last executing test programs: 20m17.603970742s ago: executing program 32 (id=378): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getitimer(0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x237}], 0x1}}], 0x1, 0x42054) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 19m48.313144465s ago: executing program 0 (id=463): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 19m47.145095212s ago: executing program 0 (id=465): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x0, 0x731, 0x70bd2d, 0x25dfdbfe, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x4000000}, 0x0) listen(r2, 0xda8d) accept4$inet(r2, 0x0, 0x0, 0x800) shutdown(r2, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19m42.626706087s ago: executing program 0 (id=474): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_usb_connect(0x4, 0xfe21, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x35, &(0x7f00000001c0)=@string={0x35, 0x3, "2a44a902bf003f8afb12cb6b4649aebc0d79c950e594e102c59ada270ef66e53f8b137d719046d8fc2427aa617974a9988453e"}}]}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) open$dir(&(0x7f0000000100)='./file0\x00', 0x20000, 0x29) shmget(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) read$FUSE(r6, &(0x7f0000000b80)={0x2020}, 0x2020) r7 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x2}}, 0x10) 19m41.495296013s ago: executing program 1 (id=479): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000280)={r4, 0x3, 0x1ff, 0x2, &(0x7f0000000040)=[{0x5, 0x5, 0x6, 0x4}, {0x0, 0x5, 0x7, 0xab}]}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000192c0)=@newtaction={0x18, 0x30, 0x400, 0xffffffff, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x24040000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) socket(0x200000000000011, 0x2, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000080)) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000000b0103000000000000000500000108000240000000010800034000000001080003400000000009000100495056530000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 19m41.418905874s ago: executing program 3 (id=481): socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_extract_tcp_res(0x0, 0x80000000, 0xd) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x78be, 0x0, 0x0, 0x0, &(0x7f0000000080)) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 19m40.915341022s ago: executing program 3 (id=482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0xfffffede}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 19m40.782513473s ago: executing program 5 (id=483): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x4044094}, 0x14) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000380)=""/91, 0x5b}], 0x1}, 0x40012001) 19m40.199299092s ago: executing program 3 (id=485): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1808c00, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) 19m39.179368136s ago: executing program 0 (id=486): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xfffffffffffffec7) socket(0x1f, 0x2, 0xfffffffc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8004) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='nfsd\x00', 0x208000, 0x0) 19m39.106807267s ago: executing program 3 (id=487): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x57, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x40, 0x4}}], 0x58, 0x4044004}, 0x40) 19m39.020838319s ago: executing program 5 (id=488): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x100008, 0x13, 0x200, &(0x7f0000000d80)="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"}) 19m39.020220249s ago: executing program 1 (id=489): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) 19m38.519416756s ago: executing program 3 (id=490): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) 19m38.510773356s ago: executing program 5 (id=491): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x10003, 0x4) 19m38.509896276s ago: executing program 1 (id=492): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) 19m37.924768844s ago: executing program 5 (id=493): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) 19m37.827284096s ago: executing program 1 (id=494): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40810) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffffff, &(0x7f0000000540)='./bus/../file0\x00', 0x4000, 0x80) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x8000, r2, 0x0, '\x00', 0x0, r1, 0x4, 0x2, 0x6, 0x0, @value=r1}, 0x50) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=r2, r5, 0x1a, 0x2028, 0x0, @void, @void, @value=0xffffffffffffffff}, 0x20) 19m37.168052336s ago: executing program 5 (id=495): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0xc9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfa1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x44}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 19m37.066740077s ago: executing program 0 (id=497): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) madvise(&(0x7f0000609000/0x1000)=nil, 0x1000, 0x11) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000280)=0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) read$FUSE(r4, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x6a, 0x10, 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 19m35.811034285s ago: executing program 3 (id=498): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001505000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad014031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f00000002c0)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4004000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) syz_clone(0x2008100, &(0x7f0000001880)="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", 0x1000, &(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)="a61dc6a565e043e1a734c98e67f071b26dbbe8da9cf3be934dfe4d77726a9ea2a8a67a2f4f643a62fab05b270b9cb72e343133488aa55a8d50ced035bb60d7037f6461110c7b49dea3732510f4fce2d5") openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xa}, {0xfff1, 0xfff2}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x810) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000200000020000000000000000000000203003177045d827017c2000400"/74], 0x0, 0x4a}, 0x20) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000"], 0x4000) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000540), 0xc000, 0x0) close_range(r4, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fc7fffff00000000000000008500000036000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x1, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="00f2ff00"/14, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e) 19m34.644393312s ago: executing program 5 (id=499): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008850) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0x80000000}], 0x1, 0x10040, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) 19m34.567272913s ago: executing program 1 (id=500): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_channels={0x3c, 0x1f, 0x10001, 0xcb, 0x7d2, 0x0, 0x9, 0x5db, 0x2}}) 19m33.603373217s ago: executing program 1 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 19m33.110797294s ago: executing program 0 (id=503): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003700)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 19m32.72724255s ago: executing program 2 (id=504): r0 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m32.523896102s ago: executing program 2 (id=505): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x10) 19m32.395274624s ago: executing program 2 (id=506): socket$inet(0x2b, 0x801, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) syz_open_dev$sg(&(0x7f0000000000), 0x7fff, 0x48a001) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) gettid() 19m31.701658774s ago: executing program 2 (id=507): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x700, 0x1, 0x1000, 0x4, {{0x29, 0x4, 0x2, 0x17, 0xa4, 0x67, 0x0, 0x35, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x15, 0x3, 0xc, [{@local, 0x800}]}, @end, @timestamp_addr={0x44, 0x4c, 0x3d, 0x1, 0xc, [{@rand_addr=0x64010100, 0x416}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x1}, {@loopback, 0x2}, {@remote, 0x8}, {@rand_addr=0x64010100, 0x8000000}, {@broadcast, 0x100}]}, @timestamp_addr={0x44, 0x34, 0x55, 0x1, 0x8, [{@rand_addr=0x64010101, 0x2a29cf7d}, {@empty, 0x80}, {@multicast1, 0x4}, {@empty, 0x3}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}]}, @generic={0x88, 0x2}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r4 = msgget$private(0x0, 0x508) msgsnd(r4, &(0x7f00000000c0)={0x1}, 0x8, 0x800) msgrcv(r4, &(0x7f00000004c0)={0x0, ""/179}, 0xbb, 0x1, 0x0) msgctl$IPC_RMID(r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) unshare(0x60000000) socket$nl_route(0x10, 0x3, 0x0) 19m27.438828396s ago: executing program 2 (id=508): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x2, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffffff, 0x0, 0x4000, 0x80) socket(0x29, 0x800, 0x10) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 19m26.48012461s ago: executing program 2 (id=509): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r0, r1, 0x0, 0x201f00) 19m20.153308041s ago: executing program 33 (id=498): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad014031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f00000002c0)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4004000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) syz_clone(0x2008100, &(0x7f0000001880)="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", 0x1000, &(0x7f0000002880), &(0x7f00000028c0), &(0x7f0000002900)="a61dc6a565e043e1a734c98e67f071b26dbbe8da9cf3be934dfe4d77726a9ea2a8a67a2f4f643a62fab05b270b9cb72e343133488aa55a8d50ced035bb60d7037f6461110c7b49dea3732510f4fce2d5") openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xa}, {0xfff1, 0xfff2}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x810) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000200000020000000000000000000000203003177045d827017c2000400"/74], 0x0, 0x4a}, 0x20) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000"], 0x4000) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000540), 0xc000, 0x0) close_range(r4, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fc7fffff00000000000000008500000036000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x1, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="00f2ff00"/14, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e) 19m18.626906803s ago: executing program 34 (id=499): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008850) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0x80000000}], 0x1, 0x10040, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) 19m18.17740984s ago: executing program 35 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 19m17.186969954s ago: executing program 36 (id=503): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/70, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003700)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 19m11.17085281s ago: executing program 37 (id=509): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r0, r1, 0x0, 0x201f00) 6.902851567s ago: executing program 8 (id=4049): syz_usb_connect(0x3, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000"], 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000001300)=0x4) syz_emit_ethernet(0x82, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @local, {[@rr={0x7, 0x3, 0x9e}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@rand_addr, 0x40000}, {@dev}, {@remote}]}]}}}}}}}, 0x0) 6.295042156s ago: executing program 4 (id=4056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 6.069003099s ago: executing program 4 (id=4057): unshare(0x28000600) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff7, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080), 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x5d]}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x98ca, 0x108000) lseek(r1, 0x8828, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000180)={0x10, 0x9, {0x55, 0xf, 0x82, {0x0, 0x7f}, {0x2, 0x2}, @period={0x1, 0x9, 0x0, 0x2f5, 0x3, {0x1, 0x100, 0xa, 0x4}, 0x0, 0x0}}, {0x53, 0x7, 0x3, {0x5, 0x7ff}, {0xe0, 0x360c}, @period={0x1, 0x7, 0xd, 0x8, 0x7, {0x4, 0x4, 0x9, 0xc}, 0x0, 0x0}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x45}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf20) 5.856972431s ago: executing program 7 (id=4058): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000001c40)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="cb5c", 0x2}], 0x1}}], 0x2, 0x2404c4c4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.641414854s ago: executing program 7 (id=4059): socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 5.422136327s ago: executing program 7 (id=4061): mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000003, 0x0, 0x6}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 5.277906349s ago: executing program 8 (id=4062): socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5.103363252s ago: executing program 7 (id=4063): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x400) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) fcntl$getflags(r3, 0x40a) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r4, 0x4, 0x2000) shutdown(r4, 0x1) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, 0x0, 0x0) 4.865987815s ago: executing program 4 (id=4064): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x0, {0x5, 0xa, 0x3, 0x499}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) 4.46961348s ago: executing program 4 (id=4065): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = dup(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000d80)={0xe, 0x0, 0x6, 0x0, 0x0, [{{r2}, 0x6}, {{r4}, 0xffffffffffffffff}, {{r4}, 0xcc64}, {{r0}, 0x9}, {{r0}, 0x8}, {{r2}, 0x8}]}) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) gettid() r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r2) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000780)={0x54, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) getsockname(r0, &(0x7f0000000180)=@hci, &(0x7f0000000040)=0x80) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) epoll_create(0x3) dup3(r6, r7, 0x80000) 4.074388625s ago: executing program 6 (id=4067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 3.845459458s ago: executing program 6 (id=4068): mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000003, 0x0, 0x6}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.423308444s ago: executing program 9 (id=4069): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122", 0x7d}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a", 0x56}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702", 0x96}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b4", 0xe8}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e", 0x7a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f0000000540)={0x1, 0x0, [{0xc0000000, 0x3, 0x2, 0x5, 0x6, 0x5, 0x3}]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.866733321s ago: executing program 9 (id=4070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.814584082s ago: executing program 8 (id=4071): socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2.518164806s ago: executing program 7 (id=4072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f0000000540)={0x1, 0x0, [{0xc0000000, 0x3, 0x2, 0x5, 0x6, 0x5, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.513842726s ago: executing program 9 (id=4073): unshare(0x28000600) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff7, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080), 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x5d]}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x98ca, 0x108000) lseek(r0, 0x8828, 0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000180)={0x10, 0x9, {0x55, 0xf, 0x82, {0x0, 0x7f}, {0x2, 0x2}, @period={0x1, 0x9, 0x0, 0x2f5, 0x3, {0x1, 0x100, 0xa, 0x4}, 0x0, 0x0}}, {0x53, 0x7, 0x3, {0x5, 0x7ff}, {0xe0, 0x360c}, @period={0x1, 0x7, 0xd, 0x8, 0x7, {0x4, 0x4, 0x9, 0xc}, 0x0, 0x0}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x400, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x45}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf20) 2.414101517s ago: executing program 8 (id=4074): syz_usb_connect(0x3, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000"], 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000001300)=0x4) syz_emit_ethernet(0x82, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @local, {[@rr={0x7, 0x3, 0x9e}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@rand_addr, 0x40000}, {@dev}, {@remote}]}]}}}}}}}, 0x0) 2.298923619s ago: executing program 6 (id=4075): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x0, {0x5, 0xa, 0x3, 0x499}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) 1.999383593s ago: executing program 6 (id=4076): syz_usb_connect(0x3, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x1000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) syz_emit_ethernet(0x82, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @local, {[@rr={0x7, 0x3, 0x9e}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@rand_addr, 0x40000}, {@dev}, {@remote}]}]}}}}}}}, 0x0) 1.625538967s ago: executing program 4 (id=4077): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x0, {0x5, 0xa, 0x3, 0x499}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) 1.4354082s ago: executing program 7 (id=4078): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "4a364ecd0ce257f218ca3145ca166fe65ad3c8d8"}, 0x15, 0x1) mmap$xdp(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2000004, 0x12, r0, 0x180000000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) r9 = socket(0x2, 0x80805, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, r10, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x40, 0x8, 0x1ff, 0xffff8000]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48001}, 0x40000) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r12, 0x0, 0x0, 0x100000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', 0x0, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x844) r14 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040410e414240000102030109026e0003017d0006080b0002012230090904000000010130000a2401100a00090000000904010000bf6b795fd14cc19101010230000905010960002503050a2525010400000500000904020000010230000904020101010230000905820900027706c00a2525ffffff7f01e10b"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r14, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000000)={r15, 0xfffb}, 0x8) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f00000001c0)="56d5c10b24cc094ae743", 0xa) 1.110183414s ago: executing program 9 (id=4079): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in=@local}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) socket$netlink(0x10, 0x3, 0x4) unshare(0x20000400) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 665.80798ms ago: executing program 8 (id=4080): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122", 0x7d}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a", 0x56}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702", 0x96}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b4", 0xe8}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e", 0x7a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f0000000540)={0x1, 0x0, [{0xc0000000, 0x3, 0x2, 0x5, 0x6, 0x5, 0x3}]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 568.987081ms ago: executing program 9 (id=4081): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615f", 0x69}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 243.194116ms ago: executing program 8 (id=4082): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x400) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) fcntl$getflags(r3, 0x40a) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r4, 0x4, 0x2000) shutdown(r4, 0x1) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, 0x0, 0x0) 242.629786ms ago: executing program 4 (id=4083): mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000003, 0x0, 0x6}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 234.973876ms ago: executing program 6 (id=4084): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 139.423798ms ago: executing program 9 (id=4085): syz_usb_connect$uac2(0x3, 0x8d, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e47000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) 0s ago: executing program 6 (id=4086): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) kernel console output (not intermixed with test programs): evice number 85 [ 1196.078322][ T4318] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1196.379548][ T4318] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1196.399230][ T4318] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1196.406807][ T4318] usb 8-1: can't read configurations, error -71 [ 1197.505366][ T41] usb 7-1: USB disconnect, device number 99 [ 1197.860823][T17478] syz.7.3039 (17478): drop_caches: 2 [ 1199.877787][ T6590] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1200.069739][ T6590] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1200.087266][ T6590] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1200.129832][ T6590] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1200.166877][ T6590] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1200.219333][ T6590] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1200.266752][ T6590] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1200.306170][ T6590] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1200.344498][ T6590] usb 8-1: Product: syz [ 1200.369430][ T6590] usb 8-1: Manufacturer: syz [ 1200.414402][ T6590] cdc_wdm 8-1:1.0: skipping garbage [ 1200.429585][ T6590] cdc_wdm 8-1:1.0: skipping garbage [ 1200.469932][ T6590] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1200.508630][ T6590] cdc_wdm 8-1:1.0: Unknown control protocol [ 1200.949303][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -EPIPE [ 1202.163577][T17522] syz.6.3054 (17522): drop_caches: 2 [ 1202.271419][T17523] input: syz1 as /devices/virtual/input/input105 [ 1202.571684][T16610] usb 8-1: USB disconnect, device number 88 [ 1203.943968][T17548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.974636][T17548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.012286][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3062'. [ 1205.294893][T17567] syz.4.3065 (17567): drop_caches: 2 [ 1205.394714][T17567] input: syz1 as /devices/virtual/input/input106 [ 1205.497749][ T5298] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1206.147830][ T5298] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1206.196158][ T5298] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1206.270397][ T5298] usb 7-1: can't read configurations, error -71 [ 1208.017755][ T5298] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1208.238027][ T5298] usb 8-1: Using ep0 maxpacket: 8 [ 1208.248900][ T5298] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1208.281980][ T5298] usb 8-1: config 0 has no interface number 0 [ 1208.341165][ T5298] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1208.430290][ T5298] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.489221][ T5298] usb 8-1: Product: syz [ 1208.501828][ T5298] usb 8-1: Manufacturer: syz [ 1208.521863][ T5298] usb 8-1: SerialNumber: syz [ 1208.557444][ T5298] usb 8-1: config 0 descriptor?? [ 1208.817165][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3072'. [ 1209.578721][ T5298] usb 8-1: USB disconnect, device number 89 [ 1209.775000][T17607] syz.4.3078 (17607): drop_caches: 2 [ 1209.862573][T17607] input: syz1 as /devices/virtual/input/input111 [ 1210.957889][T17617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.040814][T17617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.136532][T17645] input: syz1 as /devices/virtual/input/input113 [ 1212.295399][T17644] syz.9.3084 (17644): drop_caches: 2 [ 1214.214732][T17664] syz.4.3089 (17664): drop_caches: 2 [ 1214.265386][T17664] input: syz1 as /devices/virtual/input/input116 [ 1214.465748][ T6696] udevd[6696]: setting mode of /dev/input/event6 to 020660 failed: No such file or directory [ 1214.551049][ T6696] udevd[6696]: setting owner of /dev/input/event6 to uid=0, gid=104 failed: No such file or directory [ 1215.099116][T17683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.129193][T17683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.197388][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3093'. [ 1215.217685][ T4324] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1215.407806][ T4324] usb 7-1: Using ep0 maxpacket: 32 [ 1215.521992][ T4324] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1215.545872][ T4324] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1215.572237][ T4324] usb 7-1: can't read configurations, error -71 [ 1216.538160][ T5329] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1217.377838][ T5329] usb 8-1: Using ep0 maxpacket: 32 [ 1217.517559][ T5329] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1217.550327][ T5329] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1217.558440][ T5329] usb 8-1: can't read configurations, error -71 [ 1218.370257][T17712] syz.4.3102 (17712): drop_caches: 2 [ 1218.450281][T17719] input: syz1 as /devices/virtual/input/input117 [ 1218.565639][T17715] device syzkaller0 entered promiscuous mode [ 1218.576284][T17720] syz.8.3103 (17720): drop_caches: 2 [ 1218.624439][T17720] input: syz1 as /devices/virtual/input/input118 [ 1221.330679][T17749] syz.4.3111 (17749): drop_caches: 2 [ 1221.459430][T17749] input: syz1 as /devices/virtual/input/input121 [ 1222.798101][T17759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.807918][T17759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.124913][T17766] syz.6.3117 (17766): drop_caches: 2 [ 1223.238416][T17766] input: syz1 as /devices/virtual/input/input122 [ 1224.935270][T17784] syz.9.3122 (17784): drop_caches: 2 [ 1224.976035][T17784] input: syz1 as /devices/virtual/input/input123 [ 1225.037771][T14031] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1225.217925][T14031] usb 7-1: Using ep0 maxpacket: 32 [ 1225.225738][T14031] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1225.245551][T14031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.266055][T14031] usb 7-1: config 0 descriptor?? [ 1225.348707][T17787] input: syz1 as /devices/virtual/input/input124 [ 1225.484008][T14031] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1225.501604][T14031] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1225.522228][T14031] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1225.541681][T14031] usb 7-1: media controller created [ 1225.718945][T14031] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1226.722174][T17804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.754523][T17804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.971261][T14031] az6027: usb out operation failed. (-71) [ 1226.978088][T14031] az6027: usb out operation failed. (-71) [ 1227.011835][T14031] stb0899_attach: Driver disabled by Kconfig [ 1227.033299][T14031] az6027: no front-end attached [ 1227.033299][T14031] [ 1227.042599][T14031] az6027: usb out operation failed. (-71) [ 1227.056467][T14031] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1227.077837][T14031] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input126 [ 1227.103246][T14031] dvb-usb: schedule remote query interval to 400 msecs. [ 1227.121596][T14031] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1227.181542][T14031] usb 7-1: USB disconnect, device number 104 [ 1227.253450][T14031] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1228.969095][T17828] syz.7.3135 (17828): drop_caches: 2 [ 1229.066764][T17830] syz.6.3136 (17830): drop_caches: 2 [ 1229.090822][T17828] syz.7.3135 (17828): drop_caches: 2 [ 1229.152933][T17833] input: syz1 as /devices/virtual/input/input130 [ 1230.720766][T17846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.967863][ T22] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1231.212727][T17846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.293186][ T22] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1231.348902][ T22] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.424905][ T22] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1231.435244][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.447010][ T22] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.461838][ T22] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1231.478938][ T22] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1231.495495][ T22] usb 8-1: Product: syz [ 1231.505137][ T22] usb 8-1: Manufacturer: syz [ 1231.522013][ T22] cdc_wdm 8-1:1.0: skipping garbage [ 1231.531064][T17852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.539543][ T22] cdc_wdm 8-1:1.0: skipping garbage [ 1231.547460][ T22] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1231.555872][T17852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.566668][ T22] cdc_wdm 8-1:1.0: Unknown control protocol [ 1231.727078][T17843] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 1231.742196][ T5298] usb 8-1: USB disconnect, device number 92 [ 1232.541934][T17871] syz.9.3148 (17871): drop_caches: 2 [ 1232.717075][T17871] input: syz1 as /devices/virtual/input/input132 [ 1233.777411][T17892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.809593][T17892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.508276][ T5298] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 1234.709413][ T5298] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1234.752186][ T5298] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.819621][ T5298] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1234.872900][ T5298] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.953748][ T5298] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.031010][ T5298] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1235.103190][ T5298] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1235.140114][ T5298] usb 9-1: Product: syz [ 1235.153056][ T5298] usb 9-1: Manufacturer: syz [ 1235.189060][ T5298] cdc_wdm 9-1:1.0: skipping garbage [ 1235.225140][ T5298] cdc_wdm 9-1:1.0: skipping garbage [ 1235.253845][ T5298] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1235.281316][ T5298] cdc_wdm 9-1:1.0: Unknown control protocol [ 1235.392314][T17901] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 1235.423423][ T4318] usb 9-1: USB disconnect, device number 102 [ 1235.667664][ T5329] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1235.877709][ T5329] usb 8-1: Using ep0 maxpacket: 8 [ 1235.884738][ T5329] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1235.947652][ T5329] usb 8-1: config 179 has no interface number 0 [ 1235.957883][ T5329] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1235.999797][ T5329] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1236.021842][ T5329] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1236.038476][ T5329] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1236.050350][ T5329] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1236.064339][ T5329] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1236.073712][ T5329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.090289][T17913] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1237.041764][ T4318] usb 8-1: USB disconnect, device number 93 [ 1237.041878][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1237.056179][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1238.022329][T17934] syz.4.3167 (17934): drop_caches: 2 [ 1238.517754][ T5329] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1238.582225][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.588927][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.717764][ T5329] usb 8-1: Using ep0 maxpacket: 32 [ 1239.126286][ T5329] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1239.174101][ T5329] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1239.209914][ T5329] usb 8-1: can't read configurations, error -71 [ 1240.972887][T17985] syz.9.3177 (17985): drop_caches: 2 [ 1241.031153][T17987] input: syz1 as /devices/virtual/input/input137 [ 1241.302782][T17992] syz.7.3180 (17992): drop_caches: 2 [ 1241.450316][T17992] input: syz1 as /devices/virtual/input/input138 [ 1241.777902][T16610] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1241.987742][T16610] usb 7-1: Using ep0 maxpacket: 8 [ 1242.025036][T16610] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1242.054402][T16610] usb 7-1: config 179 has no interface number 0 [ 1242.094928][T16610] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1242.137750][T16610] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1242.195837][T16610] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1242.227853][T16610] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1242.269570][T16610] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1242.306183][T16610] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1242.324455][T16610] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.365678][T17995] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1242.736380][ T22] usb 7-1: USB disconnect, device number 105 [ 1242.736387][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1242.736588][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1245.653489][T18057] syz.6.3197 (18057): drop_caches: 2 [ 1245.786109][T18057] input: syz1 as /devices/virtual/input/input140 [ 1245.944701][T18064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.995986][T18064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.477707][ T22] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1246.668142][ T22] usb 7-1: Using ep0 maxpacket: 16 [ 1246.675885][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.710073][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.732760][ T22] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1246.756502][ T22] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1246.887441][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.903697][ T22] usb 7-1: config 0 descriptor?? [ 1247.867253][ T22] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000E/input/input143 [ 1248.017207][ T22] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1248.070912][ T22] usb 7-1: USB disconnect, device number 106 [ 1248.364692][T18078] fido_id[18078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1248.838110][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3206'. [ 1249.817663][ T22] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1250.223732][T18118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.247873][T18116] syz.8.3213 (18116): drop_caches: 2 [ 1250.258229][T18118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.287064][ T22] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1250.318822][ T22] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1250.326484][ T22] usb 8-1: can't read configurations, error -71 [ 1250.348521][T18116] input: syz1 as /devices/virtual/input/input144 [ 1251.156055][T18131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.194085][T18131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.110637][T18144] syz.8.3223 (18144): drop_caches: 2 [ 1252.185236][T18144] input: syz1 as /devices/virtual/input/input147 [ 1253.536404][T18167] syz.8.3228 (18167): drop_caches: 2 [ 1253.680626][T18167] input: syz1 as /devices/virtual/input/input148 [ 1254.607772][ T6590] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1254.797878][ T6590] usb 7-1: Using ep0 maxpacket: 32 [ 1254.817698][ T6590] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1254.852528][ T6590] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1254.892339][ T6590] usb 7-1: can't read configurations, error -71 [ 1255.343370][T18192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.357842][T18192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.920677][ T22] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 1256.107673][ T22] usb 9-1: Using ep0 maxpacket: 8 [ 1256.115113][ T22] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1256.142516][ T22] usb 9-1: config 0 has no interface number 0 [ 1256.174938][ T22] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1256.209642][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.237932][ T22] usb 9-1: Product: syz [ 1256.249182][ T22] usb 9-1: Manufacturer: syz [ 1256.259595][ T22] usb 9-1: SerialNumber: syz [ 1256.280780][ T22] usb 9-1: config 0 descriptor?? [ 1256.510935][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3236'. [ 1256.538998][ T22] usb 9-1: USB disconnect, device number 103 [ 1257.328148][ T4320] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1257.337966][T18241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.368663][T18241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.700040][ T4320] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1257.718346][T18250] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3249'. [ 1257.731094][ T4320] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1257.748393][ T4320] usb 7-1: can't read configurations, error -71 [ 1258.476923][T18263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.568485][T18263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.366312][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1260.598303][T18304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.628099][T18304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.233809][T18316] syz.7.3266 (18316): drop_caches: 2 [ 1261.245290][T18316] input: syz1 as /devices/virtual/input/input150 [ 1262.503401][T18340] syz.6.3271 (18340): drop_caches: 2 [ 1262.623202][T18340] input: syz1 as /devices/virtual/input/input151 [ 1262.837278][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3272'. [ 1263.087713][T14031] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1263.437677][ T41] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1263.513553][T14031] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1263.549598][T14031] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1263.576477][T14031] usb 8-1: can't read configurations, error -71 [ 1263.637656][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 1263.644643][ T41] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1263.687517][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.729437][ T41] usb 7-1: config 0 descriptor?? [ 1263.777199][T18361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.806553][T18361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.942236][ T41] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1263.959430][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1263.998187][ T41] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1264.005397][ T41] usb 7-1: media controller created [ 1264.046650][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1264.547936][T14031] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1265.081127][T14031] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1265.136978][T14031] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1265.162911][T14031] usb 8-1: can't read configurations, error -71 [ 1265.204765][T14031] usb usb8-port1: attempt power cycle [ 1266.098081][ T41] az6027: usb out operation failed. (-110) [ 1266.105129][ T41] az6027: usb out operation failed. (-32) [ 1266.124533][ T41] stb0899_attach: Driver disabled by Kconfig [ 1266.144343][ T41] az6027: no front-end attached [ 1266.144343][ T41] [ 1266.167757][ T41] az6027: usb out operation failed. (-32) [ 1266.186170][ T41] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1266.215833][ T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input152 [ 1266.260993][ T41] dvb-usb: schedule remote query interval to 400 msecs. [ 1266.283193][ T41] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1266.570583][T18402] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3290'. [ 1268.429321][ T41] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1268.723520][ T41] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1268.740348][ T41] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1268.757937][ T41] usb 8-1: can't read configurations, error -71 [ 1271.997938][T14031] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 1272.272793][T14031] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1272.291569][T14031] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1272.300230][T14031] usb 9-1: can't read configurations, error -71 [ 1273.495267][T18509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.517042][T18509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.538977][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3323'. [ 1274.367793][T18529] syz.6.3329 (18529): drop_caches: 2 [ 1274.415714][T18529] input: syz1 as /devices/virtual/input/input158 [ 1274.467720][ T5298] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 1274.857203][ T5298] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1274.897923][ T5298] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1274.905610][ T5298] usb 9-1: can't read configurations, error -71 [ 1275.843961][T18568] syz.9.3342 (18568): drop_caches: 2 [ 1275.923437][T18568] input: syz1 as /devices/virtual/input/input159 [ 1276.382219][T18580] syz.4.3345 (18580): drop_caches: 2 [ 1276.482588][T18580] input: syz1 as /devices/virtual/input/input161 [ 1276.963888][T18593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.029049][T18593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.955392][T18619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.977992][T18619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.220360][T14031] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 1279.845913][T14031] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1279.863922][T14031] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1279.885057][T14031] usb 9-1: can't read configurations, error -71 [ 1280.630180][T18695] syz.7.3378 (18695): drop_caches: 2 [ 1280.768362][T18695] input: syz1 as /devices/virtual/input/input162 [ 1281.367760][T18712] input: syz1 as /devices/virtual/input/input163 [ 1282.443338][T18734] device syzkaller0 entered promiscuous mode [ 1282.842583][T18738] device syzkaller0 entered promiscuous mode [ 1283.446878][T18759] input: syz1 as /devices/virtual/input/input164 [ 1284.476236][T18789] device syzkaller0 entered promiscuous mode [ 1285.290256][T18816] tipc: Started in network mode [ 1285.335830][T18816] tipc: Node identity 6a2de66e3bc2, cluster identity 4711 [ 1285.377659][T18816] tipc: Enabled bearer , priority 0 [ 1285.479252][T18816] tipc: Resetting bearer [ 1285.997022][T18813] tipc: Disabling bearer [ 1286.047793][ T41] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 1286.238126][ T41] usb 9-1: Using ep0 maxpacket: 32 [ 1286.280203][ T41] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1286.336298][ T41] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1286.356302][ T41] usb 9-1: can't read configurations, error -71 [ 1287.201058][T18846] device syzkaller0 entered promiscuous mode [ 1288.138845][T18865] input: syz1 as /devices/virtual/input/input166 [ 1288.640361][T18875] input: syz1 as /devices/virtual/input/input167 [ 1289.041608][T18882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.055028][T18882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.971619][T18384] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1290.075996][T18905] input: syz1 as /devices/virtual/input/input169 [ 1290.157739][T18384] usb 8-1: Using ep0 maxpacket: 8 [ 1290.165828][T18384] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1290.187254][T18384] usb 8-1: config 179 has no interface number 0 [ 1290.196686][T18384] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1290.208324][T18384] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1290.220015][T18384] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1290.232113][T18384] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1290.243891][T18384] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1290.267701][T18384] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1290.285038][T18384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.318498][T18895] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1290.642966][T16610] usb 8-1: USB disconnect, device number 103 [ 1290.642966][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1290.643176][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1290.676253][T18914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.709289][T18914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.386854][T18936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1292.417298][T18936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1292.426363][T18936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1292.438039][T18936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1292.452133][T18936] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1292.471821][T18936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1292.483594][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1292.491274][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1292.499299][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1292.521380][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1292.537813][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1292.549237][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1293.023201][T16610] usb 7-1: USB disconnect, device number 111 [ 1293.053816][T18945] syz.8.3453 (18945): drop_caches: 2 [ 1293.147943][T18945] input: syz1 as /devices/virtual/input/input171 [ 1293.163290][T16610] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1293.255276][T17398] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.409666][T17398] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.449714][T18935] chnl_net:caif_netlink_parms(): no params data found [ 1293.517331][T17398] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.563240][T18963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.597335][T18963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.746846][T17398] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.872050][T18935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.935990][T18935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.977901][T18935] device bridge_slave_0 entered promiscuous mode [ 1294.016101][T18935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.042430][T18935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.063897][T18935] device bridge_slave_1 entered promiscuous mode [ 1294.221723][T18935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.296456][T18935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.416768][T17398] tipc: Left network mode [ 1294.448968][T18935] team0: Port device team_slave_0 added [ 1294.577915][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 1294.710736][T18935] team0: Port device team_slave_1 added [ 1294.867975][T18935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.897727][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.923680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.016300][T18935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.126677][T18935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.154051][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.277734][T18935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.753666][T18935] device hsr_slave_0 entered promiscuous mode [ 1295.781930][T18935] device hsr_slave_1 entered promiscuous mode [ 1295.951016][T19004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.989243][T19004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.658108][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 1296.786921][T17398] device hsr_slave_0 left promiscuous mode [ 1296.825040][T17398] device hsr_slave_1 left promiscuous mode [ 1296.873773][T17398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.907939][T17398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.939397][T17398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.977747][T17398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.009757][T17398] device bridge_slave_1 left promiscuous mode [ 1297.037812][T17398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.068775][T17398] device bridge_slave_0 left promiscuous mode [ 1297.075018][T17398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.249690][T17398] device veth1_macvtap left promiscuous mode [ 1297.255826][T17398] device veth0_macvtap left promiscuous mode [ 1297.297231][T17398] device veth1_vlan left promiscuous mode [ 1297.328813][T17398] device veth0_vlan left promiscuous mode [ 1298.738216][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 1298.922749][T19057] input: syz1 as /devices/virtual/input/input173 [ 1300.021787][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.028351][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.243588][T17398] team0 (unregistering): Port device team_slave_1 removed [ 1300.410251][T17398] team0 (unregistering): Port device team_slave_0 removed [ 1300.498193][T17398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.644813][T17398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.827693][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 1300.960312][T19081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.028730][T19081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.428104][T17398] bond0 (unregistering): Released all slaves [ 1302.168566][T18935] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1302.187131][T18935] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1302.208493][T18935] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1302.243434][T18935] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1302.608784][T18935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.659142][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1302.666987][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1302.700063][T18935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.739502][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1302.758642][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1302.782616][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.789815][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1302.859086][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1302.883745][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1302.948674][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1302.978311][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.985445][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.038485][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1303.089167][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1303.121279][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1303.151626][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1303.179090][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1303.219180][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1303.248909][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1303.314117][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1303.360168][T18935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1303.437136][T18935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1303.495132][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1303.512552][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1303.554798][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1304.406522][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1304.415792][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1304.441009][T18935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.462087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1305.488323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1305.518522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1305.527321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1305.548228][T18935] device veth0_vlan entered promiscuous mode [ 1305.559469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1305.583072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1305.613537][T18935] device veth1_vlan entered promiscuous mode [ 1305.675967][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1305.684679][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1305.711018][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1305.758646][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1305.780199][T18935] device veth0_macvtap entered promiscuous mode [ 1305.811362][T18935] device veth1_macvtap entered promiscuous mode [ 1305.897225][T18935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.907961][T19172] input: syz1 as /devices/virtual/input/input175 [ 1305.944414][T18935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.984090][T18935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.027031][T18935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.055253][T18935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.067448][T19169] syz.4.3501 (19169): drop_caches: 2 [ 1306.082882][T18935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.104544][T18935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.125190][T18935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.174523][T18935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.221968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1306.244183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1306.263314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1306.320063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1306.345321][T18935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.366517][T18935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.382674][T18935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.434253][T18935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.464883][T18935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.502773][T18935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.514820][T18935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.525728][T18935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.537428][T18935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.541376][T19186] input: syz1 as /devices/virtual/input/input176 [ 1306.557869][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1306.566746][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1306.632010][T18935] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.675321][T18935] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.748647][T18935] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.787723][T18935] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.030709][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.048957][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.076544][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1307.120992][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.140332][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.165217][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1307.531170][ T129] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1307.747692][ T129] usb 8-1: Using ep0 maxpacket: 32 [ 1307.780551][ T129] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1307.809261][ T129] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1307.858908][ T129] usb 8-1: can't read configurations, error -71 [ 1308.410908][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3513'. [ 1308.479072][T18936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1308.489581][T18936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1308.505500][T18936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1308.513667][T18936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1308.521667][T18936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1308.529197][T18936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1308.617154][ T22] usb 5-1: USB disconnect, device number 83 [ 1308.661919][ T4493] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.871970][ T4493] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.005496][ T4493] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.094773][ T4493] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.605695][T19218] chnl_net:caif_netlink_parms(): no params data found [ 1310.265167][T19218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.272577][T19218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.281893][T19218] device bridge_slave_0 entered promiscuous mode [ 1310.332934][T19218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.348166][T19218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.362271][T19218] device bridge_slave_1 entered promiscuous mode [ 1310.578103][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 1310.684351][T19218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.874601][T19218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.056329][T19218] team0: Port device team_slave_0 added [ 1311.212749][T19218] team0: Port device team_slave_1 added [ 1311.385191][T19218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.403841][T19218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.429738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1311.563405][T19218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.800893][T19218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.814859][T19218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.840812][ C0] vkms_vblank_simulate: vblank timer overrun [ 1311.992584][T19218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.300089][ T4493] device hsr_slave_0 left promiscuous mode [ 1312.332784][ T4493] device hsr_slave_1 left promiscuous mode [ 1312.350789][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1312.377811][ T4493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.398433][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.468323][ T4493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.490332][ T4493] device bridge_slave_1 left promiscuous mode [ 1312.496575][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.539650][ T4493] device bridge_slave_0 left promiscuous mode [ 1312.545911][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.631296][T19283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.658159][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 1312.671273][T19283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.690941][ T4493] device veth1_macvtap left promiscuous mode [ 1312.697086][ T4493] device veth0_macvtap left promiscuous mode [ 1312.734134][ T4493] device veth1_vlan left promiscuous mode [ 1312.758538][ T4493] device veth0_vlan left promiscuous mode [ 1314.090395][ T4493] team0 (unregistering): Port device team_slave_1 removed [ 1314.162509][ T4493] team0 (unregistering): Port device team_slave_0 removed [ 1314.177835][T14031] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1314.231136][ T4493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1314.315696][ T4493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.374241][T14031] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1314.398926][T14031] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 1314.417660][T14031] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1314.426683][T14031] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1314.442279][T14031] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1314.466764][T14031] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1314.483179][T14031] usb 7-1: Product: syz [ 1314.487382][T14031] usb 7-1: Manufacturer: syz [ 1314.508584][T14031] cdc_wdm 7-1:1.0: skipping garbage [ 1314.524017][T14031] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 1314.714198][T18384] usb 7-1: USB disconnect, device number 112 [ 1314.742169][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 1315.028428][ T4493] bond0 (unregistering): Released all slaves [ 1315.165766][T19218] device hsr_slave_0 entered promiscuous mode [ 1315.177422][T19218] device hsr_slave_1 entered promiscuous mode [ 1315.208527][T19218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1315.219126][T19218] Cannot create hsr debugfs directory [ 1315.737140][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3536'. [ 1315.807730][ T41] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 1316.183957][T19347] device syzkaller0 entered promiscuous mode [ 1316.222534][ T41] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1316.234965][ T41] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1316.256520][ T41] usb 9-1: can't read configurations, error -71 [ 1316.333545][T19218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1316.383173][T19218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1316.406998][T19353] syz.9.3539 (19353): drop_caches: 2 [ 1316.432571][T19218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1316.439808][ T126] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 1316.472886][T19218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1316.489545][T19354] input: syz1 as /devices/virtual/input/input177 [ 1316.579672][T19357] input: syz1 as /devices/virtual/input/input178 [ 1316.647784][ T126] usb 8-1: Using ep0 maxpacket: 32 [ 1316.678230][ T126] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1316.718087][ T126] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1316.725725][ T126] usb 8-1: can't read configurations, error -71 [ 1316.766221][T19218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.797542][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1316.809969][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1316.817907][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 1316.842675][T19218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1316.883174][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1316.912239][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1316.948628][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.955862][ T7008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.027893][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1317.036079][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1317.068589][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1317.099618][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.106743][ T7008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.127690][T19368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.135688][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1317.150353][T19368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.164139][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1317.207745][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1317.236365][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1317.267075][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1317.303783][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1317.334763][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1317.364020][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1317.388351][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1317.419874][T19218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1317.469719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1317.480457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1318.369816][T19398] device syzkaller0 entered promiscuous mode [ 1318.666395][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1318.690997][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1318.751419][T19218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.988396][ T6590] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 1319.457954][T19419] input: syz1 as /devices/virtual/input/input180 [ 1319.512896][ T6590] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1319.552993][ T6590] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1319.603571][ T6590] usb 8-1: can't read configurations, error -71 [ 1320.032448][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1320.069991][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1320.157964][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1320.182015][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1320.225681][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1320.251792][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1320.267002][T19218] device veth0_vlan entered promiscuous mode [ 1320.314141][T19218] device veth1_vlan entered promiscuous mode [ 1320.403600][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1320.418823][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1320.437821][ T126] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 1320.463137][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1320.478973][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1320.491189][T19218] device veth0_macvtap entered promiscuous mode [ 1320.516794][T19218] device veth1_macvtap entered promiscuous mode [ 1320.560248][ T6590] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 1320.594537][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.624562][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.645286][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.656898][ T126] usb 9-1: Using ep0 maxpacket: 32 [ 1320.674131][ T126] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1320.688305][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.700082][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.711087][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.721325][ T126] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1320.729742][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.740728][ T126] usb 9-1: can't read configurations, error -71 [ 1320.748617][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.763178][ T6590] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1320.773687][T19218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.787971][ T6590] usb 8-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1320.817771][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1320.830631][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1320.847657][ T6590] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1320.869425][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.881367][ T6590] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1320.904764][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.947483][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.960035][ T6590] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1320.970547][ T6590] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1320.979004][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.997731][ T6590] usb 8-1: Product: syz [ 1321.007723][ T6590] usb 8-1: Manufacturer: syz [ 1321.012465][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.061007][ T6590] cdc_wdm 8-1:1.0: skipping garbage [ 1321.067657][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.082148][ T6590] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 1321.098457][T19218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.113987][T19218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.144616][T19218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.165290][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1321.180322][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1321.195680][T19218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.214963][T19218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.241610][T19218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.268544][ T6590] usb 8-1: USB disconnect, device number 109 [ 1321.283931][T19218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.475387][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.503733][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.529644][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1321.586646][ T4493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.600374][ T4493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.633085][T17398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1323.011198][T18936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1323.024290][T18936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1323.032629][T18936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1323.064431][T18936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1323.092338][T18936] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1323.103652][T18936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1323.250308][ T4493] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.382517][ T4493] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.474820][ T4493] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.665060][ T4493] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.243658][T19490] chnl_net:caif_netlink_parms(): no params data found [ 1324.724487][T19490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.779692][T19490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.836754][T19490] device bridge_slave_0 entered promiscuous mode [ 1324.968323][T19490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.975655][T19490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.996988][T19490] device bridge_slave_1 entered promiscuous mode [ 1325.137870][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 1325.207962][T19490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.360331][T19490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.503324][T19490] team0: Port device team_slave_0 added [ 1325.558768][T19490] team0: Port device team_slave_1 added [ 1325.671769][T19549] syz.6.3575 (19549): drop_caches: 2 [ 1325.749914][T19490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.844562][T19490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.071285][T19490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.344077][T19490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.357664][T19490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.454144][T19490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.904454][T19490] device hsr_slave_0 entered promiscuous mode [ 1326.938331][T19490] device hsr_slave_1 entered promiscuous mode [ 1326.963082][T19490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1327.015384][T19490] Cannot create hsr debugfs directory [ 1327.111695][ T4493] device hsr_slave_0 left promiscuous mode [ 1327.131783][ T4493] device hsr_slave_1 left promiscuous mode [ 1327.151445][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.188485][ T4493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.218204][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 1327.257423][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.305840][ T4493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.347004][ T4493] device bridge_slave_1 left promiscuous mode [ 1327.397048][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.445791][ T4493] device bridge_slave_0 left promiscuous mode [ 1327.485438][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.647207][ T4493] device veth1_macvtap left promiscuous mode [ 1327.678345][ T4493] device veth0_macvtap left promiscuous mode [ 1327.704819][ T4493] device veth1_vlan left promiscuous mode [ 1327.762091][ T4493] device veth0_vlan left promiscuous mode [ 1328.156346][T19594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3583'. [ 1329.299944][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 1330.176728][ T4493] team0 (unregistering): Port device team_slave_1 removed [ 1330.356651][ T4493] team0 (unregistering): Port device team_slave_0 removed [ 1330.505075][ T4493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.596755][ T4493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.230558][ T4493] bond0 (unregistering): Released all slaves [ 1331.367701][ T126] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 1331.379180][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 1331.570246][ T126] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1331.584324][ T126] usb 8-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1331.624360][ T126] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1331.685200][ T126] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1331.734054][ T126] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1331.756822][T19650] input: syz1 as /devices/virtual/input/input183 [ 1331.763609][ T126] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1331.772595][ T126] usb 8-1: Product: syz [ 1331.792841][ T126] usb 8-1: Manufacturer: syz [ 1331.844546][ T126] cdc_wdm 8-1:1.0: skipping garbage [ 1331.853228][ T126] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 1332.051794][T19461] usb 8-1: USB disconnect, device number 110 [ 1332.139100][T19656] device syzkaller0 entered promiscuous mode [ 1332.466008][T19490] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1332.530489][T19490] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1332.579843][T19490] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1332.647480][T19490] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1332.980839][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3596'. [ 1333.095937][T19490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.149682][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1333.161712][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1333.237429][T19490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.319189][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1333.373510][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1333.447269][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.454484][ T7007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.635700][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1333.680139][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1333.705532][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1333.758015][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.765199][ T7007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.822036][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1333.932358][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1333.983568][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1334.018683][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1334.078387][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1334.120337][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1334.187277][T19490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1334.229336][T19490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1334.282094][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1334.295180][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1334.391019][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1334.451736][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1334.531660][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1334.611284][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1335.689326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1335.721982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1335.777849][T19718] input: syz1 as /devices/virtual/input/input184 [ 1335.792959][T19490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1336.295939][T19733] device syzkaller0 entered promiscuous mode [ 1336.527864][T14031] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1336.751464][T14031] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1336.781841][T14031] usb 7-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1336.847602][T14031] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1336.883005][T14031] usb 7-1: string descriptor 0 read error: -22 [ 1336.906346][T14031] usb 7-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1336.938573][T14031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.025292][T14031] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1337.068462][ T6696] udevd[6696]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1337.358997][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1337.379701][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1337.440998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1337.461484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1337.500991][T19490] device veth0_vlan entered promiscuous mode [ 1337.508854][T19756] syz.4.3610 (19756): drop_caches: 2 [ 1337.513066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1337.540940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1337.551232][T19756] input: syz1 as /devices/virtual/input/input185 [ 1337.589313][T19490] device veth1_vlan entered promiscuous mode [ 1337.708767][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1337.722282][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1337.751549][T19490] device veth0_macvtap entered promiscuous mode [ 1337.792098][T19490] device veth1_macvtap entered promiscuous mode [ 1337.836325][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.866886][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.950023][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.006374][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.063361][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.146255][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.200431][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.253404][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.268017][T19726] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1338.293553][T19490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.363061][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1338.378597][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1338.424700][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1338.453382][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1338.480553][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.494837][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.526131][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.551169][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.602494][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.626507][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.644692][T19490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.659292][T19490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.673292][T19490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.682962][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1338.695276][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1338.730385][T19490] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.751540][T19490] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.771773][T19490] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.789953][T19490] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.964699][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.984780][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.039953][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1339.117056][ T7007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.135212][ T7007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.168672][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1339.316304][T19781] input: syz1 as /devices/virtual/input/input187 [ 1339.411646][T14031] usb 7-1: USB disconnect, device number 113 [ 1339.644422][T19789] device syzkaller0 entered promiscuous mode [ 1339.717681][ T4320] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 1339.908224][ T4320] usb 9-1: Using ep0 maxpacket: 32 [ 1339.954112][T14031] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1339.999568][ T4320] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1340.037928][ T4320] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1340.046870][ T4320] usb 9-1: can't read configurations, error -71 [ 1340.150630][T14031] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1340.166083][T14031] usb 7-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1340.200820][T14031] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1340.231480][T14031] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1340.284128][T14031] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1340.314090][T14031] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1340.356333][T14031] usb 7-1: Product: syz [ 1340.370621][T14031] usb 7-1: Manufacturer: syz [ 1340.405368][T14031] cdc_wdm 7-1:1.0: skipping garbage [ 1340.422383][T14031] cdc_wdm 7-1:1.0: skipping garbage [ 1340.434567][T14031] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 1340.606339][T14031] usb 7-1: USB disconnect, device number 114 [ 1341.056643][T18936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1341.066651][T18936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1341.079795][T18936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1341.087840][T18936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1341.095331][T18936] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1341.103308][T18936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1341.296407][T19811] syz.4.3622 (19811): drop_caches: 2 [ 1341.332054][T19812] input: syz1 as /devices/virtual/input/input188 [ 1341.832045][T19805] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1342.757873][ T126] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1342.905039][T19806] chnl_net:caif_netlink_parms(): no params data found [ 1342.969524][ T126] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1342.990813][ T126] usb 7-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1343.050293][ T126] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1343.082632][ T126] usb 7-1: string descriptor 0 read error: -22 [ 1343.137860][T18936] Bluetooth: hci3: command 0x0409 tx timeout [ 1343.145010][ T126] usb 7-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1343.204904][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.260599][ T126] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1343.276841][ T6696] udevd[6696]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1343.732761][T19806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.743491][T19806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.771244][T19806] device bridge_slave_0 entered promiscuous mode [ 1343.829910][T19806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.867525][T19806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.896689][T19806] device bridge_slave_1 entered promiscuous mode [ 1344.165368][T19806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.213354][T19806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.269821][ T11] device hsr_slave_0 left promiscuous mode [ 1344.289026][ T11] device hsr_slave_1 left promiscuous mode [ 1344.325297][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.337472][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.368432][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.390424][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.444653][ T11] device bridge_slave_1 left promiscuous mode [ 1344.453379][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.480937][ T11] device bridge_slave_0 left promiscuous mode [ 1344.496266][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.497992][T19835] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1344.571558][ T11] device veth1_macvtap left promiscuous mode [ 1344.589812][ T11] device veth0_macvtap left promiscuous mode [ 1344.604907][ T11] device veth1_vlan left promiscuous mode [ 1344.624709][ T11] device veth0_vlan left promiscuous mode [ 1345.217855][T18936] Bluetooth: hci3: command 0x041b tx timeout [ 1345.653101][T14031] usb 7-1: USB disconnect, device number 115 [ 1346.617670][T14031] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1346.842792][T14031] usb 7-1: Using ep0 maxpacket: 8 [ 1346.850225][T14031] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1346.881019][T14031] usb 7-1: config 0 has no interface number 0 [ 1346.915615][T14031] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1346.938210][T14031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.955305][T14031] usb 7-1: Product: syz [ 1346.959861][T14031] usb 7-1: Manufacturer: syz [ 1346.976512][T14031] usb 7-1: SerialNumber: syz [ 1347.007700][T14031] usb 7-1: config 0 descriptor?? [ 1347.220468][T19876] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3636'. [ 1347.297857][T18936] Bluetooth: hci3: command 0x040f tx timeout [ 1347.507728][T19896] input: syz1 as /devices/virtual/input/input189 [ 1347.647265][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1347.840413][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1347.956577][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.075966][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.209723][ T11] bond0 (unregistering): Released all slaves [ 1349.377802][T18936] Bluetooth: hci3: command 0x0419 tx timeout [ 1349.387398][T19904] tipc: Started in network mode [ 1349.465378][T19904] tipc: Node identity e635dacb9e03, cluster identity 4711 [ 1349.531664][T19904] tipc: Enabled bearer , priority 0 [ 1349.561840][T14031] usb 7-1: USB disconnect, device number 116 [ 1349.621582][T19806] team0: Port device team_slave_0 added [ 1349.675655][T19806] team0: Port device team_slave_1 added [ 1349.744939][T19901] tipc: Disabling bearer [ 1349.853706][T19806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.884486][T19806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.002863][T19921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.045910][T19806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.051006][T19921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.098579][T19806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.105660][T19806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.240878][T19806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.494906][T19806] device hsr_slave_0 entered promiscuous mode [ 1350.530528][T19806] device hsr_slave_1 entered promiscuous mode [ 1350.581139][T19806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1350.597669][T19806] Cannot create hsr debugfs directory [ 1351.872298][T19806] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1351.925985][T19806] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1351.976010][T19806] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1352.024861][T19806] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1352.443211][T19806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.518856][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1352.535574][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1352.577326][T19806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.648873][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1352.683271][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1352.793132][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.800395][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.856244][T19954] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1352.884593][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1352.916691][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1352.958569][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1352.982978][ T6020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.990130][ T6020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.036155][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1353.106061][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1353.145610][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1353.160135][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1353.186059][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1353.207345][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1353.235369][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1353.266355][T19806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1353.299472][T19806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1353.322416][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1353.339970][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1353.370154][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1353.400737][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1353.434329][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1354.347325][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1354.385882][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1354.446525][T19806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.120840][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1356.149756][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1356.210569][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1356.252455][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1356.277750][T14031] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1356.296015][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1356.329020][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1356.360731][T19806] device veth0_vlan entered promiscuous mode [ 1356.409538][T19806] device veth1_vlan entered promiscuous mode [ 1356.487745][T14031] usb 7-1: Using ep0 maxpacket: 32 [ 1356.503897][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1356.523964][T14031] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1356.555574][T17943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1356.578616][T14031] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1356.599590][T14031] usb 7-1: can't read configurations, error -71 [ 1356.609777][T19806] device veth0_macvtap entered promiscuous mode [ 1356.652672][T19806] device veth1_macvtap entered promiscuous mode [ 1356.729217][T19806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.763552][T19806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.794382][T19806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.821588][T19806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.848636][T19806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.865980][T19806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.876213][T19806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.902949][T19806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.932781][T19806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1356.968269][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1356.990665][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1357.023210][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1357.079227][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1357.140932][T19806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.186536][T19806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.216940][T19806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.246341][T19806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.269803][T19806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.294259][T19806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.321497][T19806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.321534][T19806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.327492][T19806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.329575][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1357.330807][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1357.369903][T19806] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.369975][T19806] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.370009][T19806] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.370042][T19806] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.744967][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.757837][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.802227][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1357.854684][ T4493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.889964][ T4493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.910910][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1357.928453][T14031] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1358.117962][T14031] usb 7-1: Using ep0 maxpacket: 16 [ 1358.130096][T14031] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1358.167988][T14031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.186707][T14031] usb 7-1: Product: syz [ 1358.196383][T14031] usb 7-1: Manufacturer: syz [ 1358.205463][T14031] usb 7-1: SerialNumber: syz [ 1358.230303][T14031] usb 7-1: config 0 descriptor?? [ 1358.256649][T14031] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1358.469412][T20073] syz.4.3669 (20073): drop_caches: 2 [ 1358.798304][T14031] gspca_spca508: reg_read err -110 [ 1358.804367][T14031] gspca_spca508: reg_read err -32 [ 1358.826130][T14031] gspca_spca508: reg_read err -32 [ 1358.868627][T14031] gspca_spca508: reg_read err -32 [ 1358.887775][T14031] gspca_spca508: reg_read err -32 [ 1358.935232][T14031] gspca_spca508: reg write: error -32 [ 1358.985816][T14031] spca508: probe of 7-1:0.0 failed with error -32 [ 1359.407391][T20081] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1360.507396][ T5329] usb 7-1: USB disconnect, device number 119 [ 1360.602897][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1360.613606][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1360.621655][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1360.632885][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1360.641808][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1360.650858][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1360.980710][ T22] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1361.018277][ T5329] usb 10-1: USB disconnect, device number 91 [ 1361.087163][ T5329] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1361.261490][ T7007] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.344941][T20091] chnl_net:caif_netlink_parms(): no params data found [ 1361.367684][ T22] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1361.464140][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.470517][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.487220][ T7007] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.573038][ T22] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1361.598348][ T22] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1361.637343][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1361.672885][ T22] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1361.720953][ T7007] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.750987][ T22] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1361.785288][ T22] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1361.826054][ T22] usb 5-1: Product: syz [ 1361.852745][ T22] usb 5-1: Manufacturer: syz [ 1361.923616][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 1361.962237][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 1362.000536][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 1362.020675][ T22] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1362.105039][ T22] usb 5-1: USB disconnect, device number 84 [ 1362.147428][ T7007] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.180005][T20091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.190837][T20091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.214197][T20091] device bridge_slave_0 entered promiscuous mode [ 1362.236161][T20091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.252607][T20091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.281522][T20091] device bridge_slave_1 entered promiscuous mode [ 1362.384952][T20091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.421387][T20091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.562478][T20091] team0: Port device team_slave_0 added [ 1362.592307][T20091] team0: Port device team_slave_1 added [ 1362.757812][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 1362.882694][T20091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.910518][T20091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.998598][T20091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.112176][T20091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.127617][T20091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.204863][T20091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.398899][T20091] device hsr_slave_0 entered promiscuous mode [ 1363.422250][T20091] device hsr_slave_1 entered promiscuous mode [ 1363.442580][T20091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1363.491670][T20091] Cannot create hsr debugfs directory [ 1364.817622][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 1364.993798][ T7007] device hsr_slave_0 left promiscuous mode [ 1365.058613][ T7007] device hsr_slave_1 left promiscuous mode [ 1365.085159][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.125328][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.150232][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.181795][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.190822][T20163] input: syz1 as /devices/virtual/input/input192 [ 1365.228260][ T7007] device bridge_slave_1 left promiscuous mode [ 1365.246876][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.287304][ T7007] device bridge_slave_0 left promiscuous mode [ 1365.307309][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.454092][ T7007] device veth1_macvtap left promiscuous mode [ 1365.468018][ T7007] device veth0_macvtap left promiscuous mode [ 1365.474465][ T7007] device veth1_vlan left promiscuous mode [ 1365.498062][ T7007] device veth0_vlan left promiscuous mode [ 1366.897624][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 1367.297139][ T7007] team0 (unregistering): Port device team_slave_1 removed [ 1367.396844][ T7007] team0 (unregistering): Port device team_slave_0 removed [ 1367.451817][ T7007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.572991][ T7007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.002601][ T6590] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 1368.177858][ T7007] bond0 (unregistering): Released all slaves [ 1368.227737][ T6590] usb 8-1: Using ep0 maxpacket: 8 [ 1368.243796][ T6590] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 1368.254399][ T6590] usb 8-1: config 0 has no interface number 0 [ 1368.269645][ T6590] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1368.287564][ T6590] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.298193][ T6590] usb 8-1: Product: syz [ 1368.302394][ T6590] usb 8-1: Manufacturer: syz [ 1368.307011][ T6590] usb 8-1: SerialNumber: syz [ 1368.336404][ T6590] usb 8-1: config 0 descriptor?? [ 1368.548438][T20215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3700'. [ 1368.766518][T20091] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1368.829601][T20091] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1368.885464][T20091] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1368.911297][T20091] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1368.987611][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 1369.097415][T20091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.165242][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1369.179223][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1369.273682][T20091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.356768][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1369.374578][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1369.404119][T20241] input: syz1 as /devices/virtual/input/input193 [ 1369.409508][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.417858][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.451903][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1369.540142][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1369.568358][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1369.615247][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.622420][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.688027][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1369.742597][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1369.753028][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1369.791295][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1369.814024][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1369.835600][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1369.916156][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1369.966496][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1370.037171][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1370.134567][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1370.208256][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1370.274952][T20091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1370.587424][ T6590] usb 8-1: USB disconnect, device number 111 [ 1371.792633][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1371.806898][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1371.852559][T20091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.181077][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1373.205607][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1373.255374][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1373.283648][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1373.303824][T20091] device veth0_vlan entered promiscuous mode [ 1373.316782][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1373.326229][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1373.344843][T20091] device veth1_vlan entered promiscuous mode [ 1373.385457][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1373.408033][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1373.426790][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1373.436885][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1373.450130][T20307] input: syz1 as /devices/virtual/input/input195 [ 1373.483133][T20091] device veth0_macvtap entered promiscuous mode [ 1373.507723][T20091] device veth1_macvtap entered promiscuous mode [ 1373.562892][T20091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.595650][T20091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.651108][T20091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.687677][T20091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.734511][T20091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.756651][T20091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.776666][T20091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.787847][T20091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.805147][T20091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.819546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1373.833761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1373.843542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1373.899222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1373.914404][T20091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.932140][T20091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.944661][T20091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.959299][T20091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.975611][T20091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.991028][T20091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.013583][T20091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.036087][T20091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.056693][T20091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.067199][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1374.089656][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1374.109940][T20091] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.127173][T20091] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.156518][T20091] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.165741][T20091] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.316395][ T7007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.336006][ T7007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.371602][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1374.397260][ T4493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.410895][ T4493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.456510][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1375.047639][ T4320] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1375.247671][ T4320] usb 10-1: Using ep0 maxpacket: 32 [ 1375.377609][ T5329] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1375.579578][ T5329] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1375.608284][ T5329] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1375.704211][ T5329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1375.787748][ T5329] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 1375.832220][ T5329] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1375.866218][ T5329] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1375.897645][ T5329] usb 5-1: Product: syz [ 1375.914097][ T5329] usb 5-1: Manufacturer: syz [ 1375.961437][ T5329] cdc_wdm 5-1:1.0: skipping garbage [ 1376.047749][ T5329] cdc_wdm 5-1:1.0: skipping garbage [ 1376.067700][ T5329] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1376.173379][ T5329] usb 5-1: USB disconnect, device number 85 [ 1377.387745][T14031] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1377.484314][T20348] input: syz1 as /devices/virtual/input/input196 [ 1377.609444][T14031] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1377.639548][T14031] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1377.678817][T14031] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1377.739932][T14031] usb 5-1: string descriptor 0 read error: -22 [ 1377.780074][T14031] usb 5-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1377.800643][T14031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.822700][ T4320] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1377.852060][ T4320] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1377.905506][ T4320] usb 10-1: can't read configurations, error -71 [ 1377.924681][T14031] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1377.958926][ T6696] udevd[6696]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1379.025422][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3734'. [ 1379.138027][T20344] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1380.161097][T20373] kvm: pic: non byte write [ 1380.217091][ T126] usb 5-1: USB disconnect, device number 86 [ 1381.487646][ T126] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 1381.512742][T20393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1381.707806][ T126] usb 9-1: Using ep0 maxpacket: 16 [ 1381.722737][ T126] usb 9-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1381.746951][ T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.846321][ T126] usb 9-1: Product: syz [ 1381.873230][ T126] usb 9-1: Manufacturer: syz [ 1381.891326][ T126] usb 9-1: SerialNumber: syz [ 1381.916361][ T126] usb 9-1: config 0 descriptor?? [ 1381.956827][ T126] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1382.517789][ T126] gspca_spca508: reg_read err -110 [ 1382.524044][ T126] gspca_spca508: reg_read err -32 [ 1382.574218][ T126] gspca_spca508: reg_read err -32 [ 1382.627430][ T126] gspca_spca508: reg_read err -32 [ 1382.687792][ T126] gspca_spca508: reg_read err -32 [ 1382.744145][ T126] gspca_spca508: reg write: error -32 [ 1382.804797][ T126] spca508: probe of 9-1:0.0 failed with error -32 [ 1383.907719][ T4347] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 1384.101715][ T4347] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1384.123459][ T4347] usb 8-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1384.148824][ T4347] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1384.198805][ T126] usb 9-1: USB disconnect, device number 118 [ 1384.216127][ T4347] usb 8-1: string descriptor 0 read error: -22 [ 1384.245668][ T4347] usb 8-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1384.267630][ T4347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.344216][ T4347] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 1384.429180][ T6696] udevd[6696]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1385.617845][T20415] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1386.086181][T20451] input: syz1 as /devices/virtual/input/input200 [ 1386.745643][ T4320] usb 8-1: USB disconnect, device number 112 [ 1388.808427][T20501] syz.4.3772 (20501): drop_caches: 2 [ 1388.945910][T20501] input: syz1 as /devices/virtual/input/input202 [ 1389.957631][ T6590] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 1390.150053][ T6590] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1390.177116][ T6590] usb 9-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1390.196271][T20531] syz.4.3780 (20531): drop_caches: 2 [ 1390.220336][T20531] input: syz1 as /devices/virtual/input/input203 [ 1390.261949][ T6590] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1390.303041][ T6590] usb 9-1: string descriptor 0 read error: -22 [ 1390.303130][ T6590] usb 9-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1390.303159][ T6590] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.446679][ T6590] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 1390.479668][ T6696] udevd[6696]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1390.997976][ T126] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1391.197606][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 1391.558769][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1391.580580][ T126] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1391.592544][ T126] usb 5-1: can't read configurations, error -71 [ 1391.697786][T20517] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1391.922136][T20546] kvm: pic: non byte write [ 1392.151195][T20553] syz.7.3786 (20553): drop_caches: 2 [ 1392.211940][T20553] input: syz1 as /devices/virtual/input/input205 [ 1392.681505][T20569] input: syz1 as /devices/virtual/input/input206 [ 1392.805064][ T4320] usb 9-1: USB disconnect, device number 119 [ 1393.588181][T14031] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1393.788014][T14031] usb 10-1: Using ep0 maxpacket: 32 [ 1394.296132][T14031] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1394.322000][T14031] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1394.353068][T14031] usb 10-1: can't read configurations, error -71 [ 1395.224090][ T5329] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1395.300438][T20615] input: syz1 as /devices/virtual/input/input208 [ 1396.856438][T20649] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1396.907796][T20607] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1396.917752][T14031] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1396.932553][ T5329] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1396.947669][ T5329] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1396.982595][ T5329] usb 5-1: can't read configurations, error -71 [ 1397.122166][T14031] usb 7-1: Using ep0 maxpacket: 32 [ 1397.480964][T14031] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1397.515396][T14031] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1397.544048][T14031] usb 7-1: can't read configurations, error -71 [ 1397.770584][T20658] input: syz1 as /devices/virtual/input/input209 [ 1400.067360][T20697] input: syz1 as /devices/virtual/input/input210 [ 1400.267658][T14031] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1400.857693][T19461] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1401.077632][T19461] usb 7-1: Using ep0 maxpacket: 32 [ 1401.472926][T19461] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1401.501928][T19461] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1401.535651][T19461] usb 7-1: can't read configurations, error -71 [ 1402.017937][T20693] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1402.036757][T14031] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1402.058168][T14031] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1402.086056][T14031] usb 10-1: can't read configurations, error -71 [ 1402.448124][T20724] device syzkaller0 entered promiscuous mode [ 1402.766793][T20738] input: syz1 as /devices/virtual/input/input211 [ 1402.842942][ T6553] udevd[6553]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1403.231514][T20741] syz.9.3844 (20741): drop_caches: 2 [ 1403.299260][T20742] input: syz1 as /devices/virtual/input/input212 [ 1404.995285][T20774] input: syz1 as /devices/virtual/input/input214 [ 1405.336933][T20782] syz.4.3856 (20782): drop_caches: 2 [ 1405.424557][T20782] input: syz1 as /devices/virtual/input/input215 [ 1406.163931][T20792] syz.7.3859 (20792): drop_caches: 2 [ 1406.289508][T20792] input: syz1 as /devices/virtual/input/input216 [ 1406.421304][T20798] syz.4.3860 (20798): drop_caches: 2 [ 1408.775196][T20848] syz.7.3877 (20848): drop_caches: 2 [ 1408.810656][T20852] input: syz1 as /devices/virtual/input/input218 [ 1408.897921][T20850] bond1 (unregistering): Released all slaves [ 1409.019598][T20853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3878'. [ 1411.700991][T20895] bond1 (unregistering): Released all slaves [ 1411.805133][T20897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3892'. [ 1412.054686][T20901] syz.7.3894 (20901): drop_caches: 2 [ 1412.067566][T20901] input: syz1 as /devices/virtual/input/input220 [ 1412.077697][ T6590] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1412.287658][ T6590] usb 5-1: Using ep0 maxpacket: 8 [ 1412.312549][ T6590] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1412.337847][ T6590] usb 5-1: config 179 has no interface number 0 [ 1412.344225][ T6590] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1412.399547][ T6590] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1412.431011][ T6590] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1412.463966][ T6590] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1412.507898][ T6590] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1412.517027][ T6590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.563871][T20899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1412.811043][ T4320] usb 5-1: USB disconnect, device number 91 [ 1414.762953][T19461] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1414.875289][T20938] syz.7.3906 (20938): drop_caches: 2 [ 1414.887345][T20938] input: syz1 as /devices/virtual/input/input222 [ 1414.987684][T19461] usb 10-1: Using ep0 maxpacket: 8 [ 1414.995172][T19461] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1415.025311][T19461] usb 10-1: config 0 has no interface number 0 [ 1415.034544][T19461] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1415.055752][T19461] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.074333][T19461] usb 10-1: Product: syz [ 1415.097600][T19461] usb 10-1: Manufacturer: syz [ 1415.108453][T19461] usb 10-1: SerialNumber: syz [ 1415.140631][T19461] usb 10-1: config 0 descriptor?? [ 1415.376275][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3905'. [ 1415.431630][T19461] usb 10-1: USB disconnect, device number 98 [ 1417.245251][T20974] syz.8.3917 (20974): drop_caches: 2 [ 1417.297663][T20974] input: syz1 as /devices/virtual/input/input224 [ 1417.387629][ T4320] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1417.607657][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 1417.614836][ T4320] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1417.682060][ T4320] usb 5-1: config 0 has no interface number 0 [ 1417.728104][ T4320] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1417.820578][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.893709][ T4320] usb 5-1: Product: syz [ 1417.930918][ T4320] usb 5-1: Manufacturer: syz [ 1417.955609][ T4320] usb 5-1: SerialNumber: syz [ 1418.048677][ T4320] usb 5-1: config 0 descriptor?? [ 1418.349286][T20969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3915'. [ 1418.373158][ T4320] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1418.380125][ T6590] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 1418.393673][ T4320] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 1418.557829][ T4320] usb 5-1: USB disconnect, device number 92 [ 1418.567870][ T6590] usb 9-1: Using ep0 maxpacket: 32 [ 1418.662790][ T6590] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1418.687887][ T6590] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1418.710699][ T6590] usb 9-1: can't read configurations, error -71 [ 1420.819629][T21019] syz.7.3929 (21019): drop_caches: 2 [ 1420.869235][T21020] syz.4.3930 (21020): drop_caches: 2 [ 1420.876974][T21021] input: syz1 as /devices/virtual/input/input227 [ 1420.895958][T21020] input: syz1 as /devices/virtual/input/input228 [ 1422.902698][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.909197][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.067704][ T4320] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1425.265820][ T4320] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1425.285933][ T4320] usb 7-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1425.311233][ T4320] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1425.343393][ T4320] usb 7-1: string descriptor 0 read error: -22 [ 1425.361601][ T4320] usb 7-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1425.395872][ T4320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.428897][T21113] kvm: pic: non byte write [ 1425.501214][ T4320] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1425.535621][ T6696] udevd[6696]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1426.833846][T21103] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1427.274814][T21150] bond1 (unregistering): Released all slaves [ 1427.311742][T21155] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3968'. [ 1427.368837][ T4320] usb 8-1: new high-speed USB device number 113 using dummy_hcd [ 1427.420881][T21156] kvm: pic: non byte write [ 1427.590147][ T4320] usb 8-1: Using ep0 maxpacket: 8 [ 1427.598603][ T4320] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1427.627322][ T4320] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.661396][ T4320] usb 8-1: config 179 has no interface number 0 [ 1427.668135][ T4320] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1427.683275][ T4320] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1427.700735][ T4320] usb 8-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1427.714647][ T4320] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1427.728699][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.751736][T21148] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1427.941042][T14031] usb 7-1: USB disconnect, device number 124 [ 1428.013369][ T4320] usb 8-1: USB disconnect, device number 113 [ 1428.997576][T19461] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 1429.096086][T21191] kvm: pic: non byte write [ 1429.144656][T21198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3980'. [ 1429.201013][T19461] usb 9-1: Using ep0 maxpacket: 32 [ 1429.321615][T19461] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1429.362185][T19461] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1429.413223][T19461] usb 9-1: can't read configurations, error -71 [ 1430.567573][T19461] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 1430.757592][T19461] usb 9-1: Using ep0 maxpacket: 8 [ 1430.764451][T19461] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1430.817908][T19461] usb 9-1: config 0 has no interface number 0 [ 1430.840158][T19461] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1430.867575][T19461] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.897722][T19461] usb 9-1: Product: syz [ 1430.901963][T19461] usb 9-1: Manufacturer: syz [ 1430.929118][T19461] usb 9-1: SerialNumber: syz [ 1430.969204][T19461] usb 9-1: config 0 descriptor?? [ 1431.212650][T21212] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3985'. [ 1432.413966][T21246] syz.4.3995 (21246): drop_caches: 2 [ 1432.461151][T21246] input: syz1 as /devices/virtual/input/input231 [ 1432.617631][ T6590] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1432.807599][ T6590] usb 7-1: Using ep0 maxpacket: 32 [ 1432.889440][ T6590] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1432.907855][ T6590] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1432.933475][ T6590] usb 7-1: can't read configurations, error -71 [ 1433.338519][T19461] usb 9-1: Found UVC 0.04 device syz (046d:08c3) [ 1433.348447][T19461] uvcvideo 9-1:0.31: Entity type for entity Output 6 was not initialized! [ 1433.424808][T19461] usb 9-1: USB disconnect, device number 123 [ 1433.772228][T21263] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1435.217777][T18936] Bluetooth: hci1: command 0x0406 tx timeout [ 1435.260374][T21296] syz.6.4009 (21296): drop_caches: 2 [ 1435.387356][T21293] input: syz1 as /devices/virtual/input/input233 [ 1436.178171][ T4320] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1436.387855][ T4320] usb 10-1: Using ep0 maxpacket: 32 [ 1436.487316][ T4320] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1436.515761][ T4320] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1436.571824][ T4320] usb 10-1: can't read configurations, error -71 [ 1442.294574][T21393] syz.7.4036 (21393): drop_caches: 2 [ 1442.380095][T21394] input: syz1 as /devices/virtual/input/input237 [ 1442.943451][T21405] device syzkaller0 entered promiscuous mode [ 1445.457640][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 1447.432494][T21445] syz.4.4052 (21445): drop_caches: 2 [ 1447.433844][T21447] input: syz1 as /devices/virtual/input/input239 [ 1447.523461][ T5329] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 1447.728824][ T5329] usb 9-1: Using ep0 maxpacket: 8 [ 1447.739657][ T5329] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1447.772583][ T5329] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.831418][ T5329] usb 9-1: config 179 has no interface number 0 [ 1447.852647][ T5329] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1447.875145][ T5329] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1447.905263][ T5329] usb 9-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1447.937396][ T5329] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1447.964534][ T5329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.993388][T21437] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1448.230753][ T5329] usb 9-1: USB disconnect, device number 124 [ 1450.251527][T21501] syz.9.4066 (21501): drop_caches: 2 [ 1452.077644][ T22] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 1452.277669][ T22] usb 9-1: Using ep0 maxpacket: 8 [ 1452.286451][ T22] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1452.359515][ T22] usb 9-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.399241][ T22] usb 9-1: config 179 has no interface number 0 [ 1452.427653][T14031] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1452.448325][ T22] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1452.474663][ T22] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1452.491350][ T22] usb 9-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1452.508812][ T22] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1452.520891][ T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.538684][T21526] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1452.617701][T14031] usb 7-1: Using ep0 maxpacket: 8 [ 1452.625797][T14031] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1452.670448][T14031] usb 7-1: config 179 has no interface number 0 [ 1452.688326][T14031] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1452.717612][T14031] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1452.739412][T14031] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1452.750770][T14031] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1452.771640][T14031] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1452.794391][T14031] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1452.803857][T14031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.824432][T21530] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1452.839116][ T22] usb 9-1: USB disconnect, device number 125 [ 1453.117643][ T4320] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 1453.150161][T21540] syz.9.4079 (21540): drop_caches: 2 [ 1453.159412][ T22] usb 7-1: USB disconnect, device number 127 [ 1453.165441][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1453.165467][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1453.253368][T21540] input: syz1 as /devices/virtual/input/input243 [ 1453.310016][ T4320] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1453.327027][ T4320] usb 8-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1453.370980][ T4320] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1453.418449][ T4320] usb 8-1: string descriptor 0 read error: -22 [ 1453.442050][ T4320] usb 8-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1453.467651][ T4320] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.550888][ T4320] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 1453.663044][ T6696] udevd[6696]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1454.134256][T21566] [ 1454.136621][T21566] ====================================================== [ 1454.143637][T21566] WARNING: possible circular locking dependency detected [ 1454.150664][T21566] syzkaller #0 Not tainted [ 1454.155095][T21566] ------------------------------------------------------ [ 1454.162117][T21566] syz.9.4085/21566 is trying to acquire lock: [ 1454.168183][T21566] ffff88805ea07a80 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 1454.179017][T21566] [ 1454.179017][T21566] but task is already holding lock: [ 1454.186396][T21566] ffff888074e671d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1454.196482][T21566] [ 1454.196482][T21566] which lock already depends on the new lock. [ 1454.196482][T21566] [ 1454.206907][T21566] [ 1454.206907][T21566] the existing dependency chain (in reverse order) is: [ 1454.215953][T21566] [ 1454.215953][T21566] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1454.223549][T21566] down_read_killable+0x4c/0x340 [ 1454.229152][T21566] mmap_read_lock_killable+0x1d/0x60 [ 1454.234984][T21566] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1454.240726][T21566] do_user_addr_fault+0x2e8/0xb20 [ 1454.246368][T21566] exc_page_fault+0x60/0x100 [ 1454.251511][T21566] asm_exc_page_fault+0x22/0x30 [ 1454.256934][T21566] fault_in_readable+0x13e/0x1f0 [ 1454.262447][T21566] fault_in_iov_iter_readable+0xbf/0x2f0 [ 1454.268687][T21566] generic_perform_write+0x1f1/0x5c0 [ 1454.274554][T21566] __generic_file_write_iter+0x148/0x2a0 [ 1454.280736][T21566] generic_file_write_iter+0xab/0x2e0 [ 1454.286661][T21566] vfs_write+0x482/0x9a0 [ 1454.291497][T21566] ksys_write+0x14d/0x260 [ 1454.296375][T21566] do_syscall_64+0x4c/0xa0 [ 1454.301330][T21566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1454.307776][T21566] [ 1454.307776][T21566] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 1454.316492][T21566] __lock_acquire+0x2c92/0x7bd0 [ 1454.321910][T21566] lock_acquire+0x1bb/0x4a0 [ 1454.326952][T21566] down_write+0x36/0x60 [ 1454.331635][T21566] process_measurement+0x3af/0x1c40 [ 1454.337377][T21566] ima_file_mmap+0xe9/0x140 [ 1454.342499][T21566] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1454.348672][T21566] do_syscall_64+0x4c/0xa0 [ 1454.353616][T21566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1454.360048][T21566] [ 1454.360048][T21566] other info that might help us debug this: [ 1454.360048][T21566] [ 1454.370289][T21566] Possible unsafe locking scenario: [ 1454.370289][T21566] [ 1454.377745][T21566] CPU0 CPU1 [ 1454.383110][T21566] ---- ---- [ 1454.388480][T21566] lock(&mm->mmap_lock); [ 1454.392834][T21566] lock(&sb->s_type->i_mutex_key#13); [ 1454.400854][T21566] lock(&mm->mmap_lock); [ 1454.407710][T21566] lock(&sb->s_type->i_mutex_key#13); [ 1454.413190][T21566] [ 1454.413190][T21566] *** DEADLOCK *** [ 1454.413190][T21566] [ 1454.421529][T21566] 1 lock held by syz.9.4085/21566: [ 1454.426644][T21566] #0: ffff888074e671d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1454.437104][T21566] [ 1454.437104][T21566] stack backtrace: [ 1454.443026][T21566] CPU: 1 PID: 21566 Comm: syz.9.4085 Not tainted syzkaller #0 [ 1454.450490][T21566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1454.460564][T21566] Call Trace: [ 1454.463855][T21566] [ 1454.466875][T21566] dump_stack_lvl+0x188/0x24e [ 1454.471607][T21566] ? load_image+0x410/0x410 [ 1454.476195][T21566] ? show_regs_print_info+0x12/0x12 [ 1454.481419][T21566] ? print_circular_bug+0x12b/0x1a0 [ 1454.486635][T21566] check_noncircular+0x296/0x330 [ 1454.491585][T21566] ? look_up_lock_class+0x75/0x140 [ 1454.496715][T21566] ? add_chain_block+0x9b0/0x9b0 [ 1454.501678][T21566] ? lockdep_lock+0xf1/0x1f0 [ 1454.506290][T21566] ? _find_first_zero_bit+0xd2/0x100 [ 1454.511598][T21566] __lock_acquire+0x2c92/0x7bd0 [ 1454.516473][T21566] ? __lock_acquire+0x7bd0/0x7bd0 [ 1454.521518][T21566] ? verify_lock_unused+0x140/0x140 [ 1454.526731][T21566] ? ima_match_policy+0x10d/0x21b0 [ 1454.531861][T21566] ? ima_match_policy+0x211c/0x21b0 [ 1454.537083][T21566] lock_acquire+0x1bb/0x4a0 [ 1454.541706][T21566] ? process_measurement+0x3af/0x1c40 [ 1454.547091][T21566] ? __might_sleep+0xd0/0xd0 [ 1454.551744][T21566] ? read_lock_is_recursive+0x10/0x10 [ 1454.557221][T21566] ? ima_get_action+0x71/0xa0 [ 1454.561917][T21566] down_write+0x36/0x60 [ 1454.566082][T21566] ? process_measurement+0x3af/0x1c40 [ 1454.571460][T21566] process_measurement+0x3af/0x1c40 [ 1454.576689][T21566] ? ima_file_mmap+0x140/0x140 [ 1454.581469][T21566] ? aa_file_perm+0x112/0xf00 [ 1454.586207][T21566] ? mtree_load+0x100/0xa70 [ 1454.590751][T21566] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1454.596926][T21566] ima_file_mmap+0xe9/0x140 [ 1454.601462][T21566] ? ima_file_free+0x3e0/0x3e0 [ 1454.606234][T21566] ? common_file_perm+0x171/0x1c0 [ 1454.611264][T21566] ? bpf_lsm_mmap_file+0x5/0x10 [ 1454.616201][T21566] ? security_mmap_file+0x11b/0x180 [ 1454.621467][T21566] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1454.627119][T21566] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1454.632854][T21566] ? lock_chain_count+0x20/0x20 [ 1454.637725][T21566] ? lockdep_hardirqs_on+0x94/0x140 [ 1454.642931][T21566] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1454.648667][T21566] do_syscall_64+0x4c/0xa0 [ 1454.653119][T21566] ? clear_bhb_loop+0x60/0xb0 [ 1454.657799][T21566] ? clear_bhb_loop+0x60/0xb0 [ 1454.662513][T21566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1454.668449][T21566] RIP: 0033:0x7f6252b9ce59 [ 1454.672887][T21566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.692540][T21566] RSP: 002b:00007f6253aa1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1454.701025][T21566] RAX: ffffffffffffffda RBX: 00007f6252e16090 RCX: 00007f6252b9ce59 [ 1454.709011][T21566] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000e47000 [ 1454.717097][T21566] RBP: 00007f6252c32e6f R08: 0000000000010000 R09: 0000000000000000 [ 1454.725083][T21566] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 1454.733185][T21566] R13: 00007f6252e16128 R14: 00007f6252e16090 R15: 00007ffc6323d7a8 [ 1454.741191][T21566] [ 1454.755079][T21534] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1455.799181][ T4320] usb 8-1: USB disconnect, device number 114