last executing test programs: 15.867484252s ago: executing program 4 (id=4078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0xfffffffffffffffd, 0x1000, 0x9, 0x5}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) 15.085456888s ago: executing program 2 (id=4080): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r2 = getpid() ptrace$setopts(0xc60a, r2, 0x99a, 0x40) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r4 = epoll_create1(0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x380, 0x0, 0x0, 0xffffffff, 0x0, 0x2d8, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x98, 0xd0, 0x48, {}, [@common=@unspec=@addrtype1={{0x28}, {0x91a, 0x0, 0xc}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 13.208111735s ago: executing program 4 (id=4083): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)="1075bd1569185aa6a18558be87bda07bd6752937c3a16469dd608c378207a1e90180e04cd0159729bf114030f5c6fc6cead96d26a97c82e52be0ecf6f934869f77377a09adea9953a36f7a7680e038a2eed6907101ca34dd980d0a0e29336bfde4f42e05ebd9b7ac4c9fedcd0c55869a80b17e", 0x73}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x10000000000, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)={'#! ', './file0', [{0x20, '.^[,**-'}, {0x20, '#! '}, {0x20, 'cpu.stat\x00'}, {0x20, '$[(\xcd'}, {0x20, '/^^'}]}, 0x2a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2715, 0x0, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) syz_clone(0x8209311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000200)) 13.20373057s ago: executing program 1 (id=4084): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = inotify_init() chdir(&(0x7f0000000340)='./cgroup\x00') inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) memfd_create(0x0, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000640), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000240)={0xd, 0x1, 0x1, "005a03f073e22f00000000002000fffe00009a0300000000000000000400", 0x20363159}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x10004, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) 12.902724677s ago: executing program 2 (id=4085): fsopen(0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) memfd_create(0x0, 0x1) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r7}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x1249, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 12.079921503s ago: executing program 0 (id=4086): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400f80, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r4, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ocfs2\x00', 0x0) syz_io_uring_setup(0x4dae, &(0x7f0000000200)={0x0, 0x7529, 0x4, 0x1, 0x280}, &(0x7f00000002c0), 0x0) r5 = syz_io_uring_setup(0x738c, &(0x7f0000000140)={0x0, 0xfad6, 0x10000, 0x0, 0x100}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = dup3(r2, r5, 0x80000) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000000)="3648956ed4c36ae5dafa2c9bfb31") socket(0x1d, 0x2, 0x6) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) write$binfmt_script(r1, 0x0, 0xff11) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000100)={0x20000014}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 11.729655955s ago: executing program 4 (id=4087): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x48800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getflags(r2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe12a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa32, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usbip_server_init(0xf66eabed157452f) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) fanotify_init(0x200, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) r7 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1) 11.504576245s ago: executing program 3 (id=4088): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x2000000, {0x7a, 0x0, 0x0, 0x0, 0x88}}, 0x20}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_io_uring_setup(0x24f7, 0x0, &(0x7f0000019080), 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000340)={'virt_wifi0\x00', 0x400}) close(0x3) 10.210604896s ago: executing program 2 (id=4089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000180001000000200000000000021400000000000a0000000005001b0002000000"], 0x24}}, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30001000000900020073797a310000000014000380080001400000000008040000000000004800000016160101000b008000000000010000000900020073797a3100000000090001ad8e3abd2d9dbbfd001c000380180003801400010070676d36726567310000000000000000140000001000010000000000000000000000000a33dff2cf"], 0xd0}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x42}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket(0x400000000010, 0x80000, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x81&\xf5\t\x00\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xa9J3\x18\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V\x01\x00\x00\x00\x00\x00\x00\x00\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOe+\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\x99I\x9a9+r\x91\x06\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx', 0x3) write$binfmt_elf64(r7, &(0x7f00000002c0)=ANY=[], 0x78) sendfile(r6, r7, &(0x7f00000001c0), 0x8) fcntl$addseals(r7, 0x409, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000001900)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 9.770811377s ago: executing program 1 (id=4090): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x7, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) unshare(0x2000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) 9.718853436s ago: executing program 3 (id=4091): r0 = fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x103d0411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x5a7d, 0x2, 0x10024, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x2, 0x5, 0x4, 0xc, @void, @value, @value=r4}, 0x50) r6 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000340)="b8000005000000003b974f58bd2b", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, 0x0, &(0x7f00000004c0)}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x4074) clock_settime(0xfffffffb, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000001000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32], 0x48) ftruncate(r0, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400040c0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r8}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000017c0), 0xffffffffffffffff) 9.448656234s ago: executing program 0 (id=4092): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x1000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) open(0x0, 0x108843, 0x98) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r8, 0xc01064c2, &(0x7f0000000080)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x20008841}, 0x0) getdents64(r0, &(0x7f0000000000)=""/48, 0x30) 7.871767067s ago: executing program 4 (id=4093): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x6dda87c55e1b1fc, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4b0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0xfff2, 0x12}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x484, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x40, 0x8d, 0x80, 0xb7eb}, {0x9, 0x83, 0x8a, 0x8}, {0x6aa, 0x42, 0x1, 0x8}, {0x7, 0x6, 0xe, 0x3}, {0x4, 0x8, 0x4, 0xfbc}, {0x4, 0xe, 0x3, 0x3}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x343, 0xe9fb, 0x1000005, 0x5b91, 0x4, 0x1, 0x800, 0x5, 0x3, 0x3, 0x8000, 0x4, 0x6, 0x3, 0x0, 0x1ff, 0x77, 0x43, 0x4, 0x2, 0x5d, 0x8, 0x8001, 0x4, 0x3, 0x0, 0xfffff989, 0x8, 0x6, 0x71dbd584, 0x2, 0x7, 0xd8, 0x9, 0x4, 0x3, 0xfffffffe, 0x5, 0x9a, 0x1, 0x3, 0x80000001, 0x1, 0x2, 0xfffffffb, 0x7fffffff, 0x2, 0x8, 0x8, 0x10, 0x10, 0x1, 0x2, 0x4, 0x8, 0x7fff, 0x5, 0x0, 0x0, 0x6, 0x9, 0x2, 0x0, 0x3, 0x7, 0x91400, 0x8b9d, 0xff, 0x80, 0xfffffffa, 0xb, 0x8000, 0xb26f, 0x6, 0x4c, 0xff, 0x7d, 0x36, 0x81, 0x80000100, 0xfc9, 0x6, 0xfffffff0, 0x9, 0x5, 0x9, 0x80008010, 0xe, 0x2, 0x80000000, 0xff, 0x3, 0x7, 0x1, 0xa6dd, 0x7, 0xfffffff9, 0x8, 0x82, 0xff, 0x9, 0x3, 0xbdb, 0x1ff, 0x1, 0xc, 0x40, 0xffff8001, 0xffff, 0x8, 0x7fff, 0x402, 0x2, 0x2, 0x7, 0x2, 0xbce, 0x8, 0xd, 0x80, 0x4, 0xacda, 0x4, 0x3542, 0x7, 0xf79, 0x7, 0x3, 0x6, 0x0, 0x7, 0x6, 0x5, 0x100, 0x1, 0x2, 0x80000001, 0x200, 0x1, 0x9, 0x4, 0x0, 0xe200000, 0x6, 0x80000001, 0xaf6, 0x3, 0x10001, 0xe47b, 0x8, 0x3, 0x4, 0x4, 0x5, 0x0, 0x985, 0x5, 0xd, 0xf4d, 0x7, 0x8001, 0x1c4fd68f, 0x1, 0x5, 0x7fff, 0x0, 0xc2, 0x0, 0x5, 0x81, 0x3, 0x1c37, 0x3, 0xab, 0x2, 0x3, 0xb171, 0x8, 0xf, 0x2cb6, 0x6, 0x2, 0x2, 0x70, 0x80, 0x2, 0xfd, 0x5, 0xb417, 0x2, 0x400, 0x6d, 0xb, 0x401, 0x4, 0x2223, 0x2, 0x200, 0x1, 0x4, 0x1, 0x1, 0xab0, 0xd, 0x80, 0x3ff, 0xcdf6, 0x7, 0x7, 0x7, 0xfffffffa, 0xc54, 0xfffffd18, 0x9, 0x7, 0x7, 0x2, 0x3, 0x9, 0x6, 0x7fff, 0x4, 0xffff, 0x1, 0x381, 0x400, 0x4, 0x274, 0x8001, 0x5, 0x4, 0x5, 0x8, 0x1, 0x8000, 0x2, 0xc9a6, 0xfff, 0x0, 0x4, 0x9, 0x4a78, 0xdf5, 0x5, 0xfffffffe, 0x5, 0x7ff, 0x6, 0xdb, 0x4d, 0x19, 0x7ff, 0x2, 0x5, 0xff6d, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x1000, 0x4, 0x3, {0xb, 0x2, 0x200, 0x4684, 0x80, 0xfffffffe}, {0x0, 0x2, 0x4, 0x1ff, 0x7b}, 0xfb, 0x3, 0x5}}]}]}}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x1}, 0x800) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendfile(r7, r7, &(0x7f0000000000)=0x7fffffffffffffff, 0x200) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000060a0904000000000000000002000000200004801c0001800a00010072616e67650000000c00028008000140000000080900010073797a30000000000900020073797a32000000bd1400000011000100f2000000000000000000000a"], 0x74}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x3ff, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r10, r11, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3}}, 0x50) r12 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) 7.740560319s ago: executing program 0 (id=4094): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0xfffffffffffffffd, 0x1000, 0x9, 0x5}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) 7.661790155s ago: executing program 3 (id=4095): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) lseek(0xffffffffffffffff, 0x401, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r2) 5.940683758s ago: executing program 2 (id=4096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x6dda87c55e1b1fc, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4b0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x12}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x484, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x40, 0x8d, 0x80, 0xb7eb}, {0x9, 0x83, 0x8a, 0x8}, {0x6aa, 0x42, 0x1, 0x8}, {0x7, 0x6, 0xe, 0x3}, {0x4, 0x8, 0x4, 0xfbc}, {0x4, 0xe, 0x3, 0x3}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x343, 0xe9fb, 0x1000005, 0x5b91, 0x4, 0x1, 0x800, 0x5, 0x3, 0x3, 0x8000, 0x4, 0x6, 0x3, 0x0, 0x1ff, 0x77, 0x43, 0x4, 0x2, 0x5d, 0x8, 0x8001, 0x4, 0x3, 0x0, 0xfffff989, 0x8, 0x6, 0x71dbd584, 0x2, 0x7, 0xd8, 0x9, 0x4, 0x3, 0xfffffffe, 0x5, 0x9a, 0x1, 0x3, 0x80000001, 0x1, 0x2, 0xfffffffb, 0x7fffffff, 0x2, 0x8, 0x8, 0x10, 0x10, 0x1, 0x2, 0x4, 0x8, 0x7fff, 0x5, 0x0, 0x0, 0x6, 0x9, 0x2, 0x0, 0x3, 0x7, 0x91400, 0x8b9d, 0xff, 0x80, 0xfffffffa, 0xb, 0x8000, 0xb26f, 0x6, 0x4c, 0xff, 0x7d, 0x36, 0x81, 0x80000100, 0xfc9, 0x6, 0xfffffff0, 0x9, 0x5, 0x9, 0x80008010, 0xe, 0x2, 0x80000000, 0xff, 0x3, 0x7, 0x1, 0xa6dd, 0x7, 0xfffffff9, 0x8, 0x82, 0xff, 0x9, 0x3, 0xbdb, 0x1ff, 0x1, 0xc, 0x40, 0xffff8001, 0xffff, 0x8, 0x7fff, 0x402, 0x2, 0x2, 0x7, 0x2, 0xbce, 0x8, 0xd, 0x80, 0x4, 0xacda, 0x4, 0x3542, 0x7, 0xf79, 0x7, 0x3, 0x6, 0x0, 0x7, 0x6, 0x5, 0x100, 0x1, 0x2, 0x80000001, 0x200, 0x1, 0x9, 0x4, 0x0, 0xe200000, 0x6, 0x80000001, 0xaf6, 0x3, 0x10001, 0xe47b, 0x8, 0x3, 0x4, 0x4, 0x5, 0x0, 0x985, 0x5, 0xd, 0xf4d, 0x7, 0x8001, 0x1c4fd68f, 0x1, 0x5, 0x7fff, 0x0, 0xc2, 0x0, 0x5, 0x81, 0x3, 0x1c37, 0x3, 0xab, 0x2, 0x3, 0xb171, 0x8, 0xf, 0x2cb6, 0x6, 0x2, 0x2, 0x70, 0x80, 0x2, 0xfd, 0x5, 0xb417, 0x2, 0x400, 0x6d, 0xb, 0x401, 0x4, 0x2223, 0x2, 0x200, 0x1, 0x4, 0x1, 0x1, 0xab0, 0xd, 0x80, 0x3ff, 0xcdf6, 0x7, 0x7, 0x7, 0xfffffffa, 0xc54, 0xfffffd18, 0x9, 0x7, 0x7, 0x2, 0x3, 0x9, 0x6, 0x7fff, 0x4, 0xffff, 0x1, 0x381, 0x400, 0x4, 0x274, 0x8001, 0x5, 0x4, 0x5, 0x8, 0x1, 0x8000, 0x2, 0xc9a6, 0xfff, 0x0, 0x4, 0x9, 0x4a78, 0xdf5, 0x5, 0xfffffffe, 0x5, 0x7ff, 0x6, 0xdb, 0x4d, 0x19, 0x7ff, 0x2, 0x5, 0xff6d, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x1000, 0x4, 0x3, {0xb, 0x2, 0x200, 0x4684, 0x80, 0xfffffffe}, {0x0, 0x2, 0x4, 0x1ff, 0x7b}, 0xfb, 0x3, 0x5}}]}]}}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x1}, 0x800) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendfile(r7, r7, &(0x7f0000000000)=0x7fffffffffffffff, 0x200) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000060a0904000000000000000002000000200004801c0001800a00010072616e67650000000c00028008000140000000080900010073797a30000000000900020073797a32000000bd1400000011000100f2000000000000000000000a"], 0x74}}, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x3ff, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r10, r11, 0xc000, '\x00', 0x5, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x3}}, 0x50) r12 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) 5.73845095s ago: executing program 1 (id=4097): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)="1075bd1569185aa6a18558be87bda07bd6752937c3a16469dd608c378207a1e90180e04cd0159729bf114030f5c6fc6cead96d26a97c82e52be0ecf6f934869f77377a09adea9953a36f7a7680e038a2eed6907101ca34dd980d0a0e29336bfde4f42e05ebd9b7ac4c9fedcd0c55869a80b17e", 0x73}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x10000000000, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)={'#! ', './file0', [{0x20, '.^[,**-'}, {0x20, '#! '}, {0x20, 'cpu.stat\x00'}, {0x20, '$[(\xcd'}, {0x20, '/^^'}]}, 0x2a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2715, 0x0, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) syz_clone(0x8209311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000200)) 5.713225544s ago: executing program 3 (id=4098): mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 5.532281663s ago: executing program 4 (id=4099): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000200)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) close_range(r2, 0xffffffffffffffff, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xbfff0015) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0xa00, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601010000000000000000000020000500010007000000"], 0x1c}}, 0x0) 4.676976916s ago: executing program 0 (id=4100): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400f80, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r4, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ocfs2\x00', 0x0) syz_io_uring_setup(0x4dae, &(0x7f0000000200)={0x0, 0x7529, 0x4, 0x1, 0x280}, &(0x7f00000002c0), 0x0) r5 = syz_io_uring_setup(0x738c, &(0x7f0000000140)={0x0, 0xfad6, 0x10000, 0x0, 0x100}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = dup3(r2, r5, 0x80000) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000000)="3648956ed4c36ae5dafa2c9bfb31") socket(0x1d, 0x2, 0x6) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) write$binfmt_script(r1, 0x0, 0xff11) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000100)={0x20000014}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 3.902314441s ago: executing program 3 (id=4101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x120}, {0x0, 0x0, 0x0, 0x0, 0x800000000}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000f9cc80aacd2aaa6312ff00"], 0x10}}, 0x2044800) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000120001"], 0xb8}}, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x1d961}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010100}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}}, 0x4080) setsockopt$inet6_tcp_int(r6, 0x6, 0x8, &(0x7f0000000300)=0x1000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000140)=0x2, 0x4) 3.761512301s ago: executing program 1 (id=4102): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400f80, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r4, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ocfs2\x00', 0x0) syz_io_uring_setup(0x4dae, &(0x7f0000000200)={0x0, 0x7529, 0x4, 0x1, 0x280}, &(0x7f00000002c0), 0x0) r5 = syz_io_uring_setup(0x738c, &(0x7f0000000140)={0x0, 0xfad6, 0x10000, 0x0, 0x100}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = dup3(r2, r5, 0x80000) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000000)="3648956ed4c36ae5dafa2c9bfb31") socket(0x1d, 0x2, 0x6) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) write$binfmt_script(r1, 0x0, 0xff11) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000100)={0x20000014}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000300)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 3.271104126s ago: executing program 0 (id=4103): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0xdf688f83eaf560ab, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x0, 0x0, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000080)=@x86={0x54, 0x0, 0x0, 0x0, 0x8, 0x9, 0xf7, 0x43, 0x10, 0xbb, 0x93, 0x78, 0x0, 0x0, 0x7, 0x40, 0x5, 0xfd, 0x17, '\x00', 0x0, 0xb}) 2.65402104s ago: executing program 2 (id=4104): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) r5 = socket$key(0xf, 0x3, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x42342, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r7, r6, &(0x7f0000002700)=0x1, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1, 0x400000000000000}, 0x0) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0x1000000}) r8 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r8, &(0x7f0000000a40)=[{&(0x7f0000000680)='E', 0x1}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = getpid() sched_setattr(r11, &(0x7f0000000140)={0x38, 0x6, 0x1000002e, 0x5, 0x0, 0x1, 0x5, 0x80, 0x3, 0x3}, 0x0) 2.018784661s ago: executing program 3 (id=4105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc7, 0x5) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000180)={0x2, 0xb2}, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r7 = dup2(r6, r6) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r10, &(0x7f0000001740)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) 1.964720257s ago: executing program 1 (id=4106): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x3) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) 1.095780478s ago: executing program 4 (id=4107): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000004b3cf47f52b927545cc1a8700000000000000000200e5ff28000480240001800b00010072656a656374000014000280080001400000000205000200090000000900010073597a30000000000900020073797a320000000014000000110001000000000470f51c000000000a0000000000000000000000000006da22dd73cc798fbf6a09c43edd1cba45837d897224c40f9a53f42f4dac551ee7341ed871d2ac3bf31f1ca1c8e561db3cf037ab21c4d17663e67d1f81d6354df30be0282e8c965db2c11c583d828988689c192fb633acf03372d7eb372b6e3e16493894a32681945e082ef7593a3608870d4b2d7c05dd152a9545cf5c98e9f6f7cdf9ae4c863e6f2230fa39a3ef684733115eb8ef454a7622a4ebb83eb7e22b9b0dd0b63bcf875fc47a2492ab833b61f7af4d809982a58c52192eeaf4d10111a59a552114b4cc69"], 0x7c}}, 0x44) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f00000014c0)=[{0x4, 0x4a00, 0x0, 0x0}, {0x0, 0x1a01, 0x0, 0x0}], 0x2}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x7cf0, &(0x7f0000000440)={0x0, 0x15d2, 0x30101, 0x0, 0x185}, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) 816.262014ms ago: executing program 0 (id=4108): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r2, 0x0, 0x0) r3 = getpgid(0x0) kcmp(r3, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x350, 0x8, 0x40, 0x3}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x8}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xd, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000040)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 467.555718ms ago: executing program 2 (id=4109): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0xfffffffffffffffd, 0x1000, 0x9, 0x5}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) 0s ago: executing program 1 (id=4110): pipe2$watch_queue(0x0, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) io_setup(0x81, &(0x7f0000000240)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, 0x0, 0xfffffff2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r7, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r8 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x100000000000f7) ioctl$HIDIOCGREPORT(r9, 0x400c4807, &(0x7f00000000c0)={0x1, 0x1, 0xfffffffa}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f0000000080)={{@hyper, 0x314}, 0x0, 0x0, 0x4}) read$FUSE(r5, &(0x7f0000006340)={0x2020}, 0x2058) kernel console output (not intermixed with test programs): 1343.346457][T21793] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1343.355207][T21793] vhci_hcd vhci_hcd.0: Device attached [ 1343.368870][T21793] vhci_hcd vhci_hcd.0: port 0 already used [ 1343.376733][T21794] vhci_hcd: connection closed [ 1343.377009][ T6164] vhci_hcd: stop threads [ 1343.388723][ T6164] vhci_hcd: release socket [ 1343.393149][ T6164] vhci_hcd: disconnect device [ 1343.537261][T21807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1343.550914][T21807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1343.751797][T21808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.779138][T21808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.391559][T21814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3617'. [ 1344.728735][ T6164] net_ratelimit: 185 callbacks suppressed [ 1344.728750][ T6164] bond6: (slave bridge5): failed to get link speed/duplex [ 1344.788372][ T6170] bond3: (slave bridge2): failed to get link speed/duplex [ 1344.795747][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1344.852775][ T6172] bond2: (slave bridge1): failed to get link speed/duplex [ 1344.878187][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1344.898364][ T6164] bond6: (slave bridge5): failed to get link speed/duplex [ 1344.915368][T21816] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1344.938769][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1344.958381][ T6164] bond3: (slave bridge2): failed to get link speed/duplex [ 1344.988178][ T6173] bond6: (slave bridge4): failed to get link speed/duplex [ 1344.995447][ T6164] bond2: (slave bridge1): failed to get link speed/duplex [ 1345.179647][ T813] usb 5-1: USB disconnect, device number 81 [ 1345.594384][ T813] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1345.776253][ T813] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1345.786500][ T813] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1345.802444][ T813] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1345.826319][ T813] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1345.836106][ T813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.844960][ T813] usb 5-1: Product: syz [ 1345.853406][ T813] usb 5-1: Manufacturer: syz [ 1345.864525][ T813] usb 5-1: SerialNumber: syz [ 1346.031814][ T813] usb 5-1: config 0 descriptor?? [ 1346.109429][T21823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1346.137055][T21823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1346.179269][ T813] usb 5-1: ucan: probing device on interface #0 [ 1346.836123][ T813] usb 5-1: ucan: device reported invalid device info [ 1346.853432][ T813] usb 5-1: ucan: probe failed; try to update the device firmware [ 1346.878109][T15158] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1346.913792][ T30] audit: type=1326 audit(1760819662.376:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1347.027081][ T30] audit: type=1326 audit(1760819662.406:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1347.048546][T15158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.090218][T15158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.104025][ T30] audit: type=1326 audit(1760819662.406:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 1347.112701][T15158] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1347.184350][T15158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.223495][ T30] audit: type=1326 audit(1760819662.406:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1347.309350][T15158] usb 2-1: config 0 descriptor?? [ 1347.322289][ T30] audit: type=1326 audit(1760819662.416:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1347.383843][ T30] audit: type=1326 audit(1760819662.416:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1347.463473][ T5898] usb 5-1: USB disconnect, device number 82 [ 1347.495837][ T30] audit: type=1326 audit(1760819662.416:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1347.689013][T12679] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1347.841721][ T30] audit: type=1326 audit(1760819662.416:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1347.880769][T15158] usbhid 2-1:0.0: can't add hid device: -71 [ 1347.886913][T15158] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1347.995591][T12679] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1348.017314][T12679] usb 3-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1348.196146][ T30] audit: type=1326 audit(1760819662.416:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1348.238142][T12679] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1348.239833][T15158] usb 2-1: USB disconnect, device number 71 [ 1348.316305][ T30] audit: type=1326 audit(1760819662.416:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21833 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1348.361976][T12679] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1348.408186][T12679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.474126][T12679] usb 3-1: Product: syz [ 1348.478479][T12679] usb 3-1: Manufacturer: syz [ 1348.628938][T12679] usb 3-1: SerialNumber: syz [ 1349.738966][ T6159] net_ratelimit: 197 callbacks suppressed [ 1349.738984][ T6159] bond6: (slave bridge5): failed to get link speed/duplex [ 1349.788279][ T6159] bond10: (slave bridge8): failed to get link speed/duplex [ 1349.838155][ T6170] bond6: (slave bridge4): failed to get link speed/duplex [ 1349.886480][ T6170] bond3: (slave bridge2): failed to get link speed/duplex [ 1349.919026][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1350.038517][ T6173] bond3: (slave bridge2): failed to get link speed/duplex [ 1350.045923][ T6159] bond10: (slave bridge8): failed to get link speed/duplex [ 1350.078103][ T6159] bond2: (slave bridge1): failed to get link speed/duplex [ 1350.109842][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1350.144236][ T6164] bond6: (slave bridge5): failed to get link speed/duplex [ 1351.263459][T12679] usb 3-1: USB disconnect, device number 73 [ 1351.746986][T21875] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1351.795357][T21875] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1351.804757][T21875] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1352.033626][T21896] fuse: root generation should be zero [ 1352.334896][T21907] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 1353.405390][T21912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1354.125603][T21930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3642'. [ 1355.054075][ T6175] net_ratelimit: 80 callbacks suppressed [ 1355.054095][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1355.138177][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1355.168534][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1355.192589][T21941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3644'. [ 1355.269669][ T6173] bond5: (slave bridge3): failed to get link speed/duplex [ 1355.291129][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1355.348586][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1355.407746][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1355.438139][ T6159] bond10: (slave bridge8): failed to get link speed/duplex [ 1355.458872][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1355.538109][ T6173] bond5: (slave bridge3): failed to get link speed/duplex [ 1355.558126][T16990] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1355.751134][T16990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1355.811860][T16990] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1355.877714][T16990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.186874][T16990] usb 1-1: config 0 descriptor?? [ 1356.378110][T12679] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1356.530510][T12679] usb 4-1: config 0 has no interfaces? [ 1356.539476][T12679] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1356.549261][T12679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.557268][T12679] usb 4-1: Product: syz [ 1356.568110][T12679] usb 4-1: Manufacturer: syz [ 1356.572943][T12679] usb 4-1: SerialNumber: syz [ 1356.599416][T12679] usb 4-1: config 0 descriptor?? [ 1358.558098][ T813] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1358.636698][T12679] usb 1-1: USB disconnect, device number 79 [ 1358.722063][ T813] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1358.735733][ T813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.804168][ T813] usb 3-1: Product: syz [ 1358.823862][ T813] usb 3-1: Manufacturer: syz [ 1358.860627][T16990] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1358.881113][ T813] usb 3-1: SerialNumber: syz [ 1358.921065][ T813] usb 3-1: config 0 descriptor?? [ 1359.092725][T16990] usb 2-1: config 5 has an invalid interface number: 3 but max is 0 [ 1359.103447][T16990] usb 2-1: config 5 has no interface number 0 [ 1359.115452][T16990] usb 2-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 1359.125720][T16990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.133918][T16990] usb 2-1: Product: syz [ 1359.148883][T16990] usb 2-1: Manufacturer: syz [ 1359.148961][ T813] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1359.153517][T16990] usb 2-1: SerialNumber: syz [ 1359.181164][T16990] ftdi_sio 2-1:5.3: FTDI USB Serial Device converter detected [ 1359.214681][T16990] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 1359.389981][T16990] usb 4-1: USB disconnect, device number 59 [ 1359.419878][T21969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.436877][T21969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.473091][T21969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1359.520161][T21969] macvtap1: entered promiscuous mode [ 1359.534809][T21969] veth0: entered promiscuous mode [ 1359.608317][T21969] macvtap1: entered allmulticast mode [ 1359.613839][T21969] veth0: entered allmulticast mode [ 1359.641655][T21979] veth0: left allmulticast mode [ 1359.646670][T21979] veth0: left promiscuous mode [ 1359.662854][ T5916] usb 2-1: USB disconnect, device number 72 [ 1359.674114][ T5916] ftdi_sio 2-1:5.3: device disconnected [ 1360.119971][ T6164] net_ratelimit: 96 callbacks suppressed [ 1360.119993][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1360.158185][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1360.165563][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1360.238138][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1360.269145][ T6173] bond6: (slave bridge4): failed to get link speed/duplex [ 1360.288142][ T6173] bond10: (slave bridge8): failed to get link speed/duplex [ 1360.358454][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1360.379006][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1360.415396][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1360.468120][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1361.058362][ T5916] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1361.388536][ T5916] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 1361.439180][ T5916] usb 2-1: config 8 has no interface number 0 [ 1361.464091][ T5916] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1361.558117][ T5916] usb 2-1: config 8 interface 223 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1361.598392][ T813] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1361.633508][ T813] usb 3-1: USB disconnect, device number 74 [ 1361.650146][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.656756][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.681622][ T5916] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1361.740305][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.768346][ T5916] usb 2-1: Product: syz [ 1361.772702][ T5916] usb 2-1: Manufacturer: syz [ 1361.780458][ T5916] usb 2-1: SerialNumber: syz [ 1362.008714][ T5916] usb 2-1: USB disconnect, device number 73 [ 1362.521147][T16990] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1362.728385][T22013] trusted_key: encrypted_key: insufficient parameters specified [ 1363.041243][T16990] usb 1-1: Using ep0 maxpacket: 32 [ 1363.264713][T16990] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1363.289621][T16990] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1363.308983][T16990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.582677][T16990] usb 1-1: Product: syz [ 1363.631478][T16990] usb 1-1: Manufacturer: syz [ 1363.664613][T16990] usb 1-1: SerialNumber: syz [ 1363.695936][T16990] usb 1-1: config 0 descriptor?? [ 1364.128455][T22004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1364.146360][T16990] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 1364.172246][T16990] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 1364.423523][T22021] tipc: Failed to remove unknown binding: 66,1,1/554617121:2988171240/2988171242 [ 1364.433344][T22021] tipc: Failed to remove unknown binding: 66,1,1/554617121:2988171240/2988171242 [ 1364.845707][T22029] bond0: Device is already in use. [ 1365.252447][ T6173] net_ratelimit: 107 callbacks suppressed [ 1365.252467][ T6173] bond10: (slave bridge8): failed to get link speed/duplex [ 1365.278258][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1365.308271][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1365.378773][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1365.413546][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1365.458398][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1365.468454][ T5916] usb 1-1: USB disconnect, device number 80 [ 1365.498544][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1365.757899][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1365.796431][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1365.818175][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1366.318084][ T5916] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1366.618486][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 1366.625169][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.636603][ T5916] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1366.741190][ T5916] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1366.750449][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.772301][ T5916] usb 4-1: Product: syz [ 1366.776485][ T5916] usb 4-1: Manufacturer: syz [ 1366.893439][ T5916] usb 4-1: SerialNumber: syz [ 1366.962122][ T5916] cdc_ether 4-1:1.0: invalid descriptor buffer length [ 1366.990923][ T5916] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1367.024312][T22061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3672'. [ 1367.191088][T22050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.286213][T22050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.542363][T16990] usb 4-1: USB disconnect, device number 60 [ 1367.924692][T22074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3675'. [ 1367.933975][T22074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3675'. [ 1368.350577][T22086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.374229][T22086] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1368.443130][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1368.443151][ T30] audit: type=1800 audit(1760819683.856:1632): pid=22086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3676" name="nullb0" dev="devtmpfs" ino=3344 res=0 errno=0 [ 1369.974962][T22105] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 1370.309274][ T6173] net_ratelimit: 98 callbacks suppressed [ 1370.309290][ T6173] bond5: (slave bridge3): failed to get link speed/duplex [ 1370.338352][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1370.468213][ T6173] bond10: (slave bridge8): failed to get link speed/duplex [ 1370.516567][ T6173] bond5: (slave bridge3): failed to get link speed/duplex [ 1370.568325][ T6173] bond6: (slave bridge4): failed to get link speed/duplex [ 1370.604161][ T6173] bond10: (slave bridge8): failed to get link speed/duplex [ 1370.738209][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1370.745370][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1370.788340][ T6159] bond10: (slave bridge8): failed to get link speed/duplex [ 1370.848156][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1370.951614][T22114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.508123][T12679] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1372.839535][T12679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1372.846215][T12679] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1372.855717][T12679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.026999][T12679] usb 5-1: config 0 descriptor?? [ 1373.714621][T22141] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3688'. [ 1373.899445][T22140] netlink: 'syz.4.3685': attribute type 1 has an invalid length. [ 1373.914650][T22140] netlink: 'syz.4.3685': attribute type 2 has an invalid length. [ 1375.319299][ T6173] net_ratelimit: 75 callbacks suppressed [ 1375.319315][ T6173] bond10: (slave bridge8): failed to get link speed/duplex [ 1375.408469][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1375.539548][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1375.558186][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1375.638196][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1375.881448][ T6170] bond5: (slave bridge3): failed to get link speed/duplex [ 1375.975875][ T6159] bond10: (slave bridge8): failed to get link speed/duplex [ 1375.999385][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1376.358180][ T6173] bond10: (slave bridge8): failed to get link speed/duplex [ 1376.365702][T22146] input: syz1 as /devices/virtual/input/input61 [ 1376.419728][ T6173] bond5: (slave bridge3): failed to get link speed/duplex [ 1377.287285][T12679] usbhid 5-1:0.0: can't add hid device: -71 [ 1377.295473][T12679] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1377.325976][T12679] usb 5-1: USB disconnect, device number 83 [ 1377.870721][T12679] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1378.418499][T12679] usb 5-1: Using ep0 maxpacket: 8 [ 1378.445246][T12679] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 19910, setting to 64 [ 1378.477792][T12679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1378.507321][T12679] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1378.524518][T12679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.624960][T12679] usb 5-1: Product: syz [ 1378.719638][T12679] usb 5-1: Manufacturer: syz [ 1378.731191][T12679] usb 5-1: SerialNumber: syz [ 1378.764717][T12679] usb 5-1: config 0 descriptor?? [ 1378.794634][T12679] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1378.996920][T12679] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1379.012220][T12679] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1379.251355][T16990] usb 5-1: USB disconnect, device number 84 [ 1379.348107][ T5916] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 1379.519866][ T5916] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1379.527430][ T5916] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1379.542199][ T5916] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1379.566757][ T5916] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1379.603426][ T5916] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1379.629303][ T5916] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1379.636972][ T5916] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1379.651067][ T5916] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1379.669867][ T5916] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1379.682581][ T5916] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1379.695399][ T5916] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1379.704078][ T5916] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1379.715179][ T5916] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1379.728145][ T5916] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1379.739867][ T5916] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1379.756137][ T5916] usb 2-1: string descriptor 0 read error: -22 [ 1379.763856][ T5916] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1379.773340][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.822187][ T5916] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1380.216377][T22196] input: syz0 as /devices/virtual/input/input62 [ 1380.290065][T16990] usb 2-1: USB disconnect, device number 74 [ 1380.302429][T22197] adutux: No device or device unplugged -19 [ 1380.428784][ T6159] net_ratelimit: 99 callbacks suppressed [ 1380.428806][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1380.483440][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1380.661030][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1380.709810][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1380.798505][ T6159] bond10: (slave bridge8): failed to get link speed/duplex [ 1380.808137][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1380.914717][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1380.948113][T16990] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1381.000513][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1381.098343][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1381.118169][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1381.159723][T16990] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 1381.169764][T16990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.279066][T16990] usb 2-1: config 0 descriptor?? [ 1381.288782][T16990] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 1381.828356][T16990] gspca_zc3xx: reg_w_i err -110 [ 1381.833362][T16990] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1382.231801][ T5916] usb 2-1: USB disconnect, device number 75 [ 1382.988169][ T30] audit: type=1326 audit(1760819698.436:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1383.021066][ T30] audit: type=1326 audit(1760819698.436:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1383.089150][T22230] binder: 22225:22230 ioctl c0306201 0 returned -14 [ 1383.101804][T22230] fuse: Bad value for 'fd' [ 1383.169214][ T30] audit: type=1326 audit(1760819698.436:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1383.214454][ T30] audit: type=1326 audit(1760819698.436:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1383.259950][ T30] audit: type=1326 audit(1760819698.436:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1383.293673][ T30] audit: type=1326 audit(1760819698.436:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1383.638269][ T30] audit: type=1326 audit(1760819698.436:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1383.769496][ T30] audit: type=1326 audit(1760819698.436:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1383.937292][ T30] audit: type=1326 audit(1760819698.436:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1384.015550][ T30] audit: type=1326 audit(1760819698.436:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22227 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1384.221855][T22237] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1384.273121][T22237] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1384.828489][T22252] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1384.838346][T22252] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1385.568477][ T6170] net_ratelimit: 97 callbacks suppressed [ 1385.568495][ T6170] bond5: (slave bridge3): failed to get link speed/duplex [ 1385.614567][T20387] bond6: (slave bridge4): failed to get link speed/duplex [ 1385.638108][T20387] bond10: (slave bridge8): failed to get link speed/duplex [ 1385.851043][T20387] bond10: (slave bridge8): failed to get link speed/duplex [ 1385.903329][T22269] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1385.911127][T22269] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1385.948126][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1386.328150][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1386.890007][T22289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3716'. [ 1387.443114][ T6170] bond6: (slave bridge4): failed to get link speed/duplex [ 1387.490152][T22289] bridge0: port 3(team0) entered disabled state [ 1387.503202][T22289] bridge_slave_1: left allmulticast mode [ 1387.518140][T22289] bridge_slave_1: left promiscuous mode [ 1387.580546][T22289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.618419][T22289] bridge_slave_0: left allmulticast mode [ 1387.625634][T22289] bridge_slave_0: left promiscuous mode [ 1387.641906][T22289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.238196][T20387] bond6: (slave bridge4): failed to get link speed/duplex [ 1388.245391][T20387] bond10: (slave bridge8): failed to get link speed/duplex [ 1388.268246][T20387] bond5: (slave bridge3): failed to get link speed/duplex [ 1388.678171][ T5916] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1388.878858][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 1388.885582][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.898520][ T5916] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1388.923946][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.953142][ T5916] usb 1-1: Product: syz [ 1388.957468][ T5916] usb 1-1: Manufacturer: syz [ 1388.962875][ T5916] usb 1-1: SerialNumber: syz [ 1388.984548][ T5916] usb 1-1: config 0 descriptor?? [ 1388.997353][ T5916] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1389.084872][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1389.084884][ T30] audit: type=1326 audit(1760819704.546:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1389.124402][T22310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3723'. [ 1389.228190][ T30] audit: type=1326 audit(1760819704.546:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1389.640959][ T30] audit: type=1326 audit(1760819704.546:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ed4990ee7 code=0x7ffc0000 [ 1389.993842][ T30] audit: type=1326 audit(1760819704.546:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5ed4990e5c code=0x7ffc0000 [ 1390.058137][ T30] audit: type=1326 audit(1760819704.586:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5ed4990d94 code=0x7ffc0000 [ 1390.082467][ T30] audit: type=1326 audit(1760819704.586:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5ed4990d94 code=0x7ffc0000 [ 1390.108198][ T30] audit: type=1326 audit(1760819704.586:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5ed498dc2a code=0x7ffc0000 [ 1390.241973][T22321] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1390.252394][T22321] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1390.278720][ T30] audit: type=1326 audit(1760819704.586:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1390.344805][ T30] audit: type=1326 audit(1760819704.586:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1390.369324][ T30] audit: type=1326 audit(1760819704.586:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.2.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1390.609489][T20387] net_ratelimit: 55 callbacks suppressed [ 1390.612175][T20387] bond5: (slave bridge3): failed to get link speed/duplex [ 1390.640306][T20387] bond10: (slave bridge8): failed to get link speed/duplex [ 1390.688773][T20387] bond6: (slave bridge4): failed to get link speed/duplex [ 1391.154391][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1391.172917][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1391.284605][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1391.378378][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1391.408717][T16990] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1391.423220][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1391.488795][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1391.498120][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1391.513409][T12679] usb 1-1: USB disconnect, device number 81 [ 1391.578373][T16990] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1391.593943][T16990] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1391.698263][T16990] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1391.710284][T16990] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1391.719674][T16990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.739542][T16990] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1391.799748][T16990] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1392.165165][T20765] udevd[20765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1392.205217][T22335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.268423][T22335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.313390][T22335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.348589][T22335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.811431][ T5916] usb 4-1: USB disconnect, device number 61 [ 1393.877757][T22368] PKCS7: Unknown OID: [5] (bad) [ 1393.904285][T22368] PKCS7: Only support pkcs7_signedData type [ 1394.449835][T22382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3737'. [ 1394.518183][T16990] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1394.728285][T16990] usb 3-1: Using ep0 maxpacket: 32 [ 1394.735154][T16990] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1394.745168][T16990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.922884][T16990] usb 3-1: config 0 descriptor?? [ 1395.137809][T22377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.147197][T16990] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1395.168529][T22377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.364361][T22377] random: crng reseeded on system resumption [ 1395.393185][T16990] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1395.626419][T16990] dib0700: firmware download failed at 7 with -22 [ 1395.724455][ T6172] net_ratelimit: 97 callbacks suppressed [ 1395.724475][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1395.728356][T16990] usb 3-1: USB disconnect, device number 75 [ 1395.748226][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1395.839053][ T6170] bond6: (slave bridge4): failed to get link speed/duplex [ 1395.858621][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1396.012860][ T6170] bond5: (slave bridge3): failed to get link speed/duplex [ 1396.759268][ T6170] bond6: (slave bridge4): failed to get link speed/duplex [ 1396.778786][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1396.870782][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1396.890328][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1396.918075][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1399.831436][T22420] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1399.838998][T22420] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1400.738531][ T6159] net_ratelimit: 60 callbacks suppressed [ 1400.738546][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1400.788361][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1400.826126][ T6159] bond10: (slave bridge8): failed to get link speed/duplex [ 1400.966049][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1400.978164][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1401.008163][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1401.078116][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1401.098132][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1401.146825][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1401.188628][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1401.419551][T12679] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1401.640694][T12679] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1401.752132][T12679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.837001][T12679] usb 1-1: Product: syz [ 1401.845055][T12679] usb 1-1: Manufacturer: syz [ 1401.858788][T12679] usb 1-1: SerialNumber: syz [ 1401.914581][T12679] usb 1-1: config 0 descriptor?? [ 1401.970201][T12679] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1402.293941][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1402.293956][ T30] audit: type=1326 audit(1760819717.686:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22453 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1402.478654][ T30] audit: type=1326 audit(1760819717.686:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22453 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1402.581663][ T30] audit: type=1326 audit(1760819717.686:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22453 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1402.728261][ T30] audit: type=1326 audit(1760819717.686:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22453 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1402.935922][T22440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.946409][T22440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.977763][T12679] gspca_sunplus: reg_r err -32 [ 1403.048286][T12679] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 1403.085434][ T30] audit: type=1326 audit(1760819717.696:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22453 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1403.108443][ T30] audit: type=1326 audit(1760819717.726:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22453 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1403.134003][ T30] audit: type=1326 audit(1760819717.726:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22453 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1403.314459][ T30] audit: type=1326 audit(1760819717.726:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22453 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1403.370931][ T30] audit: type=1326 audit(1760819717.726:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22453 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ed498d810 code=0x7ffc0000 [ 1403.395370][ T30] audit: type=1326 audit(1760819717.726:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22453 comm="syz.2.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed498efc9 code=0x7ffc0000 [ 1404.662607][T22476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3757'. [ 1404.871081][ T5916] usb 1-1: USB disconnect, device number 82 [ 1405.253948][T22486] netlink: 'syz.0.3758': attribute type 3 has an invalid length. [ 1405.262876][T22486] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3758'. [ 1405.781817][ T6159] net_ratelimit: 88 callbacks suppressed [ 1405.781836][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1405.829993][T22497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3761'. [ 1405.845029][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1405.858474][ T6159] bond10: (slave bridge8): failed to get link speed/duplex [ 1405.898201][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1405.958137][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1405.969198][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1406.009222][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1406.068908][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1406.088149][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1406.118080][ T6159] bond5: (slave bridge3): failed to get link speed/duplex [ 1406.220730][T22496] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1406.229493][T22496] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1406.602363][ T813] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1406.919884][ T813] usb 1-1: config 16 has an invalid interface number: 168 but max is 0 [ 1406.938915][ T813] usb 1-1: config 16 has no interface number 0 [ 1406.952343][ T813] usb 1-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1407.040437][ T813] usb 1-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1407.052142][ T813] usb 1-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 1407.078640][ T813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.112226][T22503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1407.127547][ T813] HFC-S_USB 1-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 1410.158947][ T813] usb 1-1: USB disconnect, device number 83 [ 1410.881904][ T6159] net_ratelimit: 90 callbacks suppressed [ 1410.881918][ T6159] bond6: (slave bridge4): failed to get link speed/duplex [ 1410.955044][T22549] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1410.962860][T22549] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1411.123511][T22556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3773'. [ 1411.238290][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1411.247192][ T6172] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1411.260096][ T6172] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1411.268274][ T813] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1411.548791][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1411.608112][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1411.634872][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1411.708085][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1411.779587][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1411.888277][ T813] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1411.918802][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1412.058845][T20387] bond5: (slave bridge3): failed to get link speed/duplex [ 1412.088103][T20387] bond6: (slave bridge4): failed to get link speed/duplex [ 1412.288714][ T813] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1413.398476][T22575] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1413.406029][T22575] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1414.042718][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1414.078065][ T30] audit: type=1326 audit(1760819729.496:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.3.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1414.908111][ T30] audit: type=1326 audit(1760819729.496:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.3.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1415.048200][ T30] audit: type=1326 audit(1760819729.496:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.3.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1415.221225][ T30] audit: type=1326 audit(1760819729.496:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.3.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1415.408182][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1415.717086][ T30] audit: type=1326 audit(1760819729.496:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.3.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1415.861003][T22602] netlink: 'syz.2.3782': attribute type 1 has an invalid length. [ 1416.178562][ T30] audit: type=1326 audit(1760819729.496:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.3.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1416.218039][ T30] audit: type=1326 audit(1760819729.496:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.3.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1416.272731][T22602] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1416.498326][ T30] audit: type=1326 audit(1760819729.496:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.3.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1416.901299][ T30] audit: type=1326 audit(1760819729.496:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.3.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1416.991545][ T30] audit: type=1326 audit(1760819729.496:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22581 comm="syz.3.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1417.182330][T13405] net_ratelimit: 70 callbacks suppressed [ 1417.182351][T13405] bond10: (slave bridge8): failed to get link speed/duplex [ 1417.195611][T11351] bond5: (slave bridge3): failed to get link speed/duplex [ 1417.218363][T12312] bond6: (slave bridge4): failed to get link speed/duplex [ 1417.330347][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1417.337662][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1417.682184][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1417.711829][T12679] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1417.812093][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1417.878442][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1417.958532][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1417.997522][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1418.212375][T12679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1418.271325][T12679] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1418.280818][T12679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.289537][T12679] usb 2-1: Product: syz [ 1418.304018][T12679] usb 2-1: Manufacturer: syz [ 1418.309029][T12679] usb 2-1: SerialNumber: syz [ 1418.314882][T22649] : renamed from bridge_slave_0 (while UP) [ 1418.327736][T12679] usb 2-1: config 0 descriptor?? [ 1419.933614][T22661] xt_ecn: cannot match TCP bits for non-tcp packets [ 1420.461370][T12679] usb 2-1: USB disconnect, device number 76 [ 1421.692365][T22690] netlink: 'syz.0.3794': attribute type 1 has an invalid length. [ 1421.991720][T22690] bond18: entered promiscuous mode [ 1421.997068][T22690] bond18: entered allmulticast mode [ 1422.002984][T22690] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1422.200907][T22634] net_ratelimit: 82 callbacks suppressed [ 1422.200928][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1422.238242][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1422.308923][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1422.348181][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1422.429905][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1422.463872][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1422.489471][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1422.576638][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1422.836747][T22706] netlink: 'syz.2.3797': attribute type 10 has an invalid length. [ 1422.908142][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1422.915501][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1423.093383][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.098239][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1423.099824][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.803332][T16990] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1424.191963][T16990] usb 1-1: Using ep0 maxpacket: 32 [ 1424.367635][T16990] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1424.523871][T16990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.550503][T16990] usb 1-1: config 0 descriptor?? [ 1424.846717][T16990] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1424.919942][T16990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1424.936769][T22698] syz.3.3796: vmalloc error: size 424673280, failed to allocated page array size 829440, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1424.992569][T16990] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1425.040250][T22727] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1425.269067][T22698] CPU: 1 UID: 0 PID: 22698 Comm: syz.3.3796 Not tainted syzkaller #0 PREEMPT(full) [ 1425.269096][T22698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1425.269108][T22698] Call Trace: [ 1425.269118][T22698] [ 1425.269128][T22698] dump_stack_lvl+0x189/0x250 [ 1425.269157][T22698] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1425.269188][T22698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1425.269208][T22698] ? __pfx__printk+0x10/0x10 [ 1425.269229][T22698] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1425.269251][T22698] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1425.269280][T22698] warn_alloc+0x214/0x310 [ 1425.269310][T22698] ? __pfx_warn_alloc+0x10/0x10 [ 1425.269342][T22698] ? __get_vm_area_node+0x28f/0x300 [ 1425.269364][T22698] ? vb2_vmalloc_alloc+0xef/0x340 [ 1425.269389][T22698] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1425.269442][T22698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1425.269468][T22698] ? __kasan_kmalloc+0x93/0xb0 [ 1425.269496][T22698] vmalloc_user_noprof+0xad/0xf0 [ 1425.269517][T22698] ? vb2_vmalloc_alloc+0xef/0x340 [ 1425.269539][T22698] vb2_vmalloc_alloc+0xef/0x340 [ 1425.269561][T22698] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1425.269583][T22698] __vb2_queue_alloc+0x9c2/0x15a0 [ 1425.269629][T22698] vb2_core_reqbufs+0xc31/0x1420 [ 1425.269668][T22698] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1425.269693][T22698] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1425.269714][T22698] ? trace_contention_end+0x39/0x120 [ 1425.269750][T22698] __vb2_init_fileio+0x318/0xff0 [ 1425.269778][T22698] ? vb2_fop_read+0x101/0x360 [ 1425.269801][T22698] ? __pfx___mutex_lock+0x10/0x10 [ 1425.269826][T22698] __vb2_perform_fileio+0x284/0x1600 [ 1425.269864][T22698] vb2_fop_read+0x273/0x360 [ 1425.269891][T22698] v4l2_read+0x19c/0x2c0 [ 1425.269916][T22698] vfs_readv+0x5aa/0x850 [ 1425.269937][T22698] ? __pfx_v4l2_read+0x10/0x10 [ 1425.269956][T22698] ? __pfx_vfs_readv+0x10/0x10 [ 1425.269997][T22698] ? __fget_files+0x2a/0x420 [ 1425.270026][T22698] ? __fget_files+0x3a0/0x420 [ 1425.270048][T22698] ? __fget_files+0x2a/0x420 [ 1425.270084][T22698] do_readv+0x14d/0x2d0 [ 1425.270112][T22698] ? __pfx_do_readv+0x10/0x10 [ 1425.270141][T22698] ? do_syscall_64+0xbe/0xfa0 [ 1425.270170][T22698] do_syscall_64+0xfa/0xfa0 [ 1425.270188][T22698] ? lockdep_hardirqs_on+0x9c/0x150 [ 1425.270207][T22698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.270226][T22698] ? clear_bhb_loop+0x60/0xb0 [ 1425.270250][T22698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.270270][T22698] RIP: 0033:0x7fb06e38efc9 [ 1425.270290][T22698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1425.270308][T22698] RSP: 002b:00007fb06f16d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1425.270329][T22698] RAX: ffffffffffffffda RBX: 00007fb06e5e6180 RCX: 00007fb06e38efc9 [ 1425.270345][T22698] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000007 [ 1425.270358][T22698] RBP: 00007fb06e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1425.270371][T22698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1425.270384][T22698] R13: 00007fb06e5e6218 R14: 00007fb06e5e6180 R15: 00007fb06e70fa28 [ 1425.270417][T22698] [ 1425.270621][T16990] usb 1-1: media controller created [ 1425.276072][T22698] Mem-Info: [ 1425.596307][T22698] active_anon:9806 inactive_anon:0 isolated_anon:0 [ 1425.596307][T22698] active_file:14665 inactive_file:40460 isolated_file:0 [ 1425.596307][T22698] unevictable:768 dirty:225 writeback:0 [ 1425.596307][T22698] slab_reclaimable:7288 slab_unreclaimable:136662 [ 1425.596307][T22698] mapped:34597 shmem:1331 pagetables:1972 [ 1425.596307][T22698] sec_pagetables:0 bounce:0 [ 1425.596307][T22698] kernel_misc_reclaimable:0 [ 1425.596307][T22698] free:1249878 free_pcp:20912 free_cma:0 [ 1425.695582][T16990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1425.799365][T22698] Node 0 active_anon:40224kB inactive_anon:0kB active_file:58616kB inactive_file:161636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138344kB dirty:900kB writeback:0kB shmem:3788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15272kB pagetables:7812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1425.848117][T22698] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1425.879674][T22698] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1425.968757][T22698] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1426.091722][T22698] Node 0 DMA32 free:1089420kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42224kB inactive_anon:0kB active_file:58616kB inactive_file:161636kB unevictable:1536kB writepending:964kB zspages:0kB present:3129332kB managed:2561600kB mlocked:0kB bounce:0kB free_pcp:58908kB local_pcp:36176kB free_cma:0kB [ 1426.145910][T22698] lowmem_reserve[]: 0 0 1 1 1 [ 1426.215073][T22698] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.470544][T22698] lowmem_reserve[]: 0 0 0 0 0 [ 1426.502929][T22698] Node 1 Normal free:3894672kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:10624kB free_cma:0kB [ 1426.648135][T22698] lowmem_reserve[]: 0 0 0 0 0 [ 1426.663287][T22698] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1426.729397][T22698] Node 0 DMA32: 167*4kB (UME) 312*8kB (UME) 582*16kB (UME) 268*32kB (UME) 167*64kB (UME) 91*128kB (ME) 29*256kB (UME) 17*512kB (ME) 4*1024kB (ME) 2*2048kB (UM) 250*4096kB (UM) = 1091708kB [ 1426.763900][T16990] az6027: usb out operation failed. (-71) [ 1426.782273][T16990] az6027: usb out operation failed. (-71) [ 1426.795298][T16990] stb0899_attach: Driver disabled by Kconfig [ 1426.805623][T16990] az6027: no front-end attached [ 1426.805623][T16990] [ 1426.841380][T22698] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1426.870729][T16990] az6027: usb out operation failed. (-71) [ 1426.976695][T22698] Node 1 Normal: 260*4kB (UME) 72*8kB (UME) 66*16kB (UE) 193*32kB (UE) 60*64kB (UME) 16*128kB (UME) 6*256kB (UM) 7*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (UM) = 3894672kB [ 1427.000386][T16990] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1427.155936][T16990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input63 [ 1427.171817][T22698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.197571][T16990] dvb-usb: schedule remote query interval to 400 msecs. [ 1427.232109][T22623] net_ratelimit: 78 callbacks suppressed [ 1427.232125][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1427.258209][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1427.278473][T16990] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1427.294713][T22698] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1427.337675][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1427.355305][T22698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.368227][T16990] usb 1-1: USB disconnect, device number 84 [ 1427.379388][T22698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1427.398849][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1427.420462][T22698] 56527 total pagecache pages [ 1427.428090][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1427.441544][T22698] 0 pages in swap cache [ 1427.453819][T22698] Free swap = 124380kB [ 1427.464138][T22698] Total swap = 124996kB [ 1427.498484][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1427.518746][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1427.540204][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1427.565367][T22698] 2097051 pages RAM [ 1427.580747][T22698] 0 pages HighMem/MovableOnly [ 1427.833673][ T6173] bond6: (slave bridge4): failed to get link speed/duplex [ 1427.846016][T16990] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1427.869649][T22698] 424561 pages reserved [ 1427.878609][ T6173] bond10: (slave bridge8): failed to get link speed/duplex [ 1427.888882][T22698] 0 pages cma reserved [ 1428.211697][T22748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1428.225373][T22748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1428.234461][T22748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1429.355184][T22764] netlink: 'syz.4.3808': attribute type 1 has an invalid length. [ 1429.570563][T22766] bond9: entered promiscuous mode [ 1429.657038][T22766] bond9: entered allmulticast mode [ 1429.928918][T22766] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1432.279655][T22623] net_ratelimit: 70 callbacks suppressed [ 1432.279670][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1432.378081][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1432.398121][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1432.405312][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1432.433431][T22805] ALSA: mixer_oss: invalid OSS volume '' [ 1433.138126][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1433.238252][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1433.349569][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1433.378574][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1433.428540][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1433.468132][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1437.349525][T22623] net_ratelimit: 85 callbacks suppressed [ 1437.349541][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1437.559032][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1437.610780][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1437.658213][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1437.698143][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1437.728298][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1437.768105][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1437.888164][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1437.898382][ T6173] bond5: (slave bridge3): failed to get link speed/duplex [ 1437.926336][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1438.448440][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1439.158108][ T813] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1439.356512][ T813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.388043][ T813] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1439.524189][ T813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.949170][ T813] usb 2-1: config 0 descriptor?? [ 1441.758050][ T5916] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1441.975005][ T5916] usb 1-1: config 0 has no interfaces? [ 1442.038183][ T5916] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1442.058791][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.190814][ T813] usbhid 2-1:0.0: can't add hid device: -71 [ 1442.196832][ T813] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1442.302949][ T813] usb 2-1: USB disconnect, device number 77 [ 1442.365426][ T6173] net_ratelimit: 107 callbacks suppressed [ 1442.365449][ T6173] bond6: (slave bridge4): failed to get link speed/duplex [ 1442.436671][ T5916] usb 1-1: Product: syz [ 1442.514364][ T5916] usb 1-1: Manufacturer: syz [ 1442.519186][ T6173] bond10: (slave bridge8): failed to get link speed/duplex [ 1442.566695][ T5916] usb 1-1: SerialNumber: syz [ 1442.578398][ T6173] bond5: (slave bridge3): failed to get link speed/duplex [ 1442.590783][ T5916] usb 1-1: config 0 descriptor?? [ 1442.618604][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1442.696748][ T6173] bond10: (slave bridge8): failed to get link speed/duplex [ 1442.728557][ T6173] bond5: (slave bridge3): failed to get link speed/duplex [ 1442.748258][ T6173] bond6: (slave bridge4): failed to get link speed/duplex [ 1443.288894][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1443.308410][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1443.330717][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1443.367309][T22912] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1443.373918][T22912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1443.387141][T22912] vhci_hcd vhci_hcd.0: Device attached [ 1443.536088][T22912] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 1443.542715][T22912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1443.561051][T22912] vhci_hcd vhci_hcd.0: Device attached [ 1443.575763][T22914] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 1443.582401][T22914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1443.585662][T22912] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1443.598793][ T813] vhci_hcd: vhci_device speed not set [ 1443.605510][T22914] vhci_hcd vhci_hcd.0: Device attached [ 1443.607781][T22912] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1443.658075][ T813] usb 35-1: new full-speed USB device number 7 using vhci_hcd [ 1443.738315][T22917] vhci_hcd: connection reset by peer [ 1443.752126][T22636] vhci_hcd: stop threads [ 1443.756819][T22636] vhci_hcd: release socket [ 1443.758287][T22920] vhci_hcd: connection closed [ 1443.761440][T22921] vhci_hcd: connection closed [ 1443.766773][T22636] vhci_hcd: disconnect device [ 1443.808880][T22636] vhci_hcd: stop threads [ 1443.835497][T22636] vhci_hcd: release socket [ 1443.852586][T22636] vhci_hcd: disconnect device [ 1443.961001][T22636] vhci_hcd: stop threads [ 1443.965424][T22636] vhci_hcd: release socket [ 1443.998095][T22636] vhci_hcd: disconnect device [ 1444.473131][T22930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3842'. [ 1445.245267][T16990] usb 1-1: USB disconnect, device number 85 [ 1445.321632][T22940] SET target dimension over the limit! [ 1445.403270][T22942] team0: Device is already in use. [ 1446.341994][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1446.351404][T22960] netlink: 'syz.2.3848': attribute type 30 has an invalid length. [ 1446.395595][ T6164] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.415308][ T6164] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.611212][ T6164] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.648203][ T6164] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.821331][T22634] net_ratelimit: 87 callbacks suppressed [ 1447.821347][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1447.834355][T21879] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1447.843578][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1447.888598][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1447.985005][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1447.993658][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1448.010959][T21879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.031453][T21879] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1448.049534][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1448.099085][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1448.125141][T21879] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1448.138171][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1448.167182][T21879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.178234][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1448.209058][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1448.230285][T21879] usb 2-1: config 0 descriptor?? [ 1448.668028][T16990] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1448.760000][T22980] syz.0.3853 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1448.778756][ T813] vhci_hcd: vhci_device speed not set [ 1448.810725][T22980] random: crng reseeded on system resumption [ 1448.939722][T16990] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1448.949927][T16990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1448.973805][T16990] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1448.994298][T16990] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1449.020577][T16990] usb 4-1: Product: syz [ 1449.028512][T16990] usb 4-1: Manufacturer: syz [ 1449.146960][T16990] usb 4-1: SerialNumber: syz [ 1449.167677][T16990] usb 4-1: config 0 descriptor?? [ 1449.185201][T16990] usb 4-1: selecting invalid altsetting 0 [ 1449.571693][T16990] hid-generic 0000:0040:30383231.0021: unknown main item tag 0x0 [ 1449.675777][T16990] hid-generic 0000:0040:30383231.0021: unknown main item tag 0x0 [ 1449.695049][T16990] hid-generic 0000:0040:30383231.0021: unknown main item tag 0x0 [ 1449.723377][T16990] hid-generic 0000:0040:30383231.0021: unknown main item tag 0x0 [ 1449.741242][T16990] hid-generic 0000:0040:30383231.0021: unknown main item tag 0x0 [ 1449.766422][T16990] hid-generic 0000:0040:30383231.0021: unknown main item tag 0x0 [ 1449.808152][T12679] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1449.858661][T21879] usb 4-1: USB disconnect, device number 62 [ 1449.907173][T16990] hid-generic 0000:0040:30383231.0021: unknown main item tag 0x0 [ 1449.932874][T16990] hid-generic 0000:0040:30383231.0021: unknown main item tag 0x0 [ 1449.941155][T16990] hid-generic 0000:0040:30383231.0021: unknown main item tag 0x0 [ 1449.951513][T16990] hid-generic 0000:0040:30383231.0021: hidraw0: HID v303038.78 Device [syz1] on syz0 [ 1450.041157][T12679] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1450.050377][T12679] usb 3-1: not running at top speed; connect to a high speed hub [ 1450.065853][T12679] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.109432][T16990] usb 2-1: USB disconnect, device number 78 [ 1450.186621][T12679] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1450.237666][T12679] usb 3-1: config 1 has no interface number 1 [ 1450.318030][T12679] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1450.349980][T12679] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 4 [ 1450.371024][T12679] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12540, setting to 1023 [ 1450.422755][T12679] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1450.432710][T12679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.441207][T12679] usb 3-1: Product: syz [ 1450.446302][T12679] usb 3-1: Manufacturer: syz [ 1450.566948][T12679] usb 3-1: SerialNumber: syz [ 1450.894360][T12679] hub 3-1:1.0: Invalid hub with more than one config or interface [ 1450.902719][T12679] hub 3-1:1.0: probe with driver hub failed with error -22 [ 1450.937052][T12679] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1451.037392][T12679] usb 3-1: USB disconnect, device number 76 [ 1451.395102][T20765] udevd[20765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1451.768935][T23013] team0: Device is already in use. [ 1452.347454][T23015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3859'. [ 1452.860241][ T6164] net_ratelimit: 94 callbacks suppressed [ 1452.860257][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1452.968369][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1452.988048][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1453.258015][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1453.301102][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1453.419808][T23031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3863'. [ 1453.565169][T23031] vlan0: left promiscuous mode [ 1453.610251][T23031] bridge_slave_0: left promiscuous mode [ 1453.616311][T23031] bridge0: port 2(vlan0) entered disabled state [ 1453.883891][T23031] macsec0: left allmulticast mode [ 1453.896228][T23031] macsec0: left promiscuous mode [ 1453.902305][T23031] bridge0: port 1(macsec0) entered disabled state [ 1454.659560][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1454.711351][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1454.748057][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1454.973755][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1455.039626][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1456.972628][T23062] netlink: 'syz.4.3868': attribute type 10 has an invalid length. [ 1457.358821][ T5898] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1457.518373][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 1457.526469][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.537597][ T5898] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1457.868256][ T6164] net_ratelimit: 51 callbacks suppressed [ 1457.868275][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1457.906529][ T5898] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1457.918063][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1457.925507][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.938188][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1458.028568][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1458.208398][ T5898] usb 5-1: Product: syz [ 1458.212635][ T5898] usb 5-1: Manufacturer: syz [ 1458.213616][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1458.307550][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1458.459022][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1458.518044][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1458.568522][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1458.609434][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1458.614414][ T5898] usb 5-1: SerialNumber: syz [ 1458.676759][T23084] fuse: Bad value for 'fd' [ 1458.690995][ T5898] usb 5-1: config 0 descriptor?? [ 1458.755009][T23085] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1458.762915][T23085] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1460.363124][ T813] usb 5-1: USB disconnect, device number 85 [ 1462.931536][T22623] net_ratelimit: 95 callbacks suppressed [ 1462.931571][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1463.785162][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1463.813840][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1463.888649][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1464.168203][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1464.189086][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1464.208388][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1464.278040][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1464.305899][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1464.378135][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1464.955319][T23153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3886'. [ 1465.078363][T23154] vlan5: entered allmulticast mode [ 1465.085005][T23154] bridge13: port 1(vlan5) entered blocking state [ 1465.091936][T23154] bridge13: port 1(vlan5) entered disabled state [ 1465.108679][T23154] vlan5: entered promiscuous mode [ 1465.530589][T23159] fuse: Bad value for 'fd' [ 1465.590732][T23159] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1465.618266][T23159] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1467.968336][T22623] net_ratelimit: 56 callbacks suppressed [ 1467.968359][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1468.088404][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1468.278098][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1468.298501][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1468.378116][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1468.408194][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1468.500106][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1468.519506][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1468.564961][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1468.639062][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1470.448117][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1471.158582][ T5898] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1471.318010][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 1471.945331][T23221] netlink: 'syz.4.3900': attribute type 12 has an invalid length. [ 1472.026350][T23221] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3900'. [ 1472.423742][T23201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.164963][T22636] net_ratelimit: 92 callbacks suppressed [ 1473.164985][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1473.218283][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1473.584801][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1473.608080][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1473.620426][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1473.708121][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1473.718164][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1473.845271][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1473.869634][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1473.898261][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1474.226793][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1474.358149][ T5898] usb 2-1: no configurations [ 1474.374157][ T5898] usb 2-1: can't read configurations, error -22 [ 1475.212388][ T813] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1475.378029][ T813] usb 5-1: Using ep0 maxpacket: 16 [ 1475.385406][ T813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.396531][ T813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.444598][ T813] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1475.480886][ T813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.528163][ T813] usb 5-1: config 0 descriptor?? [ 1477.933099][T23260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.193676][T22634] net_ratelimit: 84 callbacks suppressed [ 1478.193690][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1478.713555][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1478.778341][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1478.818339][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1478.868327][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1478.932854][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1478.958146][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1478.978163][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1479.059159][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1479.078106][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1479.746529][T23282] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1480.297580][ T813] usbhid 5-1:0.0: can't add hid device: -71 [ 1480.396480][ T813] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1480.425488][ T813] usb 5-1: USB disconnect, device number 86 [ 1480.501966][T23294] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.3915'. [ 1482.306424][T23312] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3917'. [ 1482.383320][T23313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1483.231533][T22634] net_ratelimit: 92 callbacks suppressed [ 1483.231548][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1483.301866][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1483.358145][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1483.398437][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1483.459162][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1483.494497][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1483.610061][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1483.651244][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1483.747867][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1483.761071][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1483.862050][T23317] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1483.869741][T23317] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1484.552654][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.560385][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.944863][T23333] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1485.031569][T23333] syz.0.3922 (23333): drop_caches: 2 [ 1485.828632][T23345] netlink: 'syz.1.3925': attribute type 1 has an invalid length. [ 1488.252784][ T6164] net_ratelimit: 71 callbacks suppressed [ 1488.252801][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1488.428200][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1488.435462][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1488.538582][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1488.558123][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1488.611492][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1488.658562][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1488.708185][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1488.739648][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1488.789051][T23376] fuse: blksize only supported for fuseblk [ 1488.812675][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1489.456838][T23391] : renamed from bridge_slave_0 [ 1489.614270][T23393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3932'. [ 1490.865737][T23406] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1490.874080][T23406] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1493.213725][T23427] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1493.224843][T23427] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1493.330999][ T6175] net_ratelimit: 89 callbacks suppressed [ 1493.331020][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1493.431644][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1493.545697][ T5898] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1493.783005][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1493.798126][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 1493.812977][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.834348][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1493.860659][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1493.870397][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.887094][ T5898] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1493.915907][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.934585][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1493.948239][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1493.987175][ T5898] usb 4-1: config 0 descriptor?? [ 1493.996932][ T5898] hub 4-1:0.0: USB hub found [ 1494.010356][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1494.048131][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1494.088142][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1494.199142][ T5898] hub 4-1:0.0: 1 port detected [ 1494.642094][ T5898] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1494.657265][ T5898] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1494.661993][ T5898] usbhid 4-1:0.0: can't add hid device: -71 [ 1494.662061][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1494.722604][ T5898] usb 4-1: USB disconnect, device number 63 [ 1495.679978][T23451] binder: 23448:23451 ioctl c0306201 0 returned -14 [ 1495.712393][T23451] binder: 23448:23451 ioctl 4018620d 0 returned -22 [ 1496.419336][T23459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3948'. [ 1497.880282][T23477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3951'. [ 1498.142471][T23488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1498.350456][ T6172] net_ratelimit: 69 callbacks suppressed [ 1498.350472][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1498.658297][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1498.739366][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1498.929434][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1498.954786][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1499.038053][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1499.058026][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1499.070041][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1499.148151][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1499.323821][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1503.467226][T22634] net_ratelimit: 77 callbacks suppressed [ 1503.467247][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1503.488530][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1503.530819][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1503.608160][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1503.648238][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1503.668039][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1503.763291][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1503.775775][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'. [ 1503.840243][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1503.939317][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1503.952133][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1505.775418][T23561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3965'. [ 1505.848480][ T5898] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1505.918252][ T813] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1505.987418][T23561] bond2: (slave bridge0): Removing an active aggregator [ 1505.998947][T23561] bond2: (slave bridge0): Releasing backup interface [ 1506.042753][T23561] bridge0 (unregistering): left promiscuous mode [ 1506.050750][T23561] bridge0 (unregistering): left allmulticast mode [ 1506.097501][ T5898] usb 4-1: config 0 has no interfaces? [ 1506.173075][ T813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1506.182280][ T813] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 1506.193464][ T813] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1506.232261][ T5898] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1506.258017][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.308550][ T813] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1506.319330][T23564] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1506.335961][ T813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.351196][ T5898] usb 4-1: config 0 descriptor?? [ 1506.594029][T23570] @: renamed from syz_tun (while UP) [ 1506.640804][ T813] usb 1-1: Product: ℟ரڥ툿慒봭龌慿婧䏙ᡮ럫譪ൄ뼸묏ᫍ嚋어ꑣ쒳朐쫜ꠧ颦㇓迖⫆榬䥺ᅽ讗㬆蘏㟂⇫⎉녁⥸㉝䘈춹娅쬅，啨璨৉㒔뢃ﳮ㬈祯輥뼈쐏汿뿷봠콴ኞ瀦ꈲ꽋藹꘷뱐眹黱킎䨜Ꞵέ؟쨨몂휍湵״餴屩犗爞ᰴ嘹ꅀ䢅䒇잦菺툢⊭쭰潺暑ኰ廸璷㯎招⛶ⶻ [ 1506.893470][ T813] usb 1-1: Manufacturer: ࠖ [ 1506.899846][ T813] usb 1-1: SerialNumber: 쐬灖醢缺囙᐀鯣ꘜ吴⫤膹㌟壩╹系슛煟ꨜ༐볟ག [ 1507.967888][ T5898] usb 4-1: USB disconnect, device number 64 [ 1508.319371][T23582] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1508.355261][T23582] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1508.481561][ T813] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1508.528021][ T813] usb 1-1: USB disconnect, device number 86 [ 1508.548342][ T6164] net_ratelimit: 78 callbacks suppressed [ 1508.548360][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1508.585944][T23439] udevd[23439]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1508.628095][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1508.669781][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1508.765476][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1508.788668][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1508.813111][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1508.888419][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1508.908675][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1508.948150][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1509.038095][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1509.231341][T23593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3972'. [ 1510.139161][T23600] vivid-000: disconnect [ 1511.134077][T23584] vivid-000: reconnect [ 1513.559300][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1513.559317][ T30] audit: type=1326 audit(1760819828.836:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23626 comm="syz.0.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1513.648823][ T6175] net_ratelimit: 107 callbacks suppressed [ 1513.648843][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1513.668219][ T30] audit: type=1326 audit(1760819828.836:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23626 comm="syz.0.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1513.710187][ T30] audit: type=1326 audit(1760819828.836:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23626 comm="syz.0.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb29b8d810 code=0x7ffc0000 [ 1513.751244][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1513.778716][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1513.872825][ T30] audit: type=1326 audit(1760819828.836:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23626 comm="syz.0.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb29b8d810 code=0x7ffc0000 [ 1513.976015][T23633] ip6tnl3: entered promiscuous mode [ 1513.985900][T23633] ip6tnl3: entered allmulticast mode [ 1514.018942][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1514.158559][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1514.211507][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1514.242077][T23638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3980'. [ 1514.266901][ T30] audit: type=1326 audit(1760819828.836:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23626 comm="syz.0.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1514.388081][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1514.419931][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1514.438470][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1514.511579][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1514.567316][ T30] audit: type=1326 audit(1760819828.836:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23626 comm="syz.0.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1514.658315][ T30] audit: type=1326 audit(1760819828.836:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23626 comm="syz.0.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1514.766276][ T30] audit: type=1326 audit(1760819828.836:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23626 comm="syz.0.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1514.903801][ T30] audit: type=1326 audit(1760819828.836:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23626 comm="syz.0.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1514.988225][ T30] audit: type=1326 audit(1760819828.836:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23626 comm="syz.0.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb29b8efc9 code=0x7ffc0000 [ 1515.621581][T23656] sch_fq: defrate 6 ignored. [ 1515.961583][T23654] netlink: 'syz.4.3982': attribute type 1 has an invalid length. [ 1517.409656][T23675] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1518.458398][ T813] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1518.658921][ T6175] net_ratelimit: 80 callbacks suppressed [ 1518.658936][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1518.673052][ T813] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1518.735796][ T813] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1518.850300][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1518.866838][ T813] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1518.883627][ T813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.892076][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1518.966809][T23683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1518.977348][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1518.988054][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1519.028054][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1519.043013][ T813] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1519.091922][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1519.208166][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1519.240426][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1520.138130][ T813] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1520.229389][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1520.343215][ T813] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1520.353902][ T813] usb 5-1: config 0 has no interface number 0 [ 1520.372999][ T813] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1520.424489][ T813] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1520.468740][ T813] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1520.479844][ T813] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1520.499667][ T813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.507685][ T813] usb 5-1: Product: syz [ 1520.512259][ T813] usb 5-1: Manufacturer: syz [ 1520.516845][ T813] usb 5-1: SerialNumber: syz [ 1520.632235][ T813] usb 5-1: config 0 descriptor?? [ 1520.721657][ C1] usb 5-1: NFC: Urb failure (status -71) [ 1520.729372][ T813] usb 5-1: NFC: Unable to get FW version [ 1520.735457][ T813] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 1522.042308][ T5898] usb 2-1: USB disconnect, device number 81 [ 1522.157626][T23718] tipc: Failed to remove unknown binding: 66,1,1/554617121:1619017215/1619017217 [ 1522.234685][T23718] tipc: Failed to remove unknown binding: 66,1,1/554617121:1619017215/1619017217 [ 1523.546533][ T813] usb 5-1: USB disconnect, device number 87 [ 1523.731100][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1523.789681][ T6172] net_ratelimit: 60 callbacks suppressed [ 1523.789700][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1523.819035][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1523.826290][ T6172] bond5: (slave bridge3): failed to get link speed/duplex [ 1523.918279][T22625] bond6: (slave bridge4): failed to get link speed/duplex [ 1523.988036][T22625] bond10: (slave bridge8): failed to get link speed/duplex [ 1524.009787][T22625] bond5: (slave bridge3): failed to get link speed/duplex [ 1524.078824][T22625] bond6: (slave bridge4): failed to get link speed/duplex [ 1524.178298][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1524.214205][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1524.305766][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1524.369895][T23746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4003'. [ 1524.609328][T23751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1526.426721][ T813] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1526.698875][ T813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.878042][ T813] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1526.977778][ T813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.991508][ T813] usb 2-1: config 0 descriptor?? [ 1527.358054][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1527.358074][ T30] audit: type=1326 audit(1760819842.796:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23774 comm="syz.0.4009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x0 [ 1527.681202][T23782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4007'. [ 1528.799237][ T6175] net_ratelimit: 84 callbacks suppressed [ 1528.799268][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1528.948280][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1528.968234][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1529.038362][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1529.108210][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1529.159474][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1529.228330][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1529.278498][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1529.438379][T22625] bond10: (slave bridge8): failed to get link speed/duplex [ 1529.445691][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1532.052175][ T813] usbhid 2-1:0.0: can't add hid device: -32 [ 1532.071437][ T813] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1533.505906][T21879] usb 2-1: USB disconnect, device number 82 [ 1533.863913][ T6175] net_ratelimit: 77 callbacks suppressed [ 1533.863927][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1533.948334][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1533.989565][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1534.061162][T23841] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1534.613113][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1534.648174][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1534.663741][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1534.848432][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1534.880358][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1535.058395][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1535.066955][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1536.432683][T23862] netlink: 'syz.3.4022': attribute type 2 has an invalid length. [ 1536.441362][T23862] netlink: 'syz.3.4022': attribute type 11 has an invalid length. [ 1536.450755][T23862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1536.758058][ T813] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1536.991891][ T813] usb 3-1: Using ep0 maxpacket: 32 [ 1537.017349][ T813] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1537.029874][ T813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.118213][ T813] usb 3-1: config 0 descriptor?? [ 1537.163510][ T813] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1537.687233][T23872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1537.720838][T23872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1537.891867][ T813] gspca_sunplus: reg_w_riv err -110 [ 1537.897168][ T813] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 1538.183009][T23886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1538.336106][ T813] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1538.518237][ T813] usb 5-1: Using ep0 maxpacket: 16 [ 1538.905269][T22636] net_ratelimit: 79 callbacks suppressed [ 1538.905285][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1538.948176][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1538.996703][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1539.029666][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1539.080944][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1539.238205][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1539.261193][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1539.340480][ T6164] bond10: (slave bridge8): failed to get link speed/duplex [ 1539.398856][ T6164] bond6: (slave bridge4): failed to get link speed/duplex [ 1539.458214][ T6164] bond5: (slave bridge3): failed to get link speed/duplex [ 1540.045211][T23903] usb usb8: usbfs: process 23903 (syz.3.4028) did not claim interface 0 before use [ 1540.848113][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1541.500618][T21879] usb 3-1: USB disconnect, device number 77 [ 1542.659039][ T813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1542.685886][ T813] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1542.731390][ T813] usb 5-1: can't read configurations, error -71 [ 1543.211075][T23927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4033'. [ 1543.307200][T23928] hub 9-0:1.0: USB hub found [ 1543.375135][T23928] hub 9-0:1.0: 1 port detected [ 1543.937180][T22623] net_ratelimit: 86 callbacks suppressed [ 1543.937198][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1543.969324][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1543.988095][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1544.066203][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1544.088338][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1544.098273][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1544.219477][T22625] bond6: (slave bridge4): failed to get link speed/duplex [ 1544.226623][T22625] bond5: (slave bridge3): failed to get link speed/duplex [ 1544.318387][T22625] bond10: (slave bridge8): failed to get link speed/duplex [ 1544.330310][T22625] bond6: (slave bridge4): failed to get link speed/duplex [ 1545.107252][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1545.168992][T23946] netlink: 'syz.2.4035': attribute type 10 has an invalid length. [ 1545.706096][ T813] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1545.858119][ T813] usb 5-1: Using ep0 maxpacket: 16 [ 1545.881507][ T813] usb 5-1: config 0 has no interfaces? [ 1546.000887][ T813] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1546.010298][ T813] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1546.020645][ T813] usb 5-1: Manufacturer: syz [ 1546.036147][ T813] usb 5-1: config 0 descriptor?? [ 1546.043214][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.057364][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.352341][T23940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.367593][T23940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.024292][T23968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1547.388043][T12679] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1547.763548][T12679] usb 2-1: Using ep0 maxpacket: 8 [ 1547.775816][T12679] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1547.784350][T12679] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1547.859059][T12679] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1547.873693][T12679] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1547.897096][T12679] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1547.968221][T12679] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1548.032857][T12679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.682971][T12679] usb 2-1: usb_control_msg returned -32 [ 1548.693692][T12679] usbtmc 2-1:16.0: can't read capabilities [ 1548.968222][T22636] net_ratelimit: 67 callbacks suppressed [ 1548.968246][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1549.058088][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1549.078193][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1549.158086][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1549.168587][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1549.198078][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1549.218968][T21879] usb 5-1: USB disconnect, device number 90 [ 1549.342403][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1549.479015][T22625] bond5: (slave bridge3): failed to get link speed/duplex [ 1549.537439][T22625] bond10: (slave bridge8): failed to get link speed/duplex [ 1549.708011][T22625] bond6: (slave bridge4): failed to get link speed/duplex [ 1549.750004][T23992] input: syz0 as /devices/virtual/input/input67 [ 1549.788685][T23991] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 1549.810264][T23990] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1549.818313][T23990] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1549.840265][T23970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1549.849894][T23970] netlink: 'syz.1.4040': attribute type 5 has an invalid length. [ 1549.858368][T23970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1549.906087][T23970] geneve2: entered promiscuous mode [ 1549.913663][T23970] geneve2: entered allmulticast mode [ 1549.932623][T22623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1549.962221][T22623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1550.012361][T22623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1550.029876][T22623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1550.841786][T12679] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1551.123307][T12679] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.348074][T12679] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1551.357299][T12679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.375333][T21879] usb 2-1: USB disconnect, device number 83 [ 1551.458466][T12679] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1551.585574][T23439] udevd[23439]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1551.590843][T12679] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1551.725247][T24011] program syz.0.4046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1551.751361][T24011] syz.0.4046 (24011): drop_caches: 2 [ 1551.947558][T24003] delete_channel: no stack [ 1551.953713][T12679] usb 3-1: USB disconnect, device number 78 [ 1552.160512][T24017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4048'. [ 1552.508453][T24013] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1552.516016][T24013] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1552.805901][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4049'. [ 1553.835608][T24031] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2245855896/2245855898 [ 1553.844966][T24031] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2245855896/2245855898 [ 1554.050318][T22623] net_ratelimit: 85 callbacks suppressed [ 1554.050334][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1554.155022][T24039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4051'. [ 1554.509731][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1554.527148][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1554.548055][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1554.648209][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1554.724596][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1554.748019][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1554.759059][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1554.914343][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1554.958055][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1556.186461][T24056] netlink: 'syz.3.4054': attribute type 13 has an invalid length. [ 1556.270106][T24056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.286975][T24056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1557.738897][T16990] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1557.898522][T16990] usb 2-1: Using ep0 maxpacket: 16 [ 1557.987366][T16990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1558.015718][T16990] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1558.027123][T16990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.082078][T16990] usb 2-1: Product: syz [ 1558.090997][T16990] usb 2-1: Manufacturer: syz [ 1558.105346][T16990] usb 2-1: SerialNumber: syz [ 1558.136550][T16990] usb 2-1: config 0 descriptor?? [ 1558.200167][T16990] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1559.116686][T22636] net_ratelimit: 80 callbacks suppressed [ 1559.116706][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1559.198077][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1559.218719][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1559.248635][T22625] usb 2-1: Failed to submit usb control message: -110 [ 1559.308069][ T6175] bond6: (slave bridge4): failed to get link speed/duplex [ 1559.321203][ T6175] bond5: (slave bridge3): failed to get link speed/duplex [ 1559.331301][T22625] usb 2-1: unable to send the bmi data to the device: -110 [ 1559.340730][T22625] usb 2-1: unable to get target info from device [ 1559.350573][T22625] usb 2-1: could not get target info (-110) [ 1559.358234][ T6175] bond10: (slave bridge8): failed to get link speed/duplex [ 1559.365603][T22625] usb 2-1: could not probe fw (-110) [ 1559.518387][ T813] usb 2-1: USB disconnect, device number 84 [ 1559.531581][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1559.600222][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1559.628589][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1559.704828][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1560.336858][ T30] audit: type=1326 audit(1760819875.766:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24092 comm="syz.0.4062" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb29b8efc9 code=0x0 [ 1562.572035][T24128] batadv_slave_0: entered promiscuous mode [ 1563.251446][T24116] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1563.323005][T24116] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1563.403535][T24131] syz.4.4068 (24131): drop_caches: 2 [ 1564.040534][T24142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4070'. [ 1564.208790][T22636] net_ratelimit: 89 callbacks suppressed [ 1564.208807][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1564.265016][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1564.300025][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1564.376852][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1564.562480][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1564.589639][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1564.674432][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1564.692057][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1564.713969][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1564.748008][T16990] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1564.798588][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1565.279153][T16990] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1565.292849][T16990] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1565.343260][T16990] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1565.378222][T16990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.671794][T24146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1565.683370][T16990] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1567.719421][T24174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1567.796269][T24170] netlink: 'syz.1.4076': attribute type 1 has an invalid length. [ 1567.804281][T24170] netlink: 'syz.1.4076': attribute type 2 has an invalid length. [ 1568.891003][ T813] usb 3-1: USB disconnect, device number 79 [ 1568.953789][T24185] input: syz1 as /devices/virtual/input/input68 [ 1569.158361][T24185] netlink: 'syz.1.4079': attribute type 1 has an invalid length. [ 1569.417217][T22634] net_ratelimit: 102 callbacks suppressed [ 1569.417239][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1569.703172][T24188] gretap3: entered allmulticast mode [ 1569.713051][T24188] bond10: (slave gretap3): making interface the new active one [ 1569.721754][T24188] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 1569.838123][T22625] bond10: (slave bridge8): failed to get link speed/duplex [ 1569.985803][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1570.018129][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1570.136828][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1570.149007][T24200] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1570.156575][T24200] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1570.198054][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1570.628068][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1570.651027][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1570.678062][T22625] bond6: (slave bridge4): failed to get link speed/duplex [ 1570.738020][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1571.981014][T24222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4085'. [ 1574.191646][T24244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 1574.544412][T22625] net_ratelimit: 77 callbacks suppressed [ 1574.544434][T22625] bond10: (slave bridge8): failed to get link speed/duplex [ 1574.573842][T22625] bond6: (slave bridge4): failed to get link speed/duplex [ 1574.655796][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1574.700327][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1574.761538][T22636] bond6: (slave bridge4): failed to get link speed/duplex [ 1574.828099][T16990] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1574.919417][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1574.938119][T22636] bond10: (slave bridge8): failed to get link speed/duplex [ 1574.984648][T24260] ip6_vti0: Caught tx_queue_len zero misconfig [ 1575.072700][T22636] bond5: (slave bridge3): failed to get link speed/duplex [ 1575.098726][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1575.118236][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1575.125976][T16990] usb 2-1: Using ep0 maxpacket: 16 [ 1575.142771][T16990] usb 2-1: config 0 has no interfaces? [ 1575.153499][T16990] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1575.163327][T16990] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1575.172270][T16990] usb 2-1: Manufacturer: syz [ 1575.260008][T16990] usb 2-1: config 0 descriptor?? [ 1575.873473][T24254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.405681][T24268] fuse: Bad value for 'fd' [ 1576.442891][T24268] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1576.452038][T24268] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1576.797610][T24274] tipc: Failed to remove unknown binding: 66,1,1/554617121:3021603762/3021603764 [ 1576.806908][T24274] tipc: Failed to remove unknown binding: 66,1,1/554617121:3021603762/3021603764 [ 1578.209017][T16990] usb 2-1: USB disconnect, device number 85 [ 1578.613214][ T30] audit: type=1326 audit(1760819893.976:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24281 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1578.677290][ T30] audit: type=1326 audit(1760819893.976:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24281 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1579.215311][ T30] audit: type=1326 audit(1760819893.976:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24281 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1579.321883][ T30] audit: type=1326 audit(1760819893.976:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24281 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1579.368157][ T30] audit: type=1326 audit(1760819893.976:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24281 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1579.393594][ T30] audit: type=1326 audit(1760819893.976:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24281 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1579.428924][T24280] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1579.436424][T24280] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1579.502192][ T30] audit: type=1326 audit(1760819893.976:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24281 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1579.610148][T22634] net_ratelimit: 89 callbacks suppressed [ 1579.610170][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1579.657773][ T30] audit: type=1326 audit(1760819893.976:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24281 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1579.740624][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1579.763541][ T30] audit: type=1326 audit(1760819893.976:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24281 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1579.798013][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1579.839432][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1579.849259][ T30] audit: type=1326 audit(1760819893.976:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24281 comm="syz.3.4098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06e38efc9 code=0x7ffc0000 [ 1579.872736][T22623] bond6: (slave bridge4): failed to get link speed/duplex [ 1579.918680][T22634] bond10: (slave bridge8): failed to get link speed/duplex [ 1579.958194][T22623] bond5: (slave bridge3): failed to get link speed/duplex [ 1580.028296][T22634] bond6: (slave bridge4): failed to get link speed/duplex [ 1580.038005][T22623] bond10: (slave bridge8): failed to get link speed/duplex [ 1580.069333][T22634] bond5: (slave bridge3): failed to get link speed/duplex [ 1580.361436][T24309] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4101'. [ 1580.398774][T24309] sit1: entered promiscuous mode [ 1583.338148][ T813] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1583.607985][ T813] usb 5-1: Using ep0 maxpacket: 8 [ 1583.657976][T16990] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1583.803636][ T813] usb 5-1: config 0 has no interfaces? [ 1583.808465][T16990] usb 1-1: Using ep0 maxpacket: 32 [ 1583.867548][T16990] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1583.877716][T16990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.887852][T16990] usb 1-1: config 0 descriptor?? [ 1583.905279][ T813] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1584.017361][ T813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.029697][ T813] usb 5-1: Product: syz [ 1584.033912][ T813] usb 5-1: Manufacturer: syz [ 1584.041722][ T813] usb 5-1: SerialNumber: syz [ 1584.055148][ T813] usb 5-1: config 0 descriptor?? [ 1584.102554][T16990] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1584.111299][T16990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1584.302664][T24340] ------------[ cut here ]------------ [ 1584.308459][T24340] usb 1-1: BOGUS control dir, pipe 80005780 doesn't match bRequestType c0 [ 1584.318341][T24340] WARNING: CPU: 1 PID: 24340 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 1584.328215][T24340] Modules linked in: [ 1584.332472][T24340] CPU: 1 UID: 0 PID: 24340 Comm: syz.4.4107 Not tainted syzkaller #0 PREEMPT(full) [ 1584.342431][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1584.352601][T24340] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 1584.358386][T24340] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 a0 73 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 a4 d8 88 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 1584.378485][T24340] RSP: 0018:ffffc9000c247820 EFLAGS: 00010246 [ 1584.384555][T24340] RAX: b88ad5d1342beb00 RBX: ffff88807547e300 RCX: 0000000000080000 [ 1584.392573][T24340] RDX: ffffc90010826000 RSI: 0000000000005950 RDI: 0000000000005951 [ 1584.400583][T24340] RBP: 1ffff1100a084300 R08: 0000000000000003 R09: 0000000000000004 [ 1584.408760][T24340] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff8880293d9100 [ 1584.416742][T24340] R13: ffff888050421800 R14: 0000000080005780 R15: ffff888024991fa0 [ 1584.424776][T24340] FS: 00007f9ffb4416c0(0000) GS:ffff888125e0d000(0000) knlGS:0000000000000000 [ 1584.433755][T24340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1584.440417][T24340] CR2: 0000001b31216ffc CR3: 0000000044ca8000 CR4: 00000000003526f0 [ 1584.448424][T24340] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000053d850c4 [ 1584.456405][T24340] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1584.464477][T24340] Call Trace: [ 1584.464916][T16990] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1584.467770][T24340] [ 1584.475308][T16990] usb 1-1: media controller created [ 1584.478007][T24340] usb_start_wait_urb+0x114/0x4c0 [ 1584.478050][T24340] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1584.478097][T24340] usb_control_msg+0x232/0x3e0 [ 1584.478130][T24340] dib0700_i2c_xfer+0xba7/0xf70 [ 1584.478181][T24340] __i2c_transfer+0x874/0x2170 [ 1584.478210][T24340] ? lockdep_hardirqs_on+0x9c/0x150 [ 1584.513859][T24340] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1584.519632][T24340] ? __might_fault+0xb0/0x130 [ 1584.524328][T24340] ? __pfx___i2c_transfer+0x10/0x10 [ 1584.529669][T24340] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1584.535034][T24340] ? i2c_transfer+0x120/0x3a0 [ 1584.539737][T24340] i2c_transfer+0x25b/0x3a0 [ 1584.544230][T24340] ? __pfx_i2c_transfer+0x10/0x10 [ 1584.549280][T24340] ? _copy_from_user+0x94/0xb0 [ 1584.554047][T24340] i2cdev_ioctl_rdwr+0x460/0x740 [ 1584.559025][T24340] i2cdev_ioctl+0x64b/0x7f0 [ 1584.563547][T24340] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1584.568613][T24340] ? __fget_files+0x3a0/0x420 [ 1584.573332][T24340] ? __fget_files+0x2a/0x420 [ 1584.578002][T24340] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1584.582949][T24340] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1584.588171][T24340] __se_sys_ioctl+0xfc/0x170 [ 1584.592754][T24340] do_syscall_64+0xfa/0xfa0 [ 1584.597243][T24340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.603378][T24340] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1584.609064][T24340] ? clear_bhb_loop+0x60/0xb0 [ 1584.613769][T24340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.619771][T24340] RIP: 0033:0x7f9ffa58efc9 [ 1584.624178][T24340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1584.643841][T24340] RSP: 002b:00007f9ffb441038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1584.652325][T24340] RAX: ffffffffffffffda RBX: 00007f9ffa7e6180 RCX: 00007f9ffa58efc9 [ 1584.660381][T24340] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000006 [ 1584.668461][T24340] RBP: 00007f9ffa611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1584.669659][ T6172] net_ratelimit: 98 callbacks suppressed [ 1584.669678][ T6172] bond6: (slave bridge4): failed to get link speed/duplex [ 1584.676443][T24340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.676462][T24340] R13: 00007f9ffa7e6218 R14: 00007f9ffa7e6180 R15: 00007f9ffa90fa28 [ 1584.691142][T16990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1584.697365][T24340] [ 1584.705585][ T6172] bond10: (slave bridge8): failed to get link speed/duplex [ 1584.713893][T24340] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1584.713911][T24340] CPU: 1 UID: 0 PID: 24340 Comm: syz.4.4107 Not tainted syzkaller #0 PREEMPT(full) [ 1584.713933][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1584.713945][T24340] Call Trace: [ 1584.713958][T24340] [ 1584.713968][T24340] dump_stack_lvl+0x99/0x250 [ 1584.713994][T24340] ? __asan_memcpy+0x40/0x70 [ 1584.714015][T24340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1584.714036][T24340] ? __pfx__printk+0x10/0x10 [ 1584.714070][T24340] vpanic+0x237/0x6d0 [ 1584.714095][T24340] ? __pfx_vpanic+0x10/0x10 [ 1584.714131][T24340] panic+0xb9/0xc0 [ 1584.714156][T24340] ? __pfx_panic+0x10/0x10 [ 1584.714196][T24340] __warn+0x31b/0x4b0 [ 1584.714219][T24340] ? usb_submit_urb+0x114d/0x18b0 [ 1584.714248][T24340] ? usb_submit_urb+0x114d/0x18b0 [ 1584.714273][T24340] report_bug+0x2be/0x4f0 [ 1584.714292][T24340] ? usb_submit_urb+0x114d/0x18b0 [ 1584.714317][T24340] ? usb_submit_urb+0x114d/0x18b0 [ 1584.714342][T24340] ? usb_submit_urb+0x114f/0x18b0 [ 1584.714366][T24340] handle_bug+0x84/0x160 [ 1584.714389][T24340] exc_invalid_op+0x1a/0x50 [ 1584.714412][T24340] asm_exc_invalid_op+0x1a/0x20 [ 1584.714431][T24340] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 1584.714457][T24340] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 a0 73 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 a4 d8 88 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 1584.714474][T24340] RSP: 0018:ffffc9000c247820 EFLAGS: 00010246 [ 1584.714493][T24340] RAX: b88ad5d1342beb00 RBX: ffff88807547e300 RCX: 0000000000080000 [ 1584.714508][T24340] RDX: ffffc90010826000 RSI: 0000000000005950 RDI: 0000000000005951 [ 1584.714522][T24340] RBP: 1ffff1100a084300 R08: 0000000000000003 R09: 0000000000000004 [ 1584.714536][T24340] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff8880293d9100 [ 1584.714551][T24340] R13: ffff888050421800 R14: 0000000080005780 R15: ffff888024991fa0 [ 1584.714597][T24340] usb_start_wait_urb+0x114/0x4c0 [ 1584.714631][T24340] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1584.714677][T24340] usb_control_msg+0x232/0x3e0 [ 1584.714718][T24340] dib0700_i2c_xfer+0xba7/0xf70 [ 1584.714766][T24340] __i2c_transfer+0x874/0x2170 [ 1584.714793][T24340] ? lockdep_hardirqs_on+0x9c/0x150 [ 1584.714820][T24340] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 1584.714844][T24340] ? __might_fault+0xb0/0x130 [ 1584.714873][T24340] ? __pfx___i2c_transfer+0x10/0x10 [ 1584.714899][T24340] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1584.714923][T24340] ? i2c_transfer+0x120/0x3a0 [ 1584.714946][T24340] i2c_transfer+0x25b/0x3a0 [ 1584.714969][T24340] ? __pfx_i2c_transfer+0x10/0x10 [ 1584.714996][T24340] ? _copy_from_user+0x94/0xb0 [ 1584.715026][T24340] i2cdev_ioctl_rdwr+0x460/0x740 [ 1584.715060][T24340] i2cdev_ioctl+0x64b/0x7f0 [ 1584.715082][T24340] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1584.715109][T24340] ? __fget_files+0x3a0/0x420 [ 1584.715132][T24340] ? __fget_files+0x2a/0x420 [ 1584.715158][T24340] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1584.715186][T24340] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1584.715208][T24340] __se_sys_ioctl+0xfc/0x170 [ 1584.715230][T24340] do_syscall_64+0xfa/0xfa0 [ 1584.715251][T24340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.715269][T24340] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1584.715287][T24340] ? clear_bhb_loop+0x60/0xb0 [ 1584.715311][T24340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.715330][T24340] RIP: 0033:0x7f9ffa58efc9 [ 1584.715349][T24340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1584.715364][T24340] RSP: 002b:00007f9ffb441038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1584.715384][T24340] RAX: ffffffffffffffda RBX: 00007f9ffa7e6180 RCX: 00007f9ffa58efc9 [ 1584.715399][T24340] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000006 [ 1584.715412][T24340] RBP: 00007f9ffa611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1584.715425][T24340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.715436][T24340] R13: 00007f9ffa7e6218 R14: 00007f9ffa7e6180 R15: 00007f9ffa90fa28 [ 1584.715468][T24340] [ 1584.717033][T24340] Kernel Offset: disabled