last executing test programs: 20m43.787562034s ago: executing program 0 (id=878): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) r0 = syz_open_procfs(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 20m43.617367031s ago: executing program 0 (id=879): socket$l2tp(0x2, 0x2, 0x73) (async) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000040000000380012800b0001006272696467650000280002800c002300076b0000000000000600060037"], 0x58}}, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) (async) munlockall() (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) dup(r4) (async) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x72766f61355a0b1c) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r8) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000180)={0x1000}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 20m42.066046548s ago: executing program 0 (id=888): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x6a04, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xadc0}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000580)=ANY=[@ANYBLOB="12017b58eb290218c5fc211f6181ae852e0002020000ff2505a1a4400001020301090244000101090009090400030202060001052406000005240001040d240f010400000006000d0081090581030800ffd280090582020800da070809050302000491df80"], &(0x7f00000007c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x10, 0x7f, 0x1, 0x40, 0x3}, 0x3c, &(0x7f0000000140)={0x5, 0xf, 0x3c, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x0, 0xf00, 0x22f, [0xff0f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x9, 0x6, 0xff80, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x23, 0x1, 0x2, 0x1002, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x2, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x6, 0x401}]}, 0x7, [{0x5c, &(0x7f0000000940)=ANY=[@ANYBLOB="5c037508e2bc0d7fc9580e15a56a3d1328be9bb16b258311f470c0a9e437f6d9ae3d373f7d842e93525ab64d324d8aeff71e4c65e8e845b6b0fb635a02c308009281c46b0cf96e6b5907bcf9c010000000b06f1d033601fd3e8724f110c0dcd25f0505487f10527dd4b37acd54f76f69935116f356dd1252588cce82b33047e244e5c713868f6be939fae77f23b923d217a6d30557641bede224919c09a4e4088cdff12a385650ba4ae61fba89a4585f400192d72e54ca109452fb77dbefa3b27c7854802e26631a681f561c838f5819e03cbaf5d49ad372d012b45add6de1c72c565747e4fc9527931bd47578"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40a}}, {0xd1, &(0x7f00000003c0)=@string={0xd1, 0x3, "4c3bd7eb43318de3b43ab5b415d8d18e83b08f3daf92b255f7baf325c79c7d8cea5324f0a3fca257e9410e163d639f1aa7c226bb95f76ac26c67b1ea11ecab3230b6f7735e553966d4f7fd5f27c879927d47f7c3233e882715ec8c2a09b585e3b1a78f6ea79ce80dc2a6620897bbe56dce43cb1b4fd2619c83d39a278476f2e65a493ced5dea7fa7ea7af1e62466548fc48d4a6267822019e8dabc555bdd258444107d0678440c1a828941f0e14082bc1149534ecb6fa0ef6dd02350c4afa8b8c85764a80749e99e9bc19f5a720df2"}}, {0xa9, &(0x7f00000004c0)=ANY=[@ANYBLOB="a903072a1b685de8282c371450babe3bae423185b3a5f368d572d3c11d73b2fc47023cfc29c4d083b64846300f62ee50c54772d8ead45854343b61b3d7ba52730af09803b41dbc36e123b7c4d9ae2de9c8fc45296f12510fc1e6de4141ef882aa2ff3cd439cf3c28294e91b79819d8598a10018d23fa9687c25c827d29a27d326915b9ba182747595faa074caaaab0b188e6e33ffda12932f81fd1720ffaeb94649cee70f4dd22685d"]}, {0x70, &(0x7f00000006c0)=@string={0x70, 0x3, "1e3a4c4f2df822c9476f823c0add6b62a7032e74e33699bdde29f77515b7b8af4512c097ed568a21ab699e2762544b90de47cc77c6aec5265432f885e55a162a6e5a106a151ca0805723682e3fc49dff2a1e0f2e3ff2400ec72986fb654b7ecea1409a0c9e78687cefe223491aaf"}}, {0x102, &(0x7f0000000a40)=@string={0x102, 0x3, "2c1388eb581ad39c19ab8c89df3652cf43469a13752d5a40ef38799595f45c1c57bfbc4efff94e10840898b0c8dd1e307f9bd600db204244f5e1465a9429b60f9b189e768dca1dac0b0000000000004936f63cd5e3d5767da00d3793a8dde738fd386db67313afbc88ccb63b8f41cac7e56e39765f3d77b92354f14aeda431abf848670c6c19bf992a88b810ab62b9da435beca2018ebf91080000007e273f346c8d65a632010602244f5e173af768adcc4f513a4a97492edc40ddc7f03435058ea06b8d47e119d6fbc814032533aef627dc6fc7439896000000000000affc46d7349842d880f3a28796b56df74e5c9245aa759300"/256}}]}) 20m38.249278203s ago: executing program 0 (id=904): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014004000001080008400000000114"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 20m37.274392419s ago: executing program 0 (id=910): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001740), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000080)="2103cd7adb8cd2250b11f4", 0xb}], 0x2}, 0x24004010) (fail_nth: 1) 20m36.815583592s ago: executing program 0 (id=913): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x1, 0x5, 0x2, 0x80, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/181, 0xb5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r3}) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f0000000200)=@phonet={0x23, 0x6, 0x97, 0x10}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000280)="072dd92c9851d4c698b52959c5cc26aabae2ebdfe0b3eca18a10ac0604554cf3a7e76b7f262a2786207897b46b6b4dc7fe105ff8e50f35f29941607c2622e0f87e95726ec375156c", 0x48}, {&(0x7f0000000300)="223493e86e52e2ffc63255faff385296ea49e34476a9e76200d482dc40ae3c0f1e583bf4f6bc31ffb2c3dddf944b3ac06a58eacbcb8df28ee4d792710222b736f789700f3fd8dff1e13e79f8ae76f57aeffaa1eeafa628db1f663af1fe4a7233d777eba6f28fe75e94e058d127304fa2bebbd489d908d2369cac2833e98e6eeaa59dea92a74fb2f66822f7bb79278d8566473469e0386141ebe0bbd0467dfb313b52d0663facb908c25e9be4f49da4b26421ee7f31087ca2b3b830f30e23d0492404c36ffdb409dace7c3db14217", 0xce}, {&(0x7f0000000400)="fdb34f1a9e3a8fa9b9b029d5b42f10ae9abeceaacf7c14d6eb902ccbfb02f1f3925a44afb9a5476b11242c3e16c829edf5cf44d00fcb104928210befd3538ec7f9dda6bae647fb396f24d3fe64ad4a64c75bb6137d7dcb95dcf637c73231a469663a3a11b42544bb1d31dcb767b863c96860125bfffb3a6b06957ed5c671e18335785e883b515077e52e89e4bc572490d8e97aa4441bd6c380c04d724e2ab9056ca4c093fb1d8416f4b04c3edfebe234637f26e6ac47822ec1f7e495db598c037afdd0f953d903cf1e1597c8e924ac70c48ad05076aa9bb228eca39a33dff4faddb0b54074c4b9c017cc8d3be80b8d74bd9b5ee78744b243ccc75033f4ce0a30882c8239550aad42eb446f5e8f32c27ca4a6e42649d4d1bbf208ead8171053f3e90ef2f7fb34b64d47a09b6d64bca9b6874b7777bcfea74d744dec85d23b1abad7e7174cfde8f8a89afde8a4a4fcad53941f88619dd226dbed5cc55e0e10b34fba144f5dfae8fdf2c0037c583fc9e50fd4b4023922131d2aca532375f9c83589ec485991f1726afee11b028065959415171de7b16a3b1882cde02dc13653416d741c5f248ba71caa465c00fbaf5e491141609a7cc4fad048f3d3449778a0553b1e2f4bb4d83a2c5ac032fa074d115016738a3da9d945ba414917c40dbe6414a711b239777851c901ec19ebee0d67b76be583a24527d2599918e8f4bd8a8aca4848477566b9bee05f6b00b1dea2df73a71a1ad3d2eb4c73cf3aa7be97eb159809b00d861c888ac0b276c34e68d3484ca5c4504d9eb004f614e92c9438121721caa4067c7ff35fb15f7e675c10551b5f1f7d47e4cc56d7b775e64b3ffff96cb1ab07e33a269b2d7ce08c1731798d1fbe4e0e89be1eda0fbfe882edcf785a30bd786a1863bbde697f2f4ff791393d22b52b583118695d02bb931fed0ad5d3f45d8df3bdd8cef8667487a7a1de916f81b809c92a30dda1563cf8a07d24332c53c8b04c7b724fa209b5ed7ad08bac50db6abe9b318a4bb013a632f03f08c0782f94858fd21378fa2abca070d2fb8064e3f4ec908c567e924e154ac1398c3a19c66d240fa5179d63ace94d4a6526d4a86dbe2dc86f2e21ae3beca1564f968c372fe2eea5ea1427abee1b91e5d170a7bb98855d93815dfdc6233de89e195d8247c74329557a90c1626ac40de176687c449f8cdf6602ed04c4a5a27e27ce9b50de604ce84b00803ad6041aa2b955a9cf31bce85551eb0a83fa6de86ee877ef488ae012a85c0081ba52905d06891e5a343503e744c3e18f20b985b7f37c3b7d647558dc8d12707d165256ab55900891afd28148f1ad7b1f75a01f4161e46cffeda222d1731d18882bc69e48fcfc1dd664fd12639c644fb49563bf3380419e45847485655606f5c37cbd1b11874ef2bf6e560c45aba376847db413ad8a819e9332d4a6516908efb0e225aff95ba7c2353b9862d8ae85aa22db9733f4dd218ffc9e74fea8dd5c1324065bda96add45056e49e88455678e294ee6c653064a8a9de2e0bcf3f9710cdf9d54e90242a028a086ae9ff3328adf7c0b894bc03ddf6d533f2070ee8d527db68a7c2a4040d7ed8ad3d2f520767031ed26c8649d3544a78ec95e4cac59963d808920eba1f5e3236dfc291d685d7f8a99e31be49a546321d576c4b57ce8b4a4061837f6be5355bd84cd380d4785ad4f73cd3ed09cb91a1d0078a1b842c4fd4e7a1baa21cffcd7815e68c0c6071dffcdc37633b8587cbe9cb963095ba8acdb5c80a92fee2ef8278d2d783a72ab1bd871e5e207f78ae317458c89362b39a38697b447de3289b542b5f3002b38caf1b9439cd523962a79ad9cbf6628f6012242af8f9c4e54d216fadad3b4d7adebc440fe75ed51a010c86ecdc11cf13320ed4298b5b8e182905a036a42a431200bccf24674b8c2463dae6648ec42130562342cec49524657e0a4e421da9dc60c53cb04555fd16e2af465b5d1565e56d1240ad5217467d5ba2dbb925ba1fa82d6a28591bc0d5cfb54ba3be7890b9268ad400db52896b019b835786bd9a9a9b0cd836358e3845252921ea0c04f6292b33ccbdc35b543113d707ac85e74b9f394703da7e3bdf6b9c288a8be744685e706d1f09cedf7d9789f3988b10ea44ffcb347cfe4eae45e9c418b5d66bbef5364ddc84b7c42e0434b0772ace3f3905079a15aaa448b488f1e59c258a7fc02a4dd22584ffcd341d6493f1825ea3b8af2ff375f2fd7773de8d5c8418cd620df332b0d2df34c23ad2641cf02c895a78ac4a67dc59deb14aad090fa2c5b3863fcad6fee96369c5bfd449713b1dbf81a999ca5d830805a8ecf1a02c575a5b2bdd3fbb1ddb09a398c46a5c58f1785c1babb4f9036db268b990e606b2e38b06836203e82b786d0238261496245fda76a54880faa226bdfdadd2124100be9f604d5cf08da1aaf4ae5d11f7df07ca2e2f68e5b134597d3a33c0e22dc0b75cab5cf6fdd4e084040c9d3d574371795647e9be1e242af047f3f701787eaf55d299dfbe2e41b14b220208498f0fc86930feea32440ac8b62154de8bbb6bd822ba42bc700f4190231e41fa792f554394029bf30395a6b75a339764fca96b809f19784e486f4edfc5ad00bfb3407e718b3f739b4535e476d9da849dbbe198f3e3959f5dfeb34140ad1a7692482d8f2bed383d1adee66fcd8a8a987efdfe8d2683d3e3b7984d9ffc59be962d2fa0e6b6857979c908d9198c35fc984db27f223f775afdff49f7bd830c367b879145eb751fdbe92c3d288d46fa2b343d269f72a0ba8839c1da340ca22bf949ffcc716737a77ec8eda36a06cded67e6a5f3b30e0ec2b711898c7e4b96a16bbee786d828ab1c59386581b11d7c0eee2c66b8fe2d1327c5fa05614ed74ab4c547ce498ae3804bd929209c59c9ddbd2359389681d435f18a1a0bef286e35fb83de1739e0ec7eb02a67c7a4bbaf7ad827f9c036589bf16b1f8d83386bf41725793c65437a41f57338a589388d6e191341ac4e6ef829438a4116df593b6c32525e9248cbc016496a0e63de9704bbdc5558bebf46d11e74c713c2bcda093441f30f8a65b21b6320180532876f477d92714bbb0da10e2d433b9d47dcd6fb0bc95f15305b8784e33e30a3e45878f542246066152dd23f4efb17e48e706b08ff8b305e95f9fdfbe9e3dbd847bb6a73ff6a2634fff1ecbd11948e01daf3cbe22624a8f70a7f695e0f67ff3b132c3540774e0454d477786cdeda8ea760bbc8849a48f57bf0658dcd945172023b9f4de1497a7071c2f4a15ccce43eea3a777d8de76a88b2d2b7498e60dcff1fba83f0a05dc7b236b79ffa67a1a3db5c865ec5789c337fe4c436187ac91548b3084ba15c95e45e18713eddc22997c70d1763b8793eba3c1649f5de7dc19273882c482363032354a73c1e0337993904adcad4eed895defb975238ee9c15b2766306c65281c18e748a73870f1e9b023990537af6be27423f710b6f4d1f80b982ae398c11bb72e5a4e3b2ec3c2078c7d4cf00e30cb935ef3fd7f85e5a616a3c3455fe6d56dad68916c9dd93f78a226cb7bf90e008096f5828bc622f92d373960e07cae3cde46e5c204044bdfe8c9d86c2fc3a5c23f2c4848580db66bd63e1fdb577d49ee455cb957429b91705ff6d4fd9acc315d45a837574ba718e650893746306d8dde2835ad5d26e58c66a589c239311a946013b37fe33711e3d772212bdfd13c1070fe2f5aa21ac4b7d34458df1da43b8699a79a74aaaa5e7bac9c1437470f12db4bd8157fcde954ee076b2b3b31d8d931b709198ffa633bf76fef0b54a636b756f8f9e536d05f45888908a8e81d104e73f314698e608b1efb70150130f3adf1a8b0865d73b83ebbf796777620bfa988e92c87eedc544362b7ead536ae2d538ae98e7c8958b47fd963f2f79d6324ff711d9778b1cc998a12e8fae5aab3a71e9460027869ce0a4e4ca033dc016ae3455e3a0dfd9adce71519bcc42e2cbcd2aa655b252661724ea9aadada50b5ff8e244e840a7e3e1fbf30922b612efe3492821682d89d3c4a9aa73ab5e4c779d22753dfaa4c009a703ccddedc1247abf9b5ea73dde87788a3b5208e896a955fda1655dcf8a8ca92aea261211d84ac996fff316e2064be3f318bb6d9a881796a5815faa69aa41a4ecdfaeb04c986fd78fb3d2d71084bbcd594b365ed2b9dea09391a6eaca3ae72bd1d252ca2a70035a9fd734da50889bc72bf7ff7aefcc7a2be7db1c5242d305461f1452cde19df72809d59326e0b2f6cca1416c80552fb5478c6e8fa00c9d707da690229a3685db452c4d9656bd645a381a91530c283eae495de5cbc5643cbe4fc8dc52b0531822be79985d6de2f55b51bf52b1243dd8edbaaa9f9d2b89626b885556fce2f8070f1048934de1b23f1b7d6cf7c4d09d1a40345b9a08b8017037f92ced660ca33e31bf0dab2a3f20c8882f65c744109aec4ec1018198980361d14bfc0fbc2e6ea6fa8a53b31939fcb3df583e9e14df2917d7b81870acb62cb761cf5968d22dfc0090ab0a088838884b2e9c79bf4d0776b7f00bfa22c47c1e11c0f3cc8dbc549b49dcf05d91a468f1d91cddd6f37e9d475fb5904b7a1aec44eb024311d59de634b88dbda058cc4a0600555c43fda9a1ae5750aadb2763274251448fcb48742bf7531f6a91f0da040f9c3bc4eaac847a23c60f69c6fe517d95eeaaf31f234242c32a8fc15898c4e6516ca1968b4cc81129ba8f85c97431eb00ab7449170389dda2eb2c579c7fd74bc3712a01139d5492222881e543978a5fba29ca37460598f3604b75ec6ecd844eb829f7d3dad0d1300fe0fe476e42010ee0ffa136fdd719e0ddddcf1a8f2b28ed4b56c7e870e6a969dc14b25a8335f8017aa397c05432a837963c06bb02409114e4b58a267903dc7e8b48772ecd7f4583dc4854d5a0469c3bc99a31b0a658c9015aa5894b2f1f95a5eb449fda92c2ef74f27e8347c8fc05907592284c903e90fdf38fcef55bcd42376e4c4f333eff0236f547a5413bf2adf6391d2fdf5daefe73acfd1f9dda02a646e5d5f3b3fc38daa53ff7c70c963c77afea2620ae41fad8a20630b5d5ea1e9d320e3d55779c75ea07b956b3c1aadd19a9af20e3995b5d9b119ef677158a8384de0d5732b8c62c20e4e834eed19136378a17fd6dad33d9ee48c31562e4c89911c1320e95d3d13993e88b7778bfb02c802449329f77dfcbb0e4043c506088affb56b9ca9779ba2c56b250b7de1d3e6cc9a271eb24faeed117aa40952004b819024551d67062550af993851caeb613e00f7fbcbc0884d9f7bf654b6478ba9de4573728175c32323ef1cd632cf1865aeb4d034be5cff28dacfceb28d2d6c2e6dcdc2fa74d4b41bd3cf5bdb4545f275e2efa3e37fff7593bc7388b8223e41e0189f924ad2a282a02222a1c856df0ec2a97564190c1c65144a0a1cb7f5bd59eff15dabe0ea0b66c295be71c8d0873c7aa8704d2eb9cfaf5cf69bff0070eb3f6be537ec80100cbbfc1be85dd63e285425efeaf7b312cc2c4a9a131308023f8d97e16b05b50276733ab855683366e0882080bdbd5ebc2d0ed6b9520e4542d0d030b783eaadfd8b769eb10b7b08f78856863118c9e42e52234f9917819237ab8f2ba93ffebcaf2d168927831d2d40bcd660a510d6391c7c3df30da59b2bc7cf08987e4101e5fbb0476c7db06a065ec9b7592b6c43414f732eb5e5a2c3c242b14626c04542917fd40532885ad768ebf932af48e13726bae084d824f50da723f7ad92b3aac8687ae2dc5d8814a15d3d7f984659dc5c2bedfdb", 0x1000}, {&(0x7f0000001400)="2485c20fb8200bbf3d42862f9b58143414944a02a39d9b05a54f5137ed47abba58daac5cfecf94edbf731e3acf39f5d2a0b438ac50eee86c4ab8e530e0296ebf3231da838060450445945025dfbefc83467028482f8f16f5c59b8171d6a82e83275cb4ec43f3a0a53dea1241396d62569dd93b08eeb7e12521eecbc37213c6862255a7068d10ebe7f09af6749ee8601a76604e124c4a28f21d17e9389f044180c1f5e736f095ff1b123f71269a9419c3c2e529343ba0b508095951ff32e34277bf0adcb64c23258e0d7effab", 0xcc}, {&(0x7f0000001500)="b40d7cf4034853cf36a7c5153cf82e253f30ee0cafc34b44", 0x18}, {&(0x7f0000001540)="49dc115e587ce2d5f721f58db93ab969428f3307bd98e7957a4b919669bcd5edda1a120d0d749a87b1b395120b59c3892856212905111f3c6620c4897a77354d9d9c79aa83a1770d2f0c845cfd8f2cf67216930b012e5d22d71ccb5178e190f8e30e5be34b", 0x65}, {&(0x7f00000015c0)="9fcb6fabf89b46d5551777245f9d4fc5ccfde62fa4f0b4d43b38ddff0415a0b56527b4ee7aa57728870d3609d72147a4e7eefead0b60ed22ee968333d14c6386382d49eb0f9b6322c6b8384789924af68346ebca60d94d6e3e506c4b8a9803f863f0b8f8a1dbf1fe014213062a39a8171237384718f3b2e83208681ef4f9284f82621eb035b22c4f6321e06b7e90ce30f7acf503e6ce2272b8e7a48aa7571104f9d915cd9c5159652d0cbc4238b12e9e51e8aa7d72ca59", 0xb7}, {&(0x7f0000001680)="05fbe2c3384c8215c1244d2ef0e9e50c0670683ab1beb2c61602176082db8768aa49aeb388aefcf94bb8188eeaa1fba5e9fbf9d37cea4ca9e5af96a915b3a5a0db6c8d4b4331f9", 0x47}], 0x8}, 0x4000011) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000017c0)={0x0, @sliced={0xf8, [0x0, 0x9, 0x5, 0xfff9, 0x8, 0x550, 0x9, 0x8, 0x8, 0xe, 0x4, 0x0, 0x2, 0x7cac, 0xca0, 0x0, 0x8d3a, 0x6, 0x3, 0x8b1f, 0x7, 0x2, 0x0, 0xe, 0x7ff, 0x80, 0x2, 0x8d, 0x5, 0x5, 0xec, 0x7, 0xfffb, 0x9, 0x7, 0xffff, 0xf, 0x8, 0x1, 0x6, 0x2000, 0x3, 0x101, 0x6, 0x7, 0x6, 0xc447, 0x4], 0x8}}) sendmsg$nl_route_sched(r2, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)=@gettaction={0xd0, 0x32, 0x200, 0x70bd29, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x994}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xbe15}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xd0}}, 0x40c0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000001a80)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000002500)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000001b40)={0x96c, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x123, 0xf, [@cf={0x4, 0x6, {0x10, 0x60, 0x0, 0x8}}, @prep={0x83, 0x1f, {{}, 0xd, 0xc, @broadcast, 0x6, @void, 0x8, 0x100, @device_a, 0x6}}, @measure_req={0x26, 0x62, {0x6, 0x5, 0x7, "ea2b1893e4026f111cb6476aa00fe9f349d6f5059a66db366ba214a672941e85dc8a779072d4dfe9e11055378afe4e87e41745248cee818fca90462d2a53c3320b24620fe4ce4266828f7fa9dcaacba6b14e973f7dee21c5059cf9a8cab985"}}, @supported_rates={0x1, 0x7, [{0x16}, {0x48, 0x1}, {0xc, 0x1}, {0xc}, {0x6}, {0x27, 0x1}, {0x5, 0x1}]}, @ibss={0x6, 0x2, 0x8}, @random_vendor={0xdd, 0x83, "cab978c8a4576107a1fc58981cbfdbbd03cc729e8e0f6051dfab9bad175220a4105723015a7a4e8429062df9a5b34d0cb32143781c1b104c5360e18ecda5deec2c4d93f705f0631245afcd001c644e5879a09a3804ca3ed4bd2c25d41969e65b6cd013daf7dd6c5ab089175514721702a1cd3977bec3f2d9e1212306237e1266ec7b52"}]}, @NL80211_ATTR_PROBE_RESP={0x812, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1, 0xdc}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0xe1}]}]}, 0x96c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) linkat(r2, &(0x7f0000002540)='./file0\x00', r2, &(0x7f0000002580)='./file0\x00', 0x1000) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x10000, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000002640)) ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, &(0x7f0000002680)=0x9) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002700), r6) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000002840)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0x84, r8, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7235}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfa8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4048804) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000002880)=@req={0xb, 0x80000000, 0x9, 0x3}, 0x10) close_range(r1, r3, 0x2) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000028c0), 0x1, 0x0) request_key(&(0x7f0000002900)='encrypted\x00', &(0x7f0000002940)={'syz', 0x1}, &(0x7f0000002980)='/sys/kernel/debug/binder/state\x00', 0xfffffffffffffffd) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000029c0)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002a40), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002b00)={r6, 0x58, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000002b40)={0x0, @dev, @empty}, &(0x7f0000002b80)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002c40)={'syztnl2\x00', &(0x7f0000002bc0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x81, 0x3, 0x26, @mcast1, @mcast1, 0x8000, 0x8000, 0x4000000, 0x19ce95c1}}) getsockopt$inet6_mreq(r7, 0x29, 0x0, &(0x7f0000002c80)={@empty, 0x0}, &(0x7f0000002cc0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000003240)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003200)={&(0x7f0000003000)={0x1e0, r9, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x48044}, 0x8005) 20m35.85940179s ago: executing program 32 (id=913): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x1, 0x5, 0x2, 0x80, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/181, 0xb5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r3}) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f0000000200)=@phonet={0x23, 0x6, 0x97, 0x10}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000280)="072dd92c9851d4c698b52959c5cc26aabae2ebdfe0b3eca18a10ac0604554cf3a7e76b7f262a2786207897b46b6b4dc7fe105ff8e50f35f29941607c2622e0f87e95726ec375156c", 0x48}, {&(0x7f0000000300)="223493e86e52e2ffc63255faff385296ea49e34476a9e76200d482dc40ae3c0f1e583bf4f6bc31ffb2c3dddf944b3ac06a58eacbcb8df28ee4d792710222b736f789700f3fd8dff1e13e79f8ae76f57aeffaa1eeafa628db1f663af1fe4a7233d777eba6f28fe75e94e058d127304fa2bebbd489d908d2369cac2833e98e6eeaa59dea92a74fb2f66822f7bb79278d8566473469e0386141ebe0bbd0467dfb313b52d0663facb908c25e9be4f49da4b26421ee7f31087ca2b3b830f30e23d0492404c36ffdb409dace7c3db14217", 0xce}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="2485c20fb8200bbf3d42862f9b58143414944a02a39d9b05a54f5137ed47abba58daac5cfecf94edbf731e3acf39f5d2a0b438ac50eee86c4ab8e530e0296ebf3231da838060450445945025dfbefc83467028482f8f16f5c59b8171d6a82e83275cb4ec43f3a0a53dea1241396d62569dd93b08eeb7e12521eecbc37213c6862255a7068d10ebe7f09af6749ee8601a76604e124c4a28f21d17e9389f044180c1f5e736f095ff1b123f71269a9419c3c2e529343ba0b508095951ff32e34277bf0adcb64c23258e0d7effab", 0xcc}, {&(0x7f0000001500)="b40d7cf4034853cf36a7c5153cf82e253f30ee0cafc34b44", 0x18}, {&(0x7f0000001540)="49dc115e587ce2d5f721f58db93ab969428f3307bd98e7957a4b919669bcd5edda1a120d0d749a87b1b395120b59c3892856212905111f3c6620c4897a77354d9d9c79aa83a1770d2f0c845cfd8f2cf67216930b012e5d22d71ccb5178e190f8e30e5be34b", 0x65}, {&(0x7f00000015c0)="9fcb6fabf89b46d5551777245f9d4fc5ccfde62fa4f0b4d43b38ddff0415a0b56527b4ee7aa57728870d3609d72147a4e7eefead0b60ed22ee968333d14c6386382d49eb0f9b6322c6b8384789924af68346ebca60d94d6e3e506c4b8a9803f863f0b8f8a1dbf1fe014213062a39a8171237384718f3b2e83208681ef4f9284f82621eb035b22c4f6321e06b7e90ce30f7acf503e6ce2272b8e7a48aa7571104f9d915cd9c5159652d0cbc4238b12e9e51e8aa7d72ca59", 0xb7}, {&(0x7f0000001680)="05fbe2c3384c8215c1244d2ef0e9e50c0670683ab1beb2c61602176082db8768aa49aeb388aefcf94bb8188eeaa1fba5e9fbf9d37cea4ca9e5af96a915b3a5a0db6c8d4b4331f9", 0x47}], 0x8}, 0x4000011) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000017c0)={0x0, @sliced={0xf8, [0x0, 0x9, 0x5, 0xfff9, 0x8, 0x550, 0x9, 0x8, 0x8, 0xe, 0x4, 0x0, 0x2, 0x7cac, 0xca0, 0x0, 0x8d3a, 0x6, 0x3, 0x8b1f, 0x7, 0x2, 0x0, 0xe, 0x7ff, 0x80, 0x2, 0x8d, 0x5, 0x5, 0xec, 0x7, 0xfffb, 0x9, 0x7, 0xffff, 0xf, 0x8, 0x1, 0x6, 0x2000, 0x3, 0x101, 0x6, 0x7, 0x6, 0xc447, 0x4], 0x8}}) sendmsg$nl_route_sched(r2, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)=@gettaction={0xd0, 0x32, 0x200, 0x70bd29, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x994}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xbe15}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xd0}}, 0x40c0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000001a80)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000002500)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000001b40)={0x96c, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x123, 0xf, [@cf={0x4, 0x6, {0x10, 0x60, 0x0, 0x8}}, @prep={0x83, 0x1f, {{}, 0xd, 0xc, @broadcast, 0x6, @void, 0x8, 0x100, @device_a, 0x6}}, @measure_req={0x26, 0x62, {0x6, 0x5, 0x7, "ea2b1893e4026f111cb6476aa00fe9f349d6f5059a66db366ba214a672941e85dc8a779072d4dfe9e11055378afe4e87e41745248cee818fca90462d2a53c3320b24620fe4ce4266828f7fa9dcaacba6b14e973f7dee21c5059cf9a8cab985"}}, @supported_rates={0x1, 0x7, [{0x16}, {0x48, 0x1}, {0xc, 0x1}, {0xc}, {0x6}, {0x27, 0x1}, {0x5, 0x1}]}, @ibss={0x6, 0x2, 0x8}, @random_vendor={0xdd, 0x83, "cab978c8a4576107a1fc58981cbfdbbd03cc729e8e0f6051dfab9bad175220a4105723015a7a4e8429062df9a5b34d0cb32143781c1b104c5360e18ecda5deec2c4d93f705f0631245afcd001c644e5879a09a3804ca3ed4bd2c25d41969e65b6cd013daf7dd6c5ab089175514721702a1cd3977bec3f2d9e1212306237e1266ec7b52"}]}, @NL80211_ATTR_PROBE_RESP={0x812, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1, 0xdc}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0xe1}]}]}, 0x96c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) linkat(r2, &(0x7f0000002540)='./file0\x00', r2, &(0x7f0000002580)='./file0\x00', 0x1000) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x10000, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r7, 0x800454d7, &(0x7f0000002640)) ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, &(0x7f0000002680)=0x9) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002700), r6) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000002840)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0x84, r8, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7235}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfa8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4048804) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000002880)=@req={0xb, 0x80000000, 0x9, 0x3}, 0x10) close_range(r1, r3, 0x2) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000028c0), 0x1, 0x0) request_key(&(0x7f0000002900)='encrypted\x00', &(0x7f0000002940)={'syz', 0x1}, &(0x7f0000002980)='/sys/kernel/debug/binder/state\x00', 0xfffffffffffffffd) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000029c0)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002a40), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002b00)={r6, 0x58, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000002b40)={0x0, @dev, @empty}, &(0x7f0000002b80)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002c40)={'syztnl2\x00', &(0x7f0000002bc0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x81, 0x3, 0x26, @mcast1, @mcast1, 0x8000, 0x8000, 0x4000000, 0x19ce95c1}}) getsockopt$inet6_mreq(r7, 0x29, 0x0, &(0x7f0000002c80)={@empty, 0x0}, &(0x7f0000002cc0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000003240)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003200)={&(0x7f0000003000)={0x1e0, r9, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x48044}, 0x8005) 14m4.817444516s ago: executing program 1 (id=2140): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f0000000280)="935a") r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=[@rdma_dest={0x18, 0x114, 0x2, {0x7000, 0x55}}, @fadd={0x58, 0x114, 0x6, {{0x100, 0x40}, 0x0, 0x0, 0x3ff, 0x7, 0x1, 0x8000, 0x8, 0x7d04}}], 0x70, 0x8004}, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) 14m2.702839796s ago: executing program 1 (id=2148): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) (async) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = dup3(r0, r1, 0x80000) sendto(r3, &(0x7f00000000c0)="aa885d5290b2aacb8e4c125202f4eb30977ba88bc2c2d3c8112f50df3e5a30511a992c8406a17f068957a6", 0x2b, 0x0, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x1, @random="83e822a686e3", 'pim6reg0\x00'}}, 0x80) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="307baa454d55cd220d09600b53613644c482c8d846e5e9a99f3e46edf91f25f29a4e66b55ce14a39d170d0f961506efde6ce618e101afddd7142a637fcbff25030d059bf7d7e996861a477a012659197bbf4dcb7d2b008064cb6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="307baa454d55cd220d09600b53613644c482c8d846e5e9a99f3e46edf91f25f29a4e66b55ce14a39d170d0f961506efde6ce618e101afddd7142a637fcbff25030d059bf7d7e996861a477a012659197bbf4dcb7d2b008064cb6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m59.650613471s ago: executing program 1 (id=2158): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4e24, 0x9, @mcast2, 0x9}}}, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x1001, &(0x7f0000001640)=""/4097}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x800) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io(r8, &(0x7f0000000540)={0x2c, &(0x7f0000000b40)=ANY=[@ANYBLOB="00233f0000001f01230369e75ce7e1115782fdbd445f9c1c8bb3f7b8629dd17416d17c7935b16bdb4fdf16f5fa8291cd24c073b647d839bd510000040855094f488fb61319dee52acacc7ecd2ebda685a4ab5dd45c94"], &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000480)={0x0, 0xf, 0x4d, {0x5, 0xf, 0x4d, 0x4, [@generic={0x15, 0x10, 0x3, "520064fbd7813dc6912400000000000900cb"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9e, 0x4, 0x0, 0x11, 0x0, [0x0, 0x0, 0xff3ff0, 0xc000]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "c794e87d62f43ddeb06820bf48574824"}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x57, 0x3, 0xd, 0x1, "2921066f", "734779ce"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x62, 0x5, 0x2, 0x8, 0x1}}}, &(0x7f0000000a80)={0x84, &(0x7f00000006c0)={0x20, 0xf, 0x9c, "71ba16be43170a778afffb68501d8e51e69b4f6c6d9130400263dcbe87c0a255a1427a4bbeb412c926702569be0d0765413ed99f1add1ab253b0fd5912e68b3f875190ba3b0babf3be76ea1480c7e1687d5e229181d17cc2a2e1d3148b5dedf8d4628117b35ff86a9ee67c5f09f299efd12926d66d5989ebb51d1c81cf2ad2420e4e4a98e44bbe8b28411a624b88353d3d0a2e7fb4ec13cd18c06f1b"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x20, 0x20, [0xff00]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0xb, 0x2, "501d"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @random}, &(0x7f0000000940)={0x40, 0x19, 0x2, "d6c1"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x40}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0x1e, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x1}}) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80011000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000240)={0x3c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_FLAGS={0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) 13m54.450044732s ago: executing program 1 (id=2169): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001900)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000001b80)=""/142, 0x8e}, {&(0x7f0000000700)=""/136, 0x88}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f00000008c0)=""/243, 0xf3}], 0x6, &(0x7f0000001ac0)=""/131, 0x83}, 0x8000}, {{&(0x7f0000000b00)=@tipc=@name, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)=""/93, 0x5d}], 0x1, &(0x7f0000000a40)=""/5, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/15, 0xf}, {&(0x7f0000000d00)=""/166, 0xa6}], 0x3, &(0x7f00000011c0)=""/244, 0xf4}, 0x5}, {{&(0x7f0000000f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000f80)=""/72, 0x48}, {&(0x7f0000001000)=""/255, 0xff}, {&(0x7f0000001100)=""/187, 0xbb}, {&(0x7f0000001c40)=""/195, 0xc3}, {&(0x7f00000012c0)=""/206, 0xce}, {&(0x7f00000013c0)=""/44, 0x2c}, {&(0x7f0000001400)=""/33, 0x21}, {&(0x7f0000001440)=""/17, 0x11}], 0x8, &(0x7f0000001480)=""/29, 0x1d}, 0x1}, {{&(0x7f0000001540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/99, 0x63}, {&(0x7f00000015c0)=""/99, 0x63}], 0x2, &(0x7f0000001700)=""/233, 0xe9}, 0x5}], 0x5, 0x10141, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b3944ddd", @ANYRES16=r5, @ANYBLOB="010004000000fbdbdf253900000008000300", @ANYRES32=r6, @ANYBLOB="20005a801c000080040002001400030008000700050008000600010008000500"], 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\xf4\xaa\\k[sC\xae\xd6\x98\x9bY\nI}\xd8\xcc9K\xd7Z+\\\xf8\xdb\x84\xee\xa9\f>\xe4\x81\x88\x90_\xd4\r\xb83\x9e\x13B3\xfe\xcf\xccm\xfdO2\xd7\xa0DD4\x1b*\xdd\xb6\xcf\xacr\xabF\f\xb5\x11Vkp\"\xb1\xa8\xf0\x8d\x00\x18}3utO\x1bQ0x0, &(0x7f0000000240)=0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f00000001c0)={0x0, 0xffffffff, 0x1, 0x0, 0x6}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffc, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, 0x0, 0x0) 13m52.462283916s ago: executing program 1 (id=2173): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xf, 0x3be, 0x1, 0x8, 0x15, "4da48cc0c07e1094"}) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) timer_settime(r3, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) sendto$inet(r7, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x4000080, 0x0, 0x0) 13m52.314045533s ago: executing program 1 (id=2175): epoll_create1(0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x8d1, &(0x7f00000000c0)={0x0, 0x4, 0x400, 0x3, 0x379}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47bb, 0x3e7e, 0x0, 0x0, 0x0) 13m51.368275876s ago: executing program 33 (id=2175): epoll_create1(0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x8d1, &(0x7f00000000c0)={0x0, 0x4, 0x400, 0x3, 0x379}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47bb, 0x3e7e, 0x0, 0x0, 0x0) 8m41.194692657s ago: executing program 6 (id=3060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109802, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="e5ff000000000000bc1000000000776b0fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 8m40.894589062s ago: executing program 6 (id=3063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="e5ff0000000000004e00000000001c004000740000000000950000000000000041cca068850255544d211b541796"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002500)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000300", @ANYRES32=r4, @ANYBLOB="06001c004e21000008000100ac14"], 0x150}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4040084) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r6, r7, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r5}, 0x50) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3adf4e7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x37, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x16, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000240)='GPL\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x5, 0x2, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, r9, r10], 0x0, 0x10, 0x6}, 0x94) r11 = fsmount(r8, 0x0, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000040), 0x208e24b) 8m38.975970225s ago: executing program 6 (id=3069): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) listen(0xffffffffffffffff, 0x4) (async) listen(0xffffffffffffffff, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x181f) socket$netlink(0x10, 0x3, 0x0) unshare(0x28020480) inotify_rm_watch(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) (async) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000100)='1', 0x1) syz_io_uring_setup(0x239, &(0x7f00000021c0)={0x0, 0x40e655, 0x10100, 0x3, 0x0, 0x0, r3}, 0x0, &(0x7f00000001c0)) (async) r4 = syz_io_uring_setup(0x239, &(0x7f00000021c0)={0x0, 0x40e655, 0x10100, 0x3, 0x0, 0x0, r3}, 0x0, &(0x7f00000001c0)=0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000030000000e1208000f0100810401a8001600200001400300", 0x3a}], 0x1, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f00008d6000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) socket$kcm(0x29, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x60, 0x0, @fd=r0, 0x401, 0x0, 0x5, 0x2, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x2ded, 0xef8f, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) sendmsg$nl_route(r9, &(0x7f0000002240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8m38.691887601s ago: executing program 6 (id=3071): socket(0xa, 0x3, 0xff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xfffffffc, 0x10, "ba00"}) r2 = syz_open_dev$vbi(&(0x7f0000001a40), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000001ec0)={0x4, @output={0x0, 0x0, {0xffff, 0x4}, 0x7fff, 0x37cc}}) syz_open_pts(r1, 0x20800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0xffffffff, 0x4) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec24, 0x400, 0x1, 0x40000333, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES64=r0]) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xfc41a09c123b332b, &(0x7f0000000300)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@subj_type={'subj_type', 0x3d, 'rootmode'}}]}}) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r10, &(0x7f0000000100)='./file0\x00', 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 8m37.614077511s ago: executing program 6 (id=3073): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000680)="002204a400ffffebfffffffebfffff0700000000ff000207835eeb1317b20cfeefaf234b4ff838e14611f4c4468471f2e42b46a7b4cc4c39bdc8451792b903f4b7d8c8cfe72153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a33560ae01010000079c60cd7449b842f3e24439d15bb37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad77", 0xa8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0x800, 0x3, "3e1a04be00"}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000001b0001c0"]) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa6, 0x9b, 0xbc, 0x10, 0x954f, 0x4199, 0xf76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x2, 0x2, 0xc, 0x7, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r7, 0x1, 0x3, &(0x7f00000001c0)=""/174, &(0x7f0000000580)=0xae) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000100)={0x14, &(0x7f0000000280)={0x0, 0x9, 0x4e, {0x4e, 0x22, "3b2c21910aae2bb3bbf82d775b4c5e794328dda11e3ce184d1e96deb6825b63c1b6a814823cc2c2c2bff9a66ae48b15ddda50edaee91260bd5a49f3416f280d6ac68c416bc14f0d2affeb071"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}}, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x40, 0x14, 0x31, "cc28b6720a3a26345c0effd031b7700624ce84bc831afcb5e3ed4cd1574c42b77f65619f0dd4feab391b9d0268338ecce8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x81, 0x3, 'V_|'}, &(0x7f0000000400)={0x20, 0x82, 0x2, "c409"}, &(0x7f0000000440)=ANY=[@ANYBLOB="208203000000720c10"], &(0x7f00000004c0)={0x20, 0x84, 0x2, "a81a"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "9ce46f"}}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000800)={0x24, &(0x7f0000000600)={0x0, 0x30, 0x24, {0x24, 0x3a, "ebc6db2c208a77f7bc67bfee4d2f91e74bf90e332e3671306ee46ec1497307f95a52"}}, &(0x7f0000000740)={0x0, 0x3, 0x57, @string={0x57, 0x3, "86d31df063b283b1d4188d9d7e0a6352b714adf61741444bfa06ec282caa90db519376c580779b6ed3fca908fac62113dcb4ea97375ffa73b650adecd3a397b01ab8afea1455fcc2f86825c1aa970f5ec33622f2fb"}}, &(0x7f0000000b00)=ANY=[@ANYBLOB="0d00000000000000b94eacea6ad9b0b7e8208461a350b93cffc28f57cf100e12e74a0a71af73462b01960f70a10978eaabb2e8794b466380958131b2cc07acbf5a6a802ad4cbd835176deb43df24ccb2d87f70004ad73d9716692c22028067fbe8ef441c6b2691f70c6959acc455c7167b8fc27290df9951a3ce2c08bda711605142e0f8132b0c6c9d017e8f6d"], &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x31d, 0x73, 0x1, {0x22, 0x2e6}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000840)={0x20, 0x16, 0xd9, "9962fa7d3ccfcbb8adc97b05c34db6fd410cb60906a2eb0fdf3a3f13feb50661a592be8ee728979feb9144dadf23201dd2bcd43c10385ae4fba77e0045b89c1970119a68718b9b251c33dc2011c1ccccdea7cdd269222e458e5883c3cf5907aa37b385ec7560fc692f9d7c712f5cf1a03e37115284d8a0865f36e92cc533c07ac9c6cfca5af077b7980f0ac4eb7d11314bf01be72192dc7cd7b63e705180416db9cd471a95a8b24ba419c2147634a5e6fcb07c38ee2b6a38f0871f5ac08e8298483336bac840d1086c8732ad30eaf677732cff8de1dc2f1f8c"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x1, 0x9f, "d4bc642f8be686c79524f5354926d6931dbd527fa70d55731b7bb2348413910afff1a69da5ef0fb6e2b7b0b525d0a52d9590acc6015d2cf9ff99624ed26fd815d126bf8a25971db062ddd21c773c5c3b65121441e216cedbb53ecd2ea06623315b3f075c6f978fae2e2f87589b515490541ea2fc3ee15744d663359257705ed676a37dd103873e1c67226a5b36aa707129f8cea8de44454fc40b2f42e78b24"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x5}}) 8m37.179334246s ago: executing program 6 (id=3077): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 8m36.270164746s ago: executing program 34 (id=3077): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1m26.788080467s ago: executing program 3 (id=4390): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x6fbf, 0x0, {0x6000, 0x5}, {0x51, 0x2}, @period={0x5a, 0x7, 0x8001, 0xee5, 0xff, {0x8000, 0xff, 0x6, 0x8}, 0x2, &(0x7f0000000140)=[0xb, 0x2f7]}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x6, 0x0, 0x0, 0xf, 0x400009, 0x8, 0xa}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x1) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0x5) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x66000080) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f00000001c0)) userfaultfd(0x801) 1m23.553231098s ago: executing program 3 (id=4401): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_int(r2, 0x0, 0x32, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x480, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x3, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) 1m23.102094847s ago: executing program 3 (id=4403): socket$pppl2tp(0x18, 0x1, 0x1) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="89209616627797ec82"], 0xffc9) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2d, 0x0, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='autogroup\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfdffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x19, 0x1, 0x1, "000000000000000405f13ab2871f6f9ecbc053ffff39361e97000000001b0200", 0x59565955}) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0) 1m20.942127473s ago: executing program 3 (id=4407): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022070d000019a797"], 0x0}, 0x0) 1m18.65772732s ago: executing program 3 (id=4414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) write(r6, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab9685", 0xc, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006880)={&(0x7f0000000140)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x1ff, 0x100, 0xc, 0x2, 0xfea, 0x101, 0x0, 0x0, 0x80, 0xffffff20}}, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0x1000}}, &(0x7f0000000200)={0x18, 0x0, 0x7fffffffffffffff, {0xfffffffffffff001}}, 0x0, &(0x7f00000002c0)={0x18, 0x0, 0x7ff, {0x5}}, &(0x7f00000003c0)={0x28, 0x0, 0x2, {{0x36, 0xeda3}}}, &(0x7f0000000400)={0x60, 0xffffffffffffffda, 0x1, {{0x8000, 0x1, 0x8000, 0xffffffffffffff0f, 0xfffffffffffffffd, 0x9, 0x7, 0x1}}}, &(0x7f00000004c0)={0x18, 0x0, 0x8, {0x6}}, &(0x7f0000000500)={0x1a, 0x0, 0xffffffffffffff9c, {'netdevsim\x00'}}, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x23b, {0x4, 0x7, 0x0, {0x6, 0x2, 0x4, 0x0, 0xf, 0x9, 0x5, 0x6, 0x2, 0x6000, 0x0, 0xee00, 0x0, 0x9, 0x6}}}, &(0x7f0000000680)={0x90, 0x0, 0x5, {0x3, 0x1, 0x5, 0xa, 0x0, 0x6, {0x2, 0xffffffffffffff4a, 0x8, 0xa6, 0x9, 0x7, 0x8, 0xe, 0x8, 0xb000, 0xfff, 0x0, 0x0, 0x2, 0x263}}}, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000006200)={0x468, 0xfffffffffffffff5, 0x0, [{{0x0, 0x3, 0xf, 0x6, 0xfffffffb, 0x6, {0x6, 0xe, 0x8c9, 0x0, 0xffff, 0x8000, 0x91, 0x6, 0x80000001, 0xa000, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x8}}, {0x1, 0x9, 0x2, 0x6, ',!'}}, {{0x5, 0x0, 0x53, 0x1, 0x7, 0x1, {0x4, 0x9, 0x0, 0x2, 0xc, 0x6, 0x3ff, 0x80, 0x8, 0x2000, 0x5, 0x0, 0x0, 0x0, 0x2}}, {0x0, 0x59, 0x3, 0x4, '#(+'}}, {{0x0, 0x3, 0x8, 0x8, 0x2, 0x3, {0x6, 0xfffffffffffffffa, 0x5, 0x7, 0x58, 0x8, 0x10001, 0x4, 0x2, 0x2000, 0x3, 0x0, 0x0, 0x3ff, 0x1000}}, {0x4, 0xb8a8, 0x8, 0x4, 'devlink\x00'}}, {{0x6, 0x3, 0xd, 0x0, 0x8, 0x9, {0x5, 0x9, 0x40, 0x5, 0x9, 0x2, 0x7f, 0x6, 0x9, 0xa000, 0x5, 0xee00, 0xffffffffffffffff, 0x6, 0x4}}, {0x6, 0x1, 0x8, 0x4, 'devlink\x00'}}, {{0x1, 0x3, 0xc31e, 0x0, 0x7, 0x7fffffff, {0x5, 0xfa99, 0x2, 0x52b, 0x5a4, 0xffffffffffffffff, 0xf, 0x5, 0xbb0, 0xc000, 0x800, 0xee01, 0x0, 0x6, 0x3}}, {0x2, 0x6, 0x8, 0x4, 'batadv0\x00'}}, {{0x0, 0x0, 0x9, 0x7c, 0x6, 0x1, {0x5, 0x10, 0x0, 0x1, 0x0, 0xffffffffffff8a15, 0x2, 0x5, 0x800, 0xc000, 0x7, 0x0, 0xee00, 0xfffffff9, 0x19}}, {0x5, 0x8, 0x1, 0xbea, '$'}}, {{0x0, 0x3, 0x1, 0x9, 0xe5, 0x7fff, {0x3, 0x0, 0x8, 0xd1b, 0x0, 0x4, 0x6, 0x25, 0x5, 0x6000, 0x80000001, 0xee01, 0x0, 0xa9, 0x1}}, {0x6, 0x5, 0x0, 0x101}}]}, &(0x7f0000006680)={0xa0, 0x0, 0x9, {{0x2, 0x0, 0x10, 0x400, 0x5, 0xaab, {0x1, 0x9, 0x3, 0x1, 0x7, 0x9, 0x7, 0x7, 0x5, 0xa000, 0xa0000, 0x0, 0x0, 0x2, 0x8}}, {0x0, 0xc29739591a85279a}}}, &(0x7f0000002100)={0x20, 0x0, 0x7, {0xd47, 0x4, 0x2, 0x3be0}}, &(0x7f0000006740)={0x130, 0x0, 0x7, {0x401, 0x7, 0x0, '\x00', {0x200, 0x0, 0x6, 0x8, 0x0, 0x0, 0x8000, '\x00', 0x3845, 0xffffffff, 0x4, 0x778, {0x9, 0x7ff}, {0x0, 0x2}, {0x2, 0xfffff800}, {0x81, 0x1}, 0x7fff, 0x3, 0x10001, 0x6}}}}) syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYBLOB="12010000c7ce360863078020abd0010203010902120001000000000904000000"], 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x40080) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r7, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1m15.225939544s ago: executing program 3 (id=4418): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb701) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x9c, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(0xffffffffffffffff, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0x4}, 0x80, 0x0}, 0x20000814) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 1m0.012873699s ago: executing program 35 (id=4418): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb701) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x9c, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(0xffffffffffffffff, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x1, 0x4}, 0x80, 0x0}, 0x20000814) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 9.393915653s ago: executing program 7 (id=4629): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x4, &(0x7f00000001c0)={0x5, 0x1, 0x3}) r1 = inotify_init1(0x0) fcntl$addseals(r1, 0x409, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x107240, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) io_setup(0x2, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x400, 0x7fff, 0x9, 0x4, 0x8002, 0x0, 0x70d0db32, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040010) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x24000000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000040)={'macsec0\x00', 0x4}) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x1a, 0x98, 0x90, 0x8, 0x547, 0x7303, 0x3027, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x0, 0x9e, 0x41, 0xb3}}]}}]}}, 0x0) 7.394845074s ago: executing program 5 (id=4638): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x0}, 0x0) 6.780954106s ago: executing program 2 (id=4642): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x26) fcntl$notify(r2, 0x402, 0x0) (async) fcntl$notify(r2, 0x402, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x10000}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mremap(&(0x7f0000486000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000061e000/0x2000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x300000}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x300000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000140)={0x3, 0xffff, 0x46, 0x0, 0xe}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000140)={0x3, 0xffff, 0x46, 0x0, 0xe}) sendmmsg$unix(r7, &(0x7f0000001b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f00000001c0)="ff82962930e67a50844420b64c208e55ecabc0393ac0af82d0c2461c788ef5d0668d62786fad0dd43683e95bfa8936a5d39cee62235ae275af5c71dfb323e2a9eb538ebe3539d9c72c1cd5ec8fe335c83ac807c3794f9e9e5a408e1906d71639556b2ab986c054ae823e8a586e615cea49d66620fa1c2e01a004341d45e7210e399bcb6bca6bf559df62b2af888a4fb46c5c009082e22ac0bc3f13ebc400db", 0x9f}, {&(0x7f0000001640)="c90c5ac0ed5a25f41c3de747ea4eea4c93b3cb4f42294c0f6484e75fd16101c323c6b3c221f67409e8c69c2464b7f7b1d6d29e6de7055ad68d76a04e5ef6399a1813fa9d7822de681037a3599f81387d910f6a41b840f235a9973dc9e77bc3d813271b675ea8220f548dc0c596457dc099f98d96afa7c11a7a3857c34914cf66cc6ebbcde17e29478194c1923358e96f3ccbef5e01856dfd95552139acadab45ff9452d47e0a9729f17ebbb992aba84e16267f673d616123768d47e78e97766e4f44c115ac95d8974bf6b3bab33a39ae47e7c826bbd31af92b6d13cdf0", 0xdd}, {&(0x7f0000000540)="ec15007b594f5611c73258c8194762b3d33e6aea5ca238a629ab378acf41419a2ee3092fd9bd774ab7b0d1a9b6efa85cc3ec5e9d50bcfc79a8f770c61387c83b38221e5ab05f6b209c24626bbf8626af16f0ee3633480e2814f3ec117648cac504fc64782fc33dc8d9cd7fb904b0fb58390ce73bf9377235d647c8a705b29dfeeef1f9e2d96115c7e6b21d7e12db0788f0cb5d19", 0x94}, {&(0x7f0000000340)="2ae25958ea15c86a27f61607c3722a004eee85ca715f80004bd792564e2ce53f419a1ec1", 0x24}, {&(0x7f0000001740)="00bcc61dbfdba4514fe37c5b387d1c9f3247f7233afa12a9e5e574ded97dad26a63f78460dfab8c1a582d9c2add53c7a4236a7890471977c581fb3c384a88b1a5fb6b84cc89b26b794d5faf157045426f64a73c3367ff61070e3f008abc8f07b553a72059af172097744b188bf0e92b98e6c530a0a585da832a8ce34fe0564be87e7e30b5ad21649acb24cd3fb87d11759cdb15c5e2f5b333e4d5b51639f3ee20c8479f921f21ae05ce39012abc1d79d7d3cc6e2a4cb5687df8f39eb0250b39ece5b70a58dc56594cdd5961f2b8e72bd8eb3f6", 0xd3}, {&(0x7f0000001840)="0b2670794bce12eee0139e2a4fa38d7e0f20b40cf07e7ebca10c7a41fa9584efc9cc018dc48fd32867981a185fd12fcf710b4e4f783d7861c8cb5192", 0x3c}, {&(0x7f0000001880)="781b9686f87aba251ff8e077456e138a98a234b939d2c5e5e7d4d552c73905ddbca279db20ba3186f7ea0ce10fa46356e6efc1c4d9b37456b701758a04671615965b67efec59765fa3f71f08351449e5eeed87319c46ac34e8e61b53b117f1", 0x5f}, {&(0x7f0000001900)}], 0x9, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x4000}}], 0x1, 0x40000) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') pread64(r10, &(0x7f0000000440)=""/249, 0xf9, 0x3c) 6.652908181s ago: executing program 2 (id=4643): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './control\x00'}, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x253, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r9, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r9, 0xd3) write$binfmt_elf32(r5, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r5) 6.165895646s ago: executing program 7 (id=4644): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a", 0xcc}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/203, 0xcb}], 0x1}, 0xc3}], 0x1, 0x2003, 0x0) (async) setns(r0, 0x0) 6.058100102s ago: executing program 7 (id=4645): socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/mnt\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000000001000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="0000a37bc4d24bfedeffbd"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0xffff0018) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5.670838056s ago: executing program 5 (id=4647): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)={&(0x7f0000000280)="43b751e3a74e6d05e25e85eb3d30e88ce1441e47d6388e0750dcf2f01482b086b7ced360f3dadc7746a6bcd4a2f4e21e20377d143688b9926e545d9eaa6707190c8be84cdabff649c7a7f1e31cb7efec09057e89434ad3fd141efdfd0a74bc6f1a0928d14fd6a86658b54532", 0x6c}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6b80000}, &(0x7f0000000140)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000000040)=ANY=[], 0xffffff6a) r6 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x3e76, &(0x7f0000000000)) dup2(r6, r7) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r8, 0xfffffffffffffc01, 0x0) tee(r4, r8, 0x60000000000, 0x0) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback, 0xffffffffffffffff, 0x9, 0x4, 0x0, @void, @value=r9}, 0x20) 5.513662403s ago: executing program 2 (id=4648): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000340)=""/176, &(0x7f00000002c0)=0xb0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000400)=0x9, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200040000003, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058560f, &(0x7f0000000500)=@userptr={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "7c2eaabb"}, 0x0, 0x2, {0x0}}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000006800010003001000fdffff7f00000000000000000c0002000100000015abd3040b0002"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) read$eventfd(r0, &(0x7f0000000280), 0x8) unshare(0x10020000) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 4.633295044s ago: executing program 5 (id=4650): r0 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1", 0x1001}], 0x1) close(r1) syz_usb_connect(0x2, 0x48, &(0x7f0000000000)=ANY=[], &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0}) 3.617911286s ago: executing program 2 (id=4652): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000900009045902019b1e2a00090582020002000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) (async) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) (async) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) (async) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x0, 0x11, 0xfa, {0xfa, 0x21, "1e39bdf8f069ed3a6641b4b8aa510d7640d91b043872c7c6e8043490492e89cbea63670290d39dc2298c723e5bef914ef2eed0fa9e827b8b01e2e3ce1dad75a523c23dd8957a176820fa679b35e27b54f2544755088dfaafb0ecc70f221838c1b711611b7d698dd10afa4b0e6e9ee740acd729d4a41f5d79b9be75e65cef81f5c3a8be527e07fbc91af400f1fb3784ac3b73f8dfa9c52114b993eb8237c7622c7f588013bda2891e8c77365ae470b4217625ecbc3115fcdf3285317d336935eb7b9a73ef313d3e742ed8fa803afbaecd60fd59f007856c2f95df356e79d643786684d748ad3483a1643723f3fc6ba29308f55372aa9c02a1"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x336f8d94ac730ce6}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000280)={0x40, 0x15, 0x98, "b28ae147db0fd8ae0fb3867e33646ce0e10da072cb8dd3067f5227fbef46330047c3b4a32ddafcb8d56421c8ded74990ed702c844b34cff825d17a1b35d57a825686b01158c9895506a43978bf8d728d93b2e4e7cf431a61a45ed2e2e672a646feec0c01b716ef40bb016ee8efd748986e4d322116df57b084f4ac23de975064c55597626d493747a4dec38a721a6c6a9a98e7cd141c67c9"}, &(0x7f0000000b00)={0xa1, 0x1, 0x400, "69ef3af867717c1d7e2f6b7e06480b48d14c8567c20af534d600bab64c77b7acf0abc97b1cc2b35247d5b34e1b937cca9b884a2b0503e3b3238456595f7a03f8270ac2d37710ce5f844b137f48b67b308e99a47ca6e73fcba1833fb37e8698e62c1d505d91e31933de533aa4c970a505c322a9bac49d4cc12165592770426817606be4bd99a61ed42acef15528f24cb177f05b3b84c1665199639fac821364ae76024d87529b2ab473e6bd1cfb0bb7e22ee0d0e686da8609327602464df60e27b326ce26453e04f15e101c3566ddd09aa9cf76dad7471a95cca27956434cd40bab1964bbd7c93dc36f09cd28aa237727afdf7a3332e3020d08900b74203a59dbf29314d405cf7b63220671af1f974cca4b19db02078a89b5df3641cc9a83b2991adc46d17631a8dc7483d7e38af0971425a9693e6279b134470b7d72a09a9a7794b67d4a1c013b67605ff84f39083f240ce09dad55aed8318b04a394930559044f1a11dad68a58f3ec18a82c70af9c94c55ea281dac54c4e1e5aeead93fbade47af2fba33aff98fb8f8163b21878c7d547f64b1a2c137c614c9053c89dd627cf53dc287f2f802c09e5a258f31f2cb0665048460a1bc374ee1b45af51e0edd2152bdced8370672262190a2412fad475418c1f06b033e5b1cf7f32169b888ed8bfe0dccfbe9e8beb486fc85b4eba6414b2e3f4a9512b034d88f83e02f3f9243fadfd2a62d0b9e3f55ad691e6121959b319686420a887e9b74aa63c68150df179323cf15fd9ef138b40ccce76fdce086ca1706275b51fa852bfbccc345cd8371476ac750d2f93f9dc1e7d7f52225064240d92002017e304cf5083c828860e08a4a81347d9051ed2cc5661f782a9dc9e4e2b50d481d3e5ccbe2ff3a6cef4a3275c8c3f8fd9bf438d179423d2a80a410fc5496dc41d00a71db2bc80e6dbc22d1b70efdf09c9c22afb7301ac5f109b7f1907b569f858ce676e4ccd8c2456d779b713dc84a1a5d8ed35f6524255e979c285f29538d597b220bd2943c87232955463ebd5ad70dda05652badb9e71883f8ed43f50b03b18537f04dd84ab0e75dd621f138bb5317bfcec55b8c16fb55bfefeb1076d8dcd10e8ab40ed27d1d8d833082881663f368b65e78bdb155bc272cff3de8c2201b3cc362109a858e34625b949a21417bad51d4c7f5c6cc2c889f4de80505fc35526a940129606e4af89f4725caa3f16a0a7d526e75e68f156f477481d5bd2efc2ef4ae08fa887ab8ca2c41c2d8e38680897a6f8058ea933b2cb8a59e53b3c8235a9cd3b39f5c25f9fa14448a4db875affea0f3a02e385121b783514ca6c407dd07cb71e71032cff0550f4a3a1d91d56d07ad32e59bf6138e63550c687154cd83a2722809d3a8415ac30037c746f6a6c873379d1b1b9b9b8c52b254b0e1c3833ccf88b0ab3d3b4066cf13a2515b5a493"}, &(0x7f0000000080)={0x21, 0x0, 0x2, "d4ab"}}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="001410"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 3.480576121s ago: executing program 4 (id=4653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x30}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xc041) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x81, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x10c, &(0x7f00000001c0)=0x1, 0x0, 0x4) fsetxattr$security_evm(r2, &(0x7f0000000200), &(0x7f0000000240)=@ng={0x4, 0x9, "6d8f10c14beec3f2089ab39ae12a91b0"}, 0x12, 0x2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x589500, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x20, 0x8000, 0x7, 0x2, {{0x20, 0x4, 0x2, 0x2, 0x80, 0x64, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0x23, 0xca, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @multicast2]}, @cipso={0x86, 0x30, 0x1, [{0x1, 0xb, "20486111b552e9793a"}, {0x0, 0xa, "8c95b44dcef40d0e"}, {0x5, 0xc, "8803eb14d0eb5bf5f59a"}, {0x2, 0x9, "0f24654672643a"}]}, @noop, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x5, 0x12, "438269d07f5f61926fca211f8105f394"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x2f, 0xb, 0x2, 0x5, 0x19, @empty, @private2, 0x80, 0x20, 0x6, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x29, 0xf9, 0x0, 0xb6, 0x4, @loopback, @dev={0xfe, 0x80, '\x00', 0x42}, 0x8, 0x80, 0x5, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x700, 0x700, 0x4, 0x1ff, {{0x4c, 0x4, 0x1, 0x18, 0x130, 0x65, 0x0, 0x77, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x54, 0xcf, 0x1, 0x0, [{@empty, 0x5}, {@private=0xa010100, 0x8}, {@empty, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010101, 0x4}, {@remote}, {@multicast2, 0x3}, {@broadcast, 0x2}, {@multicast2, 0x8}, {@rand_addr=0x64010101, 0xffffffff}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x33, [@remote, @empty, @empty, @broadcast, @loopback, @remote, @loopback]}, @noop, @timestamp_prespec={0x44, 0x44, 0x6d, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x10000}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x5}, {@empty, 0xb70}, {@multicast1, 0x7}, {@multicast2, 0x5}, {@loopback, 0xff0}]}, @timestamp_prespec={0x44, 0x44, 0xe3, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x2}, {@multicast1, 0x8}, {@multicast1}, {@local, 0x8}, {@local, 0x7ff}, {@local, 0x4}, {@local, 0x3}, {@private=0xa010102, 0x6}]}, @end, @timestamp={0x44, 0xc, 0x2b, 0x0, 0xd, [0xd0, 0x1ff]}, @ssrr={0x89, 0xf, 0x3f, [@empty, @dev={0xac, 0x14, 0x14, 0x1c}, @empty]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, r5, 0xc08, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000900)={0x0, @l2tp={0x2, 0x0, @local, 0x4}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, @l2tp={0x2, 0x0, @broadcast, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)='dvmrp1\x00', 0x7, 0xb7f1, 0x6}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x12}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000b00)={0x1c, 0x0, 0x1, 0x17, 0xa, 0x7, 0x6, 0xc6, 0x1}) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000b40)) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000fc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000bc0)={0x3bc, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x5, 0x7}, @value=@ver_80211n={0x0, 0x7fb9, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, @vht_group_id={0x15, 0x1, {0x8001, "d3e134a3e479004bfa2f480b284ec8fb"}}}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x2}, @broadcast}}, @NL80211_ATTR_FRAME={0x336, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x7}, @device_b, @device_a, @random="8ce8d1c3132b", {0xb}, @device_b}, @random="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"}}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040841) ioctl$DRM_IOCTL_GET_CLIENT(r10, 0xc0286405, &(0x7f0000001000)={0xa6, 0x1, {0xffffffffffffffff}, {0xee00}, 0x9, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x4, r12, 0x0, &(0x7f0000001040)) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) lsetxattr$security_evm(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), &(0x7f0000001240)=@ng={0x4, 0xc, "429ad1618187fda2d2"}, 0xb, 0x1) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f00000012c0), r10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, r13, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xa}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x489c4}, 0xc001) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r10, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000014c0)) 3.369339853s ago: executing program 4 (id=4654): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) r6 = dup(r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044080}, 0x4) 3.346590649s ago: executing program 4 (id=4655): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000540)="0b09207965b0b9f1", 0xffeb, 0x0, &(0x7f0000000340), 0x10) recvmmsg(r1, &(0x7f0000000180)=[{{&(0x7f0000000000)=@ax25={{0x3, @netrom}, [@default, @netrom, @null, @default, @rose, @bcast, @bcast, @netrom]}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/35, 0x23}, {0x0}], 0x2}, 0x200}], 0x1, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2b, 0x801, 0x0) splice(r4, 0x0, r3, 0x0, 0x39000, 0x9) (async) splice(r4, 0x0, r3, 0x0, 0x39000, 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000007000000000800000a0000008500000064000000c42ae00000008000"], &(0x7f00000003c0)='syzkaller\x00', 0x9a, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0x9, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x1, 0x1], &(0x7f0000000880)=[{0x2, 0x5, 0x20009, 0xa}, {0x1, 0x1, 0xa, 0x4}, {0x0, 0x2, 0xa, 0xb}, {0x5, 0x2, 0x0, 0x5}, {0x2, 0x2, 0xe, 0xa}, {0x2, 0x1, 0xc}], 0x10, 0xfffffffa}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="81c00600d90200302e6100000e000000000000000f0000006da140000100000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000002000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x74, &(0x7f0000000240)=""/116, 0x41100, 0x68, '\x00', 0x0, @fallback=0x1d, r5, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x6, 0x7f, 0x6}, 0x10, 0xffffffffffffffff, r6, 0x7, &(0x7f0000000600)=[r7], &(0x7f0000000640)=[{0x4, 0x5, 0xf, 0xc}, {0x3, 0x5, 0x7, 0x6}, {0x2, 0x4, 0x5, 0xc}, {0x5, 0x3, 0xe, 0x4}, {0x4, 0x2, 0x8, 0x9}, {0x3, 0x5, 0xf, 0xa}, {0x4, 0x4, 0x9, 0x7}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="81c00600d90200302e6100000e000000000000000f0000006da140000100000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000002000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x74, &(0x7f0000000240)=""/116, 0x41100, 0x68, '\x00', 0x0, @fallback=0x1d, r5, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x6, 0x7f, 0x6}, 0x10, 0xffffffffffffffff, r6, 0x7, &(0x7f0000000600)=[r7], &(0x7f0000000640)=[{0x4, 0x5, 0xf, 0xc}, {0x3, 0x5, 0x7, 0x6}, {0x2, 0x4, 0x5, 0xc}, {0x5, 0x3, 0xe, 0x4}, {0x4, 0x2, 0x8, 0x9}, {0x3, 0x5, 0xf, 0xa}, {0x4, 0x4, 0x9, 0x7}], 0x10, 0x3}, 0x94) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000a00bbbbbbbbbbbb0180c2000000000000000000bbbbbbbbbbbbaaaaaaaaaabbaaaa9bbb00000000001b2747c8c21ccfbbbbbbbbbbbbbbbbb3"]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'vlan0\x00', 0x4}, 0x18) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'vlan0\x00', 0x4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r11, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r11, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000400)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x10, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2841e8dbe108598948224ad54afac11d87539700202d0000b420a1a93c5240f45f919e01177d2d458dd4992861ac040000000000000000000006768ddcba00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x80007, 0x2}) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r12, 0x0, r12) (async) fcntl$dupfd(r12, 0x0, r12) 3.179440838s ago: executing program 4 (id=4656): r0 = syz_open_dev$video4linux(0x0, 0xffffffffffffe0fa, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x1}) 3.070458048s ago: executing program 4 (id=4657): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000040000000700b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) 2.979406718s ago: executing program 7 (id=4658): socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000040), 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100005ff00000000000020000000004a", @ANYRES32=0x0, @ANYBLOB="000000000c010000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a00010079cd7b476fb846eb87500000"], 0x48}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x20009804) recvmmsg(r3, &(0x7f0000003100)=[{{&(0x7f0000000240)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000140)=""/5, 0x5}, {&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000740)=""/102, 0x66}], 0x6, &(0x7f0000000840)=""/32, 0x20}, 0xbc}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/1, 0x1}], 0x1, &(0x7f0000000900)=""/43, 0x2b}, 0xffffd163}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000940)=""/173, 0xad}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000003200)=""/183, 0xb7}, {&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/78, 0x4e}], 0x6}, 0x6}, {{&(0x7f0000001cc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001d40)=""/5, 0x5}, {&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/21, 0x15}, {&(0x7f0000001e00)=""/193, 0xc1}, {&(0x7f0000001f00)=""/31, 0x1f}, {&(0x7f0000001f40)=""/46, 0x2e}, {&(0x7f0000001f80)=""/33, 0x21}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x8, &(0x7f0000003040)=""/185, 0xb9}}], 0x4, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x802, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$sndctrl(&(0x7f0000000000), 0xf2, 0x80041) socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00'}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0xc, 0xffffffff, 0x1, 0x72ea4d7f, 0x8, 0x8, 0xc2d}, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') 2.782355779s ago: executing program 7 (id=4659): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {0x7}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x91}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_INDEV={0x14, 0x8, 'ip_vti0\x00'}, @TCA_U32_LINK={0x8, 0x3, 0x800}, @TCA_U32_LINK={0x8, 0x3, 0xfffffff9}, @TCA_U32_HASH={0x8, 0x2, 0x925}, @TCA_U32_CLASSID={0x8, 0x1, {0x13, 0xa}}]}}]}, 0x7c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000b40)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) 2.621914619s ago: executing program 7 (id=4660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000bd1000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000bd1000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000008704"]) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000040)=[{r4, 0x13a}, {r4, 0x26}], 0x2, 0x0, 0x0, 0x0) close(0x3) (async) close(0x3) inotify_init1(0x0) (async) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0x2000775) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000100)='./file1\x00') syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x49, 0xcb, 0xd3, 0x8, 0x1d50, 0x60c6, 0x33ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0xfa, 0x80, 0xbf, [{{0x9, 0x4, 0x12, 0xc0, 0x1, 0x17, 0x6f, 0x40, 0x0, [], [{{0x9, 0x5, 0x70dc196eb367833a, 0x0, 0x0, 0x7f, 0x4, 0x2}}]}}]}}]}}, 0x0) 2.480168856s ago: executing program 2 (id=4661): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000340)=""/176, &(0x7f00000002c0)=0xb0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000400)=0x9, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200040000003, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058560f, &(0x7f0000000500)=@userptr={0x0, 0xb, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "7c2eaabb"}, 0x0, 0x2, {0x0}}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000006800010003001000fdffff7f00000000000000000c0002000100000015abd3040b0002"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) read$eventfd(r0, &(0x7f0000000280), 0x8) unshare(0x10020000) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 1.501222941s ago: executing program 5 (id=4662): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4000011}, 0xc000) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) getsockname$packet(r3, &(0x7f0000000240), &(0x7f0000000280)=0x14) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4000011}, 0xc000) (async) socket$kcm(0x2b, 0x1, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) (async) socket(0x40000000015, 0x5, 0x0) (async) getsockopt(r4, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) (async) getsockname$packet(r3, &(0x7f0000000240), &(0x7f0000000280)=0x14) (async) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) (async) 1.341939632s ago: executing program 5 (id=4663): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x2001) (async) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r2, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000004c0)={0x40, 0x16, 0x5, "310c17e53c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) write$apparmor_current(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="6368616e676568617420eb"], 0x2b) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)) (async) syz_io_uring_setup(0x3466, &(0x7f0000000100)={0x0, 0x8a2a, 0x20, 0x3, 0x7e}, &(0x7f0000000000), &(0x7f0000000080)) (async, rerun: 64) r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x14e1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfa, 0x2, 0x5}}}}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x40, 0x23, 0x45, {0x45, 0x4, "0c6867d20d1ca9c16186cedffdc6376be35d9613adc65d855a99b0459fbc451bdbfa48eaef770fe46145768213adbe0adaace05b8389e73aba2d3ec2f86a722cedff07"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 348.447415ms ago: executing program 2 (id=4664): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) gettid() (async) r1 = gettid() fcntl$setown(r0, 0x8, r1) (async) fcntl$setown(r0, 0x8, r1) ftruncate(0xffffffffffffffff, 0x7000000) (async) ftruncate(0xffffffffffffffff, 0x7000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4040000) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4040000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80001, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x4, 0x401, 0x800000, 0x92, 0x55, 0x8, 0x7, 0xb}, 0x0) unshare(0x2c020400) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r4}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r7, r10) (async) r11 = dup2(r7, r10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r10, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRES8=r11, @ANYBLOB="020001c4e524c1c113b9999636fd6c46fb64"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000040)={r9, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000040)={r9, 0x2}, 0x8) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) 215.469534ms ago: executing program 5 (id=4665): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r4, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r3, &(0x7f0000000000)=""/49, 0x31) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) renameat2(r5, &(0x7f0000000440)='./file0\x00', r3, &(0x7f0000000200)='./file7\x00', 0x0) getdents64(r3, &(0x7f0000000540)=""/217, 0xd9) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8427000024010000140003006e657464657673696d30000000000000300016802c000180280001"], 0x78}, 0x1, 0x0, 0x0, 0x20000084}, 0x4040004) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 0s ago: executing program 4 (id=4666): r0 = syz_open_dev$video4linux(0x0, 0xffffffffffffe0fa, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x1}) kernel console output (not intermixed with test programs): scriptor?? [ 1448.140170][T22209] gs_usb 3-1:0.0: Required endpoints not found [ 1448.413897][T23192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.423438][T23192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.602488][T22209] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1448.787208][T22209] usb 6-1: config 0 has no interfaces? [ 1448.796764][T22209] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1448.808870][T22209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.844774][T22209] usb 6-1: Product: syz [ 1448.854830][T22209] usb 6-1: Manufacturer: syz [ 1448.867302][T22209] usb 6-1: SerialNumber: syz [ 1448.910155][T22209] usb 6-1: config 0 descriptor?? [ 1449.092777][T22213] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1449.146904][T23190] syzkaller1: entered promiscuous mode [ 1449.159865][T23190] syzkaller1: entered allmulticast mode [ 1449.195632][T22222] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1449.292996][T22213] usb 5-1: config 0 has no interfaces? [ 1449.302847][T23190] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.324228][T22213] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1449.335192][T22213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.343364][T22213] usb 5-1: Product: syz [ 1449.347668][T22213] usb 5-1: Manufacturer: syz [ 1449.353013][T22213] usb 5-1: SerialNumber: syz [ 1449.362520][T22213] usb 5-1: config 0 descriptor?? [ 1449.372267][T22222] usb 4-1: Using ep0 maxpacket: 16 [ 1449.383743][T22222] usb 4-1: no configurations [ 1449.391180][T22222] usb 4-1: can't read configurations, error -22 [ 1449.515344][T22213] usb 6-1: USB disconnect, device number 59 [ 1449.552903][T22222] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1449.722172][T22222] usb 4-1: Using ep0 maxpacket: 16 [ 1449.729272][T22222] usb 4-1: no configurations [ 1449.734280][T22222] usb 4-1: can't read configurations, error -22 [ 1449.741498][T22222] usb usb4-port1: attempt power cycle [ 1450.101646][T22222] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1450.152773][T22222] usb 4-1: Using ep0 maxpacket: 16 [ 1450.160732][T22222] usb 4-1: no configurations [ 1450.165943][T22222] usb 4-1: can't read configurations, error -22 [ 1450.318614][T22222] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1450.353101][T22222] usb 4-1: Using ep0 maxpacket: 16 [ 1450.360240][T22222] usb 4-1: no configurations [ 1450.367380][T22222] usb 4-1: can't read configurations, error -22 [ 1450.374835][T22222] usb usb4-port1: unable to enumerate USB device [ 1450.631778][T22209] usb 3-1: USB disconnect, device number 124 [ 1451.604853][T23228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.643050][T23228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.840584][T17815] usb 5-1: USB disconnect, device number 16 [ 1452.517601][T23246] fuse: Unknown parameter '' [ 1452.783231][T23250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1453.243960][T23257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4264'. [ 1453.344075][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4264'. [ 1453.420849][T23257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4264'. [ 1453.496691][T23257] netlink: 'syz.3.4264': attribute type 18 has an invalid length. [ 1453.938652][T23278] FAULT_INJECTION: forcing a failure. [ 1453.938652][T23278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.985151][T23278] CPU: 1 UID: 0 PID: 23278 Comm: syz.7.4269 Not tainted syzkaller #0 PREEMPT(full) [ 1453.985176][T23278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1453.985186][T23278] Call Trace: [ 1453.985193][T23278] [ 1453.985201][T23278] dump_stack_lvl+0x189/0x250 [ 1453.985225][T23278] ? __pfx____ratelimit+0x10/0x10 [ 1453.985242][T23278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1453.985261][T23278] ? __pfx__printk+0x10/0x10 [ 1453.985283][T23278] ? __might_fault+0xb0/0x130 [ 1453.985317][T23278] should_fail_ex+0x414/0x560 [ 1453.985344][T23278] _copy_from_iter+0x1de/0x1790 [ 1453.985370][T23278] ? rcu_is_watching+0x15/0xb0 [ 1453.985388][T23278] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1453.985411][T23278] ? __pfx__copy_from_iter+0x10/0x10 [ 1453.985431][T23278] ? __build_skb_around+0x257/0x3e0 [ 1453.985451][T23278] ? netlink_sendmsg+0x642/0xb30 [ 1453.985467][T23278] ? skb_put+0x11b/0x210 [ 1453.985487][T23278] netlink_sendmsg+0x6b2/0xb30 [ 1453.985511][T23278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1453.985530][T23278] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1453.985548][T23278] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1453.985565][T23278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1453.985584][T23278] __sock_sendmsg+0x21c/0x270 [ 1453.985610][T23278] ____sys_sendmsg+0x505/0x830 [ 1453.985652][T23278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1453.985679][T23278] ? import_iovec+0x74/0xa0 [ 1453.985702][T23278] ___sys_sendmsg+0x21f/0x2a0 [ 1453.985724][T23278] ? __pfx____sys_sendmsg+0x10/0x10 [ 1453.985773][T23278] ? __fget_files+0x2a/0x420 [ 1453.985786][T23278] ? __fget_files+0x3a0/0x420 [ 1453.985808][T23278] __x64_sys_sendmsg+0x19b/0x260 [ 1453.985830][T23278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1453.985857][T23278] ? __pfx_ksys_write+0x10/0x10 [ 1453.985877][T23278] ? rcu_is_watching+0x15/0xb0 [ 1453.985897][T23278] ? do_syscall_64+0xbe/0x3b0 [ 1453.985917][T23278] do_syscall_64+0xfa/0x3b0 [ 1453.985933][T23278] ? lockdep_hardirqs_on+0x9c/0x150 [ 1453.985948][T23278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.985964][T23278] ? clear_bhb_loop+0x60/0xb0 [ 1453.985983][T23278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.985998][T23278] RIP: 0033:0x7f0917d8eba9 [ 1453.986012][T23278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1453.986026][T23278] RSP: 002b:00007f0915fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1453.986044][T23278] RAX: ffffffffffffffda RBX: 00007f0917fd6090 RCX: 00007f0917d8eba9 [ 1453.986056][T23278] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1453.986066][T23278] RBP: 00007f0915fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.986076][T23278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.986085][T23278] R13: 00007f0917fd6128 R14: 00007f0917fd6090 R15: 00007f09180ffa28 [ 1453.986109][T23278] [ 1454.532419][T22237] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1454.620803][T23287] input: syz0 as /devices/virtual/input/input78 [ 1454.649018][T23287] input: failed to attach handler leds to device input78, error: -6 [ 1454.692300][T22237] usb 4-1: Using ep0 maxpacket: 16 [ 1454.723031][T22237] usb 4-1: too many configurations: 98, using maximum allowed: 8 [ 1454.743832][T22237] usb 4-1: config 6 has no interfaces? [ 1454.754411][T22237] usb 4-1: config 6 has no interfaces? [ 1454.761511][T22237] usb 4-1: config 6 has no interfaces? [ 1454.779467][T22237] usb 4-1: config 6 has no interfaces? [ 1454.787988][T22237] usb 4-1: config 6 has no interfaces? [ 1454.795834][T23293] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:0 [ 1454.935811][T22237] usb 4-1: config 6 has no interfaces? [ 1454.997552][T22237] usb 4-1: config 6 has no interfaces? [ 1455.007835][T22237] usb 4-1: config 6 has no interfaces? [ 1455.031833][T23275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4268'. [ 1455.151506][T23275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4268'. [ 1455.166670][T23275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4268'. [ 1455.295206][T23275] bridge0: entered promiscuous mode [ 1455.317564][T23275] bridge0: left promiscuous mode [ 1455.345203][T23277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1455.351835][T23277] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1455.358591][T23277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1455.366085][T23277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1455.378107][T23277] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1455.408846][T23277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1455.432455][T23277] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1455.628692][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1455.628712][ T30] audit: type=1326 audit(1757884003.391:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23301 comm="syz.7.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0917d8eba9 code=0x7ffc0000 [ 1455.713051][ T30] audit: type=1326 audit(1757884003.391:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23301 comm="syz.7.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0917d8eba9 code=0x7ffc0000 [ 1455.737289][ T30] audit: type=1326 audit(1757884003.431:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23301 comm="syz.7.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0917d8eba9 code=0x7ffc0000 [ 1455.761030][ T30] audit: type=1326 audit(1757884003.431:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23301 comm="syz.7.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0917d8eba9 code=0x7ffc0000 [ 1455.788346][ T30] audit: type=1326 audit(1757884003.431:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23301 comm="syz.7.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0917d8eba9 code=0x7ffc0000 [ 1455.802222][T22233] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1455.909256][ T30] audit: type=1326 audit(1757884003.431:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23301 comm="syz.7.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0917d8eba9 code=0x7ffc0000 [ 1455.979195][ T30] audit: type=1326 audit(1757884003.431:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23301 comm="syz.7.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f0917d8eba9 code=0x7ffc0000 [ 1456.043431][ T30] audit: type=1326 audit(1757884003.431:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23301 comm="syz.7.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0917d8eba9 code=0x7ffc0000 [ 1456.106787][T22233] usb 5-1: config 0 has no interfaces? [ 1456.207561][T22233] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1456.250226][T22237] usb 4-1: string descriptor 0 read error: -71 [ 1456.250895][T22233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.278242][T22237] usb 4-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 1456.294170][ T30] audit: type=1326 audit(1757884003.431:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23301 comm="syz.7.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0917d8eba9 code=0x7ffc0000 [ 1456.358603][T22233] usb 5-1: Product: syz [ 1456.367705][T22233] usb 5-1: Manufacturer: syz [ 1456.420267][T22237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 1456.552614][T22233] usb 5-1: SerialNumber: syz [ 1456.561647][T22237] usb 4-1: rejected 8 configurations due to insufficient available bus power [ 1456.577117][ T30] audit: type=1326 audit(1757884003.431:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23301 comm="syz.7.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0917d8eba9 code=0x7ffc0000 [ 1456.601838][T22237] usb 4-1: no configuration chosen from 8 choices [ 1456.641298][T22237] usb 4-1: USB disconnect, device number 125 [ 1456.656112][T17815] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1456.681359][T23312] pim6reg: entered allmulticast mode [ 1456.787261][T22233] usb 5-1: config 0 descriptor?? [ 1456.989480][T17815] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1456.998619][T17815] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 1457.009586][T17815] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 1457.027669][T17815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.094165][T17815] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1457.107944][T17815] usb 3-1: config 0 has no interface number 0 [ 1457.118155][T17815] usb 3-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1457.160802][T17815] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1457.170548][T17815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.184848][T17815] usb 3-1: Product: syz [ 1457.189405][T17815] usb 3-1: Manufacturer: syz [ 1457.204997][T17815] usb 3-1: SerialNumber: syz [ 1457.241244][T17815] usb 3-1: config 0 descriptor?? [ 1457.316472][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 1457.382285][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 1457.388835][ T5871] Bluetooth: hci2: command 0x0405 tx timeout [ 1457.395594][ T5871] Bluetooth: hci5: command 0x0c1a tx timeout [ 1457.466625][T23037] Bluetooth: hci0: command 0x0406 tx timeout [ 1457.927976][T23319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1459.402237][T23321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1459.461308][T23322] netlink: 'syz.5.4278': attribute type 3 has an invalid length. [ 1459.471864][T23037] Bluetooth: hci4: command 0x0406 tx timeout [ 1459.542505][T23037] Bluetooth: hci0: command 0x0406 tx timeout [ 1459.587903][T22213] usb 5-1: USB disconnect, device number 17 [ 1459.942925][T22222] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1459.982959][T23326] FAULT_INJECTION: forcing a failure. [ 1459.982959][T23326] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.022442][T23326] CPU: 1 UID: 0 PID: 23326 Comm: syz.3.4280 Not tainted syzkaller #0 PREEMPT(full) [ 1460.022477][T23326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1460.022496][T23326] Call Trace: [ 1460.022505][T23326] [ 1460.022516][T23326] dump_stack_lvl+0x189/0x250 [ 1460.022549][T23326] ? __pfx____ratelimit+0x10/0x10 [ 1460.022572][T23326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1460.022599][T23326] ? __pfx__printk+0x10/0x10 [ 1460.022633][T23326] ? __lock_acquire+0xab9/0xd20 [ 1460.022684][T23326] should_fail_ex+0x414/0x560 [ 1460.022721][T23326] should_failslab+0xa8/0x100 [ 1460.022755][T23326] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1460.022784][T23326] ? skb_clone+0x212/0x3a0 [ 1460.022817][T23326] skb_clone+0x212/0x3a0 [ 1460.022847][T23326] __netlink_deliver_tap+0x404/0x850 [ 1460.022883][T23326] ? netlink_deliver_tap+0x2e/0x1b0 [ 1460.022909][T23326] netlink_deliver_tap+0x19c/0x1b0 [ 1460.022934][T23326] netlink_unicast+0x7fa/0x9e0 [ 1460.022969][T23326] ? __pfx_netlink_unicast+0x10/0x10 [ 1460.022999][T23326] ? netlink_sendmsg+0x642/0xb30 [ 1460.023021][T23326] ? skb_put+0x11b/0x210 [ 1460.023044][T23326] netlink_sendmsg+0x805/0xb30 [ 1460.023071][T23326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1460.023102][T23326] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1460.023122][T23326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1460.023141][T23326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1460.023161][T23326] __sock_sendmsg+0x21c/0x270 [ 1460.023191][T23326] ____sys_sendmsg+0x505/0x830 [ 1460.023218][T23326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1460.023249][T23326] ? import_iovec+0x74/0xa0 [ 1460.023276][T23326] ___sys_sendmsg+0x21f/0x2a0 [ 1460.023300][T23326] ? __pfx____sys_sendmsg+0x10/0x10 [ 1460.023353][T23326] ? __fget_files+0x2a/0x420 [ 1460.023367][T23326] ? __fget_files+0x3a0/0x420 [ 1460.023392][T23326] __x64_sys_sendmsg+0x19b/0x260 [ 1460.023417][T23326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1460.023449][T23326] ? __pfx_ksys_write+0x10/0x10 [ 1460.023471][T23326] ? rcu_is_watching+0x15/0xb0 [ 1460.023494][T23326] ? do_syscall_64+0xbe/0x3b0 [ 1460.023517][T23326] do_syscall_64+0xfa/0x3b0 [ 1460.023534][T23326] ? lockdep_hardirqs_on+0x9c/0x150 [ 1460.023552][T23326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.023570][T23326] ? clear_bhb_loop+0x60/0xb0 [ 1460.023591][T23326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.023608][T23326] RIP: 0033:0x7f227498eba9 [ 1460.023626][T23326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1460.023642][T23326] RSP: 002b:00007f2275877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1460.023661][T23326] RAX: ffffffffffffffda RBX: 00007f2274bd5fa0 RCX: 00007f227498eba9 [ 1460.023676][T23326] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1460.023688][T23326] RBP: 00007f2275877090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.023699][T23326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.023710][T23326] R13: 00007f2274bd6038 R14: 00007f2274bd5fa0 R15: 00007f2274cffa28 [ 1460.023737][T23326] [ 1460.582666][T22222] usb 6-1: Using ep0 maxpacket: 16 [ 1460.648647][T17815] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1460.659759][T17815] usb 3-1: MIDIStreaming interface descriptor not found [ 1460.668612][T22222] usb 6-1: config 0 has no interfaces? [ 1460.674682][T22237] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1460.696932][T17815] usb 3-1: USB disconnect, device number 125 [ 1460.739808][T22222] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1460.749169][T22222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.793745][T22222] usb 6-1: Product: syz [ 1460.802303][T22222] usb 6-1: Manufacturer: syz [ 1460.807055][T22222] usb 6-1: SerialNumber: syz [ 1460.825884][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.856860][T22237] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1460.866636][T22237] usb 5-1: not running at top speed; connect to a high speed hub [ 1460.896172][T22222] usb 6-1: config 0 descriptor?? [ 1460.927849][T22237] usb 5-1: config 14 has an invalid interface number: 242 but max is 0 [ 1460.958999][T22237] usb 5-1: config 14 has no interface number 0 [ 1461.026586][T22237] usb 5-1: config 14 interface 242 has no altsetting 0 [ 1461.059786][T22237] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=43.0d [ 1461.129166][T22237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.158110][T22237] usb 5-1: Product: syz [ 1461.188758][T22237] usb 5-1: Manufacturer: syz [ 1461.263891][T22237] usb 5-1: SerialNumber: syz [ 1461.423824][T17815] usb 6-1: USB disconnect, device number 60 [ 1461.743711][T22237] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1461.774144][T22237] pctv452e: pctv452e_power_ctrl: 1 [ 1461.774144][T22237] [ 1461.781563][T22237] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1461.781563][T22237] [ 1461.827394][T22237] dvb-usb: bulk message failed: -22 (5/0) [ 1461.855654][T22237] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1461.918758][T22237] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1462.018939][T22237] usb 5-1: USB disconnect, device number 18 [ 1464.705981][T23367] syz.4.4290 (23367): drop_caches: 2 [ 1465.072120][T22209] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1465.242298][T22209] usb 4-1: Using ep0 maxpacket: 16 [ 1465.263339][T22209] usb 4-1: config 5 has an invalid interface number: 206 but max is 0 [ 1465.279805][T22209] usb 4-1: config 5 has no interface number 0 [ 1465.289992][T22209] usb 4-1: too many endpoints for config 5 interface 206 altsetting 165: 152, using maximum allowed: 30 [ 1465.339508][T22209] usb 4-1: config 5 interface 206 altsetting 165 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 1465.382526][T22209] usb 4-1: config 5 interface 206 has no altsetting 0 [ 1465.410672][T22209] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 1465.442266][T23383] input: syz1 as /devices/virtual/input/input79 [ 1465.452191][T22209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.474541][T22209] usb 4-1: Product: syz [ 1465.500925][T22209] usb 4-1: Manufacturer: syz [ 1465.522564][T22209] usb 4-1: SerialNumber: syz [ 1465.578114][ T30] audit: type=1326 audit(1757884013.341:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1465.667926][ T30] audit: type=1326 audit(1757884013.371:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1465.811731][T22209] usb_ehset_test 4-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 1465.833101][ T30] audit: type=1326 audit(1757884013.381:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1465.909510][ T30] audit: type=1326 audit(1757884013.381:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1465.922845][T22209] usb 4-1: USB disconnect, device number 126 [ 1465.977910][T23388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1466.026846][T23388] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4296'. [ 1466.046500][ T30] audit: type=1326 audit(1757884013.381:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1466.089795][ T30] audit: type=1326 audit(1757884013.411:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1466.126391][ T30] audit: type=1326 audit(1757884013.521:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1466.154346][ T30] audit: type=1326 audit(1757884013.611:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1466.177685][ T30] audit: type=1326 audit(1757884013.611:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23380 comm="syz.5.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1466.712330][T22237] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1466.868974][T17815] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1467.254214][T17815] usb 4-1: Using ep0 maxpacket: 8 [ 1467.261718][T17815] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1467.292624][T17815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.396487][T17815] usb 4-1: config 0 descriptor?? [ 1467.764707][T23413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1468.742389][T22222] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1468.892618][T22222] usb 3-1: Using ep0 maxpacket: 32 [ 1468.909017][T22222] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1468.919394][T22222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.957187][T22222] usb 3-1: config 0 descriptor?? [ 1469.181882][T22222] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1469.236998][T22222] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1469.288431][T22222] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1469.319002][T22222] usb 3-1: media controller created [ 1469.455308][T22222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1469.554591][T22222] az6027: usb out operation failed. (-71) [ 1469.576433][T22222] az6027: usb out operation failed. (-71) [ 1469.607245][T22222] stb0899_attach: Driver disabled by Kconfig [ 1469.632073][T22222] az6027: no front-end attached [ 1469.632073][T22222] [ 1469.685012][T22222] az6027: usb out operation failed. (-71) [ 1469.732320][T22222] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1469.751205][T22222] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input80 [ 1469.797796][T22222] dvb-usb: schedule remote query interval to 400 msecs. [ 1469.817778][T22222] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1469.863851][T22222] usb 3-1: USB disconnect, device number 126 [ 1469.892275][T17815] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1470.013013][T17815] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1470.109851][T17815] usb 4-1: USB disconnect, device number 127 [ 1470.254478][T22222] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1470.263193][ T30] audit: type=1326 audit(1757884018.021:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1470.610058][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1470.610079][ T30] audit: type=1326 audit(1757884018.371:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb420d8e7ab code=0x7ffc0000 [ 1470.662599][T22222] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1470.684766][ T30] audit: type=1326 audit(1757884018.441:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb420d8e7ab code=0x7ffc0000 [ 1470.710748][T23433] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4308'. [ 1470.716360][ T30] audit: type=1326 audit(1757884018.451:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb420d8e7ab code=0x7ffc0000 [ 1470.757436][ T30] audit: type=1326 audit(1757884018.451:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb420d8e7ab code=0x7ffc0000 [ 1470.787916][ T30] audit: type=1326 audit(1757884018.551:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb420d8e7ab code=0x7ffc0000 [ 1470.851139][ T30] audit: type=1326 audit(1757884018.611:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb420d8e7ab code=0x7ffc0000 [ 1470.861128][T22222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 56, changing to 9 [ 1470.918105][ T30] audit: type=1326 audit(1757884018.611:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb420d8e7ab code=0x7ffc0000 [ 1470.942965][T22222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8703, setting to 1024 [ 1470.955738][ T30] audit: type=1326 audit(1757884018.611:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb420d8e7ab code=0x7ffc0000 [ 1470.972089][T22222] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1471.006413][T22222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.010516][ T30] audit: type=1326 audit(1757884018.611:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb420d8e7ab code=0x7ffc0000 [ 1471.046926][T22222] usb 3-1: config 0 descriptor?? [ 1471.076311][ T30] audit: type=1326 audit(1757884018.611:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23427 comm="syz.2.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb420d8e7ab code=0x7ffc0000 [ 1471.162082][T22209] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1471.301389][T22222] ath6kl: Failed to submit usb control message: -71 [ 1471.321482][T22222] ath6kl: unable to send the bmi data to the device: -71 [ 1471.326688][T22209] usb 5-1: Using ep0 maxpacket: 32 [ 1471.329668][T22222] ath6kl: Unable to send get target info: -71 [ 1471.359569][T22222] ath6kl: Failed to init ath6kl core: -71 [ 1471.366908][T22222] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1471.373555][T22209] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1471.382931][T22222] usb 3-1: USB disconnect, device number 127 [ 1471.403551][T22209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.442308][T22209] usb 5-1: Product: syz [ 1471.446549][T22209] usb 5-1: Manufacturer: syz [ 1471.458805][T22209] usb 5-1: SerialNumber: syz [ 1471.491729][T22209] usb 5-1: config 0 descriptor?? [ 1472.083361][T22209] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1472.092929][T22209] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1472.268817][T22213] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1472.283821][T22209] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1472.307208][T22209] usb 5-1: USB disconnect, device number 20 [ 1472.326535][T23474] (unnamed net_device) (uninitialized): down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 1472.425547][T22213] usb 4-1: config 0 has no interfaces? [ 1472.442415][T22213] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1472.452547][T22213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.460715][T22213] usb 4-1: Product: syz [ 1472.465666][T22213] usb 4-1: Manufacturer: syz [ 1472.473994][T22213] usb 4-1: SerialNumber: syz [ 1472.539270][T22213] usb 4-1: config 0 descriptor?? [ 1472.580721][T23474] bond6: entered promiscuous mode [ 1472.673798][T23474] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1472.728538][T23483] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4319'. [ 1473.292240][T22213] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1473.442112][T22213] usb 6-1: Using ep0 maxpacket: 16 [ 1473.499009][T22213] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 1473.557221][T22213] usb 6-1: config 0 has no interface number 0 [ 1473.608487][T22213] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1473.695987][T22213] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1473.814821][T22213] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1473.825206][T22213] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1473.856070][T22213] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1473.874833][T22213] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1473.895624][T22213] usb 6-1: Product: syz [ 1473.904892][T22213] usb 6-1: Manufacturer: syz [ 1473.917203][T22213] usb 6-1: SerialNumber: syz [ 1473.957516][T22213] usb 6-1: config 0 descriptor?? [ 1473.964216][T23487] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1474.225123][T22213] usb 6-1: USB disconnect, device number 61 [ 1474.528379][T23508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.713137][T23508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.891105][T22213] usb 4-1: USB disconnect, device number 2 [ 1475.392507][T22237] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1475.569014][T22237] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1475.579159][T22237] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.589052][T22237] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.602117][T22237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.610904][T22237] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.621032][T22237] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.633657][T22237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.642305][T22213] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1475.644087][T22237] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.659074][T22237] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.711817][T22237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.721149][T22237] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.732808][T22237] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.745359][T22237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.756236][T22237] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.766779][T22237] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.778621][T22237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.797875][T22237] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.802542][T22213] usb 4-1: Using ep0 maxpacket: 32 [ 1475.842547][T22237] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.849384][T22213] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1475.869254][T22213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.877806][T22213] usb 4-1: Product: syz [ 1475.883483][T22237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.889346][T22213] usb 4-1: Manufacturer: syz [ 1475.891888][T22237] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.910108][T22213] usb 4-1: SerialNumber: syz [ 1475.916581][T22237] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.933020][T22213] usb 4-1: config 0 descriptor?? [ 1475.943843][T22237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.955229][T22237] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1475.971314][T22237] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1475.982904][T22237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1475.993074][T22237] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1476.002520][T22237] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1476.018251][T22237] usb 3-1: Product: syz [ 1476.027320][T22237] usb 3-1: Manufacturer: syz [ 1476.037829][T22237] usb 3-1: SerialNumber: syz [ 1476.048406][T22237] usb 3-1: config 0 descriptor?? [ 1476.102541][T22237] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1476.127889][T23531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4331'. [ 1476.383684][T22213] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1476.412621][T22213] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1476.523073][T22213] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 1476.575093][T22213] usb 4-1: USB disconnect, device number 3 [ 1476.632819][T23536] tipc: Started in network mode [ 1476.652179][T23536] tipc: Node identity e21369f80b92, cluster identity 4711 [ 1476.669778][T23536] tipc: Enabled bearer , priority 0 [ 1476.731748][T23537] syzkaller0: entered promiscuous mode [ 1476.801359][T23537] syzkaller0: entered allmulticast mode [ 1476.883351][T23536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4332'. [ 1476.894937][T23536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4332'. [ 1477.008275][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 1477.018799][T22213] usb 3-1: USB disconnect, device number 2 [ 1477.060393][T22213] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1477.366850][T23535] tipc: Resetting bearer [ 1477.473149][T23535] tipc: Disabling bearer [ 1478.132553][T22222] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1478.304393][T23555] fuse: Unknown parameter 'Wd' [ 1478.324066][T22222] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.370174][T22222] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1478.393844][T22222] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1478.413661][T22222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.480883][T22222] usb 6-1: config 0 descriptor?? [ 1478.523172][T23566] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4339'. [ 1478.786752][T22222] kye 0003:0458:0138.004F: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.5-1/input0 [ 1478.952490][T22237] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1479.194651][T22237] usb 3-1: Using ep0 maxpacket: 32 [ 1479.212613][T22237] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 1479.242247][T22237] usb 3-1: config 0 has no interface number 0 [ 1479.260634][T22237] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=1b.c4 [ 1479.283887][T22237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.310623][T22237] usb 3-1: Product: syz [ 1479.319442][T22237] usb 3-1: Manufacturer: syz [ 1479.334406][T22237] usb 3-1: SerialNumber: syz [ 1479.380021][T22237] usb 3-1: config 0 descriptor?? [ 1479.602483][T23578] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4344'. [ 1479.630588][T22237] cx82310_eth 3-1:0.36: probe with driver cx82310_eth failed with error -71 [ 1479.763594][T22237] cxacru 3-1:0.36: usbatm_usb_probe: bind failed: -19! [ 1479.803887][T22237] usb 3-1: USB disconnect, device number 3 [ 1479.950474][T23578] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 1480.031048][T23578] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4344'. [ 1480.192145][T17815] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1480.343456][T17815] usb 5-1: Using ep0 maxpacket: 32 [ 1480.357097][T17815] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1480.369224][T17815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.388915][T17815] usb 5-1: Product: syz [ 1480.399946][T17815] usb 5-1: Manufacturer: syz [ 1480.421823][T17815] usb 5-1: SerialNumber: syz [ 1480.455261][T17815] usb 5-1: config 0 descriptor?? [ 1480.939464][T22237] usb 6-1: USB disconnect, device number 62 [ 1480.948510][T17815] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1481.012163][T17815] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1481.146291][T17815] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1481.186162][T17815] usb 5-1: USB disconnect, device number 21 [ 1481.250734][T22233] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1481.402459][T22233] usb 3-1: device descriptor read/64, error -71 [ 1481.654730][T22233] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1481.822212][T22233] usb 3-1: device descriptor read/64, error -71 [ 1481.842184][T22213] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1481.852476][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1481.906951][T23612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4353'. [ 1481.932992][T22233] usb usb3-port1: attempt power cycle [ 1481.992896][T22213] usb 6-1: device descriptor read/64, error -71 [ 1482.035777][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1482.052438][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.060735][ T10] usb 5-1: Product: syz [ 1482.065851][ T10] usb 5-1: Manufacturer: syz [ 1482.070503][ T10] usb 5-1: SerialNumber: syz [ 1482.085190][ T10] usb 5-1: config 0 descriptor?? [ 1482.242292][T22213] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1482.272357][T22233] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1482.303283][T22233] usb 3-1: device descriptor read/8, error -71 [ 1482.392577][T22213] usb 6-1: device descriptor read/64, error -71 [ 1482.504062][T22213] usb usb6-port1: attempt power cycle [ 1482.572400][T22233] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1482.623672][T22233] usb 3-1: device descriptor read/8, error -71 [ 1482.745066][T22233] usb usb3-port1: unable to enumerate USB device [ 1482.862458][T22213] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1482.903324][T22213] usb 6-1: device descriptor read/8, error -71 [ 1483.143028][T22213] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1483.164054][T22213] usb 6-1: device descriptor read/8, error -71 [ 1483.270182][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1483.282053][T22213] usb usb6-port1: unable to enumerate USB device [ 1483.289138][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1483.304489][ T10] usb 5-1: USB disconnect, device number 22 [ 1483.443071][T23625] netdevsim netdevsim3 : renamed from netdevsim0 [ 1484.184359][T23636] loop2: detected capacity change from 0 to 7 [ 1484.268256][T23636] Dev loop2: unable to read RDB block 7 [ 1484.287340][T23636] loop2: unable to read partition table [ 1484.310043][T23636] loop2: partition table beyond EOD, truncated [ 1484.371330][T23636] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1485.242272][T22237] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1485.393298][T22238] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1485.535671][T23657] binder: BINDER_SET_CONTEXT_MGR already set [ 1485.551338][T23657] binder: 23655:23657 ioctl 4018620d 2000000002c0 returned -16 [ 1485.564255][T22238] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1485.580724][T23656] binder: 23655:23656 ioctl c0306201 2000000003c0 returned -22 [ 1485.582078][T22238] usb 6-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 1485.599942][T23657] binder: 23655:23657 ioctl c0306201 200000000240 returned -11 [ 1485.608690][T22238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.654391][T22238] usb 6-1: config 0 descriptor?? [ 1486.098226][T22238] sigmamicro 0003:1C4F:0059.0050: item fetching failed at offset 0/5 [ 1486.124272][T22238] sigmamicro 0003:1C4F:0059.0050: probe with driver sigmamicro failed with error -22 [ 1486.508480][ T10] usb 6-1: USB disconnect, device number 67 [ 1487.221440][T23682] loop2: detected capacity change from 0 to 7 [ 1487.271025][ T6003] Dev loop2: unable to read RDB block 7 [ 1487.279641][ T6003] loop2: unable to read partition table [ 1487.365996][ T6003] loop2: partition table beyond EOD, truncated [ 1487.397346][T23682] Dev loop2: unable to read RDB block 7 [ 1487.404149][T23682] loop2: unable to read partition table [ 1487.442371][T23682] loop2: partition table beyond EOD, truncated [ 1487.456258][T23682] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1487.872643][T23696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1487.902270][T23696] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1488.032103][T22237] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1488.561213][T23711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4377'. [ 1488.625176][T22237] usb 6-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 1488.634695][T22237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.644360][T22237] usb 6-1: Product: syz [ 1488.648929][T22237] usb 6-1: Manufacturer: syz [ 1488.655638][T22237] usb 6-1: SerialNumber: syz [ 1489.223269][T23718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.256438][T23718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.356134][T22237] pwc: Visionite VCS-UC300 USB webcam detected. [ 1489.394399][T22237] pwc: Failed to set LED on/off time (-71) [ 1489.400720][T22237] pwc: send_video_command error -71 [ 1489.420344][T22237] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1489.441825][T23725] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4379'. [ 1489.512984][T22237] Philips webcam 6-1:5.0: probe with driver Philips webcam failed with error -71 [ 1489.541610][T22237] usb 6-1: USB disconnect, device number 68 [ 1489.775466][T23730] loop2: detected capacity change from 0 to 7 [ 1489.812780][T23730] Dev loop2: unable to read RDB block 7 [ 1489.823962][T23730] loop2: unable to read partition table [ 1489.830006][T23730] loop2: partition table beyond EOD, truncated [ 1489.845010][T23730] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1489.869979][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.879733][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.052571][T22213] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1490.227784][T22213] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1490.250706][T22213] usb 4-1: config 0 has no interface number 0 [ 1490.269948][T22213] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1490.286600][T22213] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 1490.300683][T22213] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1490.321922][T22213] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 1490.342171][T22222] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1490.350379][T22213] usb 4-1: New USB device found, idVendor=15f4, idProduct=0131, bcdDevice=46.43 [ 1490.368400][T22213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.379658][T22213] usb 4-1: Product: syz [ 1490.389292][T22213] usb 4-1: Manufacturer: syz [ 1490.395943][T22213] usb 4-1: SerialNumber: syz [ 1490.415250][T22213] usb 4-1: config 0 descriptor?? [ 1490.463077][T22237] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1490.536310][T22222] usb 3-1: Using ep0 maxpacket: 8 [ 1490.545849][T22222] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1490.609723][ T10] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1490.621318][T23749] random: crng reseeded on system resumption [ 1490.707055][T22201] usb 4-1: USB disconnect, device number 4 [ 1490.710393][T22222] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1490.722509][T22237] usb 5-1: Using ep0 maxpacket: 8 [ 1490.731069][T22237] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1490.742528][T22222] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1490.757518][T22237] usb 5-1: config 59 has an invalid interface number: 141 but max is 0 [ 1490.779578][T22237] usb 5-1: config 59 has an invalid descriptor of length 255, skipping remainder of the config [ 1490.802640][T22222] usb 3-1: Product: syz [ 1490.808084][T22222] usb 3-1: Manufacturer: syz [ 1490.814014][T22237] usb 5-1: config 59 has no interface number 0 [ 1490.820411][T22222] usb 3-1: SerialNumber: syz [ 1490.842460][T22237] usb 5-1: config 59 interface 141 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1490.858088][T22237] usb 5-1: config 59 interface 141 has no altsetting 0 [ 1490.866335][T22222] usb 3-1: config 0 descriptor?? [ 1490.877433][T22237] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 1490.882272][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1490.888047][T22237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.900243][T22237] usb 5-1: Product: syz [ 1490.904792][T22237] usb 5-1: Manufacturer: syz [ 1490.909637][T22237] usb 5-1: SerialNumber: syz [ 1490.929874][ T10] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1491.867248][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.887556][ T10] usb 6-1: Product: syz [ 1492.090682][ T10] usb 6-1: Manufacturer: syz [ 1492.123230][ T10] usb 6-1: SerialNumber: syz [ 1492.126564][T22222] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1492.139131][ T10] usb 6-1: config 0 descriptor?? [ 1492.614075][T23744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4388'. [ 1492.716199][T22237] usbtest 5-1:59.141: couldn't get endpoints, -22 [ 1492.724438][T22237] usbtest 5-1:59.141: probe with driver usbtest failed with error -22 [ 1492.772124][ T10] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1492.791222][ T10] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1492.822774][T22237] usb 5-1: USB disconnect, device number 23 [ 1492.904101][ T10] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1492.943044][T22213] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1492.963344][ T10] usb 6-1: USB disconnect, device number 69 [ 1493.137250][T22213] usb 4-1: config 0 has no interfaces? [ 1493.184296][T22213] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1493.195008][T22213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.307209][T23761] bond6: entered allmulticast mode [ 1493.313468][T22213] usb 4-1: Product: syz [ 1493.314171][T23761] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1493.342128][T22213] usb 4-1: Manufacturer: syz [ 1493.380858][T22213] usb 4-1: SerialNumber: syz [ 1493.432514][T22213] usb 4-1: config 0 descriptor?? [ 1493.485434][T22222] gspca_sunplus: reg_w_riv err -71 [ 1493.490889][T22222] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1493.519376][T22222] usb 3-1: USB disconnect, device number 9 [ 1493.848091][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1493.848115][ T30] audit: type=1326 audit(1757884041.611:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1494.248033][T23781] netlink: 'syz.4.4394': attribute type 1 has an invalid length. [ 1494.278237][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4394'. [ 1494.329226][ T30] audit: type=1326 audit(1757884041.611:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1494.369372][ T30] audit: type=1326 audit(1757884041.611:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1494.466253][ T30] audit: type=1326 audit(1757884041.611:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1494.547528][ T30] audit: type=1326 audit(1757884041.611:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1494.762901][T23787] loop2: detected capacity change from 0 to 7 [ 1494.789280][T23787] Dev loop2: unable to read RDB block 7 [ 1494.797203][T23787] loop2: AHDI p1 p2 p3 [ 1494.886818][ T30] audit: type=1326 audit(1757884041.611:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1494.910946][ T30] audit: type=1326 audit(1757884041.611:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1494.920153][T23787] loop2: partition table partially beyond EOD, [ 1494.953865][ T30] audit: type=1326 audit(1757884041.611:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1494.992131][ T30] audit: type=1326 audit(1757884041.611:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1495.029295][T23787] truncated [ 1495.029696][ T30] audit: type=1326 audit(1757884041.611:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23777 comm="syz.5.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284678eba9 code=0x7ffc0000 [ 1495.033063][T23787] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1495.099270][T23787] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1495.463754][T22222] usb 4-1: USB disconnect, device number 5 [ 1496.202240][T22213] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1496.529635][T22213] usb 6-1: Using ep0 maxpacket: 32 [ 1496.549047][T22213] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1496.621075][T22213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.629424][T22213] usb 6-1: Product: syz [ 1496.639583][T22213] usb 6-1: Manufacturer: syz [ 1496.644934][T22213] usb 6-1: SerialNumber: syz [ 1496.665899][T22213] usb 6-1: config 0 descriptor?? [ 1497.079054][T23814] tipc: Can't bind to reserved service type 2 [ 1497.140319][T23800] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4402'. [ 1497.156962][T22213] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1497.165554][T22213] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1497.333783][T22213] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1497.355661][T22213] usb 6-1: USB disconnect, device number 70 [ 1498.312908][T22222] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1498.352549][T17815] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1498.484587][T22222] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1498.497455][T22222] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1498.749751][T17815] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.782181][T17815] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1498.788883][T17815] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1498.811237][T22222] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1498.832492][T22222] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1498.837008][T23826] loop2: detected capacity change from 0 to 7 [ 1498.851718][T17815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.876600][ T6003] Dev loop2: unable to read RDB block 7 [ 1498.882158][T22222] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1498.886145][ T6003] loop2: unable to read partition table [ 1498.891306][T22222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.907647][T17815] usb 4-1: config 0 descriptor?? [ 1498.923834][T22222] usb 6-1: config 0 descriptor?? [ 1498.934440][ T6003] loop2: partition table beyond EOD, truncated [ 1498.953483][T23826] Dev loop2: unable to read RDB block 7 [ 1498.959558][T23826] loop2: unable to read partition table [ 1498.972788][T23826] loop2: partition table beyond EOD, truncated [ 1498.979352][T23826] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1499.092426][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1499.140609][T23831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.153079][T23831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.223707][T22222] usbhid 6-1:0.0: can't add hid device: -71 [ 1499.229859][T22222] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1499.261564][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1499.439411][T22222] usb 6-1: USB disconnect, device number 71 [ 1499.452168][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1499.460837][ T10] usb 3-1: config 0 has no interface number 0 [ 1499.481355][ T10] usb 3-1: config 0 interface 85 altsetting 25 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1499.506314][T17815] uclogic 0003:5543:0004.0051: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 1499.586504][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1499.602844][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1499.613015][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.622604][ T10] usb 3-1: Product: syz [ 1499.629592][T22213] usb 4-1: USB disconnect, device number 6 [ 1499.650820][ T10] usb 3-1: Manufacturer: syz [ 1499.663797][ T10] usb 3-1: SerialNumber: syz [ 1499.753036][ T10] usb 3-1: config 0 descriptor?? [ 1499.853152][T23841] fido_id[23841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1499.990982][ T10] appletouch 3-1:0.85: Failed to read mode from device. [ 1500.032731][ T10] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1500.192967][T23828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.203224][T23828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.645498][ T10] usb 3-1: USB disconnect, device number 10 [ 1501.072899][T22222] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1501.195237][T23855] program syz.4.4415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1501.254059][T22222] usb 4-1: Using ep0 maxpacket: 8 [ 1501.388424][T22222] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 1501.409725][T22222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.465378][T22222] usb 4-1: Product: syz [ 1501.469639][T22222] usb 4-1: Manufacturer: syz [ 1501.498942][T22222] usb 4-1: SerialNumber: syz [ 1501.512462][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1501.693083][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1501.730400][T22222] usb 4-1: config 0 descriptor?? [ 1501.755224][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1501.775059][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.793161][T23860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4416'. [ 1501.925749][ T10] usb 5-1: Product: syz [ 1501.952249][ T10] usb 5-1: Manufacturer: syz [ 1502.029525][ T10] usb 5-1: SerialNumber: syz [ 1502.048310][ T10] usb 5-1: config 0 descriptor?? [ 1503.410918][T23864] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4417'. [ 1503.719139][T22222] usb 4-1: USB disconnect, device number 7 [ 1504.237697][T22222] usb 5-1: USB disconnect, device number 24 [ 1504.462587][T23886] input: syz0 as /devices/virtual/input/input82 [ 1504.737839][T23888] fuse: Unknown parameter '01777777777777777777777ÿ' [ 1504.892286][T22222] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1505.055879][T22222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.160250][T22222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.172028][T22222] usb 5-1: New USB device found, idVendor=258a, idProduct=6a80, bcdDevice= 0.00 [ 1505.181537][T22222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.197207][T22222] usb 5-1: config 0 descriptor?? [ 1505.358324][T23897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4426'. [ 1505.384344][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1505.384366][ T30] audit: type=1326 audit(1757884053.151:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.2.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1505.487256][ T30] audit: type=1326 audit(1757884053.181:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.2.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1505.512584][ T30] audit: type=1326 audit(1757884053.181:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.2.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1505.537357][ T30] audit: type=1326 audit(1757884053.181:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.2.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1505.564278][ T30] audit: type=1326 audit(1757884053.181:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.2.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1505.734426][T22222] hid-generic 0003:258A:6A80.0052: hidraw0: USB HID v0.00 Device [HID 258a:6a80] on usb-dummy_hcd.4-1/input0 [ 1505.762746][ T30] audit: type=1326 audit(1757884053.181:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.2.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1505.848989][ T30] audit: type=1326 audit(1757884053.181:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.2.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1505.945765][ T30] audit: type=1326 audit(1757884053.191:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.2.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1505.984248][T23885] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1505.992302][ T30] audit: type=1326 audit(1757884053.191:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.2.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1506.089638][ T30] audit: type=1326 audit(1757884053.191:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.2.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb420d8eba9 code=0x7ffc0000 [ 1506.149079][T22233] usb 5-1: USB disconnect, device number 25 [ 1506.582898][T23037] Bluetooth: hci3: command 0x0c1a tx timeout [ 1506.589105][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1506.602478][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1507.462330][T22222] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1507.643886][T22222] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1507.652525][T22222] usb 3-1: config 0 has no interface number 0 [ 1507.678236][T22222] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1507.691381][T22222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.709961][T22222] usb 3-1: Product: syz [ 1507.720094][T22222] usb 3-1: Manufacturer: syz [ 1507.725950][T22222] usb 3-1: SerialNumber: syz [ 1507.736413][T22222] usb 3-1: config 0 descriptor?? [ 1508.201678][T22222] usb 3-1: Firmware: major: 0, minor: 83, hardware type: ATUSB (1) [ 1508.415286][T22222] usb 3-1: failed to fetch extended address, random address set [ 1508.485636][T22222] usb 3-1: USB disconnect, device number 11 [ 1508.663540][T23037] Bluetooth: hci5: command 0x0c1a tx timeout [ 1508.669849][ T10] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1508.681800][ T10] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1508.752601][T22238] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1508.902246][T22238] usb 5-1: Using ep0 maxpacket: 16 [ 1508.910844][T22238] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 1508.926162][T22238] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1508.942598][T22238] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.953174][T22238] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1508.962318][T22238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1508.972332][T22238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1508.985341][T22233] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1509.019640][T22238] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1509.034363][T22238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.152321][T22238] usb 5-1: Product: syz [ 1509.156694][T22238] usb 5-1: Manufacturer: syz [ 1509.161574][T22238] usb 5-1: SerialNumber: syz [ 1509.168690][T22238] usb 5-1: config 0 descriptor?? [ 1509.185413][T22238] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1509.202453][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1509.217675][T22233] usb 6-1: Using ep0 maxpacket: 32 [ 1509.218255][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1509.240873][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1509.258173][T22233] usb 6-1: config 7 has an invalid interface number: 123 but max is 0 [ 1509.273147][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1509.287077][T22233] usb 6-1: config 7 has no interface number 0 [ 1509.305220][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1509.317000][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1509.321262][T22233] usb 6-1: config 7 interface 123 altsetting 6 bulk endpoint 0xC has invalid maxpacket 8 [ 1509.325219][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1509.345028][T22233] usb 6-1: config 7 interface 123 has no altsetting 0 [ 1509.357248][T22233] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be [ 1509.389226][T22238] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1509.402423][T22233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.410853][T22233] usb 6-1: Product: syz [ 1509.415758][T22233] usb 6-1: Manufacturer: syz [ 1509.427065][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1509.435743][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 1509.448671][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1509.458627][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1509.471663][T22238] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1509.483909][T22233] usb 6-1: SerialNumber: syz [ 1509.487402][T22238] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1509.503436][T23932] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1509.512411][T22209] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1509.677440][T22209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.691362][T22209] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1509.710077][T22209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.730232][T22233] kvaser_usb 6-1:7.123: error -ENODEV: Cannot get usb endpoint(s) [ 1509.744032][T22209] usb 3-1: config 0 descriptor?? [ 1509.764946][T22209] pwc: Askey VC010 type 2 USB webcam detected. [ 1509.783212][T22233] usb 6-1: USB disconnect, device number 72 [ 1509.791203][T22238] usb 5-1: USB disconnect, device number 26 [ 1509.817608][T22238] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1509.894356][T22238] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1509.910774][T22238] keyspan 5-1:0.0: device disconnected [ 1509.971584][T22209] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1510.006556][T22209] pwc: recv_control_msg error -71 req 02 val 2700 [ 1510.031293][T22209] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1510.056930][T22209] pwc: recv_control_msg error -71 req 04 val 1000 [ 1510.080391][T22209] pwc: recv_control_msg error -71 req 04 val 1300 [ 1510.088460][T22209] pwc: recv_control_msg error -71 req 04 val 1400 [ 1510.101074][T22209] pwc: recv_control_msg error -71 req 02 val 2000 [ 1510.109518][T22209] pwc: recv_control_msg error -71 req 02 val 2100 [ 1510.119271][T22209] pwc: recv_control_msg error -71 req 04 val 1500 [ 1510.134478][T22209] pwc: recv_control_msg error -71 req 02 val 2500 [ 1510.153134][T22209] pwc: recv_control_msg error -71 req 02 val 2400 [ 1510.171727][T22209] pwc: recv_control_msg error -71 req 02 val 2600 [ 1510.182893][T22209] pwc: recv_control_msg error -71 req 02 val 2900 [ 1510.202216][T22209] pwc: recv_control_msg error -71 req 02 val 2800 [ 1510.209320][T22209] pwc: recv_control_msg error -71 req 04 val 1100 [ 1510.217021][T22209] pwc: recv_control_msg error -71 req 04 val 1200 [ 1510.232280][T22209] pwc: Registered as video103. [ 1510.282574][T22209] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input83 [ 1510.333027][T22209] usb 3-1: USB disconnect, device number 12 [ 1510.752861][T23037] Bluetooth: hci2: command 0x0405 tx timeout [ 1510.768912][ T10] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1510.787227][ T10] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1512.905834][T23037] Bluetooth: hci4: command 0x0406 tx timeout [ 1512.922084][ T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1512.938813][ T10] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1513.018029][T23986] lo: entered promiscuous mode [ 1513.027804][T23986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4449'. [ 1513.063046][T23986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1513.123283][T22238] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1513.316230][T23993] netlink: 'syz.5.4450': attribute type 1 has an invalid length. [ 1513.382724][T22238] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 1513.392528][T22238] usb 5-1: config 0 has no interface number 0 [ 1513.406968][T22238] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1513.417092][T22238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.426266][T22238] usb 5-1: Product: syz [ 1513.430650][T22238] usb 5-1: Manufacturer: syz [ 1513.435482][T22238] usb 5-1: SerialNumber: syz [ 1513.494877][T23995] gretap1: entered promiscuous mode [ 1513.513833][T23993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4450'. [ 1513.531006][T22238] usb 5-1: config 0 descriptor?? [ 1513.946340][T22238] usb 5-1: Firmware: major: 0, minor: 83, hardware type: ATUSB (1) [ 1514.163967][T22238] usb 5-1: failed to fetch extended address, random address set [ 1514.279934][T22238] usb 5-1: USB disconnect, device number 27 [ 1514.698898][T23999] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4451'. [ 1514.709159][T23999] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1514.748037][T23999] netlink: 61955 bytes leftover after parsing attributes in process `syz.5.4451'. [ 1514.778012][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4451'. [ 1514.797946][T23999] tc_dump_action: action bad kind [ 1514.982472][T23037] Bluetooth: hci0: command 0x0406 tx timeout [ 1514.988989][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1515.002673][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1515.442214][T22238] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1515.632016][T22238] usb 3-1: Using ep0 maxpacket: 32 [ 1515.644698][T22238] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1515.671432][T22238] usb 3-1: config 0 has no interface number 0 [ 1515.691829][T22238] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1515.721280][T22238] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1515.730933][T22238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.762660][T22238] usb 3-1: Product: syz [ 1515.766983][T22238] usb 3-1: Manufacturer: syz [ 1515.771616][T22238] usb 3-1: SerialNumber: syz [ 1515.803894][T22238] usb 3-1: config 0 descriptor?? [ 1515.922376][T22233] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1516.082268][T22233] usb 5-1: Using ep0 maxpacket: 32 [ 1516.097904][T22233] usb 5-1: config 0 has no interfaces? [ 1516.116112][T22233] usb 5-1: New USB device found, idVendor=1bbb, idProduct=0203, bcdDevice=cf.19 [ 1516.138988][T22233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.159966][T22233] usb 5-1: Product: syz [ 1516.169199][T22233] usb 5-1: Manufacturer: syz [ 1516.177208][T22233] usb 5-1: SerialNumber: syz [ 1516.196584][T22233] usb 5-1: config 0 descriptor?? [ 1516.412619][T24028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.421884][T24028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.427446][T24033] loop6: detected capacity change from 0 to 7 [ 1516.439131][T24033] Dev loop6: unable to read RDB block 7 [ 1516.447625][T24033] loop6: AHDI p1 p2 p3 p4 [ 1516.457827][T24033] loop6: partition table partially beyond EOD, truncated [ 1516.469477][T24033] loop6: p1 start 2521779581 is beyond EOD, truncated [ 1516.476984][T24033] loop6: p2 size 115 extends beyond EOD, truncated [ 1516.486277][T24033] loop6: p3 start 1819043186 is beyond EOD, truncated [ 1516.817606][T24040] binder: BINDER_SET_CONTEXT_MGR already set [ 1516.824358][T24040] binder: 24027:24040 ioctl 4018620d 200000000040 returned -16 [ 1518.226641][T22238] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1518.247796][T22238] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1518.247910][T22196] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1518.262971][T22238] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1518.263076][T22238] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1518.274305][T22238] usb 3-1: USB disconnect, device number 13 [ 1518.473800][T22196] usb 6-1: Using ep0 maxpacket: 16 [ 1518.483411][T22196] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1518.492757][T22196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.500798][T22196] usb 6-1: Product: syz [ 1518.508276][T22196] usb 6-1: Manufacturer: syz [ 1518.513329][T22196] usb 6-1: SerialNumber: syz [ 1518.521181][T22196] usb 6-1: config 0 descriptor?? [ 1518.530523][T22196] usb 6-1: Found UVC 0.00 device syz (046d:0721) [ 1518.537713][T22196] usb 6-1: No valid video chain found. [ 1518.683677][T22238] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1518.703591][T22196] usb 5-1: USB disconnect, device number 28 [ 1518.812071][T24054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1518.824069][T24054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1518.852697][T22238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.870237][T22238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.880770][T22238] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1518.908023][T22238] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1518.926082][T22238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.940695][T22238] usb 3-1: config 0 descriptor?? [ 1519.405871][T22238] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1519.581916][T22238] usb 3-1: USB disconnect, device number 14 [ 1519.738068][T22233] usb 6-1: USB disconnect, device number 73 [ 1519.931256][T24071] usb usb1: usbfs: process 24071 (syz.5.4471) did not claim interface 0 before use [ 1519.941073][T24070] tipc: Started in network mode [ 1519.989044][T24070] tipc: Node identity fadc45163d3b, cluster identity 4711 [ 1519.997144][T24070] tipc: Enabled bearer , priority 0 [ 1520.004873][T24074] syzkaller0: entered promiscuous mode [ 1520.010779][T24074] syzkaller0: entered allmulticast mode [ 1520.049514][T24069] tipc: Resetting bearer [ 1520.110265][T24069] tipc: Disabling bearer [ 1520.303670][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1520.303693][ T30] audit: type=1326 audit(1757884068.071:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24082 comm="syz.4.4475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc98eba9 code=0x0 [ 1520.331776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1520.402223][T22222] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1520.614145][T22222] usb 3-1: Using ep0 maxpacket: 32 [ 1520.625299][T22222] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1520.643868][T22222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.652868][T22222] usb 3-1: Product: syz [ 1520.657297][T22222] usb 3-1: Manufacturer: syz [ 1520.673529][T22222] usb 3-1: SerialNumber: syz [ 1520.704456][T22222] usb 3-1: config 0 descriptor?? [ 1520.777924][T22222] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1521.102233][T22222] gspca_ov534_9: reg_w failed -71 [ 1521.512091][T22233] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1521.582095][T22196] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1521.662235][T22233] usb 5-1: Using ep0 maxpacket: 32 [ 1521.689697][T22233] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1521.712396][T22222] gspca_ov534_9: Unknown sensor 0000 [ 1521.712504][T22222] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1521.740003][T22233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.748800][T22196] usb 6-1: device descriptor read/64, error -71 [ 1521.756851][T22222] usb 3-1: USB disconnect, device number 15 [ 1521.791506][T22233] usb 5-1: config 0 descriptor?? [ 1521.807396][T22233] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1522.012601][T22196] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1522.052412][T22233] gspca_sunplus: reg_w_riv err -71 [ 1522.057701][T22233] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1522.094118][T22233] usb 5-1: USB disconnect, device number 29 [ 1522.162393][T22196] usb 6-1: device descriptor read/64, error -71 [ 1522.271617][T24125] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1522.317521][T22196] usb usb6-port1: attempt power cycle [ 1522.662269][T22196] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1522.692875][T22196] usb 6-1: device descriptor read/8, error -71 [ 1522.953124][T22196] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1522.973627][T22196] usb 6-1: device descriptor read/8, error -71 [ 1523.099813][T22196] usb usb6-port1: unable to enumerate USB device [ 1523.252372][T22196] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1523.418219][T22196] usb 3-1: Using ep0 maxpacket: 8 [ 1523.433123][T22196] usb 3-1: config 179 has an invalid interface number: 97 but max is 0 [ 1523.441543][T22196] usb 3-1: config 179 has no interface number 0 [ 1523.454754][T22196] usb 3-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1523.471689][T22196] usb 3-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1523.491710][T22196] usb 3-1: config 179 interface 97 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1523.508561][T22196] usb 3-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1523.529478][T22196] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 1523.551093][T22196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.563618][T24137] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1523.790228][T24137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4485'. [ 1523.961720][T24154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4489'. [ 1524.605562][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4490'. [ 1524.812616][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4490'. [ 1524.996482][T24162] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4492'. [ 1525.448183][T22196] usb 6-1: new low-speed USB device number 78 using dummy_hcd [ 1525.592495][T22222] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1525.645659][T22196] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 991, setting to 8 [ 1525.656775][T22196] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt [ 1525.686006][T22196] usb 6-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1525.710723][T22196] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1525.774624][T22222] usb 5-1: config 0 has no interfaces? [ 1525.836849][T22222] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1525.854878][T22222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.868977][T22222] usb 5-1: Product: syz [ 1525.874711][T22222] usb 5-1: Manufacturer: syz [ 1525.879503][T22222] usb 5-1: SerialNumber: syz [ 1525.898796][T22222] usb 5-1: config 0 descriptor?? [ 1525.971668][T22238] usb 3-1: USB disconnect, device number 16 [ 1526.454868][T24179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4496'. [ 1526.510881][T24179] vlan3: entered allmulticast mode [ 1526.516693][T24179] bond7: entered allmulticast mode [ 1528.213178][T22196] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1528.223643][T22196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.266282][T22196] usb 6-1: can't set config #1, error -71 [ 1528.333386][T22196] usb 6-1: USB disconnect, device number 78 [ 1528.635411][T24186] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4498'. [ 1528.682600][T22196] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1528.842081][T22196] usb 6-1: Using ep0 maxpacket: 16 [ 1528.856239][T22196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.868980][T22222] usb 5-1: USB disconnect, device number 30 [ 1528.869385][T22196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1528.889515][T22196] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1528.909745][T22196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.964802][T22196] usb 6-1: config 0 descriptor?? [ 1529.392327][T24194] ipip1: entered promiscuous mode [ 1529.409949][T22196] hid_parser_main: 5 callbacks suppressed [ 1529.409976][T22196] asus 0003:0B05:17E0.0054: unknown main item tag 0x0 [ 1529.438396][T22196] asus 0003:0B05:17E0.0054: unknown main item tag 0x0 [ 1529.461533][T22196] asus 0003:0B05:17E0.0054: unknown main item tag 0x0 [ 1529.469859][T22196] asus 0003:0B05:17E0.0054: unknown main item tag 0x0 [ 1529.494916][T22196] asus 0003:0B05:17E0.0054: unknown main item tag 0x0 [ 1529.515310][T22196] asus 0003:0B05:17E0.0054: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.5-1/input0 [ 1529.527653][T22196] asus 0003:0B05:17E0.0054: Asus input not registered [ 1529.614755][T24184] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1529.625136][T22196] asus 0003:0B05:17E0.0054: probe with driver asus failed with error -12 [ 1529.653366][T24194] netlink: 'syz.4.4500': attribute type 1 has an invalid length. [ 1529.742590][T22238] usb 6-1: USB disconnect, device number 79 [ 1529.761881][T24195] fido_id[24195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1529.874211][T24204] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4502'. [ 1531.010036][T24224] B: renamed from veth0 [ 1533.260852][T24243] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1533.754535][T24253] netlink: 'syz.2.4516': attribute type 10 has an invalid length. [ 1533.787835][T24253] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1533.800866][T24253] team0: Port device netdevsim0 added [ 1533.825942][T24253] netlink: 'syz.2.4516': attribute type 10 has an invalid length. [ 1533.919152][T24253] team0: Port device netdevsim0 removed [ 1534.000731][T24253] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1534.212148][T22196] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1534.501024][T22196] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 1534.519617][T22196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.546389][T22196] usb 3-1: config 0 descriptor?? [ 1534.570341][T22196] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 1534.887260][T22238] usb 3-1: USB disconnect, device number 17 [ 1535.202800][T22196] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1535.400652][T22196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.457722][T22196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.531794][T22196] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1535.578194][T22196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.630886][T22196] usb 6-1: config 0 descriptor?? [ 1536.014857][T24276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.573728][T24276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.902321][T22196] hid-led 0003:04D8:F372.0055: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.5-1/input0 [ 1537.548932][T22196] hid-led 0003:04D8:F372.0055: Greynut Luxafor initialized [ 1537.573362][T24312] input: syz1 as /devices/virtual/input/input84 [ 1537.719202][T22196] usb 6-1: USB disconnect, device number 80 [ 1537.761582][T20540] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1537.834933][ T6062] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1537.878998][T24107] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1538.049556][ T1152] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1538.103327][ T1152] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1538.128599][T24107] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1538.155940][T24107] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1538.244857][T24107] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1538.283739][T24107] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1538.343431][ T6062] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1538.365443][ T61] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1538.392766][ T61] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1538.452222][ T61] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1538.555518][T24318] netlink: 'syz.5.4525': attribute type 1 has an invalid length. [ 1538.677953][ T1152] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1538.760430][ T61] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1538.814522][ T61] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1538.837600][ T61] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1538.866511][ T61] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1540.493488][T24337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4529'. [ 1541.268958][T24348] netlink: 'syz.5.4530': attribute type 1 has an invalid length. [ 1541.303014][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4530'. [ 1541.976769][T24361] geneve2: entered promiscuous mode [ 1541.982203][T24361] geneve2: entered allmulticast mode [ 1543.071001][T24368] netlink: 'syz.4.4536': attribute type 10 has an invalid length. [ 1543.093521][ T30] audit: type=1326 audit(1757884090.781:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24362 comm="syz.4.4536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4bc98eba9 code=0x0 [ 1543.132536][T24369] netlink: 'syz.4.4536': attribute type 10 has an invalid length. [ 1543.138289][T24368] team0: Port device dummy0 added [ 1544.171667][T24369] team0: Port device dummy0 removed [ 1544.263476][T24369] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1544.519142][T24377] bridge0: port 3(batadv1) entered blocking state [ 1544.528381][T24377] bridge0: port 3(batadv1) entered disabled state [ 1544.539948][T24377] batadv1: entered allmulticast mode [ 1544.554388][T24377] batadv1: entered promiscuous mode [ 1544.608147][T24380] bridge0: port 4(batadv2) entered blocking state [ 1544.616709][T24380] bridge0: port 4(batadv2) entered disabled state [ 1544.625762][T24380] batadv2: entered allmulticast mode [ 1544.663191][T24380] batadv2: entered promiscuous mode [ 1545.026139][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1545.036660][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1545.116434][ T6062] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1545.126082][ T6062] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1545.168038][T24391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4543'. [ 1546.560373][T24410] netlink: 'syz.5.4547': attribute type 1 has an invalid length. [ 1546.592663][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4547'. [ 1547.119879][T24412] netlink: 'syz.4.4549': attribute type 9 has an invalid length. [ 1547.128880][T24412] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.4549'. [ 1547.422116][T22196] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1547.572138][T22196] usb 5-1: Using ep0 maxpacket: 8 [ 1547.580959][T22196] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1547.599788][T22196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.618639][T22196] usb 5-1: Product: syz [ 1547.628731][T22196] usb 5-1: Manufacturer: syz [ 1547.643168][T22196] usb 5-1: SerialNumber: syz [ 1547.923447][T22196] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1548.202279][T17815] usb 5-1: USB disconnect, device number 31 [ 1548.216173][T17815] usblp0: removed [ 1548.389775][T24430] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1548.441795][T24432] bond7: (slave veth7): Enslaving as an active interface with an up link [ 1548.486053][T24430] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1548.528891][T24430] vlan2: entered allmulticast mode [ 1548.538701][T24430] bond7: (slave vlan2): Enslaving as an active interface with an up link [ 1548.755837][T24437] trusted_key: encrypted_key: key user:syz not found [ 1549.452079][T22196] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1549.562365][T24439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1549.575743][T24439] IPv6: sit1: Disabled Multicast RS [ 1549.652394][T22196] usb 6-1: Using ep0 maxpacket: 32 [ 1549.662425][T22196] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.672771][T22196] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1549.698569][T22196] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1549.890250][T22196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.061508][T22196] usb 6-1: config 0 descriptor?? [ 1550.461582][T22201] usb 6-1: USB disconnect, device number 81 [ 1551.313404][T24468] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.4563'. [ 1551.328374][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.335337][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.576192][T24472] netlink: 'syz.7.4564': attribute type 1 has an invalid length. [ 1552.609775][T24472] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4564'. [ 1553.067965][T22196] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1553.274700][T22196] usb 3-1: device descriptor read/64, error -71 [ 1553.293527][T24479] loop2: detected capacity change from 0 to 7 [ 1553.301126][T24479] Dev loop2: unable to read RDB block 7 [ 1553.316280][T24479] loop2: unable to read partition table [ 1553.332314][T24479] loop2: partition table beyond EOD, truncated [ 1553.368280][T24479] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1553.512086][T22222] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1553.522752][T22196] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1553.715080][T22196] usb 3-1: device descriptor read/64, error -71 [ 1553.715390][T22222] usb 6-1: Using ep0 maxpacket: 32 [ 1553.830091][T22222] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 1553.838550][T22222] usb 6-1: config 4 has no interface number 0 [ 1553.845293][T22222] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.362044][T22222] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.362779][T22196] usb usb3-port1: attempt power cycle [ 1554.402158][T22222] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1554.574501][T22222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.626349][T22222] hub 6-1:4.128: USB hub found [ 1554.792317][T22196] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1554.810218][T22222] hub 6-1:4.128: 2 ports detected [ 1554.813292][T22196] usb 3-1: device descriptor read/8, error -71 [ 1554.836149][T22222] hub 6-1:4.128: Using single TT (err -22) [ 1555.056411][T22222] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 1555.070433][T22222] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 1555.102910][T22196] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1555.122136][T22233] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1555.132973][T22196] usb 3-1: device descriptor read/8, error -71 [ 1555.184619][T22222] usb 6-1: USB disconnect, device number 82 [ 1555.244123][T22196] usb usb3-port1: unable to enumerate USB device [ 1555.292634][T22233] usb 5-1: Using ep0 maxpacket: 32 [ 1555.305175][T22233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.324456][T22233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.340031][T22233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1555.367720][T22233] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1555.380707][T22233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.401109][T22233] usb 5-1: config 0 descriptor?? [ 1556.042407][T22222] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1556.071080][T24495] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4570'. [ 1556.202207][T22222] usb 6-1: Using ep0 maxpacket: 32 [ 1556.210001][T22222] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1556.218741][T22222] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1556.228319][T22222] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1556.238178][T22222] usb 6-1: config 1 has no interface number 0 [ 1556.246363][T22222] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1556.256563][T22222] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1556.271647][T22222] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1556.281372][T22222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.302045][T22238] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1556.323074][T22222] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1556.452348][T22238] usb 3-1: Using ep0 maxpacket: 16 [ 1556.487244][T22238] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1556.510817][T22238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.520387][T22238] usb 3-1: Product: syz [ 1556.525036][T22238] usb 3-1: Manufacturer: syz [ 1556.530111][T22238] usb 3-1: SerialNumber: syz [ 1556.549346][T22238] usb 3-1: config 0 descriptor?? [ 1556.601602][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4571'. [ 1556.722852][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4571'. [ 1556.798141][T22238] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1556.872390][T22222] snd_usb_pod 6-1:1.1: invalid control EP [ 1556.889606][T22238] usb 3-1: USB disconnect, device number 22 [ 1556.895706][T22222] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 1556.907775][T22222] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1556.921639][T22222] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1557.943222][T22233] usbhid 5-1:0.0: can't add hid device: -71 [ 1557.956187][T22233] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1557.974991][T22233] usb 5-1: USB disconnect, device number 32 [ 1558.372703][T24520] loop2: detected capacity change from 0 to 7 [ 1558.381494][ T6003] Dev loop2: unable to read RDB block 7 [ 1558.388533][ T6003] loop2: unable to read partition table [ 1558.405988][ T6003] loop2: partition table beyond EOD, truncated [ 1558.420884][T24520] Dev loop2: unable to read RDB block 7 [ 1558.432346][T24520] loop2: unable to read partition table [ 1558.472328][T24520] loop2: partition table beyond EOD, truncated [ 1558.487668][T24520] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1559.190520][T24524] netlink: 'syz.2.4578': attribute type 1 has an invalid length. [ 1559.213601][T24524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4578'. [ 1559.271836][T22222] usb 6-1: USB disconnect, device number 83 [ 1559.658268][T24529] tipc: Enabled bearer , priority 0 [ 1559.708952][T24529] syzkaller0: entered promiscuous mode [ 1559.718225][T24529] syzkaller0: entered allmulticast mode [ 1559.994574][T22238] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1560.132911][T22222] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1560.152121][T22238] usb 5-1: Using ep0 maxpacket: 8 [ 1560.198915][T24529] tipc: Resetting bearer [ 1560.222166][T22238] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1560.222467][T22196] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1560.229932][T22238] usb 5-1: no configurations [ 1560.229953][T22238] usb 5-1: can't read configurations, error -22 [ 1560.249946][T24528] tipc: Resetting bearer [ 1560.310419][T24528] tipc: Disabling bearer [ 1560.332187][T22222] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.353530][T22222] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1560.373069][T22196] usb 3-1: device descriptor read/64, error -71 [ 1560.377600][T22222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.391110][T22222] usb 6-1: config 0 descriptor?? [ 1560.407450][T22222] pwc: Askey VC010 type 2 USB webcam detected. [ 1560.612468][T22196] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1560.708191][T24544] loop2: detected capacity change from 0 to 7 [ 1560.718589][ T6003] Dev loop2: unable to read RDB block 7 [ 1560.725838][ T6003] loop2: unable to read partition table [ 1560.731749][ T6003] loop2: partition table beyond EOD, truncated [ 1560.739844][T24544] Dev loop2: unable to read RDB block 7 [ 1560.751680][T24544] loop2: unable to read partition table [ 1560.757694][T22196] usb 3-1: device descriptor read/64, error -71 [ 1560.764547][T24544] loop2: partition table beyond EOD, truncated [ 1560.770969][T24544] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1560.812073][T22222] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1560.827879][T22222] pwc: recv_control_msg error -32 req 02 val 2700 [ 1560.872528][T22196] usb usb3-port1: attempt power cycle [ 1560.947953][T24546] QAT: Invalid ioctl 1075883590 [ 1560.958759][T24546] QAT: Invalid ioctl 1075883590 [ 1560.970852][T24546] QAT: Invalid ioctl 1075883590 [ 1560.980560][T24546] QAT: Invalid ioctl 1075883590 [ 1560.986063][T24546] QAT: Invalid ioctl 1075883590 [ 1560.993820][T24546] QAT: Invalid ioctl 1075883590 [ 1560.999121][T24546] QAT: Invalid ioctl 1075883590 [ 1561.004856][T24546] QAT: Invalid ioctl 1075883590 [ 1561.010038][T24546] QAT: Invalid ioctl 1075883590 [ 1561.015782][T24549] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4588'. [ 1561.015852][T24546] QAT: Invalid ioctl 1075883590 [ 1561.051315][T22222] pwc: recv_control_msg error -71 req 04 val 1000 [ 1561.072101][T22222] pwc: recv_control_msg error -71 req 04 val 1300 [ 1561.073503][T24107] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1561.090265][T22222] pwc: recv_control_msg error -71 req 04 val 1400 [ 1561.094083][T24549] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4588'. [ 1561.113407][T22222] pwc: recv_control_msg error -71 req 02 val 2000 [ 1561.120324][T22222] pwc: recv_control_msg error -71 req 02 val 2100 [ 1561.132879][T22222] pwc: recv_control_msg error -71 req 04 val 1500 [ 1561.142588][T19367] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1561.154012][T22222] pwc: recv_control_msg error -71 req 02 val 2500 [ 1561.343751][T22222] pwc: recv_control_msg error -71 req 02 val 2400 [ 1561.350717][T22222] pwc: recv_control_msg error -71 req 02 val 2600 [ 1561.363675][T22222] pwc: recv_control_msg error -71 req 02 val 2900 [ 1561.370898][T19367] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1561.380699][T22222] pwc: recv_control_msg error -71 req 02 val 2800 [ 1561.389069][T19367] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1561.398341][T22222] pwc: recv_control_msg error -71 req 04 val 1100 [ 1561.402158][T22196] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1561.406194][T22222] pwc: recv_control_msg error -71 req 04 val 1200 [ 1561.423667][T22222] pwc: Registered as video103. [ 1561.439233][T22222] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input85 [ 1561.481692][T22222] usb 6-1: USB disconnect, device number 84 [ 1561.490763][T22196] usb 3-1: device descriptor read/8, error -71 [ 1561.667137][T24554] loop2: detected capacity change from 0 to 7 [ 1561.738353][T24554] loop2: [ 1561.757392][T24554] loop2: partition table partially beyond EOD, truncated [ 1561.805644][T22196] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1561.863125][T22196] usb 3-1: device descriptor read/8, error -71 [ 1561.972550][T22196] usb usb3-port1: unable to enumerate USB device [ 1562.863558][T24576] netlink: 'syz.5.4596': attribute type 11 has an invalid length. [ 1563.313371][T24581] loop2: detected capacity change from 0 to 7 [ 1563.349096][T24581] Dev loop2: unable to read RDB block 7 [ 1563.404328][T24581] loop2: unable to read partition table [ 1563.410287][T24581] loop2: partition table beyond EOD, truncated [ 1563.432585][T24581] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1564.044451][T24608] netlink: 'syz.5.4603': attribute type 12 has an invalid length. [ 1565.933109][T22238] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1566.072211][T22238] usb 3-1: device descriptor read/64, error -71 [ 1566.097085][T24637] loop2: detected capacity change from 0 to 7 [ 1566.106902][ T6003] Dev loop2: unable to read RDB block 7 [ 1566.116414][ T6003] loop2: unable to read partition table [ 1566.126971][ T6003] loop2: partition table beyond EOD, truncated [ 1566.138511][T24637] Dev loop2: unable to read RDB block 7 [ 1566.144603][T24637] loop2: unable to read partition table [ 1566.150503][T24637] loop2: partition table beyond EOD, truncated [ 1566.171457][T24637] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1566.332362][T22238] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1566.492944][T22238] usb 3-1: device descriptor read/64, error -71 [ 1566.612714][T22238] usb usb3-port1: attempt power cycle [ 1566.984533][T22238] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1567.043593][T22238] usb 3-1: device descriptor read/8, error -71 [ 1567.293327][T22238] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1567.487569][T22238] usb 3-1: device descriptor read/8, error -71 [ 1567.722498][T22238] usb usb3-port1: unable to enumerate USB device [ 1567.853931][T24668] netlink: 140236 bytes leftover after parsing attributes in process `syz.4.4618'. [ 1568.375214][T22233] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1568.537206][T22233] usb 6-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 1568.552483][T22233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.571232][T22233] usb 6-1: Product: syz [ 1568.582663][T22233] usb 6-1: Manufacturer: syz [ 1568.587316][T22233] usb 6-1: SerialNumber: syz [ 1568.643599][T22233] usb 6-1: config 0 descriptor?? [ 1568.667983][T24676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4623'. [ 1568.675444][T22233] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1568.760341][T24679] loop2: detected capacity change from 0 to 7 [ 1568.852995][T22233] pwc: Failed to set LED on/off time (-71) [ 1568.883984][T22233] pwc: send_video_command error -71 [ 1568.889250][T22233] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1568.909580][T22233] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1568.932282][T22233] usb 6-1: USB disconnect, device number 85 [ 1569.023412][T22209] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1569.383786][T24689] loop2: detected capacity change from 0 to 7 [ 1569.400407][T24692] netlink: 432 bytes leftover after parsing attributes in process `syz.7.4626'. [ 1569.409918][T24689] loop2: [ 1569.420353][T24689] loop2: partition table partially beyond EOD, truncated [ 1569.744095][T24703] netlink: 'syz.5.4631': attribute type 3 has an invalid length. [ 1569.769880][T24703] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4631'. [ 1569.845771][T24699] tipc: Started in network mode [ 1569.864709][T24699] tipc: Node identity ea8169c331c5, cluster identity 4711 [ 1569.901524][T24699] tipc: Enabled bearer , priority 0 [ 1569.941795][T24711] syzkaller0: entered promiscuous mode [ 1569.963684][T24711] syzkaller0: entered allmulticast mode [ 1570.089056][T24699] tipc: Resetting bearer [ 1570.098622][T24699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.141577][T24713] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4633'. [ 1570.232371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.372257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.412142][T22238] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1570.464977][T17815] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1570.512037][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.562171][T22238] usb 6-1: Using ep0 maxpacket: 16 [ 1570.574559][T22238] usb 6-1: config 132 has an invalid interface number: 4 but max is 0 [ 1570.584234][T22238] usb 6-1: config 132 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.595692][T22238] usb 6-1: config 132 has no interface number 0 [ 1570.605341][T22238] usb 6-1: config 132 interface 4 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 1570.616168][T22238] usb 6-1: config 132 interface 4 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 256 [ 1570.626504][T17815] usb 5-1: Using ep0 maxpacket: 32 [ 1570.641729][T17815] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1570.651133][T22238] usb 6-1: config 132 interface 4 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1570.664608][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.673084][T17815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.681638][T17815] usb 5-1: Product: syz [ 1570.687257][T17815] usb 5-1: Manufacturer: syz [ 1570.700984][T17815] usb 5-1: SerialNumber: syz [ 1570.709025][T22238] usb 6-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 1570.724971][T17815] usb 5-1: config 0 descriptor?? [ 1570.740233][T22238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.761573][T22238] usb 6-1: Product: syz [ 1570.766593][T22238] usb 6-1: Manufacturer: syz [ 1570.771328][T22238] usb 6-1: SerialNumber: syz [ 1570.781812][T24713] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1570.789646][T24713] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1570.802210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.865511][T24720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1570.872891][T24720] IPv6: NLM_F_CREATE should be set when creating new route [ 1570.881032][T24720] lo: entered allmulticast mode [ 1570.888646][T24720] tunl0: entered allmulticast mode [ 1570.897681][T24720] gre0: entered allmulticast mode [ 1570.915929][T24720] gretap0: entered allmulticast mode [ 1570.929408][T24720] erspan0: entered allmulticast mode [ 1570.944258][T24720] ip_vti0: entered allmulticast mode [ 1570.944594][T22222] tipc: Node number set to 3678693827 [ 1570.954458][T24720] ip6_vti0: entered allmulticast mode [ 1570.967502][T24720] sit0: entered allmulticast mode [ 1570.979045][T24720] ip6tnl0: entered allmulticast mode [ 1570.989092][T24720] ip6gre0: entered allmulticast mode [ 1571.002497][T24720] syz_tun: entered allmulticast mode [ 1571.027356][T24720] ip6gretap0: entered allmulticast mode [ 1571.031064][T22238] usb 6-1: USB disconnect, device number 86 [ 1571.057421][T24720] bridge0: entered allmulticast mode [ 1571.076916][T24720] vcan0: entered allmulticast mode [ 1571.082086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.097677][T24720] bond0: entered allmulticast mode [ 1571.103412][T24720] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1571.121407][T24720] team0: entered allmulticast mode [ 1571.140923][T24720] nlmon0: entered allmulticast mode [ 1571.150500][T24720] caif0: entered allmulticast mode [ 1571.157641][T24720] batadv0: entered allmulticast mode [ 1571.165205][T24716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4634'. [ 1571.168870][T24720] vxcan0: entered allmulticast mode [ 1571.183544][T17815] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1571.197768][T17815] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1571.198751][T24720] vxcan1: entered allmulticast mode [ 1571.216120][T24720] veth0: entered allmulticast mode [ 1571.225873][T24720] veth1: entered allmulticast mode [ 1571.237590][T24720] wg0: entered allmulticast mode [ 1571.248274][T24720] wg1: entered allmulticast mode [ 1571.260856][T24720] wg2: entered allmulticast mode [ 1571.270481][T24720] veth0_to_bridge: entered allmulticast mode [ 1571.281489][T24720] bridge_slave_0: entered allmulticast mode [ 1571.290586][T24720] veth1_to_bridge: entered allmulticast mode [ 1571.303955][T24720] bridge_slave_1: entered allmulticast mode [ 1571.311871][T24720] bond_slave_0: entered allmulticast mode [ 1571.318581][T24720] veth1_to_bond: entered allmulticast mode [ 1571.328047][T24720] bond_slave_1: entered allmulticast mode [ 1571.334666][T24720] veth0_to_team: entered allmulticast mode [ 1571.347468][T24720] team_slave_0: entered allmulticast mode [ 1571.353824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.363498][T24720] veth1_to_team: entered allmulticast mode [ 1571.372539][T24720] team_slave_1: entered allmulticast mode [ 1571.379588][T24720] veth0_to_batadv: entered allmulticast mode [ 1571.389634][T24720] batadv_slave_0: entered allmulticast mode [ 1571.403304][T24720] veth1_to_batadv: entered allmulticast mode [ 1571.413639][T24720] batadv_slave_1: entered allmulticast mode [ 1571.424007][T24720] xfrm0: entered allmulticast mode [ 1571.433202][T24720] veth0_to_hsr: entered allmulticast mode [ 1571.442268][T24720] hsr_slave_0: entered allmulticast mode [ 1571.450667][T24720] veth1_to_hsr: entered allmulticast mode [ 1571.460019][T24720] hsr_slave_1: entered allmulticast mode [ 1571.469811][T24720] hsr0: entered allmulticast mode [ 1571.479206][T24720] veth1_virt_wifi: entered allmulticast mode [ 1571.491259][T24720] veth0_virt_wifi: entered allmulticast mode [ 1571.500628][T24720] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1571.509847][T24720] veth1_vlan: entered allmulticast mode [ 1571.521447][T24720] veth0_vlan: entered allmulticast mode [ 1571.549025][T24720] vlan0: entered allmulticast mode [ 1571.563520][T24720] vlan1: entered allmulticast mode [ 1571.578237][T24720] macvlan0: entered allmulticast mode [ 1571.594371][T24720] macvlan1: entered allmulticast mode [ 1571.607486][T24720] ipvlan0: entered allmulticast mode [ 1571.619694][T24720] ipvlan1: entered allmulticast mode [ 1571.629359][T24720] veth1_macvtap: entered allmulticast mode [ 1571.648785][T24720] veth0_macvtap: entered allmulticast mode [ 1571.668412][T24720] macvtap0: entered allmulticast mode [ 1571.680197][T24720] macsec0: entered allmulticast mode [ 1571.702924][T24720] geneve0: entered allmulticast mode [ 1571.726486][T24720] geneve1: entered allmulticast mode [ 1571.750166][T24720] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1571.772837][T24720] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1571.781177][T24720] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 1571.789017][T24720] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 1571.789320][T24720] mac80211_hwsim hwsim30 wlan2: entered allmulticast mode [ 1571.789488][T24720] ip6gretap1: entered allmulticast mode [ 1571.789622][T24720] veth0_vlan.2: entered allmulticast mode [ 1571.790980][T24720] bridge1: left promiscuous mode [ 1571.791011][T24720] bridge1: entered allmulticast mode [ 1571.793213][T24720] bond1: entered allmulticast mode [ 1571.801576][T24720] bond2: entered allmulticast mode [ 1571.804774][T24720] veth2: entered allmulticast mode [ 1571.849963][T24720] veth3: entered allmulticast mode [ 1571.851230][T24720] bond3: entered allmulticast mode [ 1571.863362][T24720] sit1: entered allmulticast mode [ 1571.870488][T24720] macvlan2: entered allmulticast mode [ 1571.870639][T24720] veth4: entered allmulticast mode [ 1571.881848][T24720] veth5: entered allmulticast mode [ 1571.887166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.896723][T24720] bond4: entered allmulticast mode [ 1571.907410][T24720] ip6erspan0: entered allmulticast mode [ 1571.910187][T24720] bond5: entered allmulticast mode [ 1571.919471][T24720] gretap1: entered allmulticast mode [ 1571.925566][T24720] gretap1: left promiscuous mode [ 1571.926902][T24720] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 1571.939241][T24720] bond6: left promiscuous mode [ 1571.939267][T24720] bond6: entered allmulticast mode [ 1571.945713][T22209] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1571.979712][ T61] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.989115][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.989774][ T1152] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.989817][ T1152] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.014957][T17815] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1572.065573][T17815] usb 5-1: USB disconnect, device number 35 [ 1572.143833][T22209] usb 6-1: Using ep0 maxpacket: 16 [ 1572.151588][T22209] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1572.180181][T22209] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1572.205815][T22209] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1572.249240][T22209] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1572.277152][T22209] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1572.286892][T22209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.300403][T22209] usb 6-1: config 0 descriptor?? [ 1572.727999][T22209] usbhid 6-1:0.0: can't add hid device: -71 [ 1572.737673][T22209] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1572.753100][T22209] usb 6-1: USB disconnect, device number 87 [ 1572.766781][T24711] tipc: Resetting bearer [ 1572.800955][T24711] tipc: Disabling bearer [ 1573.782098][T17815] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1573.994522][T17815] usb 3-1: Using ep0 maxpacket: 32 [ 1574.051643][T17815] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1574.129041][T17815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.347889][T17815] usb 3-1: Product: syz [ 1574.388566][T17815] usb 3-1: Manufacturer: syz [ 1574.395642][T17815] usb 3-1: SerialNumber: syz [ 1574.409998][T17815] usb 3-1: config 0 descriptor?? [ 1574.835992][T24765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4648'. [ 1574.877352][T17815] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1574.895244][T17815] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1574.913086][T22211] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1574.974381][T17815] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1575.004812][T17815] usb 3-1: USB disconnect, device number 32 [ 1575.052283][T22211] usb 6-1: device descriptor read/64, error -71 [ 1575.302455][T22211] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 1575.432714][T22211] usb 6-1: device descriptor read/64, error -71 [ 1575.553112][T22211] usb usb6-port1: attempt power cycle [ 1575.637366][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4654'. [ 1575.722594][T22209] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1575.872531][T22209] usb 3-1: Using ep0 maxpacket: 32 [ 1575.888470][T22209] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1575.905509][T22209] usb 3-1: config 0 has no interface number 0 [ 1575.911879][T22209] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1575.912926][T22211] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1575.931362][T22209] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1575.943242][T22209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.959297][T22211] usb 6-1: device descriptor read/8, error -71 [ 1576.002819][T22209] usb 3-1: Product: syz [ 1576.007599][T22209] usb 3-1: Manufacturer: syz [ 1576.019008][T22209] usb 3-1: SerialNumber: syz [ 1576.064722][T22209] usb 3-1: config 0 descriptor?? [ 1576.081379][T22209] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1576.091394][T22209] em28xx 3-1:0.89: Video interface 89 found: bulk [ 1576.202229][T17815] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1576.253916][T22211] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 1576.298700][T22211] usb 6-1: device descriptor read/8, error -71 [ 1576.394549][T17815] usb 5-1: Using ep0 maxpacket: 8 [ 1576.411480][T17815] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1576.422536][T22211] usb usb6-port1: unable to enumerate USB device [ 1576.429170][T17815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.451128][T17815] usb 5-1: config 0 descriptor?? [ 1576.480172][T24801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.490388][T24801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.593517][T22209] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1576.675038][T22209] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1576.683595][T22209] em28xx 3-1:0.89: board has no eeprom [ 1576.735354][T24806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4657'. [ 1576.745211][T22209] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1576.753318][T22209] em28xx 3-1:0.89: analog set to bulk mode. [ 1576.759539][T22211] em28xx 3-1:0.89: Registering V4L2 extension [ 1576.776411][T22209] usb 3-1: USB disconnect, device number 33 [ 1576.808421][T22209] em28xx 3-1:0.89: Disconnecting em28xx [ 1576.854094][T22211] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1576.861524][T22211] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1576.869610][T22211] em28xx 3-1:0.89: No AC97 audio processor [ 1576.882732][T22211] usb 3-1: Decoder not found [ 1576.887556][T22211] em28xx 3-1:0.89: failed to create media graph [ 1576.896902][T22211] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1576.915468][T22211] em28xx 3-1:0.89: Registering snapshot button... [ 1576.930471][T22211] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input86 [ 1576.949401][T22211] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1576.961636][T22209] em28xx 3-1:0.89: Closing input extension [ 1576.969885][T22209] em28xx 3-1:0.89: Deregistering snapshot button [ 1577.004042][T22209] em28xx 3-1:0.89: Freeing device [ 1577.322195][T22209] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1577.472672][T22209] usb 3-1: Using ep0 maxpacket: 32 [ 1577.487941][T22209] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1577.530044][T22209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.539516][T22209] usb 3-1: Product: syz [ 1577.571719][T22209] usb 3-1: Manufacturer: syz [ 1577.576613][T22209] usb 3-1: SerialNumber: syz [ 1577.606258][T22209] usb 3-1: config 0 descriptor?? [ 1577.922681][T22211] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1578.066590][T24805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4661'. [ 1578.087599][T22211] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1578.098852][T22209] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1578.107970][T22209] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1578.116772][T22211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.130188][T22211] usb 6-1: Product: syz [ 1578.147565][T22211] usb 6-1: Manufacturer: syz [ 1578.154285][T22211] usb 6-1: SerialNumber: syz [ 1578.163062][T22211] usb 6-1: config 0 descriptor?? [ 1578.202758][T22209] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1578.222663][T22209] usb 3-1: USB disconnect, device number 34 [ 1578.583536][T22211] usb 6-1: f81604_read: reg: 100f failed: -EPIPE [ 1578.604917][T22211] usb 6-1: f81604_read: reg: 200f failed: -EPIPE [ 1578.690795][ T5528] usb 6-1: f81604_read: reg: 100f failed: -EPIPE [ 1578.725341][ T5528] usb 6-1: f81604_read: reg: 200f failed: -EPIPE [ 1578.778976][T22222] usb 6-1: USB disconnect, device number 92 [ 1578.795988][T22222] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1578.896478][T22222] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1579.000956][T17815] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1579.025249][T24825] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4665'. [ 1579.030549][T17815] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1579.089205][T17815] usb 5-1: USB disconnect, device number 36 [ 1612.746797][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.753507][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1660.102363][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 1660.110242][ T31] Not tainted syzkaller #0 [ 1660.115656][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1660.124643][ T31] task:kworker/0:1 state:D stack:19784 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1660.138205][ T31] Workqueue: events rfkill_op_handler [ 1660.144369][ T31] Call Trace: [ 1660.147778][ T31] [ 1660.150756][ T31] __schedule+0x1798/0x4cc0 [ 1660.155846][ T31] ? __pfx___schedule+0x10/0x10 [ 1660.160792][ T31] ? schedule+0x91/0x360 [ 1660.165393][ T31] schedule+0x165/0x360 [ 1660.169639][ T31] schedule_preempt_disabled+0x13/0x30 [ 1660.175585][ T31] __mutex_lock+0x7e6/0x1350 [ 1660.180242][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1660.185839][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1660.191190][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1660.197441][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1660.203509][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1660.209636][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1660.219159][ T31] ? kobject_uevent_env+0x36b/0x8c0 [ 1660.226184][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1660.238393][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1660.246430][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1660.258730][ T31] rfkill_set_block+0x1d2/0x440 [ 1660.268958][ T31] rfkill_epo+0x7e/0x180 [ 1660.277081][ T31] rfkill_op_handler+0x84/0x240 [ 1660.284576][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1660.290456][ T31] process_scheduled_works+0xae1/0x17b0 [ 1660.302161][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1660.308253][ T31] worker_thread+0x8a0/0xda0 [ 1660.313709][ T31] kthread+0x70e/0x8a0 [ 1660.317855][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1660.323390][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.328031][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1660.333372][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1660.338607][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.343397][ T31] ret_from_fork+0x436/0x7d0 [ 1660.348114][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1660.353343][ T31] ? __switch_to_asm+0x39/0x70 [ 1660.358180][ T31] ? __switch_to_asm+0x33/0x70 [ 1660.363138][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.367859][ T31] ret_from_fork_asm+0x1a/0x30 [ 1660.372749][ T31] [ 1660.375992][ T31] INFO: task kworker/0:17:22213 blocked for more than 143 seconds. [ 1660.384057][ T31] Not tainted syzkaller #0 [ 1660.389019][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1660.397942][ T31] task:kworker/0:17 state:D stack:22232 pid:22213 tgid:22213 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1660.410129][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1660.417275][ T31] Call Trace: [ 1660.420599][ T31] [ 1660.423657][ T31] __schedule+0x1798/0x4cc0 [ 1660.428274][ T31] ? __pfx___schedule+0x10/0x10 [ 1660.433510][ T31] ? schedule+0x91/0x360 [ 1660.437811][ T31] schedule+0x165/0x360 [ 1660.442384][ T31] schedule_preempt_disabled+0x13/0x30 [ 1660.447890][ T31] __mutex_lock+0x7e6/0x1350 [ 1660.452931][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1660.458001][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1660.464599][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1660.469672][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1660.475730][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1660.481493][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1660.487657][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1660.493502][ T31] process_scheduled_works+0xae1/0x17b0 [ 1660.499214][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1660.505328][ T31] worker_thread+0x8a0/0xda0 [ 1660.510049][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1660.516742][ T31] ? __kthread_parkme+0x7b/0x200 [ 1660.521701][ T31] kthread+0x70e/0x8a0 [ 1660.525994][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1660.531199][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.535905][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1660.541159][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1660.546595][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.551230][ T31] ret_from_fork+0x436/0x7d0 [ 1660.555949][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1660.561117][ T31] ? __switch_to_asm+0x39/0x70 [ 1660.566442][ T31] ? __switch_to_asm+0x33/0x70 [ 1660.571266][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.576221][ T31] ret_from_fork_asm+0x1a/0x30 [ 1660.581080][ T31] [ 1660.584645][ T31] INFO: task syz.3.4418:23875 blocked for more than 143 seconds. [ 1660.592680][ T31] Not tainted syzkaller #0 [ 1660.597664][ T31] Blocked by coredump. [ 1660.602576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1660.611363][ T31] task:syz.3.4418 state:D stack:24536 pid:23875 tgid:23866 ppid:17509 task_flags:0x40044c flags:0x00004006 [ 1660.623771][ T31] Call Trace: [ 1660.627097][ T31] [ 1660.630080][ T31] __schedule+0x1798/0x4cc0 [ 1660.636211][ T31] ? __pfx___schedule+0x10/0x10 [ 1660.641139][ T31] ? schedule+0x91/0x360 [ 1660.645895][ T31] schedule+0x165/0x360 [ 1660.650106][ T31] schedule_preempt_disabled+0x13/0x30 [ 1660.655931][ T31] __mutex_lock+0x7e6/0x1350 [ 1660.660570][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1660.665710][ T31] ? rfkill_unregister+0xc8/0x220 [ 1660.670774][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1660.676165][ T31] ? __pfx_device_del+0x10/0x10 [ 1660.681087][ T31] rfkill_unregister+0xc8/0x220 [ 1660.686299][ T31] nfc_unregister_device+0x96/0x2a0 [ 1660.691553][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1660.697468][ T31] virtual_ncidev_close+0x56/0x90 [ 1660.702634][ T31] __fput+0x449/0xa70 [ 1660.706681][ T31] task_work_run+0x1d1/0x260 [ 1660.711318][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1660.716956][ T31] do_exit+0x6b5/0x2300 [ 1660.721195][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1660.729687][ T31] ? __pfx_do_exit+0x10/0x10 [ 1660.737128][ T31] ? cgroup_freezing+0x20/0x350 [ 1660.742869][ T31] do_group_exit+0x21c/0x2d0 [ 1660.747528][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1660.755664][ T31] get_signal+0x1286/0x1340 [ 1660.760255][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1660.766338][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1660.771695][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1660.778345][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1660.784347][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1660.789826][ T31] do_syscall_64+0x2bd/0x3b0 [ 1660.794830][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1660.800067][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.806852][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1660.811598][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.817616][ T31] RIP: 0033:0x7f227498eba9 [ 1660.822284][ T31] RSP: 002b:00007f2275856038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1660.830741][ T31] RAX: 0000000000010106 RBX: 00007f2274bd6090 RCX: 00007f227498eba9 [ 1660.839394][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1660.847676][ T31] RBP: 00007f2274a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1660.855801][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1660.864335][ T31] R13: 00007f2274bd6128 R14: 00007f2274bd6090 R15: 00007f2274cffa28 [ 1660.872723][ T31] [ 1660.875802][ T31] [ 1660.875802][ T31] Showing all locks held in the system: [ 1660.883722][ T31] 4 locks held by kworker/0:1/10: [ 1660.888775][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1660.900100][ T31] #1: ffffc900000f7bc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1660.911280][ T31] #2: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 1660.921302][ T31] #3: ffff88802935e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1660.931639][ T31] 1 lock held by khungtaskd/31: [ 1660.936771][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1660.947155][ T31] 7 locks held by kworker/u8:3/49: [ 1660.952655][ T31] 2 locks held by getty/5620: [ 1660.957469][ T31] #0: ffff88814d0f40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1660.967633][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1660.978027][ T31] 1 lock held by syz-executor/17509: [ 1660.984434][ T31] #0: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1660.995005][ T31] 3 locks held by kworker/0:17/22213: [ 1661.000410][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1661.012079][ T31] #1: ffffc90004677bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1661.026127][ T31] #2: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1661.037677][ T31] 2 locks held by syz.3.4418/23875: [ 1661.042999][ T31] #0: ffff88802935e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1661.052938][ T31] #1: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1661.063464][ T31] 2 locks held by syz-executor/24058: [ 1661.068961][ T31] #0: ffff888058a81918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 1661.079312][ T31] #1: ffffffff8f813c88 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1661.089457][ T31] [ 1661.091812][ T31] ============================================= [ 1661.091812][ T31] [ 1661.101234][ T31] NMI backtrace for cpu 1 [ 1661.101255][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1661.101281][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1661.101295][ T31] Call Trace: [ 1661.101305][ T31] [ 1661.101315][ T31] dump_stack_lvl+0x189/0x250 [ 1661.101349][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1661.101377][ T31] ? __pfx__printk+0x10/0x10 [ 1661.101423][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1661.101461][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1661.101493][ T31] ? __pfx__printk+0x10/0x10 [ 1661.101525][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1661.101561][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1661.101596][ T31] watchdog+0xf93/0xfe0 [ 1661.101632][ T31] ? watchdog+0x1de/0xfe0 [ 1661.101670][ T31] kthread+0x70e/0x8a0 [ 1661.101702][ T31] ? __pfx_watchdog+0x10/0x10 [ 1661.101732][ T31] ? __pfx_kthread+0x10/0x10 [ 1661.101762][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1661.101797][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1661.101818][ T31] ? __pfx_kthread+0x10/0x10 [ 1661.101847][ T31] ret_from_fork+0x436/0x7d0 [ 1661.101877][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1661.101905][ T31] ? __switch_to_asm+0x39/0x70 [ 1661.101933][ T31] ? __switch_to_asm+0x33/0x70 [ 1661.101960][ T31] ? __pfx_kthread+0x10/0x10 [ 1661.101988][ T31] ret_from_fork_asm+0x1a/0x30 [ 1661.102034][ T31] [ 1661.242257][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1661.247520][ C0] NMI backtrace for cpu 0 [ 1661.247540][ C0] CPU: 0 UID: 0 PID: 61 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 1661.247563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1661.247577][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1661.247603][ C0] RIP: 0010:chacha_permute+0x1/0xf00 [ 1661.247631][ C0] Code: 95 72 59 fd e9 cf f8 ff ff e8 6b 86 b0 06 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 48 81 ec 38 01 00 00 89 f5 48 89 7c 24 [ 1661.247649][ C0] RSP: 0018:ffffc9000212f5b0 EFLAGS: 00000097 [ 1661.247665][ C0] RAX: ffffc9000212f5c0 RBX: ffffc9000212f680 RCX: ffffffff84c9b459 [ 1661.247680][ C0] RDX: 00000000ffffffff RSI: 0000000000000014 RDI: ffffc9000212f5c0 [ 1661.247693][ C0] RBP: 0000000000000014 R08: d9e5eebc7088b18e R09: 3814e55cf6fd3855 [ 1661.247707][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 1661.247720][ C0] R13: ffffc9000212f680 R14: ffffc9000212f860 R15: ffffc9000212f5c0 [ 1661.247735][ C0] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 1661.247751][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1661.247764][ C0] CR2: 00005572d0085168 CR3: 000000000df36000 CR4: 00000000003526f0 [ 1661.247781][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 1661.247793][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1661.247805][ C0] Call Trace: [ 1661.247813][ C0] [ 1661.247822][ C0] chacha_block_generic+0x53/0xc80 [ 1661.247853][ C0] crng_fast_key_erasure+0x14f/0x240 [ 1661.247881][ C0] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 1661.247917][ C0] crng_make_state+0x255/0x700 [ 1661.247942][ C0] ? crng_make_state+0x13a/0x700 [ 1661.247967][ C0] ? __pfx_crng_make_state+0x10/0x10 [ 1661.247999][ C0] _get_random_bytes+0xd5/0x210 [ 1661.248022][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 1661.248056][ C0] ? skb_put+0x11b/0x210 [ 1661.248080][ C0] nsim_dev_trap_report_work+0x38d/0xb80 [ 1661.248109][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1661.248130][ C0] process_scheduled_works+0xae1/0x17b0 [ 1661.248164][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1661.248193][ C0] worker_thread+0x8a0/0xda0 [ 1661.248226][ C0] kthread+0x70e/0x8a0 [ 1661.248251][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1661.248270][ C0] ? __pfx_kthread+0x10/0x10 [ 1661.248294][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1661.248324][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1661.248342][ C0] ? __pfx_kthread+0x10/0x10 [ 1661.248366][ C0] ret_from_fork+0x436/0x7d0 [ 1661.248387][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1661.248417][ C0] ? __switch_to_asm+0x39/0x70 [ 1661.248442][ C0] ? __switch_to_asm+0x33/0x70 [ 1661.248466][ C0] ? __pfx_kthread+0x10/0x10 [ 1661.248490][ C0] ret_from_fork_asm+0x1a/0x30 [ 1661.248524][ C0] [ 1661.250448][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1661.538061][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1661.547188][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1661.557249][ T31] Call Trace: [ 1661.560532][ T31] [ 1661.563465][ T31] dump_stack_lvl+0x99/0x250 [ 1661.568064][ T31] ? __asan_memcpy+0x40/0x70 [ 1661.572745][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1661.577986][ T31] ? __pfx__printk+0x10/0x10 [ 1661.582644][ T31] vpanic+0x281/0x750 [ 1661.586652][ T31] ? __pfx_vpanic+0x10/0x10 [ 1661.591171][ T31] ? preempt_schedule+0xae/0xc0 [ 1661.596063][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1661.601533][ T31] panic+0xb9/0xc0 [ 1661.605259][ T31] ? __pfx_panic+0x10/0x10 [ 1661.609683][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1661.615160][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1661.621347][ T31] watchdog+0xfd2/0xfe0 [ 1661.625539][ T31] ? watchdog+0x1de/0xfe0 [ 1661.629896][ T31] kthread+0x70e/0x8a0 [ 1661.634082][ T31] ? __pfx_watchdog+0x10/0x10 [ 1661.638787][ T31] ? __pfx_kthread+0x10/0x10 [ 1661.643392][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1661.648612][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1661.653819][ T31] ? __pfx_kthread+0x10/0x10 [ 1661.658431][ T31] ret_from_fork+0x436/0x7d0 [ 1661.663034][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1661.668178][ T31] ? __switch_to_asm+0x39/0x70 [ 1661.672961][ T31] ? __switch_to_asm+0x33/0x70 [ 1661.677905][ T31] ? __pfx_kthread+0x10/0x10 [ 1661.682564][ T31] ret_from_fork_asm+0x1a/0x30 [ 1661.687379][ T31] [ 1661.690950][ T31] Kernel Offset: disabled [ 1661.695303][ T31] Rebooting in 86400 seconds..