last executing test programs: 8m52.278528861s ago: executing program 1 (id=806): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r5, 0x407, 0x176) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000000a40)='5', 0x1}], 0x1, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000280)=0xc9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="360a000000000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r9, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 8m51.287371729s ago: executing program 1 (id=812): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0xc2281) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x0, 0x3, 0x0, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a024412864049ea917deb7ba193b7e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe, 0xfffffffffffffffc]}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r6, 0x0, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) sendto$inet6(r6, &(0x7f0000000900)="8d", 0x1, 0xf21bb4d410ace81, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000100000000}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0xff7ffffffffffffe) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) 8m50.235611827s ago: executing program 1 (id=816): connect$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) unlink(&(0x7f0000002800)='./file0\x00') userfaultfd(0x800) 8m46.97987643s ago: executing program 1 (id=830): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x180}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, 0x0, 0x0, 0x1c3, 0x0, 0x2, 0x0, 0x6}) socket$packet(0x11, 0x3, 0x300) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0xa941, 0x8, 0x0, 0xffff, 0x1, 0x0, 0x0, 0xffc, 0x5, 0x9, 0x8, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8m43.544411842s ago: executing program 1 (id=846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x9, 0x86e, 0x0, &(0x7f0000000080)="f253f7b22f42", 0x0, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 8m43.181500869s ago: executing program 1 (id=848): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r0, 0x0, 0x0) (async) write$char_usb(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) 8m27.609553349s ago: executing program 32 (id=848): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r0, 0x0, 0x0) (async) write$char_usb(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) 5m11.627121713s ago: executing program 3 (id=1641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, @local, [@hopopts={0x11}], "fafb17c163a3040b"}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0022800500110000000000"], 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r8, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x69}], 0x1, 0x7d, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r8, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={r6, 0x400}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={r6, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x3, @local, 0x10001}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000480)=0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5m11.077847703s ago: executing program 3 (id=1643): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x6, 0x8000000, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) (async) creat(0x0, 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @private=0xa010102}}, 0x0, 0x0, 0x7, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178c5eb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178c5eb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000001bc0)=@v3={0x3000000, [{0x9, 0xffffffff}, {0x9, 0x3d9b}]}, 0x18, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r3, 0x0, 0x0) (async) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18}], 0x18}, 0x48051) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) 5m8.135729576s ago: executing program 3 (id=1649): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x2, 0x11) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="0030000000000644e0762d45935e008495afdb40209579fc09af8a410e47c81da4c547f76282096658fbe38a2ede86fd1c593b198a73fecf893be68224c7ecfb2f81947ac7cc1ac1bfd9fb7de9e95fb65085e54763ecb5901b5fa844305fd403c6f8de55829f39bb79d474c441636113060c6c8d8fce7586903b48096cd577afb8aa38ada629"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000000000000700000001440e05"], 0x20}}], 0x1, 0x400c4) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000d40)={0x24, &(0x7f0000000b00)={0x0, 0x8, 0xb2, {0xb2, 0x22, "51aea322b5e00374321dd288a98dc7784d9d72368adac914d80d90f21b998774808cf55014d759ba7a1d3623c6620b90dab6d537e4c191ecf0d87ba504dbb9cad0ad2025d0a5710fa65d3c5b4ef5966c9ef5a8abcac673da115f3bb8657ab2512f55e989bcddb6c1bd87172cc628bc1c6d6dc2aacbb02b4984b6e6655ebc1714d7b2e335301988dd587056408f0e9405e586411a1c7c0843b01ef18ee88be8b25a43cfb824040ef52928d17a57e80735"}}, &(0x7f0000000c40)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "cac22e90381def952290cc5b163e60a499dd9f0e65c5860ae8147edb70c2c47313d8c8667d224c1def7ed806300f089e4abf9271f99feae292bb5f38edf724d181cc42defb3de0c06627646e10ed141b7092a5b8bba956be623abc7d95322ccd4b2b5b2479fed393baac089868eaeda6cda18aa8dc9f0fad78d0bbad48bb51a2c475b9b63c5215a24d681f84d226d861dd0be086be6fe3e2194a96f03da7f593f3f065fb1a233d29b7ec6dd5ff34963c0cd8931c64f5b25d3d3a77a61cf4a8f7afe929254c069c277aeebb9a15e93d"}}, &(0x7f0000000840)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0xa, "20e8c810"}, @main=@item_4={0x3, 0x0, 0xb, "abc9fc8a"}, @local=@item_012={0x2, 0x2, 0x4, '\n['}]}}, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x77c}}}}, &(0x7f0000000fc0)={0x2c, &(0x7f0000000e00)={0x20, 0x15, 0xa2, "d61aa463eba5269b3a649e7584939f3549accef16ef79387c589ad42ed8d149f1afd04dec1fc8c88f9d0f977c998a0ad7e8e2d0767cecbaf88d1bbcda9d55225b34ac327a473f57fb18b58ff6386a91d657ba11e7a3b72dab370ad38e8ab561c6bc5b706de5282aeedab29f1020b0fdd489af5fd2b3f23e5d6b9598a18ab4510ac93f2bda090da8a1cc9c9f456f3fbdd064fe835c3ef22569b4493605dd697672382"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f00)={0x20, 0x1, 0x6e, "b1a1ad57114ce5b1bb039c6d0880516964465b70ccff320bc8726f4ccefee42a3354d56dba831f3ee2cd09eee02ce5ab43653644072242369a7f0f786f88d71dec972cc2c1edda722833342ea4db480721b0bc7d6cfe9f01fb5ae9068bc864c4b98c000ac1a7bd3b72ec48d3a59e"}, &(0x7f0000000f80)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="51ed0d5e00000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a58000000060a010400000000000000000a0000010c00034000000000000000020900020073797a32000000002c000580080001400000003308000140000000110800024000000003080001400000002c08000140000000f8140000141100010000000000000000000100000a22f0ca7df537246c04813d5ff8acd6a2722c64605a47a6d64910800430cc0a08a668ff2e957340e4a40dda2f03162e0713f8764df72ce96381000e727cadaf7dcd"], 0x80}, 0x1, 0x0, 0x0, 0x4044850}, 0x24000840) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x9fea0db73c00ca61, 0x0, 0x313}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r7, 0x0, &(0x7f0000000000)="bda8", 0x2, 0x100, 0x1}) (async, rerun: 64) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) write(r6, &(0x7f0000000200)='~', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) close(0x3) (rerun: 64) 5m5.561156655s ago: executing program 3 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2400330000280900ffffffffffff080211000000f71ef89b6b1ae4000000000000000500080057002f0000000500180119000000080026"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x937, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) syz_usb_connect(0x5, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003d0ff1c40f204f8afa231010203010902a45595dd4fcc596104d20c003cae8307"], &(0x7f0000000f40)={0x0, 0x0, 0x7a, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f7a0004"]}) 5m3.91574977s ago: executing program 3 (id=1664): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet_sctp(0x2, 0x1, 0x84) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async) 5m3.643150327s ago: executing program 3 (id=1666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_INTERRUPT(r5, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x10, 0x7) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x10, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7623c435aff90493ddd7aae07ef35f0700000000000000ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x9]}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000340)={r2, 0xb, {0x0, 0x0, 0x0, 0x9, 0xa0e, 0x0, 0x2, 0x12, 0x10, "dd3f69943eebef80e9574e512a76b415b58af03d88444ad31a3f9ea01c259a99e160f54a91298688cd5460884d46cc0c76c95039b4b23f611de83a86b3f04b8e", "35d42d1c52961cb58491048d190b2ab895d5bdf57430812e4db320c0dab2f4aed97a139b2563926931afecea2b83507e1e3a6dd1d91063f5750b209457b99efe", "b7b0d261e620e7c5ce3dad114bf61645ea5edba56ed7aa2c47ef95aea141ada2", [0xfffffffffffffffe, 0x6f]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) migrate_pages(0xffffffffffffffff, 0x100000001, 0x0, &(0x7f0000000040)=0xffffffffffffa997) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000180)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4f3bf5", 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "056e5a", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [@dstopts={0x11, 0x0, '\x00', [@generic]}, @fragment={0x0, 0x6}]}}}}}}}, 0x0) 5m3.174491016s ago: executing program 33 (id=1666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_INTERRUPT(r5, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x10, 0x7) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x10, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7623c435aff90493ddd7aae07ef35f0700000000000000ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x9]}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000340)={r2, 0xb, {0x0, 0x0, 0x0, 0x9, 0xa0e, 0x0, 0x2, 0x12, 0x10, "dd3f69943eebef80e9574e512a76b415b58af03d88444ad31a3f9ea01c259a99e160f54a91298688cd5460884d46cc0c76c95039b4b23f611de83a86b3f04b8e", "35d42d1c52961cb58491048d190b2ab895d5bdf57430812e4db320c0dab2f4aed97a139b2563926931afecea2b83507e1e3a6dd1d91063f5750b209457b99efe", "b7b0d261e620e7c5ce3dad114bf61645ea5edba56ed7aa2c47ef95aea141ada2", [0xfffffffffffffffe, 0x6f]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) migrate_pages(0xffffffffffffffff, 0x100000001, 0x0, &(0x7f0000000040)=0xffffffffffffa997) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000180)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4f3bf5", 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "056e5a", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [@dstopts={0x11, 0x0, '\x00', [@generic]}, @fragment={0x0, 0x6}]}}}}}}}, 0x0) 2m31.033596814s ago: executing program 4 (id=2313): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0xa00}}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000508000/0x1000)=nil, 0x1000}) (async) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000197000/0xc00000)=nil, 0xc00000}}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8880, 0x8101}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x17c3b}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd33c}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x7a, 0x6f, 0x72, 0x20, 0x17cc, 0xbaff, 0xe11f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xec, 0x0, 0x0, [{{0x9, 0x4, 0x96, 0x0, 0x0, 0x69, 0x3c, 0xd1, 0xbe}}]}}]}}, 0x0) 2m30.747939842s ago: executing program 4 (id=2315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x0, 0x1a0, 0x1a0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @local, [0x0, 0xff000000, 0xff, 0x100], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'batadv0\x00', 'geneve1\x00', {0xff}, {}, 0x33, 0x7, 0x1, 0x20}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x5, 0x44}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x5, 0x2}, {0x4, 0x6, 0x1}, {0x2, 0x5, 0x2}, 0xedca, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2c3f454395af0e3a, 0x10, &(0x7f0000000440)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x7f, 0x0, 0x0, 0xe, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1491}, @alu={0x7, 0x0, 0x3, 0x5, 0x2, 0xffffffffffffff80, 0x4}], &(0x7f00000003c0)='syzkaller\x00', 0x56ea, 0x0, &(0x7f0000000500), 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000580)=[{0x3, 0x4, 0x9, 0xa}], 0x10, 0xc}, 0x94) r5 = openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000004c0)={r4, r5, 0x34, 0x0, @val=@tracing={0x0, 0xbe3}}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x5, 0x0, 0x5, 0x0, 0x63a], 0x1000, 0x3c4210}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x24000010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x80000001, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2f9"], 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0) 2m29.769633279s ago: executing program 4 (id=2318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c000004008e000c00018006000600800a00df4fb8bb800c00198008008600", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x1725, &(0x7f0000000740)={0x0, 0xbe47, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0x57}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000050}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r10, 0x0, 0x0, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/154, 0x63, 0x8) r11 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f0000000000)=0x2) 2m28.381110109s ago: executing program 4 (id=2324): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delqdisc={0x78, 0x25, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x7, 0x10}, {0xffe0, 0xd}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x40, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x7a}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000400)=""/125, &(0x7f0000000340)=0x7d) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x860, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xe8c}, @TCA_U32_HASH={0x8, 0x2, 0x7fff}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}, @TCA_U32_LINK={0x8, 0x3, 0x7ff}, @TCA_U32_POLICE={0x824, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x903, 0xb614, 0x0, 0x9, 0x8001, 0x18000000, 0x1, 0xffffffff, 0xf, 0x8, 0xb6fe, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x5, 0x3, 0x10, 0x1, 0x5, 0xcf, 0x1, 0x8, 0x40, 0x508, 0x40, 0x80, 0x5, 0x8, 0x3, 0x2, 0x80, 0xfffffff9, 0xff, 0x4, 0x0, 0xa, 0x1, 0xfffffff7, 0x7, 0x6, 0xd85aa9bc, 0x6, 0x80, 0x5, 0xca2, 0x2, 0xffff, 0x6, 0x800, 0x0, 0x2, 0xee66, 0x9, 0xffffffff, 0x100, 0x7f, 0xff, 0x81, 0x6, 0x4, 0x0, 0x0, 0x7, 0x2, 0x1, 0x7, 0xfffffb9f, 0x6, 0x4, 0x200, 0x26, 0x0, 0x10000, 0x4, 0x7, 0x6, 0x80, 0x3fc, 0x3, 0x8, 0x674, 0xa, 0xe06, 0x10000, 0x28, 0x13a0000, 0x3, 0x9, 0x5, 0x3, 0x4, 0xfff, 0x7f, 0x7, 0x5, 0x8000, 0x9, 0x7, 0x1, 0x8, 0x9, 0x6, 0x10001, 0x8, 0x800, 0x8, 0xfffffe00, 0x2, 0xfffffffa, 0x101, 0x6, 0x745, 0x7fff, 0x5, 0x2f, 0x8, 0x3, 0x6, 0xac25, 0x9, 0x53, 0xd94, 0x2, 0x7, 0x2, 0x5, 0x5, 0x6, 0x5, 0x9, 0x5, 0x8d99, 0xbd, 0x2, 0x1, 0x40, 0x1, 0x8, 0x7fff, 0x4, 0x541db553, 0x7, 0x0, 0xfffffffe, 0x6, 0xffffffff, 0x0, 0x3, 0x1, 0x10001, 0x7fff, 0x9, 0x1ff, 0x2, 0x7fffffff, 0x7fffffff, 0x5, 0x1000, 0x2d1, 0x8, 0x800, 0x1000008, 0x101, 0xa7ae, 0x401, 0x8, 0x3, 0x5, 0x673d, 0xffff, 0x923c, 0x5480000, 0x5, 0xfffffffa, 0xe, 0xffffffa9, 0x5, 0x3, 0xe2e, 0x4, 0xc, 0x3, 0x9, 0xfd8, 0x800, 0x0, 0x6, 0x9aa, 0x8, 0x0, 0x3, 0x10001, 0x7, 0x80000000, 0x2, 0xd2, 0x100, 0xffffffff, 0x0, 0x3, 0x7, 0x8000, 0x2, 0x8, 0x2, 0x7ff, 0xfffffffc, 0x20000000, 0xe6, 0x6, 0x800, 0x5, 0x4, 0x8, 0x1, 0x80000004, 0x7, 0x8, 0x8b, 0x6, 0x0, 0x8, 0x9, 0x10001, 0x4, 0x3a4d, 0x7fff, 0x5, 0x4b, 0xff, 0x1, 0x3ff, 0x4, 0xfffffe00, 0x9, 0x5, 0x8, 0x77, 0xc33, 0xc1, 0x4f08, 0x5ca2, 0x0, 0x0, 0x1, 0xd, 0x5, 0x1, 0x4, 0xffffffff, 0x7, 0x1ff, 0xffffff01]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0xfffffff8, 0x2, 0x1, 0x2, 0x5, 0x100, 0x2, 0xffff, 0x1, 0x0, 0xb, 0x63, 0x4, 0x9, 0x7ff, 0x6, 0x7, 0x4, 0x5, 0x40, 0x3, 0x7, 0x81, 0x7, 0x0, 0x0, 0xf, 0x8001, 0x2, 0x8, 0x7, 0x4, 0x2, 0x1086, 0x6, 0x5, 0x80, 0x7fffffff, 0x1ff, 0x4, 0x7, 0x0, 0xfffffffe, 0xffffff80, 0x1, 0x9, 0x3, 0x4, 0xf4f9, 0xff, 0xef, 0x5, 0xffff, 0x2, 0x2, 0xd, 0x682, 0x2, 0x2, 0x10, 0xfff, 0x10001, 0x101, 0x4023ae88, 0x10001, 0x5, 0x4, 0x9, 0x79, 0x87b, 0x8, 0x9, 0x3, 0x2, 0xfffffffe, 0x2, 0x6, 0x0, 0x9, 0x10000, 0x6, 0x4, 0x1, 0x57, 0x1, 0x5, 0x1, 0x3, 0x225a29f1, 0x6, 0xdd87, 0x5, 0x3, 0xffffff24, 0x2, 0x0, 0x101, 0x0, 0xfffffffc, 0xffffffff, 0xfffffffd, 0x64, 0x2, 0x0, 0xfffffff9, 0x8, 0x271e032b, 0x4, 0x0, 0xf, 0x7, 0x8, 0xfffffffa, 0x7, 0x7fffffff, 0x5, 0x63c6, 0x2, 0x7, 0x4, 0x0, 0x4, 0x13, 0x6, 0xfffff721, 0x3, 0x3, 0x7, 0x8, 0x80, 0x0, 0x1, 0x6, 0x2, 0x8, 0x4a, 0x7, 0x1, 0x9, 0x8, 0x4, 0x3, 0x3, 0x6f, 0x3, 0x0, 0x80, 0x3ff, 0x8, 0xfffffc53, 0x7, 0xa9, 0x7ff, 0x8, 0x1, 0x7, 0x7, 0x5, 0x40, 0x40, 0x8e, 0x7fff, 0x8, 0x7, 0x9, 0x6, 0x5, 0x2, 0x9, 0x0, 0x9, 0x8, 0x2, 0x2, 0x7fffffff, 0x80000000, 0x10000, 0x6, 0x1000, 0x6, 0x7, 0x0, 0x6, 0x7, 0x7ea, 0x225884fa, 0x7, 0x1, 0x400000, 0x24e, 0x7a26, 0x0, 0x49e, 0x7, 0x76, 0x5, 0x1, 0x200, 0x35, 0x40, 0x6, 0x7fff, 0x6, 0x100, 0x9, 0x8b, 0xf9ed25, 0x0, 0xfffffffa, 0x8, 0x4, 0x4, 0xda17, 0xf6e7, 0x9, 0xfffffd73, 0x3, 0x0, 0x4, 0x80000000, 0x5, 0xfc, 0x0, 0x0, 0x6, 0x9, 0x3, 0x8000, 0x10, 0x8a, 0x7ff, 0x91, 0xbe1e, 0x6, 0x4, 0x7, 0x2, 0x8, 0x6aa, 0x6, 0x7, 0x3ff, 0x9, 0x9, 0x1e2a, 0x9, 0x4, 0x1, 0x5, 0x2, 0x9, 0x5, 0x6a5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0xe2803, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000002c0)={@id={0x2, 0x0, @b}}) ioctl$RTC_WKALM_SET(r6, 0x4028700f, 0x0) close_range(r6, r6, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xffffffffffffff6b, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r9 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r9, &(0x7f0000000580)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) ioctl$VIDIOC_S_TUNER(r8, 0x4054561e, &(0x7f0000000040)={0x0, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x400, 0x3, 0x5, 0x10, 0x4, 0xfffffff9, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x3, 0x4, 0x1) 2m27.391804374s ago: executing program 4 (id=2330): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x200000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0xb, @pix_mp={0x7, 0x101, 0x4f424752, 0x1, 0x5, [{0xd, 0xa}, {0x7, 0x7}, {0x4, 0x3}, {0x9, 0x1c0}, {0x534, 0x5}, {0xa7c, 0x87}, {0x3, 0x3}, {0xd346, 0xf}], 0x9, 0x7, 0x7, 0x1, 0x6}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140)="8542a35fa1048978ec455c60f39513c23229644413ec1b262b7602ed128ac5ace8495ba5558d745c3a67ebce23fd0e8630ae06e7684edd7d1423091b84ac842f09df6466b9d94fe210aa28ac213eba7cf133ba09c52dd79f78b91f88ccc24759ba498ca0c7b078f8870114cf7167149bf1f9d4924e4b2e0163e55486beb7ca0d8c96082d31d5c58d1d0c5737563ef63edc0ef9d510a6c223ef135f4f018762d351b5d3b13fbb14e653bb473ab56d9f02a458b4a65aa420c86cc170fdec3372978f08544c0bb696b8581dd7ce72dad332d02d51ed4b7c351fa152c77b3596c3782f018600d65e86d8", 0xe8}, 0x68) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000002c0)={0x0, {0x2, 0xac59}}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f8, 0x4, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008840}, 0x8040) recvmsg(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)=""/144, 0x90}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000780)=""/101, 0x65}, {&(0x7f0000000800)=""/26, 0x1a}], 0x7, &(0x7f00000008c0)=""/171, 0xab}, 0x2100) r2 = syz_io_uring_complete(0x0) r3 = getuid() sendmsg$nl_route(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@ipmr_newroute={0x34, 0x18, 0x20, 0x70bd2d, 0x25dfdbfb, {0x80, 0x10, 0x14, 0x8, 0xfe, 0x1, 0xfe, 0x0, 0x800}, [@RTA_TABLE={0x8, 0xf, 0x1}, @RTA_SRC={0x8, 0x2, @remote}, @RTA_UID={0x8, 0x19, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008054) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000ac0)={0xcbe, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000013cc0)=""/61, &(0x7f0000013d00)=0x3d) prctl$PR_GET_CHILD_SUBREAPER(0x25) io_setup(0x5, &(0x7f0000013d40)=0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000014e80), 0x208080, 0x0) io_submit(r5, 0x3, &(0x7f0000015f00)=[&(0x7f0000014d80)={0x0, 0x0, 0x0, 0xd, 0x2, r4, &(0x7f0000013d80)="a6a8baca8a1bab98db2c49ddaee6a1b2608f8d4bbacc6861f43677d89dbeaead36d63672dbb919bc5cc21530ede2f0856bb8cd92e27e7916fa2a25c09a94e83cd11ea294506659e69d2068994ed5a402573f734842f060ad0d6cdac12b0e01900c317c58ab8cbe589f597870b027d2d2be042d9b6cb03a45e4b5b9ff88be035db93d172f6c9e1c0a2391cec0256719315dbfbe0347dc08e333dcd3e1df212fbb9bd9023d883c33bd960efd12cbdf67f135cd171cc3f4ebcd1f4bade0c54323d21fcf3b84d47d528c2705df264a4687d305c0840b7072448b4b45710d7b172532466ffffef44e381964f76767fe39e17cab07731859948410c612eabd0ed0da360625733df904743d0a4303666dba9c0f94b7d23963b7bd7ac7dd34bfe0f3e2ef386018250d855b064faa42020b371e4060f7e8f8af4d879f7a1d6d146a5818abb7b26979a34a8854a7a194e25a4da961344ed967ba5cc2ec08bdf778f817beb0016b2853bd03703f4dde0950f2966b1f998d56f6205e0f8822276180cd8da974cf02baa8f24690d16cc9727a1f035bd3149a8bb51e0da4cffece7160092a0fd64dd7b914e5a3ad45d63ed79fc7756f26c5909d4ec0b6aa882f95335578d73b1786c9eb8f161c17605f6d912c795c84fc1a48f1d32419198ccc3c19fcda1e515ecee4b179eeac6ac1cc651e7f51031f5bbb2ee323f90e59761af7c1f5a703af81d36dead420ad897bc3e91d70ae0e1ce1bab3500a4c3e92d038c5766492b236a6a1a4285e6754eed87fc11ac7c3490158944844b7f467b98faa3e18fee13eeed2407dbd0ab6dff6f3874710e303c8983a16fcd5da8382e439c85e9d60bb04aa4f09ef19638365f49d19529aa55f9ac91e3f8eb6e21f25656475c5b6a70ea043a1f5cf0032b03a1b6b4b38574f62be13142d9d959c276c5d8afb918a0c0e08402cf2b72fdc1b78f341ef6768bf35ae2c6716c020fb044550bbb1b10003aec9057b5742e848db7e0f4ae1a806e37d4ba9fa1cb464573f5161fb16196c19eb7db93d3932785d7140243d1d9bfd3e63f44faf1e8ce7f856f68f9d9da047fda080bebb34be6b6b602ccbef85180a8dd50ff4e44fea8aaec80b7aa8c670c9e3b4d1e03bb0f63824879ecbb9d517ebc1ab1a863c6626af99d0abe0391df0ce96dee97c47c7934738052c801e8611a51737c3ba9ad9b396179f3aefbd0672051eb3deff9f5f8939cedef7c0ee7cccc50b1b58143f07db287d1b40dfbc7b4d127b99418a027f58b4c4677a2bb40eb8c7c2df2ce1a499ddc7af7f37d99689b84dc2a87b6acac7961738e6b0c1052c9074e459b769757bcc1fe939dd64fcfee7e061d6f45e2ed23e13ddfe74859e99bb01f29919e89f09ae3909a7ea0632724328d37027bf79fdd65d579ed022cdc588938c1d4751ced8c5e7966a1610230b8ffc066972ca9d86d8a0cd9b033b66db753f0f7210a7844bd10d2b210ab5fb84b86e826410277bad3a79a0cadf6cda15579d434038cdfb84a1c95c3ea12b97f5ef14c6dffd79542018a09d453a6cac9f3b6f2099fe443876aab740465ea39b1548074d1ae7458d08c487b6c528b6b2a624e2b32dd0bfb953b093860d71c8f8b4f33158be51feb5e32f398fd209185f7d9515d5c49a991e4ac30fa82b210ad5f227b6a900ceff212257e87e8e762b61de999c508b41b580c79c719abbcbea8a64c9f130e9040773649530a24f2d7b7d4e998d3ffba0139ebd8820330264d8fa644f631092ddbadd6f09e1e943c256516bc9938b91833bed17927284c3fc5a1e5f5095a2945d74448607a2030e5e58008a744e32b596d9e05da7d3a412ecbeed17dc78edd8788bffc7341ae8aa315596a38a9bebce0e0b432f1192b9f22bdb82f4827189c0f976072dfcff3b9d62de4933f22e77bb2fad97e00810f694d5d80a4ce63910a158b978f6e115176d124e28b41fd5dc5c0fcb9478927250c140d07c23700897840d0c70af8bd51b25d82a9d10a0b5dc72458d65dc92c90a3bb24336504c2cf4be41e261b192fc14d5ac3f90e7983fed6dba69d9d4b86e87b87e3331d4e4b7502f8ae1150a006a50927bba67562ad50c88fd430e4f8c124be32feaf6cb6114268185a292f6724d88ad2e18e7b32c12423d738253bb37b860201d59df0ab88b3b07fb4e03842ecb5935850186aed335ef59fed2f010a5f1dbe0735a56e76ad5242714c4ac1f7184d219978a58a919ce1206c01894ad003dc1d3b163c7d9cc5e0c138d87081a8c69308915f8a10a870e8ed012c84ecc15936952ad85ead830f997ea85cc336f81d5acf9d03bb4808cf5ac2048dc054a030d3722220ed3e022a23aed838a78cef1333d302e1be5d4c0b348cf5109901279e813bc506f208d246795daeb99ae7d7c300e44a85fe272bf6dc5f20379580c69d24373784755d9efe559d5b248719e5c6e34af6f31da56b797e420ef4434c59e8777c15a746e5a8882935d87b3273e891ce555fc8f688ce036d9c11ba3ed56051b79aab7040b0f69d512113c94a4aaa3b547d74b7f3778a708167dbc7c159ff5c986241f0f66509f031ef361713785404841095bf1a8f075aad0c53ab2823440a48736f292efa70c2a61f0c19e879d8ee981842903ce916c57f0904e7b9e9a8d112d2de43358f1a029a3ec44564e566f18a2c8aaae105f2663af2dc4662adb4326e798b8be5390f979ce24ac47a33965ecb76878b9b15e7c0e7048f8c7ba8a61ab26680bb00f68454973424658378d11b585769b99a312bc9c22c487837ab68e72c5e41cb2acc8abd00e1eac7c6f3921814055c2a0fb74aecb4269a046c00311ac307480eb544a5f4e1cf22d5ff4c09ab9ac4febf8840f1064f5d8ebed8fb9079357989832dfb5b8d5f51aa37c557f521af025ea48eca44e5742cd7a16695c192b6ec50b7d531c30f737a15ed186160a465c02de86669025ab8c1b3770c0c3988c2b71f452bc0a059b2c5667cca9f482c952b54fda451bb94f67d472155abe56ef099ede080e861da85eecde52ffcd66e646b22f6be22b268f83a1be3467f3474bf9152201967b344b8ac3f270869b5f153f7f2310676d5e0b808e3c40f5a47726c069cc40927dbc8921fecf00e147f391353b61acbb9777d41a850a95254c207b0732fc8671d40c5386a891bbf3fb8b3a6c961fd03338be57f156fbb1c6734759a4626495811e17e9b9c6f41915b2364edc5e8f66c015fda71e6efcbe726da8ae76fcbf0b85a976a53fe072996b0cea16d8fff77ba59f227dc8f893fb88bf52958e696d3f21db89a82cf415ebb4c5ca4ddbddf6e5d40ab3151726e59397259d8207b6774de1ee13b80913cf5eaf4ae07de227005cde9d40de5d47fa5523af0ffb730aba5ae9aff0cc61a46916bffe739ec7551d1681b58f34251b69f4f1f497ed0b66c295bb812f4583e513f6baa73b88545507cbf20b260510c47575a5c63fe64c321212b87497bffc412dc3de848df8abe96c9bd2ffd5ad1970796e9b6e5821bf196fb99e5bc11ac05edc59eb9565c243b2e10de59737bb814a0ebb96362273d3255473612cb28c7c9d9e9feb2c60ffc11c1b15f3fd2c8731b28daea4765d5db7e80f9fce065f71ea64c7334b83222d251295631e42459969c664ed4ff97eb0faf5b2a444516f309c74740335aa4092eb500a68b4d0a7cb11cc3bd5efc571fbc25bc94a303359d0084586d95332df49d1f3aefb5df1530891f4015e18b7dd37167b5adf12967236f800c34fd475c900205d52a7fe37063399dbbad373d929e163d2d27132b1acc7d583edf00bfb3af3efeaec2925e12dbb60ba55d4b9523467fa48a7c4d5f7a7525c78911e69278f919c9b0c582e72c4ff946e568781357397968af27a22efa7349af8c2783b01559fd3ee8452e5c5ea45bc7f93434d33e05ed866b377881ae2c17e74ba9456f54c61f3f735bce0bf38321bb9dd9343625320688e5dae93b0874e8501b36ff5980892981895ca3645da79f7f4f9ed806cff2a60229807372b96cb41fa8257e9db34eb461ac5e5dd02a9618797263b777d03e4f550e68b87cbb9609106e6518726134e5a52c189602ddb773e0403f847fbe0554691fe34a5d39693e8038e6c6a03cdb5370ef6ff7e34143b2e8cfc4c0f270b58698d9d748288e03228aec76e983e2704be5ab7a77ce6c6c4eebb178415a97d42a96737ce18389a36cf2f19041e99d0168efaa5856216d5049956cdb4cd7922039b57f5f5071f3e25a4fe851685f5d33aecb4a0732fb224cd4f03edb46dd2ef6005968340d4140a6d2acf754deb89bc34b3e031a582af20f385f4ea5f5b96dc9894050aee30787e3474487cbc17d05afe09d5292fae695da0beff704edd4eb9c7ac08d23326f75f9bd8d34ee582e52f43dc412f7e9e6fe618164fb6188e0b4e08109a8d27128f8f25fe25361168d77cc5011065d989b453eb131fb48ac7e483ca3669f1908fbf9fc5dc06374e7c6a280568dbf51d76ea6c00594df1de65e9b3c8aae9b23a51ee65b0afa39031f64fb9f7a973f651442954f1ff6483b6340939e96087a5e8dad5b6cf0975946ab6f4f34f35586394bf6b412b2bd08e32bbfbd1e691e9d9b71cd54cce055da6a22a97794361eefef42d0d52d8015ed1f8f0afd6370dbf25d224dc79f9513df3f8afa8c6df4af2bfa92201d06a2880a32fa01ff0b67d5ba4079c2a017c6b17135487eb287933a15e3860f57813a3cad0fef18b68f188fc4f4c1e569df8988177ac5032ed8cb5315bb8f8113c1b1b6b169b18624308a990b8b8998131658cd1e40c0eda6d420046566ee64ac1aadedcb97974bbf8e4545ebff98a1002d8edc68eaa22d0771ce3cb3427d56a3896b9d5f3b7bb7c94892701e32d480cb5adfbdca4dab99ad4f9e370cf8f3dfa4fed48d6df07aefa34ae478fff7d1dfe8ae6f7e5b50bdc4757943c21110515b54cf5d30c6edb65974a39e1348d086856fe2a2fba3cf93689b108f488e958ec30107b5b01a9b5c936f0e3d1fe62807c0d407b86c8cd693617b39591c566a1b8eba068b568c109a12dea6f4682c0d7e2bc389f9a4284c2c970367fb023e0061d722e9bd239cbe0cda9eec3d0299665579f1b1c1129e155f4c5c655a5296f7ffe4223edfb8535e57f3f93f32239722fcc027e67eb91b90124d497f7e8db353b67b975b659763040a3eb7301480a3487e7657f35f25b98d04aceba02b97e8d6d62e8b1c1d85d146cf9db982325b6fe5a1f3506116908bb759deabf71ca577f829c2f24ccfdb1f533e508a2e5947197e11ecc1f4e137ee747df2bbf35bfad69883170ea9d05ac707df05f128efd2db1a1c4b57a28fb0b5bea458e9cb215d65204f2d55658772098a2e2e9525cf2a7c23a4752e1c01feb32a004832e9a57c750a7aad1ff3fdf0a7e01737001131d36ad41776fbaa9dd49d277fd957d20c7a916804323e8646f297440be9b57c8688adbfddb6a4033f879dbf57847ed4fb2ce1ec473aa771c7be222d104cbfcd314cbfb945b783c752aee7ee58d451edde6e2e294319d6da7e78fc05921148b15528ce2d2656835e0ce6ccab82bcb64a6a2a643957c5f782300c35a8a5bb2c043fe09caabc400e049424f09659fe7684d54806ef76b5c51217d80a3d4d8e0f26901830f1804cd94b19de2be030d524aa22beadf7e2ce076fe2accf85b02d70f13937fa7f3993449d7639457924d677cf5593255870bfd4b34feeec21666da17c4b3f8049a11a88352351cfb523cb7e335ccc2360034963f2996fff3e19a3831762956456da634b7f72595155b49", 0x1000, 0x8, 0x0, 0x1, r2}, &(0x7f0000014e40)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000014dc0)="51e3c72debe59c34a22ea52c692abe4e154f9bd2b426fee4484b59e9b8608e987b6db47ffce1f1ddecf7201278b46460a7b9c451693c08ea6c518aca58933b383393ff449404081a994d98621a8f34d0", 0x50, 0x6, 0x0, 0x1, r2}, &(0x7f0000015ec0)={0x0, 0x0, 0x0, 0x0, 0x8000, r6, &(0x7f0000014ec0)="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", 0x1000, 0x2ceb, 0x0, 0x1, r2}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000015f40)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000015f80)={@loopback, 0x78, r7}) statx(r6, &(0x7f0000015fc0)='./file0\x00', 0x0, 0x100, &(0x7f0000016000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000016100)=""/44, &(0x7f0000016140)=0x2c) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000016180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f00000174c0)={0x6, 0x0, [{0x6000, 0xb2, &(0x7f00000161c0)=""/178}, {0xffff1000, 0x7a, &(0x7f0000016280)=""/122}, {0x4000, 0x55, &(0x7f0000016300)=""/85}, {0x0, 0xff, &(0x7f0000016380)=""/255}, {0xabf260e2d34b7974, 0x14, &(0x7f0000016480)=""/20}, {0xffff1000, 0x1000, &(0x7f00000164c0)=""/4096}]}) ioctl$VHOST_SET_VRING_ENDIAN(r10, 0x4008af13, &(0x7f00000175c0)={0x3, 0x8}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, r8, &(0x7f0000017600)) r11 = syz_open_dev$audion(&(0x7f0000017680), 0x101, 0x40400) r12 = syz_mount_image$fuse(&(0x7f00000176c0), &(0x7f0000017700)='./file1\x00', 0x20980c, &(0x7f0000017740)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '%'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}, 0x1, 0x0, &(0x7f0000017800)="8f2af13730dd96aa558135683e5fc1b109fe878ef534e2e67d5fac395d010ddccf1cf029500c50b00b4965f163efc5831267c9d5e4cee8715435e8d639c45509ad1dda37972da058ad6b6baec59e347b91ce8b259ef2d3a07e36c8bd7e9540125029db6d65760378bb86cef7c68e303844a57d641c29") utimensat(r12, &(0x7f0000017880)='./file0\x00', &(0x7f00000178c0)={{0x0, 0x2710}}, 0x0) fallocate(r1, 0x12, 0x7, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) 2m27.223361625s ago: executing program 4 (id=2331): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x2, "fab1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x53ab, &(0x7f0000000480)={0x0, 0xe0df, 0x100, 0x3, 0x38d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x37, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1cf601d21911edab}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000c700000000000000950000"], &(0x7f0000000040)='GPL\x00'}, 0x94) io_uring_enter(r1, 0x47b8, 0x2669, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) ioctl$FS_IOC_GETVERSION(r6, 0x40045b0a, &(0x7f0000000000)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)={0x0, 0x12, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m11.981522425s ago: executing program 34 (id=2331): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x2, "fab1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x53ab, &(0x7f0000000480)={0x0, 0xe0df, 0x100, 0x3, 0x38d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x37, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1cf601d21911edab}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000c700000000000000950000"], &(0x7f0000000040)='GPL\x00'}, 0x94) io_uring_enter(r1, 0x47b8, 0x2669, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) ioctl$FS_IOC_GETVERSION(r6, 0x40045b0a, &(0x7f0000000000)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)={0x0, 0x12, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m16.030739115s ago: executing program 0 (id=2560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000904000000fcff401643911d15bcce7300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000200"/28], 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x204102) r4 = eventfd(0x6) r5 = eventfd2(0x7ff, 0x801) io_submit(r2, 0x3, &(0x7f0000000380)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x3, r3, &(0x7f00000000c0)="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", 0xfd, 0x6, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000240)="b017bb3e52124bc519230c8e49353533ac7f365de2b5aaf373048cb2b754877e", 0x20, 0x8, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f00000002c0)="a68fb13d8127a9e77d0ddbcc36142c5fbc764616086bd8b70821018e8543ef136059b743fcb84c59cb8f8078540cc211e0c32c08483a96a68c2730a1c6b6fc2508a6feccc3cc4aae3183a0f17039e17851532946a9daf2d1a08bc6f70c8d01b4b6ed5d28", 0x64, 0x8, 0x0, 0x1, r5}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = inotify_init1(0x80000) r7 = geteuid() quotactl_fd$Q_GETINFO(r6, 0xffffffff80000500, r7, &(0x7f00000003c0)) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m15.707430119s ago: executing program 0 (id=2561): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x84000000, 0x12d5c, 0x12d5c}}, 0x44) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r4], 0x118) mmap(&(0x7f00006df000/0x1000)=nil, 0x1000, 0x88fd537e5c114b6e, 0x20010, 0xffffffffffffffff, 0xddd82000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x0, 'vlan0\x00', {0x1}, 0xf}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000100)=0xc3f, 0xc06620, 0x4) syz_clone(0x6142c011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x67, 0x0, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) socket(0x2, 0x80805, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) 1m13.654940995s ago: executing program 0 (id=2567): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x280283) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r2 = dup3(r1, r0, 0x80000) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5c53, 0x154b, 0x20, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x280283) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000340)={0x10}, 0x10) dup3(r3, 0xffffffffffffffff, 0x80000) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 1m11.266001676s ago: executing program 0 (id=2579): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x3, 0xceeed7dd4dff4de4, 0xc, 0x0, 0xde}, 0xc) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1m10.453737951s ago: executing program 2 (id=2586): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001e00)=[{{&(0x7f0000000280)=@caif=@util, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000540)=""/213, 0xd5}, {&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/128, 0xffffffffffffff5f}, {&(0x7f00000007c0)=""/69, 0x45}], 0x6, &(0x7f0000000b80)=""/140, 0x7c}, 0xffff8001}, {{&(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/72, 0x48}], 0x1, &(0x7f0000000a80)=""/64, 0x40}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000ac0)=""/50, 0x32}, {&(0x7f0000000b00)=""/76, 0x4c}], 0x2}, 0x105}, {{&(0x7f0000001d40)=@rc={0x1f, @none}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000c40)=""/126, 0x7e}, {&(0x7f0000000cc0)=""/67, 0x43}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/81, 0x51}], 0x4}, 0x8}], 0x4, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffc, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) (async) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x1f, 0x0) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000301, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) (rerun: 32) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0xc0000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) (rerun: 32) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000c4000/0x3000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff}], 0x1, 0x1c3, 0x0, 0x0, 0x0, 0x2}) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x13) (rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xaece, 0x2) preadv(r8, &(0x7f00000000c0), 0x0, 0x4, 0x8) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) 1m10.128100391s ago: executing program 5 (id=2589): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9a090e, 0x0, '\x00', @value64=0x7}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m9.990086554s ago: executing program 2 (id=2590): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x2c2) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_ENDIAN(0x13, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14d2000002010500000000000000000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000340), 0x11000) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x356}, &(0x7f00000008c0), &(0x7f00000001c0)) 1m9.603129605s ago: executing program 5 (id=2592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = timerfd_create(0x0, 0x800) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%(0.', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r7 = socket(0x1e, 0x5, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r8, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, 0x0, 0x23b) syz_usb_connect(0x2, 0x24, &(0x7f00000043c0)={{0x12, 0x1, 0x0, 0x74, 0x4b, 0x9a, 0x40, 0x2013, 0x259, 0xe96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xc4, 0xa8, 0xa7}}]}}]}}, 0x0) 1m8.112778771s ago: executing program 2 (id=2596): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0xfffffff9, 0x0, 0x6, 0x0, 0xffdffdffffffffff, 0xfa0f, 0xffffbfff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES8=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="618c4387f5496dec4ba29866000100", @ANYRES16=r3, @ANYBLOB="000428bd7000fddbdf253700000008005700ce0500000800570005000000080026006c090000080027000100000008009f0003000000050018011c00000008002201050300000800a100260500000800a1000700000008002201d3020000"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4044800) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="87000000060000000000000000000000010000000000000004000000000000002fffffff00000000d5bf9d07fd942558c800b7160422a61d8f73f53dd51b4640330854718145dbb4eba0ffde92c580dba43ca2f59e0f02f178e65626b6ec802d004d3fc5fde005fd6192a885928782e5548e6a6497ada66ef9a75ac37a9b2726093933c3de8900"], 0x87) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x129142, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f0000000340)=0x200) write$sequencer(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0xc0205647, &(0x7f0000000080)=0x2) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x79af, 0x0, 0x7ffc, 0x259}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r7, 0x627, 0xc104effd, 0x43, 0x0, 0x0) 1m7.559306736s ago: executing program 7 (id=2597): setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="fae731c725a81ab0a2302e3be87d318c81f58a0ab2bb467f59fcfd946a7ea9f6b996ed8fa818d63c884b4f", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x3, 0x8008801) sendmmsg$inet6(r2, &(0x7f0000001240), 0x0, 0x0) 1m6.739926015s ago: executing program 0 (id=2598): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000a6ff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m6.7098366s ago: executing program 7 (id=2599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003000000000000000000e900000000000000140002"], 0x5c}}, 0x0) 1m5.894894883s ago: executing program 6 (id=2600): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000003e00)={&(0x7f0000001880)={0xa, 0x4e23, 0x1, @empty, 0x1c}, 0x1c, &(0x7f0000003c40)=[{&(0x7f0000001900)="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", 0x4f9}, {0x0, 0x12}], 0x2, &(0x7f0000003d00)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x6c, 0x0, '\x00', [@enc_lim]}}}, @tclass={{0x14, 0x29, 0x43, 0xc}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x1c, 0x12, '\x00', [@enc_lim={0x4, 0x1, 0xc}, @generic={0x7, 0x85, "bcd86bae7f94af3b63f646b9a12dccafcf00abd3855a797bc1f4e96152763e1448229ea8fcdf4b177b62fddf4ca96c93ce42a06882437742bef95a784096fec2673463fb2dfd4edaa0bbb35a1a8bd70981b2468da9e86d4c33924018052e765661a650463abd3c23e546a0cdf933c731adf568f79f3a01484511d5a6eff2a6303b7647eecc"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @pad1]}}}], 0xe8}, 0x40) 1m5.843165292s ago: executing program 0 (id=2601): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0100000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000006eefb3362a8c6d0e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000181100", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000001c0)=0x9) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0xbabb}}, './file0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x3, 0x365, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0x0, 0x0, 0x5e, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x54}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x25c25000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m5.839952531s ago: executing program 7 (id=2602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r2, &(0x7f00000014c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4621, 0x9, @mcast1, 0xa}, 0x1c, 0x0}}], 0x1, 0x80c4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWOBJ={0x50, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x3c, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8001}]}}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe, 0x2}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x12c}}, 0x0) r3 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x18, @string={0x18, 0x3, "e5e3d4bc18cfdfdb3cb6d319009bd51a165115437cf9"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0x22, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1m5.146712855s ago: executing program 6 (id=2603): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x10000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000000c0)={0x0, 0x80, 0x0, [0x7, 0x6b76, 0xcd, 0x2, 0x7b3], [0x7, 0xa40, 0x9, 0x10000000000000, 0x2, 0x7fff, 0xfffffffffffffff6, 0xe8b, 0x81, 0xa, 0x5, 0x4, 0x7fff, 0x7fffffff, 0x2, 0x400, 0x1, 0x2, 0x8, 0x7, 0x3ff, 0x1, 0x6, 0x0, 0x7, 0xe, 0x400, 0x5, 0x8, 0x8000000000000001, 0x42, 0x2, 0x80000001, 0x0, 0x8, 0x5, 0xf, 0x7, 0xd9a, 0x7f, 0x8000000000000000, 0x4, 0xfffffffffffffffb, 0x5, 0x4, 0x4, 0x0, 0xf, 0x6, 0x9, 0x3, 0x4, 0x9, 0x8, 0x7, 0x2d04, 0x7b9cd08, 0x3, 0xd, 0xe, 0x7, 0x7, 0x70d3, 0x1, 0x3b6, 0x3, 0x3, 0xfffffffffffffff8, 0x3, 0x4, 0x6, 0x8, 0x5, 0x12, 0x7, 0x4, 0x3, 0x5, 0x5, 0x5, 0x0, 0x7ff, 0xffffffff, 0xfffffffffffffffc, 0x5, 0xd, 0x8, 0xf900, 0x100000000, 0x0, 0x7fffffffffffffff, 0x3, 0x2, 0x5, 0x0, 0x0, 0x7f, 0x7fffffffffffffff, 0x1, 0x8001, 0x2, 0xa000000000000, 0x9, 0x7f, 0x7, 0x0, 0x8, 0x10001, 0x58, 0x80000001, 0x1b1, 0xff, 0x8000000000000001, 0x9, 0x9, 0x0, 0x78bd, 0x2, 0x0, 0x8d1, 0x7]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000500)={{r2}, r3, 0x1, @unused=[0x9, 0x4, 0x9, 0xfffffffffffffffc], @devid=r4}) fstatfs(r1, &(0x7f0000001500)=""/66) r5 = inotify_init() ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x3c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}}, 0x400c001) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000016c0), 0x4841, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r7, 0x80044dfb, &(0x7f0000001700)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000038c0)={'\x00', 0xc018, 0x395a000, 0x290, 0x71, 0x3, 0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000003ac0)=0x0) getresgid(&(0x7f0000003b00), &(0x7f0000003b40), &(0x7f0000003b80)=0x0) getresuid(&(0x7f0000003c40), &(0x7f0000003c80), &(0x7f0000003cc0)=0x0) lstat(&(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000003f40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0xee01]) read$FUSE(r1, &(0x7f0000003f80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000005fc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000008000)='./file0\x00', &(0x7f0000008040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000080c0)={0x0, 0x0, 0x0}, &(0x7f0000008100)=0xc) r20 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000008140)={{0x1, 0x1, 0x18, r7, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) read$FUSE(r1, &(0x7f0000008440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f000000a580)=0x0, &(0x7f000000a5c0)=0x0, &(0x7f000000a600)) r25 = getegid() syz_fuse_handle_req(r1, &(0x7f0000001740)="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", 0x2000, &(0x7f000000a780)={&(0x7f0000003740)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x9, 0x20000010, 0x1f8, 0x3, 0x1, 0x7f, 0x0, 0x0, 0x80, 0x2}}, &(0x7f00000037c0)={0x18, 0xfffffffffffffff5, 0x7, {0x8}}, &(0x7f0000003800)={0x18, 0x0, 0x7f, {0x9b3}}, &(0x7f0000003840)={0x18, 0x0, 0x8, {0x4}}, &(0x7f0000003880)={0x18, 0x0, 0xaebc, {0x9}}, &(0x7f0000003940)={0x28, 0xffffffffffffffda, 0x6, {{0x2, 0x7, 0x0, r8}}}, &(0x7f0000003980)={0x60, 0x0, 0xfffffffffffffffb, {{0xff, 0x1d64, 0x0, 0x5, 0x6, 0x13c, 0x6, 0xff}}}, &(0x7f0000003a00)={0x18, 0x0, 0x2, {0xd06}}, &(0x7f0000003a40)={0x13, 0xfffffffffffffffe, 0x1, {'@:\x00'}}, &(0x7f0000003a80)={0x20, 0x0, 0x456, {0x0, 0xe}}, &(0x7f0000003bc0)={0x78, 0x0, 0x100000000, {0x3, 0xc416, 0x0, {0x0, 0x1000, 0x8, 0x5, 0x5, 0xff, 0x3, 0x9, 0xfffffffc, 0x2000, 0x9, r9, r10, 0x6, 0x9}}}, &(0x7f0000003d00)={0x90, 0x0, 0x4, {0x2, 0x2, 0xd, 0x2, 0x9, 0x4, {0x1, 0x4, 0x5, 0x10d, 0x3ff, 0x1800000000, 0x1, 0x2, 0x5, 0x6000, 0x7, r11, 0xee00, 0x9, 0xffff}}}, &(0x7f0000003dc0)={0x88, 0x0, 0xffffffff, [{0x6, 0x8, 0xa, 0xec, '/dev/dsp1\x00'}, {0x5, 0x0, 0xd, 0xfff, '@\\%!/&]^^:)]-'}, {0x1, 0x5, 0xf, 0x5, '/dev/dri/card#\x00'}]}, &(0x7f0000008180)={0x2a0, 0x0, 0x7fffffff, [{{0x5, 0x3, 0xfffffffffffffffb, 0x1, 0x0, 0x1000, {0x4, 0x9, 0xe, 0xfffffffffffffffa, 0xd67d, 0x2, 0x2, 0x6, 0x600000, 0x4000, 0xd4, r12, r13, 0xffff, 0x3}}, {0x3, 0x0, 0x1, 0xfffffffa, '{'}}, {{0x1, 0x3, 0x1, 0x9, 0x8, 0x9, {0x4, 0x7fff, 0x8, 0x1, 0x0, 0x800, 0x9, 0x40, 0xf83, 0xd000, 0x5, r16, r17, 0x30, 0x3}}, {0x3, 0x4207, 0xa, 0x6, '/dev/dsp1\x00'}}, {{0x3, 0x1, 0x1, 0x3, 0x1, 0x0, {0x2, 0x7, 0x5, 0x6, 0x9, 0x39d, 0x84a, 0x6, 0x7, 0xa000, 0xa, r18, r19, 0x5, 0x3a72}}, {0x0, 0x2, 0x6, 0x0, '#.#\xd0%['}}, {{0x5, 0x3, 0xa1, 0x14000000, 0xc, 0x0, {0x3, 0x5, 0x1, 0x1, 0x2, 0x3, 0x3, 0xfffffff7, 0xb, 0x4000, 0x4, r20, r21, 0x1, 0x1ff}}, {0x3, 0x7, 0xf, 0xffffffff, '/dev/dri/card#\x00'}}]}, &(0x7f000000a480)={0xa0, 0xfffffffffffffff5, 0xffffffffa8d6141c, {{0x5, 0x3, 0x9, 0xfffffffffffff1ac, 0x4, 0x4, {0x3, 0x4000, 0x7fffffff, 0x9, 0xfffffffffffffffe, 0x1, 0x1, 0x4, 0x0, 0x6000, 0x2, r22, 0xee00, 0x7, 0x2}}, {0x0, 0x16}}}, &(0x7f000000a540)={0x20, 0x0, 0x7, {0x5, 0x0, 0xfffffb29, 0x3}}, &(0x7f000000a640)={0x130, 0x0, 0x5, {0x2, 0x7f0, 0x0, '\x00', {0x4, 0x5, 0x5, 0x1, r24, r25, 0xa000, '\x00', 0x1, 0x1, 0x7fffffffffffffff, 0xcf2, {0x0, 0x5}, {0x100000000, 0x401}, {0x7, 0xb7f}, {0x9, 0x800}, 0x200, 0x400, 0xf, 0x6}}}}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) lsetxattr$system_posix_acl(&(0x7f000000a840)='./file0\x00', &(0x7f000000a880)='system.posix_acl_default\x00', &(0x7f000000c900)={{}, {0x1, 0x1}, [{0x2, 0x5, r18}, {0x2, 0x1, r23}], {0x4, 0x1}, [{0x8, 0x3, r19}, {0x8, 0x2}, {0x8, 0x1, r13}, {0x8, 0x3, r19}, {0x8, 0x1, r19}, {0x8, 0x6, r14}, {0x8, 0x5, r15}, {0x8, 0x0, r25}], {0x10, 0x6}}, 0x74, 0x7) 1m5.012627957s ago: executing program 5 (id=2604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000040)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f848b880180000000000000f23c00f21f83500000d000f23f80f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x7b}], 0x1, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000040)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f848b880180000000000000f23c00f21f83500000d000f23f80f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x7b}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x4, 0x7, 0x8, 0x14, 0x2, 0x1, 0x5, 0x9, 0x28, 0x2, 0x1, 0x6, 0x0, 0x6e, 0x8a, 0x3}}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup(r3) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_pidfd_open(r6, 0x0) (async) r7 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r7, r7, 0x0) (async) pidfd_getfd(r7, r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000040)={r8, @in6={{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}}}, &(0x7f0000000100)=0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000100)={0x4, 0x1, 0x3}) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m3.322292655s ago: executing program 2 (id=2605): symlink(&(0x7f0000000040)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') (async) r0 = syz_usb_connect(0x2, 0x239, &(0x7f00000001c0)=ANY=[@ANYRES8], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async, rerun: 32) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) (rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000180)) (async) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="6a439e6e4a90", 0x6}, {0x0}], 0x2) 1m3.20682663s ago: executing program 6 (id=2606): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0xd, 0x0, 0x0, 0xb, 0x693, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1}, &(0x7f0000000080)={0x7, 0x0, 0x80000000000000, 0x0, 0x100000001, 0x9, 0x1, 0x400000}, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000700)={r0, 0xffffffffffffffff, 0xe80, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x3}}, 0x1e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00', 0x400}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) 1m1.821737125s ago: executing program 5 (id=2607): socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) (async) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (rerun: 64) ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f0000000380)={0xff0f}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0xfffffffffffffeed, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x80}}], 0x1, 0x400c894) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa012ee09580c20000004cbb24b50800462d0c2ad36e1a5f7facb2f1fea75c00000000000006a50000", @ANYRES32=0x41424344, @ANYBLOB="504400009078"], 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = socket(0x10, 0x80003, 0x0) write(r7, &(0x7f00000000c0)="240000001a005f0214f9f4e6ff1704c7a0000000fe0000000000aa", 0xfffffffffffffe87) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) (async) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) 1m1.779731626s ago: executing program 6 (id=2608): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) readahead(r0, 0x0, 0x2000000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x4, 0x5, 0xc, 0x10000, 0xfffffffffffffffe, 0xc, 0x8, 0x0, 0xffffffffffffffff, 0x10001, 0x7f, 0xffffffffffffffc0, 0x0, 0x5], 0x7c6bd248465d0acd}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000002c0)={'syztnl0\x00', r5, 0x8000, 0x8, 0x5f70, 0x9, {{0x8, 0x4, 0x3, 0xf, 0x20, 0x68, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@rr={0x7, 0x7, 0x16, [@local]}, @ssrr={0x89, 0x3, 0xf7}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x6, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0xf0f027, 0x2}) 1m1.323005264s ago: executing program 7 (id=2609): setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="fae731c725a81ab0a2302e3be87d318c81f58a0ab2bb467f59fcfd946a7ea9f6b996ed8fa818d63c884b4f", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x3, 0x8008801) sendmmsg$inet6(r2, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m0.720546384s ago: executing program 6 (id=2610): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8c81, 0x0) 1m0.543992938s ago: executing program 5 (id=2611): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xab}], 0x1, 0x3be57ba6648a97ba, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x800003f, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000f9a000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x54, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x18c244}], 0x10000000000000c5) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m0.376861705s ago: executing program 7 (id=2612): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbff, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x55, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100121, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbff, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) sendto$inet(r0, &(0x7f0000000000), 0x55, 0xb, 0x0, 0x0) (async) recvfrom$inet(r0, 0x0, 0x0, 0xc9100121, 0x0, 0x0) (async) 59.608962911s ago: executing program 2 (id=2613): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x2, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setgroups(0x0, 0x0) lremovexattr(0x0, &(0x7f0000000100)=@known='system.posix_acl_access\x00') r1 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVe{;De', 0x0) keyctl$get_security(0x11, r1, &(0x7f0000000140)=""/168, 0xa8) 59.530563523s ago: executing program 7 (id=2614): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="20160b000000002717f0"], 0x0, 0x0, 0x0, 0x0, 0x0}) 59.485399666s ago: executing program 5 (id=2615): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000020, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000580)="b49713c02fd2205df8a4617a4b956db62c794f364998d95529a8a4a3e28b288614e93b53f051d608ae95e9f86e8ce21ebbbae4f101f4acc92945cbe50573db39f75463ee99cb40e093576422d65375efe927d8f7"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="14", 0x1}], 0x1}, 0x800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4004040) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0x3, "8d"}, @global=@item_012={0x2, 0x1, 0x4, "b314"}]}}, 0x0}, 0x0) 58.862527829s ago: executing program 2 (id=2616): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x70bd2d, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r1}}, 0x18}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000000000000700000001440e05"], 0x20}}], 0x1, 0x400c4) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r4 = dup(r3) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r4, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106e05fe00000000000001240224000100ff6a2f7f9eff69b10300010009210200b7933c52da92de07012207000905810300000000008bbeee30660bd382104b6dff1c203a2aef3287cb08b6733ac6b33f5945e45bca55cf2f5c8824e81ce7f553e075fdf2c717f910790497b08b43cf83b124654206b56ee19ab63c1c688f1aa795ebe3eedd68115fa51216f21dadc08641229289895f4989a2e01a50833e8e9a62bdd2d0e9f1ab4771536e266bf97616059f9a321dd084bcd703763f7ba832c9c4143e2e66ac72f9ca2e116dc2de0e8eac"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000280)={0x9, 0x1000, 0x2, {0x0, @sliced={0x2, [0x0, 0x5, 0xfffe, 0x2, 0x4, 0xef, 0x9, 0x9, 0x4, 0x5, 0x81, 0x40e3, 0xff00, 0x8, 0xff01, 0x0, 0x2, 0x8, 0x4, 0xfc82, 0x200, 0xa8d, 0x28f0, 0x8, 0x1, 0x81, 0xfffc, 0x7f, 0x400, 0xc6e, 0x5, 0xe, 0xf2a1, 0x4, 0xf4c, 0x5, 0x7, 0x9, 0xffff, 0x5, 0x9, 0x4, 0xb2fa, 0x1, 0x48, 0x3, 0x40, 0x9a], 0x3}}, 0x6b7}) 56.472084491s ago: executing program 6 (id=2617): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) unshare(0x42000000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x80000000) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) (async) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) (async) unshare(0x42000000) (async) 0s ago: executing program 35 (id=2601): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0100000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000006eefb3362a8c6d0e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000181100", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000001c0)=0x9) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0xbabb}}, './file0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x3, 0x365, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0x0, 0x0, 0x5e, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x54}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x25c25000) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 48748][ T5890] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 631.056356][ T5890] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 631.069338][ T5890] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 631.089882][ T5890] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 631.116635][ T5890] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 631.138520][ T5890] mcp2221 0003:04D8:00DD.0030: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 631.262297][ T5890] usb 1-1: USB disconnect, device number 23 [ 631.345880][T14382] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2186'. [ 631.380033][T14381] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2186'. [ 633.181929][T14433] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2198'. [ 633.255591][T14432] netlink: 'syz.6.2197': attribute type 30 has an invalid length. [ 633.788715][T14443] fuse: Bad value for 'group_id' [ 633.795246][ T6551] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 633.834928][T14443] fuse: Bad value for 'group_id' [ 633.965736][ T6551] usb 7-1: Using ep0 maxpacket: 16 [ 633.976831][ T6551] usb 7-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.014821][ T6551] usb 7-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.070512][ T6551] usb 7-1: config 0 interface 0 has no altsetting 0 [ 634.124799][ T129] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 634.163763][ T6551] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 634.201652][ T6551] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.237013][ T6551] usb 7-1: config 0 descriptor?? [ 634.331506][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.352363][ T129] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.380715][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.415895][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.455152][ T129] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 634.455964][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.464252][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.759401][ T6551] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 634.792211][ T6551] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 634.802536][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'. [ 634.973717][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'. [ 635.036796][ T129] usb 6-1: config 0 descriptor?? [ 635.227672][ T6551] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 635.275140][ T6551] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 635.318331][ T6551] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0 [ 635.339597][ T6551] mcp2221 0003:04D8:00DD.0031: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 635.461627][ T129] logitech-djreceiver 0003:046D:C52F.0032: unknown main item tag 0x0 [ 635.493898][ T6551] usb 7-1: USB disconnect, device number 24 [ 635.514783][ T129] logitech-djreceiver 0003:046D:C52F.0032: unknown main item tag 0x0 [ 635.542708][ T129] logitech-djreceiver 0003:046D:C52F.0032: unknown main item tag 0x0 [ 635.585517][ T129] logitech-djreceiver 0003:046D:C52F.0032: unknown main item tag 0x0 [ 635.593660][ T129] logitech-djreceiver 0003:046D:C52F.0032: unknown main item tag 0x0 [ 635.664225][ T5876] usb 6-1: USB disconnect, device number 100 [ 635.833104][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.848315][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.916081][ T6551] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 635.948709][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2212'. [ 636.074928][ T6551] usb 7-1: Using ep0 maxpacket: 16 [ 636.094603][ T6551] usb 7-1: config 60 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.097723][T14479] netlink: 'syz.2.2215': attribute type 3 has an invalid length. [ 636.106396][ T6551] usb 7-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 636.124284][ T6551] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.255697][T14479] netlink: 'syz.2.2215': attribute type 3 has an invalid length. [ 636.270350][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2215'. [ 636.288618][T14486] netlink: 'syz.5.2216': attribute type 1 has an invalid length. [ 636.304351][T14481] netlink: 'syz.4.2214': attribute type 4 has an invalid length. [ 636.348798][ T6551] usb 7-1: string descriptor 0 read error: -71 [ 636.375661][ T6551] usbhid 7-1:60.0: can't add hid device: -71 [ 636.388875][ T6551] usbhid 7-1:60.0: probe with driver usbhid failed with error -71 [ 636.418870][ T6551] usb 7-1: USB disconnect, device number 25 [ 637.044863][ T5876] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 637.194895][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 637.218724][ T5876] usb 6-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 637.240666][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.274793][ T5876] usb 6-1: Product: syz [ 637.287719][ T5876] usb 6-1: Manufacturer: syz [ 637.302694][ T5876] usb 6-1: SerialNumber: syz [ 637.316903][ T5904] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 637.319376][ T5876] usb 6-1: config 0 descriptor?? [ 637.477148][ T5904] usb 7-1: Using ep0 maxpacket: 16 [ 637.493847][ T5904] usb 7-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.524923][ T5904] usb 7-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.536658][ T5904] usb 7-1: config 0 interface 0 has no altsetting 0 [ 637.543306][ T5904] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 637.555520][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.567986][ T5904] usb 7-1: config 0 descriptor?? [ 637.620049][T14501] syzkaller0: entered promiscuous mode [ 637.625947][T14501] syzkaller0: entered allmulticast mode [ 637.642986][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 637.643002][ T30] audit: type=1326 audit(1765215216.062:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 637.647191][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 637.661532][ T30] audit: type=1326 audit(1765215216.072:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 637.712166][ T30] audit: type=1326 audit(1765215216.072:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 637.749030][ T30] audit: type=1326 audit(1765215216.072:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 637.771765][ T30] audit: type=1326 audit(1765215216.072:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 637.794423][ T30] audit: type=1326 audit(1765215216.072:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 637.818901][ T30] audit: type=1326 audit(1765215216.082:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 637.846912][ T9] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 637.849606][ T30] audit: type=1326 audit(1765215216.082:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 637.885848][ T9] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 637.898184][ T30] audit: type=1326 audit(1765215216.082:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 637.898635][ T9] usb 3-1: config 171 has no interface number 0 [ 637.922659][ T30] audit: type=1326 audit(1765215216.082:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.0.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 637.953467][ T9] usb 3-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 637.966267][ T9] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 637.976916][ T9] usb 3-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 637.994345][ T5904] mcp2221 0003:04D8:00DD.0033: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 638.008107][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 638.017324][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.025542][ T5890] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 638.036453][ T9] usb 3-1: Product: syz [ 638.040659][ T9] usb 3-1: Manufacturer: syz [ 638.045457][ T9] usb 3-1: SerialNumber: syz [ 638.053576][T14497] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 638.116137][ T5904] usb 6-1: USB disconnect, device number 101 [ 638.189920][ T5890] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 638.203255][ T5890] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 638.211436][ T6551] usb 7-1: USB disconnect, device number 26 [ 638.215715][ T5890] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 638.229581][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.267244][T14503] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 638.307379][ T5890] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 638.516239][T14512] netlink: 'syz.2.2221': attribute type 21 has an invalid length. [ 638.521216][ T5890] usb 1-1: USB disconnect, device number 24 [ 638.536448][T14512] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2221'. [ 639.084884][ T129] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 639.085120][ T9] ath6kl: Failed to submit usb control message: -110 [ 639.100156][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 639.108507][ T9] ath6kl: Unable to send get target info: -110 [ 639.123887][ T9] ath6kl: Failed to init ath6kl core: -110 [ 639.132670][ T9] ath6kl_usb 3-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 639.234776][ T129] usb 6-1: Using ep0 maxpacket: 32 [ 639.243663][ T129] usb 6-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 639.255516][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.276444][ T129] usb 6-1: Product: syz [ 639.283199][ T129] usb 6-1: Manufacturer: syz [ 639.305490][ T129] usb 6-1: SerialNumber: syz [ 639.325116][ T129] usb 6-1: config 0 descriptor?? [ 639.342988][ T129] usb 6-1: bad CDC descriptors [ 639.545326][T14524] usb usb8: usbfs: process 14524 (syz.5.2229) did not claim interface 0 before use [ 639.569462][ T5876] usb 6-1: USB disconnect, device number 102 [ 640.103058][T14540] IPVS: Unknown mcast interface: vxcan1 [ 640.346476][T14545] netlink: 'syz.4.2234': attribute type 10 has an invalid length. [ 640.363903][ T5926] usb 3-1: USB disconnect, device number 36 [ 640.366787][T14545] netlink: 'syz.4.2234': attribute type 10 has an invalid length. [ 640.519736][T14551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.529671][T14551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.549644][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'. [ 640.716325][T14557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2239'. [ 640.774068][T14559] netlink: 'syz.6.2238': attribute type 13 has an invalid length. [ 640.907172][T14559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 640.984316][T14565] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 641.048604][T14565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 641.085195][ T5890] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 641.136422][T14567] bond3: (slave gretap1): making interface the new active one [ 641.154954][T14567] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 641.281339][ T5890] usb 7-1: config 0 has an invalid interface number: 98 but max is 0 [ 641.291750][ T5890] usb 7-1: config 0 has no interface number 0 [ 641.342341][ T5890] usb 7-1: too many endpoints for config 0 interface 98 altsetting 121: 116, using maximum allowed: 30 [ 641.370981][ T5890] usb 7-1: config 0 interface 98 altsetting 121 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 641.388398][ T5890] usb 7-1: config 0 interface 98 has no altsetting 0 [ 641.399068][ T5926] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 641.424874][ T5890] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 641.446931][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.467329][ T5890] usb 7-1: config 0 descriptor?? [ 641.544122][T14585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.563652][T14585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.582805][T14585] netlink: 'syz.4.2249': attribute type 39 has an invalid length. [ 641.584808][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 641.603712][T14587] netlink: 'syz.5.2248': attribute type 46 has an invalid length. [ 641.603910][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.613606][T14587] netlink: 'syz.5.2248': attribute type 19 has an invalid length. [ 641.644464][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.661586][ T5926] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 641.671342][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.699875][T14588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.700854][ T5926] usb 3-1: config 0 descriptor?? [ 641.711228][T14588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.728580][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2248'. [ 641.896324][T14592] binder: 14591:14592 ioctl 40046205 0 returned -22 [ 642.011405][T14592] netlink: 'syz.4.2250': attribute type 158 has an invalid length. [ 642.115893][T14597] input: syz0 as /devices/virtual/input/input94 [ 642.131063][T14597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.142140][T14597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.164063][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 642.183226][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 642.216585][ T5926] usb 3-1: USB disconnect, device number 37 [ 642.299369][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2252'. [ 642.332058][T14603] hsr_slave_0: left promiscuous mode [ 642.355182][T14603] hsr_slave_1: left promiscuous mode [ 642.784951][ T6551] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 642.815114][ T129] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 642.938449][ T6551] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.950457][ T6551] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 642.960330][ T6551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.968581][ T129] usb 6-1: Using ep0 maxpacket: 16 [ 642.973825][ T6551] usb 1-1: Product: syz [ 642.978139][ T6551] usb 1-1: Manufacturer: syz [ 642.982930][ T6551] usb 1-1: SerialNumber: syz [ 642.989705][ T129] usb 6-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.002639][ T6551] usb 1-1: config 0 descriptor?? [ 643.008954][ T129] usb 6-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.021664][ T129] usb 6-1: config 0 interface 0 has no altsetting 0 [ 643.028401][ T129] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 643.037831][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.050607][ T129] usb 6-1: config 0 descriptor?? [ 643.221563][ T6551] usb-storage 1-1:0.0: USB Mass Storage device detected [ 643.315628][ T6551] usb 1-1: USB disconnect, device number 25 [ 643.476085][ T129] hid_parser_main: 7 callbacks suppressed [ 643.476107][ T129] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 643.500987][ T129] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 643.508657][ T129] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 643.543445][ T129] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 643.550711][ T129] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 643.559061][ T129] mcp2221 0003:04D8:00DD.0034: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 643.669786][T14623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.699360][T14623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.813882][ T129] usb 6-1: USB disconnect, device number 103 [ 643.873064][ T5890] usb 7-1: string descriptor 0 read error: -71 [ 643.891033][ T5890] cp210x 7-1:0.98: cp210x converter detected [ 643.897493][ T5890] cp210x 7-1:0.98: failed to get vendor val 0x370b size 1: -71 [ 643.906760][ T5890] cp210x 7-1:0.98: querying part number failed [ 643.916799][ T5890] usb 7-1: cp210x converter now attached to ttyUSB0 [ 643.937303][ T5890] usb 7-1: USB disconnect, device number 27 [ 643.952325][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 643.965578][ T5890] cp210x 7-1:0.98: device disconnected [ 645.053646][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 645.053668][ T30] audit: type=1800 audit(1765215223.472:3009): pid=14630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2258" name="bus" dev="ramfs" ino=61004 res=0 errno=0 [ 645.120634][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 645.282123][T14651] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 645.871607][T14661] input: syz0 as /devices/virtual/input/input95 [ 646.239931][ T5890] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 646.495788][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.644573][ T5890] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 646.694862][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 646.712807][ T5890] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 646.734771][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.774530][ T5890] usb 3-1: config 0 descriptor?? [ 646.784486][ T5890] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 646.811562][ T5890] dvb-usb: bulk message failed: -22 (3/0) [ 646.862909][ T5890] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 646.875078][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 646.908129][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 646.924899][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.946749][ T9] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 646.955901][ T5890] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 646.963193][ T5890] usb 3-1: media controller created [ 646.971609][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.983399][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.995720][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 647.017536][ T9] usb 1-1: config 1 has no interface number 0 [ 647.023663][ T9] usb 1-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid wMaxPacketSize 0 [ 647.062031][ T9] usb 1-1: config 1 interface 138 altsetting 252 bulk endpoint 0xC has invalid maxpacket 0 [ 647.074524][ T5890] dvb-usb: bulk message failed: -22 (6/0) [ 647.086157][T14674] i2c i2c-1: Invalid block read size 33 [ 647.093297][ T5890] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 647.118717][ T9] usb 1-1: config 1 interface 138 has no altsetting 0 [ 647.128548][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input96 [ 647.143506][ T9] usb 1-1: New USB device found, idVendor=0cb8, idProduct=0bde, bcdDevice=5f.e0 [ 647.154916][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.163534][ T9] usb 1-1: Product: syz [ 647.169694][ T9] usb 1-1: Manufacturer: А [ 647.175623][ T5890] dvb-usb: schedule remote query interval to 150 msecs. [ 647.183214][ T5890] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 647.234650][ T9] usb 1-1: SerialNumber: syz [ 647.335118][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 647.340931][ T5890] dvb-usb: error while querying for an remote control event. [ 647.518717][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 647.545256][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 647.567359][ T5890] dvb-usb: error while querying for an remote control event. [ 647.609580][ T9] usb 1-1: USB disconnect, device number 26 [ 647.673922][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.728429][T14681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.758924][T14681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2271'. [ 647.775147][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 647.789765][ T5926] dvb-usb: error while querying for an remote control event. [ 647.906800][T14688] netlink: 'syz.4.2272': attribute type 2 has an invalid length. [ 647.952383][T14688] : entered promiscuous mode [ 647.958085][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 647.969672][ T5926] dvb-usb: error while querying for an remote control event. [ 648.009580][T14692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.035434][T14692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.038543][T14688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.058226][T14688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.136462][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 648.143009][ T5926] dvb-usb: error while querying for an remote control event. [ 648.334890][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 648.350975][ T5926] dvb-usb: error while querying for an remote control event. [ 648.545310][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 648.604773][ T5926] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 648.776426][ T9] dvb-usb: error while querying for an remote control event. [ 648.791208][T14707] cgroup: fork rejected by pids controller in /syz4 [ 648.814836][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 648.836759][ T5926] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 648.845147][ T5926] usb 1-1: config 0 has no interface number 0 [ 648.853228][ T5926] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.897230][ T5926] usb 1-1: config 0 interface 85 has no altsetting 0 [ 648.906908][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 648.921336][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.929648][ T5926] usb 1-1: Product: syz [ 648.933795][ T5926] usb 1-1: Manufacturer: syz [ 648.942680][ T5890] usb 3-1: USB disconnect, device number 38 [ 648.965076][ T9] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 648.980358][ T5926] usb 1-1: SerialNumber: syz [ 648.989225][ T5890] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 649.004231][ T5926] usb 1-1: config 0 descriptor?? [ 649.185073][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 649.191916][ T9] usb 6-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.204242][ T9] usb 6-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.217456][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 649.224164][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 649.306789][ T5926] appletouch 1-1:0.85: Failed to read mode from device. [ 649.318617][ T5926] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 649.377495][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.398489][ T5926] usb 1-1: USB disconnect, device number 27 [ 649.411703][ T9] usb 6-1: config 0 descriptor?? [ 649.818108][T14768] input: syz0 as /devices/virtual/input/input98 [ 649.851687][T14770] program syz.2.2282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 650.389850][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.405653][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.475055][ T5890] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 650.624975][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 650.632738][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 650.646242][ T5890] usb 1-1: config 248 has an invalid interface number: 3 but max is 2 [ 650.661572][ T5890] usb 1-1: config 248 has an invalid interface number: 190 but max is 2 [ 650.672988][ T5890] usb 1-1: config 248 has an invalid interface number: 111 but max is 2 [ 650.683838][ T5890] usb 1-1: config 248 has no interface number 0 [ 650.696503][ T5890] usb 1-1: config 248 has no interface number 1 [ 650.715258][ T5890] usb 1-1: config 248 has no interface number 2 [ 650.740502][ T5890] usb 1-1: config 248 interface 3 has no altsetting 0 [ 650.749246][ T5890] usb 1-1: config 248 interface 190 has no altsetting 0 [ 650.777648][ T5890] usb 1-1: config 248 interface 111 has no altsetting 0 [ 650.811028][ T5890] usb 1-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=91.28 [ 650.822960][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.839137][ T5890] usb 1-1: Product: syz [ 650.856873][ T5890] usb 1-1: Manufacturer: ї [ 650.870287][ T5890] usb 1-1: SerialNumber: syz [ 651.561313][ T5890] usb 1-1: USB disconnect, device number 28 [ 651.749775][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 651.756151][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 651.772539][T14809] vim2m vim2m.0: vidioc_s_fmt queue busy [ 651.824638][ T9] usb 6-1: USB disconnect, device number 104 [ 651.997534][T14814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.065251][T14814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.074574][T14814] FAULT_INJECTION: forcing a failure. [ 652.074574][T14814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.124342][T14814] CPU: 0 UID: 0 PID: 14814 Comm: syz.4.2288 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.124376][T14814] Tainted: [L]=SOFTLOCKUP [ 652.124382][T14814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 652.124393][T14814] Call Trace: [ 652.124401][T14814] [ 652.124411][T14814] dump_stack_lvl+0x189/0x250 [ 652.124438][T14814] ? __pfx____ratelimit+0x10/0x10 [ 652.124460][T14814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.124480][T14814] ? __pfx__printk+0x10/0x10 [ 652.124503][T14814] ? __might_fault+0xb0/0x130 [ 652.124536][T14814] should_fail_ex+0x414/0x560 [ 652.124562][T14814] _copy_from_user+0x2d/0xb0 [ 652.124589][T14814] kstrtouint_from_user+0xc4/0x170 [ 652.124614][T14814] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 652.124651][T14814] proc_fail_nth_write+0x88/0x200 [ 652.124670][T14814] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 652.124691][T14814] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 652.124709][T14814] vfs_write+0x27e/0xb30 [ 652.124735][T14814] ? __pfx_vfs_write+0x10/0x10 [ 652.124754][T14814] ? __fget_files+0x2a/0x420 [ 652.124780][T14814] ? __fget_files+0x3a0/0x420 [ 652.124798][T14814] ? __fget_files+0x2a/0x420 [ 652.124827][T14814] ksys_write+0x145/0x250 [ 652.124843][T14814] ? __fget_files+0x2a/0x420 [ 652.124865][T14814] ? __pfx_ksys_write+0x10/0x10 [ 652.124899][T14814] ? do_syscall_64+0xbe/0xf80 [ 652.124925][T14814] do_syscall_64+0xfa/0xf80 [ 652.124948][T14814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.124966][T14814] ? clear_bhb_loop+0x60/0xb0 [ 652.124989][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.125007][T14814] RIP: 0033:0x7f672898e1ff [ 652.125024][T14814] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 652.125040][T14814] RSP: 002b:00007f6729746030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 652.125061][T14814] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f672898e1ff [ 652.125074][T14814] RDX: 0000000000000001 RSI: 00007f67297460a0 RDI: 0000000000000004 [ 652.125087][T14814] RBP: 00007f6729746090 R08: 0000000000000000 R09: 0000000000000000 [ 652.125099][T14814] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 652.125110][T14814] R13: 00007f6728be6038 R14: 00007f6728be5fa0 R15: 00007f6728d0fa28 [ 652.125143][T14814] [ 652.465993][ T39] hid (null): unknown global tag 0xc [ 652.495788][ T9] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 652.524451][ T39] hid (null): invalid report_count 14768 [ 652.549365][ T39] hid (null): report_id 35957 is invalid [ 652.579701][ T39] hid (null): report_id 0 is invalid [ 652.601820][ T39] hid-generic 0010:818C:0003.0035: reserved main item tag 0xe [ 652.635179][ T39] hid-generic 0010:818C:0003.0035: unknown global tag 0xc [ 652.676731][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 652.721691][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.744825][ T39] hid-generic 0010:818C:0003.0035: item 0 2 1 12 parsing failed [ 652.745066][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 652.784777][ T5890] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 652.825623][ T39] hid-generic 0010:818C:0003.0035: probe with driver hid-generic failed with error -22 [ 652.850812][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 652.885370][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 652.903693][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 652.926102][ T9] usb 6-1: Product: syz [ 652.934812][ T9] usb 6-1: Manufacturer: syz [ 652.965053][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 652.978133][ T9] cdc_wdm 6-1:1.0: invalid descriptor buffer length [ 652.999336][ T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 653.007611][ T5911] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 653.038347][ T5890] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.071622][ T5890] usb 7-1: config 0 has no interfaces? [ 653.106312][ T5890] usb 7-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 653.131494][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.166466][ T9] usb 6-1: USB disconnect, device number 105 [ 653.193919][ T5890] usb 7-1: config 0 descriptor?? [ 653.199779][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 653.209912][ T5911] usb 1-1: config index 0 descriptor too short (expected 2340, got 36) [ 653.245596][ T5911] usb 1-1: config 102 has too many interfaces: 64, using maximum allowed: 32 [ 653.289754][ T5911] usb 1-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config [ 653.329805][ T5911] usb 1-1: config 102 has 0 interfaces, different from the descriptor's value: 64 [ 653.350208][ T5911] usb 1-1: New USB device found, idVendor=28bd, idProduct=0004, bcdDevice= 0.00 [ 653.362590][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.434783][ T39] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 653.564933][ T39] usb 3-1: device descriptor read/64, error -71 [ 653.592108][ T5911] usb 1-1: string descriptor 0 read error: -71 [ 653.612512][ T5911] usb 1-1: USB disconnect, device number 29 [ 653.816478][ T39] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 653.954844][ T39] usb 3-1: device descriptor read/64, error -71 [ 653.995520][T14860] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 654.063582][ T5876] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 654.071819][ T39] usb usb3-port1: attempt power cycle [ 654.415223][ T9] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 654.423910][ T5876] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 654.454807][ T39] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 654.974414][ T39] usb 3-1: device descriptor read/8, error -71 [ 655.025519][ T5876] usb 6-1: config 0 has no interface number 0 [ 655.037903][ T5876] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 655.051238][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.062300][ T5876] usb 6-1: config 0 descriptor?? [ 655.070842][ T5876] cp210x 6-1:0.1: cp210x converter detected [ 655.076015][ T9] usb 1-1: device descriptor read/64, error -71 [ 655.224906][ T39] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 655.245220][ T39] usb 3-1: device descriptor read/8, error -71 [ 655.314589][ T5876] cp210x 6-1:0.1: failed to get vendor val 0x370b size 1: -71 [ 655.314810][ T9] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 655.331512][ T5876] cp210x 6-1:0.1: querying part number failed [ 655.368364][ T39] usb usb3-port1: unable to enumerate USB device [ 655.391220][ T5876] usb 6-1: cp210x converter now attached to ttyUSB0 [ 655.418086][ T5876] usb 6-1: USB disconnect, device number 106 [ 655.432208][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 655.449467][ T5876] cp210x 6-1:0.1: device disconnected [ 655.458952][T14874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.474191][T14874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.495992][ T9] usb 1-1: device descriptor read/64, error -71 [ 655.513956][T14875] kvm: user requested TSC rate below hardware speed [ 655.522928][T14875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261517534 (8523035068 ns) > initial count (7554138186 ns). Using initial count to start timer. [ 655.597957][T14876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.605167][ T9] usb usb1-port1: attempt power cycle [ 655.617868][T14876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.944847][ T9] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 655.965761][ T9] usb 1-1: device descriptor read/8, error -71 [ 656.076806][ T5890] usb 7-1: USB disconnect, device number 28 [ 656.123774][T14883] FAULT_INJECTION: forcing a failure. [ 656.123774][T14883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.152954][T14883] CPU: 1 UID: 0 PID: 14883 Comm: syz.6.2309 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.152984][T14883] Tainted: [L]=SOFTLOCKUP [ 656.152992][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.153002][T14883] Call Trace: [ 656.153011][T14883] [ 656.153020][T14883] dump_stack_lvl+0x189/0x250 [ 656.153047][T14883] ? __pfx____ratelimit+0x10/0x10 [ 656.153091][T14883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.153110][T14883] ? __pfx__printk+0x10/0x10 [ 656.153134][T14883] ? __might_fault+0xb0/0x130 [ 656.153170][T14883] should_fail_ex+0x414/0x560 [ 656.153196][T14883] _copy_from_user+0x2d/0xb0 [ 656.153221][T14883] __sys_bpf+0x1e3/0x860 [ 656.153255][T14883] ? __pfx___sys_bpf+0x10/0x10 [ 656.153291][T14883] ? ksys_write+0x22a/0x250 [ 656.153311][T14883] ? __pfx_ksys_write+0x10/0x10 [ 656.153332][T14883] __x64_sys_bpf+0x7c/0x90 [ 656.153362][T14883] do_syscall_64+0xfa/0xf80 [ 656.153392][T14883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.153414][T14883] ? clear_bhb_loop+0x60/0xb0 [ 656.153434][T14883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.153451][T14883] RIP: 0033:0x7ff46cb8f749 [ 656.153474][T14883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.153495][T14883] RSP: 002b:00007ff46d9b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.153515][T14883] RAX: ffffffffffffffda RBX: 00007ff46cde5fa0 RCX: 00007ff46cb8f749 [ 656.153529][T14883] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000004 [ 656.153541][T14883] RBP: 00007ff46d9b3090 R08: 0000000000000000 R09: 0000000000000000 [ 656.153553][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.153563][T14883] R13: 00007ff46cde6038 R14: 00007ff46cde5fa0 R15: 00007ff46cf0fa28 [ 656.153755][T14883] [ 656.215574][ T9] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 656.430908][ T9] usb 1-1: device descriptor read/8, error -71 [ 656.545658][ T9] usb usb1-port1: unable to enumerate USB device [ 656.724809][ T5890] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 656.794833][ T39] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 656.887276][ T5890] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 656.904329][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.931142][ T5890] usb 7-1: config 0 descriptor?? [ 656.940497][ T5890] cp210x 7-1:0.0: cp210x converter detected [ 656.958575][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 656.968991][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 656.980171][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 656.990691][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 657.001129][ T39] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 657.012379][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.029045][ T39] usb 6-1: config 0 descriptor?? [ 657.345282][ T5890] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 657.371825][ T39] hdpvr 6-1:0.0: firmware version 0x8f dated ieuzhHf3;&X^ wΖ g/ n# [ 657.397316][ T39] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 657.435673][ T5890] usb 7-1: cp210x converter now attached to ttyUSB0 [ 657.571573][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2311'. [ 657.615724][T14911] fuse: Bad value for 'fd' [ 657.624372][T14888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.684181][T14912] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.691339][T14912] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 657.708567][T14912] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 657.864037][T14918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2318'. [ 657.928183][ T5876] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 657.982380][ T5912] usb 7-1: USB disconnect, device number 29 [ 657.994125][ T5912] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 658.028792][ T5912] cp210x 7-1:0.0: device disconnected [ 658.098705][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.164335][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.221910][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.236600][ T5876] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.247540][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.267406][ T5876] usb 3-1: config 0 descriptor?? [ 658.440071][T14930] FAULT_INJECTION: forcing a failure. [ 658.440071][T14930] name failslab, interval 1, probability 0, space 0, times 0 [ 658.493459][T14930] CPU: 1 UID: 0 PID: 14930 Comm: syz.6.2321 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.493479][T14930] Tainted: [L]=SOFTLOCKUP [ 658.493484][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.493490][T14930] Call Trace: [ 658.493496][T14930] [ 658.493502][T14930] dump_stack_lvl+0x189/0x250 [ 658.493528][T14930] ? __pfx____ratelimit+0x10/0x10 [ 658.493542][T14930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.493553][T14930] ? __pfx__printk+0x10/0x10 [ 658.493568][T14930] ? __pfx___might_resched+0x10/0x10 [ 658.493579][T14930] ? fs_reclaim_acquire+0x7d/0x100 [ 658.493593][T14930] should_fail_ex+0x414/0x560 [ 658.493608][T14930] should_failslab+0xa8/0x100 [ 658.493622][T14930] __kvmalloc_node_noprof+0x175/0x920 [ 658.493633][T14930] ? __fget_files+0x2a/0x420 [ 658.493646][T14930] ? vmemdup_user+0x2b/0xd0 [ 658.493661][T14930] vmemdup_user+0x2b/0xd0 [ 658.493673][T14930] map_get_next_key+0x1c3/0x630 [ 658.493689][T14930] ? bpf_lsm_bpf+0x9/0x20 [ 658.493701][T14930] ? security_bpf+0x7e/0x300 [ 658.493715][T14930] __sys_bpf+0x63d/0x860 [ 658.493729][T14930] ? __pfx___sys_bpf+0x10/0x10 [ 658.493750][T14930] ? ksys_write+0x22a/0x250 [ 658.493762][T14930] ? __pfx_ksys_write+0x10/0x10 [ 658.493774][T14930] __x64_sys_bpf+0x7c/0x90 [ 658.493787][T14930] do_syscall_64+0xfa/0xf80 [ 658.493801][T14930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.493810][T14930] ? clear_bhb_loop+0x60/0xb0 [ 658.493822][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.493832][T14930] RIP: 0033:0x7ff46cb8f749 [ 658.493842][T14930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.493851][T14930] RSP: 002b:00007ff46d9b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.493863][T14930] RAX: ffffffffffffffda RBX: 00007ff46cde5fa0 RCX: 00007ff46cb8f749 [ 658.493870][T14930] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000004 [ 658.493877][T14930] RBP: 00007ff46d9b3090 R08: 0000000000000000 R09: 0000000000000000 [ 658.493883][T14930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.493889][T14930] R13: 00007ff46cde6038 R14: 00007ff46cde5fa0 R15: 00007ff46cf0fa28 [ 658.493905][T14930] [ 658.545453][ T5890] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 658.866238][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2323'. [ 658.938481][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2323'. [ 658.974848][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.987178][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 659.004618][T14911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.015665][T14911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.029886][ T5890] usb 1-1: string descriptor 0 read error: -22 [ 659.051225][ T5890] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 659.062782][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.095577][ T5890] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.341620][T14940] geneve2: entered promiscuous mode [ 659.753317][ T39] hdpvr 6-1:0.0: Could not setup controls [ 659.768367][ T39] hdpvr 6-1:0.0: registering videodev failed [ 659.821375][ T39] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 659.855134][ T39] usb 6-1: USB disconnect, device number 107 [ 660.005422][T14956] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 660.470545][T14964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.554272][ T5876] usbhid 3-1:0.0: can't add hid device: -71 [ 660.560851][ T5876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 660.611007][ T5876] usb 3-1: USB disconnect, device number 43 [ 660.729106][T14966] kvm: pic: non byte read [ 660.733703][T14966] kvm: pic: non byte read [ 660.740188][T14966] kvm: pic: non byte read [ 660.746170][T14966] kvm: pic: non byte read [ 660.752124][T14966] kvm: pic: non byte read [ 660.757649][T14966] kvm: pic: non byte read [ 660.763442][T14966] kvm: pic: non byte read [ 660.769845][T14966] kvm: pic: non byte read [ 660.776530][T14966] kvm: pic: non byte read [ 660.782269][T14966] kvm: pic: non byte read [ 660.956445][T14964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.124222][T14971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.175963][ T5890] usb 1-1: USB disconnect, device number 34 [ 661.237069][T14971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.743526][T14985] netlink: 'syz.2.2336': attribute type 12 has an invalid length. [ 661.785588][T14985] vivid-007: ================= START STATUS ================= [ 661.794125][T14985] vivid-007: Generate PTS: true [ 661.825300][T14985] vivid-007: Generate SCR: true [ 661.912357][T14985] tpg source WxH: 320x240 (Y'CbCr) [ 662.145041][T14985] tpg field: 1 [ 662.145302][T14982] random: crng reseeded on system resumption [ 662.173610][T14985] tpg crop: (0,0)/320x240 [ 662.179581][ T5912] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 662.265468][T14985] tpg compose: (0,0)/320x240 [ 662.274137][T14985] tpg colorspace: 8 [ 662.304776][T14985] tpg transfer function: 0/0 [ 662.306080][T14982] netlink: 'syz.2.2336': attribute type 41 has an invalid length. [ 662.319602][T14985] tpg Y'CbCr encoding: 0/0 [ 662.348650][T14985] tpg quantization: 0/0 [ 662.484836][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 662.619357][ T5912] usb 1-1: config 0 has no interfaces? [ 662.631615][T14985] tpg RGB range: 0/2 [ 662.707609][T14985] vivid-007: ================== END STATUS ================== [ 662.723200][ T5912] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 662.746992][ T5912] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 662.788149][ T5912] usb 1-1: Manufacturer: syz [ 664.027460][ T5912] usb 1-1: config 0 descriptor?? [ 664.835085][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 664.995783][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 665.032990][ T9] usb 3-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 665.061388][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 665.080319][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 665.095037][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.189676][ T9] hub 3-1:16.0: bad descriptor, ignoring hub [ 665.208703][ T9] hub 3-1:16.0: probe with driver hub failed with error -5 [ 665.235664][ T9] usbhid 3-1:16.0: couldn't find an input interrupt endpoint [ 665.427241][T14994] nftables ruleset with unbound chain [ 665.570383][ T5876] usb 1-1: USB disconnect, device number 35 [ 665.806347][ T9] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 665.980288][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 666.000126][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 666.016822][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.038663][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.064551][ T9] usb 7-1: string descriptor 0 read error: -22 [ 666.068866][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 666.078631][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.105856][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.152868][ T9] usb 7-1: 0:2 : does not exist [ 666.182361][T15023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.201075][T15023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.546292][ T5897] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 667.709046][ T5897] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 667.722941][ T5897] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.749734][ T5897] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 667.761687][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 667.777671][ T5897] usb 1-1: Product: syz [ 667.782454][ T5897] usb 1-1: Manufacturer: syz [ 667.791626][ T5897] usb 1-1: SerialNumber: syz [ 667.830088][ T5897] usb 1-1: config 0 descriptor?? [ 668.092731][ T5897] usb 1-1: USB disconnect, device number 36 [ 668.177107][ T5912] usb 3-1: USB disconnect, device number 44 [ 670.141576][ T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 670.240273][ T9] usb 7-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 670.282296][ T9] usb 7-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016 [ 670.314947][ T9] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 670.350903][ T9] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 670.440745][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'. [ 670.481813][ T9] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 670.586360][ T9] usb 7-1: USB disconnect, device number 30 [ 670.845490][ T5876] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 670.916771][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 671.020150][ T5876] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 671.055106][ T5876] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 671.065172][ T9] usb 7-1: device descriptor read/64, error -71 [ 671.113324][ T5876] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.135305][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 671.163364][ T5876] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 671.202998][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.240928][ T5876] usb 3-1: config 0 descriptor?? [ 671.355842][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 671.505278][ T9] usb 7-1: device descriptor read/64, error -71 [ 671.624373][ T9] usb usb7-port1: attempt power cycle [ 671.995301][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 672.056588][ T9] usb 7-1: device descriptor read/8, error -71 [ 672.088976][ T5876] usbhid 3-1:0.0: can't add hid device: -71 [ 672.117428][ T5876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 672.145114][ T5876] usb 3-1: USB disconnect, device number 45 [ 672.301294][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 672.345557][ T9] usb 7-1: device descriptor read/8, error -71 [ 672.475289][ T9] usb usb7-port1: unable to enumerate USB device [ 673.004297][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2360'. [ 673.033369][T15068] netlink: 'syz.0.2360': attribute type 30 has an invalid length. [ 673.075146][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2360'. [ 673.094968][T15067] delete_channel: no stack [ 674.054952][ T5876] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 674.249116][ T5876] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 674.282089][ T5876] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 674.325784][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 674.380651][ T5876] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 674.393354][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 674.428880][ T5876] usb 3-1: Product: syz [ 674.433466][ T5876] usb 3-1: Manufacturer: syz [ 674.445211][ T5876] usb 3-1: SerialNumber: syz [ 674.470058][ T5876] usb 3-1: config 0 descriptor?? [ 674.524998][ T5876] usb 3-1: selecting invalid altsetting 0 [ 674.654830][ T5911] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 674.725287][ T5912] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 674.743714][ T5876] usb 3-1: USB disconnect, device number 46 [ 674.770295][T15079] usb 3-1: cannot submit urb 0, error -19: no device [ 674.845740][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 674.870665][ T5911] usb 6-1: config 6 has an invalid interface number: 223 but max is 0 [ 674.886401][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 674.909786][ T5912] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 674.919708][ T5911] usb 6-1: config 6 has no interface number 0 [ 674.920127][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.943009][ T5912] usb 1-1: Product: syz [ 674.952973][ T5911] usb 6-1: config 6 interface 223 altsetting 166 has an endpoint descriptor with address 0x91, changing to 0x81 [ 674.955581][ T5912] usb 1-1: Manufacturer: syz [ 674.974177][ T5912] usb 1-1: SerialNumber: syz [ 674.996059][ T5912] usb 1-1: config 0 descriptor?? [ 675.010939][ T5912] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 675.015106][ T5911] usb 6-1: config 6 interface 223 altsetting 166 endpoint 0x81 has invalid maxpacket 53825, setting to 1024 [ 675.053665][ T5911] usb 6-1: config 6 interface 223 altsetting 166 bulk endpoint 0x81 has invalid maxpacket 1024 [ 675.093073][ T5911] usb 6-1: config 6 interface 223 altsetting 166 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 675.135168][ T5911] usb 6-1: config 6 interface 223 has no altsetting 0 [ 675.154114][ T5911] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 675.167513][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.179361][ T5911] usb 6-1: Product: syz [ 675.183920][ T5911] usb 6-1: Manufacturer: syz [ 675.190426][ T5911] usb 6-1: SerialNumber: syz [ 675.212533][T15086] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 675.218899][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.266913][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.430113][T15084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.444804][T15084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.500897][ T5911] hdpvr 6-1:6.223: unexpected answer of status request, len -71 [ 675.545094][ T5911] hdpvr 6-1:6.223: device init failed [ 675.551355][ T5911] hdpvr 6-1:6.223: probe with driver hdpvr failed with error -12 [ 675.611340][ T5911] usb 6-1: USB disconnect, device number 108 [ 675.656403][ T5912] gspca_ov534_9: reg_w failed -71 [ 675.677737][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 675.679584][T15100] sctp: [Deprecated]: syz.5.2369 (pid 15100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.679584][T15100] Use struct sctp_sack_info instead [ 675.771095][T15097] vlan0: entered promiscuous mode [ 675.801390][T15097] gretap0: entered promiscuous mode [ 675.866111][ T5876] usb 5-1: USB disconnect, device number 6 [ 675.929559][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 675.952249][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 675.974234][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 675.987442][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 676.001659][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 676.154770][ T5912] gspca_ov534_9: Unknown sensor 0000 [ 676.154875][ T5912] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 676.200537][ T5912] usb 1-1: USB disconnect, device number 37 [ 676.325014][ T5911] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 676.485119][ T5911] usb 6-1: device descriptor read/64, error -71 [ 676.525135][ T5912] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 676.737101][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.744928][ T5911] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 676.800123][T15111] chnl_net:caif_netlink_parms(): no params data found [ 676.878105][ T5912] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 676.888825][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.905660][ T5912] usb 1-1: config 0 descriptor?? [ 676.981439][ T9] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 676.995262][ T5911] usb 6-1: device descriptor read/64, error -71 [ 677.115504][ T5911] usb usb6-port1: attempt power cycle [ 677.202164][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 677.232202][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 677.282415][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.348461][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 677.349191][ T5912] aquacomputer_d5next 0003:0C70:F00B.0036: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.0-1/input0 [ 677.431260][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 677.469754][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 677.480797][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 677.501167][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.520387][ T5911] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 677.537574][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 677.541472][T15110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.550606][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 677.609444][ T5911] usb 6-1: device descriptor read/8, error -71 [ 677.647684][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 677.662619][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 677.683767][T15110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.702767][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.739750][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 677.779711][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 677.849465][T15111] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.867576][ T9] usb 3-1: string descriptor 0 read error: -22 [ 677.876118][ T5911] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 677.891007][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 677.909484][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.931910][ T5911] usb 6-1: device descriptor read/8, error -71 [ 677.932080][T15111] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.054111][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 678.075619][ T5911] usb usb6-port1: unable to enumerate USB device [ 678.096676][T15111] bridge_slave_0: entered allmulticast mode [ 678.125223][ T52] Bluetooth: hci4: command tx timeout [ 678.169195][T15111] bridge_slave_0: entered promiscuous mode [ 678.180381][T15111] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.188898][T15111] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.197496][T15111] bridge_slave_1: entered allmulticast mode [ 678.210742][T15111] bridge_slave_1: entered promiscuous mode [ 678.346261][T15111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.360447][T15111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.649604][T15111] team0: Port device team_slave_0 added [ 678.788232][T15111] team0: Port device team_slave_1 added [ 678.982058][T15111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.009441][T15111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.104298][T15111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.113164][ T9] usb 1-1: USB disconnect, device number 38 [ 679.202433][T15111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.210852][T15111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.396728][T15111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.785191][T15111] hsr_slave_0: entered promiscuous mode [ 679.823152][T15111] hsr_slave_1: entered promiscuous mode [ 680.204901][ T52] Bluetooth: hci4: command tx timeout [ 680.850360][T15111] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 680.964249][T15111] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 680.996638][T15169] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 681.043734][T15111] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 681.062859][T15111] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 681.916933][ T5911] usb 3-1: USB disconnect, device number 47 [ 682.285063][ T52] Bluetooth: hci4: command tx timeout [ 682.301038][T15111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.347497][T15111] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.366161][ T39] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 682.421030][ T4108] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.428692][ T4108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.502165][ T4108] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.509777][ T4108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.542023][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.665100][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.677689][ T39] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 682.694361][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 682.844924][ T39] usb 1-1: SerialNumber: syz [ 683.061767][T15204] netlink: 'syz.5.2391': attribute type 10 has an invalid length. [ 683.130000][T15204] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 683.850764][T15207] netlink: 'syz.5.2391': attribute type 1 has an invalid length. [ 684.386297][ T52] Bluetooth: hci4: command tx timeout [ 684.564103][T15207] bond4: entered promiscuous mode [ 684.587004][T15207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 684.602243][T15215] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2392'. [ 684.731176][T15215] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2392'. [ 684.924226][T15215] ip6gretap0: entered promiscuous mode [ 685.029771][T15215] ip6gretap0: left promiscuous mode [ 685.245975][T15111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.812165][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.819047][T15111] veth0_vlan: entered promiscuous mode [ 685.825375][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.933396][T15111] veth1_vlan: entered promiscuous mode [ 685.975100][ T5912] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 686.139228][T15111] veth0_macvtap: entered promiscuous mode [ 686.175655][ T39] usb 1-1: 0:2 : does not exist [ 686.204441][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 686.249022][T15111] veth1_macvtap: entered promiscuous mode [ 686.258349][ T5912] usb 3-1: config 1 interface 1 has no altsetting 0 [ 686.284598][ T39] usb 1-1: USB disconnect, device number 39 [ 686.323095][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.365425][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.396070][T15111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.404755][ T5912] usb 3-1: Product: syz [ 686.404777][ T5912] usb 3-1: Manufacturer: syz [ 686.404793][ T5912] usb 3-1: SerialNumber: syz [ 686.461600][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.539646][T15111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.564869][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 686.608264][ T4506] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.619595][T15228] fuse: Unknown parameter 'fp' [ 686.658198][ T5912] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 686.666286][ T4506] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.726459][ T4506] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.763725][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 686.765388][ T5912] usb 3-1: USB disconnect, device number 48 [ 686.783629][ T4506] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.820071][ T9] usb 7-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 686.886703][ T9] usb 7-1: config 66 interface 0 has no altsetting 0 [ 687.003239][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 687.041519][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.155095][ T9] usb 7-1: Product: syz [ 687.175590][ T9] usb 7-1: Manufacturer: syz [ 687.185503][ T39] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 687.194587][ T9] usb 7-1: SerialNumber: syz [ 687.202789][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.239193][T15224] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 687.261375][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.397253][ T39] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 687.411204][ T4506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.422798][ T4506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.432547][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.541076][ T39] usb 6-1: Product: syz [ 687.592807][ T39] usb 6-1: Manufacturer: syz [ 687.611088][ T39] usb 6-1: SerialNumber: syz [ 687.640681][ T39] usb 6-1: config 0 descriptor?? [ 687.809334][T15243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2400'. [ 687.880635][ T39] ch341 6-1:0.0: ch341-uart converter detected [ 688.102749][ T39] usb 6-1: failed to receive control message: -121 [ 688.125830][ T39] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 688.361563][ T5926] usb 6-1: USB disconnect, device number 113 [ 688.383214][ T5926] ch341 6-1:0.0: device disconnected [ 689.363611][ T9] ati_remote2 7-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 689.374922][ T5926] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 689.455744][ T9] usb 7-1: USB disconnect, device number 35 [ 689.525166][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 689.560058][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.614478][ T5926] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 689.657800][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.694855][ T30] audit: type=1326 audit(1765215268.102:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 689.782407][ T5926] usb 6-1: config 0 descriptor?? [ 689.888022][ T30] audit: type=1326 audit(1765215268.102:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 689.930869][ T30] audit: type=1326 audit(1765215268.102:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 689.960044][ T30] audit: type=1326 audit(1765215268.102:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 690.681581][ T5926] apple 0003:05AC:026C.0037: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.5-1/input0 [ 690.734886][ T30] audit: type=1326 audit(1765215268.102:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 690.964855][ T30] audit: type=1326 audit(1765215268.112:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 691.360966][ T5876] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 691.418970][ T30] audit: type=1326 audit(1765215268.112:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 691.477567][ T30] audit: type=1326 audit(1765215268.112:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 691.567580][ T30] audit: type=1326 audit(1765215268.112:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 691.615278][ T5876] usb 7-1: Using ep0 maxpacket: 8 [ 691.761954][ T5876] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 691.778508][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.888084][ T5876] pvrusb2: Hardware description: Terratec Grabster AV400 [ 691.899228][ T30] audit: type=1326 audit(1765215270.192:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.2.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 691.939260][ T5876] pvrusb2: ********** [ 691.947232][ T5876] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 691.991072][ T5876] pvrusb2: Important functionality might not be entirely working. [ 692.021827][ T5876] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 692.062530][ T5876] pvrusb2: ********** [ 692.087501][ T2344] pvrusb2: Invalid write control endpoint [ 692.353485][ T2344] pvrusb2: Invalid write control endpoint [ 692.415419][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 692.454868][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 692.488429][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 692.525544][ T2344] pvrusb2: Device being rendered inoperable [ 692.564168][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 692.594512][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 692.629752][ T2344] pvrusb2: Attached sub-driver cx25840 [ 692.649544][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 692.683852][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 692.702981][ T5897] usb 6-1: USB disconnect, device number 114 [ 693.025574][T15292] kernel profiling enabled (shift: 6) [ 693.093803][T15294] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2411'. [ 693.352198][T15298] tipc: Enabling of bearer rejected, failed to enable media [ 693.420160][T15294] input: syz0 as /devices/virtual/input/input99 [ 693.657630][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 693.715176][ T5876] usb 7-1: USB disconnect, device number 36 [ 693.846803][T15308] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2414'. [ 693.856980][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 693.902678][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 693.949804][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 693.985018][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 694.038048][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 694.048214][T15308] xt_cgroup: xt_cgroup: no path or classid specified [ 694.087351][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 694.105143][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 694.114420][ T9] usb 3-1: Product: syz [ 694.154930][ T9] usb 3-1: Manufacturer: syz [ 694.177860][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 694.183124][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 694.207077][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 694.213067][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 694.924161][ T9] usb 3-1: USB disconnect, device number 49 [ 695.029599][T15324] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2419'. [ 695.057012][T15325] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2419'. [ 695.223780][T15324] team0: Port device dummy0 removed [ 695.819845][T15336] netlink: 'syz.2.2423': attribute type 10 has an invalid length. [ 695.866740][T15330] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 695.970667][T15330] bond1: option packets_per_slave: allowed values 0 - 65535 [ 696.284790][T10992] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 696.495444][T15330] bond1 (unregistering): Released all slaves [ 696.534936][T10992] usb 1-1: Using ep0 maxpacket: 16 [ 696.553668][T10992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.674784][T10992] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 696.711473][T10992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.786862][T15336] team0: Port device dummy0 added [ 696.836537][T10992] usb 1-1: config 0 descriptor?? [ 696.875386][ T5876] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 697.150313][ T5876] usb 7-1: Using ep0 maxpacket: 16 [ 697.186089][ T5876] usb 7-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.256873][ T5876] usb 7-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.441756][ T5876] usb 7-1: config 0 interface 0 has no altsetting 0 [ 697.466299][ T5876] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 697.477790][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.533702][ T5876] usb 7-1: config 0 descriptor?? [ 697.706316][ T6551] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 697.837128][T15343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.941597][T15343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.997572][ T6551] usb 3-1: Using ep0 maxpacket: 8 [ 698.013887][ T6551] usb 3-1: config 162 has an invalid interface number: 161 but max is 1 [ 698.048715][ T6551] usb 3-1: config 162 has an invalid descriptor of length 244, skipping remainder of the config [ 698.123041][ T6551] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 698.172062][ T5876] usbhid 7-1:0.0: can't add hid device: -71 [ 698.183562][ T6551] usb 3-1: config 162 has no interface number 0 [ 698.247685][ T5876] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 698.263760][ T6551] usb 3-1: config 162 interface 161 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.311063][ T5876] usb 7-1: USB disconnect, device number 37 [ 698.325641][ T6551] usb 3-1: config 162 interface 161 has no altsetting 0 [ 698.362169][ T6551] usb 3-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 698.382985][ T6551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.408559][ T6551] usb 3-1: Product: syz [ 698.423255][ T6551] usb 3-1: Manufacturer: syz [ 698.438924][ T6551] usb 3-1: SerialNumber: syz [ 698.670803][ T6551] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 698.713467][ T6551] usb 3-1: USB disconnect, device number 50 [ 698.748855][ T5822] udevd[5822]: setting mode of /dev/bus/usb/003/050 to 020664 failed: No such file or directory [ 698.793551][ T5822] udevd[5822]: setting owner of /dev/bus/usb/003/050 to uid=0, gid=0 failed: No such file or directory [ 699.549933][T10992] usbhid 1-1:0.0: can't add hid device: -71 [ 699.564519][T10992] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 699.585274][T10992] usb 1-1: USB disconnect, device number 40 [ 699.676556][ T5897] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 699.946970][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.960273][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 700.005211][ T5897] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 700.037282][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.101453][T15370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.120676][ T5897] usb 3-1: config 0 descriptor?? [ 700.136682][T15372] vim2m vim2m.0: vidioc_s_fmt queue busy [ 700.171558][T15370] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.375462][T15370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.458160][T15374] sctp: [Deprecated]: syz.5.2432 (pid 15374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.458160][T15374] Use struct sctp_sack_info instead [ 700.719134][ T5897] kovaplus 0003:1E7D:2D50.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 700.946582][T15363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.975858][T15363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.869691][ T5897] kovaplus 0003:1E7D:2D50.0038: couldn't init struct kovaplus_device [ 701.902334][ T5897] kovaplus 0003:1E7D:2D50.0038: couldn't install mouse [ 701.961523][ T5897] kovaplus 0003:1E7D:2D50.0038: probe with driver kovaplus failed with error -71 [ 702.004214][ T5897] usb 3-1: USB disconnect, device number 51 [ 702.988894][ T5926] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 703.263435][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 703.289045][ T5926] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.354102][ T5926] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 703.454596][ T5926] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 703.482491][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.534037][ T5926] usb 6-1: Product: syz [ 703.567814][ T5926] usb 6-1: Manufacturer: syz [ 703.598032][ T5926] usb 6-1: SerialNumber: syz [ 703.688257][ T5926] cdc_mbim 6-1:1.0: skipping garbage [ 703.911547][T15397] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 704.423214][T15397] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 704.515319][ T5926] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 705.003980][ T5926] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 705.056700][ T5926] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 705.134073][ T5926] wwan wwan0: port wwan0mbim0 attached [ 705.174022][ T5926] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 72:f3:46:b4:45:1d [ 705.222703][T15420] netlink: 'syz.2.2444': attribute type 17 has an invalid length. [ 705.228502][ T5926] usb 6-1: USB disconnect, device number 115 [ 705.286268][ T5926] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 705.306741][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2444'. [ 705.364040][T15420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2444'. [ 705.420289][T15425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2445'. [ 705.494659][ T5926] wwan wwan0: port wwan0mbim0 disconnected [ 705.506758][T15425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2445'. [ 706.145284][T15442] sctp: [Deprecated]: syz.7.2450 (pid 15442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 706.145284][T15442] Use struct sctp_sack_info instead [ 706.176794][ T5926] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 706.269759][T15442] bond0: Removing last ns target with arp_interval on [ 706.280693][ T5942] bond0: (slave bond_slave_0): interface is now down [ 706.334837][ T5942] bond0: (slave bond_slave_1): interface is now down [ 706.349675][ T5926] usb 3-1: config 0 has no interfaces? [ 706.382804][ T5926] usb 3-1: string descriptor 0 read error: -22 [ 706.429765][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 706.436316][ T5942] bond0: now running without any active interface! [ 706.462954][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.515384][ T5926] usb 3-1: config 0 descriptor?? [ 706.547463][T15453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2449'. [ 706.664837][ T6551] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 706.749470][T15434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.786217][T15434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.830794][ T6551] usb 7-1: Using ep0 maxpacket: 8 [ 706.892299][ T6551] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 706.952913][ T6551] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.987182][ T6551] usb 7-1: Product: syz [ 706.992639][ T6551] usb 7-1: Manufacturer: syz [ 707.035203][ T6551] usb 7-1: SerialNumber: syz [ 707.046033][ T6551] usb 7-1: config 0 descriptor?? [ 707.374996][ T5897] usb 3-1: USB disconnect, device number 52 [ 707.497184][ T6551] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 707.554905][T10992] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 707.917698][T10992] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 707.934808][T10992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 707.976895][T10992] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.056707][T10992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 708.090977][T10992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 708.130250][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2451'. [ 708.140159][ T6551] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 708.159572][T15450] bond_slave_0: entered promiscuous mode [ 708.165804][T15450] bond_slave_1: entered promiscuous mode [ 708.178707][T10992] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 708.187957][T15450] macvlan2: entered promiscuous mode [ 708.199451][T10992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 708.212102][T10992] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.225606][T15450] bond0: entered promiscuous mode [ 708.232813][T15450] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 708.302899][ T5926] usb 7-1: USB disconnect, device number 38 [ 708.326163][T10992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 708.373817][T10992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 708.406628][T10992] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 708.427171][T10992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 708.832625][T10992] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 709.161969][T10992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 709.240247][T10992] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 709.417173][T10992] usb 1-1: string descriptor 0 read error: -22 [ 709.424461][T10992] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 709.447855][T10992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.569345][T10992] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 709.999331][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 709.999342][ T30] audit: type=1326 audit(1765215288.412:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 710.041678][T15497] kvm: kvm [15493]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 710.248646][ T30] audit: type=1326 audit(1765215288.412:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 710.303981][ T30] audit: type=1326 audit(1765215288.412:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 710.333660][ T30] audit: type=1326 audit(1765215288.412:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 710.469138][ T30] audit: type=1326 audit(1765215288.412:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 710.584863][ T30] audit: type=1326 audit(1765215288.412:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 710.729172][ T30] audit: type=1326 audit(1765215288.422:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 710.841841][ T30] audit: type=1326 audit(1765215288.422:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 710.934004][ T30] audit: type=1326 audit(1765215288.422:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 711.048757][ T30] audit: type=1326 audit(1765215288.422:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15493 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 712.144363][ T5876] usb 1-1: USB disconnect, device number 41 [ 714.256677][T15541] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2467'. [ 714.307153][ T5926] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 714.621397][ T5926] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 714.644983][ T5926] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 714.656519][ T5926] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 714.671686][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.691122][T15536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 714.987907][ T5926] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 715.025290][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 715.025309][ T30] audit: type=1326 audit(1765215293.442:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15535 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 715.253408][ T30] audit: type=1326 audit(1765215293.452:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15535 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 715.422899][ T5926] usb 1-1: USB disconnect, device number 42 [ 715.528407][ T30] audit: type=1326 audit(1765215293.452:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15535 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 715.690228][ T30] audit: type=1326 audit(1765215293.452:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15535 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 715.809720][ T30] audit: type=1326 audit(1765215293.452:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15535 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 715.991704][ T30] audit: type=1326 audit(1765215293.452:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15535 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 716.179070][ T30] audit: type=1326 audit(1765215293.452:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15535 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 716.337595][ T30] audit: type=1326 audit(1765215293.452:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15535 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 716.425360][ T30] audit: type=1326 audit(1765215293.452:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15535 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 716.521560][T15568] netlink: 'syz.6.2476': attribute type 1 has an invalid length. [ 716.560437][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2476'. [ 716.585306][ T30] audit: type=1326 audit(1765215293.452:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15535 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2de778f749 code=0x7ffc0000 [ 716.655973][T15568] bond3: entered promiscuous mode [ 716.685247][T15568] bond3: entered allmulticast mode [ 716.719254][T15570] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 716.735886][T15570] bond3: (slave bridge1): making interface the new active one [ 716.745649][T15570] bridge1: entered promiscuous mode [ 716.752792][T15570] bridge1: entered allmulticast mode [ 716.763725][T15570] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 716.905816][T15578] bridge0: entered promiscuous mode [ 716.920439][T15580] fuse: Bad value for 'fd' [ 717.040815][T15584] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2481'. [ 717.076499][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2481'. [ 717.422450][T15600] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2485'. [ 717.516179][T15602] netlink: 'syz.6.2483': attribute type 11 has an invalid length. [ 717.565389][T15602] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2483'. [ 718.140037][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'. [ 718.158113][T15609] loop9: detected capacity change from 0 to 7 [ 718.170018][T15609] Dev loop9: unable to read RDB block 7 [ 718.184062][T15609] loop9: unable to read partition table [ 718.193598][T15609] loop9: partition table beyond EOD, truncated [ 718.219239][T15609] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 718.802218][T15624] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2492'. [ 719.830246][ T5876] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 719.994790][ T5876] usb 7-1: Using ep0 maxpacket: 8 [ 720.001861][ T5876] usb 7-1: config 0 interface 0 has no altsetting 0 [ 720.016787][ T5876] usb 7-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 720.038436][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.072294][ T5876] usb 7-1: config 0 descriptor?? [ 720.106173][ T5876] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 720.174173][T15662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2504'. [ 720.564818][ T6551] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 720.724812][ T6551] usb 6-1: Using ep0 maxpacket: 8 [ 720.749412][ T6551] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 720.760905][T15680] program syz.2.2509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 720.837437][ T6551] usb 6-1: config 179 has no interface number 0 [ 720.848944][ T6551] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 720.863887][ T6551] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 720.895609][ T6551] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 720.982310][ T6551] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 721.012583][ T6551] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 721.056866][ T6551] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 721.071638][ T6551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.094875][ T5897] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 721.126507][T15669] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 721.369210][ T6551] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input100 [ 721.548795][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 721.558245][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 721.587931][ T5876] usb 6-1: USB disconnect, device number 116 [ 721.602268][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 721.705981][ T5897] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 721.734288][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.754178][ T5897] usb 3-1: Product: syz [ 721.770801][ T5897] usb 3-1: Manufacturer: syz [ 721.790165][ T5897] usb 3-1: SerialNumber: syz [ 721.822229][ T5897] usb 3-1: config 0 descriptor?? [ 722.029643][T15697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2515'. [ 722.154969][ T5876] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 722.315013][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 722.329249][ T5876] usb 6-1: config 0 has an invalid interface number: 154 but max is 0 [ 722.358622][ T5876] usb 6-1: config 0 has no interface number 0 [ 722.377124][ T5876] usb 6-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 722.415871][ T5876] usb 6-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 722.431526][ T5876] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 722.457917][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.469779][ T5876] usb 6-1: Product: syz [ 722.473861][ T5926] usb 7-1: USB disconnect, device number 39 [ 722.475728][ T5876] usb 6-1: Manufacturer: syz [ 722.487875][ T5876] usb 6-1: SerialNumber: syz [ 722.497635][ T5876] usb 6-1: config 0 descriptor?? [ 722.511959][ T5876] appletouch 6-1:0.154: Could not find int-in endpoint [ 722.522164][ T5876] appletouch 6-1:0.154: probe with driver appletouch failed with error -5 [ 722.619450][ T5876] usbhid 6-1:0.154: couldn't find an input interrupt endpoint [ 722.682571][T15710] hsr_slave_0: left promiscuous mode [ 722.692625][T15710] hsr_slave_1: left promiscuous mode [ 722.728046][ T5876] usb 6-1: USB disconnect, device number 117 [ 723.264952][ T5876] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 723.304966][ T5926] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 723.318690][T15724] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3167498050 (50679968800 ns) > initial count (7049095776 ns). Using initial count to start timer. [ 723.342417][T15724] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 723.445189][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 723.456862][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 723.493622][ T5926] usb 7-1: config 0 interface 0 has no altsetting 0 [ 723.494775][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 723.501577][ T5926] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 723.525891][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.547610][ T5876] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 723.555760][ T5926] usb 7-1: config 0 descriptor?? [ 723.563738][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.580307][ T5876] usb 1-1: Product: syz [ 723.587179][ T5876] usb 1-1: Manufacturer: syz [ 723.595630][ T5876] usb 1-1: SerialNumber: syz [ 723.611439][ T5876] usb 1-1: config 0 descriptor?? [ 723.629694][ T5876] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 723.651312][ T5876] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 723.864647][ T5897] usb 3-1: USB disconnect, device number 53 [ 724.237837][ T5876] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 724.261199][ T5876] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 724.598330][ T5926] video4linux radio48: keene_cmd_set failed (-110) [ 724.804846][ T5926] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 724.918284][ T6551] usb 7-1: USB disconnect, device number 40 [ 725.124132][ T5876] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 725.538718][ T5876] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 725.569327][ T5876] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 725.578121][ T5876] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 725.590040][ T5876] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 725.605989][ T5876] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 725.628465][ T5876] usb 1-1: USB disconnect, device number 43 [ 725.800836][T15747] syzkaller0: entered promiscuous mode [ 725.810654][T15747] syzkaller0: entered allmulticast mode [ 725.877362][T15747] input: syz0 as /devices/virtual/input/input101 [ 726.084807][ T5897] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 726.298293][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2534'. [ 726.367837][ T5897] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.386447][ T5897] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.400846][ T5897] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 726.431171][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 726.492877][T15759] 8021q: adding VLAN 0 to HW filter on device bond8 [ 726.568556][ T5897] usb 7-1: SerialNumber: syz [ 726.632379][T15767] 8021q: adding VLAN 0 to HW filter on device bond8 [ 726.642459][T15767] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 726.694224][T15767] bond8: (slave wireguard0): Error -95 calling set_mac_address [ 726.789552][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2537'. [ 726.898780][ T5897] usb 7-1: 0:2 : does not exist [ 726.956391][ T5897] usb 7-1: USB disconnect, device number 41 [ 727.060345][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.154441][T15774] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2538'. [ 727.186462][T15774] netlink: zone id is out of range [ 727.500478][T15782] FAULT_INJECTION: forcing a failure. [ 727.500478][T15782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.535442][T15782] CPU: 1 UID: 0 PID: 15782 Comm: syz.6.2541 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.535475][T15782] Tainted: [L]=SOFTLOCKUP [ 727.535483][T15782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 727.535493][T15782] Call Trace: [ 727.535501][T15782] [ 727.535510][T15782] dump_stack_lvl+0x189/0x250 [ 727.535536][T15782] ? __pfx____ratelimit+0x10/0x10 [ 727.535557][T15782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.535575][T15782] ? __pfx__printk+0x10/0x10 [ 727.535617][T15782] should_fail_ex+0x414/0x560 [ 727.535661][T15782] _copy_to_user+0x31/0xb0 [ 727.535677][T15782] simple_read_from_buffer+0xe1/0x170 [ 727.535701][T15782] proc_fail_nth_read+0x1b3/0x220 [ 727.535723][T15782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.535742][T15782] ? rw_verify_area+0x2a6/0x4d0 [ 727.535757][T15782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.535778][T15782] vfs_read+0x200/0xa30 [ 727.535795][T15782] ? fdget_pos+0x247/0x320 [ 727.535821][T15782] ? __pfx___mutex_lock+0x10/0x10 [ 727.535845][T15782] ? __pfx_vfs_read+0x10/0x10 [ 727.535865][T15782] ? __fget_files+0x2a/0x420 [ 727.535890][T15782] ? __fget_files+0x3a0/0x420 [ 727.535910][T15782] ? __fget_files+0x2a/0x420 [ 727.535939][T15782] ksys_read+0x145/0x250 [ 727.535953][T15782] ? __fget_files+0x2a/0x420 [ 727.535970][T15782] ? __pfx_ksys_read+0x10/0x10 [ 727.535986][T15782] ? do_syscall_64+0xbe/0xf80 [ 727.536010][T15782] do_syscall_64+0xfa/0xf80 [ 727.536034][T15782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.536052][T15782] ? clear_bhb_loop+0x60/0xb0 [ 727.536073][T15782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.536089][T15782] RIP: 0033:0x7ff46cb8e15c [ 727.536108][T15782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 727.536124][T15782] RSP: 002b:00007ff46d9b3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 727.536143][T15782] RAX: ffffffffffffffda RBX: 00007ff46cde5fa0 RCX: 00007ff46cb8e15c [ 727.536156][T15782] RDX: 000000000000000f RSI: 00007ff46d9b30a0 RDI: 0000000000000004 [ 727.536168][T15782] RBP: 00007ff46d9b3090 R08: 0000000000000000 R09: 0000000000000000 [ 727.536179][T15782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.536240][T15782] R13: 00007ff46cde6038 R14: 00007ff46cde5fa0 R15: 00007ff46cf0fa28 [ 727.536273][T15782] [ 727.927161][T15778] bond1 (unregistering): Released all slaves [ 728.203259][ T5897] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 728.375062][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 728.382775][ T5897] usb 6-1: config 0 has no interfaces? [ 728.393817][ T5897] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 728.406849][ T9184] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 728.419716][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.457311][ T5897] usb 6-1: config 0 descriptor?? [ 728.581948][ T9184] usb 3-1: No LPM exit latency info found, disabling LPM. [ 728.612013][ T9184] usb 3-1: string descriptor 0 read error: -22 [ 728.654946][ T9184] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 728.678790][ T5897] usb 6-1: USB disconnect, device number 118 [ 728.718446][ T9184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.754436][ T9184] usb 3-1: config 0 descriptor?? [ 729.139167][T15818] netlink: 'syz.7.2548': attribute type 1 has an invalid length. [ 729.191180][ T9184] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 729.200103][ T9184] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 729.200185][ T9184] dib0700: firmware download failed at 7 with -22 [ 729.233862][ T9184] usb 3-1: USB disconnect, device number 54 [ 729.477854][T15818] bond1: entered promiscuous mode [ 729.478283][T15818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 729.488487][ T6551] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 729.664842][ T6551] usb 7-1: device descriptor read/64, error -71 [ 729.862267][T15814] bond1: (slave bridge1): making interface the new active one [ 730.197621][ T6551] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 730.282512][T15814] bridge1: entered promiscuous mode [ 730.295989][T15814] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 730.332873][T15837] netlink: 'syz.5.2553': attribute type 4 has an invalid length. [ 730.368265][ T6551] usb 7-1: device descriptor read/64, error -71 [ 730.374913][ T9184] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 730.525901][ T6551] usb usb7-port1: attempt power cycle [ 730.545686][ T9184] usb 3-1: Using ep0 maxpacket: 32 [ 730.567187][ T9184] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 730.584338][ T9184] usb 3-1: config 0 has no interface number 0 [ 730.591966][ T9184] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 730.610619][ T9184] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 730.622823][ T9184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.632275][ T9184] usb 3-1: Product: syz [ 730.637216][ T9184] usb 3-1: Manufacturer: syz [ 730.642625][ T9184] usb 3-1: SerialNumber: syz [ 730.652223][ T9184] usb 3-1: config 0 descriptor?? [ 730.660649][T15834] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 730.874801][ T6551] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 730.906343][ T6551] usb 7-1: device descriptor read/8, error -71 [ 730.921762][T15834] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 731.046106][ T9184] asix 3-1:0.188: probe with driver asix failed with error -71 [ 731.068164][ T9184] usb 3-1: USB disconnect, device number 55 [ 731.137117][T15851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.174926][ T6551] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 731.183594][T15851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.238433][ T6551] usb 7-1: device descriptor read/8, error -71 [ 731.375363][ T6551] usb usb7-port1: unable to enumerate USB device [ 731.425998][ T9184] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 731.604847][ T9184] usb 6-1: Using ep0 maxpacket: 32 [ 731.627414][ T9184] usb 6-1: config 0 interface 0 has no altsetting 0 [ 731.648342][ T9184] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 731.779004][ T9184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.803059][ T9184] usb 6-1: Product: syz [ 731.812483][ T9184] usb 6-1: Manufacturer: syz [ 731.818358][ T9184] usb 6-1: SerialNumber: syz [ 731.827114][ T9184] usb 6-1: config 0 descriptor?? [ 731.923491][T15863] IPVS: ip_vs_add_dest(): server weight less than zero [ 732.132547][ T9184] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 732.140789][ T9184] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 733.064153][ T9184] usb 6-1: USB disconnect, device number 119 [ 733.157497][T15877] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 733.341386][T15882] binder: 15881:15882 ioctl c0306201 200000000100 returned -22 [ 733.351361][T15882] hub 9-0:1.0: USB hub found [ 733.359770][T15882] hub 9-0:1.0: 1 port detected [ 733.516091][ T6551] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 733.728789][ T6551] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 733.741050][ T6551] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 733.768936][ T6551] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 733.797012][ T6551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.813423][T15879] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 733.830760][ T6551] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 733.959542][T15889] input: syz0 as /devices/virtual/input/input102 [ 734.028930][T15879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2564'. [ 734.085061][ T5904] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 734.187037][ T5897] usb 3-1: USB disconnect, device number 56 [ 734.234809][ T6551] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 734.267347][ T5904] usb 7-1: Using ep0 maxpacket: 16 [ 734.277042][ T5904] usb 7-1: config 253 has an invalid interface number: 184 but max is 0 [ 734.317527][ T5904] usb 7-1: config 253 has no interface number 0 [ 734.354788][ T5904] usb 7-1: config 253 interface 184 has no altsetting 0 [ 734.375642][ T5904] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 734.385877][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.399918][ T6551] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.400229][ T5904] usb 7-1: Product: syz [ 734.413125][ T6551] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 734.443730][ T5904] usb 7-1: Manufacturer: syz [ 734.449867][ T5904] usb 7-1: SerialNumber: syz [ 734.469416][ T6551] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 734.482000][ T5904] go7007 7-1:253.184: probe with driver go7007 failed with error -12 [ 734.551404][ T6551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.593340][ T6551] usb 1-1: config 0 descriptor?? [ 734.642105][ T6551] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 734.665611][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 734.665630][ T30] audit: type=1800 audit(1765215313.082:3116): pid=15898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2569" name="file1" dev="tmpfs" ino=143 res=0 errno=0 [ 734.666216][ T6551] dvb-usb: bulk message failed: -22 (3/0) [ 734.730404][T15900] bridge0: port 5(veth0_to_bridge) entered blocking state [ 734.744924][T15900] bridge0: port 5(veth0_to_bridge) entered disabled state [ 734.754354][T15900] veth0_to_bridge: entered allmulticast mode [ 734.762671][T15900] veth0_to_bridge: entered promiscuous mode [ 734.775991][T15900] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 734.813529][ T6551] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 734.869772][T15900] bridge0: port 5(veth0_to_bridge) entered blocking state [ 734.878897][T15900] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 734.897046][ T6551] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 734.925170][ T6551] usb 1-1: media controller created [ 734.957230][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2570'. [ 734.969972][ T6551] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 735.082854][ T6551] dvb-usb: bulk message failed: -22 (6/0) [ 735.123058][ T6551] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 735.154215][ T6551] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input103 [ 735.191300][ T6551] dvb-usb: schedule remote query interval to 150 msecs. [ 735.211093][ T6551] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 735.347741][T15903] 8021q: adding VLAN 0 to HW filter on device bond9 [ 735.364783][ T6551] dvb-usb: bulk message failed: -22 (1/0) [ 735.371850][ T6551] dvb-usb: error while querying for an remote control event. [ 735.423099][T15906] bond9: (slave batadv2): Opening slave failed [ 735.506999][T15918] futex_wake_op: syz.5.2572 tries to shift op by -1; fix this program [ 735.562841][ T9184] usb 1-1: USB disconnect, device number 44 [ 735.617075][T15913] bond2: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 735.659444][ T9184] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 735.679507][T15913] bond2 (unregistering): Released all slaves [ 736.198587][T15935] netlink: zone id is out of range [ 736.203866][T15935] netlink: zone id is out of range [ 736.225097][T15935] netlink: zone id is out of range [ 736.239451][T15485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.252091][T15485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.505855][ T6551] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 736.728798][ T6551] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 736.768853][ T6551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.890449][ T6551] usb 1-1: Product: syz [ 736.961805][ T6551] usb 1-1: Manufacturer: syz [ 736.970611][ T5912] usb 7-1: USB disconnect, device number 46 [ 736.991295][ T6551] usb 1-1: SerialNumber: syz [ 737.021307][ T6551] usb 1-1: config 0 descriptor?? [ 737.244375][ T6551] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 737.317001][ T5897] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 738.637395][ T5912] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 738.808228][ T5912] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.816946][ T5912] usb 6-1: config 0 has no interface number 0 [ 738.844335][ T5912] usb 6-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 738.874962][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.910545][ T5912] usb 6-1: Product: syz [ 738.923198][ T5912] usb 6-1: Manufacturer: syz [ 738.948188][ T5912] usb 6-1: SerialNumber: syz [ 738.998697][ T5912] usb 6-1: config 0 descriptor?? [ 739.029270][ T5912] cx231xx 6-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces [ 739.064221][ T5912] cx231xx 6-1:0.1: Not found matching IAD interface [ 739.945767][ T6551] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 740.129443][ T6551] usb 1-1: USB disconnect, device number 45 [ 742.107183][ T5897] usb 6-1: USB disconnect, device number 120 [ 742.752453][T16021] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 16021 comm: syz.0.2601) [ 743.291735][ T30] audit: type=1800 audit(1765215321.192:3117): pid=16021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2601" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=71905 res=0 errno=0 [ 743.965485][T16020] xt_TCPMSS: Only works on TCP SYN packets [ 744.874883][ T5897] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 745.618222][ T5897] usb 3-1: device descriptor read/64, error -71 [ 746.004960][ T5897] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 746.506395][ T5897] usb 3-1: device descriptor read/64, error -71 [ 746.793268][ T5897] usb usb3-port1: attempt power cycle [ 747.119460][T16053] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 747.154874][ T5897] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 747.235054][ T5926] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 747.395148][ T5897] usb 3-1: device descriptor read/8, error -71 [ 747.475281][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.482449][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.664888][ T5897] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 747.757388][ T5926] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 747.817766][ T5897] usb 3-1: device descriptor read/8, error -71 [ 747.866247][ T5926] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 748.017021][ T5897] usb usb3-port1: unable to enumerate USB device [ 748.035215][ T5926] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 748.176362][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.237207][ T30] audit: type=1326 audit(1765215326.662:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.237974][ T30] audit: type=1326 audit(1765215326.662:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.238199][ T30] audit: type=1326 audit(1765215326.662:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.238484][ T30] audit: type=1326 audit(1765215326.662:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.238731][ T30] audit: type=1326 audit(1765215326.662:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.239014][ T30] audit: type=1326 audit(1765215326.662:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.266183][ T30] audit: type=1326 audit(1765215326.692:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.266674][T16051] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 748.302687][ T5926] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 748.325608][ T30] audit: type=1326 audit(1765215326.692:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.325660][ T30] audit: type=1326 audit(1765215326.692:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.325702][ T30] audit: type=1326 audit(1765215326.732:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.325744][ T30] audit: type=1326 audit(1765215326.742:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16060 comm="syz.2.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7ad8f749 code=0x7ffc0000 [ 748.604934][ T5897] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 748.662024][ T5926] usb 7-1: USB disconnect, device number 48 [ 748.852345][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 748.852381][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.852404][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.852444][ T5897] usb 6-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 748.852467][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.869417][ T5897] usb 6-1: config 0 descriptor?? [ 749.583282][ T5897] usbhid 6-1:0.0: can't add hid device: -71 [ 749.685273][ T5926] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 749.729541][ T5897] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 750.987428][ T5897] usb 6-1: USB disconnect, device number 121 [ 751.104841][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 751.606144][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.606193][ T5926] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 751.606216][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.225752][ C1] sched: DL replenish lagged too much [ 759.721122][ T5926] usb 3-1: config 0 descriptor?? [ 783.852339][ T5926] usb 3-1: can't set config #0, error -71 [ 800.945579][T12326] Bluetooth: hci4: command 0x0406 tx timeout [ 809.261643][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.273117][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.266090][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.277927][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 912.206721][ T5926] usb 3-1: USB disconnect, device number 62 [ 931.731293][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.742577][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.185661][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.210427][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1009.018865][ T31] INFO: task kworker/0:3:5813 blocked for more than 143 seconds. [ 1009.018893][ T31] Tainted: G L syzkaller #0 [ 1009.018906][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1009.018916][ T31] task:kworker/0:3 state:D stack:22024 pid:5813 tgid:5813 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1009.018971][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 1009.019004][ T31] Call Trace: [ 1009.019013][ T31] [ 1009.019029][ T31] __schedule+0x14bc/0x5000 [ 1009.019074][ T31] ? preempt_schedule+0xae/0xc0 [ 1009.019101][ T31] ? preempt_schedule+0xae/0xc0 [ 1009.019124][ T31] ? __pfx___schedule+0x10/0x10 [ 1009.019158][ T31] ? schedule+0x91/0x360 [ 1009.019184][ T31] schedule+0x165/0x360 [ 1009.019209][ T31] schedule_preempt_disabled+0x13/0x30 [ 1009.019232][ T31] __mutex_lock+0x7e6/0x1350 [ 1009.019262][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1009.019291][ T31] ? reg_check_chans_work+0x156/0xf00 [ 1009.019328][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1009.019352][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1009.019395][ T31] reg_check_chans_work+0x156/0xf00 [ 1009.019432][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1009.019466][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1009.019487][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1009.019508][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1009.019530][ T31] process_scheduled_works+0xad1/0x1770 [ 1009.019578][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1009.019615][ T31] worker_thread+0x8a0/0xda0 [ 1009.019662][ T31] kthread+0x711/0x8a0 [ 1009.019689][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1009.019710][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.019735][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1009.019757][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1009.019779][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.019803][ T31] ret_from_fork+0x599/0xb30 [ 1009.019826][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.019856][ T31] ? __switch_to_asm+0x39/0x70 [ 1009.019879][ T31] ? __switch_to_asm+0x33/0x70 [ 1009.019901][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.019925][ T31] ret_from_fork_asm+0x1a/0x30 [ 1009.019965][ T31] [ 1009.020064][ T31] [ 1009.020064][ T31] Showing all locks held in the system: [ 1009.020077][ T31] 4 locks held by kworker/0:0/9: [ 1009.020090][ T31] #0: ffff88805757ed48 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1009.020151][ T31] #1: ffffc900000e7b80 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1009.020216][ T31] #2: ffff888057eed308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 1009.020271][ T31] #3: ffff88807d6234c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4bf/0x900 [ 1009.020331][ T31] 4 locks held by kworker/u8:0/12: [ 1009.020344][ T31] 3 locks held by kworker/1:0/24: [ 1009.020356][ T31] #0: ffff8880325d7548 ((wq_completion)wg-kex-wg2#16){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1009.020414][ T31] #1: ffffc900001e7b80 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1009.020479][ T31] #2: ffff8880357e8338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbd0 [ 1009.020533][ T31] 1 lock held by khungtaskd/31: [ 1009.020545][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1009.020601][ T31] 4 locks held by kworker/1:1/39: [ 1009.020614][ T31] 3 locks held by kworker/u8:3/50: [ 1009.020626][ T31] 2 locks held by kworker/u9:0/52: [ 1009.020639][ T31] 4 locks held by kworker/u8:4/60: [ 1009.020651][ T31] 4 locks held by kworker/u8:5/73: [ 1009.020663][ T31] 2 locks held by kswapd0/88: [ 1009.020677][ T31] 4 locks held by kworker/u8:6/154: [ 1009.020689][ T31] #0: ffff888054cd7948 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1009.020746][ T31] #1: ffffc90002e77b80 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1009.020798][ T31] #2: ffff88804eef5308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0x750 [ 1009.020851][ T31] #3: ffff88807d394890 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0x750 [ 1009.020907][ T31] 3 locks held by kworker/u8:7/1165: [ 1009.020920][ T31] 3 locks held by kworker/u8:8/1337: [ 1009.020940][ T31] 3 locks held by kworker/R-ipv6_/3182: [ 1009.020952][ T31] #0: ffff88814c677948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1009.021005][ T31] #1: ffffc9000c357b80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1009.021057][ T31] #2: ffffffff8f307a88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1009.021114][ T31] 2 locks held by kworker/R-bat_e/3407: [ 1009.021127][ T31] 3 locks held by kworker/u8:9/4108: [ 1009.021139][ T31] 4 locks held by kworker/u8:10/4390: [ 1009.021152][ T31] 4 locks held by kworker/u8:11/4506: [ 1009.021164][ T31] 2 locks held by klogd/5185: [ 1009.021176][ T31] 3 locks held by udevd/5196: [ 1009.021188][ T31] 1 lock held by dhcpcd/5490: [ 1009.021201][ T31] 1 lock held by dhcpcd/5491: [ 1009.021213][ T31] 2 locks held by getty/5581: [ 1009.021225][ T31] #0: ffff888030be30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1009.021278][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1009.021345][ T31] 4 locks held by kworker/0:3/5813: [ 1009.021357][ T31] #0: ffff88813ff16948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1009.021409][ T31] #1: ffffc90003e27b80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1009.021460][ T31] #2: ffffffff8f307a88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf00 [ 1009.021513][ T31] #3: ffff88804e280788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x156/0xf00 [ 1009.021568][ T31] 4 locks held by udevd/5833: [ 1009.021580][ T31] 2 locks held by syz-executor/5839: [ 1009.021596][ T31] 4 locks held by kworker/1:4/5883: [ 1009.021608][ T31] 3 locks held by kworker/0:4/5890: [ 1009.021621][ T31] 3 locks held by kworker/0:5/5897: [ 1009.021634][ T31] 3 locks held by kworker/0:6/5904: [ 1009.021646][ T31] 4 locks held by kworker/0:7/5911: [ 1009.021658][ T31] 3 locks held by kworker/1:5/5912: [ 1009.021670][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1009.021721][ T31] #1: ffffc9000455fb80 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1009.021772][ T31] #2: ffffffff8f307a88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1009.021828][ T31] 2 locks held by kworker/1:6/5913: [ 1009.021841][ T31] 5 locks held by kworker/0:9/5926: [ 1009.021854][ T31] 3 locks held by kworker/u8:12/5942: [ 1009.021867][ T31] 3 locks held by kworker/u8:13/5943: [ 1009.021879][ T31] 3 locks held by kworker/u8:14/5964: [ 1009.021891][ T31] 4 locks held by kworker/u8:15/5965: [ 1009.021904][ T31] 4 locks held by kworker/u8:16/5975: [ 1009.021916][ T31] 4 locks held by kworker/u8:17/5979: [ 1009.021930][ T31] 4 locks held by kworker/u8:19/6168: [ 1009.021942][ T31] 2 locks held by kworker/1:8/6551: [ 1009.021955][ T31] 4 locks held by kworker/0:11/9184: [ 1009.021967][ T31] 2 locks held by syz-executor/9345: [ 1009.021981][ T31] 2 locks held by syz-executor/12328: [ 1009.021996][ T31] 3 locks held by kworker/u8:1/14991: [ 1009.022008][ T31] 3 locks held by syz-executor/15111: [ 1009.022022][ T31] 7 locks held by kworker/u8:2/15485: [ 1009.022035][ T31] 4 locks held by kworker/1:7/15836: [ 1009.022047][ T31] 4 locks held by kworker/u8:20/15880: [ 1009.022059][ T31] 2 locks held by kworker/0:1/16069: [ 1009.022072][ T31] 2 locks held by kworker/0:2/16074: [ 1009.022084][ T31] 4 locks held by kworker/u8:21/16075: [ 1009.022096][ T31] 4 locks held by kworker/u8:22/16076: [ 1009.022109][ T31] 4 locks held by kworker/u8:23/16080: [ 1009.022121][ T31] 2 locks held by syz-executor/16082: [ 1009.022133][ T31] [ 1009.022140][ T31] ============================================= [ 1009.022140][ T31] [ 1009.022151][ T31] NMI backtrace for cpu 0 [ 1009.022167][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.022190][ T31] Tainted: [L]=SOFTLOCKUP [ 1009.022197][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1009.022208][ T31] Call Trace: [ 1009.022215][ T31] [ 1009.022223][ T31] dump_stack_lvl+0x189/0x250 [ 1009.022248][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1009.022268][ T31] ? __pfx__printk+0x10/0x10 [ 1009.022310][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1009.022332][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1009.022353][ T31] ? __pfx__printk+0x10/0x10 [ 1009.022380][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1009.022408][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1009.022430][ T31] sys_info+0x135/0x170 [ 1009.022453][ T31] watchdog+0xf95/0xfe0 [ 1009.022481][ T31] ? watchdog+0x20a/0xfe0 [ 1009.022510][ T31] kthread+0x711/0x8a0 [ 1009.022535][ T31] ? __pfx_watchdog+0x10/0x10 [ 1009.022556][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.022579][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1009.022599][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1009.022618][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.022641][ T31] ret_from_fork+0x599/0xb30 [ 1009.022661][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.022688][ T31] ? __switch_to_asm+0x39/0x70 [ 1009.022709][ T31] ? __switch_to_asm+0x33/0x70 [ 1009.022728][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.022750][ T31] ret_from_fork_asm+0x1a/0x30 [ 1009.022787][ T31] [ 1009.022794][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1009.022821][ C1] NMI backtrace for cpu 1 [ 1009.022835][ C1] CPU: 1 UID: 0 PID: 15485 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.022857][ C1] Tainted: [L]=SOFTLOCKUP [ 1009.022863][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1009.022875][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1009.022896][ C1] RIP: 0010:check_preemption_disabled+0x3/0x120 [ 1009.022918][ C1] Code: c0 8b 48 c7 c6 40 23 c0 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 05 1e e2 22 07 48 89 44 24 08 65 8b [ 1009.022933][ C1] RSP: 0018:ffffc90000a07ed8 EFLAGS: 00000046 [ 1009.022947][ C1] RAX: 0ac0d5affe09d4ff RBX: 0000000000000202 RCX: e32867508bae4d00 [ 1009.022959][ C1] RDX: 0000000000000005 RSI: ffffffff8d96d2fb RDI: ffffffff8bc02360 [ 1009.022971][ C1] RBP: ffff88802f59e778 R08: ffffc90000a08c48 R09: 0000000000000000 [ 1009.022983][ C1] R10: ffffc90000a08078 R11: fffff52000141011 R12: 0000000000000005 [ 1009.022994][ C1] R13: 0000000000000005 R14: ffffffff8df419e0 R15: ffff88802f59db80 [ 1009.023006][ C1] FS: 0000000000000000(0000) GS:ffff888125f44000(0000) knlGS:0000000000000000 [ 1009.023020][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1009.023031][ C1] CR2: 00007f4ae6222ff8 CR3: 000000007d1f2000 CR4: 00000000003526f0 [ 1009.023046][ C1] Call Trace: [ 1009.023053][ C1] [ 1009.023060][ C1] lock_release+0x26b/0x3b0 [ 1009.023077][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1009.023096][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1009.023112][ C1] unwind_next_frame+0x19a9/0x2390 [ 1009.023131][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1009.023148][ C1] ? process_backlog+0x622/0x1500 [ 1009.023169][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1009.023191][ C1] arch_stack_walk+0x11c/0x150 [ 1009.023210][ C1] ? __napi_poll+0xae/0x320 [ 1009.023228][ C1] stack_trace_save+0x9c/0xe0 [ 1009.023249][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1009.023270][ C1] ? net_generic+0x1e/0x240 [ 1009.023290][ C1] ? net_generic+0x1e/0x240 [ 1009.023310][ C1] kasan_save_track+0x3e/0x80 [ 1009.023325][ C1] ? kasan_save_track+0x3e/0x80 [ 1009.023338][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1009.023353][ C1] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1009.023373][ C1] ? skb_clone+0x212/0x3a0 [ 1009.023387][ C1] ? maybe_deliver+0x98/0x160 [ 1009.023406][ C1] ? br_flood+0x31a/0x6a0 [ 1009.023422][ C1] ? br_handle_frame_finish+0x15a3/0x1c90 [ 1009.023442][ C1] ? br_handle_frame+0xb75/0x14f0 [ 1009.023461][ C1] ? __netif_receive_skb_core+0x95f/0x2f90 [ 1009.023478][ C1] ? __netif_receive_skb+0x72/0x380 [ 1009.023495][ C1] ? process_backlog+0x622/0x1500 [ 1009.023530][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1009.023551][ C1] kmem_cache_alloc_noprof+0x37d/0x710 [ 1009.023572][ C1] ? skb_clone+0x212/0x3a0 [ 1009.023588][ C1] skb_clone+0x212/0x3a0 [ 1009.023603][ C1] maybe_deliver+0x98/0x160 [ 1009.023623][ C1] br_flood+0x31a/0x6a0 [ 1009.023644][ C1] br_handle_frame_finish+0x15a3/0x1c90 [ 1009.023669][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1009.023690][ C1] ? net_generic+0x1e/0x240 [ 1009.023708][ C1] ? net_generic+0x1e/0x240 [ 1009.023726][ C1] ? net_generic+0x1e/0x240 [ 1009.023745][ C1] ? br_cfm_status_fill_info+0x9b0/0xc80 [ 1009.023766][ C1] ? br_nf_pre_routing+0xc30/0x1470 [ 1009.023790][ C1] br_handle_frame+0xb75/0x14f0 [ 1009.023813][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1009.023834][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1009.023854][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 1009.023872][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1009.023891][ C1] __netif_receive_skb_core+0x95f/0x2f90 [ 1009.023909][ C1] ? arp_process+0xee8/0x17a0 [ 1009.023926][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1009.023947][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1009.023968][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1009.023988][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1009.024009][ C1] ? process_backlog+0x2d9/0x1500 [ 1009.024028][ C1] ? process_backlog+0x2d9/0x1500 [ 1009.024048][ C1] __netif_receive_skb+0x72/0x380 [ 1009.024067][ C1] ? process_backlog+0x2d9/0x1500 [ 1009.024086][ C1] process_backlog+0x622/0x1500 [ 1009.024110][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1009.024130][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1009.024149][ C1] __napi_poll+0xae/0x320 [ 1009.024165][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1009.024184][ C1] net_rx_action+0x672/0xe50 [ 1009.024208][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1009.024228][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1009.024249][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1009.024271][ C1] handle_softirqs+0x27d/0x850 [ 1009.024289][ C1] ? do_softirq+0xec/0x180 [ 1009.024307][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1009.024325][ C1] ? kernel_fpu_end+0xc8/0x120 [ 1009.024343][ C1] do_softirq+0xec/0x180 [ 1009.024358][ C1] [ 1009.024363][ C1] [ 1009.024370][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1009.024388][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1009.024404][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1009.024420][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1009.024437][ C1] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 1009.024457][ C1] kernel_fpu_end+0xd2/0x120 [ 1009.024474][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 1009.024496][ C1] blake2s_compress+0xe9/0x1b80 [ 1009.024511][ C1] ? chacha_block_generic+0x53/0xc80 [ 1009.024526][ C1] ? __crypto_xor+0x17fa/0x1850 [ 1009.024552][ C1] ? chacha_crypt+0xf31/0xf90 [ 1009.024566][ C1] ? preempt_schedule+0xae/0xc0 [ 1009.024582][ C1] ? kernel_fpu_end+0xc8/0x120 [ 1009.024599][ C1] ? preempt_schedule_common+0x83/0xd0 [ 1009.024619][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 1009.024633][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 1009.024650][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1009.024669][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1009.024686][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1009.024701][ C1] ? blake2s_update+0x255/0x450 [ 1009.024717][ C1] blake2s_final+0x116/0x260 [ 1009.024732][ C1] hmac+0x1c6/0x330 [ 1009.024748][ C1] ? __pfx_hmac+0x10/0x10 [ 1009.024778][ C1] kdf+0x105/0x270 [ 1009.024794][ C1] ? __pfx_kdf+0x10/0x10 [ 1009.024812][ C1] ? blake2s_update+0x255/0x450 [ 1009.024827][ C1] ? __asan_memset+0x22/0x50 [ 1009.024850][ C1] wg_noise_handshake_create_initiation+0x3f1/0x750 [ 1009.024872][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1009.024903][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1009.024926][ C1] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 1009.024949][ C1] ? register_lock_class+0x51/0x320 [ 1009.024970][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 1009.024993][ C1] wg_packet_handshake_send_worker+0x163/0x320 [ 1009.025015][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1009.025044][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1009.025062][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 1009.025078][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 1009.025096][ C1] process_scheduled_works+0xad1/0x1770 [ 1009.025123][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1009.025147][ C1] worker_thread+0x8a0/0xda0 [ 1009.025174][ C1] kthread+0x711/0x8a0 [ 1009.025194][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1009.025211][ C1] ? __pfx_kthread+0x10/0x10 [ 1009.025232][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1009.025250][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1009.025269][ C1] ? __pfx_kthread+0x10/0x10 [ 1009.025288][ C1] ret_from_fork+0x599/0xb30 [ 1009.025304][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.025324][ C1] ? __switch_to_asm+0x39/0x70 [ 1009.025344][ C1] ? __switch_to_asm+0x33/0x70 [ 1009.025362][ C1] ? __pfx_kthread+0x10/0x10 [ 1009.025382][ C1] ret_from_fork_asm+0x1a/0x30 [ 1009.025408][ C1] [ 1009.036907][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1009.036929][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.036955][ T31] Tainted: [L]=SOFTLOCKUP [ 1009.036962][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1009.036975][ T31] Call Trace: [ 1009.036983][ T31] [ 1009.036998][ T31] dump_stack_lvl+0x99/0x250 [ 1009.037024][ T31] ? __asan_memcpy+0x40/0x70 [ 1009.037050][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1009.037071][ T31] ? __pfx__printk+0x10/0x10 [ 1009.037108][ T31] vpanic+0x237/0x6d0 [ 1009.037130][ T31] ? __pfx_vpanic+0x10/0x10 [ 1009.037160][ T31] panic+0xb9/0xc0 [ 1009.037180][ T31] ? __pfx_panic+0x10/0x10 [ 1009.037215][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1009.037239][ T31] watchdog+0xfdf/0xfe0 [ 1009.037268][ T31] ? watchdog+0x20a/0xfe0 [ 1009.037304][ T31] kthread+0x711/0x8a0 [ 1009.037330][ T31] ? __pfx_watchdog+0x10/0x10 [ 1009.037352][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.037377][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1009.037398][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1009.037419][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.037442][ T31] ret_from_fork+0x599/0xb30 [ 1009.037463][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.037491][ T31] ? __switch_to_asm+0x39/0x70 [ 1009.037512][ T31] ? __switch_to_asm+0x33/0x70 [ 1009.037534][ T31] ? __pfx_kthread+0x10/0x10 [ 1009.037555][ T31] ret_from_fork_asm+0x1a/0x30 [ 1009.037590][ T31] [ 1009.037986][ T31] Kernel Offset: disabled