last executing test programs: 38m17.921298905s ago: executing program 1 (id=417): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in6=@rand_addr=' \x01\x00', 0xfffc, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0xffffffffffffffff, 0x10, 0x9}, {0x0, 0x800000000000000}, 0x6, 0x0, 0x1}, {{@in=@multicast2, 0x4d5, 0x33}, 0x0, @in=@remote, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9, 0xffffffff}}, 0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r4, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000080)=0x80000000, 0x4, 0x1) cachestat(r5, &(0x7f0000000000)={0x400009, 0x4000003}, &(0x7f0000000040), 0x0) 38m13.364193568s ago: executing program 1 (id=438): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000006c000000000000000000000000c400050000000000000000000000000000000000000000003200000000000000ac14141d000000000000000000000000000000000000ff00000000000000000001000000fc0200000000000000000000000000000000000032"], 0x17c}}, 0x0) 38m13.306392508s ago: executing program 1 (id=440): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 38m11.473781416s ago: executing program 1 (id=446): r0 = syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x7c, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "8000"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x7, "896b424a0000"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x10, 0x1, 0x9, 0x8, "2461e65fa8561133e7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "0600", "8e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x2a, {0x7, 0x25, 0x1, 0x82}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2a, 0x94, &(0x7f0000000000)=""/148) syz_usb_control_io(r0, 0x0, 0x0) 38m8.621538855s ago: executing program 1 (id=467): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x21dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000026c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0xc010) 38m6.84318807s ago: executing program 1 (id=472): syz_usb_connect(0x1, 0x17f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc, 0x65, 0xdd, 0x8, 0xbda, 0x177, 0x7ccc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16d, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x0, 0xda, 0xe8, 0xeb, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "a2ce"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6b50, 0x8001, 0xf2}, {0x6, 0x24, 0x1a, 0x101, 0x8}, [@mdlm_detail={0x6a, 0x24, 0x13, 0xc0, "6076f3b0f004da540a10bf2f01ab75c5fa8ef9fbbd3f15a717283aeebdbc0973567116b452ba03baeaaa7eef6f7329d092eca460fb33b3212ef0ab368618c865b17f2a90cc8ad1d4b41fb5ffb8845b81e232ddf143aa4007866f2178959c37e1836a3e5e0f41"}, @network_terminal={0x7, 0x24, 0xa, 0xf0, 0x9, 0x3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x1, 0x6}]}, @generic={0xbe, 0x5, "1cc35a73f81470fec857a64a2041376426e573f02f8cae66f21e21531e27bfe158774f35bb7d2293b9b017080d9a27ad36c61d66356214ef1b1eff07063cde4f47d28802b1dceaec9e6bdcc963a475e7c6c27ee774eb304d0f21cc32934cbf03162477f319993ca1410e61c56587654485bf4121c263a45972360b80f8c750a8b2b11ce70fc55f5c662ed29a67b172515a5400c75f09c85d594f1d2419e9c6fae735c0853343ffd280a1468e026e0da7679fc705340001c3f9305f45"}]}}]}}]}}, 0x0) 38m6.566173481s ago: executing program 32 (id=472): syz_usb_connect(0x1, 0x17f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc, 0x65, 0xdd, 0x8, 0xbda, 0x177, 0x7ccc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16d, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x87, 0x0, 0x0, 0xda, 0xe8, 0xeb, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "a2ce"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6b50, 0x8001, 0xf2}, {0x6, 0x24, 0x1a, 0x101, 0x8}, [@mdlm_detail={0x6a, 0x24, 0x13, 0xc0, "6076f3b0f004da540a10bf2f01ab75c5fa8ef9fbbd3f15a717283aeebdbc0973567116b452ba03baeaaa7eef6f7329d092eca460fb33b3212ef0ab368618c865b17f2a90cc8ad1d4b41fb5ffb8845b81e232ddf143aa4007866f2178959c37e1836a3e5e0f41"}, @network_terminal={0x7, 0x24, 0xa, 0xf0, 0x9, 0x3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x1, 0x6}]}, @generic={0xbe, 0x5, "1cc35a73f81470fec857a64a2041376426e573f02f8cae66f21e21531e27bfe158774f35bb7d2293b9b017080d9a27ad36c61d66356214ef1b1eff07063cde4f47d28802b1dceaec9e6bdcc963a475e7c6c27ee774eb304d0f21cc32934cbf03162477f319993ca1410e61c56587654485bf4121c263a45972360b80f8c750a8b2b11ce70fc55f5c662ed29a67b172515a5400c75f09c85d594f1d2419e9c6fae735c0853343ffd280a1468e026e0da7679fc705340001c3f9305f45"}]}}]}}]}}, 0x0) 27m44.559635952s ago: executing program 2 (id=3513): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) 27m43.732493888s ago: executing program 2 (id=3517): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = gettid() sigaltstack(&(0x7f0000000200)={&(0x7f0000002200)=""/4097, 0x80000001, 0x1001}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)}], 0x1, 0x0, 0x18, 0x4060019}, 0x20000841) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) (async) io_uring_enter(r2, 0x47f6, 0x0, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000002980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x318, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x94, 0x6, "bad8cb6e493c44e1917f48e2b0529c338b56ef509af5fa1ecc177aea0e9c70d0e30ac794765a2c100a08a5743cd04a064b5ea1e0a4ad81b494d15b707fa1f6ece1d918da853e65f82b4fb54c96414ae297bbdaf035242f0da347ab7cbd4d61ae071ab9853f529090e26e9dcee5fe55e3aa29a5f1668e03b10f340b036267a11e54ac30ddb421dd0ae1e0c92235ca1ed1"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x90, 0x6, "f9fc88ddbfcf16a2676a1b08ab63f96d5e109ec9dd5fcf343c1db33012590079343e0253d5fc14dbedc07020d5d24664e9d1a21ae0916a3ef5537e321ca2ad802c1fd43419ce480c91761475fd72bd8bdb5bb5b1f28f0f179da5e7166be875819694cb978e47257808ee5e457f3f2794802fa17323b729d2c0e487aa6b61f428715baeb0b96c1d00a3664688"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xfb, 0x6, "fd9939908d033a32825a232c8dd73156cf5e63c201bc28a1351b971724e53f81aeb1241cfeb22d42f07385b9e74b3a22b12f6d42b7b400d70e27ff618ab7182843459a0cbddd66eb8daa200c25dcfa422789a65339acbe3ad71c8e79b230a9be32405f8ab6d3592aa7ac859c6a4ca8bb7968346160e990503b991b5e1185254aabc1aefbc933d6d4082cfce59877f3980e90fdb4299891cde72b659643fd7b9e5a3ab66e85c537405a6525e119d9b8071f0592a302f9aab3d30b54b4f825b6adeebc7a8407101a8adcac999d9994d51c9cf5d9b49f06079272ae62e2e77dd13e1a6a3ead17f775ccda1882f3b21efe5ddf90c86db2d20a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xb4, 0x6, "2587873ce1ffe8fece147cccc4c268e94aae13a2ac95cc4f102179d3279a77016ca364d45c0676bfca906276b9313e8432400d7bb40618519d9b3e09b288970b9ea29d5a8d9ac221ceb8826b56c329c48d6d4fce8dd970cb9e97094849268d9752b2a1cddeaa5cf9737ed6a0d5996b150498e1aacb78eff067f52582c30ef0ab0ac1d96eeea16793e779a6ac51adddff7afa928be8498628a312f3645548ed3dfdc5e086744ddf5c677d70818c57c860"}]}, @NFT_MSG_NEWSETELEM={0x19c4, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1990, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, '#--]\\{\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x5}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, ')+\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}]}}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xfc, 0x6, 0x1, 0x0, "db5b888a52c9f5059ba11fd437dd36c3e6ffd20922632507caabd88185648ab7996aaa9b06b867e28caeb24a652c111382c45a8c3e93b71e0b129cc7082755e681700c1ac4b84c8024c2e8d14b5f78bb30f413e5d48444f54b7cdc5457e4bef9a6f6a656f6812d4461b5bf19ca53af48c0c42f0ce4df20cfa7aedf3becdad58871326c5df926af2aec5aa79d03bfe1ec9abfe42eaab05e064d5591918a108cbc6a64a238d9bec1f91406c64d044a17a0eec25e71a69f80d2302e77b552b8a0ea679847ad3216675a6451687b60b4902ffbd4d0636d0edd249678db95c2af37119c726aae1f1d182b0df3d436d40dd1d679405b3352467272"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x4}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x72}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x90000000000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xa4, 0x6, 0x1, 0x0, "185bf1e4633eee0d63735ca04daefe3704fe840cab632da9027cafbb02bf9ce48d3b155b40f81a30040bcd9cd10268cc47ea4f1b4e799dca00482f61a0003df6dad1a143eb753973f78a7f068945fc1d760d11391ec870da8c307ef21aa92c4dd4d2262d1320955f5deb1a0299d4b363626667e04318dcabc1a9d5c2eee32f355cd4fc90e000bcd445f1c8648dae42202e2306ed833242dffa9f5f772fbf0335"}]}, {0x4}, {0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7a, 0x6, 0x1, 0x0, "6eab2716ca06262336eaf9b36f34308e6f5a277f6cbb494259b5a7f012ae43ea85ade561eaf6d1b285bbe135ca5e7ab7cb1ce297c0fb8fc03ba7d382d1cfb334e89189c095265128a54f40315e4a212727968dc4312a6d92366b09157d6e1d0d6f12a459b808442977aa8718b2799fc306c8bf7b76d5"}, @NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x1420, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x7c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x40000001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xfc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "ceb11e9b105c7a2bf4ffe3427f4baa1a7f87e03047e07cbb7f996332631a06389334953a7e2c358c6396c21f1ae4ff0ed7d2d4bc2379d16964a70b725b90dc66aea1c1e8de5f3e768dc9ff2a61163490ca53f883717cc770c7becd36434ebf60d8d1bb3dcebaaeac65d5426be85ab259d63340858276287b9c3b12e52a2d93f51f8e39185e20e40a"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xb4, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x10f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x68, 0x1, "22cd648a9a32331e4f0ee7443bdad330ce0875826e73fa598c6d5c9825fc1ef0a3e0871a3aecd8eedc8f965cc5de6a09784dc668a72e134e9bbc6c145169ae5ea301d53a349303f6cd5604a818de15c0c5293d68e547f97dd7c7832df5e2a9d68af038da"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "c09c7498d7b9b1ae0ee502538c52a4debf9614554a66f1d6980877e0e74792a69b241c0f00428cb2f24e63d203820676c3f8a4c1e1c120da67f0398f1b55cadf8d886d0cdd52ac0ec68d6e1eaad0d7f0641b7179dcb157987ce4ce931142570704db5a18654c6e3d9410785faee2e1715674e827a22dfb7b03d97eb6d26ee66e1d6c2ebde38e8deb1edf4c6eda572162c5cef3f13ef85292794f2a97a32bfa790f35b3d1016cfd97ee0cd56a4f7db5045861fd4e1b59c239ba154fd6b5354f380cbcc311ff5cbd3b8b5794541cd7375ef236b4037cec3bcb481375057f2f1e35a8761a930b717a860be8baa73fd804ac5a16f7c141e51dcecba14b75eda4df331084b383468437c1d6b307fc01e7cd404ca9f726f1aeecf134905c2ace288db6c4eac4a74b6af52aeef7295bea8de80bfef3789272d0ab42c7a966411a6283dd182d5974219717aa94411267182cfe0f0999d0ddcc222c9485687ecddf040540afba211bd3ddd5b563c51e002b660f6dabce8241013da76d34f940290c76542374067426e3f0cdeb1c6a4016568a8afa1fcd670de95bf543d627f192b3cf541b5a1b0654e79b0cfdec495291a16bf3dc2f60f1c947371f10a07feee5693653eab2f95b00c551bce1dae6ecef8e18886b6d0dd31201c979b166ec27e92ff77cff7e5d72bf2a2252d1d12fa4810d549ddbbe89efb8df84c47600fb0c435d60ede75efe17d2fb9a6fec3d249b012cc37e38dc1b4b7c0cedd5102af5447b9d9dbae91050170c90e83added68a527a1f85ea9417b8f8880108dff8557bf739698bc9cec8ba4925c4817db1175264262813cc442dc1404da272ffcf7e2969460160dbeac7d32a8967dd13a7987bb0a2083e3c5d7c40f6b82c4b46ebddaa60547be0caa91c8de82838df099bb97cc43ac13ec171c19c755e704ca34dc55f95c6b206917838dda445f9569bbd045469b628ac0b837cc94e3053f3389e2bbdc64d4f872f7b789785615b575b42019df9dc74ba8a95f9b21fe2ec0cdc0bb589dbe5e7587a5d89ccbb6a08fb49891b35b0240505a41cd714eb0b87db5cc21fbc747ad08cead10715af124dc1bb282d6655cc0136546485b4c322bbdd329028cfa50367bfb8af49f2d4ad9c9296067bf496053d5fbad20c45393f9cbb482f1636d2457bf2e061f5c0f9bf9fb9799e83fffff4b9b4516b3e44ce5777917e27c5ceb14e642b44d48f5605b8812e905affede987c2e575a67a3a42357836f06cad5b28a33ad3aa7af9b6c5bd577efa265e636919230c90a9e095a51522ed0b74222d8e7a62ff00445758de9ecffae5f76eebd12886a2f73b1546ba6678b29ef244f1326a068cb707258e767c1dbf4974f00bb08cae3651dc639cb7a94bc22a9ae6143ec131b6e1cafd4c105eefbace92afb6ff348e86fa7733fa9b41195d28bc083450ed1956cb45cd4c6364cc47ba115738d68b2a0e4fd0d013aa12844ecbc3270bbcf9313fe183fa45c1183e89fae10ee7c8969bfe76898c7b12e13537b8f4c8fa87958cfd47a0a92847eb64b9d85b295e47b79f59aec8f0f15ef1fbe719795f4835d603982a314cab6487fe7655407175e17d7647a906893726c485d2214fbf3797c36361867ab7faf340c91605d6e70fd538291567c233f24ec6c637674fa255acd294fccb695429cb799690ae12c68643b68e3f332e05a7a67101cfba5410c831d289629dbf0e4fc012439c6a377df5933aa832ea23482c4692c7549b272f50603c6d68ef7e6a4bc4e078456de407ba4efffff338b36772aa909b930883e2458da13b200f2354e8409497b51a2d0071ea898914da381f1b7cb75804d5d5cf2d7626025989c87855850579ef80dd5110d821a3bbd5eb360a28ad251a85a07adaddbfef065bf04637e51bdc7ec0d43a791e9c9b210a2ec59433cfc6b17be8179dc918347a2aa5eea013acc3b70f46efb504470c580cbff61fde205531067e102689493d2ef6e2f96dd4c3571be8ad34454cc5131e4382cff13a800c11451c0dc955412b19876d932db1de803fd5eb4fa24a6686f66809be2271430b04c863e177d4b7d1d303b2840b50279fa21aba420a5ff4b7ff1917f95075484933f917929698ce1e52ade3ea0dd9ae11b18af99a886993390e12c0140f50e7dd83c990019624b1eef037800c36017a8b718a677fc36e0454325b246a0f4eb95736a75f1e32dbf116401c0fc685978a76a189c5e18faa245c6435ed65200ec0d7a47a76e18fe219e89586c32756590857e3ad25676a0f6c36d98d8feae1890e79052ad9089b6637f35676d76b38f9000770c2c320fe18f326845afac988c2a7eb9f7a36529cae3586fddbf6f5b7381caa40220565e8bd1537a3a8736e1c5f1a0b0010b197cbeac9b25acefcbb07dc9f49e46c7e7a4570e49ac9d2886ee22fbdc5a9b9253375784e0eb137b4a512aa7fb9605549e9c2f54b0f7ad99cf9badfe609c0e1c9f1d9cdb3663e79c102ec913e6e5f0ae01767cec1e37614e1e628d49fd578f12d4f475b0e80046766f9ef78f7887b969026554ca2e1222e4d27a2b7133a45d5ab3fb195e776e1f169643a119255b17e2554b16d8423f063642c0d285eef11d8a92641bc178d4be290392a00871645888221307fd20d1148ee45c1e6f4ab60779f6ae51b4a8c460cd2682b7620b383223b4af314ef4ccd9e85e2e7e05104ed5691f097142b4ca05cc3505e9e3c877c6cdb573ace41f15cd912011e545d273ff09ce033989c2b83a3febb43282b88cbd44b3ab66875facc899480eec79340b5cc840c335db56eb57fc128728ee374c4f098da47bc84a60b612dc48342ffb0cfee7560630c2269f66dd2face8e26f1e26e161f3eaed0d1a9c139b23d7cad5fb36b08a96cb8e9db6ae3a81f980764dfbb6430cf99ade204f80e15897b22840c40ef7817fb1d1e85e4d4b25887da56c554f017a59fa64de68ff9eab9d9826ac64ec900bbfd8f7bd6d1d45d7205ab4a006a0b63218fd4f515a00bf6af9a01ee0aefd59a2845e26ed244a15524573c726635d7f752d8f96f7ce76a76e1b6e4cd576ae2406e26e42b3f68dd551b7a7266f29eb33811aabb709f729db1f35f2f65d101e35e5b3944a6d7881000686a26bc40d4555806ef9fdf75b9139ed034419120b394ecd690ee5bdc6193e4cd89fedf141388ed7225268449b9b04949fb1a6a72eefb4335788d337281f266d50c9fed4fd2d5445e1d8843d61269cbff49d88937129405e1fa08513b90967c419eccc681bc21e54e2a5153b3bde3529a3f55cd0e88d0a7b647e7ac933cacb33833eaebf4618ac93b0d361c996f81de7d286dd427a72ee1f163430c8c5040fcd75b17e0b9d12ee0787acf72f1fbb3ba8646a580b301875aba7c9e64f98d0705d618819a59917ffbff64f8c3810091d907eb7a76c84bd117a8f8b060517e40ceb103493a8ec5803701dbab081b92dcf96243d95178db37d979ddb248bc7212c6ec03d635ab6994148ecb0b51c8207665d25f5ec22cb873c03d222a2c15728b8bca4654f52452eeefdffb803b296af786dcbddb03cc6aa5798496507324968d0097e837a1e6efca427df3ca8e805b9403753969c72d407fb587e6b9a3d77a01150f177561551b6dcebc4a7ff32db535276b09320d7c5e403e18abefb019337f1bd51922ca920f21aaef72cc8db8045a71367b33abbbd2d6fb3c473f901307427c9cfb5f6fb685cd3e20904414a64d9a032a540867a424d9d85d21649adde5a3c3528dbb753c274256e4585e935d07a2907108ac9ddb391997f70c837eb865c2ea60d2323fcbb86386a74f36a6f04b590aa8336e1f8957d63c34815771e9fff04f0f1d8dd9bb843e59695ec2d7e8c878b250fde1d1258103bc6a6139eda679759abd1ed1c4f7f4afc6a93681a7137ff97d42af13bc6006a34d06b426bf93f6c003014f14dd927f92c7244006eff5b248705fb75e18a3da3e158bc2aaa206a06c0c6d9be5aa9b829886a527b62f5ceb08d15950b8a614e9f8445f9aa64c64c1a9f2a159e84611053bc2634f202979c97cc906ef8395b99d4257237cb64f0faa6b3f7dd668837e91273508c49b05b28cc331c6758486724a9baf3828f18fb54cb9db91f71a8a23d60a27f2ae752858c1483e02a85ac9fe1cdef89ecc04f1d009cadad46bf490ff660254952d292cee3a343012cea659d6eaaa54f9fa5bc2f741483055c02427e0b8384eb6f3f4596d9dba7695a49e40eb42dee8d5f7b3cc64ffce5ecae2884b72a58cf3115334baee38527d7627859a00d91c48cf5996d315644eba708be99281e04da528a1cc325260f02256da909da8ca491c94e698c3620889347435fcf97237eebce0871472c27d163e6bbc6e02530f42d5a8df53dba1e876c327be45ed08f3d9c83fdfc5cfa76c4886b07c5da4b0c68ec058c3c254bff6ca14a13e916a7573efc05aedfb469aa3bdd068d79d85c3fe56bf1bb278627fb3a1d2494be6d991d01957f9a82c1f44fa6414e4c3f496e8740422d3e26e8e6bc7ed1d472562fcc92fb7be7b6b59bcf63a7b01560807b073c6514e9bc4cd3c2420b6c13b623e6cefa428dae54e0f0200814462946e37d84cca8085702b8ed23f01610cf44119da782d99b341349b10d407904f67777063748c3d740fa4d1fd10b122b34fb8575152646fb397f5f0972e7e6ee6fdeeab62ea682c72367023a63242bfff3fd4b45c11e713a26b67be718bdabaea226607128a85f4492e1a74baec4817c34d4d71660702d5fc0c3a76674b9b65b9724b7ab5f3ac40d07c568f69b6777f49c5d549e024538da3006fa3b817087729dbff473534a3896b82f59ff1f6f6a01b7c5e7239086c74fbe6d1e1c55d8894fb2301e1fbb39a2468f29ff490d0feed056ecd1a15ac14367772040be857e890f40cdabb1c8a0b76db3b21aa59675179f8d7be8b8641aafb6a0326da7fb8e7528d46bff8a0b77b5350f3e6cdc44eca6cd659aee86bae56f28333f553e7a3773f63a55f0b17e74726388f46267b2a9ee274ab5c087fc986d0c2a128c1b02744e14581f6023e3c0cb959bde3c8f7d866aec4b712068c2b22a6e3663ac98133ecb94593de159f9ef0dff9aa2f3423715a3985ccaaa179b8078915ac52c562e34eb58dead2d7823f134b9545a31d8bdb8a45d6456bddfc96315179823898e1daa699c6246662f2aa6d602289992315b0904cfb6fc8f8c97d236069f29768627f0d351bc7da60d5485b322dcb3aad83bdc45bccb978eeeaff8d525448c86fabfd2975ad81cc71cadc2ad49f3b3458cbef21fd32329e35308079cbd1c9266844fd1521e2c075444f84a85a172c7b895a336ab99bc92d899a80c0d35d092ff602beb2df41aa5e45c0dfb279c665a273bfaf80948689084bc437af05a193d9031ca59590387cb30c8c462ac56c977e64e5d0ee161ca7b062f1e264d7ae97bcf5c9891cd93322eefa5356aba8170ef51d089294f9bd96bdb88dcd38b4112e4540082b119990fd4d0e2605f57b88ba8e4fd61415f20546423439e69ed6e39b463a3c0a3a7133b4e0cec864c2b397f9a5dedb249a95d9aad8b284d9ce1fdb9a481aaef06b8a6f6176eb735f716c8e74674254aa86c08259493067d82e474e5841a1f92f137dce08242ed297406ddebad82216137c733b72dbac961e69dde4feeeec7fd4664bc93189d379e419e55ec759285f3bad20ae3142be5cac099430f91e40d6d2c855ecadab293d24a539c5fcfdc0d701abb84e1eb473e1e51629ebda719adb98307491614424d5dfbe7a30c34e326a7e2f8e6"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0xec, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x74, 0x1, "38e8c677e21f49d001151bb923a4340ad4473d7e63fbb975c70c8f8789227f6b7ee276f7ba6920eab3e850f558c9618ca7709828e5ca9ce0077494a0a807f400cc9a56520234d79fd9572a72f9674b55fab8043573b833f7fa0025eed4b47bdf68158c1542ccc218896cf248a564ae1e"}]}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc6, 0x1, "a5b241fa49e80128c41146881a758660d4eca95151c6a616600274602e7f982030282435f9b16622f65312203346e4a72d50e5e9041cd2dc72f7bec3217501ec3959322b51eefcbc9b7b18b76e7604e458a39bae61f5ac696bd92baee941838f69906613197312fee5b95755b0d996ab21e62175ee32ba1d7b7f4b8bea3f8be8587d780b395e62ede975286dd70546a9825236a16af88d0e5088a70b3228dbda2b219d2f84f3884662e2cf31231b90a00150f2c7fb11dafb12218fc9d23746f2d693"}, @NFTA_DATA_VALUE={0x2f, 0x1, "d3a83b2bc15b7269da9daaea4440c9311d0395eb420f31058cf34fa579c8f8aceeca04e33919b97e3b79ab"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x38, 0x1, "ed4df858e9f3cfb2157a944a75ae6c189444f52c09deeb3a588b7a89ae9e3f5c2f1b1ad12aece4d61e8b91cd48f3f17eba05babb"}]}, @NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x27, 0x1, "adfb56d9433c797e450ffe5dd612322cdd5a84af3a71970a39e09a15216e6eeb3213e4"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1d04}, 0x1, 0x0, 0x0, 0x24058084}, 0x40080) 27m42.042690271s ago: executing program 2 (id=3523): r0 = memfd_create(&(0x7f0000000500)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000b, 0x4a092, r0, 0x0) fallocate(r0, 0x3, 0x6, 0xfffffffa) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0xffff, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r2 = socket$inet(0x2, 0x80000, 0x9) clock_gettime(0x0, &(0x7f0000003540)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000140)=""/129, 0x81}], 0x5, &(0x7f0000000280)=""/210, 0xd2}, 0x3}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/198, 0xc6}, {&(0x7f00000004c0)}, {&(0x7f00000019c0)=""/135, 0x87}, {&(0x7f0000001a80)=""/72, 0x48}, {&(0x7f0000001b00)=""/6, 0x6}, {&(0x7f0000001b40)=""/181, 0xb5}, {&(0x7f0000001c00)=""/8, 0x8}], 0xa, &(0x7f0000001d00)=""/170, 0xaa}, 0x101}, {{&(0x7f0000001dc0)=@isdn, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e40)=""/110, 0x6e}, {0x0}, {&(0x7f0000001ec0)=""/145, 0x91}, {&(0x7f0000001f80)=""/14, 0xe}, {&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002000)=""/36, 0x24}, {&(0x7f0000002040)=""/178, 0xb2}], 0x7, &(0x7f0000002180)=""/238, 0xee}, 0x5}, {{&(0x7f0000002280)=@tipc=@name, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002300)=""/156, 0x9c}], 0x1, &(0x7f0000002400)=""/150, 0x96}, 0x4}, {{&(0x7f00000024c0)=@nfc_llcp, 0x80, &(0x7f0000002680)=[{&(0x7f0000002540)=""/44, 0x2c}, {&(0x7f0000002580)=""/63, 0x3f}, {&(0x7f00000025c0)=""/190, 0xbe}], 0x3, &(0x7f00000026c0)}, 0x6}, {{&(0x7f0000002700)=@nfc_llcp, 0x80, &(0x7f0000002800)=[{&(0x7f0000002780)=""/98, 0x62}], 0x1, &(0x7f0000002840)=""/86, 0x56}, 0xfff}, {{&(0x7f00000028c0)=@generic, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002940)=""/139, 0x8b}, {&(0x7f0000002a00)=""/162, 0xa2}], 0x2, &(0x7f0000002b00)=""/165, 0xa5}, 0x2}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002bc0)=""/189, 0xbd}], 0x1}, 0xa}, {{&(0x7f0000002cc0)=@hci, 0x80, &(0x7f0000003180)=[{&(0x7f0000002d40)=""/127, 0x7f}, {&(0x7f0000002dc0)=""/226, 0xe2}, {&(0x7f0000002ec0)=""/3, 0x3}, {&(0x7f0000002f00)=""/251, 0xfb}, {&(0x7f0000003000)=""/233, 0xe9}, {&(0x7f0000003100)=""/74, 0x4a}], 0x6, &(0x7f0000003200)=""/200, 0xc8}, 0x2de9}], 0x9, 0x10000, &(0x7f0000003580)={r3, r4+10000000}) 27m41.02364736s ago: executing program 2 (id=3526): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x81, 0x11d340) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000240)={0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa46c2adfb2b5a654, 0x0) (async) r4 = socket(0x11, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x3, 0x2, 0x0, 0x2}}}) (async, rerun: 64) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) (rerun: 64) 27m39.356456079s ago: executing program 2 (id=3530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x101, 0x5}) read$FUSE(r5, 0x0, 0x0) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x4000c00) r6 = syz_io_uring_setup(0x12bf, &(0x7f0000000140)={0x0, 0x811b, 0x200, 0x0, 0x2c0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x300) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0xb, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) r9 = fsopen(&(0x7f00000002c0)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000000c0)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\a\x00\x00\x00\x00\x00\x00\x00\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}, {0x0}], 0x2}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) r4 = socket(0x1e, 0x4, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000000)={0xe7209c01fe5c670a, 0x0, 0xffffffffffffff6e, 0x8}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b000100657874686472000014000280080001400000001508000640000000020900010073797a30000000000900020073797a3200000000140000001100010000008e682636e2acab840d00"], 0xa0}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f}, 0xe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000004c000000060a010400000000007473f706000000000000000000000024000480200001800001400000000008000240000000054900010073797a3000002000001100010001000000000000000000000a000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 27m21.767439316s ago: executing program 33 (id=3538): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x4a45, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}, {0x0}], 0x2}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) r4 = socket(0x1e, 0x4, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000000)={0xe7209c01fe5c670a, 0x0, 0xffffffffffffff6e, 0x8}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b000100657874686472000014000280080001400000001508000640000000020900010073797a30000000000900020073797a3200000000140000001100010000008e682636e2acab840d00"], 0xa0}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f}, 0xe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000004c000000060a010400000000007473f706000000000000000000000024000480200001800001400000000008000240000000054900010073797a3000002000001100010001000000000000000000000a000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 24m32.509316097s ago: executing program 4 (id=4434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x36) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000003c0)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) r11 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC, @ANYBLOB="a85c6f6a843105617222bacde9a9d5803039ea10ffd4cd3e0b47efd2f620837161eb1e65834beb8084608344f40f6cbaf906f5aaaa", @ANYRESOCT, @ANYRES16=r0, @ANYRESOCT=r10, @ANYBLOB="746e1b7b35d8401a31ef308b299d9ea03c7e562e151dc46043928bddaa6a6e41a59ef46c6e50eb715894dc96b1e80278ee7f420353d508cdd97121e1c10f366be4208ed7f99c1881623a0f67302a0a41c69b0b990f535d3ea2674659738b372d288602fa8ffdb07933980251f82d73ac88c4841ea964d652f7dac6121a8a35a5aa9a1a5182ef327277e710695b8300f8e0268b0f8258778f367636053c9287759da610da0057ad2b4272fc17bb1a73931902ff52e512a6d332b2d9e9e26b3e918688793daedcefc9769f5b283afbec822220f6e26abee433f6312a3f47a27156a0cb513be1d14436bb22d5a2ecca709d9454beb69bd8", @ANYBLOB="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", @ANYRESHEX=r1], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0xc9, 0x6, 0x4, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0xfb, 0x95, 0xb, 0x8, 0x8e, 0x9}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000)) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r8, @ANYRES32, @ANYBLOB="0100000040000000000003eaffff2700f7800d0001187564703a73797a30000000001400028008000100120000000800020005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200408d4}, 0x0) 24m29.462298377s ago: executing program 4 (id=4448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x4e23, 0x4, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x11, 0x0, 0xee01}, {0x8, 0x2, 0x40, 0x8, 0x5, 0x32a7, 0xcb3}, {0x100000000, 0x9, 0x5, 0xa46}, 0xfffffff8, 0x6e6bb3, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4d4, 0x6c}, 0xa, @in6=@loopback, 0x3507, 0x4, 0x3, 0x9, 0x9, 0xfffffff9, 0xa}}, 0xe8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000020a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a30"], 0x248}}, 0x0) 24m29.388034634s ago: executing program 4 (id=4449): socket$kcm(0x29, 0x6, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000300)=0x1, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, 0x0}) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r3, &(0x7f0000000000)=""/182, 0xb6) (async) getdents(r3, &(0x7f0000000640)=""/206, 0xce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x5, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x389}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x10000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_TARGET_NETNSID={0x1, 0x2e, 0x2}, @IFLA_CARRIER={0x5, 0x21, 0x6}]}, 0x9b85c64fef9f6703}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) (async) syz_open_procfs(0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 24m29.387658294s ago: executing program 4 (id=4450): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000300), 0x4) syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r6, 0x80000001, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 24m29.305033953s ago: executing program 4 (id=4452): socket$netlink(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000580)=[{0x200, 0x0, 0x2, 0x7ffbffff}, {0x7, 0x1, 0xd}]}) (async) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_print_times', 0x200880, 0x1) connect$pptp(r2, &(0x7f0000000480)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$packet(0x11, 0x3, 0x300) (async) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004583002800650000020690780a010102ac1414bb4e244e3360f567a0c9c19051a85ea4dda180efcb7d3c21b0b077c96598865988a0804d6c312a46f1258a8ec3dd5bf2ecc24db7a4989c160158d4435c1cdb20cd14511037c28b85239c69e23489b5802a83bc0ccd3d56c5366ccf420a493800ae42cc6cfe44b32e836d220e65ab6706a58d264298893d8131c02abbfcec5df2637bc30b8fc6168d836a57a1f8430e02c0b43b1ca9f6597073ca401ea1c8bd22b3ada573e59a27cf77d5a983c07377ed15f9fe3c851c7e60d6b40ad74fbab61da56f39a261586711707c7686", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c20f7a907800fe"], 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x2, 0x2, 0x6}, 0x101}}, 0x18) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a8441, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/237) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)=0x16e06a1) (async) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xfce1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16=r3, @ANYBLOB="21000000631803b798b772"], 0x54}, 0x1, 0x0, 0x0, 0x8c851}, 0x40040) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) (async) socket$packet(0x11, 0xa, 0x300) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 24m25.828944094s ago: executing program 4 (id=4461): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1c, 0x20}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0xffffffff, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}, {0x0, 0x10}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @private=0xa0100ff, 0xffffffff, 0xff000000, 'team0\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x0, 0x3], 0x4, 0x1}, {0x0, [0x4, 0x11, 0x5, 0x1, 0x20], 0x4, 0x3}}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2}}, @common=@ttl={{0x28}, {0x2, 0x7}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) fanotify_mark(0xffffffffffffffff, 0x10, 0x40000002, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)="ac8702eed2c1f014926a7eaca4fe7a4415322e199bc29a3ef0dc89aa94f4f027c565ba91e7118343b4af0fb4bdc5d0dda849d97e1d0650e801de60aed82a884e27d8099ec064dcc06e8e3f972df4e0f538674535b678d0ed33755c93d16afba368eac68f40e61a58aa8ea67247a5798073", 0x71}, {&(0x7f0000000080)="4f6729c04f2cbd4610841c64f81f44a3e0b520a1395d363f43a51d0566c0a5ad27403fc0bf0ce6465b56d07ffbd28e0d9a0aa78ff0724fda797c89fce8ecea81c365fab6127608d08c5bc08e291c532d5e54477c4f", 0x55}, {&(0x7f0000000480)="e50d900bc255b84ba67ab6e8da893bad8f9eb543513a4df7522d91a7c806ce623231c73b9c0717b0e937b90b836d7e3dafecf0330f34dc3695b8bb09480ed5ef54dd870a0cccd408ad977e9d55dfb3e4d4c12fd9b40f1cd6ae02d3f3ed445d97357b24384ed1aec9e01c52fb55da64d05a1816efc8458ea9beeaafef55be876e0ab690227a85d307bf28667778b4c0a2ece518a2a6a5cd88e96bf3a2db9c23b3d5dd8667b9073f60f63ffd3ba66d50b9c1f68d411a3dcd8180b40ac46a17", 0xbe}, {&(0x7f0000000240)="93563eb65a00bb3b47ac1b2d449eb04f1a62f5b9da5c27b693f130a9cc830510c584db0e82c3c5f8cfb3a1a6b0b7005e3c3e22be8b87ec153008005983e08ad5faa4289428fa597abfa6b68789cd716c983e93b38a31e9239deb62f5e7df99a42f3a916532cdd5dcb006b7a7eb1d0427c047cfd76a6d7004ccbe6e7a8b1e46193ea44591e07c9e3347aad55aff9432417c10610fa5f07089b44033", 0x9b}, {&(0x7f0000000300)="cc813030ff6083b064585460d5089bc20ac75ec622abd5530c4ce4622da977108113de60ccbd58343335964f7436d5e4ba4ee9273daa7c73a6c9af3cf8e1f76165a067292dd4d5be694b84aae47f", 0x4e}], 0x5, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES64=r0], 0x18}, 0x41) 24m25.375986195s ago: executing program 34 (id=4461): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1c, 0x20}, 0x20) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0xffffffff, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xd0, 0xf8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}, {0x0, 0x10}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @private=0xa0100ff, 0xffffffff, 0xff000000, 'team0\x00', 'macvlan1\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x0, 0x3], 0x4, 0x1}, {0x0, [0x4, 0x11, 0x5, 0x1, 0x20], 0x4, 0x3}}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2}}, @common=@ttl={{0x28}, {0x2, 0x7}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) fanotify_mark(0xffffffffffffffff, 0x10, 0x40000002, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)="ac8702eed2c1f014926a7eaca4fe7a4415322e199bc29a3ef0dc89aa94f4f027c565ba91e7118343b4af0fb4bdc5d0dda849d97e1d0650e801de60aed82a884e27d8099ec064dcc06e8e3f972df4e0f538674535b678d0ed33755c93d16afba368eac68f40e61a58aa8ea67247a5798073", 0x71}, {&(0x7f0000000080)="4f6729c04f2cbd4610841c64f81f44a3e0b520a1395d363f43a51d0566c0a5ad27403fc0bf0ce6465b56d07ffbd28e0d9a0aa78ff0724fda797c89fce8ecea81c365fab6127608d08c5bc08e291c532d5e54477c4f", 0x55}, {&(0x7f0000000480)="e50d900bc255b84ba67ab6e8da893bad8f9eb543513a4df7522d91a7c806ce623231c73b9c0717b0e937b90b836d7e3dafecf0330f34dc3695b8bb09480ed5ef54dd870a0cccd408ad977e9d55dfb3e4d4c12fd9b40f1cd6ae02d3f3ed445d97357b24384ed1aec9e01c52fb55da64d05a1816efc8458ea9beeaafef55be876e0ab690227a85d307bf28667778b4c0a2ece518a2a6a5cd88e96bf3a2db9c23b3d5dd8667b9073f60f63ffd3ba66d50b9c1f68d411a3dcd8180b40ac46a17", 0xbe}, {&(0x7f0000000240)="93563eb65a00bb3b47ac1b2d449eb04f1a62f5b9da5c27b693f130a9cc830510c584db0e82c3c5f8cfb3a1a6b0b7005e3c3e22be8b87ec153008005983e08ad5faa4289428fa597abfa6b68789cd716c983e93b38a31e9239deb62f5e7df99a42f3a916532cdd5dcb006b7a7eb1d0427c047cfd76a6d7004ccbe6e7a8b1e46193ea44591e07c9e3347aad55aff9432417c10610fa5f07089b44033", 0x9b}, {&(0x7f0000000300)="cc813030ff6083b064585460d5089bc20ac75ec622abd5530c4ce4622da977108113de60ccbd58343335964f7436d5e4ba4ee9273daa7c73a6c9af3cf8e1f76165a067292dd4d5be694b84aae47f", 0x4e}], 0x5, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES64=r0], 0x18}, 0x41) 20m41.645530469s ago: executing program 3 (id=5472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) (async) io_pgetevents(0x0, 0xf, 0x0, 0x0, 0x0, 0x0) (async) r2 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) (async) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x2, 0x4) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)='/pro\x0e/bus/inpu\f\x00\x00\x00\x00\x00\x00\x00rs\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20m41.235702291s ago: executing program 3 (id=5474): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r0, 0x8107}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0xfe, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2, 0x7}}}}}]}}]}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x9) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 20m40.61929699s ago: executing program 3 (id=5478): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010000d04368b42a91e7b5dd7917f9e0a00000000f100000000000000", @ANYRES32=0x0, @ANYBLOB="a1a50200f9260100140012800b000100627269646765000004000280"], 0x34}}, 0x800) 20m40.550546047s ago: executing program 3 (id=5479): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104200000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 20m39.641725696s ago: executing program 3 (id=5481): socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00ffffffffffffffa900", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 20m39.119477517s ago: executing program 3 (id=5482): ptrace(0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x4000) r4 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x80000, 0x73}, 0x18) ioctl$EVIOCGMASK(r4, 0x60b, 0x0) write$char_usb(r3, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) mmap(&(0x7f0000182000/0x3000)=nil, 0x3000, 0x700000a, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) openat$iommufd(0xffffffffffffff9c, 0x0, 0x202400, 0x0) socket(0x1d, 0x2, 0x6) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 20m38.821084694s ago: executing program 35 (id=5482): ptrace(0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x400, 0x4000) r4 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x80000, 0x73}, 0x18) ioctl$EVIOCGMASK(r4, 0x60b, 0x0) write$char_usb(r3, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) mmap(&(0x7f0000182000/0x3000)=nil, 0x3000, 0x700000a, 0x4010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) openat$iommufd(0xffffffffffffff9c, 0x0, 0x202400, 0x0) socket(0x1d, 0x2, 0x6) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 14m51.127911324s ago: executing program 7 (id=6672): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000002180)={0x81, 0x4, 0x1, 0x0, 0x86}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x200082) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0x6, "b7597c5887e95c7f2e77ca277b436fc9378e4be229760c2eb0c5d00e015792d4", 0x0, 0x3, 0xfffffffe, 0x10, 0x4}) 14m51.101250567s ago: executing program 7 (id=6673): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) copy_file_range(r1, &(0x7f0000000140)=0xfffffffffffffffc, r0, 0x0, 0xffffffffffffbff8, 0x0) (async, rerun: 32) r2 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) sendmmsg(r2, &(0x7f0000003f00)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f0000000fc0)=@sco={0x1f, @none}, 0x80, 0x0}}], 0x2, 0x4000000) 14m50.967227874s ago: executing program 7 (id=6674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) (async) setsockopt(r0, 0x1, 0x7, &(0x7f00000000c0)="f501001e", 0x4) (async) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x5, @loopback, 0x6}, 0x1c) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404355313000000000000109022400010000600309042daf010302000009210000000122050009058103"], 0x0) (async) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0xfffffffffffffff7, 0x3, 0x2, 0x81, 0x2, 0x0, [{0x0, 0xffffffff, 0x0, '\x00', 0x80}, {0x993, 0x3, 0x100000001, '\x00', 0x90}]}) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) (async) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) r4 = socket(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0xc0c4) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x9, 0x2, 0x2, "5dd41ef17d1fac0ef4c2d854ce849813c5b224d3b63b1fa11dff804e7ebaed86", 0x20363159}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4140aecd, &(0x7f0000000080)) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "1e0e1b5e"}]}}, 0x0}, 0x0) 14m50.795429307s ago: executing program 7 (id=6676): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x400, 0x8041) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000005c0)={0x0, 0x7, 0x201d}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 14m50.675718849s ago: executing program 7 (id=6678): socket$l2tp(0x2, 0x2, 0x73) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = gettid() r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[]) syz_fuse_handle_req(r6, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x5, 0x1, 0xd, 0x8, 0x0, 0x0, 0x8, 0xcb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x0, 0x0, {0x5, 0x40000000000000a, 0x0, 0x80000001, 0xd, 0x1, 0x9ec, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0x9e7, 0xffffffffffffffff, 0x0, 0x10, 0xe, 0xff0f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r7, 0x80885659, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r3, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r8, 0x0, 0x7ffd, 0xe) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r8, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x8}) 14m50.300118003s ago: executing program 7 (id=6680): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8935, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x21, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) io_setup(0xa, &(0x7f00000001c0)=0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r7, 0x1, &(0x7f0000000600)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000640)="480096000000c8021a0988398a79440000000000", 0x14, 0x1000000000003}]) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000580)={0x0, 0x2, 0xfff, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003704db7700951c32b3e138041317", @ANYRES32=r4, @ANYBLOB="8304050000000000240012800b00010067726574617000001400028008000100", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) r10 = syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x101842) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r10, 0x40045730, &(0x7f0000001080)) syz_io_uring_setup(0x6171, &(0x7f0000000380)={0x0, 0xc2ad, 0x8000, 0x2, 0x272}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r11, 0x0, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x75, 0x0, r8, &(0x7f0000000480), &(0x7f0000000280)='./file0\x00', 0x2, 0x6000, 0x1}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) 14m49.932047662s ago: executing program 36 (id=6680): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8935, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x21, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) io_setup(0xa, &(0x7f00000001c0)=0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r7, 0x1, &(0x7f0000000600)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000640)="480096000000c8021a0988398a79440000000000", 0x14, 0x1000000000003}]) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000580)={0x0, 0x2, 0xfff, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003704db7700951c32b3e138041317", @ANYRES32=r4, @ANYBLOB="8304050000000000240012800b00010067726574617000001400028008000100", @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) r10 = syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x101842) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r10, 0x40045730, &(0x7f0000001080)) syz_io_uring_setup(0x6171, &(0x7f0000000380)={0x0, 0xc2ad, 0x8000, 0x2, 0x272}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r11, 0x0, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x75, 0x0, r8, &(0x7f0000000480), &(0x7f0000000280)='./file0\x00', 0x2, 0x6000, 0x1}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) 23.3363301s ago: executing program 6 (id=10514): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file1/../file0', [{0x20, 'cgroQ\xedB\x9f\xc6\vQ\xf8~up.23\x06\xc6\x8bSG\xfbstat\x00\x88\xd8K\x91\x17\xb3s*h\xb6\x95k_\xc6\xca\xc2\x89\x89\xf8\x83\xe4w\x956\xf1\xce\xdcX\xf5\x03\x1a\x84\xdaj\xf8\v\x00#g\xad\x8d;xu\x16W_!m\xd0I\xe1\x98?3lA\x82\xa1. K\xa6\x9c\xcc\x02:k\x9d\xd4\x14\xb1\xdfK\xf3\x9e$\xe4\x04\x91\xc2\xf6\xc5%+r*zt\"c\x03N%E\xee\x9c9\xfe\xa5\xeb\xda'}, {0x20, 'EY\x86\x97\x01\xa3\xa6\b\x008/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\xe8 Pj4\xe9\x021\xe8\x88\x1a\x13C\xf6\xb1\xc2\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?gpv5\xab\xd1W\xf0\x92\x86\x86\x05\x00\x00\x00\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0eN\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x0e\a\x00\x00\x00\x00\x00\x00\x00\a\xdbt\xb3\x84\x98\x87$\xbc\xf8\x91\x06D\xa6\xc0\x90?J\xec@\xa3\xfd\x193\xe7\x01d\xd4\xdfP~\xa1}\x83\x12~>\x89\xcd\xf7\x9d\xbfgV\x02\xb0\x88\x9a\x17\xf2\xb2\xa5z4\xe3&Zc\n\xf4\x19U\xeb\a\xe2W\xeeU\xc6\x06\xeb\n\x045\xe7\x94Ho\xb1\x91+9\xb8=\xe2b\xc0+\xfc\xd1oz\xdd\xbdDHh\xf8\x04m\a\r$\x8f\x93\xfdw\xb4\xc5&CF$\xeb\x91\xad\x1b-\r\xbe2f\xd38R\\?O;\x01\xac\xb3\xa8\xdc\xf5\x9f]\xc2O\xda]=\r\xff8\x99\xa1\xbd\x85#\x88\xb7C\x7f\xf0\xb8f\x90>P>=\xedBQO\xeb\xbd\xa8%a\xddX\xaa\xfb1\xfc\xb9\xbb\xa2\t\x90xao\x9d\x1d.\x82g\x9b\x13\b\x84\x1d\xba?\xb7\x0elp1\x9b\xac\x8c\xaex\x7f\x12\xd6\xf1C%\xec<\xec\xeblp\xd9\x9dt\x97\xe2|8\x9aVE\xa7\xdc\xdf\xe3L\xd4N\xce\x7fbb$$,48\x12\xa0w\x8c\x90x\xddjt\x1b\x93O\xdc\x12\f\xf0\x99\xb10\xc1\xecW\xe2/\x1e\x1d\xc2\x8a\x90d\xb6C-\xdb<\x86\xe5\xd8\xfa\x9f\xd5>\x13\xf0\xb5\xa1Y\x90\x01\xbd\xbcC#\x00'/536}]}, 0x2b1) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd400", "90be8b1c551265406c7f306003d8a0f4bd00", [0x4]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) move_mount(r2, 0x0, r2, 0x0, 0x140) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xdd6b, 0x10100, 0x10000000, 0xdb, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)=0x0) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r4], 0x0) 20.197188727s ago: executing program 6 (id=10521): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000640)=ANY=[@ANYRES64=r0]) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) 19.883505369s ago: executing program 6 (id=10522): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0xc0702, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/3, 0x3}], 0x1) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002180)={'\x00', 0x0, 0x8, 0x8, 0x8000000000000000, 0x7, 0xffffffffffffffff}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip_tables_targets\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) (async) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x0) (async) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x6, 0x6, 0x3, 0x0, 0x97}) (async) pread64(r2, &(0x7f0000000040)=""/37, 0x19, 0x3) (async) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x60, 0x0, &(0x7f0000001f00)) 19.708074147s ago: executing program 6 (id=10524): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1468, 0x3}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0/../file0/../file0/../file0\x00'}, 0x6e) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xf5b}) fcntl$lock(r2, 0x6, &(0x7f0000002100)={0x0, 0x1, 0x2000000e, 0xa}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x275a, 0x0) (async) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1468, 0x3}) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0/../file0/../file0/../file0\x00'}, 0x6e) (async) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xf5b}) (async) fcntl$lock(r2, 0x6, &(0x7f0000002100)={0x0, 0x1, 0x2000000e, 0xa}) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') (async) 19.25197917s ago: executing program 6 (id=10525): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x4, 0x7, 0x0, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f00005ad000/0x1000)=nil, 0x1000) umount2(&(0x7f0000000140)='./file0\x00', 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80086303, &(0x7f0000000180)) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0xf0f002, 0x4}) getpriority(0x2, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0)=0x4, 0x4) 18.672020243s ago: executing program 6 (id=10530): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/238, 0xee}], 0x1, 0xffff0000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000006c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000280)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], r2, 0x0, '\x00', 0xc, 0x6}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e999fcffffff00000000fe80000000000000000000000000003b000000000000000000000000000000000000000000000c9c0a00103006000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000ff0700000000000003000000000000000000000000000000fdffffffffffffff00000100000000001300000000000000ffffffff0000000409000000000000000500000000000000050000000000000000000000000000000101020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) io_setup(0x5, &(0x7f0000000e80)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000900)={0x0, 0xffffffffffffffff, 0x80, 0x4, @scatter={0x1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)}]}, &(0x7f0000000640)="58744b8d64247313a438faf4b37f029123256a11321bda60ce1ff3a7c91b3256d5314f07e0f249e005196e8b9ec40ef786e20b846041bd0fba45ad1abf7e17edb1c08ff0c200dc59021bab98a8ed5480bb2bee255985ecc2ff50abf21ab035aff213061eb1f0e461ee8fa120befe10bdf69c6f2515c5f032ea00ae53e8f3ce5d", &(0x7f0000000840)=""/78, 0x7, 0x22, 0xffffffffffffffff, &(0x7f00000008c0)}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121300, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff2, 0x1}, {0xfff1, 0x1}}, [{0x8, 0xb, 0xfa25}, {0x8}, {0x8, 0xb, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="07000000000000000000050000001c00038008000400000000000800020020000000080005f47080bbda180001801400020073797a5f74756e000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@getchain={0x4c, 0x66, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x5, 0x7}, {0xb, 0xc}}, [{0x8, 0xb, 0xe89}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x100005}, {0x8, 0xb, 0x4}]}, 0x4c}}, 0x4890) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000340)={0x1a, 0x5}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 18.122143901s ago: executing program 37 (id=10530): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/238, 0xee}], 0x1, 0xffff0000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000006c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000280)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], r2, 0x0, '\x00', 0xc, 0x6}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e999fcffffff00000000fe80000000000000000000000000003b000000000000000000000000000000000000000000000c9c0a00103006000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000ff0700000000000003000000000000000000000000000000fdffffffffffffff00000100000000001300000000000000ffffffff0000000409000000000000000500000000000000050000000000000000000000000000000101020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) io_setup(0x5, &(0x7f0000000e80)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000900)={0x0, 0xffffffffffffffff, 0x80, 0x4, @scatter={0x1, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)}]}, &(0x7f0000000640)="58744b8d64247313a438faf4b37f029123256a11321bda60ce1ff3a7c91b3256d5314f07e0f249e005196e8b9ec40ef786e20b846041bd0fba45ad1abf7e17edb1c08ff0c200dc59021bab98a8ed5480bb2bee255985ecc2ff50abf21ab035aff213061eb1f0e461ee8fa120befe10bdf69c6f2515c5f032ea00ae53e8f3ce5d", &(0x7f0000000840)=""/78, 0x7, 0x22, 0xffffffffffffffff, &(0x7f00000008c0)}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121300, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xfff2, 0x1}, {0xfff1, 0x1}}, [{0x8, 0xb, 0xfa25}, {0x8}, {0x8, 0xb, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="07000000000000000000050000001c00038008000400000000000800020020000000080005f47080bbda180001801400020073797a5f74756e000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@getchain={0x4c, 0x66, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x5, 0x7}, {0xb, 0xc}}, [{0x8, 0xb, 0xe89}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x100005}, {0x8, 0xb, 0x4}]}, 0x4c}}, 0x4890) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000340)={0x1a, 0x5}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 7.530080926s ago: executing program 0 (id=10564): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe64b3000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x1}) 6.646535432s ago: executing program 8 (id=10566): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x20000, 0x3, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x53d75a3bd35a4e82}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x20000, 0x3, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010100}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x53d75a3bd35a4e82}, 0x4054) (async) 6.499721493s ago: executing program 8 (id=10567): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5423, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000004c0)={0x16, 0x7, {0x3, @usage=0x2, 0x0, 0x3, 0x7, 0x40, 0x10, 0x80, 0x410, @usage=0x100000001, 0x1, 0x401, [0x5, 0x2, 0x80000000, 0x81da, 0x8, 0x5]}, {0x57, @struct={0x2, 0x3}, 0x0, 0xffffffffffffff00, 0x10, 0x6, 0xf, 0x8001, 0x440, @usage=0x8, 0x2, 0x7fffffff, [0xd, 0x0, 0x6, 0x3, 0x1, 0x81]}, {0x1, @struct={0x8, 0xe8}, 0x0, 0x8, 0xffffffffffffffff, 0x9, 0x0, 0x5, 0x401, @usage=0x6, 0x5, 0x0, [0x1, 0x1, 0x9b9, 0x8, 0xfffffffffffffffd, 0x4]}, {0x9, 0x2, 0x3b3}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000008c0)={r3, 0x8, 0x8001, 0x1}) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0xbf, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x3ff, 0x6, 0x3447504d, [0x8000, 0x8], [0xc, 0x1], 0x13a}}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0}) 4.570513062s ago: executing program 9 (id=10569): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf690, 0x69}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x34}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5ae, 0x43}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xf}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x40}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xd5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x90}, 0x1, 0x0, 0x0, 0x1041}, 0x8010) fremovexattr(r0, &(0x7f0000000280)=@random={'user.', 'wlan0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x8082, 0x182) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x18, 0x2, 0x4, 0x4}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x4, @private2, 0x8}}, 0x8, 0x9, 0x7fff, 0x3, 0x18, 0x8, 0x2}, &(0x7f0000000400)=0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000440)={r3, 0x0, 0x3, 0x3}, &(0x7f0000000480)=0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%ps \x00'}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000840)={&(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x5, 0x9}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000880)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[{}, {}, {}], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x8, 0x0, r5}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000900)=0x6, 0x4) r6 = syz_open_dev$radio(&(0x7f0000000940), 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x2, 0x17, 0xc, 0x5, 0x7, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d2, 0xff, 0x8, 0x72, 0x0, 0x80000000}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x38}}, 0x4008040) ioctl$VIDIOC_SUBDEV_G_SELECTION(r6, 0xc040563d, &(0x7f0000000a40)={0x0, 0x0, 0x3, 0x0, {0x3ff, 0x0, 0x9, 0x7}}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000a80)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) getsockopt(r2, 0x5, 0x624, &(0x7f0000000ac0)=""/4096, &(0x7f0000001ac0)=0x1000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001b00), 0x8100, 0x0) lstat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000001c00)='\x00', 0x100, 0x10, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r2, {r8, r10}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, r4, {r9, r12}}, './file0\x00'}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000001d80)=@sg0, r13, &(0x7f0000001e00)) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000001e80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$P9_RRENAME(r2, &(0x7f00000020c0)={0x7, 0x15, 0x1}, 0x7) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000002100)={0x0, 0x6b, [0x8c6, 0x6, 0x8, 0x7, 0x6, 0x4]}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000002180)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) 4.464437739s ago: executing program 9 (id=10570): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0xfffffffffffffd1a}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r2, 0xffffffffffffffff, 0xa, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast2}], 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r4 = userfaultfd(0x801) rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x180000000000000, 0x4, 0x1}, 0x2}, 0x20, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) openat$cgroup_ro(r3, &(0x7f00000002c0)='memory.numa_stat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x92b02, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="dffeffff68000100023da9000000000c000200010000000400"/36], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000018e2dc8d000000000000000002001000fe04000100000020080083c13609f84e527da2325625fc2a68106473fddae14974e7a055d786047204f1133e54c8f54be7c368188ffa449314cdf5a5a1dbf3d668ae7edef4fcafb837bfe1822dfc0794e3bc7dc03172146e64ee6c8a6452c81f1de1c0d5d73fb9e888a9627de4445e36364c410497f6f58bfaa48b8191fcc6eebd89a7cf4c23f336c61bfe19a1bab011529a28412d09e56e6685a2b56aa71fcb000000000000000000000000000030fa743d12238b84cdd03b192085b657baa9c6fa747f190ba985b204d55cd3b026b34f2c675e4742e785da0d6575b02446df7ed75a0588d9b98df43bd2baaffd7783b647628d00ae4ca45fa018c4db08c54b52a1768bcc352ab76253ecb98429fd3500011b4b95d17a1db6bfd7fbc2090077e76bd9c508a37775fc41c8e70a0d0570274c161403f68136"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 4.19171358s ago: executing program 0 (id=10571): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) dup(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001000000000000000000022000000063"], 0x24}}, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x123400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x48, 0x0, @fd_index=0x4, 0x15, 0x0, 0x8, 0x1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 4.191264219s ago: executing program 5 (id=10572): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80082, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x11, r0, 0xfffffffffaa23000) pread64(r0, &(0x7f00000001c0)=""/29, 0x1d, 0x0) r1 = userfaultfd(0x80801) ioperm(0x9, 0x5ab1, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207baff8ff00000000bfa100000000000007010000f8dfffffb702000008000000b703000001000000850000006900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000000)="6b80ac3ce3077f6ca4f657f8f75e37a31e2b49de749c26797dc5111dbf4c3a707f4bad0ea0678b1a4f32adda34fa711606cd18eea48cf0863bbb075288dbdca32f62cb4205e984ac3b55fe6427a9fee9ba79151446d4d9890ef7d64133b196370222031d3a4c5ed1e546a379bed797b0f2c55e", 0x73, 0x4008001, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) 4.107051322s ago: executing program 5 (id=10573): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$dupfd(r2, 0x0, r0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xfff}, &(0x7f00000001c0)=0x8) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0xa, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x920, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x0, 0x0, 0x935, 0x0, 0x5}) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009d, 0x0, 0xf00}]}) mprotect(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, 0x0) 3.967435941s ago: executing program 0 (id=10574): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x100003}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x7f, 0x20000a2e, 0x0, 0x96, 0x3, 0x2000000, 0x0, 0x3000000}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f0000000000)={0x14, 0x2a, 0x1, 0x70bd25, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004080) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c8e4}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.658481831s ago: executing program 5 (id=10575): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x200000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3e50, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {}, {0xd, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x3e20, 0x2, [@TCA_BASIC_ACT={0x3e1c, 0x3, [@m_tunnel_key={0x14c, 0x16, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0xfffffffb, 0x20000000, 0x2, 0x7f}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x40, 0x6, 0x0, 0x3, 0x79048e74}, 0x5}}]}, {0xbf, 0x6, "17ea8bac6d953b2679c2a0a6ff718444559b81cefde584ae5413c5426133b91f7b30e5bb6b424449f40f9aae5b20d987422849e0b7bd953704bfc9c4cbbab377336f3106a1747f8b92d2c024315afbff7206f32c7ca668291f5bc4ff6bd44d3beb5d20bce8670a54b8094100978f5497339d9446510a51d3930e0c222d88ba5d1d14ba8cb118ac9d8880558a56e4e94283c1f12e367e774dbf02e0db3dbfefef9eb855ae1c27999bdc519ac875ddf440ac9a42254f2f1065da842b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xbc, 0x1a, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x84, 0x6, "868c4dd2fbf8a2387992c143a46fa3f318a729626f5455571d54251bdbbc6a5e4d328cd5b8886d8d06c59da5dc891da841a55b50fbe788569d4a959e8c95bcfaa7f69584bfcebdd03b3fafc833fc15d53a5ddd9ede39f21ac6ae554e8a348bebda91af58c923681f7d243cb41c3e8acdceabdfc079704cc3c6d729f0a9a6712c"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x3c10, 0xa, 0x0, 0x0, {{0xa}, {0x3afc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x80, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0xe, 0x2, 0x0, 0x6, 0x1}, 0x6, 0x7, [{0x3, 0x1, 0x1, 0x3, 0x6, 0x9}, {0x4, 0x3, 0xfffffffb, 0x1, 0x3, 0x9}, {0xa, 0x9, 0x7a, 0xe3, 0x7f, 0x2}, {0xc, 0x3, 0x6, 0x574e, 0x10001, 0x800}, {0x80000001, 0x8, 0x1, 0x9, 0xfffffff8, 0xe}, {0x832a, 0x8, 0x7, 0x2, 0xbd1, 0xf9fd}, {0xc7, 0x3, 0x6, 0x5, 0x101}, {0x8, 0x2, 0xffffffff, 0x4, 0x3, 0x8}]}, [{0x401, 0x8, 0x4, 0x9, 0x4, 0x94}, {0xfffffffa, 0x8, 0x6, 0x80000000, 0x10001, 0x14}, {0x3, 0xf090, 0x7, 0x3ff, 0x6, 0x6}, {0x5, 0x0, 0x6, 0x5, 0x1df, 0x1}, {0x8, 0xe6, 0x7fff, 0xed, 0x5, 0x5}, {0x6, 0x7fff, 0x40, 0xad5, 0x4, 0xd}, {0x5, 0x80000000, 0x2, 0x7, 0x8001, 0x200}, {0x6f, 0xf77, 0x4b, 0xd, 0xfe, 0x2}, {0x9, 0x6, 0x9, 0x7fff, 0x6, 0x41f6}, {0x9, 0x3, 0x401, 0x5, 0xfffffeff}, {0x0, 0x10, 0x80, 0xfffeffff, 0x3, 0x10001}, {0x7, 0xb, 0x6, 0x1, 0xffff57e1, 0x3}, {0x47aeb529, 0xffffffff, 0x9, 0x100, 0x0, 0x1c958}, {0xa, 0x7, 0xc, 0x5, 0x8, 0x100}, {0x6, 0x0, 0xdc, 0x5, 0x4b64, 0x7ea4}, {0xe, 0xcf6, 0x7, 0x10001, 0xffffff01, 0x9}, {0x61b, 0x3, 0x2, 0xe, 0x9, 0x100}, {0xbec, 0x7, 0x9, 0x2, 0x64, 0xff}, {0x18, 0x9, 0xa3, 0x5, 0x9, 0x800}, {0x7d, 0xfff, 0x80000000, 0x6, 0x7, 0xffff}, {0x5, 0x1, 0x4, 0x8, 0x68ac, 0x7}, {0xe6b6, 0x2, 0x3, 0x10, 0x3, 0x9}, {0x7, 0x80000001, 0x1, 0x197, 0x8, 0x5}, {0x800, 0xa82, 0x1, 0x48, 0x200, 0x81}, {0x3, 0x80000001, 0xd92, 0x1, 0x2, 0x6}, {0x9, 0x4, 0x80000001, 0xe, 0x7, 0x3}, {0x7, 0x1, 0x0, 0x3, 0x200, 0x101}, {0x1ff, 0x4, 0x0, 0xff, 0xe3d, 0x400}, {0x3, 0x8, 0x7fff, 0x3ac, 0x0, 0x3}, {0x4, 0x7, 0x8, 0x8, 0x9, 0xf1e}, {0x249, 0x9, 0x5, 0x4, 0x1, 0x33}, {0x8001, 0xc6a, 0x3, 0xfffffffc, 0x35, 0x934}, {0x2, 0x4, 0x8, 0x0, 0x9, 0x2}, {0x80000001, 0x1ff, 0x1, 0x9, 0x10001, 0xe}, {0x8, 0xa, 0x6b, 0x4, 0x3, 0xfffffdf3}, {0xfffff698, 0x4, 0x80000001, 0x2, 0xfffffff9, 0x8}, {0x2, 0x81, 0x200, 0x4, 0x3, 0x5}, {0x8, 0x2, 0x7ff, 0x80}, {0xffffffff, 0x4, 0x7, 0x3, 0x800, 0x4620}, {0x8, 0x100, 0xbb9, 0x10001, 0x1, 0x31b7}, {0xe40, 0x0, 0x4, 0x607, 0x0, 0x142}, {0x8, 0xd9bc0000, 0x9, 0x8, 0x3, 0x100}, {0x0, 0xd9f, 0x130, 0x7}, {0x99cc0193, 0x2, 0xff, 0x5, 0x6, 0xfc6f}, {0x7, 0x8, 0x2, 0x4, 0xd, 0x4}, {0x400, 0x571a4004, 0x6, 0xbd, 0x6, 0x1}, {0x5, 0x62b, 0x0, 0x3, 0x2, 0x9a}, {0x1, 0xde8, 0x4, 0x4, 0x1, 0x40000}, {0x4cd, 0x15a9, 0x4, 0x10000, 0xfffffffb, 0xa}, {0x1, 0x8000, 0x1000, 0x2ea, 0x400, 0x2}, {0xed2, 0x6, 0x81, 0x101, 0x7, 0x2}, {0x25, 0x5, 0x8, 0x349, 0xfffffffb}, {0x1, 0x5, 0x100, 0x7, 0x600000, 0x5}, {0x10, 0x0, 0x200, 0x4, 0xc3, 0x7}, {0x2, 0x800, 0x7, 0x21f4000, 0x2, 0x4}, {0x0, 0x8000, 0xffd, 0x10, 0x9, 0x9}, {0x400, 0x99, 0x19cb, 0x6, 0xffffff1b, 0x9}, {0x1, 0xee65, 0x3, 0x8, 0x1, 0xffff}, {0x8, 0x2, 0x8, 0x3, 0x7fffffff, 0x2}, {0x7, 0x74ae, 0x7ff, 0x8c3e, 0x6d, 0x6}, {0xd0, 0x9, 0x6, 0x80000001, 0x6, 0x78a}, {0x7, 0x7, 0x9, 0x800, 0x10, 0xa}, {0x1, 0x6, 0x1, 0xffffffff, 0x0, 0x6}, {0x8804df1, 0x1, 0x5, 0x0, 0x3, 0x8}, {0x6, 0x7, 0x10b1f278, 0xfffffff8, 0x7fff, 0x4}, {0xfb, 0x10001, 0x499, 0x3, 0x2, 0x101}, {0x40, 0x2, 0x1, 0x8, 0x7, 0x2}, {0x8001, 0x9, 0x1, 0x3ff, 0x6490, 0x6}, {0xec4f, 0x1, 0x101, 0x6, 0x10000000, 0x1}, {0x1, 0xfffffff8, 0x8, 0x8, 0x1, 0x1}, {0xf51a, 0xc0, 0x9, 0x9, 0xfffffff1, 0x3}, {0x3, 0xfffffc00, 0x8, 0xfffffffc, 0x0, 0x46b5}, {0x2, 0x6, 0xd, 0x80000001, 0x3, 0xcb3}, {0x9, 0x8000, 0x0, 0x1, 0x5}, {0x6636, 0x7, 0x5, 0x1ff, 0x456, 0xaf9}, {0x7, 0x100, 0x0, 0x3, 0x7, 0xffffffff}, {0xfffffffc, 0x3, 0x7, 0xed6, 0x1, 0xfffffffb}, {0x0, 0xffff0541, 0x7, 0xaa, 0x0, 0x6}, {0x8, 0x2090, 0x400, 0x5, 0x5, 0x7}, {0x4, 0x472, 0x8, 0x9, 0x3}, {0xfffffffc, 0x3, 0x4065, 0x5, 0x5, 0x2}, {0x2, 0x100, 0x60, 0xc, 0x3ff, 0xc85b}, {0x7, 0x8, 0xfffffffc, 0xc5f3, 0x754c, 0xbe}, {0x9c, 0xe7c9, 0x4, 0x18000000, 0x40, 0x1}, {0x7, 0x1b, 0x1, 0x3, 0xd, 0x401}, {0x8, 0x0, 0x81, 0x7f, 0x9, 0x40}, {0x2, 0x6, 0x2, 0x7ff, 0x400, 0x9}, {0x0, 0x100, 0x5, 0x8, 0x8001, 0x59fa}, {0xb28d, 0x1, 0x8, 0x363c, 0x3, 0x8}, {0x10000, 0x1e8, 0xffffffff, 0x0, 0x7, 0x5}, {0x1, 0x80000001, 0xfffffffd, 0x0, 0x5}, {0x5bb1, 0x6, 0x3, 0xa0, 0xa, 0x2f}, {0xfffffffa, 0xe89e, 0x3, 0x8001, 0x5d8, 0x4}, {0x9, 0x8, 0xfffffffd, 0x80, 0x10001, 0xff}, {0x7, 0x2, 0x10000, 0x7ff, 0xd, 0x352}, {0x7fffffff, 0xf9, 0x2, 0x1, 0x2, 0x7}, {0x1, 0x0, 0x2, 0xb, 0x9, 0x5}, {0x22, 0x3, 0x9, 0x2, 0x40, 0x9}, {0x8, 0xfff, 0x7, 0x1, 0x2, 0xff}, {0x8, 0xfff, 0x6, 0x1b, 0x7fffffff, 0x3}, {0x10001, 0x3, 0x7, 0x0, 0x3, 0x7}, {0x2, 0x8, 0x4, 0x6, 0x2, 0x1}, {0x9, 0x61de, 0x5, 0x2, 0x8ed, 0x8}, {0xfffffffa, 0x0, 0x0, 0x0, 0xb80, 0x81}, {0x0, 0x9, 0x9, 0x4, 0x2fa, 0x1}, {0x0, 0x6, 0x401, 0x1357, 0xd8f, 0x3ff}, {0x7, 0xd, 0xffff8000, 0xfffffcc0, 0x8, 0x6}, {0x10000, 0x4, 0x2, 0x0, 0xfffffff9, 0x8}, {0x9, 0x8, 0x4, 0x1, 0x5, 0x4}, {0x7, 0x8, 0xb6a, 0xfffff000, 0x9, 0x4}, {0xff, 0x6, 0x3, 0x14000000, 0x5, 0x7}, {0x8820, 0x8a7d, 0x7, 0xe, 0x9, 0x4}, {0x3f, 0xc, 0x200, 0x3, 0x7}, {0x8, 0xa, 0x2, 0x400, 0x9, 0x3}, {0x5, 0xff, 0x4, 0x1000, 0x9a, 0x8}, {0x101, 0x6568, 0x800, 0x51e, 0x3ff, 0x10000}, {0x5c, 0xa07, 0xfff, 0x2, 0x7fff, 0xfff}, {0x7, 0x9, 0x10001, 0x1, 0x0, 0x5}, {0x4, 0x8, 0x7, 0xc6f9, 0xd, 0x1}, {0xb, 0x6, 0xc, 0xe761, 0x3a4b, 0xa4}, {0x7ff, 0xb250, 0x2, 0x5, 0xfffffffb, 0xe}, {0x4, 0xfffffffe, 0xffffff1e, 0x7fc0000, 0x2, 0x7}, {0x1, 0x1, 0x8, 0x80, 0x9, 0x401}, {0x7, 0x0, 0x7f, 0x2, 0x9}, {0x0, 0xb62, 0x5b, 0x8, 0x1}, {0x9b37, 0x9, 0xc8ce, 0x6, 0x1b5d40a1, 0x2}, {0x401, 0x401, 0x9, 0x5, 0x0, 0x2}, {0xf4b, 0xe880, 0x2, 0x3, 0xc, 0x4d99}], [{0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x83c533df6495ce28, 0x1}, {0x4}, {0x3}, {}, {0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x3}, {0x5}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x80000001, 0x9, 0x10000000, 0x1, 0x3}, 0x1, 0xcc, [{0x4, 0x800, 0x1, 0x9b34, 0xd4e, 0x4}, {0xd, 0x3ff, 0xf, 0x8, 0x5, 0xffff}, {0x3, 0x18d, 0x7fffffff, 0x1ff, 0x8, 0x3}, {0x80000001, 0xfffffffa, 0x6, 0xbb7f, 0x8, 0x6}, {0x3, 0x6, 0x10001, 0xa4bf, 0x8}, {0x800, 0x3ff, 0x2, 0x4, 0x2, 0x9}]}, [{0xb, 0x1, 0x5f0a, 0x4, 0x6624, 0x2}, {0xfffffffa, 0x3, 0x2, 0x8, 0x1, 0xb0}, {0x7, 0x8, 0x200, 0x0, 0x5, 0x9}, {0x7ff, 0xc1, 0x7, 0x7, 0x4, 0x80}, {0x3, 0x342f, 0x0, 0xfff, 0x2, 0x6}, {0x7, 0x7, 0x43, 0x1000, 0xeb9, 0x6}, {0x6, 0x8, 0xfffffff8, 0x7, 0x4, 0x4}, {0x8, 0x2, 0x2, 0x805, 0xdc, 0x5}, {0x8, 0x6, 0x10000, 0x4, 0x3, 0x1000}, {0x2, 0x10000, 0x5, 0x4, 0x41, 0xffff}, {0x8, 0x2, 0xd635510, 0x191, 0x9, 0x7fffffff}, {0x4, 0x0, 0x40, 0x4, 0x3, 0xfffffffd}, {0x0, 0xfffffffa, 0x921, 0x5, 0xfff, 0x7}, {0x8, 0x6, 0x7af, 0x0, 0xe, 0xffffffff}, {0x1000, 0x101, 0xc, 0x9, 0x8, 0x9}, {0x7ff, 0x200006, 0x40000, 0x3138, 0x2, 0x400}, {0x18000000, 0x3, 0x200, 0x6, 0x8f, 0x9}, {0x6, 0x10, 0x6, 0xfff, 0x4}, {0xffffffe8, 0xfb, 0x81, 0x6, 0x1, 0xb}, {0x3ff, 0x5, 0x2, 0x2, 0x2, 0x2}, {0x6, 0x10, 0xf, 0x7, 0x8, 0x5}, {0x5, 0x1, 0x4, 0x8, 0x2, 0xa1d}, {0x3, 0xfffffff9, 0xfffffffc, 0x20f, 0x8, 0x3ae}, {0x7, 0x10, 0x0, 0x1, 0x8, 0x2}, {0x4, 0xfd88, 0x7fffffff, 0x6, 0x7, 0x8}, {0xffff, 0x29d, 0x5, 0x4, 0x8000, 0x3ff}, {0x8, 0xd, 0x10, 0x4, 0x80000, 0x9}, {0xffd, 0x3, 0x7, 0xfffffffe, 0x5, 0x8}, {0x7, 0x9, 0x2, 0x9, 0x3, 0x3}, {0x7, 0xb, 0xff, 0x987f, 0x9, 0x8}, {0x2, 0x1000, 0x7b, 0x5, 0x7}, {0xe011, 0x80000000, 0xfff, 0x0, 0x4, 0x1}, {0x9, 0xbaebfdf2, 0x1, 0x5, 0x4ab, 0x4}, {0x9, 0x1, 0x6, 0x9, 0x7, 0x2}, {0x5, 0xd, 0x3, 0x101, 0x7, 0x8}, {0x6b, 0x3ff, 0x0, 0x78, 0xf, 0xfffffff5}, {0x3, 0xde71, 0x6, 0x40, 0x7, 0x372}, {0x0, 0x80000000, 0x1, 0xb32, 0xaba, 0xfff}, {0xd6c, 0xa30, 0x1, 0x4, 0x3, 0x7}, {0x15, 0x8, 0x3, 0x5, 0x4, 0x3}, {0x9, 0x9, 0x10000, 0x6, 0x1, 0x10001}, {0xb2, 0x4, 0x3ff, 0x2, 0x5ae4, 0x2}, {0x878, 0x1, 0x2, 0x3, 0x7, 0xa2}, {0xffff, 0x100, 0xd1c1, 0x1, 0x7c, 0xf62}, {0x1, 0x7, 0x5, 0x3, 0x2, 0x1}, {0x7, 0x3, 0x6, 0x6, 0x9, 0x6}, {0x5e, 0x8, 0x2, 0x5e6, 0x6, 0x7fff}, {0xf45, 0xe, 0x3, 0xd9, 0x8000, 0x8}, {0x5, 0x101, 0x1, 0x1, 0x7b, 0x12}, {0x81, 0x1, 0x9, 0x9, 0x3, 0x4}, {0x1, 0x1000, 0xfff, 0x473, 0x8, 0x9}, {0xe, 0x480, 0x0, 0x8001, 0x2, 0x48}, {0x3, 0x8, 0x1, 0x6, 0x10001, 0x8}, {0x1, 0x3, 0x4, 0x0, 0x0, 0x7881}, {0x5, 0x1, 0x1ff, 0x101, 0x7, 0x881}, {0x10000000, 0x9, 0xa38, 0x9, 0x2, 0x5}, {0x1, 0x2, 0x4, 0x1000, 0xfffffffc}, {0xfffffff7, 0x6, 0xfff, 0xc9, 0x9, 0x7e00}, {0x3, 0x4db3, 0x498, 0x8, 0xc, 0x10}, {0x462, 0x40, 0x8, 0x81, 0x8, 0x3}, {0x5, 0x8, 0x5, 0x7, 0x5, 0x9}, {0x0, 0x480e, 0x1, 0x67, 0x9, 0x9f}, {0x200, 0x8, 0x3, 0xe, 0x5, 0x3}, {0x56, 0x7f, 0x7, 0x7, 0x6, 0x7}, {0x8, 0x2, 0x80, 0x4, 0xfffff43e}, {0x1, 0x7ff, 0x1, 0x6, 0xb, 0x1}, {0x0, 0x64a, 0x9, 0x2, 0x6, 0xffff2372}, {0x6, 0x4, 0x40, 0x2, 0x100, 0x8}, {0x76, 0x3, 0x8, 0x2, 0xa, 0x5}, {0x8, 0x3cb2cb, 0x3ff, 0x7, 0x6, 0x2}, {0x1000, 0x70, 0xff, 0x9, 0x4, 0x40}, {0x0, 0x5, 0x8, 0x6, 0x9, 0xff}, {0x8, 0x9, 0xd74, 0xfffffff9, 0x9, 0x8}, {0x5, 0x9cba, 0xfffffffa, 0x2f6, 0x5}, {0xff, 0x2, 0x8, 0x3ff, 0x9, 0x4}, {0x1000, 0x3, 0x1, 0x4, 0x6, 0x9}, {0xb, 0x8, 0x9, 0x2, 0x3, 0x88a0}, {0xae, 0x9, 0x80000001, 0x9, 0x81, 0xa}, {0x0, 0x40, 0xe, 0x100, 0x0, 0x4}, {0x86, 0xff, 0x1, 0x80, 0x5, 0x4}, {0xf, 0x3, 0x0, 0x3, 0xf, 0x1}, {0x5, 0x7, 0xe0, 0x6, 0xfefd, 0x2}, {0x6, 0x6, 0x4, 0x2, 0x5, 0xc9dddc3}, {0xff, 0x2, 0x3, 0xffe00000, 0x7, 0x3}, {0x99, 0x18166766, 0x6, 0x8001, 0x4000, 0x3}, {0x2, 0x3ff, 0xa6, 0x7, 0x0, 0x5}, {0x6, 0x2, 0x4, 0x8, 0x8, 0xb}, {0xffff0001, 0x8001, 0x8, 0x80000001, 0xffff, 0xfffffe01}, {0x9, 0x982f, 0x0, 0x7, 0x6, 0x9}, {0x5, 0x9, 0x8, 0x2, 0x1, 0x4}, {0x5, 0x7fffffff, 0x25b, 0x6, 0x3, 0xd44}, {0xe68b, 0xc84, 0x9, 0x6, 0x0, 0x3}, {0x8000, 0x5, 0x800, 0xffff, 0x3ff, 0xd5efa7c}, {0x1ff, 0x8, 0x2c05, 0xfffffffd, 0x8, 0x8000}, {0xffff94f4, 0x84, 0x9, 0x3, 0xd, 0x9}, {0x5a6, 0x7, 0x7, 0x1, 0x7ef, 0x7}, {0x8001, 0x9, 0x7fffffff, 0xb2, 0x80000000, 0x2}, {0xffffd4de, 0x2, 0x3, 0x6, 0x9, 0x6}, {0xff, 0x0, 0xe4, 0xfffffff8, 0xfffffff7, 0x2}, {0x3, 0x7, 0x4, 0x3, 0x38000, 0x9}, {0x3, 0x3, 0xfff, 0x3, 0x8, 0xfb}, {0xd4, 0xc8b, 0x6, 0x60000, 0xa, 0x9}, {0x1ff, 0xf4fd, 0x5, 0x8, 0xd, 0x2}, {0xc, 0x9, 0x2, 0x4, 0x7, 0x2}, {0x957, 0xcf, 0x2, 0x2, 0x0, 0x9d1}, {0x2, 0x4, 0x3, 0x800, 0x8, 0xfffffffd}, {0x10001, 0x10001, 0x8, 0x2, 0x2, 0x8}, {0xfffffff9, 0x0, 0x2, 0x6, 0xff, 0x4}, {0x2, 0x1, 0x5, 0x10001, 0x3, 0x2fbd}, {0x203ee9a4, 0x5, 0x8000, 0x6, 0x7, 0x7}, {0x5, 0x2, 0x7fff, 0x0, 0x9, 0xfffffffb}, {0x9, 0x0, 0x9, 0xe, 0x9, 0xb0d}, {0x2, 0x101, 0x101, 0x1, 0x3c63, 0x6}, {0x4000, 0x3, 0x5, 0x800, 0x7, 0xff}, {0x1000, 0x3, 0x2554, 0x8, 0x10001, 0x4e}, {0x2, 0x0, 0x69ee, 0xbc4, 0x1000}, {0x2, 0x9, 0x8, 0x9, 0x5}, {0x399f, 0xa, 0x7fff, 0x2, 0x9}, {0xfffffffb, 0x8, 0x7, 0x10, 0x22a, 0x1}, {0x2de5, 0x0, 0x3, 0x80000000, 0x0, 0x4}, {0x5, 0x6, 0xfffffadc, 0x7a, 0x5}, {0x8, 0x5, 0xfa4, 0x363, 0x3, 0x5}, {0x6, 0x4, 0x3f99a00, 0xebc00000, 0x8, 0x8}, {0x8, 0x101, 0x3, 0x9, 0x7, 0x1}, {0x10000, 0x80000001, 0x7, 0x10001, 0xffff, 0x9}, {0x6, 0x3, 0x6, 0xffffffff, 0x400, 0x3}, {0x3, 0xc2, 0x7, 0x1, 0x6158d298, 0x5}, {0x2, 0x4ae, 0x8ad, 0x1ff, 0xfffffff9, 0x7}], [{0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {0x5}, {0x5}, {}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x5}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x610d66acee52b93c}, {0x4}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x3}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0xfd0a73249602e187}, {}, {0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xf5, 0x5, 0xffffffffffffffff, 0x81, 0xd}, 0x3, 0x4, [{0x5, 0x7fff, 0x9, 0x4, 0xd, 0x32f22eac}, {0x3c, 0x0, 0xe, 0xbe, 0x7, 0x7}, {0x1, 0x4, 0x800, 0x4, 0x9, 0x8}]}, [{0x471, 0x4, 0xfffffffa, 0x3, 0x3, 0x2}, {0x54784d79, 0xffffffff, 0x4dbda8fc, 0x1, 0xffffff80}, {0x9, 0x3, 0x5, 0x5, 0x5, 0x5}, {0x7, 0xfffffffc, 0x0, 0x1000, 0xbc, 0x101}, {0x5, 0x4, 0xb918, 0x9, 0x80, 0x80}, {0x0, 0x400, 0xa, 0x3, 0x8, 0x8}, {0x40, 0x3, 0xb, 0x9, 0x1000, 0x4}, {0x800, 0x8, 0x5, 0x3c3, 0x10000, 0x5}, {0x4, 0x28000, 0x3, 0x7, 0x6, 0x1ff}, {0xfffffff9, 0x3, 0xc, 0xffffff76, 0xff, 0xffff0000}, {0x1, 0x8, 0xffffffff, 0x508, 0x7}, {0x8, 0x7, 0xfffffffa, 0x6, 0x1, 0x4}, {0x3b2, 0x5, 0x2, 0x3, 0x8, 0xa}, {0x1b8, 0x1389, 0x4, 0xfffffffe, 0x10}, {0x3, 0xd971, 0x6, 0x7, 0x2, 0x6785ede3}, {0xffffffff, 0x0, 0x5, 0x80, 0x9, 0x6}, {0x3, 0x7, 0x800, 0x4, 0x10001, 0x9}, {0x6, 0xfffffff9, 0x6, 0x4, 0xfb7d}, {0x54, 0x19, 0x5, 0xfffffff7, 0xb3d, 0x5}, {0x6, 0x8001, 0xfeeb, 0x4, 0x6, 0xf}, {0x7, 0x3, 0x8, 0xffffffff, 0x8, 0x58}, {0x36, 0xca, 0x3, 0x4, 0xa8, 0x5}, {0x7ff, 0x3, 0x3, 0x3, 0x687, 0x80000001}, {0x2bc796d6, 0x5, 0x9, 0x800, 0x3, 0x2}, {0x81, 0x1, 0x1, 0x7fffffff, 0x7, 0xd8000000}, {0x18, 0x0, 0x4, 0x80, 0x401, 0x642}, {0x4, 0x0, 0x7, 0xd, 0x5, 0x9844}, {0x4, 0x8, 0x1, 0x0, 0x2, 0x10000}, {0x7fffffff, 0x3e, 0x46, 0x8000, 0x6e, 0x1}, {0x0, 0x6, 0x1, 0x8, 0x80000000, 0xded}, {0x7, 0x2, 0x1, 0x8, 0x1d9, 0x7fff}, {0x1, 0x80000000, 0x10, 0x5, 0x7, 0x9}, {0x4, 0x3, 0x3, 0x7f, 0x789ce50, 0xb}, {0x7, 0x2, 0x2, 0x6, 0x2, 0x1000}, {0x9, 0x3ff, 0x9, 0x0, 0x9, 0x6}, {0x1, 0xae0, 0x8000, 0xffffffff, 0x0, 0x53f}, {0x3, 0x5, 0x1, 0xb99f, 0x2}, {0x7, 0xffffff7f, 0x2, 0x4, 0x7, 0x1}, {0x3, 0x9, 0x1000, 0x9, 0x93, 0x6}, {0x80, 0xf, 0x38, 0xd, 0x4, 0x5}, {0x0, 0x0, 0x3, 0x800, 0x0, 0x4cd3}, {0x1, 0x9, 0x2, 0x5, 0x80000001, 0x3}, {0x10, 0x9, 0x9, 0x2, 0x3, 0x31cd}, {0xad98, 0x7f, 0x68, 0x2, 0x7, 0x3}, {0x0, 0x5, 0x1, 0x9, 0x3, 0xc}, {0x0, 0x3, 0xff, 0x7, 0x4, 0x8}, {0x5, 0x3, 0x27, 0xfffffffb, 0xca, 0x4d5}, {0x9, 0x2, 0x4, 0x3, 0x101, 0x400}, {0xb, 0x4, 0x7, 0x2, 0x8, 0x5}, {0x1, 0x7, 0x3, 0xffffffff, 0x8, 0x1}, {0xa6c7, 0x6, 0x9, 0x7, 0x8}, {0x2, 0x9ffb, 0x7fffffff, 0x7, 0x4, 0x9}, {0x8, 0x9, 0x4, 0x9, 0x4, 0x7}, {0x400, 0xfffffffa, 0x1, 0x5, 0xac9, 0x917}, {0x7, 0xffff, 0x4, 0x2, 0x3, 0xffffff01}, {0x10, 0x0, 0x1, 0x7, 0x2, 0x1ff}, {0x3, 0x800, 0x7d, 0x3, 0x57, 0x1}, {0x9, 0x1, 0x80008000, 0x6, 0x9}, {0x81, 0x3, 0x8001, 0x7ff, 0x1ff, 0x800}, {0x9, 0x5, 0x4, 0x0, 0x0, 0x8}, {0x5, 0x400, 0x9, 0x3, 0x80000001, 0x9}, {0x50f4, 0x8, 0x80000001, 0x7fffffff, 0x8000, 0x7}, {0xa1, 0x4, 0x8, 0x1ff, 0x7f, 0x5}, {0xd, 0x9, 0xff, 0x8, 0x56, 0x9}, {0x8000, 0x3, 0x10001, 0x3, 0xd8, 0x8}, {0xfffffff7, 0x3, 0xfffff523, 0xa5f, 0x5, 0x8}, {0x4, 0x1, 0x7f, 0x9, 0xc86, 0xa}, {0x7, 0x9d, 0x401, 0x494, 0x10001, 0x4}, {0x8, 0x0, 0xb911, 0x80000000, 0x4a, 0x2}, {0x6f, 0x1b8400, 0x9, 0xffffff80, 0x9, 0x8}, {0x700000, 0x1000, 0xa, 0x1ff, 0x7, 0x40}, {0x7a298328, 0x5b, 0x6, 0x1ff, 0x7f, 0xf6c2}, {0x2, 0xff, 0x0, 0x9, 0x9, 0x6}, {0xf2, 0x90, 0x3ad7, 0x6, 0xfff, 0x1}, {0x4, 0x9, 0x4, 0x4f3b914c, 0x6, 0x10000}, {0x80000001, 0x1000, 0x7f, 0x7, 0xfffffffd, 0xfc}, {0x6, 0xfff, 0x1000, 0x10, 0x2, 0x8}, {0x1, 0x4, 0x0, 0x1000, 0xe325, 0x2c83}, {0x400, 0x463, 0x18, 0x4, 0x6, 0x4}, {0x4569, 0x800, 0x3, 0x9, 0x100, 0x2}, {0x56, 0x80000000, 0x2, 0xfffffffa, 0x401, 0x7fff}, {0x80000001, 0x0, 0xe, 0x2, 0x5, 0x3}, {0xa, 0x81, 0x6, 0xd, 0x1, 0xfffffff8}, {0x2, 0x5, 0x1ff, 0x7, 0x2, 0x40}, {0x800, 0x2b7082f0, 0x5, 0x9, 0x6d4b, 0xa}, {0x2, 0x2, 0x1, 0xdc1, 0xfffff274, 0x7}, {0x1, 0xf, 0x3ff, 0x0, 0xfffffff7, 0x7f}, {0x10, 0xeea9, 0x9, 0xffffffff, 0x8, 0x2}, {0x1, 0xdc, 0xfff, 0x4, 0x1, 0xff}, {0x9, 0x5, 0xff, 0xf, 0xd2, 0x6}, {0x8, 0xfe9, 0x8, 0x400, 0x2, 0x8}, {0xdfc, 0x1ff, 0x9, 0x5, 0x39, 0x711}, {0x1, 0x3, 0xffffff7f, 0xf0, 0x2, 0x2}, {0x5, 0x8001, 0x4, 0x6, 0x0, 0x20aa}, {0x4, 0xff, 0x7, 0x7, 0x8, 0x5}, {0xd, 0xdd8, 0x6, 0x80000000, 0x1, 0x7f}, {0x7, 0x591e841e, 0x3ff, 0x800, 0x1, 0xd00f}, {0xec0, 0x401, 0xffffffff, 0xfb5, 0x80000000, 0x7}, {0x4, 0x9, 0x9, 0x6, 0x6, 0x5}, {0xa, 0x4f97, 0xfff, 0x401, 0xc9, 0x80}, {0xa, 0x3ee223bf, 0x3, 0xfffffff9, 0x100, 0x7}, {0x1, 0x8, 0x0, 0x1, 0x479, 0x1}, {0x8, 0x7, 0x5, 0xc353, 0x1, 0xf}, {0x7, 0xffff, 0x2, 0x10, 0x8, 0x5}, {0x8, 0x10000, 0x101, 0x2, 0x7, 0x9}, {0x8, 0x10001, 0x7, 0x6, 0x3ff, 0x101}, {0xd2, 0x8, 0x75c4, 0x2, 0x4, 0x8}, {0x2, 0x5, 0x400, 0x6, 0x3ff}, {0x4, 0x200, 0x1, 0x2, 0x549, 0x699}, {0x2, 0xb, 0xb565, 0xa, 0x3, 0x9}, {0x8d2, 0x7, 0xa, 0x12, 0x7, 0xfa}, {0x9, 0xf0, 0x4646, 0x7abd, 0x10001, 0xfffffffd}, {0x9, 0x8001, 0x200, 0x2, 0x8, 0x6}, {0x2, 0xc, 0x7e4a006, 0x9, 0x100, 0xc}, {0xd09, 0xfffffff8, 0x10, 0xc, 0x1, 0x10000}, {0xd, 0x5, 0x8, 0xa047, 0x81, 0x6}, {0xfffffff4, 0x336, 0x2, 0xf62a}, {0xaddc, 0x16, 0xb, 0x5, 0x4, 0x1}, {0xfffffffb, 0x101, 0xa, 0x900, 0x2, 0x2}, {0xfffffffe, 0x7, 0x8000, 0x8, 0x0, 0x5}, {0x2, 0x7fffffff, 0xe, 0xbd, 0x2}, {0x4, 0x81, 0x29, 0xac0, 0x5, 0x434e}, {0x10, 0xfff, 0x3ff, 0x5, 0x4, 0xe}, {0x0, 0x2, 0x0, 0x5, 0x100, 0x5}, {0xd, 0x9, 0x401, 0x60000, 0x1, 0x6}, {0x4, 0xfffffeff, 0x7, 0x4, 0x7, 0x7}, {0x10a3, 0x8, 0x6, 0x6, 0x7, 0x2b}, {0x8, 0x400, 0xffffffff, 0xe, 0x2, 0x6}], [{0x5, 0x1}, {}, {0x5}, {0x1}, {}, {0x4}, {0x2}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x5}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x564a5a61894e3eff}, {0x0, 0x1}, {0x6, 0x4a80c6070dff242d}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x2}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x7}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}]}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x5, 0xfff, 0x7, 0x7, 0x3}, 0x4, 0x80, [{0x8000, 0x9, 0x2, 0xff, 0x6, 0x821e}, {0x5e29, 0x5, 0x5, 0x55bd, 0x0, 0x6}, {0xfffffff3, 0x7, 0x9, 0x9, 0xfff, 0xdd96}, {0x6, 0x8, 0x0, 0x3ff, 0x9}]}, [{0x80000001, 0x9, 0x100, 0xe, 0x3, 0x6}, {0x3, 0x9, 0xfffff001, 0x7, 0x1, 0x78000000}, {0x200040, 0x6, 0x18, 0x3, 0x8, 0x81}, {0x8, 0x5, 0x400, 0xa7, 0x10001, 0x800}, {0x80000000, 0x9, 0x5, 0x4, 0x376, 0x5}, {0x8, 0xcb4, 0x2, 0x8, 0x10001, 0x5}, {0x6b5a40bb, 0x8001, 0x9, 0x231, 0x3, 0x3}, {0xffffffff, 0x2, 0x90d7, 0xff, 0x0, 0x2}, {0x7, 0xa9, 0x5c, 0x2, 0x4, 0x7fffffff}, {0x1, 0x0, 0x1, 0x870f, 0x8, 0x8}, {0x6, 0x2, 0x7, 0x10001, 0x408, 0x80000000}, {0x9, 0x401, 0x6, 0x0, 0x43f, 0x7}, {0xfff, 0x9, 0x3, 0x7, 0xd, 0x80000000}, {0x25, 0x5, 0x800, 0x0, 0x6, 0x1}, {0x7, 0x3, 0x8, 0x2, 0x101, 0x3}, {0x401, 0x9, 0x7, 0x7, 0x2, 0x1}, {0xb2b, 0x7, 0x8, 0x101, 0xf, 0x7}, {0x401, 0x0, 0x10001, 0x1ff, 0x7}, {0xffffffff, 0x9, 0x0, 0x6, 0x3, 0xfffffe00}, {0x81, 0xffff, 0x12cb, 0x5, 0xa00, 0x4}, {0x7, 0xb9c, 0xfffffd29, 0x4, 0x5, 0x16}, {0x1, 0xe485, 0x6, 0x1, 0x200, 0xfffffff7}, {0x5397, 0x7, 0xff, 0x1000, 0x101, 0x800}, {0x6683, 0x1, 0x80, 0x6, 0x401, 0x5}, {0x9, 0x8, 0x7b6, 0x9, 0x2, 0x3}, {0x1, 0x4, 0x3, 0x401, 0xe0000000, 0xb08}, {0x53, 0x3, 0x80000001, 0x8f0b, 0x2, 0x4}, {0x3, 0xfffffffe, 0x5, 0x40, 0x2fc, 0x2}, {0x2, 0x4, 0x80000001, 0x13f, 0x9, 0x1}, {0x7, 0x1, 0xaab, 0xc2e, 0x9, 0x40}, {0x9, 0xf, 0xffff, 0xf, 0x8000, 0x10001}, {0x3, 0x1000, 0x7, 0xe, 0x0, 0x1}, {0xc, 0x725a, 0x9, 0x0, 0x10000, 0x274}, {0x0, 0x5, 0x9, 0x5, 0x51400}, {0x0, 0x2, 0x8, 0x4, 0x6, 0x3}, {0x9149, 0x3, 0x9, 0x4dc85fc2, 0x1ba, 0x1}, {0xbf0, 0xa2, 0xffff, 0x9, 0x7, 0x400}, {0x6, 0xfffffffe, 0x6, 0x4, 0xac0, 0x4}, {0x0, 0x7fffffff, 0x74, 0x1, 0x6, 0x3}, {0x17, 0x4, 0x7, 0xfffffffb, 0x1dce, 0xffff}, {0x9, 0x1, 0x9, 0x7ff, 0x40}, {0xff, 0x26d, 0x9, 0x3}, {0x6, 0x6, 0x8, 0x3, 0x9, 0x2}, {0x1319, 0x8000, 0x4, 0x7, 0x10, 0x8}, {0x9, 0x3, 0x8, 0x400, 0x7, 0x1000}, {0x8e9, 0x7, 0x10001, 0x7fffffff, 0x1, 0xf}, {0x9, 0x3, 0x0, 0x8, 0x39, 0xa8}, {0x7, 0x13, 0x0, 0x6, 0x1, 0x6}, {0x1000000, 0x4, 0x80000001, 0x43c2, 0x9, 0x101}, {0x5, 0xe000, 0x7, 0x7856, 0x5, 0x4}, {0x1, 0x0, 0x7fff0, 0x1, 0x7}, {0x2d21, 0x7, 0x7, 0x9, 0xffff0000, 0xb}, {0x4, 0x2, 0x1, 0x3, 0x6, 0x4}, {0x0, 0xfffffffe, 0x3, 0x7, 0x5}, {0x0, 0x9, 0x2, 0x8001, 0x5, 0x8}, {0x400, 0x8, 0xc90, 0xf8, 0x9, 0xa000}, {0x7ff, 0x240000, 0x8, 0xb5a, 0x100, 0x80}, {0xfffffffd, 0x800, 0x2, 0x4, 0x6, 0x4d}, {0x9, 0x93c, 0x9, 0x6, 0x9, 0x2}, {0x80000000, 0x3, 0x1ff, 0x2, 0x0, 0x9}, {0x5, 0x1, 0x5, 0x4, 0x2, 0x3}, {0x100, 0xa, 0x4, 0x0, 0x3}, {0x40, 0x2, 0x1ff, 0x3, 0x4, 0x4}, {0x6, 0xd, 0x7fff, 0xd, 0x3, 0x80000001}, {0x4, 0x6, 0x2, 0xac, 0xfffffff9}, {0x7, 0x2, 0x10001, 0x9, 0xa818, 0x2}, {0x8, 0x1, 0x3, 0x4, 0x4b, 0x5}, {0x5, 0x4, 0x0, 0x9, 0x26c, 0x10000}, {0x8, 0x80000000, 0x80, 0x4, 0x4, 0x1}, {0x1a8, 0x9, 0xffffff81, 0x7, 0x100, 0x5b}, {0x31f58f1, 0x101, 0xfff, 0x7, 0xcee, 0xb3}, {0xe, 0x200, 0x3, 0xfff, 0x0, 0x45cc}, {0x7fffffff, 0x2, 0x5, 0x5, 0x8c, 0x1}, {0xd, 0x3, 0x7b, 0x1, 0xca2, 0x9}, {0x3, 0x6, 0x1, 0x985, 0x3, 0x2}, {0x5, 0x1000, 0xfffffffa, 0x8000, 0x4}, {0x7, 0x86f1, 0x80000001, 0x3, 0x8, 0x2}, {0x6, 0x7, 0x7, 0x2, 0x400, 0x2}, {0xffffffff, 0x9, 0x1000, 0x2, 0x4, 0xfffffffb}, {0x1, 0xa, 0x4, 0x5, 0x7, 0x7}, {0x2, 0x4, 0x9, 0x93e, 0x5, 0x133}, {0x5, 0xc5a, 0x9, 0xffffffff, 0x8d6}, {0xdd, 0x10000, 0x10001, 0xc, 0xffff0542, 0x3ff}, {0xb, 0xb0, 0xd6, 0x4, 0x0, 0x4}, {0x3, 0x1000, 0x6, 0x10001, 0x9, 0x81e}, {0xa, 0x9, 0x9, 0xe, 0x644, 0x221f}, {0x6, 0xfffffffb, 0x2, 0xd7ee, 0x2fa2, 0x7fff}, {0x6, 0x8001, 0x48, 0xf, 0x1, 0x7}, {0x81, 0x5, 0x4, 0x7fea, 0x5, 0x80000000}, {0x5, 0x401, 0x7fffffff, 0xfffffff0, 0x400, 0xfffffff9}, {0x4, 0x2, 0xffff, 0x8, 0x43fd60ee, 0x9}, {0xbb6a, 0xfffffff8, 0x3e, 0x65f, 0x80010, 0x6}, {0x2, 0x80, 0xe59, 0x2, 0x3, 0x7fff}, {0x81, 0xe4, 0x5, 0x3, 0x0, 0x5}, {0x2, 0x0, 0x2, 0x9, 0x0, 0x4}, {0xe04a, 0x3, 0x2, 0x4, 0x3, 0x7}, {0x7, 0x40000, 0x400000, 0x7fff, 0x1, 0x1ff}, {0x0, 0x7f, 0x2, 0x5, 0x7, 0x8}, {0x3, 0x7f800, 0x2, 0x2, 0x3, 0x4be708a9}, {0x8, 0x1, 0x1, 0xe, 0x6, 0x4}, {0x9, 0xf65, 0xe, 0x7, 0xfffffffa, 0x8}, {0x1, 0x9, 0x77, 0xc0000000, 0xb85, 0x40}, {0x1000, 0x0, 0x2, 0x7fffffff, 0x0, 0x8}, {0x0, 0x30, 0x2, 0x0, 0xffff, 0x4}, {0x6, 0x3, 0x4, 0x1, 0x2f, 0x3}, {0x1, 0x9, 0x5, 0x1ff, 0x1bc1, 0x8}, {0x0, 0x3, 0x1, 0x0, 0x10001, 0x3a}, {0x400, 0x8, 0x7, 0x1, 0xc6000000, 0x2}, {0x7fffffff, 0x3, 0x7ff, 0xe3f, 0x6, 0x30000}, {0x7, 0x4, 0x8, 0x2, 0x100, 0x7}, {0x5, 0xfffffff9, 0x6, 0x6f0ffd40, 0x5, 0x90}, {0x2, 0x4, 0x8, 0x4, 0x7, 0xa}, {0x4, 0x8, 0x7f, 0x1, 0x7ff}, {0x5, 0x7, 0x7c3c4e53, 0x5, 0x10, 0x40}, {0x5, 0x10, 0x8, 0x7fffffff, 0xfffffffa, 0x7}, {0xa, 0x7, 0x1, 0x0, 0x9, 0x4}, {0xef, 0x5, 0x52c2, 0x5, 0x0, 0x5}, {0x6, 0x63de, 0x2, 0xd, 0x2, 0x7}, {0x7fffffff, 0x2, 0x2, 0xa, 0x8, 0x3}, {0x3, 0x8, 0x4, 0x8, 0x4, 0x6}, {0xff, 0x0, 0x0, 0xe8ea, 0x1ff, 0x9}, {0x3, 0x3, 0x1, 0xc6, 0xffff8000, 0x2}, {0x7, 0x6, 0x0, 0x9, 0x3ff, 0x8}, {0x2, 0x7, 0x10001, 0x7ff, 0x1}, {0x4474, 0x6, 0x8000, 0x5, 0xea4b00fd, 0x9}, {0x800, 0x7, 0x9, 0x6, 0x7, 0x101}, {0x4, 0x1, 0xffffffff, 0x29084b12, 0x6, 0x7}, {0xffffff5c, 0x4, 0x8, 0x9, 0xfffff9fe, 0x1}], [{0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x9}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0xff580a88f77979c9}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x3}, {}, {0x4, 0xa3e6c58616ef9bd1}, {0x920406804821cd65, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5, 0x1}, {}, {0x4}, {0x4}, {0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0xb2ba8db9d5a0d182}, {}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4}, {0x4}, {0x3}, {0x2}], 0x1}}]}, {0xea, 0x6, "969244dd08219f2d27d66c184e4dc6e4bb2bbd474544b058b7f9a9464cdff1bd50e427a66e5fe2a82239e631d56778736fb6c07eedddd9a9bb82b4e580b101092381447a347a80264a2ce03845a8013a13a3a30181b8ca025602bbcfd7782e4cd9df611711511c9dcacb4f1f1c1493587622332023a4d7b9e2fa4185953d4c0f97960207baee70a52cef0cc94d36c6db9f199f520a45f33117523c33565b7c3f9936879a85f900259e662a360ad3869b1ee9b7995f50655ea1564f923aeb79ac3e06994647ee1dcf21071851a070b6d6b8a50e1bc6561ef6538611efe47cf6e1c24cdd91b7cf"}, {0xc}, {0xc}}}]}]}}]}, 0x3e50}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x23635de98487b93e) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r10 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000100)) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 3.291704483s ago: executing program 9 (id=10576): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x240, &(0x7f0000000680)={0x0, 0x425e5, 0x10100, 0x3, 0x202e2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x31a0}}) (async) io_uring_enter(r1, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) exit(0xffff) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000005100)={0x9, {"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", 0x1000}}, 0x1006) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf091000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000003788aabac19b0ee0c300000000000000"], &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) 3.203551158s ago: executing program 8 (id=10577): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) io_setup(0x9, &(0x7f00000000c0)=0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x20001, 0x2e) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x2000000, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000100)='9', 0x20000101}]) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fanotify_init(0x4, 0x1000) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 3.156402249s ago: executing program 9 (id=10578): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x104, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x8c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x58, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x27, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x104}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async, rerun: 64) r0 = socket(0x10, 0x803, 0x0) (rerun: 64) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async, rerun: 32) inotify_init() (rerun: 32) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r4 = syz_open_dev$video(&(0x7f00000000c0), 0xb94, 0x80000) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000300)={0x1, 0x1, @raw_data=[0xb, 0x7, 0xd0c, 0x2, 0x9, 0x4, 0xffff, 0x38b5, 0x68b, 0x2, 0x2, 0x6, 0x80, 0x87a, 0x3, 0x8]}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000003800)=""/4096, &(0x7f00000006c0)=0x1000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '/dev/loop#\x00'}, {}, {}, {0x20, '#! '}, {0x20, '}[^[#)'}, {0x20, 'cpuset.effective_cpus\x00'}], 0xa, "760ad63bd93c65be332ef04cbf83be4a1a6540ef6c5040b4e4707c73c8087e508a4fc8366aa0e0cf8736231f869ca3d7acabf3e6daa72eb730842390d8110e6a23bd1f2bc89be6ce563b529fb77ef0d56ea6b238f9e935db72ae6866b54bd83fd2e1c7da25a05d0f8a4638808d1245d426c15fb1a5c0e741fa02ce2422f747d89196a8983eae67f25f4fcbf52f21bb6d8cccbc08302b5ea17818"}, 0xde) write$UHID_INPUT(r7, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 64) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000500)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) (rerun: 64) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000b00)={0x15, 0xe2, &(0x7f0000000a00)="5085e2f85fffb521f1ba3e5ad17d84797d872618cd22942d60e203fe85e89138c028b05af283f35f3ac1cbad695427d2dc6e0a3617c0bb09bd7b8e0f7a18e65808b3b6b283c3cbc770a916cac6fd73a55e18110581344523a2464888b5cd61b43c7ebed0fa2b0509af796335a21f3e044526bcb85541105d66b7b18856585bdf53103605fe8dbd095c8f854530df608bc5a7d38c45048ce5a49a38cefc6cbb62be410db36bf3959788a85c2f5cdb3c212f0fbe9f4e3be606d273fa041a945c1ad2d73790bb182d7bddb488aef5a1f9307b6d860489dffd4ee18e42f5252e49b51cba"}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r3, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010001000000000904000000e4d62400"], 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 2.591580405s ago: executing program 9 (id=10579): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x7fff7ffc}]}) lsm_list_modules(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='udf\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x40, 0x5, 0x0, 0xfffff034}, {0x6, 0xfe, 0xfc}]}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b) fcntl$lock(r4, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = syz_open_dev$vcsa(&(0x7f0000000180), 0xfffffffffffffffb, 0x84c0) fcntl$dupfd(r6, 0x406, r5) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280048c, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRES32=0x0, @ANYRES8=r7, @ANYRESDEC=0x0, @ANYBLOB="576733551300000000a4", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2.23448114s ago: executing program 0 (id=10580): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000007e050000004961318e2a6a41a50000000bfeac8edb005ebc308155ee35f2fe607d6fa95d78ca9ea29f3a283a4cf1b6b05ca703ee8dcee650332417feaa0b5ff670e4df3e8bde537bb55f67606d15b9cf44025e1dbba7bc7de4dfce4b62f280f71957b77879cff1c3db5fd1bedd99582e3019efd88220b30f92d735a72dbb538a496c4586a569a8c2948006953bcc76dd38d6ac727ec52c55d7b1e8c1e8e05b299c11ac9c188a5aa6fafb6b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) sched_setscheduler(r0, 0x6, &(0x7f0000000100)=0x6) (async) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020000000080800470000300000000000069078ac141400ac1e00010707070000000000000000005f744ea158fa32830708c1c0633a36a90b48413f9cc81727e893c6a69649980ccdb20d529d6b9fcd39479efb7da2b42438eea3bdef0ba0a5134a238d7c25821b31cbbac1ce9b307016cc1c427ec8a9d167d7240933ae85779165d35dd7420567d677f144e3872ffcc7f48c07a222e9457f3a76cfaa36c4b7772eba688b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x602, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f00000001c0)=@other={0x20000002fffffffc, 0x0}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.753910573s ago: executing program 0 (id=10581): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfff}}}}}}, 0x0) syz_usb_connect(0x2, 0xb6, &(0x7f0000000640)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932c070000464040507250103"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x2, &(0x7f0000000040)=@string={0x2}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x8b, &(0x7f0000000480)=ANY=[@ANYRES16=0x0]}, {0x5b, &(0x7f0000002700)=ANY=[@ANYBLOB="5b03b81cd1ef"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x440a}}, {0x0, 0x0}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80000) read$FUSE(r4, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r5, 0x0, 0x20000000, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x1224, 0x1c, 0x400, 0x70bd28, 0x25dfdbff, {0x15}, [@nested={0x172, 0xef, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @fd=r0}, @typed={0x13, 0xeb, 0x0, 0x0, @str='bridge_slave_0\x00'}, @nested={0x4, 0x41}, @generic="d920cbc680b78d2c1569216df57c93fb29d5378fe4c766abf65b5444bb99b9b8848a347cd84c2d76f0e5ae693382f9d88239318cfe486cf431a8a8618407c48675c954d6d9ffedddc62f1d483567c7ba602343be551fb781a34e3ef3d97759e518df5ea60a6569cbca2ab16fe2772d1382a1222edb771a16165a5f8cc43baa7736b5c10976b6", @generic="db49749716dad71f2356d0f86b1d4851509510e98b58cf8a84cbea7eb405ab23765edbb07890d1d9810dd80d1995d0ad406f18c9b19881b9ef04347ec46326ee6472b0fb577b9ddcbb870bc020e276997b4360984b7c379a835b195861e21e96aec4acded0d5ebd07ef8100eb3569e5171cddfc3b2232535ca9bf20f38b7c1f21dbb4e2556569b140931eae637db545ae4f519640a95b5b30da860a69251c2168e604722846781ba0465d34684f1c42e211b71087c4ece78064c048f", @typed={0x4, 0xe1}, @typed={0x4, 0x15}, @nested={0x4, 0x132}]}, @typed={0x8, 0x13, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xb, 0x0, 0x0, @u32=0x4}, @generic="b2b30d56a7fcc0da2a674d2d119fd09fce6b5a184a0e0af8dd9ac351814590fbe1b6abe94960caea4769dfe500e29fa9f941e887ea92e3505e9dc5480ea3243f4f147f317b91a4f49b15134a", @nested={0x1008, 0x101, 0x0, 0x1, [@generic="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", @nested={0x4, 0xbb}]}, @nested={0xc, 0x113, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast1}]}, @generic, @typed={0x8, 0x13d, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1c, 0x94, 0x0, 0x1, [@nested={0x4, 0xf3}, @generic, @nested={0x4, 0xe1}, @typed={0x4, 0x4e}, @nested={0x4, 0x112}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}]}, 0x1224}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) userfaultfd(0x80801) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) (async) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfff}}}}}}, 0x0) (async) syz_usb_connect(0x2, 0xb6, &(0x7f0000000640)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932c070000464040507250103"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x2, &(0x7f0000000040)=@string={0x2}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x8b, &(0x7f0000000480)=ANY=[@ANYRES16=0x0]}, {0x5b, &(0x7f0000002700)=ANY=[@ANYBLOB="5b03b81cd1ef"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x440a}}, {0x0, 0x0}]}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) pipe2(&(0x7f0000000340), 0x80000) (async) read$FUSE(r4, &(0x7f0000002180)={0x2020}, 0x2020) (async) wait4(r5, 0x0, 0x20000000, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x1224, 0x1c, 0x400, 0x70bd28, 0x25dfdbff, {0x15}, [@nested={0x172, 0xef, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @fd=r0}, @typed={0x13, 0xeb, 0x0, 0x0, @str='bridge_slave_0\x00'}, @nested={0x4, 0x41}, @generic="d920cbc680b78d2c1569216df57c93fb29d5378fe4c766abf65b5444bb99b9b8848a347cd84c2d76f0e5ae693382f9d88239318cfe486cf431a8a8618407c48675c954d6d9ffedddc62f1d483567c7ba602343be551fb781a34e3ef3d97759e518df5ea60a6569cbca2ab16fe2772d1382a1222edb771a16165a5f8cc43baa7736b5c10976b6", @generic="db49749716dad71f2356d0f86b1d4851509510e98b58cf8a84cbea7eb405ab23765edbb07890d1d9810dd80d1995d0ad406f18c9b19881b9ef04347ec46326ee6472b0fb577b9ddcbb870bc020e276997b4360984b7c379a835b195861e21e96aec4acded0d5ebd07ef8100eb3569e5171cddfc3b2232535ca9bf20f38b7c1f21dbb4e2556569b140931eae637db545ae4f519640a95b5b30da860a69251c2168e604722846781ba0465d34684f1c42e211b71087c4ece78064c048f", @typed={0x4, 0xe1}, @typed={0x4, 0x15}, @nested={0x4, 0x132}]}, @typed={0x8, 0x13, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xb, 0x0, 0x0, @u32=0x4}, @generic="b2b30d56a7fcc0da2a674d2d119fd09fce6b5a184a0e0af8dd9ac351814590fbe1b6abe94960caea4769dfe500e29fa9f941e887ea92e3505e9dc5480ea3243f4f147f317b91a4f49b15134a", @nested={0x1008, 0x101, 0x0, 0x1, [@generic="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", @nested={0x4, 0xbb}]}, @nested={0xc, 0x113, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast1}]}, @generic, @typed={0x8, 0x13d, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1c, 0x94, 0x0, 0x1, [@nested={0x4, 0xf3}, @generic, @nested={0x4, 0xe1}, @typed={0x4, 0x4e}, @nested={0x4, 0x112}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}]}, 0x1224}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) 1.387427915s ago: executing program 5 (id=10582): syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)={0x3a, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000100)="693b1e35dd45314439692037fdc7b1987a362a647a0273d1915ba321a26c5f1c2e21c94ec3faa8017bd4994d1b56dcd78007d88ee01ae2bd39542e3da51b4f7dfde7ae4a4c70e15277c8d552cd0c9002e1f7107900cb4af5c5d4ba37f43eb1e8f4958c188461a949c3e1ce0d05e9d311805de479c5ed9b7e385f020a0515ff44a0018b6aea03aef52ff72e13668170367bced13a08a200c54e842bbb7e16cee1b5e74bab94e772cb3c1db67dcd187159b730f0f4b1f169fd2ac7494a954decf3136e514d99c9460ae709a75b218a557cb671c5f87cebd8bcf60f1424fc55dd426aa310fac7f37bb9697e68cd4c828287ac4ec7ff0c64b40f0ef6d86fdf8cb4ff") 1.236689178s ago: executing program 8 (id=10583): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) dup(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001000000000000000000022000000063"], 0x24}}, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x48, 0x0, @fd_index=0x4, 0x15, 0x0, 0x8, 0x1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) 930.031908ms ago: executing program 8 (id=10584): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d000000000002fdbf43eb00"], 0x50) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x8000000000000000]}}) 539.742845ms ago: executing program 5 (id=10585): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xa}, 0x1c) 539.353195ms ago: executing program 8 (id=10586): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}, {&(0x7f0000000080)="e1ae1034538b1839d68433996158f3eee0e1bf717c2a766ddfb8105a37dbb5357efa98ce880c25de4683f43a535984e6f272f307ab4effd572ea60a3fd11b14860f0b0573a4a09b992804a6ed048b188ca069787b7acac2afb61337d2f85f4e416173c9edd2b452d", 0x68}], 0x2) 331.310508ms ago: executing program 5 (id=10587): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x4, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x4, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r2, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@cgroup=r2, 0x2b, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@cgroup=r2, 0x2b, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) (async) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}, {0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b405000000000000791072000000000007000000000000009500000000000000f2c72d36ccfb318fc7be5bd5f5be4fbf64b8a20f1b25fd6845b828825726e2837b737fa7bd20c9dd4da13b2ee4e3876ffe5ac59ede060f7c6667e79ba3718135aad892fc7accfcbf0e9106a3b80cebd6a46cbe0e725c613b147349eb964475facce5a4ad879fabeb0a783c3f8cff8574b513f02c321d1f9f5d5fa7cd76219d34db22f2d5df069c1373cffa4c75f484f0e97ed0b0e11606cc16b824d34a035c8bde600d74fc8a4ed077e76d8aded66f607ecd1e88dae0fd11f8c134bc8473b04617cca22747c770e2da3ae707d96bd11ae60e57c662d09822df500192b55c66921c08a5062f2729"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 266.867432ms ago: executing program 0 (id=10588): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000100)={0x40, 0x6, 0x8a, "5819324ecd7d7fbd70089d55c311441fd85c7e106a203d0f6e40d886806550e470f279431a84f635d39079f8f0cd8d865890fdd91f99e8b6b3fef411448ab7ef0766cf55abd0c7554aa21cbfbe526de5d33545d1d6a602e3262741285281cbee03a298ba4f8ab14a8b737d92a7a6b4a20f60a81b6aa8ce2fd4d8b2a2c2f201e5eee51ebf8116502a09e6"}, 0x0, 0x0, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x8001}, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f00000004c0)={0x0, 0xe, 0x1, '\n'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 9 (id=10589): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x100003}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x7f, 0x20000a2e, 0x0, 0x96, 0x3, 0x2000000, 0x0, 0x3000000}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f0000000000)={0x14, 0x2a, 0x1, 0x70bd25, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004080) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c8e4}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 1251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2265.652652][T11251] RSP: 002b:00007f204d7c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2265.652673][T11251] RAX: ffffffffffffffda RBX: 00007f204cbe5fa0 RCX: 00007f204c98f749 [ 2265.652687][T11251] RDX: 0000000004008094 RSI: 0000200000000580 RDI: 0000000000000003 [ 2265.652699][T11251] RBP: 00007f204d7c3090 R08: 0000000000000000 R09: 0000000000000000 [ 2265.652711][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.652722][T11251] R13: 00007f204cbe6038 R14: 00007f204cbe5fa0 R15: 00007f204cd0fa28 [ 2265.652753][T11251] [ 2267.332623][T11296] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 3, id = 0 [ 2270.408940][ T5911] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2270.464790][T19586] IPVS: starting estimator thread 0... [ 2270.577146][T11357] IPVS: using max 29 ests per chain, 69600 per kthread [ 2270.596419][ T5911] usb 6-1: Using ep0 maxpacket: 32 [ 2270.647037][ T5911] usb 6-1: config 0 has no interfaces? [ 2270.674195][ T5911] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 2270.704749][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.744405][ T5911] usb 6-1: Product: syz [ 2270.763604][ T5911] usb 6-1: Manufacturer: syz [ 2270.783176][ T5911] usb 6-1: SerialNumber: syz [ 2270.859491][ T5911] usb 6-1: config 0 descriptor?? [ 2270.918131][ T30] audit: type=1326 audit(1766351919.440:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.9799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2270.976195][ T30] audit: type=1326 audit(1766351919.460:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.9799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2271.000136][ T30] audit: type=1326 audit(1766351919.470:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.9799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2271.076396][ T30] audit: type=1326 audit(1766351919.470:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.9799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2271.118240][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2271.139270][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2271.195290][ T30] audit: type=1326 audit(1766351919.470:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.9799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2271.261297][T19586] usb 6-1: USB disconnect, device number 22 [ 2271.290254][ T30] audit: type=1326 audit(1766351919.470:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.9799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2271.406141][ T30] audit: type=1326 audit(1766351919.470:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.9799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2271.511238][ T30] audit: type=1326 audit(1766351919.470:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.9799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2271.572161][ T30] audit: type=1326 audit(1766351919.470:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.9799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2272.487913][T11378] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2272.494088][T11378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2272.502149][T11378] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2272.517153][T11378] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2272.530678][T11378] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2272.550822][T11378] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2272.559233][T11378] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2272.568349][T11378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2272.575390][T11378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2272.585998][T11378] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2272.702172][T11399] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9811'. [ 2272.795118][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9812'. [ 2273.076321][ T5913] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 2273.236165][ T5913] usb 9-1: Using ep0 maxpacket: 32 [ 2273.247475][ T5913] usb 9-1: config 0 has an invalid interface number: 72 but max is 0 [ 2273.263961][ T5913] usb 9-1: config 0 has no interface number 0 [ 2273.280015][ T5913] usb 9-1: New USB device found, idVendor=d265, idProduct=baff, bcdDevice=57.f9 [ 2273.301933][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2273.323043][ T5913] usb 9-1: Product: syz [ 2273.332472][ T5913] usb 9-1: Manufacturer: syz [ 2273.336172][T30731] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2273.345055][ T5913] usb 9-1: SerialNumber: syz [ 2273.357936][ T5913] usb 9-1: config 0 descriptor?? [ 2273.374236][ T5913] usb-storage 9-1:0.72: USB Mass Storage device detected [ 2273.496313][T30731] usb 6-1: Using ep0 maxpacket: 8 [ 2273.504136][T30731] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 2273.513329][T30731] usb 6-1: can't read configurations, error -22 [ 2273.580156][T11405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.592304][T11405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.657894][T30731] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2273.729540][T11419] pimreg: entered allmulticast mode [ 2273.816439][T30731] usb 6-1: Using ep0 maxpacket: 8 [ 2273.829695][T30731] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 2273.838403][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 2273.844296][T30731] usb 6-1: can't read configurations, error -22 [ 2273.851703][T30731] usb usb6-port1: attempt power cycle [ 2273.876244][T11421] pimreg: left allmulticast mode [ 2274.206222][T30731] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2274.238346][T30731] usb 6-1: Using ep0 maxpacket: 8 [ 2274.254652][T30731] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 2274.263751][T30731] usb 6-1: can't read configurations, error -22 [ 2274.399417][T30731] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2274.426983][T30731] usb 6-1: Using ep0 maxpacket: 8 [ 2274.435675][T30731] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 2274.444764][T30731] usb 6-1: can't read configurations, error -22 [ 2274.452154][T30731] usb usb6-port1: unable to enumerate USB device [ 2274.556398][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 2274.557336][T26341] Bluetooth: hci4: command 0x0406 tx timeout [ 2274.562504][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 2274.636528][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 2274.966359][ T5913] usb 10-1: new full-speed USB device number 53 using dummy_hcd [ 2275.139258][ T5913] usb 10-1: config 0 has an invalid interface number: 151 but max is 1 [ 2275.149534][ T5913] usb 10-1: config 0 has no interface number 1 [ 2275.156630][ T5913] usb 10-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2275.169187][ T5913] usb 10-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2275.182322][ T5913] usb 10-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 2275.197829][ T5913] usb 10-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2275.213509][ T5913] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 2275.235639][ T5913] usb 10-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2275.256419][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2275.273868][ T5913] usb 10-1: Product: syz [ 2275.286437][ T5913] usb 10-1: Manufacturer: syz [ 2275.298187][ T5913] usb 10-1: SerialNumber: syz [ 2275.312451][ T5913] usb 10-1: config 0 descriptor?? [ 2275.330183][T11426] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 2275.340762][ T5913] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2275.351414][ T5913] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2275.844462][ T5911] usb 9-1: USB disconnect, device number 117 [ 2276.036455][T30731] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2276.081369][T11443] gtp0: entered promiscuous mode [ 2276.090269][T11443] team0: Device gtp0 is of different type [ 2276.168483][T11447] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9824'. [ 2276.236282][ T5911] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 2276.244150][T30731] usb 1-1: Using ep0 maxpacket: 8 [ 2276.266265][T30731] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2276.285964][T30731] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2276.311587][T30731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.324124][T30731] usb 1-1: config 0 descriptor?? [ 2276.351092][T30731] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2276.426448][ T5911] usb 9-1: Using ep0 maxpacket: 8 [ 2276.434620][ T5911] usb 9-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 2276.444142][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.452723][ T5911] usb 9-1: Product: syz [ 2276.457336][ T5911] usb 9-1: Manufacturer: syz [ 2276.462028][ T5911] usb 9-1: SerialNumber: syz [ 2276.471157][ T5911] usb 9-1: config 0 descriptor?? [ 2276.489067][ T5911] usb 9-1: selecting invalid altsetting 3 [ 2276.494821][ T5911] comedi comedi5: could not set alternate setting 3 in high speed [ 2276.503002][ T5911] usbdux 9-1:0.0: driver 'usbdux' failed to auto-configure device. [ 2276.514103][ T5911] usbdux 9-1:0.0: probe with driver usbdux failed with error -22 [ 2276.540584][T30731] gspca_vc032x: reg_r err -32 [ 2276.545379][T30731] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 2276.636356][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 2276.642508][ T5913] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2276.646377][T11422] Bluetooth: hci5: command 0x0406 tx timeout [ 2276.656520][ T8943] Bluetooth: hci4: command 0x0406 tx timeout [ 2276.685208][T25592] usb 9-1: USB disconnect, device number 118 [ 2276.716323][T11422] Bluetooth: hci1: command 0x0c1a tx timeout [ 2276.799302][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2276.810898][ T5913] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2276.820232][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.832208][ T5913] usb 6-1: config 0 descriptor?? [ 2276.841178][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 2277.273316][T25592] usb 1-1: USB disconnect, device number 14 [ 2277.449190][ T5913] pwc: recv_control_msg error -71 req 02 val 2700 [ 2277.463364][ T5913] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2277.474400][ T5913] pwc: recv_control_msg error -71 req 04 val 1000 [ 2277.484021][ T5913] pwc: recv_control_msg error -71 req 04 val 1300 [ 2277.495339][ T5913] pwc: recv_control_msg error -71 req 04 val 1400 [ 2277.502490][ T5913] pwc: recv_control_msg error -71 req 02 val 2000 [ 2277.509377][ T5913] pwc: recv_control_msg error -71 req 02 val 2100 [ 2277.516236][ T5913] pwc: recv_control_msg error -71 req 04 val 1500 [ 2277.523249][ T5913] pwc: recv_control_msg error -71 req 02 val 2500 [ 2277.537776][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 2277.555143][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 2277.573605][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 2277.583231][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 2277.591461][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 2277.601450][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 2277.610055][ T5913] pwc: Registered as video103. [ 2277.622702][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input191 [ 2277.651231][ T5911] usb 10-1: USB disconnect, device number 53 [ 2277.651638][ T5913] usb 6-1: USB disconnect, device number 27 [ 2278.096178][T11487] FAULT_INJECTION: forcing a failure. [ 2278.096178][T11487] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.124249][T11487] CPU: 1 UID: 0 PID: 11487 Comm: syz.5.9835 Tainted: G L syzkaller #0 PREEMPT(full) [ 2278.124279][T11487] Tainted: [L]=SOFTLOCKUP [ 2278.124287][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2278.124297][T11487] Call Trace: [ 2278.124304][T11487] [ 2278.124310][T11487] dump_stack_lvl+0xe8/0x150 [ 2278.124331][T11487] should_fail_ex+0x414/0x560 [ 2278.124349][T11487] should_failslab+0xa8/0x100 [ 2278.124362][T11487] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2278.124378][T11487] ? __alloc_skb+0x198/0x3a0 [ 2278.124388][T11487] ? __alloc_skb+0x1dc/0x3a0 [ 2278.124397][T11487] ? __local_bh_enable_ip+0xd0/0x130 [ 2278.124409][T11487] ? __alloc_skb+0x198/0x3a0 [ 2278.124418][T11487] __alloc_skb+0x1dc/0x3a0 [ 2278.124430][T11487] netlink_sendmsg+0x5c6/0xb30 [ 2278.124447][T11487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2278.124461][T11487] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2278.124474][T11487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2278.124483][T11487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2278.124498][T11487] __sock_sendmsg+0x21c/0x270 [ 2278.124518][T11487] ____sys_sendmsg+0x52d/0x820 [ 2278.124533][T11487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2278.124548][T11487] ? import_iovec+0x74/0xa0 [ 2278.124561][T11487] ___sys_sendmsg+0x21f/0x2a0 [ 2278.124574][T11487] ? __pfx____sys_sendmsg+0x10/0x10 [ 2278.124587][T11487] ? kstrtouint+0x6e/0xe0 [ 2278.124613][T11487] ? __fget_files+0x2a/0x420 [ 2278.124624][T11487] ? __fget_files+0x3a0/0x420 [ 2278.124640][T11487] __sys_sendmmsg+0x227/0x430 [ 2278.124654][T11487] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2278.124670][T11487] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2278.124693][T11487] ? ksys_write+0x22a/0x250 [ 2278.124703][T11487] ? __pfx_ksys_write+0x10/0x10 [ 2278.124716][T11487] __x64_sys_sendmmsg+0xa0/0xc0 [ 2278.124728][T11487] do_syscall_64+0xec/0xf80 [ 2278.124738][T11487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.124748][T11487] ? trace_irq_disable+0x37/0x100 [ 2278.124760][T11487] ? clear_bhb_loop+0x60/0xb0 [ 2278.124775][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.124786][T11487] RIP: 0033:0x7f48ed78f749 [ 2278.124796][T11487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2278.124805][T11487] RSP: 002b:00007f48ee5ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2278.124817][T11487] RAX: ffffffffffffffda RBX: 00007f48ed9e5fa0 RCX: 00007f48ed78f749 [ 2278.124825][T11487] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000006 [ 2278.124831][T11487] RBP: 00007f48ee5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2278.124838][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.124844][T11487] R13: 00007f48ed9e6038 R14: 00007f48ed9e5fa0 R15: 00007f48edb0fa28 [ 2278.124859][T11487] [ 2278.178305][T11488] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9835'. [ 2278.806416][T11422] Bluetooth: hci1: command 0x0c1a tx timeout [ 2279.081885][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9841'. [ 2279.186138][T25592] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 2279.394356][T11517] netlink: 'syz.6.9842': attribute type 39 has an invalid length. [ 2279.460711][T25592] usb 10-1: Using ep0 maxpacket: 16 [ 2279.503331][T25592] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2279.558395][T25592] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.600731][T25592] usb 10-1: Product: syz [ 2279.646246][T25592] usb 10-1: Manufacturer: syz [ 2279.660657][T25592] usb 10-1: SerialNumber: syz [ 2279.694271][T25592] usb 10-1: config 0 descriptor?? [ 2280.074003][T11530] ipt_ECN: cannot use operation on non-tcp rule [ 2280.248675][T25592] dvb_usb_dtv5100 10-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 2280.824561][T11540] gtp0: entered promiscuous mode [ 2280.857914][T11540] team0: Device gtp0 is of different type [ 2281.313644][T11550] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9848'. [ 2281.826174][T25592] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2281.906566][T31942] usb 10-1: USB disconnect, device number 54 [ 2281.986299][T25592] usb 6-1: Using ep0 maxpacket: 32 [ 2281.993323][T25592] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 2282.005119][T25592] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2282.017475][T25592] usb 6-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb [ 2282.026803][T25592] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.035129][T25592] usb 6-1: Product: syz [ 2282.039519][T25592] usb 6-1: Manufacturer: syz [ 2282.044137][T25592] usb 6-1: SerialNumber: syz [ 2282.052136][T25592] usb 6-1: config 0 descriptor?? [ 2282.056279][ T4602] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2282.091251][T25592] safe_serial 6-1:0.0: safe_serial converter detected [ 2282.113083][T25592] safe_serial 6-1:0.0: probe with driver safe_serial failed with error -22 [ 2282.228135][ T4602] usb 1-1: New USB device found, idVendor=047d, idProduct=2041, bcdDevice= 0.00 [ 2282.238020][ T4602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.282388][ T4602] usb 1-1: config 0 descriptor?? [ 2282.305899][T11558] netlink: 'syz.5.9851': attribute type 10 has an invalid length. [ 2282.384503][T11558] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2282.419199][T25592] usb 6-1: USB disconnect, device number 28 [ 2282.763840][T11565] netlink: 'syz.0.9854': attribute type 9 has an invalid length. [ 2283.007937][ T4602] usbhid 1-1:0.0: can't add hid device: -71 [ 2283.026248][T11578] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 2283.043010][ T4602] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2283.098166][ T4602] usb 1-1: USB disconnect, device number 15 [ 2283.238070][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9858'. [ 2283.369163][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.378212][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.404153][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9859'. [ 2283.452479][T11582] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9859'. [ 2283.517395][T11584] FAULT_INJECTION: forcing a failure. [ 2283.517395][T11584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2283.544115][T11584] CPU: 1 UID: 0 PID: 11584 Comm: syz.8.9860 Tainted: G L syzkaller #0 PREEMPT(full) [ 2283.544145][T11584] Tainted: [L]=SOFTLOCKUP [ 2283.544151][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2283.544162][T11584] Call Trace: [ 2283.544178][T11584] [ 2283.544186][T11584] dump_stack_lvl+0xe8/0x150 [ 2283.544213][T11584] should_fail_ex+0x414/0x560 [ 2283.544243][T11584] _copy_from_iter+0x1cd/0x1630 [ 2283.544273][T11584] ? __pfx__copy_from_iter+0x10/0x10 [ 2283.544292][T11584] ? __build_skb_around+0x22d/0x3c0 [ 2283.544313][T11584] ? __alloc_skb+0x198/0x3a0 [ 2283.544331][T11584] ? netlink_sendmsg+0x642/0xb30 [ 2283.544351][T11584] ? skb_put+0x11b/0x210 [ 2283.544373][T11584] netlink_sendmsg+0x6b2/0xb30 [ 2283.544402][T11584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2283.544426][T11584] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2283.544449][T11584] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2283.544466][T11584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2283.544488][T11584] __sock_sendmsg+0x21c/0x270 [ 2283.544515][T11584] ____sys_sendmsg+0x52d/0x820 [ 2283.544540][T11584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2283.544568][T11584] ? import_iovec+0x74/0xa0 [ 2283.544591][T11584] ___sys_sendmsg+0x21f/0x2a0 [ 2283.544611][T11584] ? __pfx____sys_sendmsg+0x10/0x10 [ 2283.544635][T11584] ? kstrtouint+0x6e/0xe0 [ 2283.544680][T11584] ? __fget_files+0x2a/0x420 [ 2283.544700][T11584] ? __fget_files+0x3a0/0x420 [ 2283.544727][T11584] __sys_sendmmsg+0x227/0x430 [ 2283.544753][T11584] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2283.544771][T11584] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2283.544813][T11584] ? ksys_write+0x22a/0x250 [ 2283.544833][T11584] ? __pfx_ksys_write+0x10/0x10 [ 2283.544857][T11584] __x64_sys_sendmmsg+0xa0/0xc0 [ 2283.544879][T11584] do_syscall_64+0xec/0xf80 [ 2283.544897][T11584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2283.544914][T11584] ? trace_irq_disable+0x37/0x100 [ 2283.544935][T11584] ? clear_bhb_loop+0x60/0xb0 [ 2283.544957][T11584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2283.544974][T11584] RIP: 0033:0x7f204c98f749 [ 2283.544990][T11584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2283.545005][T11584] RSP: 002b:00007f204d7c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2283.545024][T11584] RAX: ffffffffffffffda RBX: 00007f204cbe5fa0 RCX: 00007f204c98f749 [ 2283.545039][T11584] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000006 [ 2283.545051][T11584] RBP: 00007f204d7c3090 R08: 0000000000000000 R09: 0000000000000000 [ 2283.545063][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2283.545075][T11584] R13: 00007f204cbe6038 R14: 00007f204cbe5fa0 R15: 00007f204cd0fa28 [ 2283.545104][T11584] [ 2283.879185][T11587] netlink: 104 bytes leftover after parsing attributes in process `syz.8.9860'. [ 2284.047306][T11596] pimreg: entered allmulticast mode [ 2284.186869][T30731] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2284.221704][T11601] pimreg: left allmulticast mode [ 2284.377323][T30731] usb 6-1: Using ep0 maxpacket: 16 [ 2284.390540][T30731] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2284.415510][T30731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2284.445986][T30731] usb 6-1: Product: syz [ 2284.460866][T30731] usb 6-1: Manufacturer: syz [ 2284.474199][T30731] usb 6-1: SerialNumber: syz [ 2284.505425][T30731] usb 6-1: config 0 descriptor?? [ 2284.526032][T30731] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2285.277460][T30731] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 2285.382103][T11620] pimreg: entered allmulticast mode [ 2286.507134][T11625] pimreg: left allmulticast mode [ 2287.493544][T11653] netdevsim netdevsim6: Firmware load for '/../file0' refused, path contains '..' component [ 2287.606444][T19586] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 2287.786524][T19586] usb 9-1: Using ep0 maxpacket: 32 [ 2287.795042][T19586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2287.823270][T19586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2287.835279][T19586] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 2287.837172][T30731] usb 6-1: USB disconnect, device number 29 [ 2287.894939][T19586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2287.911219][T11664] fuse: Unknown parameter 'gv' [ 2287.982397][T19586] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2288.001200][T11666] pimreg: entered allmulticast mode [ 2288.049088][T19586] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2288.069134][T19586] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2288.083269][T19586] usb 9-1: Product: syz [ 2288.087904][T19586] usb 9-1: Manufacturer: syz [ 2288.103387][T19586] usb 9-1: SerialNumber: syz [ 2288.107134][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9882'. [ 2288.142002][T19586] usb 9-1: config 0 descriptor?? [ 2288.185062][T19586] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input193 [ 2288.222473][T11673] pimreg: left allmulticast mode [ 2288.457327][T11675] netlink: 'syz.0.9883': attribute type 10 has an invalid length. [ 2288.551732][T19586] usb 9-1: USB disconnect, device number 119 [ 2289.023427][T11675] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2289.234349][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9887'. [ 2289.544072][ T30] audit: type=1800 audit(1766351938.060:6137): pid=11681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.9886" name="bus" dev="ramfs" ino=255991 res=0 errno=0 [ 2289.616159][T19586] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2289.649441][T11694] loop9: detected capacity change from 0 to 7 [ 2289.664138][T27436] Dev loop9: unable to read RDB block 7 [ 2289.683636][T27436] loop9: unable to read partition table [ 2289.700620][T27436] loop9: partition table beyond EOD, truncated [ 2289.721410][T11694] Dev loop9: unable to read RDB block 7 [ 2289.743344][T11694] loop9: unable to read partition table [ 2289.759023][T11694] loop9: partition table beyond EOD, truncated [ 2289.768476][T19586] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 2289.777081][T11694] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2289.813033][T19586] usb 1-1: config 0 has no interface number 0 [ 2289.842038][T19586] usb 1-1: config 0 interface 122 has no altsetting 0 [ 2289.869884][T19586] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 2289.886207][T19586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2289.909496][T19586] usb 1-1: Product: syz [ 2289.923656][T19586] usb 1-1: Manufacturer: syz [ 2289.943263][T19586] usb 1-1: SerialNumber: syz [ 2289.960297][T19586] usb 1-1: config 0 descriptor?? [ 2290.216177][T25592] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2290.376295][T25592] usb 6-1: Using ep0 maxpacket: 32 [ 2290.395379][T25592] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2290.420425][T25592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.436448][ T5913] usb 1-1: USB disconnect, device number 16 [ 2290.449033][ T5913] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 2290.467627][T25592] usb 6-1: config 0 descriptor?? [ 2290.479400][T25592] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2290.881712][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9891'. [ 2290.913235][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2290.951388][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2290.982868][T25592] gspca_sq930x: ucbus_write failed -71 [ 2290.994668][T25592] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 2291.030161][T25592] usb 6-1: USB disconnect, device number 30 [ 2291.079255][T11725] loop2: detected capacity change from 0 to 7 [ 2291.131457][T11725] Dev loop2: unable to read RDB block 7 [ 2291.153543][T11725] loop2: unable to read partition table [ 2291.176222][T11725] loop2: partition table beyond EOD, truncated [ 2291.213222][T11725] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2291.274430][T11732] loop5: detected capacity change from 0 to 5535 [ 2291.298289][T11732] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 2291.361598][T27436] buffer_io_error: 23 callbacks suppressed [ 2291.361611][T27436] Buffer I/O error on dev loop5, logical block 691, async page read [ 2291.438875][T27436] Buffer I/O error on dev loop5, logical block 691, async page read [ 2291.906615][T19586] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2292.046804][T19586] usb 1-1: device descriptor read/64, error -71 [ 2292.107963][T31942] usb 10-1: new full-speed USB device number 55 using dummy_hcd [ 2292.303687][T31942] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2292.326246][T19586] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2292.355862][T31942] usb 10-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 2292.386019][T31942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.423396][T31942] usb 10-1: config 0 descriptor?? [ 2292.455362][T11742] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2292.486459][T19586] usb 1-1: device descriptor read/64, error -71 [ 2292.661597][T19586] usb usb1-port1: attempt power cycle [ 2292.893046][T11742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2292.905565][T11742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2292.918599][T31942] usbhid 10-1:0.0: can't add hid device: -71 [ 2292.935720][T31942] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2292.955313][T31942] usb 10-1: USB disconnect, device number 55 [ 2293.026757][T19586] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2293.077091][T19586] usb 1-1: device descriptor read/8, error -71 [ 2293.326244][T19586] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2293.360247][T19586] usb 1-1: device descriptor read/8, error -71 [ 2293.477433][T19586] usb usb1-port1: unable to enumerate USB device [ 2293.499394][T11781] pimreg: entered allmulticast mode [ 2293.705598][T11783] pimreg: left allmulticast mode [ 2295.156331][T31942] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 2295.343261][T31942] usb 9-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 2295.380474][T31942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2295.413968][T31942] usb 9-1: config 0 descriptor?? [ 2295.578074][T11814] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9924'. [ 2295.664014][T11816] netlink: 84 bytes leftover after parsing attributes in process `syz.9.9925'. [ 2295.682139][T11816] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9925'. [ 2295.754853][T11822] FAULT_INJECTION: forcing a failure. [ 2295.754853][T11822] name failslab, interval 1, probability 0, space 0, times 0 [ 2295.793659][T11822] CPU: 0 UID: 0 PID: 11822 Comm: syz.0.9927 Tainted: G L syzkaller #0 PREEMPT(full) [ 2295.793690][T11822] Tainted: [L]=SOFTLOCKUP [ 2295.793697][T11822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2295.793709][T11822] Call Trace: [ 2295.793739][T11822] [ 2295.793748][T11822] dump_stack_lvl+0xe8/0x150 [ 2295.793779][T11822] should_fail_ex+0x414/0x560 [ 2295.793810][T11822] should_failslab+0xa8/0x100 [ 2295.793834][T11822] kmem_cache_alloc_noprof+0x88/0x710 [ 2295.793864][T11822] ? __netlink_lookup+0xbd/0x8a0 [ 2295.793888][T11822] ? skb_clone+0x212/0x3a0 [ 2295.793913][T11822] skb_clone+0x212/0x3a0 [ 2295.793937][T11822] __netlink_deliver_tap+0x404/0x850 [ 2295.793969][T11822] ? netlink_deliver_tap+0x2e/0x1b0 [ 2295.793992][T11822] netlink_deliver_tap+0x19c/0x1b0 [ 2295.794015][T11822] netlink_unicast+0x7fa/0x9e0 [ 2295.794043][T11822] ? __pfx_netlink_unicast+0x10/0x10 [ 2295.794061][T11822] ? __alloc_skb+0x198/0x3a0 [ 2295.794080][T11822] ? netlink_sendmsg+0x642/0xb30 [ 2295.794099][T11822] ? skb_put+0x11b/0x210 [ 2295.794121][T11822] netlink_sendmsg+0x805/0xb30 [ 2295.794151][T11822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2295.794176][T11822] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2295.794201][T11822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2295.794218][T11822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2295.794240][T11822] __sock_sendmsg+0x21c/0x270 [ 2295.794267][T11822] ____sys_sendmsg+0x52d/0x820 [ 2295.794293][T11822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2295.794322][T11822] ? import_iovec+0x74/0xa0 [ 2295.794346][T11822] ___sys_sendmsg+0x21f/0x2a0 [ 2295.794370][T11822] ? __pfx____sys_sendmsg+0x10/0x10 [ 2295.794388][T11822] ? __lock_acquire+0x6b6/0x2cf0 [ 2295.794410][T11822] ? kstrtouint+0x6e/0xe0 [ 2295.794471][T11822] __sys_sendmmsg+0x227/0x430 [ 2295.794498][T11822] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2295.794516][T11822] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2295.794559][T11822] ? ksys_write+0x22a/0x250 [ 2295.794579][T11822] ? __pfx_ksys_write+0x10/0x10 [ 2295.794602][T11822] __x64_sys_sendmmsg+0xa0/0xc0 [ 2295.794625][T11822] do_syscall_64+0xec/0xf80 [ 2295.794643][T11822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2295.794660][T11822] ? trace_irq_disable+0x37/0x100 [ 2295.794681][T11822] ? clear_bhb_loop+0x60/0xb0 [ 2295.794701][T11822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2295.794719][T11822] RIP: 0033:0x7f6d8ff8f749 [ 2295.794737][T11822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2295.794752][T11822] RSP: 002b:00007f6d90e19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2295.794773][T11822] RAX: ffffffffffffffda RBX: 00007f6d901e5fa0 RCX: 00007f6d8ff8f749 [ 2295.794786][T11822] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000006 [ 2295.794798][T11822] RBP: 00007f6d90e19090 R08: 0000000000000000 R09: 0000000000000000 [ 2295.794810][T11822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2295.794821][T11822] R13: 00007f6d901e6038 R14: 00007f6d901e5fa0 R15: 00007f6d9030fa28 [ 2295.794855][T11822] [ 2296.439219][T31942] gembird 0003:11FF:3331.0093: unknown main item tag 0x0 [ 2296.445549][T11825] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9927'. [ 2296.506412][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9927'. [ 2296.518621][T31942] gembird 0003:11FF:3331.0093: item fetching failed at offset 3/5 [ 2296.539821][T31942] gembird 0003:11FF:3331.0093: probe with driver gembird failed with error -22 [ 2296.640638][ T4602] usb 9-1: USB disconnect, device number 120 [ 2297.013267][T11840] input: syz1 as /devices/virtual/input/input194 [ 2297.230183][T11840] binder: 11826:11840 ioctl c0306201 0 returned -14 [ 2297.596360][T11840] syz.9.9929 (11840): drop_caches: 2 [ 2297.931671][T11818] netlink: 112 bytes leftover after parsing attributes in process `syz.5.9926'. [ 2298.106167][ T4602] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2298.291534][ T4602] usb 1-1: device descriptor read/64, error -71 [ 2298.576136][ T4602] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2298.766358][ T4602] usb 1-1: device descriptor read/64, error -71 [ 2298.899145][ T4602] usb usb1-port1: attempt power cycle [ 2299.040616][T11859] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2299.047264][T11859] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2299.072098][T11863] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9937'. [ 2299.096282][T11859] vhci_hcd vhci_hcd.0: Device attached [ 2299.104784][T11860] vhci_hcd: connection closed [ 2299.112622][ T173] vhci_hcd vhci_hcd.6: stop threads [ 2299.139311][ T173] vhci_hcd vhci_hcd.6: release socket [ 2299.144739][ T173] vhci_hcd vhci_hcd.6: disconnect device [ 2299.266213][ T4602] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2299.306875][ T4602] usb 1-1: device descriptor read/8, error -71 [ 2299.349253][T11873] FAULT_INJECTION: forcing a failure. [ 2299.349253][T11873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2299.376001][T11873] CPU: 0 UID: 0 PID: 11873 Comm: syz.9.9940 Tainted: G L syzkaller #0 PREEMPT(full) [ 2299.376035][T11873] Tainted: [L]=SOFTLOCKUP [ 2299.376042][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2299.376057][T11873] Call Trace: [ 2299.376065][T11873] [ 2299.376076][T11873] dump_stack_lvl+0xe8/0x150 [ 2299.376104][T11873] should_fail_ex+0x414/0x560 [ 2299.376133][T11873] _copy_from_iter+0x1cd/0x1630 [ 2299.376160][T11873] ? __pfx__copy_from_iter+0x10/0x10 [ 2299.376177][T11873] ? __build_skb_around+0x22d/0x3c0 [ 2299.376196][T11873] ? __alloc_skb+0x198/0x3a0 [ 2299.376212][T11873] ? netlink_sendmsg+0x642/0xb30 [ 2299.376231][T11873] ? skb_put+0x11b/0x210 [ 2299.376253][T11873] netlink_sendmsg+0x6b2/0xb30 [ 2299.376284][T11873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2299.376308][T11873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2299.376332][T11873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2299.376350][T11873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2299.376372][T11873] __sock_sendmsg+0x21c/0x270 [ 2299.376407][T11873] ____sys_sendmsg+0x52d/0x820 [ 2299.376447][T11873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2299.376474][T11873] ? import_iovec+0x74/0xa0 [ 2299.376497][T11873] ___sys_sendmsg+0x21f/0x2a0 [ 2299.376528][T11873] ? __pfx____sys_sendmsg+0x10/0x10 [ 2299.376543][T11873] ? __lock_acquire+0x6b6/0x2cf0 [ 2299.376566][T11873] ? kstrtouint+0x6e/0xe0 [ 2299.376632][T11873] __sys_sendmmsg+0x227/0x430 [ 2299.376658][T11873] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2299.376677][T11873] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2299.376720][T11873] ? ksys_write+0x22a/0x250 [ 2299.376740][T11873] ? __pfx_ksys_write+0x10/0x10 [ 2299.376762][T11873] __x64_sys_sendmmsg+0xa0/0xc0 [ 2299.376784][T11873] do_syscall_64+0xec/0xf80 [ 2299.376804][T11873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2299.376817][T11873] ? trace_irq_disable+0x37/0x100 [ 2299.376839][T11873] ? clear_bhb_loop+0x60/0xb0 [ 2299.376862][T11873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2299.376880][T11873] RIP: 0033:0x7fd2b498f749 [ 2299.376897][T11873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2299.376912][T11873] RSP: 002b:00007fd2b5774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2299.376932][T11873] RAX: ffffffffffffffda RBX: 00007fd2b4be5fa0 RCX: 00007fd2b498f749 [ 2299.376945][T11873] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000006 [ 2299.376958][T11873] RBP: 00007fd2b5774090 R08: 0000000000000000 R09: 0000000000000000 [ 2299.376970][T11873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2299.376982][T11873] R13: 00007fd2b4be6038 R14: 00007fd2b4be5fa0 R15: 00007fd2b4d0fa28 [ 2299.377010][T11873] [ 2300.014749][T11873] netlink: 104 bytes leftover after parsing attributes in process `syz.9.9940'. [ 2300.087638][T30731] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 2300.256278][ T4602] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2300.279848][T30731] usb 9-1: Using ep0 maxpacket: 16 [ 2300.298812][ T4602] usb 1-1: device descriptor read/8, error -71 [ 2300.317963][T30731] usb 9-1: config 0 has an invalid interface number: 104 but max is 1 [ 2300.353677][T30731] usb 9-1: config 0 has an invalid interface number: 104 but max is 1 [ 2300.396230][T30731] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2300.405150][T30731] usb 9-1: config 0 has no interface number 0 [ 2300.413620][ T4602] usb usb1-port1: unable to enumerate USB device [ 2300.424685][T30731] usb 9-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 2300.436948][T30731] usb 9-1: config 0 interface 104 has no altsetting 1 [ 2300.449243][T30731] usb 9-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 2300.461070][T30731] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2300.470981][T30731] usb 9-1: Product: syz [ 2300.475868][T30731] usb 9-1: Manufacturer: syz [ 2300.482212][T30731] usb 9-1: SerialNumber: syz [ 2300.496729][T30731] usb 9-1: config 0 descriptor?? [ 2300.511182][T30731] asix 9-1:0.104: probe with driver asix failed with error -22 [ 2300.529167][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9944'. [ 2300.546882][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9944'. [ 2300.576779][ T4602] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2300.732959][T19586] usb 9-1: USB disconnect, device number 121 [ 2300.748501][ T4602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2300.800337][ T4602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2300.828274][ T4602] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2300.849318][ T4602] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2300.871170][ T4602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2300.885091][ T4602] usb 6-1: config 0 descriptor?? [ 2301.116325][T30731] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 2301.156403][T31942] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2301.288242][T30731] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2301.316182][T31942] usb 10-1: Using ep0 maxpacket: 8 [ 2301.328402][T30731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.358106][T31942] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2301.374498][T30731] usb 1-1: Product: syz [ 2301.384334][T30731] usb 1-1: Manufacturer: syz [ 2301.400025][T31942] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2301.410308][T30731] usb 1-1: SerialNumber: syz [ 2301.433179][T30731] usb 1-1: config 0 descriptor?? [ 2301.448755][T31942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.504980][T31942] usb 10-1: config 0 descriptor?? [ 2301.645673][ T4602] usbhid 6-1:0.0: can't add hid device: -71 [ 2301.666736][ T4602] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2301.693795][T30731] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2301.711072][ T4602] usb 6-1: USB disconnect, device number 31 [ 2301.733082][T31942] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2301.815822][T11904] fuse: Unknown parameter ' ' [ 2302.263540][T11906] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9949'. [ 2302.302823][T30731] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2302.361207][T30731] usb 1-1: USB disconnect, device number 25 [ 2302.488368][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9951'. [ 2302.513160][T11910] FAULT_INJECTION: forcing a failure. [ 2302.513160][T11910] name failslab, interval 1, probability 0, space 0, times 0 [ 2302.526966][T11910] CPU: 0 UID: 0 PID: 11910 Comm: syz.6.9951 Tainted: G L syzkaller #0 PREEMPT(full) [ 2302.526990][T11910] Tainted: [L]=SOFTLOCKUP [ 2302.526997][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2302.527007][T11910] Call Trace: [ 2302.527016][T11910] [ 2302.527023][T11910] dump_stack_lvl+0xe8/0x150 [ 2302.527052][T11910] should_fail_ex+0x414/0x560 [ 2302.527085][T11910] should_failslab+0xa8/0x100 [ 2302.527105][T11910] __kmalloc_cache_noprof+0x84/0x700 [ 2302.527124][T11910] ? nsim_fib_event_nb+0x187/0x1080 [ 2302.527154][T11910] nsim_fib_event_nb+0x187/0x1080 [ 2302.527177][T11910] ? atomic_notifier_call_chain+0x26/0x180 [ 2302.527198][T11910] ? lock_acquire+0x107/0x340 [ 2302.527222][T11910] notifier_call_chain+0x19d/0x3a0 [ 2302.527246][T11910] ? atomic_notifier_call_chain+0x26/0x180 [ 2302.527278][T11910] atomic_notifier_call_chain+0xda/0x180 [ 2302.527301][T11910] call_fib_notifiers+0x31/0x60 [ 2302.527324][T11910] fib6_add_rt2node+0x1a6b/0x3470 [ 2302.527343][T11910] ? kasan_save_track+0x3e/0x80 [ 2302.527385][T11910] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 2302.527425][T11910] fib6_add+0x8da/0x18a0 [ 2302.527454][T11910] ? do_raw_spin_lock+0x121/0x290 [ 2302.527477][T11910] ? __pfx_fib6_add+0x10/0x10 [ 2302.527503][T11910] ? ip6_route_add+0xc9/0x1b0 [ 2302.527533][T11910] ip6_route_add+0xde/0x1b0 [ 2302.527556][T11910] inet6_rtm_newroute+0x1cf/0x18c0 [ 2302.527571][T11910] ? unwind_next_frame+0xa5/0x23d0 [ 2302.527597][T11910] ? unwind_next_frame+0xa5/0x23d0 [ 2302.527619][T11910] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 2302.527635][T11910] ? is_bpf_text_address+0x26/0x2b0 [ 2302.527672][T11910] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.527692][T11910] ? is_bpf_text_address+0x292/0x2b0 [ 2302.527715][T11910] ? is_bpf_text_address+0x26/0x2b0 [ 2302.527741][T11910] ? kernel_text_address+0xa5/0xe0 [ 2302.527793][T11910] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 2302.527811][T11910] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2302.527834][T11910] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2302.527852][T11910] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2302.527870][T11910] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.527901][T11910] netlink_rcv_skb+0x208/0x470 [ 2302.527924][T11910] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2302.527945][T11910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2302.527976][T11910] ? netlink_deliver_tap+0x2e/0x1b0 [ 2302.528005][T11910] netlink_unicast+0x82f/0x9e0 [ 2302.528033][T11910] ? __pfx_netlink_unicast+0x10/0x10 [ 2302.528051][T11910] ? __alloc_skb+0x198/0x3a0 [ 2302.528070][T11910] ? netlink_sendmsg+0x642/0xb30 [ 2302.528088][T11910] ? skb_put+0x11b/0x210 [ 2302.528110][T11910] netlink_sendmsg+0x805/0xb30 [ 2302.528141][T11910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2302.528165][T11910] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2302.528190][T11910] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2302.528208][T11910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2302.528230][T11910] __sock_sendmsg+0x21c/0x270 [ 2302.528258][T11910] ____sys_sendmsg+0x52d/0x820 [ 2302.528284][T11910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2302.528313][T11910] ? import_iovec+0x74/0xa0 [ 2302.528338][T11910] ___sys_sendmsg+0x21f/0x2a0 [ 2302.528360][T11910] ? __pfx____sys_sendmsg+0x10/0x10 [ 2302.528378][T11910] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.528400][T11910] ? kstrtouint+0x6e/0xe0 [ 2302.528463][T11910] __sys_sendmmsg+0x227/0x430 [ 2302.528489][T11910] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2302.528507][T11910] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2302.528556][T11910] ? ksys_write+0x22a/0x250 [ 2302.528577][T11910] ? __pfx_ksys_write+0x10/0x10 [ 2302.528600][T11910] __x64_sys_sendmmsg+0xa0/0xc0 [ 2302.528623][T11910] do_syscall_64+0xec/0xf80 [ 2302.528642][T11910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2302.528660][T11910] ? clear_bhb_loop+0x60/0xb0 [ 2302.528682][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2302.528700][T11910] RIP: 0033:0x7fbbc578f749 [ 2302.528717][T11910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2302.528732][T11910] RSP: 002b:00007fbbc65bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2302.528752][T11910] RAX: ffffffffffffffda RBX: 00007fbbc59e5fa0 RCX: 00007fbbc578f749 [ 2302.528765][T11910] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000006 [ 2302.528778][T11910] RBP: 00007fbbc65bb090 R08: 0000000000000000 R09: 0000000000000000 [ 2302.528789][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2302.528800][T11910] R13: 00007fbbc59e6038 R14: 00007fbbc59e5fa0 R15: 00007fbbc5b0fa28 [ 2302.528829][T11910] [ 2302.971433][T11912] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9951'. [ 2303.250796][T19586] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 2303.396190][T19586] usb 9-1: device descriptor read/64, error -71 [ 2303.445502][T31524] usb 10-1: USB disconnect, device number 56 [ 2303.557322][T11921] [U]  [ 2303.575128][T11921] [U] K{‘ [ 2303.586782][T11921] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 2303.611495][T11921] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 2303.666993][T19586] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 2303.686395][T11921] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 2303.723740][T11921] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 2303.836979][T19586] usb 9-1: device descriptor read/64, error -71 [ 2303.859205][T11928] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 2303.901155][T11921] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 2303.962209][T19586] usb usb9-port1: attempt power cycle [ 2304.044695][T11921] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 2304.090388][T11921] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 2304.126753][T11921] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/< [ 2351.289840][T12659] dump_stack_lvl+0xe8/0x150 [ 2351.289864][T12659] should_fail_ex+0x414/0x560 [ 2351.289895][T12659] _copy_from_user+0x2d/0xb0 [ 2351.289916][T12659] ___sys_sendmsg+0x158/0x2a0 [ 2351.289939][T12659] ? __pfx____sys_sendmsg+0x10/0x10 [ 2351.289954][T12659] ? kstrtouint+0x6e/0xe0 [ 2351.289979][T12659] ? __fget_files+0x2a/0x420 [ 2351.289991][T12659] ? __fget_files+0x3a0/0x420 [ 2351.290014][T12659] __sys_sendmmsg+0x227/0x430 [ 2351.290041][T12659] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2351.290059][T12659] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2351.290094][T12659] ? ksys_write+0x22a/0x250 [ 2351.290105][T12659] ? __pfx_ksys_write+0x10/0x10 [ 2351.290118][T12659] __x64_sys_sendmmsg+0xa0/0xc0 [ 2351.290130][T12659] do_syscall_64+0xec/0xf80 [ 2351.290140][T12659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2351.290150][T12659] ? trace_irq_disable+0x37/0x100 [ 2351.290174][T12659] ? clear_bhb_loop+0x60/0xb0 [ 2351.290196][T12659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2351.290213][T12659] RIP: 0033:0x7fd2b498f749 [ 2351.290233][T12659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2351.290243][T12659] RSP: 002b:00007fd2b5774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2351.290255][T12659] RAX: ffffffffffffffda RBX: 00007fd2b4be5fa0 RCX: 00007fd2b498f749 [ 2351.290262][T12659] RDX: 0000000000000001 RSI: 0000200000006540 RDI: 0000000000000003 [ 2351.290268][T12659] RBP: 00007fd2b5774090 R08: 0000000000000000 R09: 0000000000000000 [ 2351.290274][T12659] R10: 0000000004044884 R11: 0000000000000246 R12: 0000000000000001 [ 2351.290281][T12659] R13: 00007fd2b4be6038 R14: 00007fd2b4be5fa0 R15: 00007fd2b4d0fa28 [ 2351.290297][T12659] [ 2351.413472][T11876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2351.517776][T12646] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2351.641569][T12648] IPVS: length: 528 != 206581052192 [ 2351.695832][T11876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2351.740405][T17834] usb 9-1: USB disconnect, device number 11 [ 2351.753015][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2351.763612][T11876] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2351.771092][T11876] usb 1-1: media controller created [ 2351.777198][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2351.815557][T11876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2351.996294][ T5913] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 2352.014372][T12669] netlink: 'syz.6.10157': attribute type 2 has an invalid length. [ 2352.046271][T25592] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2352.136285][ T5913] usb 10-1: device descriptor read/64, error -71 [ 2352.237537][T25592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2352.244250][T25592] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 2352.266291][T25592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2352.287016][T25592] usb 6-1: config 0 descriptor?? [ 2352.358856][T12677] input: syz1 as /devices/virtual/input/input199 [ 2352.378714][T12677] input: failed to attach handler leds to device input199, error: -6 [ 2352.386694][ T5913] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 2352.456365][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10160'. [ 2352.536361][ T5913] usb 10-1: device descriptor read/64, error -71 [ 2352.657490][ T5913] usb usb10-port1: attempt power cycle [ 2352.917346][T25592] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 2352.997054][ T5913] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 2353.037162][ T5913] usb 10-1: device descriptor read/8, error -71 [ 2353.271483][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 2353.271501][ T30] audit: type=1326 audit(1766352001.790:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.8.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2353.307565][ T5913] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 2353.369717][ T5913] usb 10-1: device descriptor read/8, error -71 [ 2353.387985][ T30] audit: type=1326 audit(1766352001.790:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.8.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2353.487743][ T5913] usb usb10-port1: unable to enumerate USB device [ 2353.561727][T11876] az6027: usb out operation failed. (-71) [ 2353.575678][T11876] stb0899_attach: Driver disabled by Kconfig [ 2353.594104][T11876] az6027: no front-end attached [ 2353.594104][T11876] [ 2353.616865][T11876] az6027: usb out operation failed. (-71) [ 2353.632939][T11876] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2353.667075][T11876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input200 [ 2353.715705][T11876] dvb-usb: schedule remote query interval to 400 msecs. [ 2353.737273][T11876] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2353.830839][T11876] usb 1-1: USB disconnect, device number 47 [ 2353.973771][T11876] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2354.336874][T12707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10168'. [ 2354.606457][T11876] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2354.701899][ T4602] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2354.806393][T11876] usb 9-1: Using ep0 maxpacket: 16 [ 2354.824097][T11876] usb 9-1: config 166 has an invalid interface number: 177 but max is 1 [ 2354.834383][T11876] usb 9-1: config 166 has an invalid interface number: 34 but max is 1 [ 2354.843487][T11876] usb 9-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 2354.855651][T11876] usb 9-1: config 166 has no interface number 0 [ 2354.881991][T11876] usb 9-1: config 166 has no interface number 1 [ 2354.882224][ T4602] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2354.888934][T25711] usb 6-1: USB disconnect, device number 40 [ 2354.906297][T11876] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2354.935789][T11876] usb 9-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2354.968816][ T4602] usb 1-1: config 26 has an invalid interface number: 80 but max is 0 [ 2354.987200][T11876] usb 9-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2354.998537][T12720] netlink: 132 bytes leftover after parsing attributes in process `syz.9.10172'. [ 2355.014733][ T4602] usb 1-1: config 26 has an invalid descriptor of length 10, skipping remainder of the config [ 2355.049858][T11876] usb 9-1: config 166 interface 34 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2355.061646][ T4602] usb 1-1: config 26 has no interface number 0 [ 2355.069052][ T4602] usb 1-1: config 26 interface 80 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 2355.086211][T11876] usb 9-1: config 166 interface 34 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 2355.101644][ T4602] usb 1-1: config 26 interface 80 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 2355.120780][T11876] usb 9-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 2355.146366][ T4602] usb 1-1: config 26 interface 80 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2355.161844][T11876] usb 9-1: config 166 interface 177 has no altsetting 0 [ 2355.196350][ T4602] usb 1-1: config 26 interface 80 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 2355.216127][T11876] usb 9-1: config 166 interface 34 has no altsetting 0 [ 2355.236119][ T4602] usb 1-1: config 26 interface 80 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 2355.257639][T11876] usb 9-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 2355.288567][T11876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.308263][ T4602] usb 1-1: config 26 interface 80 has no altsetting 0 [ 2355.320719][T11876] usb 9-1: Product: syz [ 2355.324917][T11876] usb 9-1: Manufacturer: syz [ 2355.354286][ T4602] usb 1-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=9e.71 [ 2355.376353][T11876] usb 9-1: SerialNumber: syz [ 2355.412124][ T4602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.456182][ T4602] usb 1-1: Product: syz [ 2355.471643][ T4602] usb 1-1: Manufacturer: syz [ 2355.491432][ T4602] usb 1-1: SerialNumber: syz [ 2355.652113][T11876] ums-realtek 9-1:166.177: USB Mass Storage device detected [ 2355.737724][T11876] ums-realtek 9-1:166.34: USB Mass Storage device detected [ 2355.783433][ T4602] xbox_remote_probe: Unexpected desc.bNumEndpoints: 7 [ 2355.792695][ T4602] usbhid 1-1:26.80: couldn't find an input interrupt endpoint [ 2355.812783][ T4602] usb 1-1: USB disconnect, device number 48 [ 2355.831353][T11876] uvcvideo 9-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 2355.860884][T11876] uvcvideo 9-1:166.34: No valid video chain found. [ 2355.881444][T11876] usb 9-1: USB disconnect, device number 12 [ 2355.926539][T30731] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 2356.076457][T30731] usb 10-1: Using ep0 maxpacket: 8 [ 2356.085230][T30731] usb 10-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 2356.094656][T30731] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.105062][T30731] usb 10-1: config 0 descriptor?? [ 2356.112997][T30731] usblcd 10-1:0.0: USBLCD model not supported. [ 2356.192010][T12749] binder: 12748:12749 ioctl c0046209 0 returned -22 [ 2356.201562][T12749] syz.8.10181 (12749): /proc/12748/oom_adj is deprecated, please use /proc/12748/oom_score_adj instead. [ 2356.288575][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10183'. [ 2356.581256][T12757] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 2356.600523][T12757] bond2 (unregistering): Released all slaves [ 2356.740875][T12771] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 2356.747509][T12771] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2356.808108][T12771] vhci_hcd vhci_hcd.0: Device attached [ 2356.857819][T12779] FAULT_INJECTION: forcing a failure. [ 2356.857819][T12779] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.894257][T12779] CPU: 1 UID: 0 PID: 12779 Comm: syz.8.10188 Tainted: G L syzkaller #0 PREEMPT(full) [ 2356.894287][T12779] Tainted: [L]=SOFTLOCKUP [ 2356.894294][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2356.894305][T12779] Call Trace: [ 2356.894314][T12779] [ 2356.894323][T12779] dump_stack_lvl+0xe8/0x150 [ 2356.894351][T12779] should_fail_ex+0x414/0x560 [ 2356.894381][T12779] should_failslab+0xa8/0x100 [ 2356.894404][T12779] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2356.894429][T12779] ? __pfx_tcp_current_mss+0x10/0x10 [ 2356.894448][T12779] ? __alloc_skb+0x1dc/0x3a0 [ 2356.894472][T12779] __alloc_skb+0x1dc/0x3a0 [ 2356.894494][T12779] tcp_stream_alloc_skb+0x3d/0x350 [ 2356.894519][T12779] tcp_sendmsg_locked+0x1ab8/0x5520 [ 2356.894551][T12779] ? __pfx_process_measurement+0x10/0x10 [ 2356.894583][T12779] ? __lock_acquire+0x6b6/0x2cf0 [ 2356.894609][T12779] ? __lock_acquire+0x6b6/0x2cf0 [ 2356.894645][T12779] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2356.894679][T12779] ? __local_bh_enable_ip+0xd0/0x130 [ 2356.894702][T12779] tcp_sendmsg+0x2f/0x50 [ 2356.894723][T12779] __sock_sendmsg+0x19c/0x270 [ 2356.894750][T12779] ____sys_sendmsg+0x52d/0x820 [ 2356.894776][T12779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2356.894806][T12779] ? import_iovec+0x74/0xa0 [ 2356.894830][T12779] ___sys_sendmsg+0x21f/0x2a0 [ 2356.894853][T12779] ? __pfx____sys_sendmsg+0x10/0x10 [ 2356.894879][T12779] ? kstrtouint+0x6e/0xe0 [ 2356.894929][T12779] ? __fget_files+0x2a/0x420 [ 2356.894950][T12779] ? __fget_files+0x3a0/0x420 [ 2356.894980][T12779] __sys_sendmmsg+0x227/0x430 [ 2356.895007][T12779] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2356.895025][T12779] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2356.895071][T12779] ? ksys_write+0x22a/0x250 [ 2356.895097][T12779] ? __pfx_ksys_write+0x10/0x10 [ 2356.895122][T12779] __x64_sys_sendmmsg+0xa0/0xc0 [ 2356.895144][T12779] do_syscall_64+0xec/0xf80 [ 2356.895163][T12779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2356.895184][T12779] ? trace_irq_disable+0x37/0x100 [ 2356.895206][T12779] ? clear_bhb_loop+0x60/0xb0 [ 2356.895228][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2356.895245][T12779] RIP: 0033:0x7f204c98f749 [ 2356.895262][T12779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2356.895277][T12779] RSP: 002b:00007f204d7c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2356.895297][T12779] RAX: ffffffffffffffda RBX: 00007f204cbe5fa0 RCX: 00007f204c98f749 [ 2356.895312][T12779] RDX: 0000000000000001 RSI: 0000200000006540 RDI: 0000000000000003 [ 2356.895324][T12779] RBP: 00007f204d7c3090 R08: 0000000000000000 R09: 0000000000000000 [ 2356.895335][T12779] R10: 0000000004044884 R11: 0000000000000246 R12: 0000000000000001 [ 2356.895347][T12779] R13: 00007f204cbe6038 R14: 00007f204cbe5fa0 R15: 00007f204cd0fa28 [ 2356.895377][T12779] [ 2357.337586][T30731] usb 52-1: SetAddress Request (6) to port 0 [ 2357.344498][T30731] usb 52-1: new SuperSpeed USB device number 6 using vhci_hcd [ 2357.795874][T12795] fuse: Bad value for 'fd' [ 2357.968929][T12799] netlink: 'syz.0.10194': attribute type 30 has an invalid length. [ 2357.998829][T12799] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2358.536212][T25711] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2358.796286][T25711] usb 1-1: device descriptor read/64, error -71 [ 2358.906782][T12817] loop3: detected capacity change from 0 to 7 [ 2358.932878][T27436] Dev loop3: unable to read RDB block 7 [ 2358.957322][T27436] loop3: unable to read partition table [ 2358.981547][T27436] loop3: partition table beyond EOD, truncated [ 2359.002879][T12817] Dev loop3: unable to read RDB block 7 [ 2359.096120][T12817] loop3: unable to read partition table [ 2359.126705][T12817] loop3: partition table beyond EOD, truncated [ 2359.128782][T25711] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2359.141079][T12817] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2359.306356][T25711] usb 1-1: device descriptor read/64, error -71 [ 2359.419186][T25711] usb usb1-port1: attempt power cycle [ 2359.426499][T12772] vhci_hcd: connection reset by peer [ 2359.433043][ T5913] usb 10-1: USB disconnect, device number 73 [ 2359.434314][T22494] vhci_hcd vhci_hcd.9: stop threads [ 2359.466005][T22494] vhci_hcd vhci_hcd.9: release socket [ 2359.483401][T22494] vhci_hcd vhci_hcd.9: disconnect device [ 2359.526871][ T4602] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2359.706245][ T4602] usb 9-1: Using ep0 maxpacket: 32 [ 2359.718567][ T4602] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2359.737995][ T4602] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2359.774999][ T4602] usb 9-1: config 0 descriptor?? [ 2359.794700][ T4602] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2359.803108][T12825] netlink: 'syz.9.10199': attribute type 4 has an invalid length. [ 2359.817732][T25711] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2359.848805][T25711] usb 1-1: device descriptor read/8, error -71 [ 2360.099360][T25711] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2360.152751][T25711] usb 1-1: device descriptor read/8, error -71 [ 2360.236205][T17834] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 2360.293076][T25711] usb usb1-port1: unable to enumerate USB device [ 2360.301100][ T4602] gspca_nw80x: reg_r err -71 [ 2360.307003][ T4602] nw80x 9-1:0.0: probe with driver nw80x failed with error -71 [ 2360.318204][ T4602] usb 9-1: USB disconnect, device number 13 [ 2360.391797][ T8943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2360.406334][ T8943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2360.416343][T17834] usb 10-1: Using ep0 maxpacket: 16 [ 2360.421947][ T8943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2360.436680][ T8943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2360.449339][ T8943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2360.457175][T17834] usb 10-1: config 0 has no interfaces? [ 2360.503559][T17834] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2360.533167][T17834] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2360.553394][T17834] usb 10-1: Manufacturer: syz [ 2360.577571][T17834] usb 10-1: config 0 descriptor?? [ 2361.029388][T12835] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10201'. [ 2361.064161][T12831] chnl_net:caif_netlink_parms(): no params data found [ 2361.170766][ T30] audit: type=1326 audit(1766352009.690:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.8.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2361.210752][ T30] audit: type=1326 audit(1766352009.720:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.8.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f204c98df90 code=0x7ffc0000 [ 2361.234513][ T30] audit: type=1326 audit(1766352009.720:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.8.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2361.288270][ T30] audit: type=1326 audit(1766352009.720:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.8.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2361.311862][ T30] audit: type=1326 audit(1766352009.730:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.8.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2361.335584][ T30] audit: type=1326 audit(1766352009.730:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.8.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2361.359002][ T30] audit: type=1326 audit(1766352009.730:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.8.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2361.385030][ T30] audit: type=1326 audit(1766352009.730:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.8.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2361.409816][ T30] audit: type=1326 audit(1766352009.730:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.8.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2361.435495][ T30] audit: type=1326 audit(1766352009.730:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.8.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204c98f749 code=0x7ffc0000 [ 2361.479790][ T3892] tipc: Resetting bearer [ 2361.531172][ T3892] tipc: Disabling bearer [ 2361.626697][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 2361.656508][T12831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2361.663894][T12831] bridge_slave_0: entered allmulticast mode [ 2361.672202][T12831] bridge_slave_0: entered promiscuous mode [ 2361.685182][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 2361.692551][T12831] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.700730][T12831] bridge_slave_1: entered allmulticast mode [ 2361.709238][T12831] bridge_slave_1: entered promiscuous mode [ 2361.782625][T12831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2361.795037][T12831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2361.826337][T25711] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 2361.862514][T12831] team0: Port device team_slave_0 added [ 2361.884279][T12831] team0: Port device team_slave_1 added [ 2361.909528][T12831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2361.916654][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2361.944878][T12831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2361.963926][T12831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2361.972090][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2362.000394][T12831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2362.014079][T25711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2362.026596][T25711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2362.036730][T25711] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 2362.051138][T25711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2362.073123][T25711] usb 1-1: config 0 descriptor?? [ 2362.101625][T12831] hsr_slave_0: entered promiscuous mode [ 2362.108364][T12831] hsr_slave_1: entered promiscuous mode [ 2362.114515][T12831] debugfs: 'hsr0' already exists in 'hsr' [ 2362.122994][T12831] Cannot create hsr debugfs directory [ 2362.128703][T25592] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2362.266338][T25592] usb 9-1: device descriptor read/64, error -71 [ 2362.287864][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2362.301035][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2362.396336][T30731] usb 52-1: device descriptor read/8, error -110 [ 2362.526218][T25592] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2362.551481][T25711] glorious 0003:258A:0036.0097: unbalanced collection at end of report description [ 2362.561162][T11422] Bluetooth: hci2: command tx timeout [ 2362.575536][T25711] glorious 0003:258A:0036.0097: probe with driver glorious failed with error -22 [ 2362.654604][T12831] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2362.656499][T25592] usb 9-1: device descriptor read/64, error -71 [ 2362.710984][T12831] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2362.722141][T11876] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2362.748857][T12831] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2362.752510][T25711] usb 10-1: USB disconnect, device number 74 [ 2362.768602][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2362.778211][T25592] usb usb9-port1: attempt power cycle [ 2362.802442][T12831] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2362.811302][T30731] usb usb52-port1: attempt power cycle [ 2362.816516][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2362.857967][T17834] usb 1-1: USB disconnect, device number 53 [ 2362.920321][T11876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2362.933732][T11876] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2362.945807][T11876] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2362.959456][T11876] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2362.988456][T11876] usb 6-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 2362.998775][T11876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2363.029818][T11876] usb 6-1: config 0 descriptor?? [ 2363.051617][T12831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2363.109652][T12831] 8021q: adding VLAN 0 to HW filter on device team0 [ 2363.136641][T25592] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2363.137841][T22494] bridge0: port 1(bridge_slave_0) entered blocking state [ 2363.151491][T22494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2363.166948][T25592] usb 9-1: device descriptor read/8, error -71 [ 2363.197469][T16146] bridge0: port 2(bridge_slave_1) entered blocking state [ 2363.204598][T16146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2363.361136][T11876] usbhid 6-1:0.0: can't add hid device: -71 [ 2363.392339][T11876] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2363.403127][T30731] usb usb52-port1: unable to enumerate USB device [ 2363.406979][T25592] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2363.455784][T25592] usb 9-1: device descriptor read/8, error -71 [ 2363.464493][T12831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2363.471897][T11876] usb 6-1: USB disconnect, device number 42 [ 2363.598608][T25592] usb usb9-port1: unable to enumerate USB device [ 2363.617818][T12831] veth0_vlan: entered promiscuous mode [ 2363.642166][T12831] veth1_vlan: entered promiscuous mode [ 2363.709222][T12831] veth0_macvtap: entered promiscuous mode [ 2363.728595][T12831] veth1_macvtap: entered promiscuous mode [ 2363.769639][T12831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2363.776368][T25592] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2363.795017][T12831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2363.813546][ T3726] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2363.846272][ T3726] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2363.867576][ T3726] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2363.879693][ T3726] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2363.896548][T11876] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2363.947979][T25592] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 2363.960628][T25592] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 250, changing to 11 [ 2363.993152][T25592] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2364.007873][T25592] usb 1-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 2364.018325][T25592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.027686][T25592] usb 1-1: Product: ㊠[ 2364.033282][ T3726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2364.041626][ T3726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2364.050843][T25592] usb 1-1: Manufacturer: 謒嫩뷓êžÛ…袗昗킙醽弪Ὠ膨悢갛칀⸪팭≥⓫腈푗ᶽ㭊콘í¶é´–嘊켴ﻹ瓄槪紩ᲄá¦î‰Ÿì¯·æ’‹ê³²éš©å—‰í‡¸èŠ¾ç¦¦å¥ƒëŠì¦¾ì°—驔鱭 [ 2364.078179][T11876] usb 6-1: Using ep0 maxpacket: 16 [ 2364.078806][T25592] usb 1-1: SerialNumber: 倊 [ 2364.089701][T11876] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2364.106233][T11876] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2364.121010][T22494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2364.121727][T11876] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2364.130826][T22494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2364.143485][T11876] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2364.150363][T10912] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 2364.161346][T11876] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2364.177579][T11876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.185818][T11876] usb 6-1: Product: syz [ 2364.191179][T11876] usb 6-1: Manufacturer: syz [ 2364.195801][T11876] usb 6-1: SerialNumber: syz [ 2364.255359][T12875] FAULT_INJECTION: forcing a failure. [ 2364.255359][T12875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2364.269025][T12875] CPU: 0 UID: 0 PID: 12875 Comm: syz.6.10200 Tainted: G L syzkaller #0 PREEMPT(full) [ 2364.269053][T12875] Tainted: [L]=SOFTLOCKUP [ 2364.269065][T12875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2364.269076][T12875] Call Trace: [ 2364.269083][T12875] [ 2364.269090][T12875] dump_stack_lvl+0xe8/0x150 [ 2364.269123][T12875] should_fail_ex+0x414/0x560 [ 2364.269153][T12875] _copy_to_user+0x31/0xb0 [ 2364.269176][T12875] simple_read_from_buffer+0xe1/0x170 [ 2364.269207][T12875] proc_fail_nth_read+0x1b3/0x220 [ 2364.269229][T12875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2364.269252][T12875] ? rw_verify_area+0x2a6/0x4d0 [ 2364.269276][T12875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2364.269297][T12875] vfs_read+0x200/0xa30 [ 2364.269312][T12875] ? fdget_pos+0x247/0x320 [ 2364.269337][T12875] ? __pfx___mutex_lock+0x10/0x10 [ 2364.269358][T12875] ? __pfx_vfs_read+0x10/0x10 [ 2364.269376][T12875] ? __fget_files+0x2a/0x420 [ 2364.269400][T12875] ? __fget_files+0x3a0/0x420 [ 2364.269420][T12875] ? __fget_files+0x2a/0x420 [ 2364.269455][T12875] ksys_read+0x145/0x250 [ 2364.269475][T12875] ? __pfx_ksys_read+0x10/0x10 [ 2364.269502][T12875] do_syscall_64+0xec/0xf80 [ 2364.269520][T12875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2364.269538][T12875] ? clear_bhb_loop+0x60/0xb0 [ 2364.269559][T12875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2364.269576][T12875] RIP: 0033:0x7fe1e638e15c [ 2364.269592][T12875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2364.269609][T12875] RSP: 002b:00007fe1e72d2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2364.269628][T12875] RAX: ffffffffffffffda RBX: 00007fe1e65e5fa0 RCX: 00007fe1e638e15c [ 2364.269643][T12875] RDX: 000000000000000f RSI: 00007fe1e72d20a0 RDI: 0000000000000004 [ 2364.269655][T12875] RBP: 00007fe1e72d2090 R08: 0000000000000000 R09: 0000000000000000 [ 2364.269667][T12875] R10: 0000000004044884 R11: 0000000000000246 R12: 0000000000000001 [ 2364.269678][T12875] R13: 00007fe1e65e6038 R14: 00007fe1e65e5fa0 R15: 00007fe1e670fa28 [ 2364.269708][T12875] [ 2364.506237][T10912] usb 10-1: Using ep0 maxpacket: 8 [ 2364.513546][T10912] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2364.525364][T10912] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2364.544524][T25592] usbhid 1-1:1.0: can't add hid device: -71 [ 2364.554991][T11876] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2364.558134][T25592] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2364.609351][T10912] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2364.623978][T25592] usb 1-1: USB disconnect, device number 54 [ 2364.636587][T11422] Bluetooth: hci2: command tx timeout [ 2364.657958][T10912] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=93.e8 [ 2364.669762][T10912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.679001][T10912] usb 10-1: Product: syz [ 2364.683274][T10912] usb 10-1: Manufacturer: syz [ 2364.690303][T10912] usb 10-1: SerialNumber: syz [ 2364.698628][T10912] usb 10-1: config 0 descriptor?? [ 2364.715801][T10912] usbtest 10-1:0.0: couldn't get endpoints, -22 [ 2364.723979][T10912] usbtest 10-1:0.0: probe with driver usbtest failed with error -22 [ 2364.754595][T10912] usb 6-1: USB disconnect, device number 43 [ 2364.773799][T12879] loop9: detected capacity change from 0 to 7 [ 2364.781779][T12879] Dev loop9: unable to read RDB block 7 [ 2364.787225][T10912] usblp0: removed [ 2364.788865][T12879] loop9: unable to read partition table [ 2364.798726][T12879] loop9: partition table beyond EOD, truncated [ 2364.805037][T12879] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 2364.848689][T12879] netlink: 'syz.6.10211': attribute type 13 has an invalid length. [ 2364.995458][T10912] usb 10-1: USB disconnect, device number 75 [ 2365.029585][T12885] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 2365.118336][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10213'. [ 2365.846215][T25592] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 2365.879752][T10912] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2366.016308][T25592] usb 10-1: Using ep0 maxpacket: 16 [ 2366.021668][T10912] usb 6-1: device descriptor read/64, error -71 [ 2366.041001][T25592] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2366.059659][T25592] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.074784][T25592] usb 10-1: Product: syz [ 2366.092906][T25592] usb 10-1: Manufacturer: syz [ 2366.101350][T25592] usb 10-1: SerialNumber: syz [ 2366.122477][T25592] r8152-cfgselector 10-1: Unknown version 0x0000 [ 2366.145978][T25592] r8152-cfgselector 10-1: config 0 descriptor?? [ 2366.288305][T10912] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2366.382400][T25592] r8152-cfgselector 10-1: Needed 1 retries to read version [ 2366.436179][T10912] usb 6-1: device descriptor read/64, error -71 [ 2366.557056][T10912] usb usb6-port1: attempt power cycle [ 2366.606216][T30731] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2366.716234][T11422] Bluetooth: hci2: command tx timeout [ 2366.776246][T30731] usb 1-1: Using ep0 maxpacket: 8 [ 2366.789386][T30731] usb 1-1: config 0 has an invalid interface number: 88 but max is 3 [ 2366.798898][T30731] usb 1-1: config 0 has an invalid interface number: 250 but max is 3 [ 2366.816479][T30731] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2366.829906][T30731] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 2366.839859][T30731] usb 1-1: config 0 has no interface number 0 [ 2366.845954][T30731] usb 1-1: config 0 has no interface number 1 [ 2366.853148][T30731] usb 1-1: config 0 interface 88 has no altsetting 0 [ 2366.860224][T30731] usb 1-1: config 0 interface 250 has no altsetting 0 [ 2366.867394][T30731] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3 [ 2366.876921][T30731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.887525][T30731] usb 1-1: config 0 descriptor?? [ 2366.916203][T10912] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2366.940840][T10912] usb 6-1: device descriptor read/8, error -71 [ 2367.178411][T30731] usb 1-1: string descriptor 0 read error: -71 [ 2367.195856][T30731] usb 1-1: USB disconnect, device number 55 [ 2367.206340][T10912] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2367.227412][T10912] usb 6-1: device descriptor read/8, error -71 [ 2367.348195][T10912] usb usb6-port1: unable to enumerate USB device [ 2367.386397][T11011] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2367.538932][T11011] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2367.550303][T11011] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2367.560959][T11011] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2367.570340][T11011] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2367.582208][T12934] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22 [ 2367.592504][T11011] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2367.969337][T10912] usb 9-1: USB disconnect, device number 18 [ 2368.615900][T10912] r8152-cfgselector 10-1: USB disconnect, device number 76 [ 2368.787096][T11011] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 2368.797061][T11422] Bluetooth: hci2: command tx timeout [ 2368.934666][T12959] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2368.946413][T11011] usb 9-1: device descriptor read/64, error -71 [ 2368.963347][T12959] bond2 (unregistering): Released all slaves [ 2369.156159][T31942] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2369.208647][T11011] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 2369.336350][T31942] usb 1-1: Using ep0 maxpacket: 32 [ 2369.346348][T11011] usb 9-1: device descriptor read/64, error -71 [ 2369.362323][T31942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2369.374799][T31942] usb 1-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 2369.387532][T31942] usb 1-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 2369.402018][T31942] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 2369.415735][T31942] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2369.425906][T31942] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 2369.438697][T31942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.446213][T25592] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2369.463486][T31942] usb 1-1: Product: syz [ 2369.469720][T31942] usb 1-1: Manufacturer: syz [ 2369.476710][T31942] usb 1-1: SerialNumber: syz [ 2369.486920][T11011] usb usb9-port1: attempt power cycle [ 2369.509722][T31942] usb 1-1: config 0 descriptor?? [ 2369.533604][T12958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2369.629837][T25592] usb 6-1: config 0 has no interfaces? [ 2369.650807][T25592] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2369.681635][T25592] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.709709][T25592] usb 6-1: Product: syz [ 2369.723077][T25592] usb 6-1: Manufacturer: syz [ 2369.743179][T25592] usb 6-1: SerialNumber: syz [ 2369.755540][T31942] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2369.776013][T25592] usb 6-1: config 0 descriptor?? [ 2369.846299][T11011] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 2369.891582][T11011] usb 9-1: device descriptor read/8, error -71 [ 2369.926272][T31942] usb 1-1: USB disconnect, device number 56 [ 2369.990643][ T3227] udevd[3227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2370.024740][T12972] tap0: tun_chr_ioctl cmd 1074025675 [ 2370.048181][T12972] tap0: persist enabled [ 2370.060764][T12972] tap0: tun_chr_ioctl cmd 1074025675 [ 2370.089209][T12972] tap0: persist enabled [ 2370.166417][T11011] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 2370.219556][T11011] usb 9-1: device descriptor read/8, error -71 [ 2370.309743][T12963] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.323409][T12963] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2370.386457][T11011] usb usb9-port1: unable to enumerate USB device [ 2370.496895][T31942] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 2370.513451][T12976] net veth1_virt_wifi ªªªªª»: renamed from virt_wifi0 [ 2370.688393][T31942] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2370.703479][T31942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.730647][T31942] usb 10-1: Product: syz [ 2370.744159][T31942] usb 10-1: Manufacturer: syz [ 2370.754901][T31942] usb 10-1: SerialNumber: syz [ 2370.772339][T31942] usb 10-1: config 0 descriptor?? [ 2371.343306][T12985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10242'. [ 2371.428729][T12985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10242'. [ 2371.832248][T10912] usb 6-1: USB disconnect, device number 48 [ 2371.890544][T31942] usb 10-1: non-Atmel transceiver xxxxac01 [ 2372.226207][T10912] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2372.406030][T10912] usb 6-1: Using ep0 maxpacket: 32 [ 2372.453209][T10912] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2372.477136][T10912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.498915][T10912] usb 6-1: Product: syz [ 2372.505793][T10912] usb 6-1: Manufacturer: syz [ 2372.511188][T10912] usb 6-1: SerialNumber: syz [ 2372.534660][T10912] usb 6-1: config 0 descriptor?? [ 2372.568166][T10912] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2373.037415][T31942] usb 10-1: Firmware version (0.0) predates our first public release. [ 2373.059727][T31942] usb 10-1: Please update to version 0.2 or newer [ 2373.082439][T31942] usb 10-1: atusb_probe: initialization failed, error = -19 [ 2373.164617][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2373.164634][ T30] audit: type=1326 audit(1766352021.680:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.8.10248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f204c98f749 code=0x0 [ 2373.178054][T13014] tipc: Enabled bearer , priority 0 [ 2373.240482][T13014] syzkaller0: entered promiscuous mode [ 2373.254241][T13014] syzkaller0: entered allmulticast mode [ 2373.322620][T13014] tipc: Resetting bearer [ 2373.334481][T13015] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2373.365946][T13014] tipc: Resetting bearer [ 2373.403228][T13014] tipc: Disabling bearer [ 2373.685769][T25592] usb 10-1: USB disconnect, device number 77 [ 2373.789030][T13027] support for cryptoloop has been removed. Use dm-crypt instead. [ 2374.196153][T25592] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 2374.276386][T31942] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2374.395898][T25592] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 2374.409412][T25592] usb 10-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 2374.423839][T25592] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2374.424733][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10244'. [ 2374.443630][T25592] usb 10-1: config 0 descriptor?? [ 2374.451250][T10912] gspca_ov534_9: reg_w failed -71 [ 2374.468092][T31942] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2374.486337][T31942] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2374.498435][T31942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2374.513086][T31942] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2374.528014][T31942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.536429][T31942] usb 1-1: Product: syz [ 2374.540946][T31942] usb 1-1: Manufacturer: syz [ 2374.545661][T31942] usb 1-1: SerialNumber: syz [ 2374.553514][T31942] usb 1-1: config 0 descriptor?? [ 2374.564607][T13036] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2374.578392][T31942] usb 1-1: ucan: probing device on interface #0 [ 2374.586706][ T5911] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2374.601284][T31942] usb 1-1: ucan: invalid endpoint configuration [ 2374.617982][T31942] usb 1-1: ucan: probe failed; try to update the device firmware [ 2374.698900][T10912] gspca_ov534_9: Unknown sensor 0000 [ 2374.706616][T10912] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 2374.747441][T10912] usb 6-1: USB disconnect, device number 49 [ 2374.773378][ T5911] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2374.794193][ T5911] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2374.805531][ T5911] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2374.824940][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2374.829033][T12873] usb 1-1: USB disconnect, device number 57 [ 2374.851499][T13039] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 2374.891592][T25592] aquacomputer_d5next 0003:0C70:F0BD.0098: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.9-1/input0 [ 2374.895600][ T5911] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2375.084362][T25592] usb 10-1: USB disconnect, device number 78 [ 2375.129902][T10912] usb 9-1: USB disconnect, device number 23 [ 2375.150757][T13044] pimreg: entered allmulticast mode [ 2375.161377][T13042] fido_id[13042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 2375.559602][T13047] pimreg: left allmulticast mode [ 2375.906794][T10912] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 2376.113081][T10912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2376.149622][T10912] usb 1-1: not running at top speed; connect to a high speed hub [ 2376.209183][T10912] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 2376.273881][T10912] usb 1-1: config 3 has an invalid interface number: 146 but max is 0 [ 2376.319027][T10912] usb 1-1: config 3 has no interface number 0 [ 2376.341824][T10912] usb 1-1: config 3 interface 146 has no altsetting 0 [ 2376.392394][T10912] usb 1-1: config 3 has an invalid interface number: 146 but max is 0 [ 2376.439990][T10912] usb 1-1: config 3 has no interface number 0 [ 2376.456163][T10912] usb 1-1: config 3 interface 146 has no altsetting 0 [ 2376.513241][T10912] usb 1-1: config 3 has an invalid interface number: 146 but max is 0 [ 2376.566347][T10912] usb 1-1: config 3 has no interface number 0 [ 2376.593870][T10912] usb 1-1: config 3 interface 146 has no altsetting 0 [ 2376.634369][T10912] usb 1-1: config 3 has an invalid interface number: 146 but max is 0 [ 2376.648598][ T5913] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 2376.680264][T10912] usb 1-1: config 3 has no interface number 0 [ 2376.715736][T10912] usb 1-1: config 3 interface 146 has no altsetting 0 [ 2376.753389][T10912] usb 1-1: config 3 has an invalid interface number: 146 but max is 0 [ 2376.792293][T10912] usb 1-1: config 3 has no interface number 0 [ 2376.823404][T10912] usb 1-1: config 3 interface 146 has no altsetting 0 [ 2376.830326][ T5913] usb 10-1: Using ep0 maxpacket: 16 [ 2376.842435][ T5913] usb 10-1: config 0 has an invalid interface number: 181 but max is 0 [ 2376.879789][T10912] usb 1-1: config 3 has an invalid interface number: 146 but max is 0 [ 2376.888753][ T5913] usb 10-1: config 0 has no interface number 0 [ 2376.917999][ T5913] usb 10-1: config 0 interface 181 has no altsetting 0 [ 2376.931960][T10912] usb 1-1: config 3 has no interface number 0 [ 2376.959547][T10912] usb 1-1: config 3 interface 146 has no altsetting 0 [ 2376.969713][ T5913] usb 10-1: New USB device found, idVendor=2001, idProduct=330d, bcdDevice=94.0b [ 2377.005822][T10912] usb 1-1: config 3 has an invalid interface number: 146 but max is 0 [ 2377.017624][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.053384][T10912] usb 1-1: config 3 has no interface number 0 [ 2377.069878][ T5913] usb 10-1: Product: syz [ 2377.079434][ T5913] usb 10-1: Manufacturer: syz [ 2377.084869][T10912] usb 1-1: config 3 interface 146 has no altsetting 0 [ 2377.098732][ T5913] usb 10-1: SerialNumber: syz [ 2377.112346][T10912] usb 1-1: config 3 has an invalid interface number: 146 but max is 0 [ 2377.131654][ T5913] usb 10-1: config 0 descriptor?? [ 2377.159161][T10912] usb 1-1: config 3 has no interface number 0 [ 2377.198803][T10912] usb 1-1: config 3 interface 146 has no altsetting 0 [ 2377.232709][T10912] usb 1-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=56.ea [ 2377.291146][T10912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.321970][T10912] usb 1-1: Product: syz [ 2377.340605][T10912] usb 1-1: Manufacturer: syz [ 2377.355316][T10912] usb 1-1: SerialNumber: syz [ 2377.608842][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2377.643006][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2378.724833][T10912] usb 1-1: USB disconnect, device number 58 [ 2379.187772][T31942] usb 10-1: USB disconnect, device number 79 [ 2379.325062][T13114] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10268'. [ 2379.446273][T13111] syzkaller1: entered promiscuous mode [ 2379.476907][T13111] syzkaller1: entered allmulticast mode [ 2380.113761][T13133] loop4: detected capacity change from 0 to 7 [ 2380.132978][T13133] Dev loop4: unable to read RDB block 7 [ 2380.147402][T13133] loop4: unable to read partition table [ 2380.161999][T13133] loop4: partition table beyond EOD, truncated [ 2380.181399][T13133] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2380.634250][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10277'. [ 2380.690959][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10273'. [ 2380.787030][T13140] vlan2: entered promiscuous mode [ 2380.812541][T13140] macvtap0: entered promiscuous mode [ 2381.031187][T13159] pimreg: entered allmulticast mode [ 2381.254642][T13158] pimreg: left allmulticast mode [ 2381.426902][T31942] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 2381.626474][T31942] usb 10-1: Using ep0 maxpacket: 16 [ 2381.633339][T31942] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2381.645869][T31942] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2381.756270][T31942] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2381.824849][T31942] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2381.865374][T31942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2381.938246][T31942] usb 10-1: config 0 descriptor?? [ 2382.348785][T13165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2382.419773][T13165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2382.450359][T31942] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2382.494766][T31942] microsoft 0003:045E:07DA.0099: unknown main item tag 0x0 [ 2382.522830][T31942] microsoft 0003:045E:07DA.0099: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 2382.536202][T31942] microsoft 0003:045E:07DA.0099: no inputs found [ 2382.542931][T31942] microsoft 0003:045E:07DA.0099: could not initialize ff, continuing anyway [ 2382.662438][T31942] usb 10-1: USB disconnect, device number 80 [ 2382.708672][T13175] fido_id[13175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 2383.041436][T13182] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10281'. [ 2383.166383][T25592] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 2383.317693][T25592] usb 1-1: device descriptor read/64, error -71 [ 2383.576335][T25592] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 2383.583957][ T5913] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2383.596300][ C1] raw-gadget.1 gadget.8: ignoring, device is not running [ 2383.745691][ T5913] usb 9-1: device descriptor read/64, error -32 [ 2383.752374][T25592] usb 1-1: device descriptor read/64, error -71 [ 2383.838826][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10283'. [ 2383.867210][T13186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2383.879585][T25592] usb usb1-port1: attempt power cycle [ 2384.006434][ T5913] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 2384.202446][T13186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2384.216559][ T5913] usb 9-1: Using ep0 maxpacket: 16 [ 2384.225945][ T5913] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2384.248614][ T5913] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2384.258160][T25592] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 2384.268775][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.284675][T25592] usb 1-1: device descriptor read/8, error -71 [ 2384.303649][ T5913] usb 9-1: Product: syz [ 2384.308655][ T5913] usb 9-1: Manufacturer: syz [ 2384.313596][ T5913] usb 9-1: SerialNumber: syz [ 2384.348250][ T5913] usb 9-1: config 0 descriptor?? [ 2384.362050][ T5913] usb 9-1: selecting invalid altsetting 1 [ 2384.370351][ T5913] usb 9-1: Can not set alternate setting to 1, error: -22 [ 2384.380033][ T5913] synaptics_usb 9-1:0.0: probe with driver synaptics_usb failed with error -22 [ 2384.536338][T25592] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 2384.586746][T25592] usb 1-1: device descriptor read/8, error -71 [ 2384.617427][T13198] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10286'. [ 2384.659292][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10286'. [ 2384.679041][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10286'. [ 2384.696959][T25592] usb usb1-port1: unable to enumerate USB device [ 2384.704803][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10286'. [ 2384.714632][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10286'. [ 2384.730914][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10286'. [ 2384.741004][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10286'. [ 2384.753462][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10286'. [ 2384.767620][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10286'. [ 2384.790468][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10286'. [ 2384.935953][T13202] AppArmor: change_hat: Invalid input 'Ó' [ 2385.039403][T13202] veth0_macvtap: left promiscuous mode [ 2385.420464][T13207] loop5: detected capacity change from 0 to 7 [ 2385.443717][T30869] Dev loop5: unable to read RDB block 7 [ 2385.449677][T30869] loop5: AHDI p1 p2 p3 [ 2385.471862][T30869] loop5: partition table partially beyond EOD, truncated [ 2385.492431][T30869] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2385.521318][T30869] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2385.549844][T13207] Dev loop5: unable to read RDB block 7 [ 2385.567897][T13207] loop5: AHDI p1 p2 p3 [ 2385.579594][T13207] loop5: partition table partially beyond EOD, truncated [ 2385.598238][T13207] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2385.621053][T13207] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2386.077387][T13220] usb usb8: usbfs: process 13220 (syz.0.10293) did not claim interface 0 before use [ 2386.122298][T25592] usb 9-1: USB disconnect, device number 25 [ 2386.458958][T13236] dummy0: entered allmulticast mode [ 2386.820063][T13238] picdev_read: 77 callbacks suppressed [ 2386.820084][T13238] kvm: pic: non byte read [ 2386.882279][T13238] kvm: pic: non byte read [ 2386.920431][T13238] kvm: pic: non byte read [ 2386.944046][T13238] kvm: pic: non byte read [ 2386.984473][T13238] kvm: pic: non byte read [ 2387.032314][T13238] kvm: pic: non byte read [ 2387.053159][T13238] kvm: pic: non byte read [ 2387.082742][T13238] kvm: pic: non byte read [ 2387.105712][T13232] dummy0: left allmulticast mode [ 2387.114511][T13238] kvm: pic: non byte read [ 2387.131656][T13238] kvm: pic: non byte read [ 2387.488047][T13250] fuse: Unknown parameter 'fúäÛSrèqný”IçX' [ 2387.698427][T13252] netlink: 'syz.8.10297': attribute type 4 has an invalid length. [ 2388.198520][T13261] FAULT_INJECTION: forcing a failure. [ 2388.198520][T13261] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.264204][T13261] CPU: 0 UID: 0 PID: 13261 Comm: syz.8.10300 Tainted: G L syzkaller #0 PREEMPT(full) [ 2388.264223][T13261] Tainted: [L]=SOFTLOCKUP [ 2388.264227][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2388.264234][T13261] Call Trace: [ 2388.264239][T13261] [ 2388.264244][T13261] dump_stack_lvl+0xe8/0x150 [ 2388.264261][T13261] should_fail_ex+0x414/0x560 [ 2388.264279][T13261] should_failslab+0xa8/0x100 [ 2388.264293][T13261] __kmalloc_cache_node_noprof+0x88/0x700 [ 2388.264304][T13261] ? __get_vm_area_node+0x13f/0x300 [ 2388.264322][T13261] __get_vm_area_node+0x13f/0x300 [ 2388.264338][T13261] __vmalloc_node_range_noprof+0x371/0x16a0 [ 2388.264348][T13261] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2388.264375][T13261] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2388.264386][T13261] ? __lock_acquire+0x6b6/0x2cf0 [ 2388.264401][T13261] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2388.264413][T13261] __vmalloc_noprof+0xd2/0x120 [ 2388.264422][T13261] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2388.264437][T13261] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2388.264452][T13261] bpf_prog_alloc+0x3c/0x1a0 [ 2388.264466][T13261] bpf_prog_load+0x735/0x1a10 [ 2388.264484][T13261] ? get_pid_task+0x20/0x1f0 [ 2388.264497][T13261] ? __pfx_bpf_prog_load+0x10/0x10 [ 2388.264510][T13261] ? __might_fault+0xb0/0x130 [ 2388.264532][T13261] ? bpf_lsm_bpf+0x9/0x20 [ 2388.264543][T13261] ? security_bpf+0x7e/0x300 [ 2388.264555][T13261] __sys_bpf+0x507/0x860 [ 2388.264568][T13261] ? __pfx___sys_bpf+0x10/0x10 [ 2388.264600][T13261] ? ksys_write+0x22a/0x250 [ 2388.264612][T13261] ? __pfx_ksys_write+0x10/0x10 [ 2388.264625][T13261] __x64_sys_bpf+0x7c/0x90 [ 2388.264637][T13261] do_syscall_64+0xec/0xf80 [ 2388.264648][T13261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2388.264658][T13261] ? trace_irq_disable+0x37/0x100 [ 2388.264670][T13261] ? clear_bhb_loop+0x60/0xb0 [ 2388.264682][T13261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2388.264692][T13261] RIP: 0033:0x7f204c98f749 [ 2388.264703][T13261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2388.264712][T13261] RSP: 002b:00007f204d7c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2388.264724][T13261] RAX: ffffffffffffffda RBX: 00007f204cbe5fa0 RCX: 00007f204c98f749 [ 2388.264731][T13261] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 2388.264738][T13261] RBP: 00007f204d7c3090 R08: 0000000000000000 R09: 0000000000000000 [ 2388.264745][T13261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2388.264751][T13261] R13: 00007f204cbe6038 R14: 00007f204cbe5fa0 R15: 00007f204cd0fa28 [ 2388.264766][T13261] [ 2388.265012][T13261] syz.8.10300: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 2388.875397][T13261] CPU: 1 UID: 0 PID: 13261 Comm: syz.8.10300 Tainted: G L syzkaller #0 PREEMPT(full) [ 2388.875417][T13261] Tainted: [L]=SOFTLOCKUP [ 2388.875421][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2388.875427][T13261] Call Trace: [ 2388.875432][T13261] [ 2388.875437][T13261] dump_stack_lvl+0xe8/0x150 [ 2388.875454][T13261] warn_alloc+0x214/0x310 [ 2388.875468][T13261] ? __pfx_warn_alloc+0x10/0x10 [ 2388.875479][T13261] ? __get_vm_area_node+0x13f/0x300 [ 2388.875496][T13261] ? __get_vm_area_node+0x2b5/0x300 [ 2388.875512][T13261] __vmalloc_node_range_noprof+0x396/0x16a0 [ 2388.875536][T13261] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2388.875547][T13261] ? __lock_acquire+0x6b6/0x2cf0 [ 2388.875562][T13261] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2388.875575][T13261] __vmalloc_noprof+0xd2/0x120 [ 2388.875585][T13261] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2388.875599][T13261] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 2388.875614][T13261] bpf_prog_alloc+0x3c/0x1a0 [ 2388.875629][T13261] bpf_prog_load+0x735/0x1a10 [ 2388.875646][T13261] ? get_pid_task+0x20/0x1f0 [ 2388.875666][T13261] ? __pfx_bpf_prog_load+0x10/0x10 [ 2388.875679][T13261] ? __might_fault+0xb0/0x130 [ 2388.875701][T13261] ? bpf_lsm_bpf+0x9/0x20 [ 2388.875712][T13261] ? security_bpf+0x7e/0x300 [ 2388.875724][T13261] __sys_bpf+0x507/0x860 [ 2388.875738][T13261] ? __pfx___sys_bpf+0x10/0x10 [ 2388.875758][T13261] ? ksys_write+0x22a/0x250 [ 2388.875769][T13261] ? __pfx_ksys_write+0x10/0x10 [ 2388.875781][T13261] __x64_sys_bpf+0x7c/0x90 [ 2388.875794][T13261] do_syscall_64+0xec/0xf80 [ 2388.875805][T13261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2388.875814][T13261] ? trace_irq_disable+0x37/0x100 [ 2388.875827][T13261] ? clear_bhb_loop+0x60/0xb0 [ 2388.875839][T13261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2388.875848][T13261] RIP: 0033:0x7f204c98f749 [ 2388.875858][T13261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2388.875867][T13261] RSP: 002b:00007f204d7c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2388.875879][T13261] RAX: ffffffffffffffda RBX: 00007f204cbe5fa0 RCX: 00007f204c98f749 [ 2388.875886][T13261] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 2388.875893][T13261] RBP: 00007f204d7c3090 R08: 0000000000000000 R09: 0000000000000000 [ 2388.875899][T13261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2388.875906][T13261] R13: 00007f204cbe6038 R14: 00007f204cbe5fa0 R15: 00007f204cd0fa28 [ 2388.875926][T13261] [ 2388.875942][T13261] Mem-Info: [ 2389.336673][T13266] loop5: detected capacity change from 0 to 7 [ 2389.501365][T13266] Dev loop5: unable to read RDB block 7 [ 2389.507743][T13266] loop5: AHDI p1 p2 p3 [ 2389.513547][T13266] loop5: partition table partially beyond EOD, truncated [ 2389.548728][T13261] active_anon:43125 inactive_anon:2 isolated_anon:0 [ 2389.548728][T13261] active_file:22371 inactive_file:4266 isolated_file:0 [ 2389.548728][T13261] unevictable:768 dirty:205 writeback:0 [ 2389.548728][T13261] slab_reclaimable:7660 slab_unreclaimable:120445 [ 2389.548728][T13261] mapped:35889 shmem:34072 pagetables:2312 [ 2389.548728][T13261] sec_pagetables:3 bounce:0 [ 2389.548728][T13261] kernel_misc_reclaimable:0 [ 2389.548728][T13261] free:1259812 free_pcp:14453 free_cma:0 [ 2389.622692][T13261] Node 0 active_anon:172700kB inactive_anon:8kB active_file:89452kB inactive_file:16928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143748kB dirty:820kB writeback:0kB shmem:134752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15704kB pagetables:9132kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 2389.711058][T13266] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2389.734493][T13261] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2389.746723][T13266] loop5: p2 start 1702059890 is beyond EOD, [ 2389.882078][T13261] Node 0 [ 2389.907594][T13266] truncated [ 2389.918658][T13261] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2390.008210][T13261] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 2390.014056][T13261] Node 0 DMA32 free:1124008kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:165172kB inactive_anon:8kB active_file:89452kB inactive_file:16932kB unevictable:1536kB writepending:820kB zspages:0kB present:3129332kB managed:2559512kB mlocked:0kB bounce:0kB free_pcp:49264kB local_pcp:31928kB free_cma:0kB [ 2390.187227][T13261] lowmem_reserve[]: 0 0 1 1 1 [ 2390.216924][T13261] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2390.303332][T13280] sctp: [Deprecated]: syz.5.10305 (pid 13280) Use of int in max_burst socket option deprecated. [ 2390.303332][T13280] Use struct sctp_assoc_value instead [ 2390.380789][T13261] lowmem_reserve[]: 0 0 0 0 0 [ 2390.409407][T13261] Node 1 Normal free:3902768kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14276kB local_pcp:8928kB free_cma:0kB [ 2390.501702][T13281] Cannot find add_set index 0 as target [ 2390.510858][T13261] lowmem_reserve[]: 0 0 0 0 0 [ 2390.543961][T13261] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2390.588449][T13287] __nla_validate_parse: 59 callbacks suppressed [ 2390.588460][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10306'. [ 2390.617556][T13261] Node 0 DMA32: 3046*4kB (UME) 8162*8kB (UME) 5629*16kB (UME) 1349*32kB (UME) 984*64kB (UME) 754*128kB (UME) 626*256kB (UME) 457*512kB (UME) 305*1024kB (UM) 11*2048kB (U) 6*4096kB (U) = 1123864kB [ 2390.649062][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10306'. [ 2390.674170][T13261] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2390.720023][T13261] Node 1 Normal: 216*4kB (UME) 56*8kB (UME) 49*16kB (UME) 252*32kB (UME) 98*64kB (UME) 26*128kB (UME) 12*256kB (UM) 4*512kB (UM) 5*1024kB (UME) 1*2048kB (M) 945*4096kB (UM) = 3902768kB [ 2390.773563][T13261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2390.793848][T13288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2390.816232][T13261] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2390.838999][T13261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2390.869945][T13261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2390.880939][T13261] 60709 total pagecache pages [ 2390.889046][T13261] 2 pages in swap cache [ 2390.893455][T13261] Free swap = 124988kB [ 2390.898771][T13261] Total swap = 124996kB [ 2390.932020][T13261] 2097051 pages RAM [ 2390.940760][T13261] 0 pages HighMem/MovableOnly [ 2390.953260][T13261] 425083 pages reserved [ 2390.968554][T13261] 0 pages cma reserved [ 2391.168275][T13297] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 2391.233648][T13297] pim6reg: entered allmulticast mode [ 2391.276678][T13297] pim6reg: left allmulticast mode [ 2391.358252][T13301] netlink: 484 bytes leftover after parsing attributes in process `syz.5.10311'. [ 2391.983162][T13321] loop5: detected capacity change from 0 to 7 [ 2392.010616][T13321] Dev loop5: unable to read RDB block 7 [ 2392.038055][T13321] loop5: AHDI p1 p2 p3 [ 2392.062608][T13321] loop5: partition table partially beyond EOD, truncated [ 2392.109492][T13321] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2392.158323][T13321] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2393.103585][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10318'. [ 2393.123238][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10318'. [ 2393.624397][T13345] fuse: Bad value for 'group_id' [ 2393.639026][T13345] fuse: Bad value for 'group_id' [ 2393.689877][T13345] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10321'. [ 2393.864322][T13348] syzkaller1: entered promiscuous mode [ 2393.880547][T13348] syzkaller1: entered allmulticast mode [ 2393.977449][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10323'. [ 2394.276222][ T5913] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2394.436321][ T5913] usb 9-1: Using ep0 maxpacket: 16 [ 2394.443098][T13361] loop5: detected capacity change from 0 to 7 [ 2394.444110][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2394.459452][T13361] Dev loop5: unable to read RDB block 7 [ 2394.470284][T13361] loop5: AHDI p1 p2 p3 [ 2394.474659][T13361] loop5: partition table partially beyond EOD, truncated [ 2394.495408][ T5913] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 2394.515554][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.515753][T13361] loop5: p1 start 1601398130 is beyond EOD, [ 2394.533811][ T5913] usb 9-1: Product: syz [ 2394.534649][T13361] truncated [ 2394.547088][ T5913] usb 9-1: Manufacturer: syz [ 2394.556976][ T5913] usb 9-1: SerialNumber: syz [ 2394.566162][ T4602] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2394.571709][ T5913] usb 9-1: config 0 descriptor?? [ 2394.573960][T13361] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2394.593454][ T5913] hub 9-1:0.0: bad descriptor, ignoring hub [ 2394.615210][ T5913] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2394.678447][ T5913] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2394.736842][ T4602] usb 1-1: Using ep0 maxpacket: 32 [ 2394.753529][ T4602] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 2394.773000][ T4602] usb 1-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2394.774774][ T5913] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2394.788664][ T4602] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2394.834617][ T4602] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 2394.858295][ T5913] usb 9-1: USB disconnect, device number 26 [ 2394.859990][ T4602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.936502][ T4602] usb 1-1: Product: syz [ 2394.944226][T27436] udevd[27436]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2395.005384][ T4602] usb 1-1: Manufacturer: syz [ 2395.021187][ T4602] usb 1-1: SerialNumber: syz [ 2395.282709][ T4602] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input202 [ 2395.362802][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 2395.382363][ T4602] usb 1-1: USB disconnect, device number 63 [ 2395.484343][ T4602] appletouch 1-1:1.0: input: appletouch disconnected [ 2395.897255][ T8943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2395.909157][ T8943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2395.922785][ T8943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2395.947080][ T8943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2395.957536][ T8943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2396.382261][T13380] pimreg: entered allmulticast mode [ 2397.061906][T13385] pimreg: left allmulticast mode [ 2397.394901][T13375] chnl_net:caif_netlink_parms(): no params data found [ 2397.601245][T13405] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 2397.762036][T13375] bridge0: port 1(bridge_slave_0) entered blocking state [ 2397.800302][T13375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2397.836467][T13375] bridge_slave_0: entered allmulticast mode [ 2397.865128][T13375] bridge_slave_0: entered promiscuous mode [ 2397.937879][ T4602] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2398.077014][T11422] Bluetooth: hci3: command tx timeout [ 2398.097270][ T4602] usb 1-1: Using ep0 maxpacket: 8 [ 2398.124193][ T4602] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3 [ 2398.169593][ T4602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.209716][ T4602] usb 1-1: Product: syz [ 2398.213896][ T4602] usb 1-1: Manufacturer: syz [ 2398.220237][ T4602] usb 1-1: SerialNumber: syz [ 2398.246900][ T4602] usb 1-1: config 0 descriptor?? [ 2398.497390][ T4602] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 2398.583856][T13375] bridge0: port 2(bridge_slave_1) entered blocking state [ 2398.601867][T13375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2398.622774][T13375] bridge_slave_1: entered allmulticast mode [ 2398.639527][T13375] bridge_slave_1: entered promiscuous mode [ 2398.674004][ T4602] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2398.720951][ T4602] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2398.743619][T13375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2398.762401][ T4602] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2398.850807][ T4602] usb 10-1: config 0 descriptor?? [ 2398.860354][T13375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2398.885734][T13415] loop5: detected capacity change from 0 to 7 [ 2398.909012][ T4602] pwc: Askey VC010 type 2 USB webcam detected. [ 2398.921804][T13415] Dev loop5: unable to read RDB block 7 [ 2398.954729][T13415] loop5: AHDI p1 p2 p3 [ 2398.991910][T13415] loop5: partition table partially beyond EOD, truncated [ 2399.014827][T13415] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2399.087942][T13415] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2399.170531][T13375] team0: Port device team_slave_0 added [ 2399.208351][T13375] team0: Port device team_slave_1 added [ 2399.315952][ T4602] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2399.325416][T13375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2399.333537][ T4602] pwc: recv_control_msg error -32 req 02 val 2700 [ 2399.344752][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2399.374349][ T4602] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2399.382900][T13375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2399.400460][T13375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2399.407608][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2399.434449][T13375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2399.590406][T13375] hsr_slave_0: entered promiscuous mode [ 2399.610897][T13413] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2399.630452][T13375] hsr_slave_1: entered promiscuous mode [ 2399.643936][ T4602] pwc: recv_control_msg error -71 req 04 val 1300 [ 2399.651017][ T4602] pwc: recv_control_msg error -71 req 04 val 1400 [ 2399.662351][ T4602] pwc: recv_control_msg error -71 req 02 val 2000 [ 2399.686792][T13375] debugfs: 'hsr0' already exists in 'hsr' [ 2399.697899][ T4602] pwc: recv_control_msg error -71 req 02 val 2100 [ 2399.709140][T13423] fuse: Unknown parameter 'group_¸­SY­CŽ)id' [ 2399.715320][T13375] Cannot create hsr debugfs directory [ 2399.722487][ T4602] pwc: recv_control_msg error -71 req 04 val 1500 [ 2399.741878][ T4602] pwc: recv_control_msg error -71 req 02 val 2500 [ 2399.780264][ T4602] pwc: recv_control_msg error -71 req 02 val 2400 [ 2399.799465][ T4602] pwc: recv_control_msg error -71 req 02 val 2600 [ 2399.822407][ T4602] pwc: recv_control_msg error -71 req 02 val 2900 [ 2399.846840][ T4602] pwc: recv_control_msg error -71 req 02 val 2800 [ 2399.897368][ T4602] pwc: recv_control_msg error -71 req 04 val 1100 [ 2399.946411][ T4602] pwc: recv_control_msg error -71 req 04 val 1200 [ 2399.966475][ T4602] pwc: Registered as video103. [ 2399.995800][ T4602] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input203 [ 2400.030867][T13375] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.059025][ T4602] usb 10-1: USB disconnect, device number 81 [ 2400.156685][T11422] Bluetooth: hci3: command tx timeout [ 2400.303369][T13375] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.415133][T25711] usb 1-1: USB disconnect, device number 64 [ 2400.516001][T13375] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.952241][T13433] trusted_key: encrypted_key: master key parameter '' is invalid [ 2401.017174][T31942] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2401.230505][T13375] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2401.256586][T31942] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 2401.295372][T13375] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2401.296996][T31942] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 2401.338417][T13375] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2401.382478][T31942] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 2401.421162][T31942] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 2401.477935][T13375] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2401.566177][T31942] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2401.606520][T31942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2401.646196][T13436] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2401.837810][T13375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2401.882771][T13375] 8021q: adding VLAN 0 to HW filter on device team0 [ 2401.907871][T22498] bridge0: port 1(bridge_slave_0) entered blocking state [ 2401.915038][T22498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2401.988436][T22498] bridge0: port 2(bridge_slave_1) entered blocking state [ 2401.995690][T22498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2402.075462][T13468] loop5: detected capacity change from 0 to 7 [ 2402.084180][T13468] Dev loop5: unable to read RDB block 7 [ 2402.100307][T13468] loop5: AHDI p1 p2 p3 [ 2402.104642][T13468] loop5: partition table partially beyond EOD, truncated [ 2402.134383][T13468] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2402.154400][T13468] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2402.236745][T11422] Bluetooth: hci3: command tx timeout [ 2402.289816][T13375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2402.471666][T13375] veth0_vlan: entered promiscuous mode [ 2402.503273][T13375] veth1_vlan: entered promiscuous mode [ 2402.585358][T13375] veth0_macvtap: entered promiscuous mode [ 2402.611520][T13375] veth1_macvtap: entered promiscuous mode [ 2402.657263][T13375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2402.683490][T13375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2402.739986][ T3726] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2402.762119][T31942] ath6kl: Failed to submit usb control message: -71 [ 2402.790743][ T3726] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2402.806400][T31942] ath6kl: unable to send the bmi data to the device: -71 [ 2402.823837][T31942] ath6kl: Unable to send get target info: -71 [ 2402.848183][T31942] ath6kl: Failed to init ath6kl core: -71 [ 2402.855525][T31942] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 2402.874966][T31942] usb 6-1: USB disconnect, device number 50 [ 2402.885449][ T3726] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2402.903961][ T3726] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2403.123272][T22492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2403.143502][T22492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2403.222120][ T7973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2403.235905][ T7973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2403.343869][ T30] audit: type=1326 audit(1766352051.860:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.9.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b498f749 code=0x7ffc0000 [ 2403.347837][T31942] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2403.416572][ T30] audit: type=1326 audit(1766352051.860:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.9.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b498f749 code=0x7ffc0000 [ 2403.466793][ T30] audit: type=1326 audit(1766352051.860:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.9.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2b498f749 code=0x7ffc0000 [ 2403.490977][ T30] audit: type=1326 audit(1766352051.860:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.9.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b498f749 code=0x7ffc0000 [ 2403.515124][ T30] audit: type=1326 audit(1766352051.860:6248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.9.10355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b498f749 code=0x7ffc0000 [ 2403.545636][T31942] usb 6-1: device descriptor read/64, error -71 [ 2403.596764][T12873] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2403.726289][T12873] usb 9-1: device descriptor read/64, error -71 [ 2403.796193][T31942] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2403.936347][T31942] usb 6-1: device descriptor read/64, error -71 [ 2403.976224][T12873] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2404.056539][T31942] usb usb6-port1: attempt power cycle [ 2404.136244][T12873] usb 9-1: device descriptor read/64, error -71 [ 2404.246573][T12873] usb usb9-port1: attempt power cycle [ 2404.316657][T11422] Bluetooth: hci3: command tx timeout [ 2404.406416][T31942] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2404.439269][T31942] usb 6-1: device descriptor read/8, error -71 [ 2404.605428][T12873] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2404.648616][T12873] usb 9-1: device descriptor read/8, error -71 [ 2404.676506][T31942] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2404.726577][T31942] usb 6-1: device descriptor read/8, error -71 [ 2404.837240][T31942] usb usb6-port1: unable to enumerate USB device [ 2404.936346][T12873] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2404.956594][ T5913] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2404.967091][T12873] usb 9-1: device descriptor read/8, error -71 [ 2405.076719][T12873] usb usb9-port1: unable to enumerate USB device [ 2405.128155][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2405.138856][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2405.149676][ T5913] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2405.164364][ T5913] usb 1-1: too many endpoints for config 1 interface 0 altsetting 2: 64, using maximum allowed: 30 [ 2405.175493][ T5913] usb 1-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 2405.189069][ T5913] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2405.195949][ T5913] usb 1-1: config 1 interface 0 has no altsetting 1 [ 2405.206863][ T5913] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2405.216406][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.229139][ T5913] usb 1-1: Product: syz [ 2405.235869][ T5913] usb 1-1: Manufacturer: syz [ 2405.241027][ T5913] usb 1-1: SerialNumber: syz [ 2405.462861][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10362'. [ 2405.473233][T13521] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10362'. [ 2405.494224][ T5913] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 2405.512112][ T5913] usb 1-1: USB disconnect, device number 65 [ 2405.575985][T13528] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10364'. [ 2406.133940][T13542] bond_slave_1: Caught tx_queue_len zero misconfig [ 2406.141415][T13542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10369'. [ 2406.240200][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.248028][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.496543][ T4602] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2406.665923][ T4602] usb 6-1: too many configurations: 168, using maximum allowed: 8 [ 2406.737995][ T4602] usb 6-1: New USB device found, idVendor=0af0, idProduct=d66f, bcdDevice=b3.9e [ 2406.760829][ T4602] usb 6-1: New USB device strings: Mfr=28, Product=75, SerialNumber=219 [ 2406.782206][ T4602] usb 6-1: Product: syz [ 2406.797683][ T4602] usb 6-1: Manufacturer: syz [ 2406.807040][ T4602] usb 6-1: SerialNumber: syz [ 2406.824543][ T4602] usb 6-1: config 0 descriptor?? [ 2407.097953][T13545] batadv_slave_1: entered promiscuous mode [ 2408.176218][T10912] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2408.256667][T31942] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 2408.346190][T10912] usb 9-1: Using ep0 maxpacket: 8 [ 2408.361605][T10912] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2408.374392][T10912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.391700][T10912] usb 9-1: Product: syz [ 2408.400000][T10912] usb 9-1: Manufacturer: syz [ 2408.404625][T10912] usb 9-1: SerialNumber: syz [ 2408.416505][T31942] usb 10-1: Using ep0 maxpacket: 32 [ 2408.420848][T10912] usb 9-1: config 0 descriptor?? [ 2408.429284][T31942] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 2408.439923][T31942] usb 10-1: config 0 has no interface number 0 [ 2408.449283][T31942] usb 10-1: config 0 interface 184 has no altsetting 0 [ 2408.450707][T10912] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2408.477386][T31942] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2408.488061][T31942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.497800][T31942] usb 10-1: Product: syz [ 2408.502770][T31942] usb 10-1: Manufacturer: syz [ 2408.508439][T31942] usb 10-1: SerialNumber: syz [ 2408.520353][T31942] usb 10-1: config 0 descriptor?? [ 2408.529456][T31942] smsc75xx v1.0.0 [ 2408.648200][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2408.660362][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2409.135562][T31942] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2409.153147][T13543] batadv_slave_1: left promiscuous mode [ 2409.163702][T31942] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2409.164014][ T5913] usb 6-1: USB disconnect, device number 55 [ 2409.456264][T10912] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 2409.513272][T13596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10384'. [ 2409.551852][T13595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10384'. [ 2409.774939][T13600] veth1_to_bond: entered allmulticast mode [ 2409.816226][T25711] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2410.009477][T31942] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2410.076435][T25711] usb 1-1: Using ep0 maxpacket: 32 [ 2410.106406][T25711] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 2410.129598][T31942] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 2410.150519][T31942] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2410.233451][T25711] usb 1-1: config 0 has no interface number 0 [ 2410.239231][T31942] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -61 [ 2410.248675][T25711] usb 1-1: config 0 interface 51 has no altsetting 0 [ 2410.356258][T10912] gspca_sq930x: Unknown sensor [ 2410.548633][T10912] sq930x 9-1:0.0: probe with driver sq930x failed with error -22 [ 2410.606533][T25711] usb 1-1: New USB device found, idVendor=0fc5, idProduct=0227, bcdDevice=55.9a [ 2410.718541][T10912] usb 9-1: USB disconnect, device number 31 [ 2410.725561][T25711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.989276][T25711] usb 1-1: Product: syz [ 2411.042832][T25711] usb 1-1: Manufacturer: syz [ 2411.058556][T25711] usb 1-1: SerialNumber: syz [ 2411.140978][T25711] usb 1-1: config 0 descriptor?? [ 2411.242606][T31942] usb 10-1: USB disconnect, device number 82 [ 2411.962306][T25711] usb 1-1: USB disconnect, device number 66 [ 2412.446179][T10912] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 2412.606211][T25711] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 2412.626213][T10912] usb 10-1: Using ep0 maxpacket: 32 [ 2412.639737][T10912] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2412.670512][T10912] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2412.693504][T13618] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10390'. [ 2412.717809][T10912] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2412.767950][T10912] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2412.795055][T10912] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2412.818967][T10912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.827749][T25711] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2412.848604][T10912] usb 10-1: Product: syz [ 2412.853164][T25711] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2412.868493][T10912] usb 10-1: Manufacturer: syz [ 2412.881193][T10912] usb 10-1: SerialNumber: syz [ 2412.886009][T25711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2412.939510][T25711] usb 6-1: config 0 descriptor?? [ 2412.985032][T13612] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2412.996892][ T4602] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2413.079428][T13599] veth1_to_bond: left allmulticast mode [ 2413.144311][T10912] usb 10-1: 0:2 : does not exist [ 2413.186242][ T4602] usb 1-1: Using ep0 maxpacket: 8 [ 2413.222414][T10912] usb 10-1: USB disconnect, device number 83 [ 2413.226631][ T4602] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2413.289413][ T4602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.307498][T25711] ath6kl: Failed to submit usb control message: -71 [ 2413.319232][T25711] ath6kl: unable to send the bmi data to the device: -71 [ 2413.326803][ T4602] usb 1-1: Product: syz [ 2413.326825][ T4602] usb 1-1: Manufacturer: syz [ 2413.326841][ T4602] usb 1-1: SerialNumber: syz [ 2413.351637][ T4602] usb 1-1: config 0 descriptor?? [ 2413.367053][T27436] udevd[27436]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2413.369982][T25711] ath6kl: Unable to send get target info: -71 [ 2413.411670][T25711] ath6kl: Failed to init ath6kl core: -71 [ 2413.430693][T25711] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2413.493858][T25711] usb 6-1: USB disconnect, device number 56 [ 2413.656731][ T4602] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2413.868944][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2413.911939][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2413.945848][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2413.950397][ T30] audit: type=1326 audit(1766352062.460:6249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.0.10391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2413.959132][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2414.049110][ T30] audit: type=1326 audit(1766352062.460:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.0.10391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2414.164562][ T30] audit: type=1326 audit(1766352062.460:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.0.10391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2414.242622][ T30] audit: type=1326 audit(1766352062.460:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.0.10391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2414.307475][ T30] audit: type=1326 audit(1766352062.460:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.0.10391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2414.337439][T13645] syzkaller0: entered promiscuous mode [ 2414.350976][T13645] syzkaller0: entered allmulticast mode [ 2414.381050][T13645] tipc: Started in network mode [ 2414.393897][ T30] audit: type=1326 audit(1766352062.460:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.0.10391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2414.402805][T13645] tipc: Node identity 1e9a93c94a44, cluster identity 4711 [ 2414.464956][ T30] audit: type=1326 audit(1766352062.460:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.0.10391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7ffc0000 [ 2414.465129][T13645] tipc: Enabled bearer , priority 0 [ 2414.566615][ T30] audit: type=1326 audit(1766352062.460:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.0.10391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d8ff8df90 code=0x7ffc0000 [ 2414.598997][ T30] audit: type=1326 audit(1766352062.460:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.0.10391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d8ff8f34b code=0x7ffc0000 [ 2414.627917][T13644] tipc: Resetting bearer [ 2414.674920][ T30] audit: type=1326 audit(1766352062.460:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.0.10391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d8ff8f34b code=0x7ffc0000 [ 2414.727833][T13644] tipc: Disabling bearer [ 2414.733859][ T4602] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2414.762011][ T4602] usb 1-1: USB disconnect, device number 67 [ 2414.898068][T13654] Cannot find add_set index 0 as target [ 2416.479312][ T5913] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2416.646152][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 2416.665258][ T5913] usb 6-1: config 1 has an invalid interface number: 222 but max is 0 [ 2416.676135][ T5913] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2416.685101][ T5913] usb 6-1: config 1 has no interface number 0 [ 2416.700471][ T5913] usb 6-1: too many endpoints for config 1 interface 222 altsetting 245: 158, using maximum allowed: 30 [ 2416.729500][ T5913] usb 6-1: config 1 interface 222 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 2416.761779][ T5913] usb 6-1: config 1 interface 222 has no altsetting 0 [ 2416.794646][ T5913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2416.816228][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.850771][ T5913] usb 6-1: Product: syz [ 2416.862676][ T5913] usb 6-1: Manufacturer: syz [ 2416.873690][ T5913] usb 6-1: SerialNumber: syz [ 2417.238417][T13676] netlink: 108 bytes leftover after parsing attributes in process `syz.5.10405'. [ 2417.488313][T25592] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2417.666299][T25592] usb 1-1: Using ep0 maxpacket: 8 [ 2417.696216][T25592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2417.743096][T25592] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 2417.783776][T25592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.814244][T25592] usb 1-1: Product: syz [ 2417.830405][T25592] usb 1-1: Manufacturer: syz [ 2417.848781][T25592] usb 1-1: SerialNumber: syz [ 2417.879011][T25592] usb 1-1: config 0 descriptor?? [ 2418.119470][ T4602] usb 1-1: USB disconnect, device number 68 [ 2420.215033][ T5913] usb 6-1: USB disconnect, device number 57 [ 2420.369493][T13703] fuse: Bad value for 'fd' [ 2421.066651][T10912] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2421.226154][T10912] usb 1-1: Using ep0 maxpacket: 16 [ 2421.253254][T10912] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 2421.305410][T10912] usb 1-1: config 0 has no interface number 0 [ 2421.324836][T10912] usb 1-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 2421.340088][T10912] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 2421.353869][T10912] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2421.396214][T10912] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 2421.405699][T10912] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2421.415138][T10912] usb 1-1: Product: syz [ 2421.488960][T10912] usb 1-1: SerialNumber: syz [ 2421.586301][T10912] usb 1-1: config 0 descriptor?? [ 2421.876791][T13707] syzkaller1: entered promiscuous mode [ 2421.888479][T13707] syzkaller1: entered allmulticast mode [ 2422.030314][T10912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2422.059771][T10912] usb 1-1: invalid MIDI out EP 0 [ 2422.152290][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10419'. [ 2422.162137][T13738] netlink: 'syz.9.10419': attribute type 30 has an invalid length. [ 2422.180625][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10419'. [ 2422.197419][T13738] tipc: Started in network mode [ 2422.202664][T13738] tipc: Node identity 36a879b43c7a, cluster identity 4711 [ 2422.210889][T13738] tipc: Enabled bearer , priority 0 [ 2422.217008][T10912] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 2422.273121][T10912] usb 1-1: USB disconnect, device number 69 [ 2422.360990][T27435] udevd[27435]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2423.331233][T31942] tipc: Node number set to 181565876 [ 2423.686758][T25592] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2423.770086][T10912] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2423.856442][T25592] usb 9-1: Using ep0 maxpacket: 16 [ 2423.867473][T25592] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2423.881522][T25592] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.890691][T25592] usb 9-1: Product: syz [ 2423.895024][T25592] usb 9-1: Manufacturer: syz [ 2423.900170][T25592] usb 9-1: SerialNumber: syz [ 2423.919114][T25592] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2423.925716][T25592] r8152-cfgselector 9-1: config 0 descriptor?? [ 2423.949722][ T5913] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2423.968335][T10912] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2423.978836][T10912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2423.994879][T10912] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2424.008827][T10912] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2424.018176][T10912] usb 6-1: Manufacturer: syz [ 2424.030244][T10912] usb 6-1: config 0 descriptor?? [ 2424.119067][T10912] rc_core: IR keymap rc-hauppauge not found [ 2424.125253][T10912] Registered IR keymap rc-empty [ 2424.131300][T10912] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2424.166503][T10912] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input205 [ 2424.240500][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 2424.259303][T10912] usb 6-1: USB disconnect, device number 58 [ 2424.891371][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2424.891388][ T30] audit: type=1326 audit(1766352073.410:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13781 comm="syz.5.10431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48ed78f749 code=0x0 [ 2424.961159][T10912] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 2425.136286][T10912] usb 10-1: Using ep0 maxpacket: 8 [ 2425.144109][T10912] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 2425.153215][T10912] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2425.164899][T10912] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2425.179774][T10912] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2425.191063][T10912] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2425.206837][T10912] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2425.216730][T10912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.248722][ T4602] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2425.406226][ T4602] usb 6-1: Using ep0 maxpacket: 16 [ 2425.419078][ T4602] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 2425.434755][ T4602] usb 6-1: config 0 has no interface number 0 [ 2425.438402][T10912] usb 10-1: usb_control_msg returned -32 [ 2425.456370][ T4602] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2425.476413][T10912] usbtmc 10-1:16.0: can't read capabilities [ 2425.482474][ T4602] usb 6-1: config 0 interface 8 has no altsetting 0 [ 2425.498620][ T4602] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 2425.519583][ T4602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.531673][ T4602] usb 6-1: config 0 descriptor?? [ 2426.209170][T13802] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 2426.289525][T13807] pimreg: entered allmulticast mode [ 2426.350286][T31942] usb 10-1: USB disconnect, device number 84 [ 2426.409952][T11876] r8152-cfgselector 9-1: USB disconnect, device number 32 [ 2426.488072][T13809] pimreg: left allmulticast mode [ 2427.897019][ T4602] usbhid 6-1:0.8: can't add hid device: -71 [ 2427.908061][ T4602] usbhid 6-1:0.8: probe with driver usbhid failed with error -71 [ 2427.969131][ T4602] usb 6-1: USB disconnect, device number 59 [ 2428.422574][T13847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10448'. [ 2428.717356][ T4602] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2428.897148][ T4602] usb 1-1: Using ep0 maxpacket: 32 [ 2428.913009][ T4602] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2428.954801][ T4602] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 2428.994513][ T4602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2429.025110][ T4602] usb 1-1: Product: syz [ 2429.045585][ T4602] usb 1-1: Manufacturer: syz [ 2429.064884][ T4602] usb 1-1: SerialNumber: syz [ 2429.088986][ T4602] usb 1-1: config 0 descriptor?? [ 2429.114132][ T4602] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 2429.309287][ T4602] gspca_sunplus: reg_r err -32 [ 2430.306994][ T4602] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 2430.778430][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10457'. [ 2430.791740][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10457'. [ 2431.668964][T25592] usb 1-1: USB disconnect, device number 71 [ 2432.646310][T13913] netlink: 111 bytes leftover after parsing attributes in process `syz.6.10462'. [ 2432.880135][T13918] netlink: 64 bytes leftover after parsing attributes in process `syz.9.10463'. [ 2433.276964][T25592] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2433.376611][T13922] input: syz1 as /devices/virtual/input/input206 [ 2433.436503][T25592] usb 6-1: Using ep0 maxpacket: 16 [ 2433.445340][T25592] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 2433.531486][T25592] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2433.556446][T25592] usb 6-1: Product: syz [ 2433.567165][T25592] usb 6-1: Manufacturer: syz [ 2433.572637][T25592] usb 6-1: SerialNumber: syz [ 2433.602748][T25592] usb 6-1: config 0 descriptor?? [ 2433.635549][T25592] hub 6-1:0.0: bad descriptor, ignoring hub [ 2433.646708][T25592] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2433.956631][ T5913] usb 6-1: USB disconnect, device number 60 [ 2434.451294][T13951] netlink: 104 bytes leftover after parsing attributes in process `syz.8.10472'. [ 2434.616182][ T5913] usb 10-1: new full-speed USB device number 85 using dummy_hcd [ 2434.666328][T25592] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2434.746141][T31942] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2434.789056][ T5913] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2434.804551][ T5913] usb 10-1: not running at top speed; connect to a high speed hub [ 2434.814903][ T5913] usb 10-1: config 7 has an invalid interface number: 178 but max is 0 [ 2434.823465][T25592] usb 6-1: device descriptor read/64, error -71 [ 2434.833478][ T5913] usb 10-1: config 7 has no interface number 0 [ 2434.840598][ T5913] usb 10-1: config 7 interface 178 altsetting 247 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 2434.855641][ T5913] usb 10-1: config 7 interface 178 has no altsetting 0 [ 2434.868083][ T5913] usb 10-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=50.c2 [ 2434.893596][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.906196][T31942] usb 1-1: Using ep0 maxpacket: 32 [ 2434.914730][ T5913] usb 10-1: Product: syz [ 2434.916922][T31942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2434.929289][ T5913] usb 10-1: Manufacturer: syz [ 2434.933709][T31942] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2434.935606][ T5913] usb 10-1: SerialNumber: syz [ 2434.946432][T31942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.956870][T31942] usb 1-1: Product: syz [ 2434.961080][T31942] usb 1-1: Manufacturer: syz [ 2434.965695][T31942] usb 1-1: SerialNumber: syz [ 2434.973251][T31942] usb 1-1: config 0 descriptor?? [ 2434.981606][T31942] usb 1-1: bad CDC descriptors [ 2434.988000][T31942] usb 1-1: unsupported MDLM descriptors [ 2435.076323][T25592] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2435.171976][ T5913] usb 10-1: Could not find all expected endpoints [ 2435.185980][T31942] usb 1-1: USB disconnect, device number 72 [ 2435.208096][ T5913] usb 10-1: USB disconnect, device number 85 [ 2435.226928][T25592] usb 6-1: device descriptor read/64, error -71 [ 2435.337605][T25592] usb usb6-port1: attempt power cycle [ 2435.696246][T25592] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2435.726696][T25592] usb 6-1: device descriptor read/8, error -71 [ 2435.986661][T25592] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2436.027043][T25592] usb 6-1: device descriptor read/8, error -71 [ 2436.148105][T25592] usb usb6-port1: unable to enumerate USB device [ 2436.466910][T25592] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 2436.629237][T25592] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 2436.649034][T25592] usb 1-1: config 8 has no interface number 0 [ 2436.662015][T25592] usb 1-1: config 8 interface 101 has no altsetting 0 [ 2436.679320][T25592] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 2436.696876][T25592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.942668][ T30] audit: type=1326 audit(1766352085.460:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13973 comm="syz.0.10480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x0 [ 2437.161987][T13985] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10483'. [ 2437.172520][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10483'. [ 2437.626739][T14004] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2437.705959][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10490'. [ 2437.779772][T14011] netlink: 'syz.6.10491': attribute type 4 has an invalid length. [ 2437.821020][T14011] netlink: 17 bytes leftover after parsing attributes in process `syz.6.10491'. [ 2438.273630][T14022] syzkaller0: entered promiscuous mode [ 2438.285460][T14022] syzkaller0: entered allmulticast mode [ 2438.598739][T14026] sctp: [Deprecated]: syz.8.10495 (pid 14026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2438.598739][T14026] Use struct sctp_sack_info instead [ 2438.754694][T14036] fuse: Bad value for 'fd' [ 2439.079545][T25592] usb 1-1: string descriptor 0 read error: -71 [ 2439.110962][T25592] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 2439.155634][T25592] gspca_sunplus: reg_w_riv err -71 [ 2439.182657][T25592] sunplus 1-1:8.101: probe with driver sunplus failed with error -71 [ 2439.216653][T25592] usb 1-1: USB disconnect, device number 73 [ 2439.223823][T14050] loop5: detected capacity change from 0 to 7 [ 2439.244362][T14050] Dev loop5: unable to read RDB block 7 [ 2439.264738][T14050] loop5: AHDI p1 p2 p3 [ 2439.275288][T14050] loop5: partition table partially beyond EOD, truncated [ 2439.296571][T14050] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2439.319860][T14050] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2440.731553][ T30] audit: type=1326 audit(1766352089.250:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.5.10506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ed78f749 code=0x7fc00000 [ 2441.096253][ T5913] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2441.236157][ T5913] usb 9-1: device descriptor read/64, error -71 [ 2441.370369][T14082] FAULT_INJECTION: forcing a failure. [ 2441.370369][T14082] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.383896][T14082] CPU: 0 UID: 0 PID: 14082 Comm: syz.5.10512 Tainted: G L syzkaller #0 PREEMPT(full) [ 2441.383914][T14082] Tainted: [L]=SOFTLOCKUP [ 2441.383918][T14082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2441.383925][T14082] Call Trace: [ 2441.383930][T14082] [ 2441.383936][T14082] dump_stack_lvl+0xe8/0x150 [ 2441.383953][T14082] should_fail_ex+0x414/0x560 [ 2441.383971][T14082] should_failslab+0xa8/0x100 [ 2441.383984][T14082] __kmalloc_noprof+0xdf/0x800 [ 2441.383994][T14082] ? kfree+0x4d/0x660 [ 2441.384007][T14082] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2441.384022][T14082] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2441.384036][T14082] ? tomoyo_domain+0xd8/0x130 [ 2441.384051][T14082] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2441.384061][T14082] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2441.384073][T14082] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2441.384083][T14082] ? __lock_acquire+0x6b6/0x2cf0 [ 2441.384101][T14082] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2441.384125][T14082] ? __fget_files+0x2a/0x420 [ 2441.384146][T14082] ? __fget_files+0x2a/0x420 [ 2441.384165][T14082] ? __fget_files+0x3a0/0x420 [ 2441.384184][T14082] ? __fget_files+0x2a/0x420 [ 2441.384200][T14082] security_file_ioctl+0xcb/0x2d0 [ 2441.384211][T14082] __se_sys_ioctl+0x47/0x170 [ 2441.384227][T14082] do_syscall_64+0xec/0xf80 [ 2441.384237][T14082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2441.384247][T14082] ? trace_irq_disable+0x37/0x100 [ 2441.384259][T14082] ? clear_bhb_loop+0x60/0xb0 [ 2441.384271][T14082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2441.384281][T14082] RIP: 0033:0x7f48ed78f749 [ 2441.384292][T14082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2441.384301][T14082] RSP: 002b:00007f48ee5ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2441.384313][T14082] RAX: ffffffffffffffda RBX: 00007f48ed9e5fa0 RCX: 00007f48ed78f749 [ 2441.384321][T14082] RDX: 0000200000000080 RSI: 000000004008ae8a RDI: 0000000000000007 [ 2441.384328][T14082] RBP: 00007f48ee5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2441.384334][T14082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2441.384341][T14082] R13: 00007f48ed9e6038 R14: 00007f48ed9e5fa0 R15: 00007f48edb0fa28 [ 2441.384356][T14082] [ 2441.384368][T14082] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2441.623126][ T5913] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2441.796264][ T5913] usb 9-1: device descriptor read/64, error -71 [ 2441.836626][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10513'. [ 2441.927348][ T5913] usb usb9-port1: attempt power cycle [ 2442.286149][ T5913] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2442.316833][ T5913] usb 9-1: device descriptor read/8, error -71 [ 2442.487564][T14098] loop5: detected capacity change from 0 to 7 [ 2442.495325][T27436] Dev loop5: unable to read RDB block 7 [ 2442.501212][T27436] loop5: AHDI p1 p2 p3 [ 2442.525111][T27436] loop5: partition table partially beyond EOD, truncated [ 2442.533769][T22503] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 2442.558467][T27436] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2442.590508][T27436] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2442.606384][ T5913] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2442.667430][T14098] Dev loop5: unable to read RDB block 7 [ 2442.673023][T14098] loop5: AHDI p1 p2 p3 [ 2442.679690][T14098] loop5: partition table partially beyond EOD, truncated [ 2442.683620][ T5913] usb 9-1: device descriptor read/8, error -71 [ 2442.693897][T14098] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2442.735138][T14098] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2442.886587][ T5913] usb usb9-port1: unable to enumerate USB device [ 2444.106006][T14118] kvm: pic: level sensitive irq not supported [ 2444.106235][T14118] picdev_read: 77 callbacks suppressed [ 2444.106251][T14118] kvm: pic: non byte read [ 2444.132551][T14118] kvm: pic: level sensitive irq not supported [ 2444.132616][T14118] kvm: pic: non byte read [ 2444.148771][T14118] Lens A: ================= START STATUS ================= [ 2444.176034][T14118] Lens A: Focus, Absolute: 0 [ 2444.228129][T14118] Lens A: ================== END STATUS ================== [ 2444.707575][T22503] bond1 (unregistering): Released all slaves [ 2445.572617][T14136] FAULT_INJECTION: forcing a failure. [ 2445.572617][T14136] name failslab, interval 1, probability 0, space 0, times 0 [ 2445.624232][T22503] bond0 (unregistering): Released all slaves [ 2445.634905][T14136] CPU: 1 UID: 0 PID: 14136 Comm: syz.8.10523 Tainted: G L syzkaller #0 PREEMPT(full) [ 2445.634935][T14136] Tainted: [L]=SOFTLOCKUP [ 2445.634942][T14136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2445.634952][T14136] Call Trace: [ 2445.634960][T14136] [ 2445.634968][T14136] dump_stack_lvl+0xe8/0x150 [ 2445.634996][T14136] should_fail_ex+0x414/0x560 [ 2445.635026][T14136] should_failslab+0xa8/0x100 [ 2445.635058][T14136] __kmalloc_noprof+0xdf/0x800 [ 2445.635076][T14136] ? tomoyo_encode+0x28b/0x550 [ 2445.635102][T14136] tomoyo_encode+0x28b/0x550 [ 2445.635128][T14136] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2445.635152][T14136] ? tomoyo_domain+0xd8/0x130 [ 2445.635178][T14136] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2445.635198][T14136] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2445.635219][T14136] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2445.635237][T14136] ? __lock_acquire+0x6b6/0x2cf0 [ 2445.635267][T14136] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2445.635302][T14136] ? __fget_files+0x2a/0x420 [ 2445.635324][T14136] ? __fget_files+0x2a/0x420 [ 2445.635342][T14136] ? __fget_files+0x3a0/0x420 [ 2445.635358][T14136] ? __fget_files+0x2a/0x420 [ 2445.635379][T14136] security_file_ioctl+0xcb/0x2d0 [ 2445.635399][T14136] __se_sys_ioctl+0x47/0x170 [ 2445.635425][T14136] do_syscall_64+0xec/0xf80 [ 2445.635443][T14136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2445.635458][T14136] ? trace_irq_disable+0x37/0x100 [ 2445.635479][T14136] ? clear_bhb_loop+0x60/0xb0 [ 2445.635499][T14136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2445.635515][T14136] RIP: 0033:0x7f858af8f749 [ 2445.635531][T14136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2445.635546][T14136] RSP: 002b:00007f858bdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2445.635566][T14136] RAX: ffffffffffffffda RBX: 00007f858b1e5fa0 RCX: 00007f858af8f749 [ 2445.635576][T14136] RDX: 0000200000000080 RSI: 000000004008ae8a RDI: 0000000000000007 [ 2445.635583][T14136] RBP: 00007f858bdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2445.635590][T14136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2445.635596][T14136] R13: 00007f858b1e6038 R14: 00007f858b1e5fa0 R15: 00007f858b30fa28 [ 2445.635612][T14136] [ 2445.635625][T14136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2446.293865][T22503] bond2 (unregistering): Released all slaves [ 2446.553840][T14150] syz_tun: entered allmulticast mode [ 2446.706729][T14148] syz_tun: left allmulticast mode [ 2447.386760][T22503] hsr_slave_0: left promiscuous mode [ 2447.401607][T22503] hsr_slave_1: left promiscuous mode [ 2447.421348][T22503] batman_adv: batadv0: Removing interface: macvtap1 [ 2447.474012][ T8943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2447.485441][T14168] netlink: 164 bytes leftover after parsing attributes in process `syz.8.10533'. [ 2447.507779][ T8943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2447.520499][ T8943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2447.537135][T14168] netlink: 12296 bytes leftover after parsing attributes in process `syz.8.10533'. [ 2447.548456][ T8943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2447.566508][ T8943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2447.583909][T14168] netlink: 164 bytes leftover after parsing attributes in process `syz.8.10533'. [ 2448.026931][T11876] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2448.238420][T11876] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2448.282969][T11876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2448.382252][T11876] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2448.401789][T11876] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2448.432212][T11876] usb 1-1: Manufacturer: syz [ 2448.444236][T11876] usb 1-1: config 0 descriptor?? [ 2448.569194][T14184] FAULT_INJECTION: forcing a failure. [ 2448.569194][T14184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2448.602621][T14184] CPU: 0 UID: 0 PID: 14184 Comm: syz.5.10538 Tainted: G L syzkaller #0 PREEMPT(full) [ 2448.602649][T14184] Tainted: [L]=SOFTLOCKUP [ 2448.602656][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2448.602666][T14184] Call Trace: [ 2448.602674][T14184] [ 2448.602682][T14184] dump_stack_lvl+0xe8/0x150 [ 2448.602708][T14184] should_fail_ex+0x414/0x560 [ 2448.602735][T14184] _copy_from_user+0x2d/0xb0 [ 2448.602755][T14184] kvm_arch_vcpu_ioctl+0xc33/0x2a70 [ 2448.602781][T14184] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 2448.602813][T14184] ? unwind_next_frame+0xa5/0x23d0 [ 2448.602836][T14184] ? is_bpf_text_address+0x26/0x2b0 [ 2448.602870][T14184] ? is_bpf_text_address+0x26/0x2b0 [ 2448.602899][T14184] ? is_bpf_text_address+0x292/0x2b0 [ 2448.602921][T14184] ? is_bpf_text_address+0x26/0x2b0 [ 2448.602948][T14184] ? kernel_text_address+0xa5/0xe0 [ 2448.602973][T14184] ? __kernel_text_address+0xd/0x40 [ 2448.602994][T14184] ? unwind_get_return_address+0x4d/0x90 [ 2448.603014][T14184] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2448.603039][T14184] ? arch_stack_walk+0xfc/0x150 [ 2448.603070][T14184] ? stack_trace_save+0x9c/0xe0 [ 2448.603094][T14184] ? __pfx_stack_trace_save+0x10/0x10 [ 2448.603121][T14184] ? __lock_acquire+0x6b6/0x2cf0 [ 2448.603144][T14184] ? kasan_save_track+0x4f/0x80 [ 2448.603161][T14184] ? kasan_save_track+0x3e/0x80 [ 2448.603177][T14184] ? kasan_save_free_info+0x46/0x50 [ 2448.603198][T14184] ? __kasan_slab_free+0x5c/0x80 [ 2448.603215][T14184] ? kfree+0x1c0/0x660 [ 2448.603235][T14184] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 2448.603253][T14184] ? security_file_ioctl+0xcb/0x2d0 [ 2448.603269][T14184] ? __se_sys_ioctl+0x47/0x170 [ 2448.603291][T14184] ? do_syscall_64+0xec/0xf80 [ 2448.603308][T14184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2448.603338][T14184] ? __mutex_trylock_common+0x153/0x260 [ 2448.603363][T14184] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2448.603393][T14184] ? rcu_is_watching+0x15/0xb0 [ 2448.603415][T14184] ? trace_contention_end+0x39/0x100 [ 2448.603437][T14184] ? __mutex_lock+0x335/0x1350 [ 2448.603463][T14184] ? kasan_quarantine_put+0xbb/0x1f0 [ 2448.603484][T14184] ? kvm_vcpu_ioctl+0x269/0xed0 [ 2448.603510][T14184] ? __pfx___mutex_lock+0x10/0x10 [ 2448.603530][T14184] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2448.603552][T14184] ? do_vfs_ioctl+0xbe8/0x1430 [ 2448.603572][T14184] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2448.603593][T14184] kvm_vcpu_ioctl+0x78b/0xed0 [ 2448.603621][T14184] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2448.603641][T14184] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2448.603679][T14184] ? __fget_files+0x2a/0x420 [ 2448.603703][T14184] ? __fget_files+0x2a/0x420 [ 2448.603722][T14184] ? __fget_files+0x3a0/0x420 [ 2448.603741][T14184] ? __fget_files+0x2a/0x420 [ 2448.603765][T14184] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2448.603784][T14184] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2448.603814][T14184] __se_sys_ioctl+0xfc/0x170 [ 2448.603841][T14184] do_syscall_64+0xec/0xf80 [ 2448.603858][T14184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2448.603875][T14184] ? trace_irq_disable+0x37/0x100 [ 2448.603896][T14184] ? clear_bhb_loop+0x60/0xb0 [ 2448.603917][T14184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2448.603935][T14184] RIP: 0033:0x7f48ed78f749 [ 2448.603952][T14184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2448.603967][T14184] RSP: 002b:00007f48ee5ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2448.603986][T14184] RAX: ffffffffffffffda RBX: 00007f48ed9e5fa0 RCX: 00007f48ed78f749 [ 2448.603999][T14184] RDX: 0000200000000080 RSI: 000000004008ae8a RDI: 0000000000000007 [ 2448.604011][T14184] RBP: 00007f48ee5ce090 R08: 0000000000000000 R09: 0000000000000000 [ 2448.604022][T14184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2448.604034][T14184] R13: 00007f48ed9e6038 R14: 00007f48ed9e5fa0 R15: 00007f48edb0fa28 [ 2448.604062][T14184] [ 2449.136589][T14173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2449.157767][T14173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2449.228501][T11876] rc_core: IR keymap rc-hauppauge not found [ 2449.234485][T11876] Registered IR keymap rc-empty [ 2449.241112][T11876] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2449.253677][T11876] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input207 [ 2449.373305][T14190] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10540'. [ 2449.520661][ C0] igorplugusb 1-1:0.0: receive overflow, at least 13 lost [ 2449.684488][ T8943] Bluetooth: hci0: command tx timeout [ 2449.722614][T25592] usb 1-1: USB disconnect, device number 74 [ 2449.917238][T14197] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10541'. [ 2450.016209][T10912] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2450.167393][T10912] usb 9-1: Using ep0 maxpacket: 8 [ 2450.191042][T10912] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2450.210789][T10912] usb 9-1: config 5 has an invalid interface number: 212 but max is 0 [ 2450.219394][T10912] usb 9-1: config 5 has an invalid descriptor of length 119, skipping remainder of the config [ 2450.231731][T10912] usb 9-1: config 5 has no interface number 0 [ 2450.238852][T10912] usb 9-1: config 5 interface 212 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2450.266316][T10912] usb 9-1: config 5 interface 212 has no altsetting 0 [ 2450.341058][T14200] kvm: user requested TSC rate below hardware speed [ 2450.370679][T10912] usb 9-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice=3a.5e [ 2450.380111][T10912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.389142][T10912] usb 9-1: Product: syz [ 2450.395152][T10912] usb 9-1: Manufacturer: syz [ 2450.405616][T10912] usb 9-1: SerialNumber: syz [ 2450.458866][T14195] @: renamed from vlan0 (while UP) [ 2451.423264][ T7973] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2451.498054][T14171] chnl_net:caif_netlink_parms(): no params data found [ 2451.756334][ T8943] Bluetooth: hci0: command tx timeout [ 2451.816310][T14223] : renamed from bridge_slave_0 (while UP) [ 2451.872547][ T7973] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2451.962951][T14171] bridge0: port 1(bridge_slave_0) entered blocking state [ 2451.992717][T14171] bridge0: port 1(bridge_slave_0) entered disabled state [ 2452.019873][T14171] bridge_slave_0: entered allmulticast mode [ 2452.053017][T14171] bridge_slave_0: entered promiscuous mode [ 2452.163142][ T7973] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.244189][T14171] bridge0: port 2(bridge_slave_1) entered blocking state [ 2452.303519][T14171] bridge0: port 2(bridge_slave_1) entered disabled state [ 2452.360606][T14171] bridge_slave_1: entered allmulticast mode [ 2452.412652][T14171] bridge_slave_1: entered promiscuous mode [ 2452.573599][T10912] usb 9-1: USB disconnect, device number 37 [ 2452.672828][T27436] udevd[27436]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:5.212/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2453.009166][ T7973] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2453.100297][T14171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2453.178801][T14171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2453.486748][T14241] fuse: Unknown parameter 'rootÎDhýmode' [ 2453.532107][T14253] fuse: Bad value for 'user_id' [ 2453.576495][T14253] fuse: Bad value for 'user_id' [ 2453.615046][T14171] team0: Port device team_slave_0 added [ 2453.748478][T14171] team0: Port device team_slave_1 added [ 2453.846430][ T8943] Bluetooth: hci0: command tx timeout [ 2454.119274][T14171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2454.146650][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2454.277879][T14171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2454.396974][T14171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2454.418363][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2454.449356][T14171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2454.466487][T11876] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2454.642659][T11876] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2454.660112][T11876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.686863][T11876] usb 1-1: Product: syz [ 2454.691322][T11876] usb 1-1: Manufacturer: syz [ 2454.701377][T11876] usb 1-1: SerialNumber: syz [ 2454.812351][ T7973] bridge_slave_1: left allmulticast mode [ 2454.824505][ T7973] bridge_slave_1: left promiscuous mode [ 2454.841541][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 2454.872070][ T7973] bridge_slave_0: left allmulticast mode [ 2454.888828][ T7973] bridge_slave_0: left promiscuous mode [ 2454.900621][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 2455.089488][T14279] FAULT_INJECTION: forcing a failure. [ 2455.089488][T14279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2455.127149][T11876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2455.144698][T14265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2455.169237][T14279] CPU: 0 UID: 0 PID: 14279 Comm: syz.8.10558 Tainted: G L syzkaller #0 PREEMPT(full) [ 2455.169255][T14279] Tainted: [L]=SOFTLOCKUP [ 2455.169260][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2455.169266][T14279] Call Trace: [ 2455.169271][T14279] [ 2455.169277][T14279] dump_stack_lvl+0xe8/0x150 [ 2455.169294][T14279] should_fail_ex+0x414/0x560 [ 2455.169311][T14279] _copy_from_user+0x2d/0xb0 [ 2455.169324][T14279] __sys_bpf+0x1e3/0x860 [ 2455.169339][T14279] ? __pfx___sys_bpf+0x10/0x10 [ 2455.169359][T14279] ? ksys_write+0x22a/0x250 [ 2455.169370][T14279] ? __pfx_ksys_write+0x10/0x10 [ 2455.169383][T14279] __x64_sys_bpf+0x7c/0x90 [ 2455.169395][T14279] do_syscall_64+0xec/0xf80 [ 2455.169406][T14279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2455.169416][T14279] ? trace_irq_disable+0x37/0x100 [ 2455.169428][T14279] ? clear_bhb_loop+0x60/0xb0 [ 2455.169440][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2455.169450][T14279] RIP: 0033:0x7f858af8f749 [ 2455.169460][T14279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2455.169469][T14279] RSP: 002b:00007f858bdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2455.169481][T14279] RAX: ffffffffffffffda RBX: 00007f858b1e5fa0 RCX: 00007f858af8f749 [ 2455.169489][T14279] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000009 [ 2455.169496][T14279] RBP: 00007f858bdd5090 R08: 0000000000000000 R09: 0000000000000000 [ 2455.169502][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2455.169508][T14279] R13: 00007f858b1e6038 R14: 00007f858b1e5fa0 R15: 00007f858b30fa28 [ 2455.169523][T14279] [ 2455.169729][T11876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2455.246985][T14265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2455.376508][T14280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2455.416922][T14280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2455.728666][T11876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2455.747619][T11876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2455.776521][T11876] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2455.799801][T11876] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 2455.877436][T11876] usb 1-1: USB disconnect, device number 75 [ 2455.906210][T31942] usb 9-1: new low-speed USB device number 38 using dummy_hcd [ 2455.926927][ T8943] Bluetooth: hci0: command tx timeout [ 2456.083490][T31942] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2456.093222][T31942] usb 9-1: config 4 has an invalid interface number: 146 but max is 0 [ 2456.115859][T31942] usb 9-1: config 4 has no interface number 0 [ 2456.123362][T31942] usb 9-1: config 4 interface 146 has no altsetting 0 [ 2456.523105][T14294] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10561'. [ 2456.754529][ T7973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2456.783390][ T7973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2456.802340][ T7973] bond0 (unregistering): Released all slaves [ 2456.832182][T14171] hsr_slave_0: entered promiscuous mode [ 2456.839776][T14171] hsr_slave_1: entered promiscuous mode [ 2456.851005][T14171] debugfs: 'hsr0' already exists in 'hsr' [ 2456.904531][T14171] Cannot create hsr debugfs directory [ 2456.973726][ T30] audit: type=1326 audit(1766352105.490:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14284 comm="syz.5.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ed78f749 code=0x7fc00000 [ 2457.596473][T11011] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 2457.604373][ T7973] hsr_slave_0: left promiscuous mode [ 2457.618521][ T7973] hsr_slave_1: left promiscuous mode [ 2457.625092][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2457.654832][ T7973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2457.677335][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2457.684802][ T7973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2457.751280][ T7973] veth1_macvtap: left promiscuous mode [ 2457.768629][T11011] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 2457.776421][ T7973] veth0_macvtap: left promiscuous mode [ 2457.793579][T11011] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2457.793924][ T7973] veth1_vlan: left promiscuous mode [ 2457.823299][ T7973] veth0_vlan: left promiscuous mode [ 2457.831027][T11011] usb 10-1: config 0 descriptor?? [ 2458.420507][T11011] ath6kl: Failed to read usb control message: -32 [ 2458.439347][T11011] ath6kl: Unable to read the bmi data from the device: -32 [ 2458.456099][T11011] ath6kl: Unable to recv target info: -32 [ 2458.468296][T11011] ath6kl: Failed to init ath6kl core: -32 [ 2458.484040][T11011] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 2458.652173][T31942] usb 9-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 2458.668235][T31942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2458.695557][T31942] usb 9-1: can't set config #4, error -71 [ 2458.719299][T31942] usb 9-1: USB disconnect, device number 38 [ 2459.149424][T31942] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2459.240896][ T7973] team0 (unregistering): Port device team_slave_1 removed [ 2459.303775][T31942] usb 9-1: device descriptor read/64, error -71 [ 2459.311799][ T7973] team0 (unregistering): Port device team_slave_0 removed [ 2459.556260][T31942] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2459.696149][T31942] usb 9-1: device descriptor read/64, error -71 [ 2459.820771][T31942] usb usb9-port1: attempt power cycle [ 2460.178263][T31942] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2460.229109][T31942] usb 9-1: device descriptor read/8, error -71 [ 2460.350292][T11876] usb 10-1: USB disconnect, device number 86 [ 2460.458964][T14344] FAULT_INJECTION: forcing a failure. [ 2460.458964][T14344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2460.475248][T14344] CPU: 0 UID: 0 PID: 14344 Comm: syz.9.10568 Tainted: G L syzkaller #0 PREEMPT(full) [ 2460.475273][T14344] Tainted: [L]=SOFTLOCKUP [ 2460.475278][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2460.475286][T14344] Call Trace: [ 2460.475293][T14344] [ 2460.475300][T14344] dump_stack_lvl+0xe8/0x150 [ 2460.475322][T14344] should_fail_ex+0x414/0x560 [ 2460.475346][T14344] _copy_to_user+0x31/0xb0 [ 2460.475364][T14344] simple_read_from_buffer+0xe1/0x170 [ 2460.475384][T14344] proc_fail_nth_read+0x1b3/0x220 [ 2460.475401][T14344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2460.475417][T14344] ? rw_verify_area+0x2a6/0x4d0 [ 2460.475437][T14344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2460.475452][T14344] vfs_read+0x200/0xa30 [ 2460.475463][T14344] ? fdget_pos+0x247/0x320 [ 2460.475483][T14344] ? __pfx___mutex_lock+0x10/0x10 [ 2460.475498][T14344] ? __pfx_vfs_read+0x10/0x10 [ 2460.475512][T14344] ? __fget_files+0x2a/0x420 [ 2460.475531][T14344] ? __fget_files+0x3a0/0x420 [ 2460.475546][T14344] ? __fget_files+0x2a/0x420 [ 2460.475568][T14344] ksys_read+0x145/0x250 [ 2460.475582][T14344] ? __pfx_ksys_read+0x10/0x10 [ 2460.475613][T14344] do_syscall_64+0xec/0xf80 [ 2460.475629][T14344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2460.475641][T14344] ? trace_irq_disable+0x37/0x100 [ 2460.475658][T14344] ? clear_bhb_loop+0x60/0xb0 [ 2460.475675][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2460.475688][T14344] RIP: 0033:0x7fd2b498e15c [ 2460.475701][T14344] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2460.475712][T14344] RSP: 002b:00007fd2b5774030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2460.475728][T14344] RAX: ffffffffffffffda RBX: 00007fd2b4be5fa0 RCX: 00007fd2b498e15c [ 2460.475738][T14344] RDX: 000000000000000f RSI: 00007fd2b57740a0 RDI: 0000000000000003 [ 2460.475746][T14344] RBP: 00007fd2b5774090 R08: 0000000000000000 R09: 0000000000000000 [ 2460.475754][T14344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2460.475763][T14344] R13: 00007fd2b4be6038 R14: 00007fd2b4be5fa0 R15: 00007fd2b4d0fa28 [ 2460.475785][T14344] [ 2460.699628][T31942] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2460.729353][T31942] usb 9-1: device descriptor read/8, error -71 [ 2460.836713][T31942] usb usb9-port1: unable to enumerate USB device [ 2461.774044][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10575'. [ 2461.803375][T14171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2461.988907][T14171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2462.068099][T14171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2462.109830][T14171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2462.354680][ T30] audit: type=1326 audit(1766352110.870:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8ff8f749 code=0x7fc00000 [ 2462.390746][T14399] loop8: detected capacity change from 0 to 521 [ 2463.014746][T14411] netlink: 68 bytes leftover after parsing attributes in process `syz.9.10579'. [ 2463.034235][T14411] netlink: 'syz.9.10579': attribute type 1 has an invalid length. [ 2463.057065][T14411] fuse: Bad value for 'fd' [ 2463.780801][T14422] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 2463.999881][T17834] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 2464.025102][T14171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2464.107710][T14171] 8021q: adding VLAN 0 to HW filter on device team0 [ 2464.127343][T14434] loop5: detected capacity change from 0 to 7 [ 2464.145602][T27436] Dev loop5: unable to read RDB block 7 [ 2464.145664][T22502] bridge0: port 1(bridge_slave_0) entered blocking state [ 2464.154605][T27436] loop5: unable to read partition table [ 2464.158370][T22502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2464.165462][T27436] loop5: partition table beyond EOD, truncated [ 2464.198211][T14434] Dev loop5: unable to read RDB block 7 [ 2464.208558][T17834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2464.220835][T14434] loop5: unable to read partition table [ 2464.227993][T17834] usb 1-1: not running at top speed; connect to a high speed hub [ 2464.234406][T22502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2464.236726][T14434] loop5: partition table beyond EOD, [ 2464.243310][T22502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2464.259630][T17834] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 2464.269857][T17834] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 2464.293714][T17834] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 2464.310578][T14434] truncated [ 2464.324376][T14434] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2464.346943][T17834] usb 1-1: config 129 has no interface number 0 [ 2464.353245][T17834] usb 1-1: config 129 has no interface number 1 [ 2464.370182][T17834] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2464.400688][T17834] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 2464.405715][T14171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2464.456167][T17834] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 2464.485610][T17834] usb 1-1: config 129 interface 135 has no altsetting 0 [ 2464.502561][T17834] usb 1-1: config 129 interface 5 has no altsetting 0 [ 2464.526920][T17834] usb 1-1: language id specifier not provided by device, defaulting to English [ 2464.526927][T14445] loop5: detected capacity change from 0 to 7 [ 2464.527715][T14445] Dev loop5: unable to read RDB block 7 [ 2464.554870][T17834] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 2464.567403][T14171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2464.571259][T17834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2464.575122][T14445] loop5: AHDI p1 p2 p3 [ 2464.593238][T17834] usb 1-1: Manufacturer:  [ 2464.603412][T17834] usb 1-1: SerialNumber: Ჸ [ 2464.605448][T14445] loop5: partition table partially beyond EOD, truncated [ 2464.636926][T14445] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2464.649368][T14445] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2464.661037][T14171] veth0_vlan: entered promiscuous mode [ 2464.700562][T14171] veth1_vlan: entered promiscuous mode [ 2464.832472][T14171] veth0_macvtap: entered promiscuous mode [ 2464.865660][T14171] veth1_macvtap: entered promiscuous mode [ 2464.927393][T14421] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 2465.070850][T17834] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2465.082823][T14171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2465.114948][T17834] usb 1-1: MIDIStreaming interface descriptor not found [ 2465.151882][T14171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2465.195703][T17834] usb 1-1: USB disconnect, device number 76 [ 2465.274114][ T3227] udevd[3227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2465.335385][T22503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.356179][T25592] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2465.385859][T22503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.426450][T22503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.448107][T22503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.522505][T25592] usb 6-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 2465.540177][T25592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2465.558687][T25592] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2465.577135][T25592] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2465.597418][T25592] usb 6-1: Product: syz [ 2465.601703][T25592] usb 6-1: Manufacturer: syz [ 2465.616561][T14451] netlink: 'syz.8.10586': attribute type 6 has an invalid length. [ 2465.621001][T25592] usb 6-1: SerialNumber: syz [ 2465.653296][T25592] usb 6-1: config 0 descriptor?? [ 2465.667680][T17834] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2465.685258][T22502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2465.746646][T22502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2465.774693][T25592] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2465.869414][T27436] udevd[27436]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2465.895706][T17834] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2465.917173][T17834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2465.949042][T17834] usb 1-1: Product: syz [ 2465.953230][T17834] usb 1-1: Manufacturer: syz [ 2465.971440][T17834] usb 1-1: SerialNumber: syz [ 2465.998009][T17834] usb 1-1: config 0 descriptor?? [ 2466.012356][T17834] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2466.057469][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2466.121962][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2466.248590][ T30] audit: type=1326 audit(1766352114.770:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14464 comm="syz.9.10589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b498f749 code=0x7fc00000 [ 2466.571260][T14491] syzkaller0: entered promiscuous mode [ 2466.606539][T14491] syzkaller0: entered allmulticast mode [ 2467.334279][T14516] x_tables: duplicate underflow at hook 1 [ 2467.342668][T14516] x_tables: duplicate underflow at hook 1 [ 2467.348597][T14516] x_tables: duplicate underflow at hook 1 [ 2467.354662][T14516] x_tables: duplicate underflow at hook 1 [ 2467.373079][T14516] x_tables: duplicate underflow at hook 1 [ 2467.385870][T14516] x_tables: duplicate underflow at hook 1 [ 2467.401291][T14516] x_tables: duplicate underflow at hook 1 [ 2467.412808][T14516] x_tables: duplicate underflow at hook 1 [ 2467.435365][T14516] x_tables: duplicate underflow at hook 1 [ 2467.462541][T14516] x_tables: duplicate underflow at hook 1 [ 2467.494024][T31942] usb 6-1: USB disconnect, device number 65 [ 2467.515153][T14520] netlink: 64 bytes leftover after parsing attributes in process `syz.9.10594'. [ 2467.679978][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.716516][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.765915][T14527] loop9: detected capacity change from 0 to 7 [ 2467.787562][T14527] Dev loop9: unable to read RDB block 7 [ 2467.797096][T14527] loop9: unable to read partition table [ 2467.811359][T14527] loop9: partition table beyond EOD, truncated [ 2467.831483][T14527] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2468.182114][T14539] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10597'. [ 2468.280835][T31942] usb 1-1: USB disconnect, device number 77 [ 2520.966562][T11422] Bluetooth: hci3: command 0x0406 tx timeout [ 2529.120855][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.130134][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2572.162675][ T8943] Bluetooth: hci0: command 0x0406 tx timeout [ 2590.560325][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.566942][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.009245][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.015613][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2672.487008][ T5203] bridge_slave_1: left allmulticast mode [ 2672.492729][ T5203] bridge_slave_1: left promiscuous mode [ 2672.500856][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 2672.510642][ T5203] bridge_slave_0: left allmulticast mode [ 2672.517747][ T5203] bridge_slave_0: left promiscuous mode [ 2672.523564][ T5203] bridge0: port 1(bridge_slave_0) entered disabled state [ 2672.535031][ T5203] vlan3: left allmulticast mode [ 2672.540119][ T5203] veth0_to_bond: left allmulticast mode [ 2672.545704][ T5203] vlan3: left promiscuous mode [ 2672.550629][ T5203] veth0_to_bond: left promiscuous mode [ 2672.556854][ T5203] bridge2: port 2(vlan3) entered disabled state [ 2672.564875][ T5203] erspan0: left allmulticast mode [ 2672.570105][ T5203] erspan0: left promiscuous mode [ 2672.575229][ T5203] bridge2: port 1(erspan0) entered disabled state [ 2672.975194][ T5203] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2673.523786][ T5203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2673.534168][ T5203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2673.544314][ T5203] bond0 (unregistering): Released all slaves [ 2673.557251][ T5203] bond1 (unregistering): Released all slaves [ 2673.892195][ T5203] bond2 (unregistering): Released all slaves [ 2674.190188][ T5203] bond3 (unregistering): left allmulticast mode [ 2674.196921][ T5203] dummy0: left allmulticast mode [ 2674.203365][ T5203] bond3 (unregistering): (slave dummy0): Releasing active interface [ 2674.212939][ T5203] bond3 (unregistering): Released all slaves [ 2674.225145][ T5203] bond4 (unregistering): Released all slaves [ 2674.350026][ T5203] : left promiscuous mode [ 2674.431298][ T5203] tipc: Left network mode [ 2674.753864][ T5203] hsr_slave_0: left promiscuous mode [ 2674.760095][ T5203] hsr_slave_1: left promiscuous mode [ 2674.765861][ T5203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2674.791515][ T5203] pim6reg9 (unregistering): left allmulticast mode [ 2675.343765][ T5203] team_slave_1 (unregistering): left promiscuous mode [ 2675.351524][ T5203] team0 (unregistering): Port device team_slave_1 removed [ 2675.415935][ T5203] team_slave_0 (unregistering): left promiscuous mode [ 2675.423768][ T5203] team0 (unregistering): Port device team_slave_0 removed [ 2676.507922][ T5203] IPVS: stop unused estimator thread 0... [ 2713.441884][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.448953][ T1297] ieee802154 phy1 wpan1: encryption failed: -22