last executing test programs: 13m52.484335177s ago: executing program 0 (id=1207): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0xf9, 0x1, @vifc_lcl_addr=@multicast2, @local}, 0x10) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x40, 0x4, 0x1b, {0x1b, 0xe, "8ef8be317932c4677a6642708c7f6681069e5006af77800888"}}, &(0x7f0000000180)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "02e691b89c385e2111c05215fb95f6376168b1ec06a25686f1e168a27b093a421e1a7432fc266fee28490cf3be5f29c6920d3905ad7b075519d27d07c62ebd2741898d1ac36533020e68129079048a40e47c1a4d3ca224bf673c382c88b499709d205c09a42550a9b395cabe0976347b95834c432e1e805de60553"}}, &(0x7f0000000240)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0xc, "f7e1b623"}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_012={0x1, 0x0, 0xb, "e5"}, @local=@item_012={0x1, 0x2, 0xa, "0e"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0xa, "f159c479"}, @local=@item_4={0x3, 0x2, 0x1, "d427423a"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd726, 0x7, 0x1, {0x22, 0x69a}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x14, 0x14, "e6e98ef46c77a3cec121726e097d4b404433700c"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0x82, "03467ee24f36232cbb6ace584f57fb1c0107d89f1acc20382659cd755455c53f554b04707313b4dc2fb510f000f904a4ba59631fa24996fe0da78003e50822ffc85947f057cfaf7c0d624e6d6124b156f4f123baf06d02589e4b481e4f630a5e2ce3a222b6fc64eb7fca2c934f73ece9450dd17dc6ea3fa388282d27ad27fabc8f59"}, &(0x7f0000000480)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000017c0)={0x34, &(0x7f0000000640)={0x0, 0x16, 0x6, "dbddcbe67872"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0xd, 0x4, {0x4, 0x4, 'TQ'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 13m48.908577181s ago: executing program 0 (id=1214): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x10) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13m48.423459312s ago: executing program 0 (id=1217): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f00000001c0)="d6"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x54, 0x2000000, &(0x7f00000025c0)=[@request_death={0x400c6313}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13m47.139304152s ago: executing program 0 (id=1220): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10000a, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private0}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x10, &(0x7f0000001e00)=""/4087}, 0x90) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c5f020000000000000010003dbb82d416", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x80, 0x104) r8 = open_tree(r7, &(0x7f0000000200)='\x00', 0x0) socket$packet(0x11, 0x3, 0x300) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=')-\x00', 0x3, 0x3) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 13m45.971940472s ago: executing program 0 (id=1222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a34000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000006b0300000000000000140000001100010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4001}}, 0x14}, 0x1, 0x0, 0x0, 0x20044810}, 0x4004014) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000feb000/0x13000)=nil, 0x13000, 0x8}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x430100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) (async) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x107}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x2, 0x9, 0x70, 0x10000, 0xff, 0xffffffffffffffff}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000600)={0x80000001, 0x0, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, &(0x7f00000001c0)) (async) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB='8\t\x00'/16], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000ad6794fc93151ec3746e2a0285595a4c8c631235b02cada8ebbd64a98420ef7e", @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf2564000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44015) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56"}) 13m45.679387892s ago: executing program 0 (id=1223): r0 = socket(0x11, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f00000000c0)='1', 0x1) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r5 = syz_open_pts(r4, 0x0) r6 = dup(r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}]}}}]}, 0x40}, 0x1, 0xffffffea, 0x0, 0x4}, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000580)=@hci={0x1f, 0xa888, 0x4}, 0x80, 0x0}}], 0x1, 0x40040c1) socket$nl_generic(0x10, 0x3, 0x10) fdatasync(0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) 13m45.059964524s ago: executing program 32 (id=1223): r0 = socket(0x11, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f00000000c0)='1', 0x1) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r5 = syz_open_pts(r4, 0x0) r6 = dup(r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}]}}}]}, 0x40}, 0x1, 0xffffffea, 0x0, 0x4}, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000580)=@hci={0x1f, 0xa888, 0x4}, 0x80, 0x0}}], 0x1, 0x40040c1) socket$nl_generic(0x10, 0x3, 0x10) fdatasync(0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) 50.816836515s ago: executing program 2 (id=4557): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xd6c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x9, 0x7, &(0x7f0000000680)=[{&(0x7f00000000c0)="7e3c8b0f08437671f5235834e53a58a134759ab7cce910f2be979bd675a0dfbb8706101ce535440c5484856dc3bc7794876ba7e6a4c40afa3ca96265cbe816ba611bb44b55547f99606140e84e57025dd875f96789e18f320f27ea3dd59058952f6d36e3a377565ecc922a3ff0b3798b20796a9750b0b587cd7d", 0x7a}, {&(0x7f0000000200)="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", 0xfa}, {&(0x7f0000000300)="b0ab26e6a0a7b760013b20f24d09fd31007b109b5107b199907c1f827a9df7b2d7b6b24ff80f31c7095b9ab238c8ac38da2391d953e7913e48e352a86b0ccece0fee6e877e58074d2bf861393459", 0x4e}, {&(0x7f0000000380)="f6842349341350a504be3bdd0329778ee2a474b86119bd136229cbd24a7aee508226b94e14d2e7eb41ca7635725f83ad79011e9b6c23df02f1e95a8fad3fded9966a2eb896a47cf60841a5f46a8ac1ce2b53af9134fa3d81d164705e0e9c3b4e462295e2985cd53d72749c3693080b31647ac3fcbb914195a6a3b52143b6fbf07f3f62b79ec53fc37ff6acc23eb6827473c74a6803723ebc3bfba840cdeb8f20fe13048ca32afe70cf9620ebba1406c5486957c335916209a7df44c02a25abbb74689e7b28125f46a6002bec8ab36096cc642655b22266e5e5d09e1cdbfe389a250eb5acd0842a2e93", 0xe9}, {&(0x7f0000000480)="48f09675b0b3e96e8354c721ec5aa807379ff90e00a1e8139fd171e57ba816c002d6b7fee440ebf7d058f449f6ec7455a26abaae15b173c2b34ce4857a611e460d2b33a70f6c45cf664c7eaafbcd0351b9b2676ca1ceee720644c5b0ab05dcb6ce9e36b03b1c99c1bdec6793ae15ffe55bd57b952235d2d3b2b48ae449047ad7e0d75d3ef7c081a6899a256a14f916f53454c1f5eb910ecd0cc19fabea176d3624efdde3c4aadeb1490d334373deae10c894ad1250b7cab9066163d1c053ce5a98b87b84f66c96bc3ea64e4e1f6748d91a68bb7dff0ec2e8f8d3141b581d8955a05b3239", 0xe4}, {&(0x7f0000000580)="22e4672de2d7379f80292745a75fb9e85d085f551e17b4a86753c7181147107c6a118987d83f8c39a74f36c25fedb86175c171167021a031492d864fa534e6428fcaffd3ad056ef620bd33d7330e7f92f2a969e971687867114c5541706165a983f37a553f202d9ae6f345065639e8bf2d61a49562fda3390f2087c255da284c467a546fbd12e43a35557b882d345f66cdd50e916c52e9f3030fd2635d3a97ed33ec6fc8ec0e15d6c451cf27e065b10e9678708666348b2f8955b8013bf7092c7af1ecc3909445a71b7502c8734ef2637555c5033c8419d2189a8962d966ff49feb443e3353630b1", 0xe8}, {&(0x7f00000007c0)="06c1a78b4f2f1913e3c0c3bc9edce1269a1ff8c30a7e793969babe0e3fcd0b9c4cb27947ee86e8242bacd883fadd37ab9bb86faa21eccf471b9019bff47552e2e717244c9c209510fa576e6077f3bb56fb0ac9457b9706237abd5066605c6ed841c30dd2626aa2294679ad315a81d41dcaa39735d545140f4fce410694421084ef677f17117a071ea9e97d4a11e2d689bbb60a2257438228c682bda5aa70ae1a96c2f7c33beb18eb39eb6629a43d0c0c7a6c6d1f563726c9578759c63e966dc980790ead59a180d0f5434e2c5ce3ef8577374cab", 0xd4}, {&(0x7f00000008c0)="f71b813437dce83cbd24a309e57c33beb69d6e9670fb75baabb30490e7b42061bd59b15184ff2ded161f840f38d2fbb33f282d39b00792b35413fe822831d8ca3e7ef8bad9b2d331a31b85b00690173f18e554d22c4463bde980105d58f837931b679e8b8693c371e5beeb703a63274d3318dbe4e71a8d2dce66de84bb09dbc6e35e1abeb739925c76d4fb188c2e746a1b3ed3dbd9bb01b7a11226faf6f546d2cf0b1db14cb284a81ac5295c8092dea4692d6683e96ee70929953777fc8123038ff6e875b6f1611998e9a86f6c9819b49899e722eeefd8f7fdbfcaa93a5206ebeb98", 0xe2}], 0x8, 0x0, 0x1, {0x2, r5}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) unshare(0x8040600) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) 49.934386337s ago: executing program 2 (id=4562): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x3, 0xd}, {0x8, 0x1}}}, 0x24}}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002abd700000ffdf25050000000800020008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000884) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010025bd7000ffdbdf2500000035", @ANYRES32=0x0, @ANYBLOB="1c20000035020000140035007465616d5f736c6176655f31000000001800348014"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000340000000120800024000000013"], 0xd8}}, 0x8090) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 48.033092055s ago: executing program 2 (id=4564): r0 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (fail_nth: 67) close_range(r0, r1, 0x0) 47.574446388s ago: executing program 2 (id=4566): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400120038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) unshare(0x4000400) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r5 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xa2}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x400, 0x70bd28, 0x25dfdbfb, "", ["", ""]}, 0x10}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r9, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 47.573079217s ago: executing program 4 (id=4567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x4, &(0x7f0000000080)) setgroups(0x0, 0x0) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010009659386cfc0f112d100000000000200"/36], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000440)={0x20, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x0}) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@multicast1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x39}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e20, 0x4e22, @in6=@private0}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) 47.19530987s ago: executing program 5 (id=4570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040000001c0001800100108000000d00766574ae9038355a49f1808b22f001905091fa68315f7669727fdcad0b129e37a71d1b9f6f"], 0x34}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8, 0x0, {0x3ed}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @empty, 0xffffff00, 0xff000000, 0xff, 0x1, {}, {@empty, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'gretap0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@initdev={0xac, 0x1e, 0xfe, 0x0}, @broadcast, 0xffffffff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x5, 0xe, 0x0, 'bridge0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @multicast1, @broadcast, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x418) r3 = socket$key(0xf, 0x3, 0x2) timerfd_create(0x7, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udp\x00') preadv(r1, &(0x7f0000000640), 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x20, 0x17, 0xb2, "2a69ccab115388b5034ace8f4405e05fbeba20053a08b89d68cffa8eb7dda4449a6af175b0edff3706bd0200000000000000000000005b83d54c3b3040e04d1f4527e46ae7eddf398881deca21032df1c81fa0be2054700435661264896a800b973d81f719934bac397d8b6e63d802b30a45473131ab24360b1277ba9b1936bde888243ce2cd772bc3be85f596a35d2558935ccc1c015fe83929ac38e232ac1ddebf3134566feae6e550f63dcba55bf8b298"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[], 0xb0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_usb_connect(0x5, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008879c508031000076a600102030109023d0001000000009231d671dd4bbdb20009050a00200005090809050a100800fc09010905080300020540ff07059896d528ca09050e120800070201"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_io_uring_setup(0xcf, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10010) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) shutdown(0xffffffffffffffff, 0x0) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f0761000000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00112f0000002f23ff7dbd0b342790b332d8c143e8b52873d5c7f9fcd26fce9651dc18e8c5389e527f8c6b82705d1d35606f2230b06db6d50461c64f90bfda63b19ee154052761847a43f2603b0babcf0eab596c000b9dcd9d9f0433604f173a8a8ffacbfa7b348c92804347b8a17ce8ee25408599c9396fd77451b3995608e40d2c4434b7b42ef65d3ee5c8d794c95d58005baa27231b667bfc9b1bf8a0de1c500dc557cc"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 45.743307659s ago: executing program 3 (id=4574): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x601e, 0x4) sendmmsg$inet(r0, &(0x7f0000002600)=[{{&(0x7f0000000080)={0x2, 0x4e27, @local}, 0x10, 0x0}}], 0x1, 0x4000140) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/96, 0x60}, 0xd7a}], 0x1, 0x2046, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000a, 0x50032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x47d}) ioctl$UFFDIO_REGISTER(r4, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0x200}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x90) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 45.393679043s ago: executing program 3 (id=4575): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xff07}, 0x48) 45.347605248s ago: executing program 3 (id=4576): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xf73}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x80010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000002201"]) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) dup(r0) 45.194113065s ago: executing program 5 (id=4577): socket$nl_crypto(0x10, 0x3, 0x15) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r0, r0, 0x0, 0x40008) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) (async) r5 = socket(0x1e, 0x4, 0x0) (async) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0xc01, 0x3, 0x290, 0xf8, 0x5002004a, 0x0, 0xf8, 0x0, 0x1f8, 0x3c8, 0x3c8, 0x1f8, 0x3c8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @empty, 0xffffff00, 0x0, 'ip_vti0\x00', 'veth0_vlan\x00', {}, {}, 0xc}, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x3}, {0x1, 0x2, 0x5}, 0x4, 0x9}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x110, 0x61a}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x2, 0x7, 0x0, 0x4], 0x4}, {0x4, [0x0, 0x7, 0x1, 0x0, 0x4, 0x6], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) (async) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r5, r4, 0x0, 0x8010002b) 44.335318884s ago: executing program 3 (id=4578): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x8, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048094}, 0x0) shutdown(r3, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x8b, 0x100000500) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000240)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0x27) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001020000082505a1a440000100030109020700020105e0260904000001020d0000052406000105240008000d240f0103000000060501000306241a05200709056c0318020680080904010000020d00000904010102020d000009058202ff03210808090503022000094509"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000980)=@string={0x2}}, {0xce, &(0x7f0000000a40)=@string={0xce, 0x3, "ceb1ae51cbf15ca67fd49e10029547166170e66945e52e32dc985bbe2e3d475329e4a4104e83d4020a298e189fda1a7a1e9158cb328065e5c6dfe83ebac079c528aa56e7269295b65c6e3a8426e1c5ec9bb4c9a18ffa14d2bcc68886409e1a6ac18643fe90be58f8ea13b201183fc78e3e282c5c5ccfe610fb230e33e81558e6c99c24a4493c7b2d04a482f56eccb38f0d6658689fda2c51f206893a7413fc6a9a538429bc2c466d486319c2eeb6c56442381653a46c02fb90f091edf2dc3bbac8540fc519112ed949dab9de"}}]}) socket$inet_mptcp(0x2, 0x1, 0x106) 44.334978296s ago: executing program 4 (id=4579): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast1, 0x1f, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x155e, &(0x7f0000000740)={0x0, 0x1c29, 0x10100, 0xfffffffe, 0x345, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r4) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f00000002c0)) pidfd_send_signal(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0x7d, 0x21, 0x40, 0x545, 0x808b, 0x31ad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x33, 0xbb}}]}}]}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000240)=0x2, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendto$inet(r5, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 44.334627244s ago: executing program 2 (id=4580): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x3, 0x40100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0xffffffffffffffd4, 0x3, 0x200a}}}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, 0xfffffffffffffffe}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) renameat2(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000200000019"]) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000070961c40dbfb69010203010902180001000000000904f400008fa66bfd6874c89a91bd6cd39f59d1e0d4cb5c00"], 0x0) r7 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xf1b9, 0x200, 0x0, 0xfffffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) accept$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) ioctl$UI_DEV_DESTROY(r0, 0x5502) io_uring_enter(r7, 0x7a98, 0x0, 0x8, 0x0, 0x0) io_uring_enter(r7, 0x7c87, 0x8b89, 0x0, &(0x7f0000000340)={[0xd8]}, 0x8) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000002c0)="75ad38dd3ff21195be46fe0e2f25b46c99f08029ce7206c098e500cfbdf3d55ae488ba04e5fa03be14d7938bb5dfc54aeae04ed8c5885d400b054b59959a9f637d48bf7071b91bf9082ee8b2cd24781f33dfc692ab500500e4b2949e8552687b60ae4b7092e3c7d19895d716e27c011c1d50a5a4", 0x74) 42.538197879s ago: executing program 5 (id=4582): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x2, 0x0, 0x1, 0x804, {0x1, 0x200, 0x4, 0x69, 0x6, 0x200, 0x8001, 0x5, 0x412d, 0x4, 0xd, 0x7f, 0x400008, 0xfd, "fe1d00003413000000100020b4000000000000000000000000000000000900"}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, 0x0, 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) r7 = dup(0xffffffffffffffff) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1f00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {0x7, 0x0}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x1006, &(0x7f0000001e40)=""/4102}, 0x94) write$FUSE_ATTR(r7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000000)=0xfffffffd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000c6302, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r11, 0x0) sendfile(r11, r11, 0x0, 0xffffffff) 41.971330279s ago: executing program 1 (id=4583): socket$can_j1939(0x1d, 0x2, 0x7) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='io#harset', 0x0) close(0x3) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x7f, 0x7, 0x0, 0x0, 0xffffffff, 0x2000000, 0x80, 0x3000003}}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000080)={0x8, r4}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04223c02ffffffffffff060951c456e59c5660ea527fcc1fb7fb3d08a3b0087f001d"], 0x22) r7 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040045}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88acf6a8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0xc000) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 41.599576212s ago: executing program 4 (id=4584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x6}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}]}}}}}}}, 0x0) 40.683181458s ago: executing program 5 (id=4585): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000021000100000000000000050015000300"], 0x24}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) r6 = gettid() syz_usb_connect(0x6, 0x3e8, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0xb7, 0xc7, 0x8, 0x40, 0x12d1, 0xf21f, 0x77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d6, 0x2, 0x8f, 0x9, 0x50, 0x6, [{{0x9, 0x4, 0x65, 0x26, 0x2, 0xff, 0x1, 0x9, 0x5, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x2, 0x7, 0x1}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x5f, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x7, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x800}]}}]}}, {{0x9, 0x4, 0x72, 0x2, 0xa, 0xc2, 0x3e, 0xa2, 0x7, [], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x1, 0xf9, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xf}]}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0xaf, 0xb4, 0xd1}}, {{0x9, 0x5, 0x8a, 0x0, 0x40, 0x7, 0x2, 0x5a}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x4, 0x80}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x7f, 0x66, 0xd5, [@generic={0x33, 0xd, "5db93580348a08ea479ab7f25999dbf12318fb0948b11b3f1ecbf27d0af70c6cb6904e790437efb63b2d113b29b2502a54"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x0, 0x4, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x27, 0x3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x4, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x6a7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x64, 0x2, 0x46, [@generic={0x92, 0x3, "a7184cf1afc043d252e4ca3b1a99bde098f9106706630a84c9f7dddd321813d99e4a1179ec8750a901753eea770e69ecc3d58bea478d885204bc6d016077a131efb1d2754a70299d257fbdb0dbeec52837fa3a6df3cae0f7f207aae61ba0bc0a3825631338aa1b63de39fb2d0ec178abe9387805ad7d5405d23f6c2a02362fc432ef8e5ba1cfb6c713a32fa1a581a981"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x4, 0x2, 0x6, [@generic={0xba, 0x3, "a0f62fca4d225fb15cb380849e9f5ee5261f2fdc7d0d2e597839f841c356f1b36c0dd6b71dee789751c54008c2ed44a844f7f61bd1f4b11a9cf6db7715f3c2eb0af8ab7ae5601e876cdc0ec2aeaee8a5aa592bee23195d7acaa5c8013bb3b59b65a98495e2699a42fd8b2cb919e1ed348460a33356935e400ca1705903961e7725c432ec1db97e339d7cb56e977565b521466cac8cde3d87b23cb0c63e655f840ba8dcef195a8693b13f0c057eaff898d2884a4a87f1db48"}, @generic={0xf2, 0xc, "3926d6c443766f733fa56edbae85d8d49e21d5bee2fe8990da29b4c4b929895d0ee1b2739cd9fe792ee24e6c98ffb378b23cba9b7579e6a3624f4e86ce66998b3f544d9e2c9ba729129d853133d219c21aa035971ae704881b38a6e4d5a5ff179849eb618be820bb29e6fbfcfa4e6244934d409448f55cf7fdb2d9c3184c7d062e7235119711b1c5bdf12af0990073b30a70a180521be810988bce844b075c73cefa28353e1ef07f9170df5502d2a4cc40f76d2f6f5142ecbce2f04ac2a31103c57f7641925f58bc0b01793d32ba5592c7277ef0e4760cd5bd8bef1358cf8a0e6e3094aeabeaac2e065d2d0f89070c77"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x40, 0xbb, 0x1, [@generic={0x1f, 0x12, "9d39ff7e37dfbe3d32c136aeb31f2f857b6c6ced4e486bef42d99fbeee"}, @generic={0x8e, 0x2e, "20b943f4453bdd1499d8efa5f3ebba1753fbc3ebca8c7da67bf431489e734076b468f60b566f0434f23ba6ff635a36d15212f721e65770b447ee14aa3a3befa3b2cc44c3180f6c24a9ec8392fed6a5426c7768b989b1a3acf48610d916ae8b1de7e894b2fdebb237064b56fabc9b4736437af5b3e6798e30f4a65f8a72a2635003fe78b2cc4d9ec241743467"}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x6, 0x6, 0x8, 0xff, 0xf8}, 0xa3, &(0x7f00000002c0)={0x5, 0xf, 0xa3, 0x5, [@generic={0x6f, 0x10, 0x1, "15616798b4f2a95069f4cc34f54285bdb482aea2c791c56f25e30c73457c23cdb0bd43e43cec2a590836fe6ab67657b42207b21b16c04882d8e4c517cf6d2a03b986941c59cc82b3597210de30b275b0946ca90af5079df7e6d05866879316cc2aa63a37247c5af4a66d033a"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x8, 0x3ff}, @generic={0x16, 0x10, 0xb, "1223c184cd7d5f618d6228a14fb586acf10e38"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x80, 0xfb, 0x3, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0xc, 0xc821}]}, 0x3, [{0x4e, &(0x7f0000000440)=@string={0x4e, 0x3, "b9eb8ce6d46a1698b3594bc88dff449a7057c8edd31f0a6997c3bd93de84a72368dea1507bf1847cb8be9a887ae0e0eeb3c312afbd2bce9e3d41213ba9a631288e2c9e17e8a89b341c0342c5"}}, {0x8b, &(0x7f0000000900)=@string={0x8b, 0x3, "dab5532f039c30983d8bf7232bbce50fb5e3a41160f4153013e1db732665b4bbaf70f6d570e020d8276afd7a04c19294040964776ae5b308a8c59c88b6552549a512b14920170a8b6ccd8744bc174c5aa16640eec16afe1e43280193bd7690ea2f2db847117eea136778b83877b58926146bdb322c27e53f80b8d15a20abe871ea3db690f5f63b5b0d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x405}}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x404c885}, 0x4040081) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}, 0x0) 40.520387346s ago: executing program 4 (id=4586): r0 = fanotify_init(0x20, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x411, 0x48000008, r1, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)={0x0, 0x4, 0xa7}) 40.47484442s ago: executing program 1 (id=4587): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r2 = getuid() r3 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x2000, &(0x7f0000000100)={&(0x7f0000004240)={0x50, 0x0, 0xe5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x3, {0x6, 0x0, 0x2, 0x0, 0x4, 0x3, {0x6, 0x60, 0x7, 0xfffffffffffffffe, 0x8100000001, 0x4, 0x100, 0x7ffc, 0x39a, 0xc000, 0x0, r2, r3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000007980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}, 0x803e}], 0x2, 0x0) 39.653531001s ago: executing program 4 (id=4588): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="7400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000004c0012800c0001006d6163766c616e003c000280280005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008"], 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206010300000000000000000400003e0500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000312000300686173683a6e65742c706f7274000000b3aedeb7001c1bb3d612fed5dc7e5cee7d4e5bff77b76b8d0eb142ce22f7e444a734439c67b0eee1c35f612a9db37dfe5be8712a63861fe4cca87df2efae6b766cf4d6af1aa6e3c99568ad6f7649af46717b43c7f95b52656a7ccdd69244e162a4be0614ee350ff38d4308027b128eddf5abf61279602e58e187496eaab2a73abe716664033d984dd38e7cd0f6f4042be7c586da42a7f2755c3a90c1c0f0e41d920abc1d305f22"], 0x58}}, 0xc0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x501080, 0x0) ioctl$SIOCGIFMTU(r7, 0x8921, &(0x7f00000001c0)={'veth0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r8 = socket$alg(0x26, 0x5, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec97"], 0xfdef) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x7fffc}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 39.477537895s ago: executing program 3 (id=4589): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xf73}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x80010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000002201"]) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) dup(r0) 39.163121307s ago: executing program 1 (id=4590): ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x491b, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0xfd}}], 0x1, 0x4004000) 38.866783432s ago: executing program 2 (id=4591): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f00000005c0)=@x25, 0x80, &(0x7f0000000480)=[{&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000740)=""/79, 0x4f}], 0x2, &(0x7f00000007c0)=""/203, 0xcb}}, {{&(0x7f0000000a80)=@ax25={{}, [@remote, @default, @bcast, @default, @rose, @remote, @null, @default]}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/255, 0xff}], 0x1, &(0x7f00000010c0)=""/201, 0xc9}, 0x1000001}, {{&(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/139, 0x8b}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/191, 0xbf}], 0x3, &(0x7f0000000dc0)=""/105, 0x69}, 0x2}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x8080000, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xc58, 0x0, 0x2, r2, 0x6}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="45000000060000000000000000000000050000040000000007000000000000006b000000000000002f7379732f6b65726e656c2f64656275672f73796e632f696e666f0000"], 0x45) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) r4 = fcntl$getown(r3, 0x9) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7fffffff, 0x1}, 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000004c0)=""/224, 0x0, 0x800, 0xffff23ae, 0x60a217eb1d69cd32}, 0x20) setsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f0000000380)="e2300bcd6240dc2c11f710a4cabbdea71f2c9d795fb7d24af5c685103a99b63f3fe7bead2c81f78a7ba06b2a21991d30626826abd958da44e5e223af18568126038e6127297ce677ab25048b42e86053ab34d2c1fc0812458ed0879de884e8f84d8a2ec1c48b7d64e445f723ad9f3231d8e5fc548332acc135b753610cc89f32118935471a48cbe4b7f863e4c90e647b896630da61cf4182c919ca9398a9a2fe3808f5e2c61ad25017abfe935ea303ca45e39413ad2c99", 0xb7) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2d, 0x0, 0x3}, {}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x1000000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000200)=0xc) sched_getattr(r8, &(0x7f0000000000)={0x38}, 0x38, 0x0) 38.408578701s ago: executing program 1 (id=4592): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x8, 0x3, "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", 0x7, 0x4, 0xc4, 0x8, 0x8, 0x2}}}, 0x120) 36.900167126s ago: executing program 1 (id=4593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000700)={0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) socket(0x10, 0x80002, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x100000001, 0x0, 0x300000000000000, 0xc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 36.46621907s ago: executing program 5 (id=4594): r0 = syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206fede101c8d"], 0x0) syz_usb_control_io(r0, &(0x7f00000012c0)={0x18, 0x0, &(0x7f00000017c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, 0x0) 30.309325183s ago: executing program 3 (id=4595): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b0001000000000904000002e964c200090504000000"], 0x0) 29.556332895s ago: executing program 4 (id=4596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}]}}}}}}}, 0x0) 29.243663709s ago: executing program 1 (id=4597): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c002280340000800800030000000000080005000000000008000200000000000800030000000000080002000000000008000400000000004400008008000400000000000800070000000000080006000000000008000500000000000800010000000000080002"], 0xc0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) 29.243237666s ago: executing program 5 (id=4598): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121381, 0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0x3d}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffff001, 0x1, 0x0, "4bad89600716799a64be0304000000cddf00"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) write(r2, &(0x7f0000000640)='u', 0x1) r3 = syz_open_pts(r2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0xfffb, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) write(r4, &(0x7f00000000c0)="8f2a0a65bd8cb2b96d70c71fb9e7e7c1dd11ced3c40cf39e", 0x18) r5 = dup(r3) read$FUSE(r5, &(0x7f0000004400)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r6) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"/353, @ANYRES16=r7, @ANYBLOB="0100000000000000010017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 33 (id=4591): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f00000005c0)=@x25, 0x80, &(0x7f0000000480)=[{&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000740)=""/79, 0x4f}], 0x2, &(0x7f00000007c0)=""/203, 0xcb}}, {{&(0x7f0000000a80)=@ax25={{}, [@remote, @default, @bcast, @default, @rose, @remote, @null, @default]}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/255, 0xff}], 0x1, &(0x7f00000010c0)=""/201, 0xc9}, 0x1000001}, {{&(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/139, 0x8b}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/191, 0xbf}], 0x3, &(0x7f0000000dc0)=""/105, 0x69}, 0x2}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x8080000, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xc58, 0x0, 0x2, r2, 0x6}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="45000000060000000000000000000000050000040000000007000000000000006b000000000000002f7379732f6b65726e656c2f64656275672f73796e632f696e666f0000"], 0x45) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) r4 = fcntl$getown(r3, 0x9) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7fffffff, 0x1}, 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000004c0)=""/224, 0x0, 0x800, 0xffff23ae, 0x60a217eb1d69cd32}, 0x20) setsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f0000000380)="e2300bcd6240dc2c11f710a4cabbdea71f2c9d795fb7d24af5c685103a99b63f3fe7bead2c81f78a7ba06b2a21991d30626826abd958da44e5e223af18568126038e6127297ce677ab25048b42e86053ab34d2c1fc0812458ed0879de884e8f84d8a2ec1c48b7d64e445f723ad9f3231d8e5fc548332acc135b753610cc89f32118935471a48cbe4b7f863e4c90e647b896630da61cf4182c919ca9398a9a2fe3808f5e2c61ad25017abfe935ea303ca45e39413ad2c99", 0xb7) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x2d, 0x0, 0x3}, {}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x1000000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000200)=0xc) sched_getattr(r8, &(0x7f0000000000)={0x38}, 0x38, 0x0) kernel console output (not intermixed with test programs): 33.992147][T22778] ? __gup_longterm_locked+0x64f/0x15b0 [ 1133.992165][T22778] ? down_read_killable+0x1d1/0x350 [ 1133.992191][T22778] __gup_longterm_locked+0x7c3/0x15b0 [ 1133.992230][T22778] ? gup_fast_fallback+0x1afc/0x2260 [ 1133.992253][T22778] gup_fast_fallback+0x1cd4/0x2260 [ 1133.992273][T22778] ? __lock_acquire+0xab9/0xd20 [ 1133.992326][T22778] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1133.992349][T22778] ? rcu_is_watching+0x15/0xb0 [ 1133.992371][T22778] ? io_pin_pages+0x9a/0x1a0 [ 1133.992388][T22778] ? rcu_is_watching+0x15/0xb0 [ 1133.992407][T22778] ? io_pin_pages+0x9a/0x1a0 [ 1133.992423][T22778] ? is_valid_gup_args+0x11f/0x200 [ 1133.992445][T22778] ? pin_user_pages_fast+0x4d/0xb0 [ 1133.992466][T22778] io_pin_pages+0xb5/0x1a0 [ 1133.992487][T22778] io_sqe_buffer_register+0x172/0x2280 [ 1133.992534][T22778] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 1133.992561][T22778] ? rcu_is_watching+0x15/0xb0 [ 1133.992586][T22778] ? io_sqe_buffers_register+0x133/0x8d0 [ 1133.992605][T22778] ? trace_kmalloc+0x1f/0xd0 [ 1133.992623][T22778] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 1133.992645][T22778] ? iovec_from_user+0x1ba/0x250 [ 1133.992670][T22778] io_sqe_buffers_register+0x3b4/0x8d0 [ 1133.992703][T22778] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1133.992721][T22778] ? __fget_files+0x3a0/0x420 [ 1133.992743][T22778] ? __fget_files+0x2a/0x420 [ 1133.992767][T22778] ? io_is_uring_fops+0xd/0x50 [ 1133.992793][T22778] __se_sys_io_uring_register+0xb85/0x11b0 [ 1133.992818][T22778] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1133.992845][T22778] ? ksys_write+0x22a/0x250 [ 1133.992868][T22778] ? __pfx_ksys_write+0x10/0x10 [ 1133.992889][T22778] ? rcu_is_watching+0x15/0xb0 [ 1133.992921][T22778] ? do_syscall_64+0xbe/0x3b0 [ 1133.992944][T22778] do_syscall_64+0xfa/0x3b0 [ 1133.992961][T22778] ? lockdep_hardirqs_on+0x9c/0x150 [ 1133.992986][T22778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.993004][T22778] ? clear_bhb_loop+0x60/0xb0 [ 1133.993027][T22778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.993044][T22778] RIP: 0033:0x7f2ac798e929 [ 1133.993063][T22778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.993078][T22778] RSP: 002b:00007f2ac8762038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1133.993098][T22778] RAX: ffffffffffffffda RBX: 00007f2ac7bb5fa0 RCX: 00007f2ac798e929 [ 1133.993112][T22778] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1133.993124][T22778] RBP: 00007f2ac8762090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.993136][T22778] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 1133.993147][T22778] R13: 0000000000000000 R14: 00007f2ac7bb5fa0 R15: 00007f2ac7cdfa28 [ 1133.993178][T22778] [ 1135.118982][T22805] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4327'. [ 1135.180878][T22806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1135.817863][ T5912] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1136.011498][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 1136.020015][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1136.038946][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1136.058081][ T5912] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1136.068893][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.115505][ T5912] usb 6-1: Product: syz [ 1136.120014][ T5912] usb 6-1: Manufacturer: syz [ 1136.135927][ T5912] usb 6-1: SerialNumber: syz [ 1136.174493][ T5912] usb 6-1: config 0 descriptor?? [ 1136.206465][ T5912] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1136.219650][ T5912] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1136.263257][T22818] fuse: Invalid gid '00000000000000000003' [ 1136.437601][T10967] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1136.538499][T22823] netlink: 'syz.4.4333': attribute type 10 has an invalid length. [ 1136.629907][T10967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.643014][T10967] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1136.652565][T10967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.686813][T10967] usb 3-1: Product: syz [ 1136.711988][T10967] usb 3-1: Manufacturer: syz [ 1136.720790][T10967] usb 3-1: SerialNumber: syz [ 1136.731346][T10967] usb 3-1: config 0 descriptor?? [ 1136.756480][T10967] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 1136.777964][T10967] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 1136.801675][ T5912] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1136.809675][ T5912] em28xx 6-1:0.0: Config register raw data: 0xac [ 1136.816628][ T5912] em28xx 6-1:0.0: I2S Audio (1 sample rate(s)) [ 1136.824629][ T5912] em28xx 6-1:0.0: No AC97 audio processor [ 1137.016381][T10967] usb 3-1: USB disconnect, device number 50 [ 1137.737090][T22837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4339'. [ 1137.751375][T22837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4339'. [ 1137.764599][ T9] usb 6-1: USB disconnect, device number 27 [ 1137.770821][T10967] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1137.820871][T22837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4339'. [ 1137.932239][T10967] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1137.946370][T10967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1137.959708][T10967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64 [ 1137.974499][T10967] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1137.984555][T10967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.992997][T10967] usb 5-1: Product: syz [ 1137.997415][T10967] usb 5-1: Manufacturer: syz [ 1138.002604][T10967] usb 5-1: SerialNumber: syz [ 1138.011355][T10967] usb 5-1: config 0 descriptor?? [ 1138.017356][T22832] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1138.035420][T10967] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input127 [ 1138.050717][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.058434][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.065790][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.073316][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.080835][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.097330][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.105158][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.113038][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.121633][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.129299][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.137238][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.144693][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.152014][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.167623][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.177624][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.187638][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.197264][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.206601][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.215506][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.223391][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.231372][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.240615][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.250702][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.263506][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.271683][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.279437][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.290181][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.297854][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.306499][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.315043][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.324289][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.334492][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.344418][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.353792][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.362817][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.371489][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.382379][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.391146][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.399385][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.408377][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.419626][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.428691][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.438971][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.448214][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.460595][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.475153][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.484270][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.493770][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.507418][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.520278][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.532500][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.545397][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.555903][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.565744][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.574978][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.586251][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.597203][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.608708][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.624476][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.634096][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.642667][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.652749][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.665364][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.674582][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.683266][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.690762][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.699425][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.707656][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.716014][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.724353][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.736990][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.748663][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.758878][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.768046][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.776562][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.786340][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.796663][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.798158][ T5201] usb 5-1: control msg error: -71 [ 1138.805494][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.823795][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.831767][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.841888][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.851275][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.860848][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.869851][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.877784][ C0] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1138.885535][ C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1138.965444][T10967] usb 5-1: USB disconnect, device number 96 [ 1139.477727][T10967] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1139.652954][T10967] usb 5-1: Using ep0 maxpacket: 16 [ 1139.673861][T10967] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1139.704462][T10967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1139.747559][T22869] netlink: 'syz.5.4347': attribute type 10 has an invalid length. [ 1139.783801][T10967] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1139.795615][T10967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.834686][T10967] usb 5-1: Product: syz [ 1139.854825][T10967] usb 5-1: Manufacturer: syz [ 1139.874234][T10967] usb 5-1: SerialNumber: syz [ 1139.884554][T10967] usb 5-1: config 0 descriptor?? [ 1139.921415][T10967] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input128 [ 1139.941456][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1139.956885][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1139.972484][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1139.985156][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1139.995209][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.004965][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.014800][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.023651][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.033721][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.042961][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.050813][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.058577][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.066224][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.074172][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.082902][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.091556][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.099543][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.107247][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.114954][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.122915][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.130983][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.138885][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.146690][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.155255][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.163983][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.172582][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.182269][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.191864][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.199307][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.209600][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.217936][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.226307][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.234643][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.243429][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.253967][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.261443][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.271337][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.280978][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.290245][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.298978][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.308626][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.317908][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.328990][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.338837][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.347874][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.356585][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.365683][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.374077][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.383207][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.390759][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.398526][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.407858][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.417016][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.425726][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.435098][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.442959][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.450390][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.458979][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.468944][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.477565][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.485394][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.495390][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.503427][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.513056][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.520560][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.530446][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.540957][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.549369][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.558491][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.566557][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.574852][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.583576][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.592216][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.600531][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.608843][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.617053][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.625014][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.636098][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.645224][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.652974][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.667721][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.678835][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.687230][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.696537][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.704305][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.713797][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.722127][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.731131][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.740915][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.751760][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.764836][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.773501][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.782243][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.789881][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.799934][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.808925][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.817615][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.826024][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.835945][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.845421][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.853746][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.862238][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.871967][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.879489][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.889458][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.897579][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.906167][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.914092][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.922476][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.930304][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.939862][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.948055][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.956342][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.964327][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.972071][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.980079][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.988159][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1140.996619][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.005172][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.013328][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.020925][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.028482][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.037194][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.048526][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.056699][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.065592][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.073233][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.080626][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.087956][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.095669][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.103059][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.110566][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.118617][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.126754][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.134345][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.141858][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.149590][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.157015][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.167573][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.175160][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.183996][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.192684][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.201340][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.214178][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.223865][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.231945][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.240046][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.247603][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.254981][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.262726][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.270798][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.279654][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.287175][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.295236][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.303123][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.311188][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.318811][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.326543][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.334043][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.343469][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.352497][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.360260][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.369314][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.377936][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.385819][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.394581][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.403323][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.411349][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.420163][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.429987][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.439256][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.447306][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.456102][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.463801][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.472244][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.480247][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.488176][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.495872][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.503373][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.510897][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.518837][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.527956][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.536689][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.544767][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.552651][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.560976][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.568317][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.576734][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.588447][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.600683][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.609052][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.617141][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.624970][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.632965][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.640461][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.648211][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.655697][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.663519][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.671137][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.678512][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.686450][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.693938][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.701322][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.710475][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.718458][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.725891][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.733309][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.740609][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.748220][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.757365][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.765259][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.772689][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.781253][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.790527][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.800035][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.810463][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.818751][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.827632][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.836048][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.845548][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.854087][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.864801][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.874021][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.883247][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.893534][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.902830][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.910664][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.918165][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.926534][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.934225][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.941684][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.950137][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.957860][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.965344][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.973342][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.980653][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.988148][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1141.995667][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.003238][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.010694][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.018046][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.025529][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.033434][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.041021][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.050821][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.059175][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.067023][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.074331][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.081672][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.090085][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.097739][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.105250][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.112866][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.120190][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.128106][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.135756][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.143106][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.150488][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.158164][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.165585][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.174165][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.184756][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.193088][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.201121][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.209297][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.216762][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.224370][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.231797][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.239126][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.246574][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.254173][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.261529][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.269031][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.276650][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.284260][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.293152][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.301506][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.309718][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.317819][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.325974][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.334178][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.342097][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.349796][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.357961][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.365698][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.373270][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.380990][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.388361][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.395836][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.403606][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.411033][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.418563][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.426974][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.434305][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.441721][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.449116][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.456472][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.464188][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.471835][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.479212][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.486668][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.494215][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.501917][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.509420][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.516875][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.524237][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.531593][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.538927][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.546726][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.555100][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.563088][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.571087][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.579055][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.586762][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.594214][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.601898][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.609867][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.617618][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.625259][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.633242][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.640925][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.648788][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.656993][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.664889][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.673363][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.681776][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.689254][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.696971][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.704322][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.711620][ T5201] usb 5-1: control msg error: -71 [ 1142.717876][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.725820][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.735271][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.744196][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.752956][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.760842][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.768904][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.778011][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.785605][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.793203][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.800520][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.809573][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.817087][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.825279][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.833463][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.841083][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.848547][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.856492][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.863851][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.873971][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.882454][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.889923][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.897373][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.904785][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.913242][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.927621][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.935434][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.944664][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.954251][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.964269][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.972004][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.979541][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.987373][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1142.994965][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.002392][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.009730][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.017192][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.024644][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.032381][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.039910][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.047763][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.055209][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.062632][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.070120][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.077471][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.084790][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.092214][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.099773][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.107244][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.114937][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.122673][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.130668][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.138919][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.146294][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.154076][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.161962][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.169432][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.177192][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.185434][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.193080][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.200651][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.208184][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.215535][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.222979][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.230547][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.238060][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.245602][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.252959][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.260303][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.267746][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.275150][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.282616][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.289988][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.297365][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.305171][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1143.313508][ C1] usb 5-1: pegasus_irq - urb shutting down with status: -2 [ 1143.359685][T22879] tipc: Enabling of bearer rejected, failed to enable media [ 1143.414049][T10967] usb 5-1: USB disconnect, device number 97 [ 1143.577733][ T5920] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1143.797643][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 1143.829644][ T5920] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1143.844187][ T5920] usb 4-1: config 0 has no interface number 0 [ 1143.870350][ T5920] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1143.905713][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.936392][ T5920] usb 4-1: Product: syz [ 1143.966969][ T5920] usb 4-1: Manufacturer: syz [ 1143.985725][ T5920] usb 4-1: SerialNumber: syz [ 1144.019885][ T5920] usb 4-1: config 0 descriptor?? [ 1144.046023][ T5920] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1144.076891][ T5920] usb 4-1: selecting invalid altsetting 1 [ 1144.095302][ T5920] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1144.123880][ T5920] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1144.155534][ T5920] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1144.228006][ T5920] usb 4-1: media controller created [ 1144.243375][T22876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.291917][T22876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.316104][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1144.375094][T18169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1144.387285][T18169] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1144.398233][T18169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1144.411744][T18169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1144.422527][T18169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1144.710688][ T5920] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1144.888288][ T5920] usb 4-1: USB disconnect, device number 108 [ 1145.260434][T22896] chnl_net:caif_netlink_parms(): no params data found [ 1145.481905][T22896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.492650][T22896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.501405][T22896] bridge_slave_0: entered allmulticast mode [ 1145.511045][T22896] bridge_slave_0: entered promiscuous mode [ 1145.521574][T22896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.530577][T22896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.539804][T22896] bridge_slave_1: entered allmulticast mode [ 1145.549655][T22896] bridge_slave_1: entered promiscuous mode [ 1145.616004][T22896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.653838][T22896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.701502][T22913] netlink: 'syz.3.4358': attribute type 29 has an invalid length. [ 1145.735046][T22896] team0: Port device team_slave_0 added [ 1145.743875][T22911] netlink: 'syz.3.4358': attribute type 29 has an invalid length. [ 1145.759263][T22896] team0: Port device team_slave_1 added [ 1145.829971][T22896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.840173][T22896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.878056][T22896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.892378][T22896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.901419][T22896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.931225][T22896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.043148][T22896] hsr_slave_0: entered promiscuous mode [ 1146.052061][T22896] hsr_slave_1: entered promiscuous mode [ 1146.061299][T22896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1146.070258][T22896] Cannot create hsr debugfs directory [ 1146.521839][ T5852] Bluetooth: hci1: command tx timeout [ 1146.657684][T21691] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1146.829689][T21691] usb 4-1: Using ep0 maxpacket: 32 [ 1146.837248][T21691] usb 4-1: config 8 has an invalid interface number: 203 but max is 0 [ 1146.870745][T21691] usb 4-1: config 8 has no interface number 0 [ 1146.927783][T21691] usb 4-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1146.970489][T21691] usb 4-1: config 8 interface 203 altsetting 1 endpoint 0x83 has invalid maxpacket 3072, setting to 1024 [ 1147.007765][T21691] usb 4-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1147.020237][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4365'. [ 1147.029690][T21691] usb 4-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 1147.188952][T21691] usb 4-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1147.200880][T21691] usb 4-1: config 8 interface 203 has no altsetting 0 [ 1147.214844][T21691] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 1147.226130][T21691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.236187][T21691] usb 4-1: Product: syz [ 1147.242650][T21691] usb 4-1: Manufacturer: syz [ 1147.248442][T21691] usb 4-1: SerialNumber: syz [ 1147.268729][T22922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1147.277241][T22922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1147.300640][T22896] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.429619][ T5920] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1147.479161][T22896] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.578555][ C1] port100 4-1:8.203: NFC: Urb failure (status -71) [ 1147.588248][ C1] port100 4-1:8.203: NFC: Urb failure (status -71) [ 1147.600478][T21691] port100 4-1:8.203: NFC: Could not get supported command types [ 1147.622037][ T5920] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1147.669336][T21691] usb 4-1: USB disconnect, device number 109 [ 1147.729480][ T5920] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1147.745271][ T5920] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1800, setting to 64 [ 1147.761609][ T5920] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1147.839990][ T5920] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1147.851510][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1147.861337][ T5920] usb 6-1: SerialNumber: syz [ 1147.912588][T22934] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1147.925411][T22896] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.587745][ T5852] Bluetooth: hci1: command tx timeout [ 1148.763533][T22896] bond0: (slave netdevsim0): Releasing backup interface [ 1148.780567][ T5920] rndis_host 6-1:253.0: RNDIS init failed, -71 [ 1148.792688][T22896] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1148.812470][ T5920] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -71 [ 1148.951051][ T5920] usb 6-1: USB disconnect, device number 28 [ 1149.119700][T22934] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1149.143725][T22934] bond0: (slave lo): Error: Device type is different from other slaves [ 1149.264572][T22896] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1149.278790][T22896] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1149.301581][T22896] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1149.313475][T22956] sctp: [Deprecated]: syz.2.4373 (pid 22956) Use of int in max_burst socket option deprecated. [ 1149.313475][T22956] Use struct sctp_assoc_value instead [ 1149.327864][T22896] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1149.449151][T22896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.471096][T22896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.485102][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.493862][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.514627][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.522130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.603531][T22896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.665662][T22896] veth0_vlan: entered promiscuous mode [ 1149.685277][T22896] veth1_vlan: entered promiscuous mode [ 1149.762837][T22896] veth0_macvtap: entered promiscuous mode [ 1149.786473][T22896] veth1_macvtap: entered promiscuous mode [ 1149.815854][T22896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1149.845920][T22896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1149.872198][T22896] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.883047][T22896] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.895338][T22896] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.906420][T22896] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.947278][T22971] random: crng reseeded on system resumption [ 1150.251719][T21129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.260390][T21129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.464862][ T6084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.495565][ T6084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.713239][ T5852] Bluetooth: hci1: command tx timeout [ 1152.137768][T21691] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1152.277616][T21691] usb 5-1: device descriptor read/64, error -71 [ 1152.517595][T21691] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1152.643392][T23012] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1152.680289][T21691] usb 5-1: device descriptor read/64, error -71 [ 1152.747702][T18169] Bluetooth: hci1: command tx timeout [ 1152.800796][T21691] usb usb5-port1: attempt power cycle [ 1152.836982][T23016] syz_tun: entered promiscuous mode [ 1152.916177][T23016] team0: Port device macvlan2 added [ 1152.937886][T23019] SET target dimension over the limit! [ 1153.058918][T23022] netlink: 'syz.2.4391': attribute type 4 has an invalid length. [ 1153.139285][T21691] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1153.183723][T21691] usb 5-1: device descriptor read/8, error -71 [ 1153.202206][T23019] netlink: 'syz.2.4391': attribute type 29 has an invalid length. [ 1153.260544][T23025] xt_CT: No such helper "snmp" [ 1153.462264][T21691] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1153.470525][T18163] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1153.502308][T21691] usb 5-1: device descriptor read/8, error -71 [ 1153.629531][T18163] usb 6-1: device descriptor read/64, error -71 [ 1153.666020][T21691] usb usb5-port1: unable to enumerate USB device [ 1153.887605][T18163] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1154.027822][T18163] usb 6-1: device descriptor read/64, error -71 [ 1154.148077][T18163] usb usb6-port1: attempt power cycle [ 1154.352524][T23048] netlink: 'syz.2.4399': attribute type 12 has an invalid length. [ 1154.371072][T23048] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4399'. [ 1154.508548][T18163] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1154.642729][T18163] usb 6-1: device descriptor read/8, error -71 [ 1154.898247][T18163] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1155.000577][T18163] usb 6-1: device descriptor read/8, error -71 [ 1155.149215][T18163] usb usb6-port1: unable to enumerate USB device [ 1155.391679][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4403'. [ 1155.442484][T23061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4403'. [ 1156.097672][ T10] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1156.381558][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1156.396699][ T10] usb 3-1: config 0 has no interface number 0 [ 1156.460719][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1156.477869][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.499494][ T10] usb 3-1: Product: syz [ 1156.529615][ T10] usb 3-1: Manufacturer: syz [ 1156.541675][ T10] usb 3-1: SerialNumber: syz [ 1156.577222][ T10] usb 3-1: config 0 descriptor?? [ 1156.629050][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1156.638430][ T10] usb 3-1: selecting invalid altsetting 1 [ 1156.661390][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 1156.675705][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1156.783450][ T9] usb 6-1: device descriptor read/64, error -71 [ 1156.852594][ T10] DVB: Unable to find symbol stv0299_attach() [ 1156.867252][T23078] netlink: zone id is out of range [ 1156.873269][T23078] netlink: del zone limit has 4 unknown bytes [ 1157.037682][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1157.103159][ T10] DVB: Unable to find symbol tda8083_attach() [ 1157.110574][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1157.167610][ T9] usb 6-1: device descriptor read/64, error -71 [ 1157.285798][ T9] usb usb6-port1: attempt power cycle [ 1157.301969][ T10] usb 3-1: USB disconnect, device number 51 [ 1157.657671][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1157.678269][ T9] usb 6-1: device descriptor read/8, error -71 [ 1157.711310][T18169] Bluetooth: hci3: command 0x0c1a tx timeout [ 1157.717430][T23071] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1157.730411][T23071] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1157.917632][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1157.957630][ T9] usb 6-1: device descriptor read/8, error -71 [ 1158.135514][ T9] usb usb6-port1: unable to enumerate USB device [ 1158.513510][T23071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1158.519831][T23071] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1158.678779][T23116] FAULT_INJECTION: forcing a failure. [ 1158.678779][T23116] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.691951][T23116] CPU: 0 UID: 0 PID: 23116 Comm: syz.4.4419 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1158.691978][T23116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1158.691990][T23116] Call Trace: [ 1158.691998][T23116] [ 1158.692007][T23116] dump_stack_lvl+0x189/0x250 [ 1158.692033][T23116] ? __pfx____ratelimit+0x10/0x10 [ 1158.692059][T23116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1158.692079][T23116] ? __pfx__printk+0x10/0x10 [ 1158.692105][T23116] ? __pfx___might_resched+0x10/0x10 [ 1158.692124][T23116] ? fs_reclaim_acquire+0x7d/0x100 [ 1158.692152][T23116] should_fail_ex+0x414/0x560 [ 1158.692182][T23116] should_failslab+0xa8/0x100 [ 1158.692205][T23116] __kmalloc_noprof+0xcb/0x4f0 [ 1158.692226][T23116] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1158.692246][T23116] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1158.692277][T23116] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1158.692308][T23116] genl_family_rcv_msg_doit+0xb8/0x300 [ 1158.692341][T23116] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1158.692368][T23116] ? rcu_is_watching+0x15/0xb0 [ 1158.692393][T23116] ? apparmor_capable+0x137/0x1b0 [ 1158.692415][T23116] ? bpf_lsm_capable+0x9/0x20 [ 1158.692435][T23116] ? security_capable+0x7e/0x2e0 [ 1158.692466][T23116] genl_rcv_msg+0x60e/0x790 [ 1158.692497][T23116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1158.692520][T23116] ? ref_tracker_free+0x63a/0x7d0 [ 1158.692544][T23116] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1158.692569][T23116] ? __pfx_ref_tracker_free+0x10/0x10 [ 1158.692605][T23116] netlink_rcv_skb+0x208/0x470 [ 1158.692627][T23116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1158.692653][T23116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1158.692693][T23116] ? down_read+0x1ad/0x2e0 [ 1158.692715][T23116] genl_rcv+0x28/0x40 [ 1158.692737][T23116] netlink_unicast+0x75c/0x8e0 [ 1158.692772][T23116] netlink_sendmsg+0x805/0xb30 [ 1158.692803][T23116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.692827][T23116] ? aa_sock_msg_perm+0x94/0x160 [ 1158.692853][T23116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1158.692883][T23116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.692905][T23116] __sock_sendmsg+0x219/0x270 [ 1158.692927][T23116] ____sys_sendmsg+0x505/0x830 [ 1158.692955][T23116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.692987][T23116] ? import_iovec+0x74/0xa0 [ 1158.693012][T23116] ___sys_sendmsg+0x21f/0x2a0 [ 1158.693037][T23116] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.693098][T23116] ? __fget_files+0x2a/0x420 [ 1158.693120][T23116] ? __fget_files+0x3a0/0x420 [ 1158.693153][T23116] __x64_sys_sendmsg+0x19b/0x260 [ 1158.693179][T23116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1158.693212][T23116] ? __pfx_ksys_write+0x10/0x10 [ 1158.693229][T23116] ? rcu_is_watching+0x15/0xb0 [ 1158.693255][T23116] ? do_syscall_64+0xbe/0x3b0 [ 1158.693278][T23116] do_syscall_64+0xfa/0x3b0 [ 1158.693295][T23116] ? lockdep_hardirqs_on+0x9c/0x150 [ 1158.693319][T23116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.693337][T23116] ? clear_bhb_loop+0x60/0xb0 [ 1158.693359][T23116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.693377][T23116] RIP: 0033:0x7fb7f0f8e929 [ 1158.693395][T23116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.693411][T23116] RSP: 002b:00007fb7f1ec4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.693432][T23116] RAX: ffffffffffffffda RBX: 00007fb7f11b5fa0 RCX: 00007fb7f0f8e929 [ 1158.693446][T23116] RDX: 0000000004000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 1158.693458][T23116] RBP: 00007fb7f1ec4090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.693470][T23116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.693481][T23116] R13: 0000000000000000 R14: 00007fb7f11b5fa0 R15: 00007fb7f12dfa28 [ 1158.693511][T23116] [ 1159.064347][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.283541][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4421'. [ 1159.303168][T23122] @: renamed from bond_slave_0 (while UP) [ 1159.416317][T23126] tipc: Enabled bearer , priority 0 [ 1159.444407][T23126] tipc: Resetting bearer [ 1159.530293][T23124] tipc: Disabling bearer [ 1159.594617][T23138] FAULT_INJECTION: forcing a failure. [ 1159.594617][T23138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.613126][T23138] CPU: 1 UID: 0 PID: 23138 Comm: syz.3.4427 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1159.613154][T23138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1159.613167][T23138] Call Trace: [ 1159.613176][T23138] [ 1159.613185][T23138] dump_stack_lvl+0x189/0x250 [ 1159.613212][T23138] ? __pfx____ratelimit+0x10/0x10 [ 1159.613239][T23138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1159.613261][T23138] ? __pfx__printk+0x10/0x10 [ 1159.613285][T23138] ? __might_fault+0xb0/0x130 [ 1159.613317][T23138] should_fail_ex+0x414/0x560 [ 1159.613347][T23138] _copy_from_user+0x2d/0xb0 [ 1159.613369][T23138] do_sock_getsockopt+0x1cd/0x650 [ 1159.613394][T23138] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1159.613415][T23138] ? do_syscall_64+0x20/0x3b0 [ 1159.613433][T23138] ? __fget_files+0x3a0/0x420 [ 1159.613455][T23138] ? __fget_files+0x2a/0x420 [ 1159.613484][T23138] __x64_sys_getsockopt+0x1a5/0x250 [ 1159.613506][T23138] ? do_syscall_64+0x20/0x3b0 [ 1159.613526][T23138] ? do_syscall_64+0x20/0x3b0 [ 1159.613548][T23138] do_syscall_64+0xfa/0x3b0 [ 1159.613565][T23138] ? lockdep_hardirqs_on+0x9c/0x150 [ 1159.613590][T23138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.613609][T23138] ? clear_bhb_loop+0x60/0xb0 [ 1159.613631][T23138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.613649][T23138] RIP: 0033:0x7ffb3d78e929 [ 1159.613667][T23138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.613683][T23138] RSP: 002b:00007ffb3e639038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1159.613704][T23138] RAX: ffffffffffffffda RBX: 00007ffb3d9b5fa0 RCX: 00007ffb3d78e929 [ 1159.613718][T23138] RDX: 000000000000001d RSI: 0000000000000001 RDI: 0000000000000003 [ 1159.613730][T23138] RBP: 00007ffb3e639090 R08: 00002000000000c0 R09: 0000000000000000 [ 1159.613742][T23138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.613761][T23138] R13: 0000000000000000 R14: 00007ffb3d9b5fa0 R15: 00007ffb3dadfa28 [ 1159.613791][T23138] [ 1159.983030][T23139] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4428'. [ 1160.273638][T23139] x_tables: duplicate underflow at hook 2 [ 1160.777807][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1160.937589][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1160.944769][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.955941][ T9] usb 3-1: config 0 has no interfaces? [ 1160.963677][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1160.973221][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.981347][ T9] usb 3-1: Product: syz [ 1160.985632][ T9] usb 3-1: Manufacturer: syz [ 1160.990685][ T9] usb 3-1: SerialNumber: syz [ 1160.999915][ T9] usb 3-1: config 0 descriptor?? [ 1161.286103][T23181] tipc: Enabled bearer , priority 0 [ 1161.305940][T23181] tipc: Resetting bearer [ 1161.342447][T23180] tipc: Disabling bearer [ 1163.217455][T23214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 1163.567939][T21691] usb 3-1: USB disconnect, device number 52 [ 1163.877693][ T5847] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1163.991538][T21691] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1164.059346][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 1164.072997][ T5847] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1164.087078][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.096020][ T5847] usb 5-1: Product: syz [ 1164.102172][ T5847] usb 5-1: Manufacturer: syz [ 1164.106923][ T5847] usb 5-1: SerialNumber: syz [ 1164.144393][ T5847] usb 5-1: config 0 descriptor?? [ 1164.169109][T21691] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.192217][T21691] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1164.201862][T21691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.210649][T21691] usb 3-1: Product: syz [ 1164.215084][T21691] usb 3-1: Manufacturer: syz [ 1164.221649][T21691] usb 3-1: SerialNumber: syz [ 1164.240674][T21691] usb 3-1: config 0 descriptor?? [ 1164.249476][T21691] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 1164.260066][T21691] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 1164.605699][ T9] usb 3-1: USB disconnect, device number 53 [ 1165.232857][ T5847] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 1165.240810][ T5847] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1165.287026][T23244] FAULT_INJECTION: forcing a failure. [ 1165.287026][T23244] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.300238][T23244] CPU: 0 UID: 0 PID: 23244 Comm: syz.5.4458 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1165.300262][T23244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1165.300273][T23244] Call Trace: [ 1165.300280][T23244] [ 1165.300288][T23244] dump_stack_lvl+0x189/0x250 [ 1165.300314][T23244] ? __pfx____ratelimit+0x10/0x10 [ 1165.300340][T23244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1165.300360][T23244] ? __pfx__printk+0x10/0x10 [ 1165.300384][T23244] ? __pfx___might_resched+0x10/0x10 [ 1165.300404][T23244] ? fs_reclaim_acquire+0x7d/0x100 [ 1165.300438][T23244] should_fail_ex+0x414/0x560 [ 1165.300467][T23244] should_failslab+0xa8/0x100 [ 1165.300488][T23244] __kmalloc_noprof+0xcb/0x4f0 [ 1165.300507][T23244] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1165.300525][T23244] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1165.300555][T23244] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1165.300585][T23244] genl_family_rcv_msg_doit+0xb8/0x300 [ 1165.300614][T23244] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1165.300640][T23244] ? rcu_is_watching+0x15/0xb0 [ 1165.300662][T23244] ? apparmor_capable+0x137/0x1b0 [ 1165.300683][T23244] ? bpf_lsm_capable+0x9/0x20 [ 1165.300700][T23244] ? security_capable+0x7e/0x2e0 [ 1165.300729][T23244] genl_rcv_msg+0x60e/0x790 [ 1165.300758][T23244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1165.300779][T23244] ? ref_tracker_free+0x63a/0x7d0 [ 1165.300802][T23244] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1165.300826][T23244] ? __pfx_ref_tracker_free+0x10/0x10 [ 1165.300860][T23244] netlink_rcv_skb+0x208/0x470 [ 1165.300878][T23244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1165.300901][T23244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1165.300934][T23244] ? down_read+0x1ad/0x2e0 [ 1165.300954][T23244] genl_rcv+0x28/0x40 [ 1165.300977][T23244] netlink_unicast+0x75c/0x8e0 [ 1165.301008][T23244] netlink_sendmsg+0x805/0xb30 [ 1165.301039][T23244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1165.301065][T23244] ? aa_sock_msg_perm+0x94/0x160 [ 1165.301090][T23244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1165.301114][T23244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1165.301136][T23244] __sock_sendmsg+0x219/0x270 [ 1165.301155][T23244] ____sys_sendmsg+0x505/0x830 [ 1165.301180][T23244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1165.301206][T23244] ? import_iovec+0x74/0xa0 [ 1165.301229][T23244] ___sys_sendmsg+0x21f/0x2a0 [ 1165.301252][T23244] ? __pfx____sys_sendmsg+0x10/0x10 [ 1165.301307][T23244] ? __fget_files+0x2a/0x420 [ 1165.301330][T23244] ? __fget_files+0x3a0/0x420 [ 1165.301361][T23244] __x64_sys_sendmsg+0x19b/0x260 [ 1165.301385][T23244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1165.301417][T23244] ? __pfx_ksys_write+0x10/0x10 [ 1165.301494][T23244] ? rcu_is_watching+0x15/0xb0 [ 1165.301519][T23244] ? do_syscall_64+0xbe/0x3b0 [ 1165.301541][T23244] do_syscall_64+0xfa/0x3b0 [ 1165.301557][T23244] ? lockdep_hardirqs_on+0x9c/0x150 [ 1165.301581][T23244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.301600][T23244] ? clear_bhb_loop+0x60/0xb0 [ 1165.301622][T23244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.301640][T23244] RIP: 0033:0x7f20e358e929 [ 1165.301657][T23244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1165.301672][T23244] RSP: 002b:00007f20e44b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.301692][T23244] RAX: ffffffffffffffda RBX: 00007f20e37b5fa0 RCX: 00007f20e358e929 [ 1165.301705][T23244] RDX: 0000000004000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 1165.301717][T23244] RBP: 00007f20e44b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.301727][T23244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.301737][T23244] R13: 0000000000000000 R14: 00007f20e37b5fa0 R15: 00007f20e38dfa28 [ 1165.301765][T23244] [ 1165.712629][T23246] loop6: detected capacity change from 0 to 63 [ 1165.751511][ T5897] Buffer I/O error on dev loop6, logical block 0, async page read [ 1165.786048][T23246] Buffer I/O error on dev loop6, logical block 0, async page read [ 1165.796117][T23246] Buffer I/O error on dev loop6, logical block 0, async page read [ 1165.805221][T23246] Buffer I/O error on dev loop6, logical block 0, async page read [ 1165.813419][T23246] Buffer I/O error on dev loop6, logical block 0, async page read [ 1165.836705][ T5897] Buffer I/O error on dev loop6, logical block 0, async page read [ 1165.851010][T23246] Buffer I/O error on dev loop6, logical block 0, async page read [ 1165.867766][ T5897] Buffer I/O error on dev loop6, logical block 0, async page read [ 1165.899497][ T5897] Buffer I/O error on dev loop6, logical block 0, async page read [ 1165.941738][ T5897] Buffer I/O error on dev loop6, logical block 0, async page read [ 1166.926031][T18163] usb 5-1: USB disconnect, device number 102 [ 1167.001069][T10967] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1167.201542][T10967] usb 4-1: Using ep0 maxpacket: 32 [ 1167.215785][T10967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.269939][T10967] usb 4-1: config 0 has no interfaces? [ 1167.303964][T10967] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1167.369861][T10967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.454096][T10967] usb 4-1: Product: syz [ 1167.484964][T10967] usb 4-1: Manufacturer: syz [ 1167.511599][T10967] usb 4-1: SerialNumber: syz [ 1167.552649][T10967] usb 4-1: config 0 descriptor?? [ 1167.987094][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1168.001153][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1168.015600][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1168.042819][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1168.056082][T23268] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4464'. [ 1168.113843][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1168.126477][T23100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1168.150492][T23100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1168.158372][T23100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1168.166064][T23100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1168.175233][T23100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1168.962994][ T3457] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.066926][ T3457] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.126124][T23273] chnl_net:caif_netlink_parms(): no params data found [ 1169.137568][T10967] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1169.173605][ T3457] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.224174][T18163] usb 4-1: USB disconnect, device number 110 [ 1169.248170][ T5847] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1169.295741][ T3457] bond0: (slave netdevsim0): Releasing backup interface [ 1169.313343][T10967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.330530][ T3457] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 1169.343797][T10967] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1169.355832][T10967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.367721][T10967] usb 5-1: Product: syz [ 1169.371995][T10967] usb 5-1: Manufacturer: syz [ 1169.390025][T10967] usb 5-1: SerialNumber: syz [ 1169.405082][T23273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.415288][T10967] usb 5-1: config 0 descriptor?? [ 1169.421279][T23273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.433008][T10967] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 1169.440124][T23273] bridge_slave_0: entered allmulticast mode [ 1169.447334][T10967] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 1169.449294][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 1169.456341][T23273] bridge_slave_0: entered promiscuous mode [ 1169.471433][T23273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.483101][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1169.484251][T23273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.508960][T23273] bridge_slave_1: entered allmulticast mode [ 1169.512130][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1169.517434][T23273] bridge_slave_1: entered promiscuous mode [ 1169.529137][ T5847] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1169.543553][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.552235][ T5847] usb 3-1: Product: syz [ 1169.556417][ T5847] usb 3-1: Manufacturer: syz [ 1169.561141][ T5847] usb 3-1: SerialNumber: syz [ 1169.576393][ T5847] usb 3-1: config 0 descriptor?? [ 1169.596466][ T5847] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1169.606826][ T5847] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1169.628919][T23273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.646076][T23273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.736908][T23273] team0: Port device team_slave_0 added [ 1169.745943][ T9] usb 5-1: USB disconnect, device number 103 [ 1169.775965][T23273] team0: Port device team_slave_1 added [ 1169.882831][T23273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.892595][T23273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.919700][T23273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.933092][T23273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.940484][T23273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.967025][T23273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.192713][ T5852] Bluetooth: hci4: command tx timeout [ 1170.202116][ T5847] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1170.209587][ T5847] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1171.048931][ T5847] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1171.082290][ T5847] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1171.119522][ T5847] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1171.128537][ T5847] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1171.149109][ T5847] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1171.157883][ T5847] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1171.637730][ T5847] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1171.647522][ T5847] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1171.670186][ T5847] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1171.678719][ T5847] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1171.685188][ T5847] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1171.696695][ T3457] bond0 (unregistering): (slave c@): Releasing backup interface [ 1171.709426][ T3457] @: left promiscuous mode [ 1171.738042][ T5847] usb 3-1: USB disconnect, device number 54 [ 1171.746003][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.756343][T23314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.788004][ T3457] bond_slave_1: left promiscuous mode [ 1171.804990][ T3457] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1171.814737][ T3457] macvlan2: left promiscuous mode [ 1171.822581][ T3457] bond0 (unregistering): Released all slaves [ 1171.843406][ T3457] bond1 (unregistering): Released all slaves [ 1171.916276][T23273] hsr_slave_0: entered promiscuous mode [ 1171.923453][T23273] hsr_slave_1: entered promiscuous mode [ 1171.936792][T23273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1171.953891][T23273] Cannot create hsr debugfs directory [ 1171.981708][T23317] netlink: 29 bytes leftover after parsing attributes in process `syz.3.4477'. [ 1172.038893][ T3457] tipc: Left network mode [ 1172.045154][ T3457] IPVS: stopping master sync thread 16987 ... [ 1172.284086][ T5852] Bluetooth: hci4: command tx timeout [ 1172.447684][T10967] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1172.537717][ T5847] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1172.629379][T10967] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.667158][T23333] netlink: 'syz.2.4481': attribute type 10 has an invalid length. [ 1172.696951][T10967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1172.708871][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 1172.731238][ T5847] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1172.741879][ T5847] usb 5-1: language id specifier not provided by device, defaulting to English [ 1172.742081][T10967] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1172.757950][ T5847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1172.794791][T10967] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1172.803333][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1172.813715][T10967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1172.820208][ T5847] usb 5-1: Manufacturer: 뇎冮Ꙝ푿႞锂ᙇ灡槦㈮飜빛㴮升Ⴄ荎˔⤊ᢎ稚鄞쭘耲㻨삺앹ꨨ鈦뚕湜萺뒛ꇉ摒툔욼蚈鹀樚蛁﹃뺐ᏪƲ㼘軇⠾尬콜ღ⏻㌎ᗨ鳉ꐤ㱉⵻ꐄ챮辳昍桘儬۲㪉፴櫼厚⦄Ⲽ浆捈숙뛮擅㡂化沤fl먻哈씏ᄙ򢚹 [ 1172.854454][ T5847] usb 5-1: SerialNumber: syz [ 1172.894031][T10967] usb 4-1: SerialNumber: syz [ 1172.931871][T23333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.985196][T23333] team0: Port device bond0 added [ 1173.149194][T10967] usb 4-1: 0:2 : does not exist [ 1173.165515][T10967] usb 4-1: unit 5 not found! [ 1173.218142][ T3457] hsr_slave_0: left promiscuous mode [ 1173.225110][ T3457] hsr_slave_1: left promiscuous mode [ 1173.243763][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.268693][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.277874][T10967] usb 4-1: USB disconnect, device number 111 [ 1173.362179][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1174.127154][T23350] kvm: Disabled LAPIC found during irq injection [ 1174.357328][ T5852] Bluetooth: hci4: command tx timeout [ 1175.276120][ T3457] team_slave_1 (unregistering): left promiscuous mode [ 1175.302932][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 1175.362580][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.426304][ T3457] team_slave_0 (unregistering): left promiscuous mode [ 1175.435727][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 1176.182818][ T5847] usb 5-1: USB disconnect, device number 104 [ 1176.468646][T23100] Bluetooth: hci4: command tx timeout [ 1176.604023][T23360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.554922][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.562342][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.474300][ T3457] IPVS: stop unused estimator thread 0... [ 1179.013601][T23273] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1179.111746][T23273] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1179.167052][T23273] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1179.215346][T23273] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1179.233908][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1179.233926][ T30] audit: type=1326 audit(1752736496.431:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23419 comm="syz.1.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee898e929 code=0x7ffc0000 [ 1179.321033][ T30] audit: type=1326 audit(1752736496.481:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23419 comm="syz.1.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee898e929 code=0x7ffc0000 [ 1179.607705][ T30] audit: type=1326 audit(1752736496.561:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23419 comm="syz.1.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcee898d290 code=0x7ffc0000 [ 1179.640212][T23438] netlink: 'syz.4.4499': attribute type 10 has an invalid length. [ 1179.686754][ T30] audit: type=1326 audit(1752736496.561:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23419 comm="syz.1.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee898e929 code=0x7ffc0000 [ 1179.798114][T23438] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1179.897840][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1179.958566][ T30] audit: type=1326 audit(1752736496.561:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23419 comm="syz.1.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcee898e929 code=0x7ffc0000 [ 1180.007547][ T30] audit: type=1326 audit(1752736496.561:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23419 comm="syz.1.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee898e929 code=0x7ffc0000 [ 1180.070014][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1180.083800][ T9] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1180.110835][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 1180.128834][ T30] audit: type=1326 audit(1752736496.561:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23419 comm="syz.1.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcee898e929 code=0x7ffc0000 [ 1180.212880][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1180.260265][ T9] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1180.288198][ T30] audit: type=1326 audit(1752736496.561:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23419 comm="syz.1.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee898e929 code=0x7ffc0000 [ 1180.314984][ T9] usb 3-1: Manufacturer: 뇎冮Ꙝ푿႞锂ᙇ灡槦㈮飜빛㴮升Ⴄ荎˔⤊ᢎ稚鄞쭘耲㻨삺앹ꨨ鈦뚕湜萺뒛ꇉ摒툔욼蚈鹀樚蛁﹃뺐ᏪƲ㼘軇⠾尬콜ღ⏻㌎ᗨ鳉ꐤ㱉⵻ꐄ챮辳昍桘儬۲㪉፴櫼厚⦄Ⲽ浆捈숙뛮擅㡂化沤fl먻哈씏ᄙ򢚹 [ 1180.315022][ T9] usb 3-1: SerialNumber: syz [ 1180.447429][T23273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.761443][T23273] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.967972][T21129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.975886][T21129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.047522][ T30] audit: type=1326 audit(1752736496.561:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23419 comm="syz.1.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcee898e929 code=0x7ffc0000 [ 1181.103360][T21129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.119732][T21129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.539794][T23273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.727007][T23273] veth0_vlan: entered promiscuous mode [ 1181.776667][T23273] veth1_vlan: entered promiscuous mode [ 1181.855264][ T30] audit: type=1326 audit(1752736496.561:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23419 comm="syz.1.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcee89858e7 code=0x7ffc0000 [ 1181.944966][T23273] veth0_macvtap: entered promiscuous mode [ 1182.082569][T23273] veth1_macvtap: entered promiscuous mode [ 1182.158200][T23458] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1182.278589][ T9] usb 3-1: USB disconnect, device number 55 [ 1182.338310][T23273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.379151][T23273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.437869][T23273] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.489131][T23273] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.518893][T23273] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.538113][T23273] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.842084][T23468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4503'. [ 1182.942667][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.020642][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.166872][ T6084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.229919][ T6084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.351556][T23490] netlink: 'syz.2.4508': attribute type 4 has an invalid length. [ 1183.855195][T23506] random: crng reseeded on system resumption [ 1184.988742][ T5920] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1185.219600][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 1185.258848][ T5920] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1185.273118][ T5920] usb 5-1: language id specifier not provided by device, defaulting to English [ 1185.389760][ T5920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1185.439694][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1185.492348][ T5920] usb 5-1: Manufacturer: 뇎冮Ꙝ푿႞锂ᙇ灡槦㈮飜빛㴮升Ⴄ荎˔⤊ᢎ稚鄞쭘耲㻨삺앹ꨨ鈦뚕湜萺뒛ꇉ摒툔욼蚈鹀樚蛁﹃뺐ᏪƲ㼘軇⠾尬콜ღ⏻㌎ᗨ鳉ꐤ㱉⵻ꐄ챮辳昍桘儬۲㪉፴櫼厚⦄Ⲽ浆捈숙뛮擅㡂化沤fl먻哈씏ᄙ򢚹 [ 1185.586306][ T5920] usb 5-1: SerialNumber: syz [ 1186.038317][T23527] netlink: 'syz.3.4513': attribute type 10 has an invalid length. [ 1186.345393][T23527] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1187.253998][ T5920] usb 5-1: USB disconnect, device number 105 [ 1187.315054][T23555] FAULT_INJECTION: forcing a failure. [ 1187.315054][T23555] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.342771][T23555] CPU: 0 UID: 0 PID: 23555 Comm: syz.2.4522 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1187.342798][T23555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1187.342811][T23555] Call Trace: [ 1187.342819][T23555] [ 1187.342828][T23555] dump_stack_lvl+0x189/0x250 [ 1187.342855][T23555] ? __pfx____ratelimit+0x10/0x10 [ 1187.342882][T23555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1187.342903][T23555] ? __pfx__printk+0x10/0x10 [ 1187.342932][T23555] ? __pfx___might_resched+0x10/0x10 [ 1187.342959][T23555] ? fs_reclaim_acquire+0x7d/0x100 [ 1187.342987][T23555] should_fail_ex+0x414/0x560 [ 1187.343018][T23555] should_failslab+0xa8/0x100 [ 1187.343042][T23555] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1187.343063][T23555] ? rcu_is_watching+0x15/0xb0 [ 1187.343081][T23555] ? key_alloc+0x34d/0x1030 [ 1187.343111][T23555] kmemdup_noprof+0x2b/0x70 [ 1187.343137][T23555] key_alloc+0x34d/0x1030 [ 1187.343173][T23555] keyring_alloc+0x45/0xb0 [ 1187.343196][T23555] lookup_user_key+0x3e3/0x1090 [ 1187.343223][T23555] ? irqentry_exit+0x74/0x90 [ 1187.343244][T23555] ? __pfx_lookup_user_key+0x10/0x10 [ 1187.343271][T23555] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1187.343302][T23555] ? rep_movs_alternative+0x4a/0x90 [ 1187.343326][T23555] __se_sys_add_key+0x2f5/0x400 [ 1187.343348][T23555] ? __pfx___se_sys_add_key+0x10/0x10 [ 1187.343376][T23555] ? do_syscall_64+0xbe/0x3b0 [ 1187.343392][T23555] ? __x64_sys_add_key+0x20/0xc0 [ 1187.343412][T23555] do_syscall_64+0xfa/0x3b0 [ 1187.343428][T23555] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.343451][T23555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.343468][T23555] ? clear_bhb_loop+0x60/0xb0 [ 1187.343488][T23555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.343504][T23555] RIP: 0033:0x7f759a58e929 [ 1187.343520][T23555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.343534][T23555] RSP: 002b:00007f759b3b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1187.343553][T23555] RAX: ffffffffffffffda RBX: 00007f759a7b5fa0 RCX: 00007f759a58e929 [ 1187.343565][T23555] RDX: 0000200000000080 RSI: 0000200000002180 RDI: 0000200000002240 [ 1187.343577][T23555] RBP: 00007f759b3b7090 R08: ffffffffffffffff R09: 0000000000000000 [ 1187.343588][T23555] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001 [ 1187.343598][T23555] R13: 0000000000000001 R14: 00007f759a7b5fa0 R15: 00007f759a8dfa28 [ 1187.343621][T23555] [ 1187.591008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1187.799078][T21690] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1187.850951][T23570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4526'. [ 1187.891580][T23559] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1187.925273][T21690] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1187.962675][T21690] usb 2-1: USB disconnect, device number 108 [ 1188.058347][T21691] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1188.229662][T21691] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 1188.240508][T21691] usb 3-1: config 0 has no interface number 0 [ 1188.271018][T21691] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 1188.297626][T21690] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1188.305346][T21691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.345066][T21691] usb 3-1: Product: syz [ 1188.373048][T21691] usb 3-1: Manufacturer: syz [ 1188.409251][ T5920] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1188.421257][T21691] usb 3-1: SerialNumber: syz [ 1188.450339][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1188.481074][T21691] usb 3-1: config 0 descriptor?? [ 1188.494817][T21690] usb 2-1: Using ep0 maxpacket: 32 [ 1188.511407][T21691] ftdi_sio 3-1:0.23: FTDI USB Serial Device converter detected [ 1188.544050][T21690] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1188.563272][T21691] usb 3-1: Detected SIO [ 1188.569414][ T5920] usb 6-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 1188.571385][T21690] usb 2-1: no configurations [ 1188.589608][T21691] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1188.607992][T21690] usb 2-1: can't read configurations, error -22 [ 1188.616236][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1188.630225][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1188.655166][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1188.668359][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.686544][ T5920] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1188.701995][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.716073][ T9] usb 4-1: config 0 has no interface number 0 [ 1188.732909][ T9] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1188.748090][ T5920] usb 6-1: Product: syz [ 1188.773627][ T5920] usb 6-1: Manufacturer: syz [ 1188.783000][ T5920] usb 6-1: SerialNumber: syz [ 1188.790251][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1188.810949][ T5920] usb 6-1: config 0 descriptor?? [ 1188.825618][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1188.848904][ T5847] usb 3-1: USB disconnect, device number 56 [ 1188.850709][ T5920] usb 6-1: ucan: probing device on interface #0 [ 1188.863137][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.871686][ T5847] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1188.883095][ T9] usb 4-1: Product: syz [ 1188.887303][ T9] usb 4-1: Manufacturer: syz [ 1188.892927][ T5920] usb 6-1: ucan: invalid EP count (0) [ 1188.894730][ T5847] ftdi_sio 3-1:0.23: device disconnected [ 1188.912589][ T5920] usb 6-1: ucan: probe failed; try to update the device firmware [ 1188.921549][ T9] usb 4-1: SerialNumber: syz [ 1188.960463][ T9] usb 4-1: config 0 descriptor?? [ 1189.037234][ T9] usb 6-1: USB disconnect, device number 37 [ 1189.216715][T23599] openvswitch: netlink: IP tunnel dst address not specified [ 1189.480991][T23603] syzkaller0: entered promiscuous mode [ 1189.486629][T23603] syzkaller0: entered allmulticast mode [ 1189.537264][T23605] binder: 23604:23605 ioctl c0306201 0 returned -14 [ 1189.586358][T23605] binder: 23604:23605 ioctl c0306201 0 returned -14 [ 1189.593492][T23605] binder: 23604:23605 ioctl c0306201 0 returned -14 [ 1190.012419][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1190.277737][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1190.289621][ T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1190.311202][ T9] usb 6-1: config 0 has no interface number 0 [ 1190.335161][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1190.383337][ T5920] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1190.404172][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.460672][ T9] usb 6-1: Product: syz [ 1190.528003][ T9] usb 6-1: Manufacturer: syz [ 1190.539884][ T9] usb 6-1: SerialNumber: syz [ 1190.561408][ T5920] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.575188][ T9] usb 6-1: config 0 descriptor?? [ 1190.605996][ T5920] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1190.624919][ T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1190.759668][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1190.769036][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.806992][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1190.815977][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1190.908217][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1190.976200][ T5920] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1190.991500][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1191.016561][T23620] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1191.248439][T18163] usb 4-1: USB disconnect, device number 112 [ 1191.445809][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 1191.445850][ T30] audit: type=1326 audit(1752736508.641:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23625 comm="syz.3.4540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb3d78e929 code=0x0 [ 1192.397964][T19988] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1192.562509][T19988] usb 5-1: Using ep0 maxpacket: 32 [ 1192.575322][T19988] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1192.585405][T19988] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1192.600029][T19988] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1192.611588][T19988] usb 5-1: config 1 has no interface number 0 [ 1192.619824][T19988] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1192.631646][T19988] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1192.646342][T19988] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1192.657385][T19988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.680469][T19988] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1192.782101][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1192.790570][ T5920] usb 6-1: USB disconnect, device number 38 [ 1192.823812][ T5920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1192.852170][ T5920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1192.865056][ T5920] quatech2 6-1:0.51: device disconnected [ 1192.910816][T19988] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1192.960332][ T30] audit: type=1326 audit(1752736510.161:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.5.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512178e929 code=0x7ffc0000 [ 1192.983559][ T30] audit: type=1326 audit(1752736510.161:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.5.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f512178e929 code=0x7ffc0000 [ 1193.018165][ T30] audit: type=1326 audit(1752736510.161:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.5.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512178e929 code=0x7ffc0000 [ 1193.048233][ T30] audit: type=1326 audit(1752736510.161:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.5.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f512178e929 code=0x7ffc0000 [ 1193.074720][ T30] audit: type=1326 audit(1752736510.161:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.5.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512178e929 code=0x7ffc0000 [ 1193.111971][ T30] audit: type=1326 audit(1752736510.161:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.5.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f512178e52b code=0x7ffc0000 [ 1193.160049][ T5920] usb 5-1: USB disconnect, device number 106 [ 1193.182349][ T5920] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1193.199815][ T30] audit: type=1326 audit(1752736510.161:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.5.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f512178e52b code=0x7ffc0000 [ 1193.237319][T18163] usb 3-1: USB disconnect, device number 57 [ 1193.256090][ T30] audit: type=1326 audit(1752736510.161:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.5.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f512178e52b code=0x7ffc0000 [ 1193.323261][ T30] audit: type=1326 audit(1752736510.161:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.5.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f512178e52b code=0x7ffc0000 [ 1193.333815][T23639] binder: 23638:23639 ioctl c0306201 0 returned -14 [ 1193.425051][T23622] delete_channel: no stack [ 1193.430076][T23639] binder: 23638:23639 ioctl c0306201 0 returned -14 [ 1193.458122][T23639] binder: 23638:23639 ioctl c0306201 0 returned -14 [ 1193.487099][T23649] FAULT_INJECTION: forcing a failure. [ 1193.487099][T23649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.504767][T23649] CPU: 0 UID: 0 PID: 23649 Comm: syz.2.4548 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1193.504795][T23649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1193.504806][T23649] Call Trace: [ 1193.504814][T23649] [ 1193.504824][T23649] dump_stack_lvl+0x189/0x250 [ 1193.504849][T23649] ? __pfx____ratelimit+0x10/0x10 [ 1193.504876][T23649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1193.504896][T23649] ? __pfx__printk+0x10/0x10 [ 1193.504918][T23649] ? __might_fault+0xb0/0x130 [ 1193.504948][T23649] should_fail_ex+0x414/0x560 [ 1193.504978][T23649] _copy_from_user+0x2d/0xb0 [ 1193.505001][T23649] snd_pcm_xfern_frames_ioctl+0x198/0x310 [ 1193.505027][T23649] ? __pfx_snd_pcm_xfern_frames_ioctl+0x10/0x10 [ 1193.505055][T23649] ? snd_pcm_common_ioctl+0x84e/0xbd0 [ 1193.505077][T23649] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 1193.505101][T23649] snd_pcm_ioctl+0x8b/0xb0 [ 1193.505127][T23649] __se_sys_ioctl+0xfc/0x170 [ 1193.505149][T23649] do_syscall_64+0xfa/0x3b0 [ 1193.505167][T23649] ? lockdep_hardirqs_on+0x9c/0x150 [ 1193.505216][T23649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.505235][T23649] ? clear_bhb_loop+0x60/0xb0 [ 1193.505257][T23649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.505275][T23649] RIP: 0033:0x7f759a58e929 [ 1193.505293][T23649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1193.505309][T23649] RSP: 002b:00007f759b3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1193.505329][T23649] RAX: ffffffffffffffda RBX: 00007f759a7b5fa0 RCX: 00007f759a58e929 [ 1193.505343][T23649] RDX: 0000200000000780 RSI: 0000000080184153 RDI: 0000000000000005 [ 1193.505356][T23649] RBP: 00007f759b3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.505368][T23649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.505380][T23649] R13: 0000000000000000 R14: 00007f759a7b5fa0 R15: 00007f759a8dfa28 [ 1193.505408][T23649] [ 1193.767654][T19988] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1193.796174][T23651] xt_policy: neither incoming nor outgoing policy selected [ 1193.811077][T23651] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4547'. [ 1193.953063][T19988] usb 6-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 1193.963719][T19988] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1194.002471][T19988] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1194.016244][T19988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.046143][T19988] usb 6-1: Product: syz [ 1194.051271][T19988] usb 6-1: Manufacturer: syz [ 1194.055995][T19988] usb 6-1: SerialNumber: syz [ 1194.064456][T19988] usb 6-1: config 0 descriptor?? [ 1194.110256][T19988] usb 6-1: ucan: probing device on interface #0 [ 1194.122247][T19988] usb 6-1: ucan: invalid EP count (0) [ 1194.138858][T19988] usb 6-1: ucan: probe failed; try to update the device firmware [ 1194.157931][T18163] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1194.342635][T19988] usb 6-1: USB disconnect, device number 39 [ 1194.389284][T18163] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1194.406065][T18163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.426997][T18163] usb 2-1: config 0 descriptor?? [ 1194.460611][T18163] cp210x 2-1:0.0: cp210x converter detected [ 1195.066233][T18163] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1195.083652][T18163] cp210x 2-1:0.0: querying part number failed [ 1195.120740][T18163] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1195.192737][T18163] usb 2-1: USB disconnect, device number 111 [ 1195.223072][T18163] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1195.254171][T18163] cp210x 2-1:0.0: device disconnected [ 1196.205650][ T5847] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1196.387899][T19988] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1196.427656][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 1196.436194][ T5847] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.457016][ T5847] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1196.476252][ T5847] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1196.487768][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.504347][ T5847] usb 4-1: Product: syz [ 1196.517566][ T5847] usb 4-1: Manufacturer: syz [ 1196.525417][ T5847] usb 4-1: SerialNumber: syz [ 1196.552554][T19988] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.583208][T19988] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1196.606337][T19988] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1196.622321][T19988] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1196.631844][T19988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.727631][T10967] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1197.030679][T23703] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1197.123280][T10967] usb 6-1: Using ep0 maxpacket: 16 [ 1197.124819][ T5847] usb 4-1: 0:2 : does not exist [ 1197.152682][T10967] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1197.165601][T10967] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.177360][T10967] usb 6-1: too many endpoints for config 1 interface 1 altsetting 48: 48, using maximum allowed: 30 [ 1197.570877][T10967] usb 6-1: config 1 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1197.792831][ T5847] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1197.826466][T19988] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1197.833831][ T5847] usb 4-1: USB disconnect, device number 113 [ 1197.925327][T19988] usb 2-1: invalid MIDI out EP 0 [ 1197.935708][T10967] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1197.967517][T10967] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1197.991028][T10967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.011889][T10967] usb 6-1: Product: syz [ 1198.016145][T10967] usb 6-1: Manufacturer: syz [ 1198.021371][T10967] usb 6-1: SerialNumber: syz [ 1198.083893][T10967] usb 6-1: selecting invalid altsetting 1 [ 1198.119054][T10967] usb 6-1: selecting invalid altsetting 0 [ 1198.124991][T19988] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1198.165484][T10967] usb 6-1: selecting invalid altsetting 0 [ 1198.192472][T10967] cdc_ncm 6-1:1.0: bind() failure [ 1198.221327][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1198.262778][T10967] usb 6-1: selecting invalid altsetting 0 [ 1198.280274][T10967] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 1198.345111][T10967] usb 6-1: USB disconnect, device number 40 [ 1198.399793][T23708] FAULT_INJECTION: forcing a failure. [ 1198.399793][T23708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.415154][T23708] CPU: 0 UID: 0 PID: 23708 Comm: syz.2.4564 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1198.415181][T23708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1198.415193][T23708] Call Trace: [ 1198.415200][T23708] [ 1198.415209][T23708] dump_stack_lvl+0x189/0x250 [ 1198.415234][T23708] ? __pfx____ratelimit+0x10/0x10 [ 1198.415261][T23708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1198.415282][T23708] ? __pfx__printk+0x10/0x10 [ 1198.415306][T23708] ? __might_fault+0xb0/0x130 [ 1198.415339][T23708] should_fail_ex+0x414/0x560 [ 1198.415369][T23708] _copy_from_iter+0x1db/0x16f0 [ 1198.415398][T23708] ? __pfx__copy_from_iter+0x10/0x10 [ 1198.415415][T23708] ? trace_rxrpc_txbuf+0x89/0x220 [ 1198.415440][T23708] ? rxrpc_alloc_data_txbuf+0x3f3/0x640 [ 1198.415470][T23708] rxrpc_send_data+0x1015/0x2160 [ 1198.415489][T23708] ? preempt_schedule+0xae/0xc0 [ 1198.415547][T23708] ? __pfx_rxrpc_send_data+0x10/0x10 [ 1198.415566][T23708] ? __pfx_default_wake_function+0x10/0x10 [ 1198.415592][T23708] ? rcu_is_watching+0x15/0xb0 [ 1198.415619][T23708] rxrpc_do_sendmsg+0x1098/0x1220 [ 1198.415652][T23708] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 1198.415669][T23708] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1198.415694][T23708] ? do_raw_spin_unlock+0x122/0x240 [ 1198.415724][T23708] ? rxrpc_sendmsg+0x4cc/0x710 [ 1198.415748][T23708] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1198.415769][T23708] __sock_sendmsg+0x219/0x270 [ 1198.415791][T23708] ____sys_sendmsg+0x505/0x830 [ 1198.415820][T23708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1198.415853][T23708] ? import_iovec+0x74/0xa0 [ 1198.415877][T23708] ___sys_sendmsg+0x21f/0x2a0 [ 1198.415901][T23708] ? __pfx____sys_sendmsg+0x10/0x10 [ 1198.415969][T23708] ? __fget_files+0x2a/0x420 [ 1198.415990][T23708] ? __fget_files+0x3a0/0x420 [ 1198.416022][T23708] __x64_sys_sendmsg+0x19b/0x260 [ 1198.416047][T23708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1198.416080][T23708] ? rcu_is_watching+0x15/0xb0 [ 1198.416105][T23708] ? do_syscall_64+0xbe/0x3b0 [ 1198.416127][T23708] do_syscall_64+0xfa/0x3b0 [ 1198.416147][T23708] ? lockdep_hardirqs_on+0x9c/0x150 [ 1198.416171][T23708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.416189][T23708] ? clear_bhb_loop+0x60/0xb0 [ 1198.416211][T23708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.416228][T23708] RIP: 0033:0x7f759a58e929 [ 1198.416245][T23708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.416260][T23708] RSP: 002b:00007f759b3b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.416279][T23708] RAX: ffffffffffffffda RBX: 00007f759a7b5fa0 RCX: 00007f759a58e929 [ 1198.416291][T23708] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000004 [ 1198.416303][T23708] RBP: 00007f759b3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.416315][T23708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1198.416326][T23708] R13: 0000000000000000 R14: 00007f759a7b5fa0 R15: 00007f759a8dfa28 [ 1198.416356][T23708] [ 1198.852496][T21691] usb 2-1: USB disconnect, device number 112 [ 1198.890646][T23714] netlink: 'syz.2.4566': attribute type 46 has an invalid length. [ 1199.037901][ T5847] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1199.187667][T18163] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1199.200779][ T5847] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1199.222683][T23725] openvswitch: netlink: Message has 24 unknown bytes. [ 1199.226625][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1199.256909][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1199.284314][ T5847] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1199.296690][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.305396][ T5847] usb 4-1: Product: syz [ 1199.310586][ T5847] usb 4-1: Manufacturer: syz [ 1199.315342][ T5847] usb 4-1: SerialNumber: syz [ 1199.325621][ T5847] usb 4-1: config 0 descriptor?? [ 1199.336047][ T5847] usb 4-1: ucan: probing device on interface #0 [ 1199.342544][T18163] usb 5-1: device descriptor read/64, error -71 [ 1199.349075][ T5847] usb 4-1: ucan: invalid EP count (1) [ 1199.354527][ T5847] usb 4-1: ucan: probe failed; try to update the device firmware [ 1199.543785][ T5920] usb 4-1: USB disconnect, device number 114 [ 1199.549967][T10967] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1199.599002][T18163] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1199.709682][T10967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1199.720824][T10967] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1199.731305][T10967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1199.741379][T10967] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1199.747679][T18163] usb 5-1: device descriptor read/64, error -71 [ 1199.751223][T10967] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1199.767347][T10967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.777445][T10967] usb 6-1: config 0 descriptor?? [ 1199.877927][T18163] usb usb5-port1: attempt power cycle [ 1200.000273][T10967] hdpvr 6-1:0.0: firmware version 0x69 dated ̫SJΏD_ :hݤDju7 [ 1200.011679][T10967] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 1200.162574][T23732] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.237702][T18163] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1200.278461][T18163] usb 5-1: device descriptor read/8, error -71 [ 1200.345310][T23736] input: syz1 as /devices/virtual/input/input131 [ 1200.352047][T23100] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1200.362313][T23100] Bluetooth: hci4: Injecting HCI hardware error event [ 1200.362376][T23736] input: failed to attach handler leds to device input131, error: -6 [ 1200.372053][T23100] Bluetooth: hci4: hardware error 0x00 [ 1200.409179][T23725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.429149][T23725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.444600][ T5847] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1200.507726][T23725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.524758][T23725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.534831][T18163] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1200.580257][T18163] usb 5-1: device descriptor read/8, error -71 [ 1200.651046][T10967] hdpvr 6-1:0.0: Could not setup controls [ 1200.670657][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 1200.681997][T10967] hdpvr 6-1:0.0: registering videodev failed [ 1200.685428][ T5847] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1200.701015][T18163] usb usb5-port1: unable to enumerate USB device [ 1200.710818][ T5847] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1200.721206][ T5847] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1200.772032][ T5847] usb 2-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40 [ 1200.775118][T10967] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 1200.781447][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.802186][ T5847] usb 2-1: Product: syz [ 1200.806573][ T5847] usb 2-1: Manufacturer: syz [ 1200.821336][ T5847] usb 2-1: SerialNumber: syz [ 1200.834157][T10967] usb 6-1: USB disconnect, device number 41 [ 1202.487942][ T5920] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1202.508189][T23100] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1202.648642][T21690] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1202.682946][ T5920] usb 5-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 1202.702108][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.756358][ T5920] usb 5-1: config 0 descriptor?? [ 1202.899895][T21690] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1202.910274][T21690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.913355][ T5920] gspca_main: tv8532-2.14.0 probing 0545:808b [ 1202.934734][T21690] usb 3-1: Product: syz [ 1203.000389][ T5847] usb 2-1: 0:2 : does not exist [ 1203.173163][ T5847] usb 2-1: USB disconnect, device number 113 [ 1203.311473][T21690] usb 3-1: Manufacturer: syz [ 1203.585149][T21690] usb 3-1: SerialNumber: syz [ 1203.619210][T21690] usb 3-1: config 0 descriptor?? [ 1203.827590][T18163] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1203.876041][T21690] usb 3-1: ignoring: probably an ADSL modem [ 1204.017694][T18163] usb 4-1: Using ep0 maxpacket: 8 [ 1204.044568][T18163] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1204.073259][T18163] usb 4-1: language id specifier not provided by device, defaulting to English [ 1204.110333][T21691] usb 5-1: USB disconnect, device number 111 [ 1204.130497][T18163] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1204.141372][T18163] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1204.149718][T18163] usb 4-1: Manufacturer: 뇎冮Ꙝ푿႞锂ᙇ灡槦㈮飜빛㴮升Ⴄ荎˔⤊ᢎ稚鄞쭘耲㻨삺앹ꨨ鈦뚕湜萺뒛ꇉ摒툔욼蚈鹀樚蛁﹃뺐ᏪƲ㼘軇⠾尬콜ღ⏻㌎ᗨ鳉ꐤ㱉⵻ꐄ챮辳昍桘儬۲㪉፴櫼厚⦄Ⲽ浆捈숙뛮擅㡂化沤fl먻哈씏ᄙ򢚹 [ 1204.303947][T23764] program syz.2.4580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1204.318319][T18163] usb 4-1: SerialNumber: syz [ 1204.390820][T23774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.409432][T23774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.532629][T23776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1206.320360][T23784] program syz.4.4586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1206.791512][T18163] usb 4-1: USB disconnect, device number 115 [ 1207.212678][T23792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4588'. [ 1207.395351][T23792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4588'. [ 1207.451547][T21690] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1207.637754][T21690] usb 3-1: USB disconnect, device number 58 [ 1209.372015][ T5920] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1209.997563][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 1210.106332][ T5920] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1210.127002][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.222507][ T5920] usb 3-1: Product: syz [ 1210.237003][ T5920] usb 3-1: Manufacturer: syz [ 1210.331845][ T5920] usb 3-1: SerialNumber: syz [ 1210.373145][ T5920] usb 3-1: config 0 descriptor?? [ 1210.423150][ T5920] as10x_usb: device has been detected [ 1210.454241][ T5920] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1210.464425][T10967] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1214.187526][ C1] sched: DL replenish lagged too much [ 1215.937607][T10967] usb 6-1: Using ep0 maxpacket: 16 [ 1216.654832][ T5920] usb 3-1: DVB: registering adapter 3 frontend 0 (Sky IT Digital Key (green led))... [ 1216.675871][ T5920] as10x_usb: error during firmware upload part1 [ 1216.684947][ T5920] Registered device Sky IT Digital Key (green led) [ 1217.032039][ T5920] usb 3-1: USB disconnect, device number 59 [ 1217.112037][T10967] usb 6-1: device descriptor read/all, error -71 [ 1217.161864][ T5920] Unregistered device Sky IT Digital Key (green led) [ 1217.178223][ T5920] as10x_usb: device has been disconnected [ 1217.457639][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1218.361181][ T9] usb 4-1: device descriptor read/64, error -71 [ 1237.673394][ T9] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1239.146488][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.878482][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.599252][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.620081][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1359.187412][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1359.194420][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23828/1:b..l P23816/1:b..l [ 1359.204475][ C1] rcu: (detected by 1, t=10503 jiffies, g=170909, q=1128512 ncpus=2) [ 1359.212668][ C1] task:syz.3.4595 state:R running task stack:26872 pid:23816 tgid:23815 ppid:18173 task_flags:0x40044c flags:0x00004006 [ 1359.227839][ C1] Call Trace: [ 1359.231147][ C1] [ 1359.234106][ C1] __schedule+0x16f5/0x4d00 [ 1359.238656][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1359.243985][ C1] ? __pfx___schedule+0x10/0x10 [ 1359.248859][ C1] ? __lock_acquire+0xab9/0xd20 [ 1359.253746][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1359.259069][ C1] preempt_schedule_irq+0xb5/0x150 [ 1359.264221][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1359.269989][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1359.275838][ C1] irqentry_exit+0x6f/0x90 [ 1359.280289][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1359.286297][ C1] RIP: 0010:lock_release+0x0/0x3e0 [ 1359.291441][ C1] Code: de e8 94 f6 58 03 48 8b 3c 24 e9 08 fa ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 [ 1359.311080][ C1] RSP: 0018:ffffc9000215f2d0 EFLAGS: 00000202 [ 1359.317172][ C1] RAX: 0000000000000001 RBX: ffffffff903e0c01 RCX: 67c78d1c48975900 [ 1359.325170][ C1] RDX: ffffc9000215f301 RSI: ffffffff8172aae5 RDI: ffffffff8e13f0e0 [ 1359.333164][ C1] RBP: dffffc0000000000 R08: ffffc9000215f7f0 R09: 0000000000000000 [ 1359.341155][ C1] R10: ffffc9000215f3f8 R11: fffff5200042be81 R12: ffffc9000215f800 [ 1359.349159][ C1] R13: ffffc90002158000 R14: ffffc9000215f3a8 R15: ffffffff8172aae5 [ 1359.357163][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1359.362313][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1359.367447][ C1] unwind_next_frame+0x19a9/0x2390 [ 1359.372583][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1359.377722][ C1] ? kmem_cache_free+0x166/0x400 [ 1359.382693][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1359.388879][ C1] arch_stack_walk+0x11c/0x150 [ 1359.393676][ C1] ? exit_mmap+0x53f/0xb50 [ 1359.398129][ C1] stack_trace_save+0x9c/0xe0 [ 1359.402834][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1359.408227][ C1] ? get_signal+0x1286/0x1340 [ 1359.412922][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.419022][ C1] kasan_save_track+0x3e/0x80 [ 1359.423729][ C1] ? kasan_save_track+0x3e/0x80 [ 1359.428601][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1359.433382][ C1] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1359.438953][ C1] ? kmem_cache_free+0x166/0x400 [ 1359.443973][ C1] __kasan_kmalloc+0x93/0xb0 [ 1359.448595][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 1359.453989][ C1] ? kmem_cache_free+0x166/0x400 [ 1359.458949][ C1] ? exit_mmap+0x53f/0xb50 [ 1359.463381][ C1] kmem_cache_free+0x166/0x400 [ 1359.468171][ C1] exit_mmap+0x53f/0xb50 [ 1359.472434][ C1] ? uprobe_clear_state+0x20f/0x290 [ 1359.477663][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1359.482452][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1359.488117][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1359.492827][ C1] ? uprobe_clear_state+0x274/0x290 [ 1359.498149][ C1] __mmput+0x118/0x420 [ 1359.502239][ C1] exit_mm+0x1da/0x2c0 [ 1359.506343][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1359.510957][ C1] ? rcu_is_watching+0x15/0xb0 [ 1359.515874][ C1] do_exit+0x648/0x22e0 [ 1359.520081][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1359.525226][ C1] ? __pfx_do_exit+0x10/0x10 [ 1359.529841][ C1] ? cgroup_freezing+0x20/0x360 [ 1359.534733][ C1] do_group_exit+0x21c/0x2d0 [ 1359.539347][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1359.544623][ C1] get_signal+0x1286/0x1340 [ 1359.549176][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 1359.554764][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1359.560099][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1359.566304][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 1359.571800][ C1] exit_to_user_mode_loop+0x75/0x110 [ 1359.577107][ C1] do_syscall_64+0x2bd/0x3b0 [ 1359.581774][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1359.587000][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.593088][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1359.597794][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.603710][ C1] RIP: 0033:0x7ffb3d78e929 [ 1359.608231][ C1] RSP: 002b:00007ffb3e639038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1359.616668][ C1] RAX: 0000000000000000 RBX: 00007ffb3d9b5fa0 RCX: 00007ffb3d78e929 [ 1359.624660][ C1] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 1359.632666][ C1] RBP: 00007ffb3d810ca1 R08: 0000200000000000 R09: 0000000000000000 [ 1359.640665][ C1] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000000 [ 1359.648661][ C1] R13: 0000000000000001 R14: 00007ffb3d9b5fa0 R15: 00007ffb3dadfa28 [ 1359.656674][ C1] [ 1359.659710][ C1] task:syz.5.4598 state:R running task stack:27528 pid:23828 tgid:23828 ppid:23826 task_flags:0x40004c flags:0x00004000 [ 1359.673748][ C1] Call Trace: [ 1359.677042][ C1] [ 1359.679994][ C1] __schedule+0x16f5/0x4d00 [ 1359.684637][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1359.689968][ C1] ? __pfx___schedule+0x10/0x10 [ 1359.694865][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1359.700190][ C1] preempt_schedule_irq+0xb5/0x150 [ 1359.705332][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1359.711094][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1359.716928][ C1] irqentry_exit+0x6f/0x90 [ 1359.721367][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1359.727367][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 1359.732671][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 2b 01 02 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 1359.752307][ C1] RSP: 0018:ffffc90003f6f3d0 EFLAGS: 00000206 [ 1359.758397][ C1] RAX: cda352a2c70ecd00 RBX: 0000000000000202 RCX: cda352a2c70ecd00 [ 1359.766389][ C1] RDX: 0000000000000001 RSI: ffffffff8db869c3 RDI: ffffffff8be29d80 [ 1359.774388][ C1] RBP: ffff8880784fc718 R08: ffffc90003f6f5f0 R09: 0000000000000000 [ 1359.782389][ C1] R10: ffffc90003f6f5b8 R11: fffff520007edeb9 R12: 0000000000000001 [ 1359.790388][ C1] R13: 0000000000000001 R14: ffffffff8e13f0e0 R15: ffff8880784fbc00 [ 1359.798495][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1359.803645][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1359.808785][ C1] unwind_next_frame+0x19a9/0x2390 [ 1359.814034][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1359.819182][ C1] ? arch_stack_walk+0xe4/0x150 [ 1359.824076][ C1] __unwind_start+0x5b9/0x760 [ 1359.828781][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1359.834990][ C1] arch_stack_walk+0xe4/0x150 [ 1359.839705][ C1] ? stack_trace_save+0x9c/0xe0 [ 1359.844592][ C1] stack_trace_save+0x9c/0xe0 [ 1359.849292][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1359.854712][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1359.859945][ C1] kasan_save_stack+0x3e/0x60 [ 1359.864702][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1359.869927][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1359.876106][ C1] call_rcu+0x157/0x9c0 [ 1359.880300][ C1] ? __pfx_call_rcu+0x10/0x10 [ 1359.885021][ C1] ? exit_mmap+0x53f/0xb50 [ 1359.889466][ C1] kmem_cache_free+0x309/0x400 [ 1359.894261][ C1] exit_mmap+0x53f/0xb50 [ 1359.898526][ C1] ? uprobe_clear_state+0x20f/0x290 [ 1359.903765][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1359.908560][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1359.914227][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1359.918936][ C1] ? uprobe_clear_state+0x274/0x290 [ 1359.924176][ C1] __mmput+0x118/0x420 [ 1359.928271][ C1] exit_mm+0x1da/0x2c0 [ 1359.932364][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1359.936976][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 1359.942456][ C1] ? rcu_is_watching+0x15/0xb0 [ 1359.947241][ C1] do_exit+0x648/0x22e0 [ 1359.951422][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 1359.956652][ C1] ? __pfx_do_exit+0x10/0x10 [ 1359.961267][ C1] ? rcu_is_watching+0x15/0xb0 [ 1359.966060][ C1] __x64_sys_exit+0x40/0x40 [ 1359.970597][ C1] x64_sys_call+0x21a3/0x21c0 [ 1359.975298][ C1] do_syscall_64+0xfa/0x3b0 [ 1359.979815][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1359.985042][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.991128][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1359.995833][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.001743][ C1] RIP: 0033:0x7f512178e929 [ 1360.006213][ C1] RSP: 002b:00007f51226a9fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 1360.014653][ C1] RAX: ffffffffffffffda RBX: 00007f51219b5fa0 RCX: 00007f512178e929 [ 1360.022652][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1360.030744][ C1] RBP: 00007f5121810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1360.038736][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1360.046725][ C1] R13: 0000000000000000 R14: 00007f51219b5fa0 R15: 00007f5121adfa28 [ 1360.054740][ C1] [ 1363.965080][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.985507][ T1300] ieee802154 phy1 wpan1: encryption failed: -22