last executing test programs: 13m14.559814449s ago: executing program 4 (id=560): socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xfffff) mount(0x0, 0x0, 0x0, 0x2200020, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 13m13.160438225s ago: executing program 4 (id=566): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0xc68d8000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002400), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) epoll_create(0x7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) close_range(r1, 0xffffffffffffffff, 0x0) fadvise64(0xffffffffffffffff, 0x408000, 0xc6a, 0x3) 13m11.21616253s ago: executing program 4 (id=569): bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m8.33813213s ago: executing program 4 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a45404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 13m6.211893803s ago: executing program 4 (id=585): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) r2 = openat(0xffffffffffffff9c, 0x0, 0x68cd42, 0x4) openat$cgroup_ro(r2, 0x0, 0x275a, 0xb) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xc) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 13m0.751803197s ago: executing program 4 (id=601): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, 0x0, 0x0) r3 = dup2(r2, r0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f00000002c0)={0x2, 0x200, 0x9, 0x6, 0x4001000, 0x8}) 13m0.190302615s ago: executing program 32 (id=601): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, 0x0, 0x0) r3 = dup2(r2, r0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f00000002c0)={0x2, 0x200, 0x9, 0x6, 0x4001000, 0x8}) 24.339266018s ago: executing program 3 (id=1953): kexec_load(0x5, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db", 0x6b, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2", 0x30, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21.107070725s ago: executing program 1 (id=1961): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x3, [0x80000000, 0x3, 0x3ff, 0x5, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000002, 0x99, 0x20000000, 0x20, 0x0, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x3, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0xf], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x1, 0xfffffffe, 0x2000079, 0x400, 0x0, 0x8001, 0x10000, 0x40000, 0x20007, 0xc0800000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7db, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2, 0xed5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x400, 0x200000, 0x80000000, 0x0, 0x0, 0x475, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x8002, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0xfffffffc, 0x8003, 0x3, 0xfffffffc, 0x4, 0x800, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x200000, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000680)={0x5, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000006c0)={0x0, 0x80000001, 0xb, 0x1, 0x2, [0x0, 0x0, 0x0, r1], [0x1, 0xffff82e6, 0xfffffffd, 0x8], [0x0, 0x62a, 0x7, 0x9], [0xb6, 0x3, 0x2, 0x10]}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)=0x63) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x2711, @host}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) write$uinput_user_dev(r3, &(0x7f0000000900)={'syz1\x00', {0x2, 0xff, 0x7, 0xd}, 0x32, [0x5, 0x2, 0x5, 0xffffffff, 0x53dcc959, 0x4, 0x2, 0x80000000, 0x4, 0x5, 0x3ff, 0xcfe, 0x9, 0xfffffff8, 0x1, 0x1, 0xa35, 0x8, 0x7fffffff, 0xa, 0x4, 0x9, 0x3, 0x6, 0x4, 0x2, 0x1ff, 0xb0, 0x7, 0xffff5db1, 0x7fffffff, 0x1, 0x81, 0x9, 0x568, 0x1, 0xc, 0x3, 0x7, 0x8, 0x1, 0xa000, 0xc, 0x4, 0xffff, 0xfffffff9, 0x5, 0x9e8, 0x40, 0xfffffefe, 0x4, 0x9d37, 0x2, 0xf, 0x7, 0xb40a, 0x3, 0x9, 0x6, 0xf5b, 0x7, 0x9, 0x80000001, 0xceb3], [0x6, 0x1, 0x3, 0x8, 0x2, 0x962, 0x7ff, 0x1, 0x7f, 0xe5e, 0xffe00000, 0x73, 0xffffffff, 0x6, 0x5, 0x1000, 0xe3ee, 0xa, 0xfffffffa, 0xfffeffff, 0x3, 0x1, 0x1000000, 0xfffffff7, 0xd2aa, 0x1, 0x9, 0x800, 0x3, 0x401, 0x9, 0xa2e, 0x4, 0xc, 0x5, 0x5, 0x2, 0x3, 0xffff, 0x2, 0x800, 0x0, 0xc, 0x1, 0x0, 0x6, 0x2, 0x80, 0x9, 0x1, 0x1, 0x5c4, 0x71, 0x9, 0x5, 0x6, 0xdb, 0x8, 0x8, 0x2b5, 0x200ce, 0xc9b, 0xff1, 0xff], [0x1, 0x0, 0x7e17, 0x10001, 0x1, 0xfaf, 0x80000001, 0xc3, 0x2, 0x6, 0x400, 0x6c, 0x7f, 0x400, 0x1, 0x80000001, 0x6, 0x72acdd62, 0x19e5, 0xf, 0x6, 0x10001, 0xffffffff, 0xb, 0x2b, 0x1, 0x30, 0x40, 0x1, 0xc616, 0x101, 0x9, 0x2, 0xff, 0x80, 0x0, 0x9, 0x2, 0x7, 0x5, 0x8, 0x0, 0x6, 0x1a01, 0x5, 0x0, 0xd4, 0x7fffffff, 0x699b, 0x1, 0x7, 0x40, 0x0, 0x2, 0xd, 0x1, 0x1, 0x3ff, 0x9, 0x1, 0x2, 0x2bd0, 0x4, 0x3], [0x0, 0x4, 0xfffff000, 0x5, 0x0, 0x2, 0x8, 0x8, 0x9, 0x3, 0x8, 0x899a, 0x4, 0x2, 0x3, 0xc079, 0x9, 0x88, 0x7f, 0x2, 0x6, 0xfff, 0x7, 0x80000, 0x4, 0x8, 0x8, 0xf578, 0x4, 0x10, 0x1000, 0x8, 0x9, 0x9, 0x100, 0xdd51, 0x1, 0x8000, 0x4, 0x0, 0x6, 0x404f, 0xffffffc0, 0xfffffff8, 0x3c268d70, 0x0, 0x1, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9, 0x5, 0x5ee, 0x4, 0x4, 0x3ff, 0x5, 0xffff, 0x5492, 0x1, 0x4]}, 0x45c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) 20.836454769s ago: executing program 3 (id=1964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) syz_open_dev$dvb_dvr(0x0, 0x0, 0x10b401) 18.333219257s ago: executing program 3 (id=1966): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 14.135038077s ago: executing program 5 (id=1971): socket$packet(0x11, 0x3, 0x300) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x4, 0xb, 0x6, "04000004", "02012000"}}, 0x0}, 0x0) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 13.855409949s ago: executing program 2 (id=1972): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x26}, 0x10) unshare(0x20000400) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%pS \x00'}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x34, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x64, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x80003, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, 0x0, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) 13.561374109s ago: executing program 3 (id=1973): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "030600", "fcffffff", ["50d59404000100", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) 12.971497503s ago: executing program 2 (id=1974): kexec_load(0x5, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db", 0x6b, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2", 0x30, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.771756552s ago: executing program 0 (id=1975): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchmod(r1, 0x1c2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 10.816228422s ago: executing program 5 (id=1976): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x5, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8004, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x8, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x8981, 0x4, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x1000001, 0xe, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xb, 0x1, 0x379, 0x6, 0x24, 0x5, 0x7, 0x2006, 0x2, 0x2, 0x1, 0x8, 0xb, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x4, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x9, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x20006, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0xffffffff, 0xd9, 0x0, 0x7d, 0x0, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x7f, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x3, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0xfdfffdd5, 0x3, 0x4, 0x200, 0x2853, 0x3b, 0x20000004, 0x5, 0x101, 0x2, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x87, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/51, 0x33}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 9.344576818s ago: executing program 0 (id=1977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f700"/124], 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) syz_open_dev$dvb_dvr(0x0, 0x0, 0x10b401) 9.337278468s ago: executing program 2 (id=1978): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x148, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x136, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, '\x00\x00\x00\x00Yr'}, {0x5, 0x24, 0x0, 0x14}, {0xd}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x5, 0x3}, @mdlm_detail={0x83, 0x24, 0x13, 0x9, "f796dfb9dca3eafc37c90608675ee590b3220d70b7fa564a8ac7a5230263aae676da070d7d2c28bbc71b9a6d36a49b14c87aee9adc22413ccb328a2e1b04443c2d1f93ee99a99ab3e29778d9cc0808ab6534c2422f512a6625df25811815d2812262decdb7d1e3d0100ca00e091cc8ed3378aaff0bc812a3533f1b2c08a0d2"}, @obex={0x5, 0x24, 0x15, 0x40}, @mdlm_detail={0x5c, 0x24, 0x13, 0x6, "ecf09e489fc179968c769dbebf54d8182650abcc83f7544bc32a3838df32aa48fb6c51d4d6f83761f1b3ed32b714f3fa20c0f3462c8d0679dc0e81297c8c370bf0fb7616308f2ba2b32885058cc332929bde17c9c9260bd1"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x4c, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 9.093084978s ago: executing program 1 (id=1979): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40881, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x6c, 0x8, 0x9, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x1, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x81, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) ppoll(&(0x7f0000000180)=[{r7, 0x182}], 0x1, 0x0, 0x0, 0x0) 7.911435804s ago: executing program 0 (id=1980): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @local}}, {{0x2, 0x3, @multicast1}}}, 0x108) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$tipc(&(0x7f0000004040), 0xffffffffffffffff) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf255c00000008006b001400000008006b006801000008006b000a00000008006b001c02000008006b006801000008006b0014000000"], 0x44}}, 0x40000a4) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000200)=0x188, 0x4) sendto$inet(r4, &(0x7f0000000000)="f461c5bbd75c3583", 0xffc7, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r4, &(0x7f000000ae80)=[{{0x0, 0x0, 0x0}, 0xe26}], 0x1, 0x10000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)={'bond_slave_0\x00', 0x5}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000a00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x128, r6, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe9c8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcf49}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x388b}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfade}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 7.816022477s ago: executing program 5 (id=1981): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) link(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5100) 7.534401335s ago: executing program 1 (id=1982): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) close_range(r1, r1, 0x0) 6.914842216s ago: executing program 2 (id=1983): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) 5.48463789s ago: executing program 3 (id=1984): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x5}) write$sndseq(r1, &(0x7f0000000140), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000200)={{0x1, 0x1, 0xeff, 0x2, '\x00', 0x7f}, 0x6, 0x400, 0x0, 0x0, 0x0, 0x401, 'syz0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x1a, 0x200, &(0x7f00000005c0)="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"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="7bf8", 0x2}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) accept(r8, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2275, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e24, @remote}, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x2}) read$dsp(r4, &(0x7f0000000340)=""/36, 0x24) 4.015109148s ago: executing program 0 (id=1985): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa}, {0x6, 0xfd, 0x0, 0x7ffffcbb}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5100) 3.384114329s ago: executing program 5 (id=1986): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) readv(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 2.892349803s ago: executing program 2 (id=1987): kexec_load(0x5, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a48", 0xc9, 0x5, 0xff}, {0x0, 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f6c59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add000000000000000000", 0x77, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.744978836s ago: executing program 0 (id=1988): kexec_load(0x5, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db", 0x6b, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2", 0x30, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.406586337s ago: executing program 1 (id=1989): r0 = syz_open_procfs(0x0, 0x0) move_mount(r0, 0x0, r0, &(0x7f0000000100)='./mnt\x00', 0x137) openat$ipvs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) syz_open_procfs(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.278189743s ago: executing program 5 (id=1990): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) r2 = syz_io_uring_setup(0x2afc, &(0x7f0000000900)={0x0, 0xe3f9, 0x11090, 0x3, 0x124}, &(0x7f00000003c0), &(0x7f0000000140), &(0x7f0000000580)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) io_uring_enter(r2, 0x4da3, 0xd93, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4000010, 0xffffffffffffffff, 0x7283c000) sync() syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x20000004) 1.178172737s ago: executing program 3 (id=1991): kexec_load(0x5, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f1", 0xdc, 0x5, 0xff}, {0x0, 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f6c59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add000000000000000000", 0x77, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf82}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 771.156884ms ago: executing program 1 (id=1992): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x40881, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x6) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x6c, 0x8, 0x9, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x1, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r5, 0xbc7ae000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x182}], 0x1, 0x0, 0x0, 0x0) 412.027798ms ago: executing program 0 (id=1993): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x5}) write$sndseq(r1, &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x1a, 0x200, &(0x7f00000005c0)="1ae19337aa151f36ae49bb3f8cb95c5bf8471e79e73946faa98d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7e00000100b97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000001700000000000000000000000000000000000200"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$alg(0x26, 0x5, 0x0) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="7bf8", 0x2}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) accept(r8, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2275, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e24, @remote}, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x7, 0x2}) read$dsp(r4, &(0x7f0000000340)=""/36, 0x24) 403.033023ms ago: executing program 5 (id=1994): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) close_range(r1, r1, 0x0) 64.466611ms ago: executing program 1 (id=1995): socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 2 (id=1996): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x11, 0x148, 0x250, 0x0, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth0_vlan\x00', {0xb, 0x2, 0x2f, 0xb2, 0x6, 0x8, 0x8, 0x18}, {0xf2}}}, @common=@unspec=@state={{0x28}, {0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xb, 0xb, 0x4468, 'syz1\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x6, 0xf93b, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x800e805) kernel console output (not intermixed with test programs): .739936][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 611.772131][ T5612] Bluetooth: hci3: unexpected event for opcode 0x200c [ 611.792758][ T5615] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 611.793188][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 612.415149][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 613.025412][ T9071] comedi comedi3: fl512: I/O base address not correctly aligned [ 618.944991][ T5615] Bluetooth: hci2: unexpected event for opcode 0x007f [ 618.992659][ T5832] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 619.142562][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 619.146439][ T5832] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 619.146463][ T5832] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 619.149916][ T5832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 619.149936][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 619.149951][ T5832] usb 2-1: SerialNumber: syz [ 619.486794][ T9087] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 619.492273][ T5832] usb 2-1: No union descriptors [ 619.580742][ T9107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.652578][ T5740] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 620.032599][ T5612] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 620.063977][ T5720] usb 2-1: USB disconnect, device number 12 [ 620.082581][ T5740] usb 4-1: Using ep0 maxpacket: 16 [ 620.098368][ T5740] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.098425][ T5740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 620.098453][ T5740] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 620.100479][ T5740] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 620.100508][ T5740] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 620.100529][ T5740] usb 4-1: Manufacturer: syz [ 620.213468][ T5740] usb 4-1: config 0 descriptor?? [ 622.361219][ T5740] usb 4-1: USB disconnect, device number 16 [ 624.376864][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.376941][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.444631][ T5612] Bluetooth: hci0: unexpected event for opcode 0x007f [ 626.572595][ T5740] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 626.701839][ T9155] comedi comedi3: fl512: I/O base address not correctly aligned [ 626.913184][ T5740] usb 4-1: Using ep0 maxpacket: 32 [ 627.679526][ T5740] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 627.679550][ T5740] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 627.716760][ T5740] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.716782][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 627.716797][ T5740] usb 4-1: SerialNumber: syz [ 627.985935][ T9147] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 628.018437][ T5740] usb 4-1: No union descriptors [ 629.025457][ T5720] usb 4-1: USB disconnect, device number 17 [ 633.152565][ T5720] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 633.312527][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 633.315459][ T5720] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.315514][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 633.315544][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 633.317430][ T5720] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 633.317459][ T5720] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 633.317480][ T5720] usb 4-1: Manufacturer: syz [ 633.437913][ T5720] usb 4-1: config 0 descriptor?? [ 635.884646][ T5832] usb 4-1: USB disconnect, device number 18 [ 635.932650][ T5720] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 636.330406][ T5720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.345897][ T5720] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 636.345928][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.345950][ T5720] usb 1-1: Product: syz [ 636.345965][ T5720] usb 1-1: Manufacturer: syz [ 636.345980][ T5720] usb 1-1: SerialNumber: syz [ 636.404560][ T5720] usb 1-1: config 0 descriptor?? [ 636.488223][ T5720] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 636.631647][ T5612] Bluetooth: hci1: unexpected event for opcode 0x007f [ 637.254824][ T5720] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 637.254937][ T5720] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 637.263945][ T5720] usb 1-1: USB disconnect, device number 7 [ 637.746728][ T5612] Bluetooth: hci1: unexpected event for opcode 0x007f [ 640.324179][ T9222] overlayfs: failed to clone lowerpath [ 640.432622][ T5740] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 640.582561][ T5740] usb 2-1: Using ep0 maxpacket: 32 [ 640.587586][ T5740] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 640.587609][ T5740] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 640.590214][ T5740] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 640.590235][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 640.590249][ T5740] usb 2-1: SerialNumber: syz [ 640.657594][ T9215] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 640.684723][ T5740] usb 2-1: No union descriptors [ 640.826554][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 641.087158][ T5740] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 642.256148][ T9] usb 2-1: USB disconnect, device number 13 [ 645.026927][ T5740] usb 6-1: Using ep0 maxpacket: 16 [ 645.029497][ T5740] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.029552][ T5740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.029581][ T5740] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 645.059583][ T5740] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 645.059616][ T5740] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 645.059638][ T5740] usb 6-1: Manufacturer: syz [ 645.276918][ T5740] usb 6-1: config 0 descriptor?? [ 645.487747][ T9] usb 6-1: USB disconnect, device number 6 [ 647.062628][ T5720] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 647.225855][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.229725][ T5720] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 647.229757][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.229779][ T5720] usb 6-1: Product: syz [ 647.229795][ T5720] usb 6-1: Manufacturer: syz [ 647.229810][ T5720] usb 6-1: SerialNumber: syz [ 648.069102][ T5720] usb 6-1: config 0 descriptor?? [ 648.087914][ T5720] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 648.156861][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 648.586733][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 648.960104][ T5720] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 648.961972][ T5720] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 649.000416][ T5720] usb 6-1: USB disconnect, device number 7 [ 649.117482][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 651.100166][ T9281] comedi comedi3: fl512: I/O base address not correctly aligned [ 652.364330][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 652.880047][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 653.232549][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.232609][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 653.232637][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 653.330646][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 653.330680][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 653.330701][ T9] usb 2-1: Manufacturer: syz [ 653.347060][ T9] usb 2-1: config 0 descriptor?? [ 653.770727][ T5612] Bluetooth: hci3: unexpected event for opcode 0x007f [ 653.783056][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1042'. [ 654.707357][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 655.180416][ T5733] usb 2-1: USB disconnect, device number 14 [ 657.243525][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 657.780060][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.796945][ T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 657.796976][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.796998][ T9] usb 2-1: Product: syz [ 657.797014][ T9] usb 2-1: Manufacturer: syz [ 657.797030][ T9] usb 2-1: SerialNumber: syz [ 658.017701][ T9] usb 2-1: config 0 descriptor?? [ 658.056501][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 659.414389][ T9] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 659.414489][ T9] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 659.422961][ T9] usb 2-1: USB disconnect, device number 15 [ 661.118720][ T5612] Bluetooth: hci0: unexpected event for opcode 0x007f [ 661.329809][ T9356] trusted_key: encrypted_key: keylen parameter is missing [ 662.152606][ T5740] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 662.306682][ T5740] usb 1-1: Using ep0 maxpacket: 32 [ 662.309541][ T5740] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 662.309576][ T5740] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 662.346461][ T5740] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.346484][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 662.346498][ T5740] usb 1-1: SerialNumber: syz [ 662.392149][ T9357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 662.411772][ T5740] usb 1-1: No union descriptors [ 662.475816][ T5612] Bluetooth: hci4: unexpected event for opcode 0x007f [ 662.700675][ T5740] usb 1-1: USB disconnect, device number 8 [ 663.022529][ T5733] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 663.172576][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 663.174897][ T5733] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.174916][ T5733] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 663.178608][ T5733] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 663.178629][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.178644][ T5733] usb 2-1: Product: syz [ 663.178654][ T5733] usb 2-1: Manufacturer: syz [ 663.178665][ T5733] usb 2-1: SerialNumber: syz [ 663.535420][ T5733] usb 2-1: USB disconnect, device number 16 [ 663.962223][ T9375] trusted_key: encrypted_key: insufficient parameters specified [ 663.974797][ T9375] trusted_key: encrypted_key: keylen parameter is missing [ 664.232534][ T5720] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 664.382641][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 664.391614][ T5720] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 664.391650][ T5720] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 664.428815][ T5720] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 664.428850][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 664.428873][ T5720] usb 1-1: SerialNumber: syz [ 664.496760][ T9375] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 664.500659][ T5720] usb 1-1: No union descriptors [ 666.414494][ T9] usb 1-1: USB disconnect, device number 9 [ 667.722561][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 667.775239][ T5612] Bluetooth: hci3: unexpected event for opcode 0x007f [ 667.878945][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.893609][ T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 667.893643][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.893666][ T9] usb 4-1: Product: syz [ 667.893682][ T9] usb 4-1: Manufacturer: syz [ 667.893698][ T9] usb 4-1: SerialNumber: syz [ 667.941306][ T9] usb 4-1: config 0 descriptor?? [ 667.964046][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 668.577178][ T9] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 668.577291][ T9] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 670.906099][ T5720] usb 4-1: USB disconnect, device number 19 [ 671.750978][ T9414] trusted_key: encrypted_key: keylen parameter is missing [ 672.001265][ T9421] binder: 9416:9421 ioctl 4018620d 0 returned -22 [ 672.179845][ T9424] binder: 9416:9424 ioctl c0306201 0 returned -14 [ 672.572194][ T5740] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 672.723134][ T5740] usb 1-1: Using ep0 maxpacket: 32 [ 672.729356][ T5740] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 672.729380][ T5740] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 672.733338][ T5740] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.733421][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 672.733475][ T5740] usb 1-1: SerialNumber: syz [ 672.799946][ T9415] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 672.821416][ T5740] usb 1-1: No union descriptors [ 673.184747][ T5740] usb 1-1: USB disconnect, device number 10 [ 677.875320][ T9446] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1078'. [ 683.202334][ T9476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1093'. [ 686.226701][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.226799][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.526746][ T9510] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 691.264645][ T9516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.421589][ T9523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1108'. [ 692.449212][ T9525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1109'. [ 694.508067][ T9538] binder: 9537:9538 ioctl 4018620d 0 returned -22 [ 694.740415][ T5612] Bluetooth: hci3: unexpected event for opcode 0x007f [ 695.326639][ T9553] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 695.538355][ T9555] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1115'. [ 697.100691][ T9562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.458445][ T9569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1123'. [ 704.188623][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.191202][ T9584] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.201476][ T9584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.404249][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.407333][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.415190][ T9584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.415211][ T9584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.422898][ T9584] veth1_vlan: left promiscuous mode [ 704.428174][ T9584] veth0_vlan: left promiscuous mode [ 704.429380][ T9584] veth0_vlan: entered promiscuous mode [ 704.436610][ T9584] veth1_vlan: entered promiscuous mode [ 704.457681][ T9584] veth1_macvtap: left promiscuous mode [ 704.461992][ T9584] veth0_macvtap: left promiscuous mode [ 704.465992][ T9584] veth0_macvtap: entered promiscuous mode [ 704.470025][ T9584] veth1_macvtap: entered promiscuous mode [ 704.497271][ T9584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 704.501919][ T9584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 704.506750][ T9584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 704.511330][ T9584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.525345][ T9584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 704.532524][ T5720] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 704.600065][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.651168][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.702569][ T5720] usb 6-1: Using ep0 maxpacket: 8 [ 704.704602][ T5720] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.710458][ T5720] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 704.710482][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.710496][ T5720] usb 6-1: Product: syz [ 704.710507][ T5720] usb 6-1: Manufacturer: syz [ 704.710517][ T5720] usb 6-1: SerialNumber: syz [ 704.766162][ T5720] usb 6-1: config 0 descriptor?? [ 704.799893][ T5720] cdc_ether 6-1:0.0: skipping garbage [ 704.799915][ T5720] cdc_ether 6-1:0.0: bad CDC descriptors [ 704.828207][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.828345][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.908789][ T5720] usb 6-1: unsupported MDLM descriptors [ 704.909449][ T5720] cdc_acm 6-1:0.0: skipping garbage [ 705.009364][ T9584] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1128'. [ 705.016954][ T9] usb 6-1: USB disconnect, device number 8 [ 705.411260][ T141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.463787][ T141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.467519][ T141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.469422][ T141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.050013][ T9600] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1133'. [ 706.720809][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 707.008736][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 707.095645][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 707.191978][ T5612] Bluetooth: hci0: unexpected event for opcode 0x007f [ 707.253254][ T9608] bridge3: entered allmulticast mode [ 707.253513][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 709.281465][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 709.327902][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 709.336225][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 709.354095][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 712.901927][ T9638] Mount JFS Failure: -5 [ 716.320986][ T9653] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1146'. [ 716.827676][ T9661] fuse: fd is not a fuse device [ 717.738381][ T5612] Bluetooth: hci3: unexpected event for opcode 0x007f [ 720.556014][ T9688] Mount JFS Failure: -5 [ 723.366084][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 724.955258][ T9707] Mount JFS Failure: -5 [ 730.088263][ T9739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.235145][ T9751] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1170'. [ 732.493332][ T824] kernel read not supported for file /input/mice (pid: 824 comm: kworker/0:2) [ 732.622167][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 732.631019][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 732.631304][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 732.631710][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 734.244459][ T9772] 9p: Bad value for 'wfdno' [ 737.833255][ T9800] comedi comedi3: fl512: I/O base address not correctly aligned [ 740.660130][ T9810] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 742.038794][ T9819] Mount JFS Failure: -5 [ 744.856397][ T9825] 9p: Bad value for 'wfdno' [ 745.896853][ T9835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.384043][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.384126][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.669057][ T5612] Bluetooth: hci0: unexpected event for opcode 0x007f [ 749.588941][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1204'. [ 749.725588][ T9855] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 750.039644][ T5328] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 750.143228][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 750.202910][ T5328] usb 1-1: Using ep0 maxpacket: 8 [ 750.246298][ T5328] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 750.246348][ T5328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.246667][ T5328] usb 1-1: config 0 has no interface number 0 [ 750.340707][ T5328] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 750.340776][ T5328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.341215][ T5328] usb 1-1: Product: syz [ 750.341351][ T5328] usb 1-1: Manufacturer: syz [ 750.341369][ T5328] usb 1-1: SerialNumber: syz [ 750.688158][ T5328] usb 1-1: config 0 descriptor?? [ 750.736683][ T5328] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 750.736725][ T5328] uvcvideo 1-1:0.31: No valid video chain found. [ 750.897213][ T9855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.897972][ T9855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.928407][ T5792] usb 1-1: USB disconnect, device number 11 [ 751.740568][ T9873] 9p: Bad value for 'wfdno' [ 752.662699][ T9883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.153673][ T5792] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 753.312546][ T5792] usb 4-1: Using ep0 maxpacket: 32 [ 753.352417][ T5792] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 753.352453][ T5792] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 753.355960][ T5792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.355991][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 753.356013][ T5792] usb 4-1: SerialNumber: syz [ 753.452434][ T9879] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 753.509124][ T5792] usb 4-1: No union descriptors [ 753.859279][ T5792] usb 4-1: USB disconnect, device number 20 [ 757.981214][ T9902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1218'. [ 758.035667][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 758.150866][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1223'. [ 758.288282][ T9909] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 758.673919][ T9914] 9p: Bad value for 'wfdno' [ 758.782558][ T5328] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 758.933400][ T5328] usb 6-1: Using ep0 maxpacket: 8 [ 758.936262][ T5328] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 758.936289][ T5328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.936309][ T5328] usb 6-1: config 0 has no interface number 0 [ 758.939010][ T5328] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 758.939043][ T5328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.939058][ T5328] usb 6-1: Product: syz [ 758.939069][ T5328] usb 6-1: Manufacturer: syz [ 758.939079][ T5328] usb 6-1: SerialNumber: syz [ 759.007148][ T5328] usb 6-1: config 0 descriptor?? [ 759.029489][ T5328] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 759.029514][ T5328] uvcvideo 6-1:0.31: No valid video chain found. [ 759.165433][ T9920] bond1: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 759.224608][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.225246][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.248044][ T5792] usb 6-1: USB disconnect, device number 9 [ 762.281640][ T9935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.513365][ T9947] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1235'. [ 766.522472][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 771.258168][ T9988] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 773.401847][ T5612] Bluetooth: hci1: unexpected event for opcode 0x007f [ 774.950415][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1249'. [ 776.307636][ T5328] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 776.472640][ T5328] usb 2-1: Using ep0 maxpacket: 8 [ 776.478384][ T5328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.499639][ T5328] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 776.499670][ T5328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.499693][ T5328] usb 2-1: Product: syz [ 776.499709][ T5328] usb 2-1: Manufacturer: syz [ 776.499725][ T5328] usb 2-1: SerialNumber: syz [ 776.579182][ T5328] usb 2-1: config 0 descriptor?? [ 776.596170][ T5328] cdc_ether 2-1:0.0: bad CDC descriptors [ 776.619966][ T5328] usb 2-1: unsupported MDLM descriptors [ 777.015305][ T5720] usb 2-1: USB disconnect, device number 17 [ 781.832657][ T5612] Bluetooth: hci3: unexpected event for opcode 0x007f [ 783.328604][T10069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1272'. [ 791.246163][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 794.066282][T10113] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.066922][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.806797][T10113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.829076][T10113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.139185][T10130] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 797.418283][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 799.469519][ T5612] Bluetooth: hci2: unexpected event for opcode 0x007f [ 801.395553][ T55] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.412860][ T55] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.412914][ T55] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.412954][ T55] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.776135][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 804.417896][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 804.494403][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 804.510434][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 804.560637][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 804.562378][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 805.291863][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1308'. [ 807.202537][T10196] Mount JFS Failure: -5 [ 808.737394][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.737729][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.642611][ T9587] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 812.792523][ T9587] usb 1-1: Using ep0 maxpacket: 8 [ 812.794271][ T9587] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 812.794304][ T9587] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 812.794333][ T9587] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 812.794356][ T9587] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 812.794375][ T9587] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 812.794394][ T9587] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 812.794414][ T9587] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 812.794435][ T9587] usb 1-1: config 168 interface 0 has no altsetting 0 [ 812.795408][ T9587] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 812.795436][ T9587] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 812.795469][ T9587] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 812.795489][ T9587] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 812.795508][ T9587] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 812.795527][ T9587] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 812.795546][ T9587] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 812.795566][ T9587] usb 1-1: config 168 interface 0 has no altsetting 0 [ 812.796591][ T9587] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 812.796617][ T9587] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 812.796645][ T9587] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 812.796666][ T9587] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 812.796685][ T9587] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 812.796704][ T9587] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 812.796724][ T9587] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 812.796744][ T9587] usb 1-1: config 168 interface 0 has no altsetting 0 [ 812.802094][ T9587] usb 1-1: string descriptor 0 read error: -22 [ 813.038147][ T9587] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 813.038180][ T9587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.164718][ T9587] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 815.357167][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 815.847074][ T9587] usb 1-1: USB disconnect, device number 12 [ 815.912108][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1322'. [ 819.331919][T10244] Mount JFS Failure: -5 [ 823.021680][T10266] comedi comedi3: fl512: I/O base address not correctly aligned [ 825.679520][T10281] comedi comedi3: fl512: I/O base address not correctly aligned [ 827.935316][T10295] trusted_key: encrypted_key: insufficient parameters specified [ 827.956192][T10295] trusted_key: encrypted_key: insufficient parameters specified [ 829.052518][ T5612] Bluetooth: Unexpected start frame (len 16) [ 829.290354][T10299] bond1: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 829.342868][ T5328] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 829.521992][ T5328] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 829.522024][ T5328] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 829.522039][ T5328] usb 6-1: Product: syz [ 829.522050][ T5328] usb 6-1: SerialNumber: syz [ 829.585601][ T5328] usb 6-1: config 0 descriptor?? [ 829.674564][T10307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.587432][ T5328] hso 6-1:0.0: Failed to find BULK eps [ 832.327656][ T5328] usb 6-1: USB disconnect, device number 10 [ 833.265270][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 833.875895][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 834.199558][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.012007][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 835.012041][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.012064][ T9] usb 1-1: Product: syz [ 835.012079][ T9] usb 1-1: Manufacturer: syz [ 835.012095][ T9] usb 1-1: SerialNumber: syz [ 835.692932][ T9] usb 1-1: config 0 descriptor?? [ 835.695019][ T9] usb 1-1: can't set config #0, error -71 [ 835.742514][ T9] usb 1-1: USB disconnect, device number 13 [ 835.975855][T10331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.180597][ T5612] Bluetooth: hci4: unexpected event for opcode 0x007f [ 841.502587][ T9587] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 841.652561][ T9587] usb 2-1: Using ep0 maxpacket: 8 [ 841.654878][ T9587] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.657323][ T9587] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 841.657352][ T9587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.657372][ T9587] usb 2-1: Product: syz [ 841.657390][ T9587] usb 2-1: Manufacturer: syz [ 841.657401][ T9587] usb 2-1: SerialNumber: syz [ 841.694432][ T9587] usb 2-1: config 0 descriptor?? [ 841.727546][ T9587] usb 2-1: No union descriptors [ 841.731922][ T9587] usb 2-1: unsupported MDLM descriptors [ 842.082901][ T5328] usb 2-1: USB disconnect, device number 18 [ 843.399114][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 843.421868][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 843.427520][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 843.441690][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 846.055325][T10414] binder: 10412:10414 ioctl 4018620d 0 returned -22 [ 846.088330][T10414] binder: 10412:10414 ioctl c0306201 0 returned -14 [ 846.650557][ T5612] Bluetooth: hci0: unexpected event for opcode 0x007f [ 847.952836][T10439] 9p: Bad value for 'rfdno' [ 848.869171][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1382'. [ 852.106024][T10461] trusted_key: encrypted_key: insufficient parameters specified [ 852.111863][T10461] trusted_key: encrypted_key: insufficient parameters specified [ 852.319156][T10465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.572187][ T5612] Bluetooth: hci3: unexpected event for opcode 0x007f [ 853.934763][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1391'. [ 854.590184][T10494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.211732][ T5612] Bluetooth: hci1: unexpected event for opcode 0x007f [ 861.629824][T10543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.632547][T10543] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.639073][T10543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.657338][T10545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.035184][T10543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.037325][T10543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.042602][T10543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 862.042621][T10543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 862.047723][T10543] veth1_vlan: left promiscuous mode [ 862.048835][T10543] veth0_vlan: left promiscuous mode [ 862.049739][T10543] veth0_vlan: entered promiscuous mode [ 862.055236][T10543] veth1_vlan: entered promiscuous mode [ 862.060351][T10543] veth1_macvtap: left promiscuous mode [ 862.061458][T10543] veth0_macvtap: left promiscuous mode [ 862.062681][T10543] veth0_macvtap: entered promiscuous mode [ 862.063766][T10543] veth1_macvtap: entered promiscuous mode [ 862.069985][T10543] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 862.071173][T10543] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.072265][T10543] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.073470][T10543] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.076534][T10543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 862.210113][ T9587] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 862.265282][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.266272][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.299123][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.299217][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.362562][ T9587] usb 6-1: Using ep0 maxpacket: 8 [ 862.365905][ T9587] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.368190][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.371212][ T9587] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 862.371242][ T9587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.371266][ T9587] usb 6-1: Product: syz [ 862.371282][ T9587] usb 6-1: Manufacturer: syz [ 862.371297][ T9587] usb 6-1: SerialNumber: syz [ 862.498235][ T9587] usb 6-1: config 0 descriptor?? [ 862.530156][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.559953][ T9587] cdc_ether 6-1:0.0: skipping garbage [ 862.559976][ T9587] cdc_ether 6-1:0.0: bad CDC descriptors [ 862.561765][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.561922][ T9587] usb 6-1: unsupported MDLM descriptors [ 862.572434][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.621824][ T9587] cdc_acm 6-1:0.0: skipping garbage [ 862.872813][T10543] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1409'. [ 862.875393][ T5328] usb 6-1: USB disconnect, device number 11 [ 864.640419][ T5612] Bluetooth: hci3: unexpected event for opcode 0x007f [ 864.826059][T10578] Mount JFS Failure: -5 [ 870.275763][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.275840][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.602234][T10600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.686330][ T5612] Bluetooth: hci3: unexpected event for opcode 0x007f [ 870.962359][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1429'. [ 872.660236][T10624] Mount JFS Failure: -5 [ 875.669994][T10637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.281710][T10644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1438'. [ 877.311130][ T5612] Bluetooth: hci3: unexpected event for opcode 0x007f [ 879.780849][ T5612] Bluetooth: hci0: unexpected event for opcode 0x007f [ 879.882159][T10667] fuse: fd is not a fuse device [ 880.089402][T10673] binder: 10672:10673 ioctl c0306201 0 returned -14 [ 880.802476][ T5720] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 880.932554][ T5720] usb 2-1: device descriptor read/64, error -71 [ 881.572445][ T5720] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 881.733831][ T5720] usb 2-1: device descriptor read/64, error -71 [ 881.950268][ T5720] usb usb2-port1: attempt power cycle [ 882.125755][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 882.717822][ T5720] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 883.027030][ T5720] usb 2-1: device descriptor read/8, error -71 [ 883.262497][ T5720] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 883.283361][ T5720] usb 2-1: device descriptor read/8, error -71 [ 883.392756][ T5720] usb usb2-port1: unable to enumerate USB device [ 887.540369][T10725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.764054][ T5733] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 890.915755][ T5733] usb 2-1: Using ep0 maxpacket: 8 [ 890.920823][ T5733] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 890.920861][ T5733] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 890.920899][ T5733] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 890.920920][ T5733] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 890.920939][ T5733] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 890.920958][ T5733] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 890.920979][ T5733] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 890.920999][ T5733] usb 2-1: config 168 interface 0 has no altsetting 0 [ 891.020044][ T5733] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 891.020077][ T5733] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 891.020106][ T5733] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 891.020127][ T5733] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.020146][ T5733] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 891.020166][ T5733] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 891.020186][ T5733] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 891.020206][ T5733] usb 2-1: config 168 interface 0 has no altsetting 0 [ 891.039732][ T5733] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 891.039767][ T5733] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 891.039797][ T5733] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 891.039831][ T5733] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 891.039851][ T5733] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 891.039873][ T5733] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 891.039893][ T5733] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 891.039913][ T5733] usb 2-1: config 168 interface 0 has no altsetting 0 [ 891.172464][ T5733] usb 2-1: string descriptor 0 read error: -22 [ 891.172636][ T5733] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 891.172663][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.304463][ T5733] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 891.370145][T10740] fuse: Unknown parameter 'group_i00000000000000000000' [ 892.096462][ T5733] usb 2-1: USB disconnect, device number 23 [ 894.474303][T10757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.475838][T10757] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.480621][T10757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.471143][ T9587] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 895.862621][ T9587] usb 4-1: Using ep0 maxpacket: 8 [ 895.932135][ T9587] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.944897][ T9587] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 895.944929][ T9587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.944952][ T9587] usb 4-1: Product: syz [ 895.944968][ T9587] usb 4-1: Manufacturer: syz [ 895.944982][ T9587] usb 4-1: SerialNumber: syz [ 895.951887][ T9587] usb 4-1: config 0 descriptor?? [ 895.997652][ T9587] cdc_ether 4-1:0.0: skipping garbage [ 895.997669][ T9587] cdc_ether 4-1:0.0: bad CDC descriptors [ 896.022519][ T9587] usb 4-1: unsupported MDLM descriptors [ 896.039895][ T9587] cdc_acm 4-1:0.0: skipping garbage [ 896.131841][T10757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.134878][T10757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.140432][T10757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 896.140453][T10757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 896.145833][T10757] veth1_vlan: left promiscuous mode [ 896.147062][T10757] veth0_vlan: left promiscuous mode [ 896.147867][T10757] veth0_vlan: entered promiscuous mode [ 896.151061][T10757] veth1_vlan: entered promiscuous mode [ 896.156557][T10757] veth1_macvtap: left promiscuous mode [ 896.157759][T10757] veth0_macvtap: left promiscuous mode [ 896.158971][T10757] veth0_macvtap: entered promiscuous mode [ 896.160144][T10757] veth1_macvtap: entered promiscuous mode [ 896.166369][T10757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.167710][T10757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.169029][T10757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.170770][T10757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 896.173598][T10757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 896.177863][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.200869][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.390300][ T5792] usb 4-1: USB disconnect, device number 21 [ 896.471823][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.471917][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.628494][ T5612] Bluetooth: hci0: unexpected event for opcode 0x007f [ 898.312990][ T2179] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.368437][ T2179] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.369599][ T2179] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.369937][ T2179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.092143][ T5612] Bluetooth: hci1: unexpected event for opcode 0x007f [ 902.215722][T10790] fuse: Unknown parameter 'group_i00000000000000000000' [ 902.977338][T10801] trusted_key: encrypted_key: insufficient parameters specified [ 903.143679][T10806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1483'. [ 903.345645][ T5792] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 903.533859][ T5792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.533907][ T5792] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=52.91 [ 903.533925][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.608705][ T5792] ttusb_dec_send_command: command bulk message failed: error -22 [ 903.609005][ T5792] ttusb-dec 4-1:1.0: probe with driver ttusb-dec failed with error -22 [ 903.788721][T10804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.799391][T10804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.821437][ T5328] usb 4-1: USB disconnect, device number 22 [ 905.534700][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 906.699624][T10838] fuse: Unknown parameter 'group_id00000000000000000000' [ 909.041430][ T5612] Bluetooth: hci4: unexpected event for opcode 0x007f [ 910.092762][T10861] trusted_key: encrypted_key: insufficient parameters specified [ 910.462455][ T9587] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 910.612521][ T9587] usb 4-1: Using ep0 maxpacket: 32 [ 910.630217][ T9587] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 910.630254][ T9587] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 910.631935][ T9587] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 910.631965][ T9587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 910.632008][ T9587] usb 4-1: SerialNumber: syz [ 910.779889][T10860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 910.795653][ T9587] usb 4-1: No union descriptors [ 910.969509][T10867] fuse: fd is not a fuse device [ 911.972529][ T9587] usb 4-1: USB disconnect, device number 23 [ 915.359564][ T5612] Bluetooth: hci4: unexpected event for opcode 0x007f [ 917.466071][ T5328] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 917.812475][ T5328] usb 4-1: Using ep0 maxpacket: 8 [ 917.818348][ T5328] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 917.818389][ T5328] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 917.818441][ T5328] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 917.818472][ T5328] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.818501][ T5328] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 917.818530][ T5328] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 917.818560][ T5328] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 917.818589][ T5328] usb 4-1: config 168 interface 0 has no altsetting 0 [ 917.821153][ T5328] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 917.821200][ T5328] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 917.821243][ T5328] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 917.821280][ T5328] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.821308][ T5328] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 917.821336][ T5328] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 917.821365][ T5328] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 917.821393][ T5328] usb 4-1: config 168 interface 0 has no altsetting 0 [ 917.896674][ T5328] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 917.896795][ T5328] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 917.896910][ T5328] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 917.896984][ T5328] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.897052][ T5328] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 917.897112][ T5328] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 917.897169][ T5328] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 917.897245][ T5328] usb 4-1: config 168 interface 0 has no altsetting 0 [ 917.986279][ T5328] usb 4-1: string descriptor 0 read error: -22 [ 917.986572][ T5328] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 917.986667][ T5328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.301504][T10910] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1517'. [ 918.368108][T10911] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 918.445035][ T5328] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 919.184827][ T5328] usb 4-1: USB disconnect, device number 24 [ 920.007031][T10908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.074964][T10908] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.235258][T10908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.819730][T10908] veth0_to_bond: left allmulticast mode [ 921.008565][T10908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.010986][T10908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.205070][T10908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 921.205098][T10908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 921.293577][T10908] veth1_vlan: left promiscuous mode [ 921.294781][T10908] veth0_vlan: left promiscuous mode [ 921.295540][T10908] veth0_vlan: entered promiscuous mode [ 921.298832][T10908] veth1_vlan: entered promiscuous mode [ 921.445189][T10908] veth1_macvtap: left promiscuous mode [ 921.461049][T10908] veth0_macvtap: left promiscuous mode [ 921.478333][T10908] veth0_macvtap: entered promiscuous mode [ 921.493918][T10908] veth1_macvtap: entered promiscuous mode [ 921.631952][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 921.666178][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 921.701050][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 921.730357][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 922.044708][T10908] bridge1: left allmulticast mode [ 922.055889][T10908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.241169][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.260908][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.275600][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.275692][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.778887][ T5612] Bluetooth: hci1: unexpected event for opcode 0x007f [ 922.817283][ T149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.880900][ T149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.881877][ T149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.882197][ T149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.124637][ T5612] Bluetooth: hci2: unexpected event for opcode 0x200c [ 925.692238][T10960] trusted_key: encrypted_key: insufficient parameters specified [ 925.704720][T10960] trusted_key: encrypted_key: insufficient parameters specified [ 928.253922][T10984] fuse: fd is not a fuse device [ 931.307685][T10997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.310417][T10997] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.348166][T10997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.398461][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.398538][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.726435][T10997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.737143][T10997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.764606][T10997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 932.764637][T10997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 932.805847][T10997] veth1_vlan: left promiscuous mode [ 932.807039][T10997] veth0_vlan: left promiscuous mode [ 932.807910][T10997] veth0_vlan: entered promiscuous mode [ 932.827644][T10997] veth1_vlan: entered promiscuous mode [ 932.960565][T11010] Mount JFS Failure: -5 [ 933.526721][T10997] veth1_macvtap: left promiscuous mode [ 933.613011][ T824] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 933.991786][T10997] veth0_macvtap: left promiscuous mode [ 934.444353][T10997] veth0_macvtap: entered promiscuous mode [ 934.632773][ T824] usb 1-1: device descriptor read/64, error -71 [ 934.878581][T10997] veth1_macvtap: entered promiscuous mode [ 935.082596][ T824] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 936.644363][T11017] fuse: fd is not a fuse device [ 936.723571][ T824] usb 1-1: device descriptor read/64, error -71 [ 936.906574][ T824] usb usb1-port1: attempt power cycle [ 936.914456][T10997] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 936.996786][T10997] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 937.102670][T10997] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 937.107136][T10997] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 937.131065][T10997] bridge1: left allmulticast mode [ 937.153650][T10997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 937.180459][ T2179] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.180724][ T2179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.199344][ T2179] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.199499][ T2179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.261913][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.285461][ T55] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.286111][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.286562][ T55] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.842545][ T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 938.001037][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.024380][ T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 938.024414][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.024436][ T9] usb 2-1: Product: syz [ 938.024452][ T9] usb 2-1: Manufacturer: syz [ 938.024467][ T9] usb 2-1: SerialNumber: syz [ 938.085254][ T9] usb 2-1: config 0 descriptor?? [ 938.104702][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 938.241369][ T5612] Bluetooth: hci2: unexpected event for opcode 0x7604 [ 938.555855][ T9] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 938.555961][ T9] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 938.583876][ T9] usb 2-1: USB disconnect, device number 24 [ 939.001048][T11044] trusted_key: encrypted_key: insufficient parameters specified [ 941.473467][ T5616] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 941.642621][ T5616] usb 2-1: Using ep0 maxpacket: 8 [ 941.644982][ T5616] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 941.645023][ T5616] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 941.645068][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 941.645098][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 941.645127][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 941.645163][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 941.645193][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 941.645223][ T5616] usb 2-1: config 168 interface 0 has no altsetting 0 [ 941.646807][ T5616] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 941.646847][ T5616] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 941.646891][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 941.646922][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 941.646950][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 941.646977][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 941.647006][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 941.647036][ T5616] usb 2-1: config 168 interface 0 has no altsetting 0 [ 941.651808][ T5616] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 941.651848][ T5616] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 941.651900][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 941.651930][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 941.651959][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 941.651987][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 941.652017][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 941.652047][ T5616] usb 2-1: config 168 interface 0 has no altsetting 0 [ 941.840268][ T5616] usb 2-1: string descriptor 0 read error: -22 [ 941.840405][ T5616] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 941.840428][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.010996][ T5616] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 942.015091][ T5792] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 942.192591][ T5792] usb 6-1: Using ep0 maxpacket: 32 [ 942.230019][ T5792] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 942.230070][ T5792] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 942.243413][ T5792] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 942.243493][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 942.243516][ T5792] usb 6-1: SerialNumber: syz [ 942.283587][ T5612] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 942.283870][ T5612] Bluetooth: hci2: Injecting HCI hardware error event [ 942.287909][ T5612] Bluetooth: hci2: hardware error 0x00 [ 942.301887][T11043] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 942.328382][ T5792] usb 6-1: No union descriptors [ 942.637112][ T5720] usb 6-1: USB disconnect, device number 12 [ 942.793778][ T5733] usb 2-1: USB disconnect, device number 25 [ 945.026344][ T5612] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 945.392640][ T5616] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 945.604598][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1571'. [ 946.596219][ T5616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.618252][ T5616] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 946.618285][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.618300][ T5616] usb 2-1: Product: syz [ 946.618311][ T5616] usb 2-1: Manufacturer: syz [ 946.618322][ T5616] usb 2-1: SerialNumber: syz [ 946.677227][ T5616] usb 2-1: config 0 descriptor?? [ 946.716452][ T5616] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 947.616955][ T5616] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 947.617048][ T5616] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 947.655906][ T5616] usb 2-1: USB disconnect, device number 26 [ 949.697093][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'. [ 949.700738][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'. [ 949.701047][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'. [ 949.701287][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'. [ 949.701400][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'. [ 950.312482][T11101] Mount JFS Failure: -5 [ 950.872471][ T824] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 951.022527][ T824] usb 6-1: Using ep0 maxpacket: 8 [ 951.025762][ T824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.030545][ T824] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 951.030597][ T824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.030619][ T824] usb 6-1: Product: syz [ 951.030635][ T824] usb 6-1: Manufacturer: syz [ 951.030650][ T824] usb 6-1: SerialNumber: syz [ 951.088938][ T824] usb 6-1: config 0 descriptor?? [ 951.127315][ T824] usb 6-1: No union descriptors [ 951.130355][ T824] usb 6-1: unsupported MDLM descriptors [ 951.135420][ T824] cdc_acm 6-1:0.0: Zero length descriptor references [ 951.137223][ T824] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 953.085495][ T5733] usb 6-1: USB disconnect, device number 13 [ 953.275088][T11116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.102501][ T5733] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 955.085283][ T5733] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.107137][ T5733] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 955.107161][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.107182][ T5733] usb 6-1: Product: syz [ 955.107209][ T5733] usb 6-1: Manufacturer: syz [ 955.107226][ T5733] usb 6-1: SerialNumber: syz [ 955.195295][ T5733] usb 6-1: config 0 descriptor?? [ 955.330035][ T5733] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 956.817954][ T5733] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 956.818057][ T5733] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 957.988821][T11142] blktrace: Concurrent blktraces are not allowed on loop0 [ 958.037108][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'. [ 959.003153][ T9] usb 6-1: USB disconnect, device number 14 [ 961.680258][ T5792] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 962.072484][ T5792] usb 1-1: Using ep0 maxpacket: 8 [ 962.079860][ T5792] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 962.079913][ T5792] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 962.079958][ T5792] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 962.079990][ T5792] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 962.080017][ T5792] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 962.080046][ T5792] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 962.080076][ T5792] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 962.080106][ T5792] usb 1-1: config 168 interface 0 has no altsetting 0 [ 962.179020][ T5792] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 962.179069][ T5792] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 962.179113][ T5792] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 962.179144][ T5792] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 962.179172][ T5792] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 962.179211][ T5792] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 962.179240][ T5792] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 962.179271][ T5792] usb 1-1: config 168 interface 0 has no altsetting 0 [ 962.200600][ T5792] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 962.201296][ T5792] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 962.201351][ T5792] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 962.201382][ T5792] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 962.201411][ T5792] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 962.201439][ T5792] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 962.201469][ T5792] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 962.201499][ T5792] usb 1-1: config 168 interface 0 has no altsetting 0 [ 962.411908][ T5792] usb 1-1: string descriptor 0 read error: -71 [ 962.412078][ T5792] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 962.412103][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.526172][ T5792] usb 1-1: can't set config #168, error -71 [ 962.645223][ T5792] usb 1-1: USB disconnect, device number 17 [ 963.092610][ T5792] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 963.242431][ T5792] usb 1-1: Using ep0 maxpacket: 8 [ 963.245760][ T5792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.249413][ T5792] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 963.249443][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.249464][ T5792] usb 1-1: Product: syz [ 963.249479][ T5792] usb 1-1: Manufacturer: syz [ 963.249495][ T5792] usb 1-1: SerialNumber: syz [ 963.307496][ T5792] usb 1-1: config 0 descriptor?? [ 963.331950][ T5792] usb 1-1: No union descriptors [ 963.339359][ T5792] usb 1-1: unsupported MDLM descriptors [ 963.340498][ T5792] cdc_acm 1-1:0.0: Zero length descriptor references [ 963.340540][ T5792] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 963.675831][ T9] usb 1-1: USB disconnect, device number 18 [ 964.962468][ T5792] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 966.042419][ T5792] usb 6-1: Using ep0 maxpacket: 8 [ 966.371541][ T5792] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 966.371697][ T5792] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 966.371744][ T5792] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 966.371774][ T5792] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 966.371806][ T5792] usb 6-1: config 168 interface 0 has no altsetting 0 [ 966.430515][T11183] trusted_key: encrypted_key: insufficient parameters specified [ 966.443239][ T5792] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 966.443285][ T5792] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 966.443341][ T5792] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 966.443372][ T5792] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 966.443411][ T5792] usb 6-1: config 168 interface 0 has no altsetting 0 [ 966.448059][ T5792] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 966.448104][ T5792] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 966.448148][ T5792] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 966.448179][ T5792] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 966.448210][ T5792] usb 6-1: config 168 interface 0 has no altsetting 0 [ 966.532953][T11183] trusted_key: encrypted_key: insufficient parameters specified [ 966.582563][ T5792] usb 6-1: string descriptor 0 read error: -22 [ 966.582692][ T5792] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 966.582712][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.838015][ T5792] adutux 6-1:168.0: interrupt endpoints not found [ 967.129147][ T5733] usb 6-1: USB disconnect, device number 15 [ 967.567907][T11193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 967.577171][T11193] IPv6: NLM_F_CREATE should be set when creating new route [ 968.347239][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.390792][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.939403][T11201] trusted_key: encrypted_key: insufficient parameters specified [ 969.362862][ T9587] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 969.565763][ T9587] usb 6-1: Using ep0 maxpacket: 32 [ 969.568492][ T9587] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 969.568536][ T9587] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 969.570120][ T9587] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 969.570150][ T9587] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 969.570174][ T9587] usb 6-1: SerialNumber: syz [ 969.645926][T11200] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 969.662587][T11062] Bluetooth: hci1: unexpected event for opcode 0x007f [ 969.696482][ T9587] usb 6-1: No union descriptors [ 969.882882][ T9587] usb 6-1: USB disconnect, device number 16 [ 970.185186][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.190897][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.453205][T11209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1609'. [ 974.006437][T11210] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 974.006541][T11210] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 974.006655][T11210] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 974.066703][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.115251][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.115306][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.115347][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.862592][ T5612] Bluetooth: hci4: unexpected event for opcode 0x007f [ 975.902419][T10760] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 976.064902][T10760] usb 2-1: Using ep0 maxpacket: 8 [ 976.067451][T10760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.093316][T10760] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 976.093347][T10760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.093375][T10760] usb 2-1: Product: syz [ 976.093386][T10760] usb 2-1: Manufacturer: syz [ 976.093396][T10760] usb 2-1: SerialNumber: syz [ 976.140235][T10760] usb 2-1: config 0 descriptor?? [ 976.166327][T10760] usb 2-1: No union descriptors [ 976.169309][T10760] usb 2-1: unsupported MDLM descriptors [ 976.170167][T10760] cdc_acm 2-1:0.0: Zero length descriptor references [ 976.170194][T10760] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 976.411111][ T9] usb 2-1: USB disconnect, device number 27 [ 976.674823][ T5328] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 977.972489][ T5328] usb 4-1: Using ep0 maxpacket: 8 [ 977.975433][ T5328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.980299][ T5328] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 977.980331][ T5328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.980361][ T5328] usb 4-1: Product: syz [ 977.980375][ T5328] usb 4-1: Manufacturer: syz [ 977.980386][ T5328] usb 4-1: SerialNumber: syz [ 978.006914][ T5328] usb 4-1: config 0 descriptor?? [ 978.019780][ T5328] cdc_ether 4-1:0.0: skipping garbage [ 978.019843][ T5328] cdc_ether 4-1:0.0: bad CDC descriptors [ 978.027277][ T5328] usb 4-1: unsupported MDLM descriptors [ 978.029221][ T5328] cdc_acm 4-1:0.0: skipping garbage [ 978.152459][T10760] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 978.237785][T11244] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1618'. [ 978.259946][ T5720] usb 4-1: USB disconnect, device number 25 [ 978.303790][T10760] usb 1-1: Using ep0 maxpacket: 8 [ 978.307883][T10760] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 978.307927][T10760] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 978.307971][T10760] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 978.308002][T10760] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 978.308032][T10760] usb 1-1: config 168 interface 0 has no altsetting 0 [ 978.309963][T10760] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 978.310005][T10760] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 978.310049][T10760] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 978.310079][T10760] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 978.310109][T10760] usb 1-1: config 168 interface 0 has no altsetting 0 [ 978.311905][T10760] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 978.311945][T10760] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 978.311999][T10760] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 978.312030][T10760] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 978.312067][T10760] usb 1-1: config 168 interface 0 has no altsetting 0 [ 978.448228][T10760] usb 1-1: string descriptor 0 read error: -22 [ 978.448399][T10760] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 978.448426][T10760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.550954][T10760] adutux 1-1:168.0: interrupt endpoints not found [ 978.825094][ T824] usb 1-1: USB disconnect, device number 19 [ 979.031991][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1623'. [ 983.302691][ T824] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 983.312084][T11062] Bluetooth: hci4: unexpected event for opcode 0x007f [ 983.554622][ T824] usb 1-1: device descriptor read/64, error -71 [ 984.825319][ T824] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 984.992417][ T824] usb 1-1: device descriptor read/64, error -71 [ 985.107167][ T824] usb usb1-port1: attempt power cycle [ 985.173047][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 985.174473][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 985.174809][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 985.175574][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 985.175766][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 985.642428][ T824] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 985.663135][ T824] usb 1-1: device descriptor read/8, error -71 [ 985.906189][ T824] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 985.923212][ T824] usb 1-1: device descriptor read/8, error -71 [ 986.146433][ T824] usb usb1-port1: unable to enumerate USB device [ 987.768177][T11307] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1637'. [ 989.013416][T11311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.566967][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.567022][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.685839][T11062] Bluetooth: hci4: unexpected event for opcode 0x007f [ 996.761914][T11348] fuse: fd is not a fuse device [ 1001.139666][T11368] binder: 11360:11368 ioctl 4018620d 0 returned -22 [ 1001.174037][T11368] binder: 11360:11368 ioctl c0306201 0 returned -14 [ 1004.935125][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1005.082387][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1005.086647][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1005.086692][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1005.086728][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1005.086749][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1005.086767][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1005.086787][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1005.086807][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1005.086827][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1005.153205][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1005.153249][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1005.153288][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1005.153309][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1005.153328][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1005.153348][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1005.153368][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1005.153389][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1005.184074][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1005.184878][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1005.184925][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1005.184955][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1005.245979][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1005.246019][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1005.246050][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1005.246081][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1005.389187][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1005.389341][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1005.389368][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.894969][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1005.929878][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1663'. [ 1005.930576][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1663'. [ 1005.930861][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1663'. [ 1005.931092][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1663'. [ 1005.931209][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1663'. [ 1006.186420][ T5328] usb 2-1: USB disconnect, device number 28 [ 1006.403582][T11403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1006.403605][T11403] IPv6: NLM_F_CREATE should be set when creating new route [ 1006.565294][ T823] IPVS: starting estimator thread 0... [ 1007.092697][T11412] IPVS: using max 11 ests per chain, 26400 per kthread [ 1007.428889][T11403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.450792][T11403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.632924][ T823] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1008.794772][ T823] usb 6-1: Using ep0 maxpacket: 8 [ 1008.796751][ T823] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1008.796793][ T823] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1008.796842][ T823] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1008.796863][ T823] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1008.796882][ T823] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1008.796901][ T823] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1008.796920][ T823] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1008.796940][ T823] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1008.798139][ T823] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1008.798176][ T823] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1008.798217][ T823] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1008.798254][ T823] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1008.798274][ T823] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1008.798293][ T823] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1008.798313][ T823] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1008.798339][ T823] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1008.799511][ T823] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1008.799549][ T823] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1008.799597][ T823] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1008.799619][ T823] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1008.799637][ T823] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1008.799657][ T823] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1008.799677][ T823] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1008.799697][ T823] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1008.861022][ T823] usb 6-1: string descriptor 0 read error: -22 [ 1008.861126][ T823] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1008.861145][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.134234][ T823] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1009.169201][T11403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.183324][T11403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.140296][ T5720] usb 6-1: USB disconnect, device number 17 [ 1010.715077][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.730491][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.732917][T11014] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.735515][T10698] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.437528][T11461] blktrace: Concurrent blktraces are not allowed on loop0 [ 1012.441955][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 1012.461167][T11464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.222790][T11491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1016.222810][T11491] IPv6: NLM_F_CREATE should be set when creating new route [ 1018.922613][T11491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.923027][T11491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.172754][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 1021.053671][T11505] trusted_key: encrypted_key: insufficient parameters specified [ 1021.309204][T11509] input: syz1 as /devices/virtual/input/input36 [ 1021.732656][T10760] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1021.935403][T10760] usb 1-1: Using ep0 maxpacket: 32 [ 1021.954532][T10760] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1021.954569][T10760] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1021.957718][T10760] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1021.957749][T10760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1021.958073][T10760] usb 1-1: SerialNumber: syz [ 1022.090838][T11504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1022.437318][T10760] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1022.939766][T10760] usb 1-1: USB disconnect, device number 24 [ 1023.140587][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.273599][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.635386][T11062] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1025.476923][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.494133][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.494169][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.494199][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.714504][ T9587] kernel write not supported for file /input/mice (pid: 9587 comm: kworker/1:0) [ 1031.279745][T11583] trusted_key: encrypted_key: insufficient parameters specified [ 1031.628773][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 1033.447880][ T9] kernel write not supported for file /input/mice (pid: 9 comm: kworker/0:0) [ 1036.010400][T11606] fuse: fd is not a fuse device [ 1038.852547][T11626] trusted_key: encrypted_key: insufficient parameters specified [ 1039.922442][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 1041.205590][ T9587] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1041.356509][ T5616] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1041.513391][ T9587] usb 4-1: Using ep0 maxpacket: 32 [ 1041.513509][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 1041.554508][ T9587] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1041.554641][ T9587] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1041.671721][ T9587] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1041.672047][ T9587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1041.675780][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 1041.707967][ T9587] usb 4-1: SerialNumber: syz [ 1041.736432][T11625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1041.763551][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 1041.774995][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 1041.823828][ T5616] usb 2-1: Using ep0 maxpacket: 8 [ 1041.826619][ T5616] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1041.826661][ T5616] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1041.826704][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1041.826735][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1041.826764][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1041.826792][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1041.826818][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1041.826849][ T5616] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1041.828430][ T5616] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1041.828484][ T5616] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1041.828528][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1041.828558][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1041.828586][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1041.828611][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1041.828653][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1041.828683][ T5616] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1041.830234][ T5616] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1041.830287][ T5616] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1041.830332][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1041.830362][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1041.830389][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1041.830423][ T5616] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1041.830443][ T5616] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1041.830483][ T5616] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1042.079387][ T5616] usb 2-1: string descriptor 0 read error: -22 [ 1042.079749][ T5616] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1042.079776][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.378672][ T5616] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1042.428470][ T9587] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1042.465364][ T9587] usb 4-1: USB disconnect, device number 26 [ 1042.795186][ T5616] usb 2-1: USB disconnect, device number 29 [ 1043.832481][T10760] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1043.982353][T10760] usb 6-1: Using ep0 maxpacket: 8 [ 1043.985126][T10760] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.999818][T10760] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1043.999894][T10760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.999960][T10760] usb 6-1: Product: syz [ 1044.000002][T10760] usb 6-1: Manufacturer: syz [ 1044.000051][T10760] usb 6-1: SerialNumber: syz [ 1044.048765][T10760] usb 6-1: config 0 descriptor?? [ 1044.066663][T10760] cdc_ether 6-1:0.0: bad CDC descriptors [ 1044.081077][T10760] usb 6-1: unsupported MDLM descriptors [ 1044.114310][T10760] kernel write not supported for file /input/mice (pid: 10760 comm: kworker/1:1) [ 1044.114474][T11062] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1044.361143][ T9] usb 6-1: USB disconnect, device number 18 [ 1048.468186][T11699] comedi comedi3: fl512: I/O base address not correctly aligned [ 1049.071437][T10760] kernel write not supported for file /input/mice (pid: 10760 comm: kworker/1:1) [ 1053.432447][ T5616] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1053.492639][T11062] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1053.586335][ T5616] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.586366][ T5616] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1053.586422][ T5616] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1053.586448][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.641136][ T5616] usb 4-1: config 0 descriptor?? [ 1053.658624][ T5616] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1053.677432][ T5616] dvb-usb: bulk message failed: -22 (3/0) [ 1053.712053][ T5616] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1053.728806][ T5616] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1053.728965][ T5616] usb 4-1: media controller created [ 1053.760469][ T5616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.989147][ T5616] dvb-usb: bulk message failed: -22 (6/0) [ 1053.989381][ T5616] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1054.013785][ T5616] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38 [ 1054.022095][ T5616] dvb-usb: schedule remote query interval to 150 msecs. [ 1054.022121][ T5616] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1054.059892][ T5616] usb 4-1: USB disconnect, device number 27 [ 1054.434817][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.434893][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.901266][ T5616] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1056.326698][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 1056.356163][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 1056.364938][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 1056.377306][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 1060.178432][T11780] trusted_key: encrypted_key: insufficient parameters specified [ 1066.743637][T11815] binder: 11810:11815 ioctl 4018620d 0 returned -22 [ 1066.801844][T11815] binder: 11810:11815 ioctl c0306201 0 returned -14 [ 1067.357732][T11818] comedi comedi3: fl512: I/O base address not correctly aligned [ 1070.214877][T11062] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1075.526729][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 1077.248670][T11860] trusted_key: encrypted_key: keylen parameter is missing [ 1077.758554][ T5740] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1079.472978][ T5740] usb 4-1: Using ep0 maxpacket: 32 [ 1079.478222][ T5740] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1079.478258][ T5740] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1079.480999][ T5740] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1079.481021][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1079.481036][ T5740] usb 4-1: SerialNumber: syz [ 1079.598014][T11860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1079.616431][ T5740] usb 4-1: No union descriptors [ 1083.073919][ T5328] usb 4-1: USB disconnect, device number 28 [ 1086.224777][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 1087.569841][T11899] trusted_key: encrypted_key: keylen parameter is missing [ 1087.895848][T10760] kernel read not supported for file /input/mice (pid: 10760 comm: kworker/1:1) [ 1088.072404][ T5740] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1088.182488][T11909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.183976][T11909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.188646][T11909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.252624][ T5740] usb 4-1: Using ep0 maxpacket: 32 [ 1088.265362][ T5740] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1088.265395][ T5740] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1088.271321][ T5740] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1088.271352][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1088.271374][ T5740] usb 4-1: SerialNumber: syz [ 1088.350951][T11909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.353791][T11909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.360906][T11909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1088.360933][T11909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1088.366303][T11909] veth1_vlan: left promiscuous mode [ 1088.367482][T11909] veth0_vlan: left promiscuous mode [ 1088.368417][T11909] veth0_vlan: entered promiscuous mode [ 1088.372262][T11909] veth1_vlan: entered promiscuous mode [ 1088.379433][T11909] veth1_macvtap: left promiscuous mode [ 1088.380661][T11909] veth0_macvtap: left promiscuous mode [ 1088.381970][T11909] veth0_macvtap: entered promiscuous mode [ 1088.383605][T11909] veth1_macvtap: entered promiscuous mode [ 1088.390181][T11909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1088.391969][T11909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1088.393858][T11909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1088.395079][T11909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1088.400368][T11909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1088.493803][T11899] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1088.635732][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.635825][T11014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.639099][ T5740] usb 4-1: No union descriptors [ 1088.655518][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.661531][T11014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.748194][T11913] fuse: fd is not a fuse device [ 1089.672754][ T5740] usb 4-1: USB disconnect, device number 29 [ 1090.480198][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.500816][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.512444][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.513644][ T1017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.034023][T11935] binder: 11934:11935 ioctl c0306201 0 returned -14 [ 1094.302366][ T5328] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1094.452810][ T5328] usb 1-1: Using ep0 maxpacket: 8 [ 1094.832246][T11955] trusted_key: encrypted_key: keylen parameter is missing [ 1094.870591][ T5328] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1094.949193][ T5328] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1094.949930][ T5328] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1094.950036][ T5328] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1094.950417][ T5328] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1094.950936][ T5328] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1094.951132][ T5328] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1094.951356][ T5328] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1095.054921][ T5328] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1095.054965][ T5328] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1095.054994][ T5328] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1095.055015][ T5328] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1095.055034][ T5328] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1095.055053][ T5328] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1095.055073][ T5328] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1095.055093][ T5328] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1095.057635][ T5328] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1095.057675][ T5328] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1095.057722][ T5328] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1095.057743][ T5328] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1095.057762][ T5328] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1095.057781][ T5328] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1095.057808][ T5328] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1095.057828][ T5328] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1095.106266][ T5328] usb 1-1: string descriptor 0 read error: -22 [ 1095.106637][ T5328] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1095.106709][ T5328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.333223][ T5328] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1095.518288][ T5328] usb 1-1: USB disconnect, device number 25 [ 1095.622463][ T823] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1095.858659][ T5720] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1096.372415][ T823] usb 4-1: Using ep0 maxpacket: 32 [ 1096.375592][ T823] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1096.375630][ T823] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1096.377115][ T823] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1096.377135][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1096.377150][ T823] usb 4-1: SerialNumber: syz [ 1096.382401][T11954] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1096.452439][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 1096.456772][ T5720] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1096.456812][ T5720] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1096.456921][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1096.456961][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.456989][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1096.457079][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1096.457110][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1096.457141][ T5720] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1096.460671][ T5720] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1096.460709][ T5720] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1096.460985][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1096.461017][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.461045][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1096.461295][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1096.461326][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1096.461355][ T5720] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1096.486939][ T5720] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1096.498108][ T5720] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1096.508399][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1096.508438][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.520787][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1096.528870][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1096.528896][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1096.528918][ T5720] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1096.741933][ T823] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1096.761027][ T823] usb 4-1: USB disconnect, device number 30 [ 1096.778351][ T5720] usb 2-1: string descriptor 0 read error: -22 [ 1096.778474][ T5720] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1096.778492][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.884864][ T5720] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1098.518282][ T823] usb 2-1: USB disconnect, device number 31 [ 1104.387156][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 1104.405383][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 1104.414743][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 1104.478915][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 1104.480694][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 1106.126130][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 1106.126733][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 1106.126957][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 1106.127143][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 1106.127241][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 1106.752357][ T5328] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1107.172561][ T5328] usb 6-1: Using ep0 maxpacket: 8 [ 1109.377716][ T5328] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1109.377757][ T5328] usb 6-1: can't read configurations, error -71 [ 1111.669586][T12083] input: syz1 as /devices/virtual/input/input39 [ 1115.875542][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.875681][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.396295][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1878'. [ 1116.419454][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1878'. [ 1116.428443][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1878'. [ 1116.434789][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1878'. [ 1116.436273][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1878'. [ 1116.791530][T12109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 1116.791552][T12109] openvswitch: netlink: Flow actions attr not present in new flow. [ 1118.663977][T12124] trusted_key: encrypted_key: insufficient parameters specified [ 1118.666540][T12124] trusted_key: encrypted_key: insufficient parameters specified [ 1122.055000][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1889'. [ 1122.055027][T12144] openvswitch: netlink: Flow actions attr not present in new flow. [ 1122.562723][ T823] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1122.631129][T12148] input: syz1 as /devices/virtual/input/input40 [ 1122.726017][ T823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.796603][ T823] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1122.796636][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.796658][ T823] usb 6-1: Product: syz [ 1122.796675][ T823] usb 6-1: Manufacturer: syz [ 1122.796700][ T823] usb 6-1: SerialNumber: syz [ 1122.837920][ T823] usb 6-1: config 0 descriptor?? [ 1122.895696][ T823] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1124.178471][ T823] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1124.178578][ T823] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1125.682420][ T823] usb 6-1: USB disconnect, device number 21 [ 1128.312362][ T5720] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1128.570757][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 1128.580082][ T5720] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1128.580127][ T5720] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1128.580179][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1128.580210][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1128.580238][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1128.580266][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1128.580294][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1128.580323][ T5720] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1128.581803][ T5720] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1128.581842][ T5720] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1128.581884][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1128.581914][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1128.581942][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1128.581970][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1128.582000][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1128.582029][ T5720] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1130.240388][ T5720] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1130.240466][ T5720] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1130.240571][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1130.240630][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1130.240687][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1130.240745][ T5720] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1130.240802][ T5720] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1130.240871][ T5720] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1130.595583][ T5720] usb 2-1: string descriptor 0 read error: -22 [ 1130.595756][ T5720] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1130.595782][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.072918][ T5720] usb 2-1: can't set config #168, error -71 [ 1131.094236][ T5720] usb 2-1: USB disconnect, device number 32 [ 1131.590125][T12203] trusted_key: encrypted_key: insufficient parameters specified [ 1131.610394][T12203] trusted_key: encrypted_key: insufficient parameters specified [ 1138.931304][T12243] input: syz1 as /devices/virtual/input/input41 [ 1139.442513][ T823] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1140.129738][ T823] usb 6-1: Using ep0 maxpacket: 8 [ 1140.226567][ T823] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1140.226614][ T823] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1140.228739][ T823] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1140.228765][ T823] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1140.230989][ T823] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1140.231015][ T823] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1140.297595][ T823] usb 6-1: string descriptor 0 read error: -22 [ 1140.297760][ T823] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1140.297787][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.365638][ T823] usb 6-1: rejected 3 configurations due to insufficient available bus power [ 1140.365668][ T823] usb 6-1: no configuration chosen from 3 choices [ 1143.570831][T10760] usb 6-1: USB disconnect, device number 22 [ 1143.782352][ T823] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1144.102489][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 1144.105774][ T823] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1144.105818][ T823] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1144.105862][ T823] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1144.105893][ T823] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1144.105924][ T823] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1144.110131][ T823] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1144.110174][ T823] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1144.110218][ T823] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1144.110250][ T823] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1144.110281][ T823] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1145.287921][ T823] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1145.287955][ T823] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1145.287985][ T823] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1145.288006][ T823] usb 2-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1145.288027][ T823] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1145.360818][ T823] usb 2-1: string descriptor 0 read error: -22 [ 1145.360929][ T823] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1145.360946][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.440308][ T823] adutux 2-1:168.0: interrupt endpoints not found [ 1146.083282][ T823] usb 2-1: USB disconnect, device number 33 [ 1147.745386][ T5615] Bluetooth: hci4: unexpected event for opcode 0x007f [ 1150.358859][T12328] Mount JFS Failure: -5 [ 1152.219184][T12349] fuse: Unknown parameter '0x0000000000000004' [ 1152.258304][T12352] input: syz1 as /devices/virtual/input/input42 [ 1153.521640][ T5615] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1163.602471][ T5616] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1163.752300][ T5616] usb 6-1: Using ep0 maxpacket: 16 [ 1163.771254][ T5616] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1163.785005][ T5616] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1163.864997][ T5616] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1163.865031][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.865053][ T5616] usb 6-1: Product: syz [ 1163.865069][ T5616] usb 6-1: Manufacturer: syz [ 1163.865084][ T5616] usb 6-1: SerialNumber: syz [ 1164.183887][ T5616] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1164.254312][ T5616] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1164.598297][ T5616] usb 6-1: 2:1 : invalid Cluster Descriptor size [ 1167.432073][ T5616] usb 6-1: USB disconnect, device number 23 [ 1167.595029][T12442] input: syz1 as /devices/virtual/input/input43 [ 1169.233755][T12455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1175.085980][ T5615] Bluetooth: hci3: unexpected event for opcode 0x007f [ 1176.178554][T12495] Mount JFS Failure: -5 [ 1176.273861][ T5615] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1177.650767][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.651548][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.672641][ T823] ------------[ cut here ]------------ [ 1178.672656][ T823] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1178.672683][ T823] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:2/823 [ 1178.672847][ T823] Modules linked in: [ 1178.672890][ T823] CPU: 1 UID: 0 PID: 823 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1178.672920][ T823] Tainted: [L]=SOFTLOCKUP [ 1178.672928][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1178.672943][ T823] Workqueue: events drm_fb_helper_damage_work [ 1178.673032][ T823] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1178.673062][ T823] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ca 4a d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1178.673081][ T823] RSP: 0018:ffffc9000539f8c0 EFLAGS: 00010246 [ 1178.673100][ T823] RAX: 1ffff11004bf0e00 RBX: ffffffff8f941d20 RCX: 0000000000000000 [ 1178.673117][ T823] RDX: ffffffff8bc05880 RSI: ffffffff8bc21fa0 RDI: ffffffff8f941d20 [ 1178.673134][ T823] RBP: ffffc9000539f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1178.673149][ T823] R10: dffffc0000000000 R11: fffffbfff1f1223f R12: ffffffff8bc21fa0 [ 1178.673166][ T823] R13: ffff888025f87000 R14: 0000000000000000 R15: ffffffff8bc05880 [ 1178.673183][ T823] FS: 0000000000000000(0000) GS:ffff888126270000(0000) knlGS:0000000000000000 [ 1178.673201][ T823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1178.673216][ T823] CR2: 000020000001a000 CR3: 000000002cb82000 CR4: 00000000003526f0 [ 1178.673236][ T823] Call Trace: [ 1178.673244][ T823] [ 1178.673258][ T823] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1178.673288][ T823] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1178.673431][ T823] ? rt_spin_unlock+0x160/0x200 [ 1178.673556][ T823] ? drm_vblank_get+0x147/0x260 [ 1178.673584][ T823] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1178.673650][ T823] drm_fb_helper_damage_work+0x131/0x6f0 [ 1178.673682][ T823] ? process_scheduled_works+0xa70/0x1860 [ 1178.673748][ T823] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1178.673778][ T823] ? preempt_schedule_thunk+0x16/0x30 [ 1178.673842][ T823] ? process_scheduled_works+0xa70/0x1860 [ 1178.673865][ T823] ? process_scheduled_works+0xa70/0x1860 [ 1178.673892][ T823] process_scheduled_works+0xb5d/0x1860 [ 1178.673984][ T823] ? __pfx_process_scheduled_works+0x10/0x10 [ 1178.674018][ T823] ? assign_work+0x3d5/0x5e0 [ 1178.674049][ T823] worker_thread+0xa53/0xfc0 [ 1178.674107][ T823] kthread+0x388/0x470 [ 1178.674164][ T823] ? __pfx_worker_thread+0x10/0x10 [ 1178.674188][ T823] ? __pfx_kthread+0x10/0x10 [ 1178.674221][ T823] ret_from_fork+0x514/0xb70 [ 1178.674263][ T823] ? __pfx_ret_from_fork+0x10/0x10 [ 1178.674289][ T823] ? __switch_to+0xc79/0x1410 [ 1178.674328][ T823] ? __pfx_kthread+0x10/0x10 [ 1178.674360][ T823] ret_from_fork_asm+0x1a/0x30 [ 1178.674409][ T823] [ 1178.674420][ T823] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1178.674444][ T823] CPU: 1 UID: 0 PID: 823 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1178.674474][ T823] Tainted: [L]=SOFTLOCKUP [ 1178.674482][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1178.674497][ T823] Workqueue: events drm_fb_helper_damage_work [ 1178.674570][ T823] Call Trace: [ 1178.674579][ T823] [ 1178.674588][ T823] vpanic+0x56c/0xa60 [ 1178.674625][ T823] ? __pfx__printk+0x10/0x10 [ 1178.674658][ T823] ? __pfx_vpanic+0x10/0x10 [ 1178.674684][ T823] ? is_bpf_text_address+0x292/0x2b0 [ 1178.674787][ T823] ? is_bpf_text_address+0x26/0x2b0 [ 1178.674834][ T823] panic+0xc5/0xd0 [ 1178.674867][ T823] ? __pfx_panic+0x10/0x10 [ 1178.674906][ T823] ? ret_from_fork_asm+0x1a/0x30 [ 1178.674941][ T823] __warn+0x315/0x4c0 [ 1178.674967][ T823] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1178.674995][ T823] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1178.675024][ T823] __report_bug+0x29a/0x540 [ 1178.675128][ T823] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1178.675157][ T823] ? __pfx___report_bug+0x10/0x10 [ 1178.675213][ T823] report_bug_entry+0x19a/0x290 [ 1178.675245][ T823] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1178.675271][ T823] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1178.675299][ T823] handle_bug+0xce/0x200 [ 1178.675343][ T823] exc_invalid_op+0x1a/0x50 [ 1178.675366][ T823] asm_exc_invalid_op+0x1a/0x20 [ 1178.675410][ T823] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1178.675438][ T823] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ca 4a d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1178.675457][ T823] RSP: 0018:ffffc9000539f8c0 EFLAGS: 00010246 [ 1178.675476][ T823] RAX: 1ffff11004bf0e00 RBX: ffffffff8f941d20 RCX: 0000000000000000 [ 1178.675492][ T823] RDX: ffffffff8bc05880 RSI: ffffffff8bc21fa0 RDI: ffffffff8f941d20 [ 1178.675516][ T823] RBP: ffffc9000539f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1178.675532][ T823] R10: dffffc0000000000 R11: fffffbfff1f1223f R12: ffffffff8bc21fa0 [ 1178.675549][ T823] R13: ffff888025f87000 R14: 0000000000000000 R15: ffffffff8bc05880 [ 1178.675591][ T823] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1178.675621][ T823] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1178.675652][ T823] ? rt_spin_unlock+0x160/0x200 [ 1178.675682][ T823] ? drm_vblank_get+0x147/0x260 [ 1178.675712][ T823] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1178.675751][ T823] drm_fb_helper_damage_work+0x131/0x6f0 [ 1178.675783][ T823] ? process_scheduled_works+0xa70/0x1860 [ 1178.675813][ T823] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1178.675842][ T823] ? preempt_schedule_thunk+0x16/0x30 [ 1178.675877][ T823] ? process_scheduled_works+0xa70/0x1860 [ 1178.675900][ T823] ? process_scheduled_works+0xa70/0x1860 [ 1178.675928][ T823] process_scheduled_works+0xb5d/0x1860 [ 1178.675989][ T823] ? __pfx_process_scheduled_works+0x10/0x10 [ 1178.676023][ T823] ? assign_work+0x3d5/0x5e0 [ 1178.676054][ T823] worker_thread+0xa53/0xfc0 [ 1178.676112][ T823] kthread+0x388/0x470 [ 1178.676143][ T823] ? __pfx_worker_thread+0x10/0x10 [ 1178.676166][ T823] ? __pfx_kthread+0x10/0x10 [ 1178.676198][ T823] ret_from_fork+0x514/0xb70 [ 1178.676226][ T823] ? __pfx_ret_from_fork+0x10/0x10 [ 1178.676252][ T823] ? __switch_to+0xc79/0x1410 [ 1178.676289][ T823] ? __pfx_kthread+0x10/0x10 [ 1178.676320][ T823] ret_from_fork_asm+0x1a/0x30 [ 1178.676369][ T823] [ 1178.677170][ T823] Kernel Offset: disabled