: config 0 descriptor?? [ 180.055739][ T5880] usb 4-1: digital interface selection failed (-22) [ 180.080286][ T24] hub 3-1:0.0: USB hub found [ 180.093104][ T5880] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 180.139617][ T5880] usb 4-1: setting power OFF [ 180.156695][ T5880] dvb-usb: bulk message failed: -22 (2/0) [ 180.175891][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 180.203619][ T5880] (NULL device *): no alternate interface [ 180.837162][ T5880] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 182.304240][ T5887] usb 4-1: USB disconnect, device number 16 [ 183.716070][ T43] net_ratelimit: 37 callbacks suppressed [ 183.716085][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.750100][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.761425][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.780981][ T24] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 183.938137][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 183.953892][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.052216][ T24] usb 3-1: USB disconnect, device number 13 [ 184.225997][ T7245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.264041][ T7245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.293975][ T7245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.306171][ T7245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.365390][ T7245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.374208][ T7245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.382641][ T7245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.218398][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a054000: rx timeout, send abort [ 185.226767][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801a057c00: rx timeout, send abort [ 185.238737][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801a054000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.253148][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801a057c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 185.462869][ T7262] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.238107][ T7283] syzkaller0: entered promiscuous mode [ 187.243930][ T7283] syzkaller0: entered allmulticast mode [ 187.324942][ T7290] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[7290] [ 187.407818][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 188.408810][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 188.425696][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 188.448652][ T5894] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 188.470326][ T5894] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 188.488879][ T7298] tipc: Started in network mode [ 188.729323][ T5923] net_ratelimit: 157 callbacks suppressed [ 188.729342][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.775426][ T7298] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 188.850949][ T5894] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 189.028900][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.114462][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.140020][ T7298] tipc: Enabled bearer , priority 10 [ 189.167564][ T5894] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 189.185603][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.201767][ T5894] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 189.211103][ T5894] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 189.228684][ T5894] usb 2-1: Product: syz [ 189.248696][ T5894] usb 2-1: Manufacturer: syz [ 189.270780][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.287854][ T5894] usb 2-1: SerialNumber: syz [ 189.361124][ T5894] usb 2-1: config 0 descriptor?? [ 189.394331][ T5894] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 189.429947][ T5894] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 189.746460][ T5894] usb 2-1: USB disconnect, device number 6 [ 189.755932][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 189.845623][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055481400: rx timeout, send abort [ 189.853948][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880696e4000: rx timeout, send abort [ 189.862344][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055481400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 189.876748][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880696e4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 189.994954][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.230234][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.260003][ T5934] tipc: Node number set to 4269801494 [ 190.489062][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.559530][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.590271][ T5894] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 190.869588][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.018684][ T5934] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 191.120955][ T7314] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 191.130776][ T7314] macvtap1: entered allmulticast mode [ 191.136200][ T7314] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 191.204847][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.220125][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 191.384264][ T5934] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 191.392453][ T5934] usb 4-1: can't read configurations, error -61 [ 191.538659][ T5934] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 191.738089][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 191.787987][ T5934] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 191.797539][ T5934] usb 4-1: can't read configurations, error -61 [ 191.803115][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805626c400: rx timeout, send abort [ 191.812284][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805626c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 191.826692][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805626f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 191.897940][ T5934] usb usb4-port1: attempt power cycle [ 192.154787][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 192.378728][ T5934] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 192.407755][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 192.415264][ T5934] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 192.422970][ T5934] usb 4-1: can't read configurations, error -61 [ 192.438966][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 192.466838][ T43] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 192.481069][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.509498][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.522133][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.568760][ T43] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 192.578638][ T5934] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 192.597701][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.619576][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 192.627112][ T43] usb 3-1: config 0 descriptor?? [ 192.640839][ T43] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 192.674871][ T5934] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 192.694451][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 192.767319][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 192.781819][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 192.793522][ T5934] usb 4-1: can't read configurations, error -61 [ 192.812500][ T5934] usb usb4-port1: unable to enumerate USB device [ 192.828909][ T5967] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 192.848836][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 192.867542][ T7325] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 192.925772][ T43] usb 3-1: USB disconnect, device number 14 [ 192.932463][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 193.558630][ T5934] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 193.663914][ T7349] kvm: kvm [7345]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 193.740361][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 193.750675][ T5934] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.762734][ T5934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 193.776432][ T5934] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 193.796745][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.822975][ T5934] usb 2-1: config 0 descriptor?? [ 193.902837][ T7353] bond0: entered allmulticast mode [ 194.081730][ T5880] net_ratelimit: 930 callbacks suppressed [ 194.081749][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.110437][ T7353] bond_slave_0: entered allmulticast mode [ 194.116725][ T7353] bond_slave_1: entered allmulticast mode [ 194.339801][ T24] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 194.372652][ T5934] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 194.394039][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.403255][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.410096][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.424794][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.436958][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.470590][ T5934] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 194.496839][ T5934] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 194.510771][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.538955][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.539617][ T5934] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 194.560093][ T7341] : renamed from bond0 (while UP) [ 194.573165][ T24] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 194.588245][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.600876][ T5934] logitech-djreceiver 0003:046D:C71B.0004: unknown main item tag 0x0 [ 194.608636][ T24] usb 4-1: Product: syz [ 194.633675][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.648641][ T24] usb 4-1: Manufacturer: syz [ 194.669475][ T24] usb 4-1: SerialNumber: syz [ 194.725262][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.770700][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.810578][ T7341] vxlan0: entered promiscuous mode [ 194.816102][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.824360][ T7341] vxlan0: entered allmulticast mode [ 194.986721][ T4911] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.001473][ T4911] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.026152][ T4911] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.038233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.150559][ T24] usb 4-1: config 0 descriptor?? [ 195.296932][ T5934] usb 2-1: USB disconnect, device number 7 [ 195.308260][ T4911] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.459566][ T7371] FAULT_INJECTION: forcing a failure. [ 196.459566][ T7371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.481933][ T7358] Bluetooth: hci1: command 0x0406 tx timeout [ 196.481965][ T7357] Bluetooth: hci0: command 0x0406 tx timeout [ 196.488681][ T7358] Bluetooth: hci2: command 0x0406 tx timeout [ 196.488729][ T7358] Bluetooth: hci4: command 0x0406 tx timeout [ 196.488761][ T7358] Bluetooth: hci3: command 0x0406 tx timeout [ 196.527577][ T7371] CPU: 1 UID: 0 PID: 7371 Comm: syz.1.377 Not tainted syzkaller #0 PREEMPT(full) [ 196.527601][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.527611][ T7371] Call Trace: [ 196.527618][ T7371] [ 196.527626][ T7371] dump_stack_lvl+0x189/0x250 [ 196.527667][ T7371] ? __pfx____ratelimit+0x10/0x10 [ 196.527689][ T7371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.527711][ T7371] ? __pfx__printk+0x10/0x10 [ 196.527728][ T7371] ? __might_fault+0xb0/0x130 [ 196.527760][ T7371] should_fail_ex+0x414/0x560 [ 196.527789][ T7371] _copy_from_iter+0x1de/0x1790 [ 196.527814][ T7371] ? rcu_is_watching+0x15/0xb0 [ 196.527836][ T7371] ? kmalloc_reserve+0xbd/0x290 [ 196.527853][ T7371] ? __pfx__copy_from_iter+0x10/0x10 [ 196.527873][ T7371] ? __build_skb_around+0x262/0x3f0 [ 196.527899][ T7371] ? netlink_sendmsg+0x642/0xb30 [ 196.527915][ T7371] ? skb_put+0x11b/0x210 [ 196.527935][ T7371] netlink_sendmsg+0x6b2/0xb30 [ 196.527961][ T7371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.527980][ T7371] ? __import_iovec+0x5d4/0x7f0 [ 196.527997][ T7371] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.528022][ T7371] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.528039][ T7371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.528057][ T7371] __sock_sendmsg+0x21c/0x270 [ 196.528082][ T7371] ____sys_sendmsg+0x505/0x830 [ 196.528106][ T7371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.528139][ T7371] ___sys_sendmsg+0x21f/0x2a0 [ 196.528159][ T7371] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.528210][ T7371] ? __fget_files+0x2a/0x420 [ 196.528226][ T7371] ? __fget_files+0x3a0/0x420 [ 196.528251][ T7371] __sys_sendmsg+0x164/0x220 [ 196.528271][ T7371] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.528297][ T7371] ? __pfx_ksys_write+0x10/0x10 [ 196.528323][ T7371] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 196.528347][ T7371] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.528372][ T7371] __do_fast_syscall_32+0xb6/0x2b0 [ 196.528401][ T7371] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.528426][ T7371] do_fast_syscall_32+0x34/0x80 [ 196.528449][ T7371] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.528469][ T7371] RIP: 0023:0xf7f84539 [ 196.528494][ T7371] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 196.528506][ T7371] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 196.528528][ T7371] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 196.528539][ T7371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.528549][ T7371] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.528558][ T7371] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 196.528568][ T7371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.528595][ T7371] [ 196.922853][ T5880] usb 4-1: USB disconnect, device number 21 [ 197.458634][ T5880] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 197.512018][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021bbe400: rx timeout, send abort [ 197.520856][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021bbe800: rx timeout, send abort [ 197.529357][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888021bbe400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 197.541862][ T7387] kvm: kvm [7384]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 197.544273][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888021bbe800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 197.689628][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 197.741516][ T5880] usb 4-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 197.763673][ T5880] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.803797][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.818187][ T5880] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 197.885880][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.916696][ T5880] usb 4-1: config 0 descriptor?? [ 197.970918][ T7391] dlm: no locking on control device [ 197.981284][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 198.155195][ T5880] usb 4-1: string descriptor 0 read error: -71 [ 198.167718][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 198.358921][ T5183] bcm5974 4-1:0.0: could not read from device [ 198.405956][ T5880] usb 4-1: USB disconnect, device number 22 [ 198.779922][ T7413] veth1_macvtap: left promiscuous mode [ 198.786739][ T7413] macsec0: entered promiscuous mode [ 198.804032][ T7413] veth1_macvtap: entered promiscuous mode [ 198.810619][ T7413] macsec0: left promiscuous mode [ 198.820234][ T7413] netlink: 36 bytes leftover after parsing attributes in process `syz.0.391'. [ 199.170012][ T43] net_ratelimit: 18 callbacks suppressed [ 199.170030][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.520172][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.528819][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.555130][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.565077][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.601178][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.765023][ T7424] kvm: kvm [7421]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 199.832029][ T7428] Cannot find add_set index 0 as target [ 199.916620][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.996537][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.159238][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.219799][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.102304][ T7451] netlink: 56 bytes leftover after parsing attributes in process `syz.2.402'. [ 201.112632][ T7451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.402'. [ 201.568627][ T5907] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 201.928763][ T5907] usb 3-1: device descriptor read/64, error -71 [ 202.168607][ T5907] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 202.298719][ T5907] usb 3-1: device descriptor read/64, error -71 [ 202.419059][ T5907] usb usb3-port1: attempt power cycle [ 202.789759][ T5907] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 202.809523][ T5907] usb 3-1: device descriptor read/8, error -71 [ 202.888653][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.056116][ T7482] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 203.098712][ T5907] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 203.128835][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 203.138718][ T43] usb 2-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 203.158128][ T5907] usb 3-1: device descriptor read/8, error -71 [ 203.165117][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.321730][ T5907] usb usb3-port1: unable to enumerate USB device [ 203.336692][ T43] usb 2-1: Product: syz [ 203.344358][ T43] usb 2-1: Manufacturer: syz [ 203.351725][ T43] usb 2-1: SerialNumber: syz [ 203.363472][ T43] usb 2-1: config 0 descriptor?? [ 203.765100][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 203.794440][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 203.818287][ T7440] team0: entered promiscuous mode [ 203.823606][ T7440] team_slave_0: entered promiscuous mode [ 203.830446][ T7440] team_slave_1: entered promiscuous mode [ 203.837764][ T7440] : entered promiscuous mode [ 203.843988][ T7440] bond_slave_0: entered promiscuous mode [ 203.850831][ T7440] bond_slave_1: entered promiscuous mode [ 203.858277][ T7440] debugfs: 'hsr1' already exists in 'hsr' [ 203.864564][ T7440] Cannot create hsr debugfs directory [ 203.872080][ T7440] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 204.179149][ T24] net_ratelimit: 19 callbacks suppressed [ 204.179168][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.221267][ T5934] usb 2-1: USB disconnect, device number 8 [ 204.540345][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.565806][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.630011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.639925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.679085][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.687366][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.158786][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.213529][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.270090][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.366612][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 205.538632][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 205.548749][ T43] usb 5-1: config 1 interface 0 has no altsetting 0 [ 205.566591][ T43] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 205.695507][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.709138][ T43] usb 5-1: Product: syz [ 205.713887][ T43] usb 5-1: Manufacturer: syz [ 205.719263][ T43] usb 5-1: SerialNumber: syz [ 206.143916][ T7514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 206.163854][ T7514] kvm: pic: level sensitive irq not supported [ 206.164017][ T7514] kvm: pic: non byte read [ 206.175813][ T7514] kvm: pic: level sensitive irq not supported [ 206.175888][ T7514] kvm: pic: non byte read [ 206.218205][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.374879][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.284328][ T43] usblp0: Disabling reads from problematic bidirectional printer [ 207.313610][ T7543] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 207.396462][ T7543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.417034][ T7546] bond0: (slave geneve2): making interface the new active one [ 207.426566][ T7546] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 207.439669][ T43] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 1 proto 1 vid 0x03F0 pid 0x0004 [ 207.585642][ T7553] FAULT_INJECTION: forcing a failure. [ 207.585642][ T7553] name failslab, interval 1, probability 0, space 0, times 0 [ 207.641647][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.1.432 Not tainted syzkaller #0 PREEMPT(full) [ 207.641668][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.641678][ T7553] Call Trace: [ 207.641684][ T7553] [ 207.641693][ T7553] dump_stack_lvl+0x189/0x250 [ 207.641719][ T7553] ? __pfx____ratelimit+0x10/0x10 [ 207.641740][ T7553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.641761][ T7553] ? __pfx__printk+0x10/0x10 [ 207.641784][ T7553] ? __pfx___might_resched+0x10/0x10 [ 207.641807][ T7553] should_fail_ex+0x414/0x560 [ 207.641834][ T7553] should_failslab+0xa8/0x100 [ 207.641851][ T7553] __kmalloc_noprof+0xcb/0x7f0 [ 207.641873][ T7553] ? iter_file_splice_write+0x1c6/0x10e0 [ 207.641902][ T7553] iter_file_splice_write+0x1c6/0x10e0 [ 207.641912][ T43] usb 5-1: USB disconnect, device number 7 [ 207.641947][ T7553] ? __pfx_iter_file_splice_write+0x10/0x10 [ 207.641969][ T7553] ? rcu_read_lock_any_held+0xb3/0x120 [ 207.641987][ T7553] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 207.642017][ T7553] ? __pfx_iter_file_splice_write+0x10/0x10 [ 207.642040][ T7553] do_splice+0xc79/0x1660 [ 207.642069][ T7553] ? __might_fault+0xb0/0x130 [ 207.642097][ T7553] ? __pfx_do_splice+0x10/0x10 [ 207.642122][ T7553] __se_sys_splice+0x2e1/0x460 [ 207.642144][ T7553] ? __pfx___se_sys_splice+0x10/0x10 [ 207.642163][ T7553] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 207.642188][ T7553] ? __ia32_sys_splice+0x21/0xf0 [ 207.642207][ T7553] __do_fast_syscall_32+0xb6/0x2b0 [ 207.642231][ T7553] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.642256][ T7553] do_fast_syscall_32+0x34/0x80 [ 207.642279][ T7553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.642299][ T7553] RIP: 0023:0xf7f84539 [ 207.642313][ T7553] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 207.642328][ T7553] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 207.642346][ T7553] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 207.642357][ T7553] RDX: 0000000000000005 RSI: 00000000800002c0 RDI: 0000000000000010 [ 207.642368][ T7553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.642377][ T7553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.642387][ T7553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.642414][ T7553] [ 207.979631][ T43] usblp0: removed [ 208.089348][ T983] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 208.117789][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 208.250349][ T983] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 208.282466][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.667645][ T983] usb 4-1: config 0 descriptor?? [ 208.825190][ T983] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 208.932314][ T983] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 209.110924][ T983] usb 4-1: USB disconnect, device number 23 [ 209.270311][ T5923] net_ratelimit: 28 callbacks suppressed [ 209.270330][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.341793][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 209.358975][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.367463][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.759809][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.769695][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.780603][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.802001][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.911438][ T7590] netlink: 'syz.3.444': attribute type 7 has an invalid length. [ 209.940107][ T7590] netlink: 140 bytes leftover after parsing attributes in process `syz.3.444'. [ 210.015390][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.175982][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.376420][ T7605] netlink: 'syz.1.448': attribute type 21 has an invalid length. [ 210.400309][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.568668][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 210.568685][ T30] audit: type=1326 audit(1762768045.556:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 210.629854][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 210.701301][ T30] audit: type=1326 audit(1762768045.556:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 210.726616][ T30] audit: type=1326 audit(1762768045.716:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 210.748943][ T30] audit: type=1326 audit(1762768045.716:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 210.775598][ T30] audit: type=1326 audit(1762768045.726:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 210.798645][ T30] audit: type=1326 audit(1762768045.726:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 210.820750][ T30] audit: type=1326 audit(1762768045.726:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 210.887626][ T30] audit: type=1326 audit(1762768045.726:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 210.991357][ T30] audit: type=1326 audit(1762768045.726:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 211.023379][ T30] audit: type=1326 audit(1762768045.736:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7598 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 212.034980][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.043799][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.286955][ T7631] input: syz0 as /devices/virtual/input/input12 [ 212.709353][ T24] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 213.015833][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 213.053161][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.101076][ T24] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.40 [ 213.118612][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.165941][ T24] usb 3-1: Product: Љ [ 213.177602][ T24] usb 3-1: Manufacturer: à – [ 213.199745][ T24] usb 3-1: SerialNumber: ј [ 213.234369][ T7626] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 213.419085][ T7636] input: syz0 as /devices/virtual/input/input13 [ 213.620434][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 214.156592][ T983] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 214.322129][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.333495][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.437690][ T983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.457887][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.460'. [ 214.498671][ T983] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.522036][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.721759][ T24] usbhid 3-1:1.0: can't add hid device: -71 [ 214.746097][ T24] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 214.797142][ T983] usb 2-1: config 0 descriptor?? [ 214.798082][ T5840] net_ratelimit: 20 callbacks suppressed [ 214.798096][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.816488][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.871285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.883320][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.891498][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.915345][ T24] usb 3-1: USB disconnect, device number 19 [ 214.924060][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.938893][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.955288][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.965683][ T6019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.317799][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.522279][ T7663] tipc: Started in network mode [ 215.527190][ T7663] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 215.560462][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 215.570337][ T7663] tipc: Enabling of bearer rejected, failed to enable media [ 215.754880][ T7669] warning: `syz.1.458' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 215.820073][ T983] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 216.493047][ C0] plantronics 0003:047F:FFFF.0005: hid_field_extract() called with n (132) > 32! (syz-executor) [ 216.539632][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.465'. [ 217.307044][ T5880] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 219.350172][ T7700] Cannot find set identified by id 4 to match [ 219.372692][ T7699] loop2: detected capacity change from 0 to 7 [ 219.396336][ T7699] loop2: [POWERTEC] p1 p2 p3 p4 [ 219.414020][ T7699] loop2: p2 start 4294967287 is beyond EOD, truncated [ 219.430988][ T7699] loop2: p3 start 1932423285 is beyond EOD, truncated [ 219.450555][ T7699] loop2: p4 size 1986356271 extends beyond EOD, truncated [ 219.502749][ T7708] kvm: kvm [7697]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 219.551109][ T7711] netlink: 156 bytes leftover after parsing attributes in process `syz.1.475'. [ 219.721930][ T7714] fuse: Bad value for 'fd' [ 219.747953][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880554b9000: rx timeout, send abort [ 219.756253][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880554b9800: rx timeout, send abort [ 219.768613][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880554b9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 219.783001][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880554b9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 219.820796][ T6002] net_ratelimit: 17 callbacks suppressed [ 219.820812][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.963885][ T7714] ipip0: entered promiscuous mode [ 219.969119][ T7714] ipip0: entered allmulticast mode [ 220.053047][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 220.067789][ T983] usb 2-1: USB disconnect, device number 9 [ 220.072810][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 220.154080][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 220.179000][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.228653][ T983] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 220.237270][ T875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.419810][ T983] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 220.438627][ T983] usb 2-1: config 5 has no interface number 0 [ 220.448670][ T983] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 220.476480][ T983] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 220.491145][ T983] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 220.563041][ T983] usb 2-1: config 5 interface 123 has no altsetting 0 [ 220.581325][ T983] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 220.591454][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.600793][ T983] usb 2-1: Product: syz [ 220.605066][ T983] usb 2-1: Manufacturer: syz [ 220.610167][ T983] usb 2-1: SerialNumber: syz [ 220.718676][ T5880] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 220.889728][ T5880] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 220.918979][ T5880] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.957647][ T5880] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.989353][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.173506][ T7731] netlink: 'syz.2.481': attribute type 8 has an invalid length. [ 221.188961][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.243175][ T7728] kvm: kvm [7727]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 221.252730][ T5880] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 221.266441][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.279261][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.332344][ T5880] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.372780][ T5880] usb 4-1: invalid MIDI out EP 0 [ 221.435493][ T7733] FAULT_INJECTION: forcing a failure. [ 221.435493][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 221.512369][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.576010][ T7733] CPU: 1 UID: 0 PID: 7733 Comm: syz.2.482 Not tainted syzkaller #0 PREEMPT(full) [ 221.576031][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.576039][ T7733] Call Trace: [ 221.576046][ T7733] [ 221.576053][ T7733] dump_stack_lvl+0x189/0x250 [ 221.576079][ T7733] ? __pfx____ratelimit+0x10/0x10 [ 221.576099][ T7733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.576119][ T7733] ? __pfx__printk+0x10/0x10 [ 221.576142][ T7733] ? __pfx___might_resched+0x10/0x10 [ 221.576157][ T7733] ? fs_reclaim_acquire+0x7d/0x100 [ 221.576186][ T7733] should_fail_ex+0x414/0x560 [ 221.576217][ T7733] should_failslab+0xa8/0x100 [ 221.576232][ T7733] __kmalloc_noprof+0xcb/0x7f0 [ 221.576249][ T7733] ? tomoyo_encode+0x28b/0x550 [ 221.576274][ T7733] tomoyo_encode+0x28b/0x550 [ 221.576296][ T7733] tomoyo_realpath_from_path+0x58d/0x5d0 [ 221.576316][ T7733] ? tomoyo_domain+0xd9/0x130 [ 221.576333][ T7733] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 221.576349][ T7733] tomoyo_path_number_perm+0x1e8/0x5a0 [ 221.576368][ T7733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.576398][ T7733] ? __lock_acquire+0xab9/0xd20 [ 221.576428][ T7733] ? __fget_files+0x2a/0x420 [ 221.576445][ T7733] ? __fget_files+0x3a0/0x420 [ 221.576457][ T7733] ? __fget_files+0x2a/0x420 [ 221.576474][ T7733] security_file_ioctl_compat+0xcb/0x2d0 [ 221.576494][ T7733] __ia32_compat_sys_ioctl+0x128/0x840 [ 221.576516][ T7733] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 221.576534][ T7733] ? __fget_files+0x3a0/0x420 [ 221.576553][ T7733] ? fput+0xa0/0xd0 [ 221.576569][ T7733] ? ksys_write+0x22a/0x250 [ 221.576587][ T7733] ? exc_page_fault+0x82/0x100 [ 221.576605][ T7733] ? __pfx_ksys_write+0x10/0x10 [ 221.576624][ T7733] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 221.576642][ T7733] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.576662][ T7733] __do_fast_syscall_32+0xb6/0x2b0 [ 221.576682][ T7733] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.576703][ T7733] do_fast_syscall_32+0x34/0x80 [ 221.576722][ T7733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.576744][ T7733] RIP: 0023:0xf7fa4539 [ 221.576759][ T7733] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 221.576773][ T7733] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 221.576790][ T7733] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 221.576800][ T7733] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.576809][ T7733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.576818][ T7733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 221.576827][ T7733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.576851][ T7733] [ 221.862537][ T5880] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 221.885169][ T7733] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.892137][ T7733] kvm: kvm [7732]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 221.937790][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.968047][ T7735] netlink: 164 bytes leftover after parsing attributes in process `syz.4.483'. [ 222.055327][ T7737] syzkaller1: entered promiscuous mode [ 222.069129][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.128418][ T7737] syzkaller1: entered allmulticast mode [ 222.232331][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.309082][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.518591][ T5840] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 222.568672][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 222.679197][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.691281][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.701467][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.714913][ T5840] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.724075][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.739425][ T5840] usb 5-1: config 0 descriptor?? [ 222.759577][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 222.780441][ T10] usb 3-1: config 66 interface 0 has no altsetting 0 [ 222.801699][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 222.822396][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.834240][ T10] usb 3-1: Product: syz [ 222.838703][ T10] usb 3-1: Manufacturer: syz [ 222.843619][ T10] usb 3-1: SerialNumber: syz [ 222.943197][ T983] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 223.120537][ T983] usb 2-1: USB disconnect, device number 10 [ 223.184353][ T10] ati_remote2 3-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 223.325474][ T10] usb 3-1: USB disconnect, device number 20 [ 224.575274][ T5887] usb 4-1: USB disconnect, device number 24 [ 224.597123][ T5840] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 224.878754][ T983] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 225.092414][ T983] usb 3-1: not running at top speed; connect to a high speed hub [ 225.102070][ T983] usb 3-1: config 1 interface 0 has no altsetting 0 [ 225.114900][ T10] net_ratelimit: 10 callbacks suppressed [ 225.114912][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.147566][ T983] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 225.159717][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.168806][ T983] usb 3-1: Product: syz [ 225.175325][ T983] usb 3-1: Manufacturer: syz [ 225.183592][ T983] usb 3-1: SerialNumber: syz [ 225.309118][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880559c4800: rx timeout, send abort [ 225.317486][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880559c5000: rx timeout, send abort [ 225.327128][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880559c4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 225.341622][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880559c5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 225.399526][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 225.414074][ T7759] loop8: detected capacity change from 0 to 16384 [ 225.438278][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.446692][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.523743][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.623955][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.634378][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.749410][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.773633][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.783611][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.803076][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.467763][ T24] usb 5-1: USB disconnect, device number 8 [ 226.474244][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.482694][ T875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.945397][ T983] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14 [ 227.000621][ T5183] bcm5974 3-1:1.0: could not read from device [ 227.224227][ T7796] binder: 7795:7796 ioctl 400454da 800006c0 returned -22 [ 227.243821][ T5183] bcm5974 3-1:1.0: could not read from device [ 227.251465][ T983] usb 3-1: USB disconnect, device number 21 [ 230.425345][ T5840] net_ratelimit: 185 callbacks suppressed [ 230.425362][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.440309][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.630482][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.732743][ T7834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.741936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.821803][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.949592][ T5840] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 231.118590][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 231.124959][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 231.124970][ T30] audit: type=1326 audit(1762768066.526:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 231.153051][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.173677][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805509fc00: rx timeout, send abort [ 231.182100][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805509c800: rx timeout, send abort [ 231.190748][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805509fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 231.190741][ T7833] FAULT_INJECTION: forcing a failure. [ 231.190741][ T7833] name failslab, interval 1, probability 0, space 0, times 0 [ 231.205163][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805509c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 231.233211][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.273297][ T30] audit: type=1326 audit(1762768066.526:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 231.295313][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.2.509 Not tainted syzkaller #0 PREEMPT(full) [ 231.295337][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.295347][ T7833] Call Trace: [ 231.295356][ T7833] [ 231.295363][ T7833] dump_stack_lvl+0x189/0x250 [ 231.295397][ T7833] ? __pfx____ratelimit+0x10/0x10 [ 231.295419][ T7833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.295441][ T7833] ? __pfx__printk+0x10/0x10 [ 231.295463][ T7833] ? __pfx___might_resched+0x10/0x10 [ 231.295486][ T7833] should_fail_ex+0x414/0x560 [ 231.295514][ T7833] should_failslab+0xa8/0x100 [ 231.295534][ T7833] __kmalloc_cache_noprof+0x6f/0x6f0 [ 231.295556][ T7833] ? __asan_memset+0x22/0x50 [ 231.295574][ T7833] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 231.295600][ T7833] alloc_netdev_mqs+0xbf8/0x11b0 [ 231.295626][ T7833] rtnl_create_link+0x31f/0xd10 [ 231.295652][ T7833] rtnl_newlink_create+0x25c/0xb00 [ 231.295674][ T7833] ? __lock_acquire+0xab9/0xd20 [ 231.295696][ T7833] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 231.295717][ T7833] ? __pfx___mutex_lock+0x10/0x10 [ 231.295749][ T7833] ? ns_capable+0x8a/0xf0 [ 231.295770][ T7833] rtnl_newlink+0x16e4/0x1c80 [ 231.295794][ T7833] ? netlink_deliver_tap+0x19c/0x1b0 [ 231.295822][ T7833] ? __pfx_rtnl_newlink+0x10/0x10 [ 231.295869][ T7833] ? kasan_quarantine_put+0xdd/0x220 [ 231.295890][ T7833] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.295917][ T7833] ? nlmon_xmit+0xb0/0x100 [ 231.295934][ T7833] ? kmem_cache_free+0x19b/0x690 [ 231.295965][ T7833] ? __local_bh_enable_ip+0x12d/0x1c0 [ 231.295983][ T7833] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.296005][ T7833] ? __local_bh_enable_ip+0x12d/0x1c0 [ 231.296021][ T7833] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 231.296042][ T7833] ? __dev_queue_xmit+0x27b/0x3b50 [ 231.296061][ T7833] ? __dev_queue_xmit+0x27b/0x3b50 [ 231.296077][ T7833] ? __dev_queue_xmit+0x27b/0x3b50 [ 231.296097][ T7833] ? __dev_queue_xmit+0x1d79/0x3b50 [ 231.296113][ T7833] ? kasan_save_track+0x3e/0x80 [ 231.296133][ T7833] ? __kasan_slab_alloc+0x6c/0x80 [ 231.296159][ T7833] ? __lock_acquire+0xab9/0xd20 [ 231.296199][ T7833] ? __pfx_rtnl_newlink+0x10/0x10 [ 231.296220][ T7833] rtnetlink_rcv_msg+0x7cf/0xb70 [ 231.296247][ T7833] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 231.296269][ T7833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.296290][ T7833] ? ref_tracker_free+0x63a/0x7d0 [ 231.296306][ T7833] ? __asan_memcpy+0x40/0x70 [ 231.296325][ T7833] ? __pfx_ref_tracker_free+0x10/0x10 [ 231.296355][ T7833] netlink_rcv_skb+0x208/0x470 [ 231.296385][ T7833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.296409][ T7833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.296443][ T7833] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.296467][ T7833] netlink_unicast+0x82f/0x9e0 [ 231.296497][ T7833] ? __pfx_netlink_unicast+0x10/0x10 [ 231.296524][ T7833] ? netlink_sendmsg+0x642/0xb30 [ 231.296539][ T7833] ? skb_put+0x11b/0x210 [ 231.296558][ T7833] netlink_sendmsg+0x805/0xb30 [ 231.296584][ T7833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.296602][ T7833] ? __import_iovec+0x5d4/0x7f0 [ 231.296619][ T7833] ? aa_sock_msg_perm+0xf1/0x1d0 [ 231.296644][ T7833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.296659][ T7833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.296677][ T7833] __sock_sendmsg+0x21c/0x270 [ 231.296701][ T7833] ____sys_sendmsg+0x52d/0x830 [ 231.296724][ T7833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.296758][ T7833] ___sys_sendmsg+0x21f/0x2a0 [ 231.296778][ T7833] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.296796][ T7833] ? __lock_acquire+0xab9/0xd20 [ 231.296844][ T7833] ? __fget_files+0x2a/0x420 [ 231.296858][ T7833] ? __fget_files+0x3a0/0x420 [ 231.296884][ T7833] __sys_sendmmsg+0x28e/0x430 [ 231.296907][ T7833] ? __pfx___sys_sendmmsg+0x10/0x10 [ 231.296922][ T7833] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 231.296970][ T7833] ? ksys_write+0x22a/0x250 [ 231.296993][ T7833] ? __pfx_ksys_write+0x10/0x10 [ 231.297021][ T7833] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 231.297043][ T7833] __do_fast_syscall_32+0xb6/0x2b0 [ 231.297066][ T7833] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.297090][ T7833] do_fast_syscall_32+0x34/0x80 [ 231.297113][ T7833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.297132][ T7833] RIP: 0023:0xf7fa4539 [ 231.297148][ T7833] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 231.297161][ T7833] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 231.297180][ T7833] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 00000000800002c0 [ 231.297191][ T7833] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 231.297201][ T7833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.297210][ T7833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.297220][ T7833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.297247][ T7833] [ 231.533307][ T6019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.778944][ T6019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.790779][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.831812][ T5840] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.841597][ T5840] usb 3-1: no configurations [ 231.846224][ T5840] usb 3-1: can't read configurations, error -22 [ 231.864990][ T30] audit: type=1326 audit(1762768066.526:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 231.930869][ T30] audit: type=1326 audit(1762768066.526:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 231.955472][ T30] audit: type=1326 audit(1762768066.566:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 231.991321][ T30] audit: type=1326 audit(1762768066.566:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 232.014928][ T30] audit: type=1326 audit(1762768066.566:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 232.076390][ T30] audit: type=1326 audit(1762768066.566:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 232.099093][ T30] audit: type=1326 audit(1762768066.566:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 232.122703][ T30] audit: type=1326 audit(1762768066.566:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa5539 code=0x7ffc0000 [ 233.142616][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 233.743003][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 233.806140][ T7883] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 233.818145][ T7884] netlink: 'syz.0.522': attribute type 4 has an invalid length. [ 233.907779][ T7884] netlink: 'syz.0.522': attribute type 4 has an invalid length. [ 235.583372][ T7913] net_ratelimit: 18 callbacks suppressed [ 235.583391][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.601702][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.613654][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.625695][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.669019][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.694173][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.740665][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.851022][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.863364][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.913068][ T7913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.732181][ T7925] netlink: 'syz.1.533': attribute type 3 has an invalid length. [ 236.807660][ T7928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.534'. [ 236.822228][ T7928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.534'. [ 237.228624][ T5840] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 237.236608][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 237.278091][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 237.424819][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.443355][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.544219][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.563203][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.589497][ T5840] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.599774][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.619120][ T5840] usb 2-1: config 0 descriptor?? [ 237.853908][ T875] hid-generic 0002:0004:0009.0007: unknown main item tag 0x0 [ 237.873981][ T875] hid-generic 0002:0004:0009.0007: unknown main item tag 0x0 [ 237.979551][ T875] hid-generic 0002:0004:0009.0007: unknown main item tag 0x0 [ 237.987965][ T875] hid-generic 0002:0004:0009.0007: unknown main item tag 0x0 [ 237.996147][ T875] hid-generic 0002:0004:0009.0007: unknown main item tag 0x0 [ 238.004224][ T875] hid-generic 0002:0004:0009.0007: unknown main item tag 0x0 [ 238.017227][ T875] hid-generic 0002:0004:0009.0007: unknown main item tag 0x0 [ 238.093510][ T875] hid-generic 0002:0004:0009.0007: unknown main item tag 0x0 [ 238.107137][ T5840] usbhid 2-1:0.0: can't add hid device: -71 [ 238.114253][ T5840] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 238.124650][ T875] hid-generic 0002:0004:0009.0007: unknown main item tag 0x0 [ 238.295728][ T5840] usb 2-1: USB disconnect, device number 11 [ 238.302762][ T875] hid-generic 0002:0004:0009.0007: unknown main item tag 0x0 [ 238.818241][ T875] hid-generic 0002:0004:0009.0007: hidraw0: HID v0.04 Device [syz0] on syz0 [ 239.077893][ T7942] input: syz1 as /devices/virtual/input/input15 [ 239.086839][ T7960] fido_id[7960]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 239.687606][ T7968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.543'. [ 240.629574][ T983] net_ratelimit: 319 callbacks suppressed [ 240.629593][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.634646][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.029114][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.211782][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.498799][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 241.679817][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.000099][ T8003] FAULT_INJECTION: forcing a failure. [ 242.000099][ T8003] name failslab, interval 1, probability 0, space 0, times 0 [ 242.019566][ T8003] CPU: 1 UID: 0 PID: 8003 Comm: syz.0.554 Not tainted syzkaller #0 PREEMPT(full) [ 242.019583][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 242.019600][ T8003] Call Trace: [ 242.019604][ T8003] [ 242.019609][ T8003] dump_stack_lvl+0x189/0x250 [ 242.019627][ T8003] ? __pfx____ratelimit+0x10/0x10 [ 242.019640][ T8003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.019652][ T8003] ? __pfx__printk+0x10/0x10 [ 242.019666][ T8003] ? __pfx___might_resched+0x10/0x10 [ 242.019676][ T8003] ? fs_reclaim_acquire+0x7d/0x100 [ 242.019693][ T8003] should_fail_ex+0x414/0x560 [ 242.019711][ T8003] should_failslab+0xa8/0x100 [ 242.019722][ T8003] __kmalloc_noprof+0xcb/0x7f0 [ 242.019735][ T8003] ? tomoyo_encode+0x28b/0x550 [ 242.019752][ T8003] tomoyo_encode+0x28b/0x550 [ 242.019768][ T8003] tomoyo_realpath_from_path+0x58d/0x5d0 [ 242.019789][ T8003] tomoyo_path_perm+0x213/0x4b0 [ 242.019801][ T8003] ? tomoyo_path_perm+0x1e3/0x4b0 [ 242.019812][ T8003] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 242.019847][ T8003] security_inode_getattr+0x12f/0x330 [ 242.019864][ T8003] vfs_statx+0x18e/0x550 [ 242.019878][ T8003] ? __pfx_vfs_statx+0x10/0x10 [ 242.019889][ T8003] ? getname_flags+0x1e5/0x540 [ 242.019901][ T8003] __ia32_compat_sys_newlstat+0xf5/0x180 [ 242.019913][ T8003] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.019928][ T8003] ? __pfx___ia32_compat_sys_newlstat+0x10/0x10 [ 242.019949][ T8003] ? __pfx_ksys_write+0x10/0x10 [ 242.019962][ T8003] ? arch_syscall_is_vdso_sigreturn+0x175/0x1a0 [ 242.019974][ T8003] ? syscall_user_dispatch+0x4f/0x90 [ 242.019986][ T8003] __do_fast_syscall_32+0xb6/0x2b0 [ 242.020001][ T8003] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.020015][ T8003] do_fast_syscall_32+0x34/0x80 [ 242.020028][ T8003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.020040][ T8003] RIP: 0023:0xf7fa5539 [ 242.020049][ T8003] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 242.020058][ T8003] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 000000000000006b [ 242.020069][ T8003] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000080000340 [ 242.020076][ T8003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.020081][ T8003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.020087][ T8003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 242.020092][ T8003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.020108][ T8003] [ 242.020121][ T8003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.349322][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.688816][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.715775][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.791148][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.130063][ T8032] netlink: 'syz.0.561': attribute type 3 has an invalid length. [ 243.137881][ T8032] netlink: 'syz.0.561': attribute type 1 has an invalid length. [ 243.464369][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.813150][ T8049] fuse: Unknown parameter 'default_permission' [ 244.357559][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 244.420450][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 244.771767][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 245.169053][ T8075] ------------[ cut here ]------------ [ 245.174888][ T8075] WARNING: CPU: 0 PID: 8075 at net/mac80211/driver-ops.c:473 drv_link_info_changed+0x14c/0x870 [ 245.185668][ T8075] Modules linked in: [ 245.191443][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.3.574 Not tainted syzkaller #0 PREEMPT(full) [ 245.201671][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.211806][ T8075] RIP: 0010:drv_link_info_changed+0x14c/0x870 [ 245.217896][ T8075] Code: 83 fb 01 75 1f e8 54 01 0b f7 eb 32 e8 4d 01 0b f7 eb 2b 83 fb 03 74 21 83 fb 05 75 07 e8 3c 01 0b f7 eb 1a e8 35 01 0b f7 90 <0f> 0b 90 e9 b5 01 00 00 e8 27 01 0b f7 eb 05 e8 20 01 0b f7 4d 8d [ 245.237524][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.243760][ T8075] RSP: 0018:ffffc9001b327050 EFLAGS: 00010283 [ 245.249893][ T8075] RAX: ffffffff8ab5129b RBX: 0000000080000000 RCX: 0000000000080000 [ 245.257880][ T8075] RDX: ffffc9000c099000 RSI: 00000000000006e9 RDI: 00000000000006ea [ 245.265871][ T8075] RBP: ffff8880795b0e80 R08: ffff88802ea61e40 R09: 0000000000000004 [ 245.274314][ T8075] R10: 0000000000000005 R11: 0000000000000002 R12: ffff8880547197c0 [ 245.283101][ T8075] R13: ffff888054718d80 R14: 0000000000000200 R15: ffff88805471aad8 [ 245.291796][ T8075] FS: 0000000000000000(0000) GS:ffff88812613b000(0063) knlGS:00000000f549db40 [ 245.300919][ T8075] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 245.307511][ T8075] CR2: 000000000c43058e CR3: 000000005123e000 CR4: 00000000003526f0 [ 245.315627][ T8075] Call Trace: [ 245.318945][ T8075] [ 245.321864][ T8075] ? ieee80211_link_info_change_notify+0x210/0x3a0 [ 245.328381][ T8075] ieee80211_offchannel_stop_vifs+0x249/0x560 [ 245.334511][ T8075] __ieee80211_start_scan+0x19e9/0x1d30 [ 245.340123][ T8075] rdev_scan+0x157/0x300 [ 245.344357][ T8075] nl80211_trigger_scan+0x1a62/0x1f10 [ 245.349761][ T8075] genl_family_rcv_msg_doit+0x215/0x300 [ 245.355402][ T8075] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 245.361494][ T8075] ? bpf_lsm_capable+0x9/0x20 [ 245.366253][ T8075] ? security_capable+0x7e/0x2e0 [ 245.371310][ T8075] genl_rcv_msg+0x60e/0x790 [ 245.375801][ T8075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.381548][ T8075] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 245.387474][ T8075] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 245.393228][ T8075] ? __pfx_nl80211_post_doit+0x10/0x10 [ 245.398805][ T8075] ? __asan_memcpy+0x40/0x70 [ 245.403435][ T8075] ? __pfx_ref_tracker_free+0x10/0x10 [ 245.408841][ T8075] netlink_rcv_skb+0x208/0x470 [ 245.413597][ T8075] ? __lock_acquire+0xab9/0xd20 [ 245.418431][ T8075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.423763][ T8075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.429156][ T8075] ? down_read+0x1ad/0x2e0 [ 245.433591][ T8075] genl_rcv+0x28/0x40 [ 245.437613][ T8075] netlink_unicast+0x82f/0x9e0 [ 245.442451][ T8075] ? __pfx_netlink_unicast+0x10/0x10 [ 245.447774][ T8075] ? netlink_sendmsg+0x642/0xb30 [ 245.452784][ T8075] ? skb_put+0x11b/0x210 [ 245.457038][ T8075] netlink_sendmsg+0x805/0xb30 [ 245.461835][ T8075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.467122][ T8075] ? __import_iovec+0x5d4/0x7f0 [ 245.472064][ T8075] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.477062][ T8075] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.482376][ T8075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.488341][ T8075] __sock_sendmsg+0x21c/0x270 [ 245.493602][ T8075] ____sys_sendmsg+0x505/0x830 [ 245.498364][ T8075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.503758][ T8075] ? preempt_schedule_thunk+0x16/0x30 [ 245.509216][ T8075] ___sys_sendmsg+0x21f/0x2a0 [ 245.513885][ T8075] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.519111][ T8075] ? futex_private_hash_put+0x13b/0x170 [ 245.524704][ T8075] ? __fget_files+0x2a/0x420 [ 245.529369][ T8075] ? __fget_files+0x3a0/0x420 [ 245.534042][ T8075] __sys_sendmsg+0x164/0x220 [ 245.538667][ T8075] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.543779][ T8075] ? rcu_is_watching+0x15/0xb0 [ 245.548575][ T8075] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 245.555257][ T8075] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.560500][ T8075] __do_fast_syscall_32+0xb6/0x2b0 [ 245.565599][ T8075] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.570820][ T8075] do_fast_syscall_32+0x34/0x80 [ 245.575661][ T8075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.581991][ T8075] RIP: 0023:0xf70ad539 [ 245.586730][ T8075] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 245.607068][ T8075] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 245.615568][ T8075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 245.623583][ T8075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.631601][ T8075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.639654][ T8075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 245.647636][ T8075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.655647][ T8075] [ 245.658906][ T8075] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 245.666169][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.3.574 Not tainted syzkaller #0 PREEMPT(full) [ 245.675517][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.685555][ T8075] Call Trace: [ 245.688823][ T8075] [ 245.691763][ T8075] dump_stack_lvl+0x99/0x250 [ 245.696339][ T8075] ? __asan_memcpy+0x40/0x70 [ 245.700964][ T8075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.706153][ T8075] ? __pfx__printk+0x10/0x10 [ 245.710729][ T8075] vpanic+0x237/0x6d0 [ 245.714693][ T8075] ? __pfx_vpanic+0x10/0x10 [ 245.719183][ T8075] panic+0xb9/0xc0 [ 245.722886][ T8075] ? __pfx_panic+0x10/0x10 [ 245.727289][ T8075] __warn+0x31b/0x4b0 [ 245.731249][ T8075] ? drv_link_info_changed+0x14c/0x870 [ 245.736708][ T8075] ? drv_link_info_changed+0x14c/0x870 [ 245.742151][ T8075] report_bug+0x2be/0x4f0 [ 245.746465][ T8075] ? drv_link_info_changed+0x14c/0x870 [ 245.751907][ T8075] ? drv_link_info_changed+0x14c/0x870 [ 245.757348][ T8075] ? drv_link_info_changed+0x14e/0x870 [ 245.762793][ T8075] handle_bug+0x84/0x160 [ 245.767041][ T8075] exc_invalid_op+0x1a/0x50 [ 245.771523][ T8075] asm_exc_invalid_op+0x1a/0x20 [ 245.776356][ T8075] RIP: 0010:drv_link_info_changed+0x14c/0x870 [ 245.782415][ T8075] Code: 83 fb 01 75 1f e8 54 01 0b f7 eb 32 e8 4d 01 0b f7 eb 2b 83 fb 03 74 21 83 fb 05 75 07 e8 3c 01 0b f7 eb 1a e8 35 01 0b f7 90 <0f> 0b 90 e9 b5 01 00 00 e8 27 01 0b f7 eb 05 e8 20 01 0b f7 4d 8d [ 245.802036][ T8075] RSP: 0018:ffffc9001b327050 EFLAGS: 00010283 [ 245.808136][ T8075] RAX: ffffffff8ab5129b RBX: 0000000080000000 RCX: 0000000000080000 [ 245.816097][ T8075] RDX: ffffc9000c099000 RSI: 00000000000006e9 RDI: 00000000000006ea [ 245.824051][ T8075] RBP: ffff8880795b0e80 R08: ffff88802ea61e40 R09: 0000000000000004 [ 245.832018][ T8075] R10: 0000000000000005 R11: 0000000000000002 R12: ffff8880547197c0 [ 245.839997][ T8075] R13: ffff888054718d80 R14: 0000000000000200 R15: ffff88805471aad8 [ 245.847969][ T8075] ? drv_link_info_changed+0x14b/0x870 [ 245.853437][ T8075] ? ieee80211_link_info_change_notify+0x210/0x3a0 [ 245.859928][ T8075] ieee80211_offchannel_stop_vifs+0x249/0x560 [ 245.866020][ T8075] __ieee80211_start_scan+0x19e9/0x1d30 [ 245.871575][ T8075] rdev_scan+0x157/0x300 [ 245.875803][ T8075] nl80211_trigger_scan+0x1a62/0x1f10 [ 245.881167][ T8075] genl_family_rcv_msg_doit+0x215/0x300 [ 245.886703][ T8075] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 245.892767][ T8075] ? bpf_lsm_capable+0x9/0x20 [ 245.897448][ T8075] ? security_capable+0x7e/0x2e0 [ 245.902377][ T8075] genl_rcv_msg+0x60e/0x790 [ 245.906874][ T8075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.911888][ T8075] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 245.917254][ T8075] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 245.922962][ T8075] ? __pfx_nl80211_post_doit+0x10/0x10 [ 245.928409][ T8075] ? __asan_memcpy+0x40/0x70 [ 245.932982][ T8075] ? __pfx_ref_tracker_free+0x10/0x10 [ 245.938337][ T8075] netlink_rcv_skb+0x208/0x470 [ 245.943092][ T8075] ? __lock_acquire+0xab9/0xd20 [ 245.947946][ T8075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.952977][ T8075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.958265][ T8075] ? down_read+0x1ad/0x2e0 [ 245.962667][ T8075] genl_rcv+0x28/0x40 [ 245.966734][ T8075] netlink_unicast+0x82f/0x9e0 [ 245.971510][ T8075] ? __pfx_netlink_unicast+0x10/0x10 [ 245.976792][ T8075] ? netlink_sendmsg+0x642/0xb30 [ 245.981731][ T8075] ? skb_put+0x11b/0x210 [ 245.986056][ T8075] netlink_sendmsg+0x805/0xb30 [ 245.990811][ T8075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.996099][ T8075] ? __import_iovec+0x5d4/0x7f0 [ 246.000941][ T8075] ? aa_sock_msg_perm+0xf1/0x1d0 [ 246.005872][ T8075] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.011141][ T8075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.016411][ T8075] __sock_sendmsg+0x21c/0x270 [ 246.021087][ T8075] ____sys_sendmsg+0x505/0x830 [ 246.025840][ T8075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.031109][ T8075] ? preempt_schedule_thunk+0x16/0x30 [ 246.036467][ T8075] ___sys_sendmsg+0x21f/0x2a0 [ 246.041127][ T8075] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.046445][ T8075] ? futex_private_hash_put+0x13b/0x170 [ 246.051991][ T8075] ? __fget_files+0x2a/0x420 [ 246.056572][ T8075] ? __fget_files+0x3a0/0x420 [ 246.061243][ T8075] __sys_sendmsg+0x164/0x220 [ 246.065833][ T8075] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.071020][ T8075] ? rcu_is_watching+0x15/0xb0 [ 246.075769][ T8075] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 246.082447][ T8075] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.087636][ T8075] __do_fast_syscall_32+0xb6/0x2b0 [ 246.092744][ T8075] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.097940][ T8075] do_fast_syscall_32+0x34/0x80 [ 246.102835][ T8075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.109155][ T8075] RIP: 0023:0xf70ad539 [ 246.113221][ T8075] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 246.132812][ T8075] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 246.141215][ T8075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 246.149180][ T8075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.157147][ T8075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.165194][ T8075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.173152][ T8075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.181120][ T8075] [ 246.184466][ T8075] Kernel Offset: disabled [ 246.188776][ T8075] Rebooting in 86400 seconds..