last executing test programs: 1m42.904187867s ago: executing program 1 (id=187): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400000000000200, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x4, {0x1, @raw_data="9db463c5bd340181eb27dc90d7156ac0911d350884300cc718700eef1b2f5f8a5f2afeac293a1cfc06938ad041fcc5da7a100d8b3be7ba33e4f82d72ede4ed761f9ac9890578e8017e505d5d9fb7b5b200ad2d4ee93ba649e13d58e3b8edb6c93a759d7c5bba3199696b85dba326ef1b6befe960da1321a900ba581b1a19987a1bb16680ce3b01a1220fe05d9753f4ca089cdfd2f6e04646062201c6447bae763f46e1eba150256de2bd8e000e7389e50c90c4c970e249835366ad7d4919005e188de86c3ebd240a"}, 0xfffffe00}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r3, 0x6}, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) unshare(0x2000200) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x40000000, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x4}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffd, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 1m40.551393666s ago: executing program 1 (id=195): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x80) ioctl$FE_READ_UNCORRECTED_BLOCKS(r2, 0x80046f49, &(0x7f00000001c0)) r3 = openat$dsp(0xffffff9c, 0x0, 0x8a880, 0x0) read$dsp(r3, &(0x7f00000000c0)=""/82, 0x52) sendmmsg$unix(r1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r5 = io_uring_setup(0x7786, &(0x7f0000000400)={0x0, 0x1, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x100000000001, 0x0) (async) sendfile(r8, r9, 0x0, 0x20000005) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000280)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000000340)={0x28, 0x2, r10, r11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (rerun: 32) 1m40.508238979s ago: executing program 4 (id=196): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x7ff, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0xf3b, 0xb, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x7, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x4, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xff, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x2, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x5a70cef4, 0x1, 0x5], [0x10000007, 0x9, 0xc000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x0, 0xd, 0x3a3, 0x66abcbd2, 0x101, 0x1000000, 0x0, 0x6, 0x7fff, 0x6, 0x400, 0x4, 0x6, 0x800, 0xff, 0x5, 0x800, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x20002, 0x4559, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c9368c, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x3, 0x1, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x10000005, 0xb, 0x2, 0x5, 0x105, 0x0, 0x1ef, 0x5, 0x5, 0x200086, 0x3, 0x303c, 0xfffffffa, 0x8001, 0x40000005, 0x2, 0x2, 0x3fffff, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x543, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x3000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0x8, 0xbb, 0x2, 0x3, 0x7ff, 0x4, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x25], [0x40009, 0x6, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xfffffffe, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x80001, 0x5, 0x1, 0x10, 0x14c, 0x60a7, 0xfffffffc, 0xe, 0x5, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x8, 0xaf, 0x20000008, 0x5, 0x226, 0x1, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd3, 0x8, 0xb, 0xfff]}, 0x45c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x0, 0x0}, 0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x200000000000003) r3 = syz_io_uring_setup(0x2d8e, &(0x7f0000001a00)={0x0, 0x27c9, 0x0, 0x1, 0x40000}, &(0x7f0000000080)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x54, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x110, 0xc}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x72be92819639f682, 0xb9cd8224dab94072}) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000000057c801"], 0xd) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tracing={r1}}, 0x20) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r10 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, 0x0, 0x0) bind$inet(r10, 0x0, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) recvmmsg$unix(r11, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) landlock_restrict_self(r9, 0x9) 1m40.295195105s ago: executing program 1 (id=198): socket$kcm(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x100) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x15, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m39.246371838s ago: executing program 1 (id=202): creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, 0x201880, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/159, 0x9f}, {0x0}], 0x2, 0xe, 0x2) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) 1m38.967704586s ago: executing program 1 (id=203): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="94010000100001002bb5700000000000ffffffff000000000000000000000000000000000000000000000000400000000000ecdf4e2200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x4050) 1m38.589802361s ago: executing program 1 (id=204): r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xb4, 0x20000) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/123, 0x7b}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/17, 0x11}, {&(0x7f0000000940)=""/61, 0x3d}, {&(0x7f0000000980)=""/236, 0xec}], 0x5}, 0xde}, {{&(0x7f0000000b00)=@nfc_llcp, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/6, 0x6}, {&(0x7f0000000bc0)=""/12, 0xc}, {&(0x7f0000000c00)=""/137, 0x89}], 0x3, &(0x7f0000000d00)=""/78, 0x4e}, 0x8}, {{&(0x7f0000000d80)=@can, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)=""/2, 0x2}], 0x1, &(0x7f0000000e80)=""/205, 0xcd}, 0xfffffff5}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f80)=""/23, 0x17}, {&(0x7f0000000fc0)}], 0x2}, 0x8}, {{&(0x7f0000001040)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/130, 0x82}, {&(0x7f00000011c0)=""/108, 0x6c}, {&(0x7f0000001240)=""/4, 0x4}], 0x3, &(0x7f00000012c0)=""/1, 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000001300)=""/149, 0x95}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/226, 0xe2}], 0x4, &(0x7f0000004a00)=""/211, 0xd3}, 0xfffffff0}], 0x6, 0x40000000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000001180)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r3 = getpgrp(0xffffffffffffffff) timer_create(0x4, &(0x7f0000000280)={0x0, 0x32, 0x4, @tid=r3}, &(0x7f0000000300)) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000340)) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000001800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf6f4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0xe, 0x43, {0x7, 0x25, 0x1, 0x4, 0x7a, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x0, 0x40, {0x7, 0x25, 0x1, 0xc, 0xea, 0xffc3}}}}}}}}]}}, 0x0) close(r2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x3fc, 0x5d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0x3, 0x0, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0xfe01, 0x3, 0x1, {0x22, 0xa50}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0xfc, 0x15}}}}}]}}]}}, &(0x7f0000000240)={0xfffffffffffffd11, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x47, 0xec, 0x3, 0x10, 0x4}, 0x18, &(0x7f0000000180)={0x5, 0xf, 0x18, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x64, 0x1, 0x6, 0x0, 0xfffa, [0x50]}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x35, &(0x7f0000000200)=@string={0x35, 0x3, "b7288fd88d2b59f9313e5fc73859fc9e0861b38f0acd2fb3d30bd11ddd9f897cda8f103eb5c14e8c58e04213c4f66ec6e84067"}}]}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 1m37.952652411s ago: executing program 32 (id=204): r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xb4, 0x20000) recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/123, 0x7b}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/17, 0x11}, {&(0x7f0000000940)=""/61, 0x3d}, {&(0x7f0000000980)=""/236, 0xec}], 0x5}, 0xde}, {{&(0x7f0000000b00)=@nfc_llcp, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/6, 0x6}, {&(0x7f0000000bc0)=""/12, 0xc}, {&(0x7f0000000c00)=""/137, 0x89}], 0x3, &(0x7f0000000d00)=""/78, 0x4e}, 0x8}, {{&(0x7f0000000d80)=@can, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)=""/2, 0x2}], 0x1, &(0x7f0000000e80)=""/205, 0xcd}, 0xfffffff5}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f80)=""/23, 0x17}, {&(0x7f0000000fc0)}], 0x2}, 0x8}, {{&(0x7f0000001040)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/130, 0x82}, {&(0x7f00000011c0)=""/108, 0x6c}, {&(0x7f0000001240)=""/4, 0x4}], 0x3, &(0x7f00000012c0)=""/1, 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000001300)=""/149, 0x95}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/226, 0xe2}], 0x4, &(0x7f0000004a00)=""/211, 0xd3}, 0xfffffff0}], 0x6, 0x40000000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000001180)) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r3 = getpgrp(0xffffffffffffffff) timer_create(0x4, &(0x7f0000000280)={0x0, 0x32, 0x4, @tid=r3}, &(0x7f0000000300)) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000340)) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000001800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf6f4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0xe, 0x43, {0x7, 0x25, 0x1, 0x4, 0x7a, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x0, 0x40, {0x7, 0x25, 0x1, 0xc, 0xea, 0xffc3}}}}}}}}]}}, 0x0) close(r2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x3fc, 0x5d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0x3, 0x0, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0xfe01, 0x3, 0x1, {0x22, 0xa50}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0xfc, 0x15}}}}}]}}]}}, &(0x7f0000000240)={0xfffffffffffffd11, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x47, 0xec, 0x3, 0x10, 0x4}, 0x18, &(0x7f0000000180)={0x5, 0xf, 0x18, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x64, 0x1, 0x6, 0x0, 0xfffa, [0x50]}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x35, &(0x7f0000000200)=@string={0x35, 0x3, "b7288fd88d2b59f9313e5fc73859fc9e0861b38f0acd2fb3d30bd11ddd9f897cda8f103eb5c14e8c58e04213c4f66ec6e84067"}}]}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 1m37.936546479s ago: executing program 4 (id=207): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x48a680) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0xe, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket(0x400000000010, 0x3, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="201800000060"], 0x0, 0x0}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) 1m36.674294661s ago: executing program 4 (id=213): r0 = socket$inet6(0xa, 0x1, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e2400000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f"], 0xd8}}, 0x20008004) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl(r0, 0x8b27, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f00000002c0)={0x18, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040011}, 0x40000) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@private=0x4a010101, @in6=@remote, 0xe22, 0x62, 0x4, 0x8, 0xa, 0x0, 0xa0, 0x0, 0x0, r3}, {0x2, 0x0, 0x18, 0x0, 0xfffffffffffffffe, 0x7}, {0x0, 0x0, 0x0, 0x9}, 0x0, 0x6e6bbc, 0x1, 0x0, 0x4, 0x2}, {{@in=@empty, 0x4d6, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x0, 0x3}}, 0xe8) (async) close(r0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1e94, 0x4, 0x4, 0x5, 0x5, 0xfffffffb, 0xe11}, 0x1c) 1m36.055444181s ago: executing program 4 (id=216): creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, 0x201880, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) (fail_nth: 5) 1m35.559538216s ago: executing program 4 (id=218): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @random="a0357796e7aa"}, 0x10) 1m35.033085323s ago: executing program 4 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x80, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000087fe0000000000000008000f00fd000000", 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x80, 0x12d5c, 0x12d59}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000087fe0000000000000008000f00fd000000", 0x24) (async) 1m34.360326212s ago: executing program 33 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x80, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000087fe0000000000000008000f00fd000000", 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x80, 0x12d5c, 0x12d59}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000087fe0000000000000008000f00fd000000", 0x24) (async) 58.469239721s ago: executing program 2 (id=372): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0x2001) (async) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0x2001) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) ioctl$HIDIOCSREPORT(r1, 0x40184810, &(0x7f0000000000)={0x2, 0x2, 0x200003}) (async) ioctl$HIDIOCSREPORT(r1, 0x40184810, &(0x7f0000000000)={0x2, 0x2, 0x200003}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000080)={0x2, 0x200, 0xe4b}) 56.714654203s ago: executing program 2 (id=389): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="004102"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001040)={0x84, &(0x7f00000003c0)={0x20, 0x19, 0x5, "5eaf896f3a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f00000006c0)={0x20, 0x0, 0x4, "5d00e390"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x5b}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000005c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) 54.69144182s ago: executing program 6 (id=398): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000201c1b341b00000000000109022400c10000900009040100010300020009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000240)={0x191, 0x258, 0x60, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x800, 0x0, 0xf23d, 0x2d, 0x0, 0x0, 0x6}) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xfffffffd, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) read$FUSE(r3, &(0x7f0000002f40)={0x2020}, 0xfffffd24) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080)={0x8}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x5, 0x4, 0x3d0, 0x2f8, 0x2f8, 0x0, 0x3e8, 0x3e8, 0x3e8, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@SECMARK={0x0, 'SECMARK\x00', 0x0, {0x1, 0x2, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @private}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x88c8, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x467) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) (rerun: 64) 54.488916947s ago: executing program 3 (id=400): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000200)) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x35, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x8000, 0x2, 0x1, {0x22, 0x880}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x6, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x29, 0x3, 0x2, 0x40, 0x7a}, 0x43, &(0x7f0000000140)={0x5, 0xf, 0x43, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "b01aa5681fe3af735264ebe4b76fa1e5"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x4, 0x1, 0x3, 0xb}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x34, 0x7f, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x0, 0x6, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x84, 0x9, 0xff}]}, 0x7, [{0xf3, &(0x7f00000001c0)=@string={0xf3, 0x3, "9ace6869a644c26b8bf094bb67187fe0554db632626157e063089eabb512019a61ec71b64a84ebbf4df76f8e79d5d0976e31968c82b094f69ff37fdc88232f0c84db692ea7db35830181135691a89879392ff75777c64cdaa074caa44152edb35c2493316c17b9b97d8c3bbb703ccf1bf7a4db363f8ef2b00b0ffb615ba98f1a293374af7d043b539739c761f7fe6f6ba7d84c9d8e1626d2722de975986755d956f5b1fd0e720d1fb7b6c6113ecf85742662cd07ed7f14daa098602515a50ba8e5e8f48d794aea2ca618ddb2d0077ada8ce91a1128f1821d9a7ccf6cd3060eb9643484c48ad50063e4be5a1a8304fc880b"}}, {0x44, &(0x7f00000002c0)=@string={0x44, 0x3, "2a7b4a7a20a149a45588c96e4118d5488d16338dab04235718e8c400585a934b1addfa06d2eac71b1f045339b3e24827dc6d7c4ecab7d29caed2f49b87c9afd44156"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180a}}, {0x57, &(0x7f0000000380)=@string={0x57, 0x3, "9fd66c90065902c06e82ed59a20639e2d6b00283db30ab20aff7c529d98c61b4993cf684016520a2c5ae650cb36185412eb98e3a1ae67e34e203125104df680a0a1bcbe5a1d2bc310ba7970b3480e864fdf2f4bcb1"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x449}}, {0xcb, &(0x7f0000000440)=@string={0xcb, 0x3, "5e371e666d65c0fb271c2618e156a1c973c5445ecaac44b4a832bd253aa82313e7ad569ef78914ebc410f95c7a4acba6da6114d798045c57251860f348fdd4e4a6f2b2e2cc8c11944715e974780d45d44b348eac83d6f7a96a0d8490d0cb95daa2cd5e4ebfa7471cbb8a1dcd68f0b51b1d07d9b61d300f100610e2112b08fa1b108de2fd0721ccfcfe5b381cc974fa723c3432d8d8be89ea369387e30d8d3361dee14d872b8e9759993db435ad713ea9c267244131fdb1a54b3e45bcf4716fa2881a736e0fcbc56688"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1809}}]}) write$binfmt_script(r2, &(0x7f0000000cc0)={'#! ', './file0', [], 0xa, "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"}, 0x5ce) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x1) 54.016802292s ago: executing program 2 (id=404): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000020000200000004000000000000001c000000000000000000"], 0x68}, 0x0) 53.981752018s ago: executing program 2 (id=405): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x2, 0x13090}, &(0x7f0000000340), &(0x7f0000000080), &(0x7f0000000000)) exit(0x10) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xb, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x8, 0x39, {0x39, 0x9, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee4c307a75e29b32f71d431e7031ff8d6daab38abcf58da76c022fb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000380)='\b', 0x1}], 0x1) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_pidfd_open(0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000040)="80") preadv(r5, &(0x7f0000001440)=[{&(0x7f00000014c0)=""/4112, 0x1010}, {0x0}], 0x2, 0xffff3702, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xeb, 0xa9, 0x28, 0x10, 0xa168, 0x614, 0xb63f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x7f, 0x80, 0xa, "", [{{0x9, 0x4, 0x63, 0x5, 0x0, 0x19, 0x5c, 0xda, 0x9}}]}}]}}, 0x0) 53.445919076s ago: executing program 5 (id=408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070003010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000e800005800038054"], 0x108}}, 0x0) 53.174573305s ago: executing program 5 (id=409): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x81, 0xfffffff7, 0x1, 0x100, 0xdbd}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) mbind(&(0x7f00006cb000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000100)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x0) 53.019233184s ago: executing program 3 (id=410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491109b3426c8928f3d97cb", 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x8000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/161, 0xa1}], 0x1, 0x0, 0x0, 0x2}, 0x38, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) 52.764918935s ago: executing program 5 (id=411): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400000000000200, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x4, {0x1, @raw_data="9db463c5bd340181eb27dc90d7156ac0911d350884300cc718700eef1b2f5f8a5f2afeac293a1cfc06938ad041fcc5da7a100d8b3be7ba33e4f82d72ede4ed761f9ac9890578e8017e505d5d9fb7b5b200ad2d4ee93ba649e13d58e3b8edb6c93a759d7c5bba3199696b85dba326ef1b6befe960da1321a900ba581b1a19987a1bb16680ce3b01a1220fe05d9753f4ca089cdfd2f6e04646062201c6447bae763f46e1eba150256de2bd8e000e7389e50c90c4c970e249835366ad7d4919005e188de86c3ebd240a"}, 0xfffffe00}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r3, 0x6}, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) unshare(0x2000200) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {0x6000000}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x4}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xfffd, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 51.96735501s ago: executing program 5 (id=415): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r2 = syz_clone(0x81002400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) setns(r3, 0x10000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000040)=""/119, 0x77) (async) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000240)='\x00') 51.827255109s ago: executing program 3 (id=417): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x42) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x17, 0x0, 0x80000001, 0xfffffffc, 0x100, 0xffffffffffffffff, 0x75, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x8}, {r1, 0x4201}], 0x2, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 51.718682921s ago: executing program 0 (id=419): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001ffffbeda00", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 51.456642365s ago: executing program 6 (id=420): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r2, &(0x7f0000000540)={0x2a, 0x1, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x7, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x20002, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x0, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0xe, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x400, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x478}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.259737571s ago: executing program 6 (id=421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r1 = socket$inet6(0xa, 0x80003, 0x6) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000007b00bc0389c0fc574fa49661c121222d17190be88a39b7cce14d3f62c0b7380d56e3c58062533fe02dc9d2de1919a63cd4bcc592f50abc4ca610319071cd1d3495f8cf37bda2468793b679bec57520a9d0dd6ae6d9c59488617a554a218dd366c51af903e7165938c3488dbb87d3741fa52d4fadf8946c601e68bf303a015eee44ab59865fb801057dffd8f6095f21", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000300), 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1e8, 0x1e8, 0x1e8, 0x2f8, 0x2f8, 0x1e8, 0x4, 0x0, {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0x3b8cce7e0d3c366d, 0xffffff00, 0xd, 0xe, {@mac, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x4, 0x8, 0x1, 0x10, 0x8000, 0x4, 'pim6reg1\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xc0, 0x4, {0xbc84}}}}, {{@arp={@local, @multicast1, 0xffffff00, 0xff000000, 0xc, 0x8, {@mac=@local, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x100, 0x2f, 0x0, 0x4, 'vxcan1\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x340}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='{', 0x1}], 0x1}}], 0x1, 0x4c040) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xff00) close(r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8004}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000480)=[@nested_load_syzos={0x136, 0x262, {0x2, 0x3, [@nested_vmlaunch={0x12f, 0x18, 0x1}, @code={0xa, 0x7e, {"0f01c9650f01c5c744240020540000c74424020cd86115c7442406000000000f011424b948060000b802000000ba000000000f30400f0fe1b6c74424000a000000c744240200480000c7442406000000000f011c24400f005c7a0066ba430066ed66b8a8000f00d867410f1c12"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x17, 0xffffffff00000000, 0x4, 0x4}}, @nested_load_code={0x12e, 0x7d, {0x0, "66baf80cb87cc6d482ef66bafc0cb8c0cd0000ef400f070fc77d8466baf80cb8e6681682ef66bafc0c66b8ef0066ef0f3264460f01c866baf80cb8849fe08def66bafc0cb800280000ef66b89c000f00d8c422618c15000000000f20d835200000000f22d8"}}, @in_dx={0x69, 0x20, {0x5766, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x2000, 0x9e16}}, @uexit={0x0, 0x18, 0xffffffffffffffef}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @code={0xa, 0x7f, {"0fc71a410f7991de1a22aab9800000c00f3235002000000f30362e410f79a9d220000066baf80cb8bc94f58bef66bafc0ced66bad00466ed410f3566baf80cb866e1c887ef66bafc0c66b8002866efb9a60a0000b88cf07078ba57e3dd100f30b9800000c00f3235010000000f30"}}]}}], 0x262}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000000780)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000740)}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x48, 0xec3, 0xfdffffffffffb5b2, 0x4, 0xc, 0x8000000000000000], 0x0, 0x0, 0x1e010000}, &(0x7f0000000200)=0x78) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) 51.088818851s ago: executing program 0 (id=422): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000001800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf6f4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0xe, 0x43, {0x7, 0x25, 0x1, 0x4, 0x7a, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x0, 0x40, {0x7, 0x25, 0x1, 0xc, 0xea, 0xffc3}}}}}}}}]}}, 0x0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@deltaction={0x14, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20000844) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,']) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 50.673074364s ago: executing program 3 (id=423): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x39, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfc6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x4, 0x0, 0x2, 0xb, 0x9, 0xffffffffffffffff, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0xa, 0xa, 0x9, 0x40, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000500)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x2, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x2, 0x2, 0xc, 0x9}, {0x1, 0x1, 0xf, 0xd}, {0x1, 0x4, 0xb, 0x3}], 0x10, 0x13}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x43}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xc, 0x5, 0x1281f16c}, 0x10, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6cc, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5}, 0x50) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x8}, 0x18) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x21, 0x5, 0x0, 0x4, 0x10008, r7, 0x8, '\x00', r2, r8, 0x2, 0x1, 0x1, 0x0, @void, @value, @value=r8}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xc, 0x15, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x9, 0x7, 0xffffffffffffffff, 0x10}, @generic={0x7, 0x1, 0x3, 0x58d0, 0xfffffffd}, @jmp={0x5, 0x0, 0x6, 0x3, 0x0, 0x20, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0xd31c, 0xad, &(0x7f0000000a00)=""/173, 0x41000, 0x14, '\x00', 0x0, @fallback=0x8, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x4, &(0x7f0000000bc0)=[r9, r8, r10, r6], &(0x7f0000000c00)=[{0x2, 0x2, 0x5, 0x1}, {0x3, 0x5, 0x8, 0x3}, {0x4, 0x2, 0x1, 0xc}, {0x3, 0x4, 0x5, 0x7}], 0x10, 0xb6}, 0x94) (async, rerun: 64) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r5, 0x6f44, 0x100000000) (rerun: 64) r12 = syz_usb_connect$cdc_ncm(0x0, 0x8c, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x7, 0x80, 0x82, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa01a}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x3, 0x1, 0xd5}, {0x6, 0x24, 0x1a, 0x2, 0x36}, [@obex={0x5, 0x24, 0x15, 0xfff7}, @country_functional={0xa, 0x24, 0x7, 0x6, 0x100, [0x9, 0x9]}, @country_functional={0x8, 0x24, 0x7, 0x0, 0x6487, [0x8]}, @dmm={0x7, 0x24, 0x14, 0x400, 0xfffa}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x7f, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x4, 0x9}}}}}}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x200, 0x1, 0x8, 0xe, 0x2d968ee35f1a45f5, 0x8}, 0xd6, &(0x7f0000000e00)={0x5, 0xf, 0xd6, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "6fd21d32406a5207693407aa8a5814c1"}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x5, 0xf000, 0x4, [0xff0000]}, @ptm_cap={0x3}, @generic={0xa7, 0x10, 0x3, "680373b0e87f2cd985f04c5044e6a87e703e124665264751baf8ab8423b3d4c1c910b20d14d74f9a1d40ccc6a69f1415af6694443074ccd5e91f32918fc14a5b99f94f34a29715f8e2fd7a3ef14d74933817f5b29e8463cb1eaa75ec5e20c3592901b693cf251b022437a7a94882a11f4a23ba8333103419696cbe4f82bedc6fb8079e26f604e00efae33f118ec27cee7f26a6cd0b8f367d0c47a9d39b1406e573bf5d82"}, @ptm_cap={0x3}]}, 0xa, [{0x81, &(0x7f0000000f00)=@string={0x81, 0x3, "1ceb640bdbfd0537cf10779e65987b965637cb97f5aa21db6cfb00613a0c2ce865523ec7e42d9da1c44ef7783ec6698aa9ca9ded221386a494766f414280a8c91871f1a7d685e038bf6a6b257a8e0e6e3c43380b682aec150747fa2ab5f5e655522050db4e3d4a258e4305d4a938fe6242c1359b309df043ad335297ff2919"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x44, &(0x7f0000001000)=@string={0x44, 0x3, "b1b76ae2d6f257d1ddb517ddf49d23133ab3696223aa577f3f8ae932b3aaea7374ab66822c0650ce08aeb588f412f4a50fab4d5d2e468c4554786606e1bd003f9e30"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x42c}}, {0x9, &(0x7f00000010c0)=@string={0x9, 0x3, "a0a428a15cefd8"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_control_io$cdc_ncm(r12, &(0x7f00000013c0)={0x14, &(0x7f0000001300)={0x0, 0xa, 0x65, {0x65, 0xe, "ccb161d111f622b9081a2d07f2d374f9ffda7b75b2bf005e52fe53a09d949909d957f1e4b0b64024d3183aae090c35fd861f8711574b1e46383b585ce6cb5d5ac2620040b11c6c70e9cbf703eeb6d93ccd98e4f7de99ed7b1afd883049543d4d145184"}}, &(0x7f0000001380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001680)={0x44, &(0x7f0000001400)={0x60, 0x13, 0xb6, "fa183cfd0311d6adece66c1d7ec45b2375790071bb1bad5e245c2b925bb2f69c1f4c955d07655106eb74d195aee93e38ca772b3ac8abceb34db207a9207f5af50530b198b6538f36a1204c6a79b7d14a0d5a2eacc4e3b825d3994924b8fe981f1794e14762665fcec11df50e2da0ef9e01c2f72d23ba846762e68edcc91c1f6d2597dcd282c5ed0f50e472052b608e77579debe4628b7c9725d08055c0bae49e648c151c8b13c0b0a663801a2dc388cea7b34fb4ee7f"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001540)={0x20, 0x80, 0x1c, {0x7, 0x5b8, 0x400, 0x3, 0x4, 0x2, 0xec7, 0x7e5, 0x7, 0x4, 0xff80, 0x80}}, &(0x7f0000001580)={0x20, 0x85, 0x4, 0x2}, &(0x7f00000015c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001600)={0x20, 0x87, 0x2, 0x760}, &(0x7f0000001640)={0x20, 0x89, 0x2}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001700), 0x20200, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000001740)=[@in={0x2, 0x4e23, @broadcast}], 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000001780)={'batadv_slave_0\x00'}) (async, rerun: 32) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000017c0)=0x1, 0x4) (async, rerun: 32) r13 = accept$inet6(r8, &(0x7f0000001800)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001840)=0x1c) setsockopt$sock_int(r13, 0x1, 0x4, &(0x7f0000001880)=0x78, 0x4) recvmmsg$unix(r8, &(0x7f0000001b00)=[{{&(0x7f00000018c0), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001940)=""/92, 0x5c}, {&(0x7f00000019c0)=""/99, 0x63}, {&(0x7f0000001a40)=""/33, 0x21}, {&(0x7f0000001a80)=""/3, 0x3}], 0x4}}], 0x1, 0x0, &(0x7f0000001b40)={0x0, 0x989680}) (async) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001b80)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000001bc0)={0x0, r14, r11, 0x9, 0x6, '\x00', {0x1, 0x1f8, 0x10, 0xffff0001, 0x4, 0xd, 0x4, 0x8000000000000001, {0x4, 0x3895}, {0x7, 0x9a9a}, {0xc, 0x6}, 0x8510, 0xfffffffd, 0x3, 0x5, 0x63f, 0x80cc, 0x40, 0x3, 0x800, 0x8001, '\x00', 0xac, 0x26, 0x1, 0x5}}) (async) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000001c80)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x4000, 0x1}) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) syz_io_uring_setup(0x7593, &(0x7f0000001cc0)={0x0, 0x5, 0x0, 0x0, 0x1a2, 0x0, r8}, &(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0)) (async) r15 = fsopen(&(0x7f0000001e00)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r15, 0x1, &(0x7f0000001e40)='^]-^a!(\x00', &(0x7f0000001e80)='syzkaller\x00', 0x0) 50.251806916s ago: executing program 2 (id=424): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16], 0xc4}}, 0x40) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getlink={0x34, 0x12, 0x1, 0x70bd25, 0x25dfdbfc, {0x7}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 49.948662129s ago: executing program 6 (id=425): socket$netlink(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x48010}}], 0x1, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x48010}}], 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000200)={0x1, @vbi={0x0, 0x0, 0x36314752}}) timer_settime(r4, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(r4, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) (async) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r8, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x64000600) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000040)={0x30, 0xfffffff3, 0x3, 0x4, 0xb, "518aba4d000000000000000000000000002000"}) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 49.522104846s ago: executing program 6 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000002c0000000b0a010300000000000000020a0000020900010073797a31000000000c0010"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 49.387081558s ago: executing program 6 (id=427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0xd, 0x6, 0x0, 0x0, 0x7, 0x4, 0x9}, {0x7, 0x7, 0x3, 0x7fff, 0x9, 0x1ff, 0x2}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180800d390cf2b7b71968798b3f9f88cf3e72f000000000000000000ffffffbf18110000", @ANYRES32=r3, @ANYRES16], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142fd889}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xb, 0x9, {}, {0xffffffffffffffff}, 0x5, 0x6}) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800140600fc010000000000000000000000000000ec8000000000000000000000800000aa0000400125acb1aac2d7704a6b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902860002010000000904000001020d0000052406000105240000000d240f01000000000000e5ffff05241a"], 0x0) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r10 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r10, 0x3000) ftruncate(r10, 0x51a9497) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) r11 = getpid() process_vm_readv(r11, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r12 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r12, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) accept$alg(r12, 0x0, 0x0) sendfile(r6, r7, 0x0, 0xffffffff000) sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@delsa={0xdc, 0x11, 0x400, 0x70bd28, 0x25dfdbfe, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x4d5, 0xa, 0xff}, [@policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x4e21, 0x0, 0x4e22, 0x0, 0xa, 0xa0, 0xa0, 0x87, r4, r5}, {0x8000000000000000, 0x800000000000000, 0xffffffffffffffff, 0x5, 0x8, 0x40000000000000, 0x0, 0x7ff}, {0x438, 0x9, 0x5, 0x7}, 0x4, 0x6e6bb0, 0x2, 0x0, 0x7, 0x3}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x14) 49.343338849s ago: executing program 0 (id=428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}, 0x1, 0x0, 0xffffffef, 0x10}, 0x20044804) 49.142074337s ago: executing program 0 (id=429): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd\x00') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 48.919910008s ago: executing program 3 (id=430): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110430000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) (async) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000040)) (async) syz_usb_connect(0x0, 0x63, &(0x7f0000000640)=ANY=[@ANYBLOB="1201100173d61e0899111800009a010203010902510001ff05203c09046a0f07ef9be47f09050d03ff0305060909050e0400047f030109050610000202080409050310200009010109050a00b703e806000905090008000001c9090507"], 0x0) (async) socket(0x3, 0x6, 0x4004) 48.859891233s ago: executing program 0 (id=431): syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_open_dev$video4linux(&(0x7f0000000100), 0x800000000005, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) open$dir(&(0x7f0000000140)='./file0/file0\x00', 0xf5bff515aaffc714, 0xa8) (async) open$dir(&(0x7f0000000140)='./file0/file0\x00', 0xf5bff515aaffc714, 0xa8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xfe8e, 0x12) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r5 = io_uring_setup(0xa, &(0x7f0000000240)={0x0, 0x74d1, 0xc000, 0x6, 0x8c2}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000000)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x300000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x300000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000200), 0x0, 0x0) 48.804400812s ago: executing program 3 (id=432): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000002b80)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x999, 0x1}, &(0x7f0000000140)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000001c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r8, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r9 = io_uring_setup(0xd71, &(0x7f0000000300)={0x0, 0xaf20, 0x2000, 0x2, 0x0, 0x0, r8}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 48.678977679s ago: executing program 2 (id=433): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) syz_usb_connect(0x1, 0x59f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120100021631a7086311000232e10000000109028d0501000400000904f4000feae6fc04090580000004fb0f05072501400b06002e2206141d390ffa786e526f5ec27f6302474143e65c6e3e70993fd796088c966dcca24acae9cda26a9631b8cf0f090580020000000b0809050c03000215da8b552431bd9a5818e4a2b9d8ff7b897fd23abbb47c7bcd2a57e65df26b903de5233ebd1c2688505cfd58368fbde409944ba42b21d2e2cfdc881918bc08e109e909460021b5263caed24c42e7a16a8fe64fc96ee9d8c30905070000020805800725010380910b09050802"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x2004}, {r1, 0x300}], 0x2, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 47.963608165s ago: executing program 5 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x2c, 0x66, 0x903, 0x70bd2c, 0x401, {0x0, 0x0, 0x0, r5, {0x10, 0x7}, {0x3, 0x4}, {0xfff3}}, [{0x8, 0xb, 0xbcf7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0x3, 0x3, 0xe5, 0x40, 0x6e, 0x0, 0x30, 0x19}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0x2, 0x5, 0x46}, {0x30000, 0x8000000, 0x3, 0x5d, 0x0, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xd}, {0xa000, 0x4, 0x10, 0x2, 0x4, 0x7, 0x8, 0x7f, 0x4a, 0xa3, 0xf7, 0x82}, {0xfec00000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x41000, 0x2, 0x4, 0x1, 0x7, 0xff, 0xb, 0x0, 0x3, 0x7f, 0xff, 0x5}, {0x10000, 0xb000, 0xe, 0x25, 0x4, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x3}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x231d7000, 0x42024, 0x8, 0x1, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x40000000000ff]}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r8, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r10, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x0, 0x0, 0x238, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff, 0xff, 0xffffff00], [0xff000000, 0x0, 0xff, 0xff000000], 'virt_wifi0\x00', 'syz_tun\x00', {}, {}, 0x2b, 0x40, 0x4, 0x44}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x8, "fed3"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@ipv6={@local, @remote, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff, 0xff, 0xffffffff], 'bridge_slave_1\x00', 'pimreg0\x00', {0xff}, {}, 0x6c, 0x0, 0x0, 0x62}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x3, 0x0, 0x75, 0xffff, 0x59, 0x8}}, @common=@eui64={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x2, "3b7997d4720bcc7e2882c1048e9be1c123b0fd41726956bdcfa4d9b1a4ce"}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {'Fu'}}, @common=@srh={{0x30}, {0x33, 0x6, 0x0, 0x80, 0x8, 0x10, 0x2608}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) dup3(r0, r6, 0x6700000000000000) syz_fuse_handle_req(r8, &(0x7f0000008340)="90b70e8c198e3d550c5dd5e5ea85bc10e491ece4dd2adf6920b6c9924bd498131ef1318132ea60e54a0bc0b2f7dbf9be266bedb7995fb8528e1be1ccc340a28a90485e5ee4c4c6a9f452c6207d8aff0fb923b2428b54e6b196957f4dc1846886cf14dccb92ba7aabde1fdfffe886aa09d51a32febd13d50ee2cdb0ef76cd06753b8bbda79a866528abddf8c12ed442a8c989de4e15bfc4178e661deffbbf86c2c70d5f2597ab70917a42bb836b6418f506839eeb12ef89a9a321b11ebe696061016ff0b8f4cc2e8259aef760f4c4bd320e08b99950e0280b1cb82b91e55ed09d5c3b57c4401806455b58e3a6ade4bc70e03f06b5e700ccf4cfaf6cf54bb764aa9bfcb9b4eec271f3e02236737e79d2e16a1e364cd8d30d0369fb9746f58daa4ee418177654ca460e1ab2581a0bfa03151a1c052df1a4d299c7926795ec8ab2d4f12bde23ef79db7364252fe873791d5b45fd73f9665018123c53a65210f53e5713d8eb23840277b57843aad57ef0e54ce0fec0dbbb854331f44e24b0cd833a01d59ebbcdb55363d96f122d90aa238e0fb4a2b3041b5b37354805639db94ebc50c171e067661916665512874442eb1fd435253e3f98914a63b8c511f5d5fa77693355a2b5a4dcb605b9e012049d5d4590ed59ced7323f26b921fa59f5bcf14aabfa6dd9026e41cf896d898e3b2a0389b53a6b9cb8d19092b25fc6593eda84130d89f8c1227347417e9967cd59dda73c3143aa0265240e080cd7786af18c0061bb4f18d8492bab6435ab185de8ed9bc4e8dcbcd36281ee4a8f42aa5db53a945d46714f529888a743498bde29ff3a3e9632e743628e5f138c642f62f68a4dc872ae12548a8c87a3a5246f123990d8cd0522e800bcc84d636b986b42d6f6aa1703043d1280f2c51c6b8e3cb5001c8bc741606dc255552c6da6f1f451dff0d04dae1f57120197c9e1052c880f26e028b85d757473b36cbc4dcbacfbd45f48c8aa71efe912f1d0fa123d298398c4fa7c80034c83655460c87aeb98d369d088d2a3d3801caa01685e9767d2961abc87c9fe9a1434d8bceec132595eef8b788afbb0c650c29991336341220cf51b4ac4a3f3791a9027e4d312fdf1e5a04a858cc23e093ea03362f731539061baced85fb5493370c409b1292a53b781edd6aa4247bd3921233380137b8834a6e826500a9af7053d8577053998549b12f9f8d375b79fe9322ea0f85051d1066d8666d575041faadccc49a1635f94a70f2007582e1e821be93b007611939471864ac35ce2f1ad2c1d20423f719797b53220a34aeca63e9b338b4be645ce07e00b17243a536aeea8f41dcb0b67e8e2f442802f6136d66610714d5f97376e330244f0a6aadd39aef651eda9eead563e433277a748917db682d8eb3e3309b42b535bab01f97bac61b28823cfaf1cc495cdb0d7fab775d6854f5b8515402208d898af7076cfbb751b85fc7601d929c5aea5dbd207101fbe1a5cac6f33dc88b0c803aac6b24f23e907cef6986f0b9537580db25c14c49451fff52ddd9d0c206bfadc250a7c12d446d072738cbfec51a40d3b946c41642b8ead048e3646997881dad3357ac751b11cf4d02cdc31061d5f59dddde5f157627565dbfaf5a593cc0ec4ca52277def45cae26af8a60e62f8ffde23b430a87997764ef49d6d72dbc818dae141114aa2842b3d718276edda46585b6b106d0daf871cdc9cbb49a757930b8d076454b9c03904db89f8720a28e59bdacb6d86c69c54f53cb234636e9cb3c9c1cc80e778c3d458be16ef9b40945f765a1d48ac8bf1cac85a800a9b246778fecac255bffedbe02e34fbc3cf3981fc6fd3849484d0bf9766e70a6e0f67d2d33c03d8287396018c9fc267e012c393a4039c61d613963b22c6bd88eaa099d8692d9e2aa3cc189c8d93eb142906998bce52c458cbb083070e850c20350d1df35092c61a31afb606081f07c895b61b1aac7572c07380005313ef2532715f3f293770efbb98acbd510daba8d59f03a6cfbd20c546b829d2bf360303048e2c2622dd8033840bda80b2138e7c8c7a1473ac741db4ecdb39e5bf5a241470a0236f3e2b185fc8f2764382b3a7c6b96904eb0ab728b39c276bace8debc20c5c4f8e91bbb790c601630e3a88d02215ad377a3df334b7ef4ed2331656a13f4f1a13b828662675766346ce6de5cb8714f9dd5a68c4f5af30c42842135b1463ea648226671f0307218753b2eadf8465d39f817fd152811803650d0bc287e42219b521f45cc48d056f70dd70d11e7837946abb94fb69dfffa4f029e848e7312e247993e46bc94a6eb73c9427f3e7d290a089637e647b9ff37a1ec38bfd6c5227bb437c892a4ca74781c8626d0233d1bbd1bcbe16bd4608f7da117ad7052a20da1d6b33c10c73ab7fdeb51353ca706077677904e1877c6ebbcc7f04d3fac41c1930bc3c1aeeb2e4ff0ea67a28a96dc4ef4404cd12a8c9d85f53daee4cea5f81982c0ae0f97b7197cf305c4a45af2b2c127186bd35be11b999cc190bea97a1fdcf7bec845526bf80e2cc00537c6b690a88477688e15c8debed367d3421b6dfa38552c98452d3a98dd615760fb445a398dcf3718534b4b0ccbfbdf9e3bd783a235f8919d66b4b0deeade001dc89391813d58113693b3a543a2ed9fa398c9d7d9420384e1d021c8b467c1500e007964bda70ea616d3c0422c682b80f8990217a464347918fe09ba83bdd76015833a4c76888a5cc6fa5c37a766d64f301c61f2eafba3a8bc64b9d402feba216e3049fee68d21cadc4cc8de19fe10c89bd43c4a2d1227ab85ae41680a8c06ed77a75447cb498928c1dedb5a61a00f636a67f59e86028166a08cfa61fd8d408eea6c35db51a1ee21c455de55d8dfc2ab2f976491f5b6c5b54492f539624e1da89b1171bd099b6971d23bf2c788acfb07f9eaf720daa518249bd8cd41e03e87c6de17c5cf14c1f1be318350e4624b7a89c20de3221759539430026e06c5192b120f82e36586c490cb084046e8fb5ddecb234f2dfea4752ff94cb819150c9b09220c8a7625904b92a159885d7123a77404d52f362aaafc4e56c97d45b1729e80a0bb2646fb5d019d2d91151431cb04f32730d1abb88e9823dd7b0bc7a407fe5ee3273d2d497563414f620c1a56d4fd4ebcbff2bfbc11c8d4ba0922095d850572d90b1b12b973371bbee36bf6fb67422ef325367e1a6a47fdc0f05382a6cfdabd96893b8a33b9431e4c470b615af17a2f583b5abed8e8f277a15ed51c180dd5ca13e16b3f6a996b2e56035d09bb241e160ef6dabeb37e9ca62c3381272017789762aa8381d46ecfe565f6c5646bc7d67b35abacbcbde89782a0cdc93b696155513e2d1dff96e43e72bf678be389a061dbbcd1b9fd03427d8258115bab3ef6281de402ea05bea729ec97886281f8d4e002dc6428f7715ee6772ae687c2f54e84fed500198a6fb87a3367aa14c9527c6e7d1fdc93aae93155923b9445c5f21ca90411f0c4622df6e7a959712eb00b47f59d027bf115078c79e8222083d5cfbe954d5cbd39567c641f6feb8eca6535c5b1866a720e32b61ea7b133bdec267ab83fa243765f83f5a2f5a3c4bb4c8a290da52aedb2eb2d752e5decdbb001e06359ac9c9d898559a56609bd53ee26b336161d9e66e71db56c7dc017b30545c614482a0b8db64b2289fc07c4670b0edb89c127dc01caa02107d6ef3686f1f02661f8086565a1e1870e5ed7b947f5ab1e1349230180d692aef54ca9f4b7515cc446d8bd0a76ce4376069fabee5594042333ebf23016cffa0ae063c04d876f56a462365ba7e1f429f70c324fa5a9ae376c2541c80dc1e2e33ca1c90b0e6369191a8e6ba8818da1bff830aec1219b7bda2ec14ffa7528601ec307a225e1f6128a44bda65017a98cf217a6521e1b41ab7df4f876329a228cf3640178b2763869d37bd8d346514191b9098fb8bcd44249d11ef27eac67d2152218128dc5d21ed083f092286b89522be034a3d96fac4ee7cb58b460a7695c9048426a6d3bc4c676f784393b89f7a981fad728a4997ffa1ffb412d56771e31c435658dd1fac7b5bb8db5ab637fbd653c55d3db4bf43c7d91524b18dc2860a1c060b96f00d579171c11c42ce91437e2ec15fc47617afff7145b17e965eecc01518cf6f4a245d722d6bb243aac8254da9a50ce79b04825444cd4c16b39b290528db1e7e0a3b5f07272e9a0cd7b92073bdee27a21e03bca75ef4da3bbf0476453479ec33aad301a32f7271924e96dde781266dc6a308fbd69589483189ea92d7cd18463758cca4802c86e73437d75079a3c16631c7bab19204c3225f74751652dd43ba33ae54bf768870ec43a9c83bd5797774f0efa371e434d808e3887c56d044340e7c01dc192cdd1bd9a174aae042695e6c4a689dd265290db2d49eac1f36ab8b3b1f5d055cd3de74575f96df9bb9491472a078274be830246b7c2518e6c6f516aca013837cfed7f71b6a5c479c5e92619051f78bd29673ed047db4a877a1f00a1817a08782e043dda6f6014717c834c7416f2fc67ade230b245e66188841e7abc58a569e6cf17357336ba739e17323314bf46b75cfce51e91fdeaf17d13ddcd8dd7c6cad4f31bd1b4947b79fbbd3396bea562e59c85af361a5b05171984ae721c463f2a7e172dc0fcf6b974458a21a5c99096c53173f7393593b50b8b36ea7e79b82c278a0f833967c0919fc8de07edcd6b51fc06e67243b5cf143511ab1d755a7ef234db2d31ce913e35889f6ff9f75ae63ade38033d4bc6b51149e4d0901af9e83d59001590260bb400903c038423c14369b2a597160f0537f4a6d4ccd0b7a95ab8cc55938e06f3d8df2edae0984f850da371e585b7b8d726164d2dd555316884735a3d849f5fc20983644131fb19d8ca251488734dff7e08c6d732a240b8b101e7edc41c6970e65da8651eeec1734e97a499a564606a808c13e2d340d893ed84c01b307419f6e3bde7fe285ffff3cad43941cacc0776e99df96a45fc0fbf8db247a8bdbe5b6b5b5507876bf41efe4195f78850c2640181682f6b059718d28da9344cb5a4e6e1da020f4813c615cdf89a9968f2ffffd0dc22b1d9041b26a6b10818811639de9a5cdab8811489bd8452c4af81f14586c551aadcdfb51b417d5bcf7304273accabbe093286517e0da67d1664e8722062c24c03fb51f669d8c0c7fc29b5a90d1f25d340d377632b634706b854efeb99e10f952b60a59bdf24d836462b6403b2577452ee70c451546a3cf60f0e508190147b8c0cf34458abe9aecbce9a7be1c65b92757876bf92c73488e2b9835cab471eaf28a8af37d28e3f2b3e4fd0dc6992e3d22026508ca8bd67f2990dfd7d4598b2e93ebe076e784860a17545ddb16fce09e2e649b26ae6c84983d67fafae569fef0eb042b68f0c8a6fdb57e6ffdd5768f7d7383bdbce8337cb2d91d36090499ac377dec4f38c5bf194a2a5bf656d5b0dd1b364589bac9637b2e44b13eeb507c56ff8f561f1d205c2fcdacb92ef2d991e0583bc0b1e216ad6c10a0ef195a4781e74013f7414bebd3cfc875faa3deef8f65ac983dea3c430fd57a62b18f8309c1c50d5f4e775e52281a1bdc6f9ed2f1d1c67724ecbb3001495d67ebf7025636841fd1d2a63385495e16f642433680e6611b6202f8d9c2f48ddcfabf235803f12f8d560ca691e4a8c627edee29a85d8f03a4d118807d689176addc439e1c0b561214bbbf937737e61feefd0760c683a02e4f775f3c12349a07362386b9b596625bdce87ebad21e40d2681fb84bd6d73cbbf10d56c58a7d57dcdfebd73fb80a441b8d278644b1eaf0e5ccbb8b151ef90056291a635c5c21bec5be45f77de012f3a6384ba515ec2e1a9a6f73f9793bbab736330cb4dfce95dc624c13d70c21b3feffd2087ebec7623b982a84eb4423e4a485eff4e034ebc2884d209f422f81230edf7c636ec34b7a8e056a408ae449a0e697ab6adb0ad698a6ee005f382757bde75a4e2b91d2aaa681b5613314e32754c9e34edbc265cea8ad3a388ec7a891cdb2ec8d403242bde9299209d96a71bea294d321da9a19ee08276efaa8597368a7171d14ae33ce9ad72683b43140b6446c468b9969daa69fcc5d3cc3ae5df855de9ca17608481e7067bf589222d0606163b2c804f4400616cb3ac42af63b4081a19baea6f387d1b8f7a63bdf93d0c43d7ea37258bf39eb4d7c66c754e64c6afcf3429b84ccf653c343b644cfc59a4559070fe43456b0403c8a8aaf229cdbf4642124b6271e00d048cf6e835ff18246f9f72a7e7d558c2c6bafa5b84af3a2114d387e40cd6de13f7db17191975aeb488666d3dbeab2b8e88e14ee0923af01c9cf9a2d4d972ac0fa27f6f4c6bbbd18571a314fd7a279ec43c4b153edc602123e3d6ed6b13352d303b1ba8c7cf2be896b87714d1889257e2c8ef0f90f1c6c9af9f4b86469e0712911783030318ad717e8466a78dd94498aef0e9c2073fba028530c8ae0666d6c001e2be92a742305f194793c3fb813790111e174e59c43415628746293402e11aae1eabf9162a2091fe3ae10a5308fcf84054a4a7e54181331ecdf9390b82e0842a123339c45c46c5712eead119202d40918886d4aec68568f4febbb52dcdcb311825e8d6cf2bedae8b2cb90ed15c38de39b5da0ac4e7f27214a514e12b7a5f39a3e076c956273d618b10a5d8ea76b20ca4d612c773fd78ec8db5b7a0d1c279fc89516a8af4d8d2d284d8486d0505a4c0a8f90046930da82b93a0b192111e01138a3b5f0597e72a1464612e1f4c6b61397cec639f7bd0c44de0a9e8650c98bf7f8c9970cf6635fa750e4aadb500fc4cb8bffaa1f2e4090b30e6fa63db4c709261c2595804181b700934fb7c67e3f422fd1dec6d9136302eabe83523c28ccf855cbbf0b0b16ff65bdb304db0945b51ab82b98ea122e8c1afb7c888ab52dc9eeb39e1edc70de228568d98659261f3a1208aed26d70605ff41254ace17b5e879a5af2798047b5ed1f38c6f0a3ae8367d11cc9285d994187e8ea2b6a54573f84194b6f9c9303dc7bd24ffb6ec8f4b06b76dfeee7ba7e23fa58b03115b45ce9136461849d81177146f571d411d26b6e4172d7e0052fa147d1ea69118c6ea94d077e6b2c435efe87c9325cd9b3313597ae776c4d94535bb8947214c2938e9132b2349753057047cb9f07f79d546172624b7c44e076de85161a025171208ec828e73a85b5a3f6aed5d9fdb91a18a0e6055730e569d0e6e97e1793c94ed0be8e87a18215339389434606118c563604af54b1f276724aaff41a336c00a7b7cd4f73263633d9a3c92a43a96322e3b2e30392c20369a29caafce4c9d2bdbbd601498c7ca62216dabb97e49365f5b6dde921336200ab6ce3fe75d3f93e65613b6346eea1798bfea3e7ef0bf39108ddd97b0997cf439d40a9e71157f49f043ccaf269bcde73b971021b46b3f856afc31fb2c5eefbf77d7a0cfadc03d9ad84c1cfdd25383b04846a3e929c93f6bcc31bed1d4bcf008551f679f3fb3cf6f063a72af143fd3d92019a54f0e8ce2c7a9ad5dcf11d389de2fee4b431e777a32dd0c2e8de6e8e99db44e9f72f7dc293472a9ef5a75f287333351545a86fefb06cb6e32531c207f57869991fd14067f0c8da1f61b2b3553dc529d409cd8100525aff86f4cc5578d0a9eb300957965769dabce552832d4f37e1c23373b2f76ae46c619289e097ca9be82f9f382cfc8e9bda65fd63ac8f88ceac87f0eda3defae78e1479090a01fe2bb7dc5a77ff056549b6f17a3c44a8fc0969a514e8b6067b16ff0d81688ea8c37672d1ac2d1ab543dd5d688a95e10193ded7129bee828ba6b81aab4cb49b015d8946e9e6fa44a0c913026485756e509d1957cdacb7d7d4248ce0d83d70445cdfd84bf4fe998dd0671f46ebc2702fb1bf641d80e954c324e316ecbba08a29ea20acff678c75cba32e7d2501f295444cbff171bb4a1998674facfc68b70d9ef466a6de6f8864443029121d466a246ac9607f51b60dec7b99d4ea058b7d9df2e57589d5182f445199101849e853f8672e90e5259a620e8e6db069cb4bdd642abc1489cda7663a2298d168ad768a337ff5ff0b8151f086219b0412651936bbf224310ae3d01b7a20f9e50c73d45a8da85ec3e0922a170a7c0938d14a5ea9477bb7cf323d3348ee1309afee49d2c0747c116ac6e0257e572a0f8f168b193e9bdf7d8e49f0fdfd5786771f0cadc18935d5ce736e24b3cde56018a9f78863afe8bc4d020695567184a6d3d7b595cea1b879ec2c13659caed5bad5c4f61373b6b4d9ec80232d9e83049b871d39b6bfdb635018e6181a69748741cf7cdc01e6c1cfca8c87b485dbf9dca63c5e0c701845d4595df4fbf8d4e97c5f71371985b4716b7868070280fc1b0ec549c65f84db587eab3b835888b9dc513bc94c4de91cd13266f5c87c3a0f81818c510107946a4184c3432f47cee2fd1e9a02494e1f80abbc0577eb77751a71d1c6998bccfc747af96f57620634c7d9e8fb314c300bfad916d3113f6dcbd2337ea0d373138e3fb13c64caffb0f470b70bd58dfe0c4fdc6cb11c46bd52e68f6d9b43a8ab697c888ceb2b584c2ac1e1dba136716e9d2126ca9337c3fa3b3a8f3bccead55250f8f2aff481b8466bbbaa4f378b11fac6c3272730514d629ef511b9c99afeb3226eae09a7c67dbb6745c98d1580323f27e503646664bd923d020163b9281ae27f30875c201067a5ef722283d1b0dab94ed4ad889a31292640e0f77e674cc6807e054824911d27dc24836a40de33a850b30b35658258dbd872c0152f97f46a46614fdbb2257f16e73a37741919e8dc0dfd605b67d07939ea0db74747314ec314568489b5168575f74d2d82f6ed7bab8391586a127dded4e1372e541c2b821b4996285ff33045640655083de0c1ec514d3e6f6b93dbe87944cd586aaad9a4b6e69b82ca0fdca70b423ea4e7058f2657cb1082b3448f0f5c63200add6c0c9b1b8dd2718ba472f1fbb49c655189a7c623a6acbf923a2bbc50ea83af048862413af034a9839b9351cc0442c46368e3c92a054e3bad39e92554b7ac554321038caf4edcf96e394a34d81bc6f0dfe6c3d1c2026ae2e070087d227e3b35f3b73ab598905f0d8655f2765d3c9bdd8fcd293d11cca3f1cc0d0e7dad5b09b3166eec5540e21762d698b59b4ee3f2ec449c716761365858119b7ca1f6db6d063150bf4646d87e05b62fb13e7e25e2d290c3a6b275dc9a0b05f52d7e9c8878394881cc2731fb087cb0e8cda9523d69e0faa547f4ce5922a309825a260de0405489bf6d22ed68e198a0f0672f07c103a0457944ebee05062c3e8615549282c74916c8cc28b224b7850daca3d6716297e7e4b6573de75b89dd5a9277943169706e98d02a7b393734dc60ce9ee6bc01ef0466106de03f4740110634a7da0f1efac221febc9c748381c6c8886541618f799e30e45774eb4c7ff3b401710e3f0356462c9cd1a92422fb5d82e4f1b0b39e29e5852b324cb05f537624b6b74fd8fc31ad97495817e0342b41fb73d37c3904a0c3302bff2e9478c72ac74cfd633d7be6044ffdb48c49e076efa431bbe447d65d9f9a03119a0f95bd2b9e4050da54bf16da40f8107d42f3e1e23f9702454ab10be28a16b56487e5063dd233419971d50d8f0092a9b24b3fa90e552ef1711d3817c47da3a84920eac93d007169911915785af786c807f034999fd1451b8b5befb04a30043477ac537d21a77b8b88b7a880fc04103872777d73d9c08ae7ebaa8661be5f6abc8bc8779690704cb7183b796a59af4fb524d6daca1a10d2ebb32c4dc3e1d7a12514578516451b4797c1b4918a46fa3d8f72f2cdcdfb9836f37cc2db78b7cfc452f54fd0d29d97ae9152ab473d3e7de76c7d4ce4f8e701c80873442bb095168b12722d3e7fd88be4992823d569e3f433b89e6d616235640181d58ef46cb5fb13df869eb4d3675facbede52831c4146c4c8aa2a6e93337190c6be16f09ca6a77a353239f6e5bdef3e14afa044742241667c0656af57ecc697ce807d74b1421b81fa1ae89387baa9d1c0f84c8a4e49152ce9ff11aef07f6cc1afd7c70be8192eae394de49a4f9f850eb3a803c428f8dc0c3b7662a4c02e0a6524edc621898ba14c1506dbaa107d6c2ab0f5cbeaeafb6dbc9d99e4aa104790d76bced93f29bfd2f42b9329ed07089036378e35e386eaaaa3c9e7390f1a13e1bf2e09245c897f0d516b66ce8c9b188e1fcb24d6334a0187fa4f9c3c84ad436c26955d549a4ba34eebd7abb49cf60f1bb99217924efdd283d3179705bf054850f1360ab7ad739ad85bb8a3eaed652636d51fb0e8d53a8952cccd03a99a12664c516d727c7c78916c891179097dd4c7fa38d0afaa48ae23f00f8225766548e121c2aa4db44117a45e4095008f1dca1f39c40afc0c6379014fd00e440b6f733bfc55b618ce9a29d85c36b6f984deca8ebfcdac0496dde639014f1b8c31c68c8f2687540e691fb6a30f9160b36b78e2a2614bfea6b2c3a09a1e5b0e504674a875ac5d9bde3de3af589f1605be84add720b8fa7874d4519a21369afc2bd7b37ce84dbbb1836de63dc6eedf1b763ab620b19f6d47e5a1b5488d8f45c3e2e432666b9375fb75bb47f1997c34760813d3251d80134ec0d6cee3fae30400ae768ea716d2076cbe556620c573b8e76f1c2bf4108ff8b2ea9c41e46dc857cebb61a8d8fd6d3a41d29c519d0a5db5c20cd48c27aa04eda418b9a9bae688c8f66e5df254e69002bc24cb5aedc4af0271bf53e63dd4c5bafade231e350be816ef0271f1532e10bba989f0692964251f569cf8dec6d2e8ab3408abeadb70ad14d0d15828024c1f867bb30523748da33671557317747bbd4b36f442dd4208198b97c762b365b93a2fdc7c1b7415cc2c0865f6f3ce3f52476d55d8687c2cb4858905276d751d33e268d23f70bc6ab8df7fd8d0c62742f1e70163c55796df09c32a558e2b0ae43b26b44b0e173b30f9d9944c9f8cf4bfc286546bc750a6336f5609de5aa2341ab5e4ebd21800007ec6ef0e972a8b7d87474d0995a2a1ec50db694d90207e263fd5cfadf1d74715b0f1bf33ce8d380cb1670d286f2815d66314f4ad51fe9171cf83d0aa3b08b3055cf9d25064bafb53f17090221a4e63c92d7197c699876e592e9ec60bb5a27b96a90d6790bac9efd7179a03307c926f2af27c30e21300271b351324461da085247c47f9be8dda5f3cfffc74e026160ba347748d355be7babbf8a63e6798eb455a819048ae8c26e52cc29f7d352bd8df9475559c2a5c715666fa2ba80d861462925478fb4c7299f627f3dcf18e7d691d56f56bf7fafc0aa742a679893b0fccd50e39ee9b33edb0f70dbd4577156b0dd1c7d54f44d7e48314356a6c201232a9aafffed2755bc853088954c3a06d50a6799a21a551eb3a7eedf865c4f30e9d0388dfb34fba84c3dad69ee7df431793a38c9fa330377316a2cf9e7854dd089e1a70076fef597aa565c1b68f4f971f6b11c7a6f03ffdd30eeb39927ad3780ce07fb4948ea12a8f25b5a35269be8778f651e460046165264c2c62b8c474c4450308f3fc355021f", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0xa921, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8, 0x100, 0x94, 0x7, 0x38b, 0x7f, 0x400, 0x4, 0x5, 0x800, 0x2, 0x9, 0x8000, 0x81, 0x3b], 0x100000, 0x20002}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) 47.761799785s ago: executing program 0 (id=435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r1 = socket$inet6(0xa, 0x80003, 0x6) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000007b00bc0389c0fc574fa49661c121222d17190be88a39b7cce14d3f62c0b7380d56e3c58062533fe02dc9d2de1919a63cd4bcc592f50abc4ca610319071cd1d3495f8cf37bda2468793b679bec57520a9d0dd6ae6d9c59488617a554a218dd366c51af903e7165938c3488dbb87d3741fa52d4fadf8946c601e68bf303a015eee44ab59865fb801057dffd8f6095f21", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000300), 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1e8, 0x1e8, 0x1e8, 0x2f8, 0x2f8, 0x1e8, 0x4, 0x0, {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0x3b8cce7e0d3c366d, 0xffffff00, 0xd, 0xe, {@mac, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x4, 0x8, 0x1, 0x10, 0x8000, 0x4, 'pim6reg1\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xc0, 0x4, {0xbc84}}}}, {{@arp={@local, @multicast1, 0xffffff00, 0xff000000, 0xc, 0x8, {@mac=@local, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x100, 0x2f, 0x0, 0x4, 'vxcan1\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x340}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='{', 0x1}], 0x1}}], 0x1, 0x4c040) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xff00) close(r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8004}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000480)=[@nested_load_syzos={0x136, 0x262, {0x2, 0x3, [@nested_vmlaunch={0x12f, 0x18, 0x1}, @code={0xa, 0x7e, {"0f01c9650f01c5c744240020540000c74424020cd86115c7442406000000000f011424b948060000b802000000ba000000000f30400f0fe1b6c74424000a000000c744240200480000c7442406000000000f011c24400f005c7a0066ba430066ed66b8a8000f00d867410f1c12"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x17, 0xffffffff00000000, 0x4, 0x4}}, @nested_load_code={0x12e, 0x7d, {0x0, "66baf80cb87cc6d482ef66bafc0cb8c0cd0000ef400f070fc77d8466baf80cb8e6681682ef66bafc0c66b8ef0066ef0f3264460f01c866baf80cb8849fe08def66bafc0cb800280000ef66b89c000f00d8c422618c15000000000f20d835200000000f22d8"}}, @in_dx={0x69, 0x20, {0x5766, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x2000, 0x9e16}}, @uexit={0x0, 0x18, 0xffffffffffffffef}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @code={0xa, 0x7f, {"0fc71a410f7991de1a22aab9800000c00f3235002000000f30362e410f79a9d220000066baf80cb8bc94f58bef66bafc0ced66bad00466ed410f3566baf80cb866e1c887ef66bafc0c66b8002866efb9a60a0000b88cf07078ba57e3dd100f30b9800000c00f3235010000000f30"}}]}}], 0x262}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000000780)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000740)}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x48, 0xec3, 0xfdffffffffffb5b2, 0x4, 0xc, 0x8000000000000000], 0x0, 0x0, 0x600000000000000}, &(0x7f0000000200)=0x78) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) 46.788381779s ago: executing program 5 (id=436): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) 0s ago: executing program 34 (id=435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) r1 = socket$inet6(0xa, 0x80003, 0x6) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000007b00bc0389c0fc574fa49661c121222d17190be88a39b7cce14d3f62c0b7380d56e3c58062533fe02dc9d2de1919a63cd4bcc592f50abc4ca610319071cd1d3495f8cf37bda2468793b679bec57520a9d0dd6ae6d9c59488617a554a218dd366c51af903e7165938c3488dbb87d3741fa52d4fadf8946c601e68bf303a015eee44ab59865fb801057dffd8f6095f21", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000300), 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1e8, 0x1e8, 0x1e8, 0x2f8, 0x2f8, 0x1e8, 0x4, 0x0, {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0x3b8cce7e0d3c366d, 0xffffff00, 0xd, 0xe, {@mac, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x4, 0x8, 0x1, 0x10, 0x8000, 0x4, 'pim6reg1\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xc0, 0x4, {0xbc84}}}}, {{@arp={@local, @multicast1, 0xffffff00, 0xff000000, 0xc, 0x8, {@mac=@local, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x100, 0x2f, 0x0, 0x4, 'vxcan1\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x340}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='{', 0x1}], 0x1}}], 0x1, 0x4c040) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xff00) close(r0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8004}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000480)=[@nested_load_syzos={0x136, 0x262, {0x2, 0x3, [@nested_vmlaunch={0x12f, 0x18, 0x1}, @code={0xa, 0x7e, {"0f01c9650f01c5c744240020540000c74424020cd86115c7442406000000000f011424b948060000b802000000ba000000000f30400f0fe1b6c74424000a000000c744240200480000c7442406000000000f011c24400f005c7a0066ba430066ed66b8a8000f00d867410f1c12"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x17, 0xffffffff00000000, 0x4, 0x4}}, @nested_load_code={0x12e, 0x7d, {0x0, "66baf80cb87cc6d482ef66bafc0cb8c0cd0000ef400f070fc77d8466baf80cb8e6681682ef66bafc0c66b8ef0066ef0f3264460f01c866baf80cb8849fe08def66bafc0cb800280000ef66b89c000f00d8c422618c15000000000f20d835200000000f22d8"}}, @in_dx={0x69, 0x20, {0x5766, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x2000, 0x9e16}}, @uexit={0x0, 0x18, 0xffffffffffffffef}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @code={0xa, 0x7f, {"0fc71a410f7991de1a22aab9800000c00f3235002000000f30362e410f79a9d220000066baf80cb8bc94f58bef66bafc0ced66bad00466ed410f3566baf80cb866e1c887ef66bafc0c66b8002866efb9a60a0000b88cf07078ba57e3dd100f30b9800000c00f3235010000000f30"}}]}}], 0x262}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000000780)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000740)}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x48, 0xec3, 0xfdffffffffffb5b2, 0x4, 0xc, 0x8000000000000000], 0x0, 0x0, 0x600000000000000}, &(0x7f0000000200)=0x78) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): T5690] usb 4-1: device descriptor read/8, error -71 [ 96.868919][ T30] audit: type=1326 audit(1780414918.163:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 96.887036][ T5719] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.904566][ T5726] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 96.925286][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.927811][ T5719] usb 2-1: config 0 has no interface number 0 [ 96.933606][ T30] audit: type=1326 audit(1780414918.163:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 96.945043][ T5719] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 96.974081][ T5726] usb 3-1: Product: syz [ 96.983109][ T5726] usb 3-1: Manufacturer: syz [ 96.997162][ T5690] usb usb4-port1: unable to enumerate USB device [ 97.004475][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.009918][ T5726] usb 3-1: SerialNumber: syz [ 97.020734][ T30] audit: type=1326 audit(1780414918.163:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 97.027249][ T5719] usb 2-1: Product: syz [ 97.054854][ T30] audit: type=1326 audit(1780414918.183:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 97.074162][ T5719] usb 2-1: Manufacturer: syz [ 97.096888][ T5719] usb 2-1: SerialNumber: syz [ 97.110340][ T30] audit: type=1326 audit(1780414918.213:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 97.115471][ T5719] usb 2-1: config 0 descriptor?? [ 97.134786][ T30] audit: type=1326 audit(1780414918.213:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 97.158050][ T5719] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 97.176568][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 97.184355][ T5728] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.185149][ T30] audit: type=1326 audit(1780414918.213:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 97.198170][ T5719] usb 2-1: selecting invalid altsetting 1 [ 97.223138][ T30] audit: type=1326 audit(1780414918.213:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 97.223297][ T5719] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 97.247760][ T30] audit: type=1326 audit(1780414918.213:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.4.75" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 97.269517][ T5719] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 97.293193][ T5719] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 97.305247][ T5719] usb 2-1: media controller created [ 97.334203][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.346597][ T10] usb 5-1: device descriptor read/64, error -71 [ 97.369766][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.382110][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.394938][ T5728] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.409711][ T5728] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.420693][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.424517][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.432035][ T5728] usb 1-1: config 0 descriptor?? [ 97.445914][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.466189][ T5726] usbtest 3-1:6.132: couldn't get endpoints, -22 [ 97.475545][ T5726] usbtest 3-1:6.132: probe with driver usbtest failed with error -22 [ 97.501738][ T5726] usb 3-1: USB disconnect, device number 6 [ 97.596543][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 97.620750][ T5719] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 97.674517][ T5719] usb 2-1: USB disconnect, device number 11 [ 97.726818][ T10] usb 5-1: device descriptor read/64, error -71 [ 97.847450][ T10] usb usb5-port1: attempt power cycle [ 97.870619][ T5728] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 98.072754][ T6008] binder: 6006:6008 ioctl 4601 200000000000 returned -22 [ 98.073227][ T6007] __nla_validate_parse: 1 callbacks suppressed [ 98.073240][ T6007] netlink: 44 bytes leftover after parsing attributes in process `syz.3.78'. [ 98.204573][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 98.238390][ T10] usb 5-1: device descriptor read/8, error -71 [ 98.246713][ T5728] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 98.341013][ T6018] IPVS: Scheduler module ip_vs_ not found [ 98.397757][ T5728] usb 3-1: Using ep0 maxpacket: 32 [ 98.411972][ T5728] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.438043][ T5728] usb 3-1: config 0 has no interface number 0 [ 98.454875][ T5728] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 98.473177][ T5728] usb 3-1: config 0 interface 1 has no altsetting 0 [ 98.485059][ T5728] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 98.494407][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 98.502321][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.511782][ T5728] usb 3-1: Product: syz [ 98.516103][ T5728] usb 3-1: Manufacturer: syz [ 98.520927][ T5728] usb 3-1: SerialNumber: syz [ 98.527433][ T10] usb 5-1: device descriptor read/8, error -71 [ 98.535100][ T5728] usb 3-1: config 0 descriptor?? [ 98.638383][ T10] usb usb5-port1: unable to enumerate USB device [ 98.706582][ T5698] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 98.745726][ T5728] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 98.767867][ T5728] cx231xx 3-1:0.1: Failed to read PCB config [ 98.775125][ T5728] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 98.786125][ T5728] usb 3-1: USB disconnect, device number 7 [ 98.876720][ T5698] usb 2-1: Using ep0 maxpacket: 16 [ 98.883969][ T5698] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 98.897777][ T5698] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 98.907204][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.916374][ T5698] usb 2-1: Product: syz [ 98.921368][ T5698] usb 2-1: Manufacturer: syz [ 98.926179][ T5698] usb 2-1: SerialNumber: syz [ 99.106533][ T5728] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 99.140004][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.150575][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.213035][ T5698] usb 2-1: USB disconnect, device number 12 [ 99.242230][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.256864][ T5728] usb 3-1: Using ep0 maxpacket: 32 [ 99.265730][ T5728] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.277822][ T5728] usb 3-1: config 0 has no interface number 0 [ 99.284066][ T5728] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 99.294971][ T5728] usb 3-1: config 0 interface 1 has no altsetting 0 [ 99.304365][ T5728] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 99.307194][ T5690] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 99.314027][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.331153][ T5728] usb 3-1: Product: syz [ 99.335388][ T5728] usb 3-1: Manufacturer: syz [ 99.340123][ T5728] usb 3-1: SerialNumber: syz [ 99.347205][ T5728] usb 3-1: config 0 descriptor?? [ 99.447509][ T5690] usb 1-1: device descriptor read/64, error -32 [ 99.581273][ T5728] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 99.591994][ T5728] cx231xx 3-1:0.1: Failed to read PCB config [ 99.598182][ T5728] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 99.610823][ T5728] usb 3-1: USB disconnect, device number 8 [ 99.688253][ T5690] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 99.842668][ T6035] loop5: detected capacity change from 0 to 7 [ 99.866144][ T6035] Dev loop5: unable to read RDB block 7 [ 99.866481][ T5690] usb 1-1: device descriptor read/64, error -32 [ 99.880275][ T6035] loop5: unable to read partition table [ 99.900863][ T6035] loop5: partition table beyond EOD, truncated [ 99.925819][ T6035] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 100.146867][ T5690] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 100.180526][ T5690] usb 1-1: device descriptor read/8, error -32 [ 100.388175][ T809] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 100.397735][ T5728] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 100.558391][ T5728] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.566898][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 100.569743][ T5728] usb 5-1: not running at top speed; connect to a high speed hub [ 100.577175][ T809] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 100.582493][ T5728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.589947][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.599996][ T5728] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.610648][ T809] usb 2-1: Product: syz [ 100.622114][ T5728] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 100.622560][ T809] usb 2-1: Manufacturer: syz [ 100.636171][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.636609][ T809] usb 2-1: SerialNumber: syz [ 100.645258][ T5728] usb 5-1: Product: syz [ 100.653473][ T809] usb 2-1: config 0 descriptor?? [ 100.653693][ T5728] usb 5-1: Manufacturer: syz [ 100.665043][ T5728] usb 5-1: SerialNumber: syz [ 100.668873][ T809] gspca_main: se401-2.14.0 probing 047d:5003 [ 100.676592][ T5690] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 100.696589][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 100.698240][ T5690] usb 1-1: device firmware changed [ 100.714386][ T5726] usb 1-1: USB disconnect, device number 4 [ 100.846597][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 100.853581][ T10] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 100.863544][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 100.874741][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 100.886537][ T5726] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.887007][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 100.907498][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 100.917786][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.935785][ T5728] usb 5-1: 0:1 : does not exist [ 100.940814][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.957725][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.010053][ T5728] usb 5-1: USB disconnect, device number 16 [ 101.060988][ T5726] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 101.073950][ T5726] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 101.088434][ T5726] usb 1-1: config 2 has no interface number 0 [ 101.094639][ T5726] usb 1-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 101.107439][ T5726] usb 1-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 101.117983][ T5726] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 101.130019][ T5726] usb 1-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.147441][ T5726] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 101.156865][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.164955][ T5726] usb 1-1: Product: syz [ 101.174190][ T5726] usb 1-1: Manufacturer: syz [ 101.180653][ T5726] usb 1-1: SerialNumber: syz [ 101.185495][ T809] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 101.194076][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 101.203000][ T10] usbtmc 3-1:16.0: can't read capabilities [ 101.216280][ T809] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 101.251188][ T809] usb 2-1: USB disconnect, device number 13 [ 101.254297][ T10] usb 3-1: USB disconnect, device number 9 [ 101.414390][ T5726] usb 1-1: probing VID:PID(0424:012C) [ 101.423711][ T5726] usb 1-1: vub300 testing BULK IN EndPoint(0) 8E [ 101.431429][ T5726] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 101.449854][ T5726] vub300 1-1:2.174: probe with driver vub300 failed with error -22 [ 101.462984][ T5726] usb 1-1: USB disconnect, device number 5 [ 101.629966][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 101.649022][ T6079] sg_write: data in/out 394206/24 bytes for SCSI command 0x0-- guessing data in; [ 101.649022][ T6079] program syz.3.99 not setting count and/or reply_len properly [ 101.675818][ T6080] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 101.703427][ T6079] gretap1: entered allmulticast mode [ 101.796952][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 101.813079][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 101.830867][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 101.846837][ T809] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 101.856470][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.864630][ T10] usb 3-1: Product: syz [ 101.875950][ T10] usb 3-1: Manufacturer: syz [ 101.880805][ T10] usb 3-1: SerialNumber: syz [ 102.008603][ T6093] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 102.008891][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 102.048453][ T809] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 102.067572][ T809] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 102.091343][ T809] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 102.109856][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.124298][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.142873][ T809] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 102.143117][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.172426][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.198651][ T809] usb 5-1: Product: syz [ 102.220348][ T809] usb 5-1: Manufacturer: syz [ 102.234416][ T809] usb 5-1: SerialNumber: syz [ 102.264748][ T809] usb 5-1: config 0 descriptor?? [ 102.420714][ T10] usb 3-1: USB disconnect, device number 10 [ 102.476046][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.534940][ T809] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 102.589338][ T4986] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 102.627324][ T4986] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 102.662230][ T4986] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 102.686131][ T4986] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 102.733944][ T6077] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 102.770100][ T29] usb 5-1: USB disconnect, device number 17 [ 102.857035][ T5690] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 103.060868][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.098508][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.134405][ T5690] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 103.145253][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.169355][ T5690] usb 1-1: config 0 descriptor?? [ 103.623482][ T5690] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 103.652244][ T5690] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 103.685017][ T5690] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 103.724953][ T5690] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 103.749935][ T5690] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 103.773691][ T5690] elan 0003:04F3:0755.0004: failed to start in urb: -90 [ 103.796185][ T5690] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 103.852410][ T5690] usb 1-1: USB disconnect, device number 6 [ 103.924994][ T6144] fido_id[6144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 103.977080][ T5726] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 104.166590][ T5726] usb 5-1: Using ep0 maxpacket: 8 [ 104.183223][ T5726] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 104.210211][ T5726] usb 5-1: config 0 has no interface number 0 [ 104.230900][ T5726] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.268083][ T5726] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.295008][ T5726] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 104.323698][ T5726] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 104.353141][ T5726] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 104.388170][ T5726] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.439041][ T5726] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 104.455532][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.464335][ T5726] usb 5-1: Product: syz [ 104.468750][ T5726] usb 5-1: Manufacturer: syz [ 104.473641][ T5726] usb 5-1: SerialNumber: syz [ 104.499780][ T5726] usb 5-1: config 0 descriptor?? [ 104.767667][ T5726] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 104.836844][ T6155] netlink: 76 bytes leftover after parsing attributes in process `syz.2.116'. [ 104.964551][ T6158] binder: 6154:6158 ioctl 40101283 200000000240 returned -22 [ 105.042969][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.047131][ T29] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.052080][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.219297][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.228649][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.239350][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.250811][ T29] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 105.260102][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.269075][ T29] usb 1-1: Product: syz [ 105.273398][ T29] usb 1-1: Manufacturer: syz [ 105.278095][ T29] usb 1-1: SerialNumber: syz [ 105.306680][ T5728] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.476612][ T5728] usb 4-1: Using ep0 maxpacket: 16 [ 105.483953][ T5728] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 105.501014][ T5728] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 105.514130][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.523306][ T5728] usb 4-1: Product: syz [ 105.527798][ T5728] usb 4-1: Manufacturer: syz [ 105.532785][ T5728] usb 4-1: SerialNumber: syz [ 105.562033][ T29] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 105.580214][ T29] usb 1-1: USB disconnect, device number 7 [ 105.619758][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.707550][ T6164] netlink: 80 bytes leftover after parsing attributes in process `syz.4.119'. [ 105.736888][ T6164] netlink: 80 bytes leftover after parsing attributes in process `syz.4.119'. [ 105.765782][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.785530][ T6166] loop5: detected capacity change from 0 to 7 [ 105.801251][ T6166] Dev loop5: unable to read RDB block 7 [ 105.819401][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.834012][ T6166] loop5: unable to read partition table [ 105.859250][ T6166] loop5: partition table beyond EOD, truncated [ 105.881342][ T6166] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 106.221816][ T5728] usb 4-1: USB disconnect, device number 7 [ 106.269826][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 106.289864][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.544005][ T6187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.126'. [ 106.592921][ T6189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.126'. [ 107.106480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.496770][ T6207] netlink: 'syz.4.128': attribute type 13 has an invalid length. [ 108.536751][ T5728] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 108.614352][ T6213] FAULT_INJECTION: forcing a failure. [ 108.614352][ T6213] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.629693][ T6213] CPU: 1 UID: 0 PID: 6213 Comm: syz.2.132 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.629720][ T6213] Tainted: [L]=SOFTLOCKUP [ 108.629726][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.629743][ T6213] Call Trace: [ 108.629750][ T6213] [ 108.629760][ T6213] dump_stack_lvl+0xe8/0x150 [ 108.629785][ T6213] should_fail_ex+0x412/0x560 [ 108.629807][ T6213] _copy_from_user+0x2d/0xb0 [ 108.629826][ T6213] ___sys_sendmsg+0x1c6/0x360 [ 108.629842][ T6213] ? __lock_acquire+0x6b5/0x2cf0 [ 108.629861][ T6213] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.629873][ T6213] ? __lock_acquire+0x6b5/0x2cf0 [ 108.629893][ T6213] ? kstrtouint+0x6e/0xe0 [ 108.629949][ T6213] __sys_sendmmsg+0x27c/0x4e0 [ 108.629970][ T6213] ? __pfx___sys_sendmmsg+0x10/0x10 [ 108.629983][ T6213] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 108.630017][ T6213] ? ksys_write+0x242/0x270 [ 108.630039][ T6213] ? __pfx_ksys_write+0x10/0x10 [ 108.630063][ T6213] __x64_sys_sendmmsg+0xa0/0xc0 [ 108.630078][ T6213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.630094][ T6213] do_syscall_64+0x174/0x580 [ 108.630111][ T6213] ? clear_bhb_loop+0x40/0x90 [ 108.630129][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.630144][ T6213] RIP: 0033:0x7f3d85d9ce59 [ 108.630169][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.630181][ T6213] RSP: 002b:00007f3d86d1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 108.630199][ T6213] RAX: ffffffffffffffda RBX: 00007f3d86015fa0 RCX: 00007f3d85d9ce59 [ 108.630210][ T6213] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 108.630219][ T6213] RBP: 00007f3d86d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.630229][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.630237][ T6213] R13: 00007f3d86016038 R14: 00007f3d86015fa0 R15: 00007f3d8613fa48 [ 108.630263][ T6213] [ 109.097538][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 109.120441][ T5728] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 109.179673][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.189109][ T5728] usb 1-1: Product: syz [ 109.193447][ T5728] usb 1-1: Manufacturer: syz [ 109.212673][ T5728] usb 1-1: SerialNumber: syz [ 109.244476][ T5728] r8152-cfgselector 1-1: Unknown version 0x0000 [ 109.266471][ T5728] r8152-cfgselector 1-1: config 0 descriptor?? [ 109.502175][ T809] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 109.546047][ T5728] r8152-cfgselector 1-1: Needed 2 retries to read version [ 109.576205][ T5728] r8152-cfgselector 1-1: Unknown version 0x0000 [ 109.616627][ T5728] r8152-cfgselector 1-1: No union descriptors [ 109.716456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.789922][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.822750][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.851982][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.875466][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.286675][ T5728] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.480269][ T5728] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 110.490517][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.503572][ T5728] usb 4-1: config 0 descriptor?? [ 110.518625][ T5728] cp210x 4-1:0.0: cp210x converter detected [ 110.636732][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 110.813239][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.846451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.871094][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.906068][ T10] usb 2-1: config 1 has no interface number 0 [ 110.931708][ T10] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 110.959273][ T5728] usb 4-1: cp210x converter now attached to ttyUSB0 [ 110.971059][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 110.985070][ T5728] usb 4-1: USB disconnect, device number 8 [ 111.000268][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 111.025378][ T5728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 111.037635][ T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 111.048884][ T5728] cp210x 4-1:0.0: device disconnected [ 111.059327][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.071845][ T10] usb 2-1: Product: syz [ 111.079307][ T10] usb 2-1: Manufacturer: syz [ 111.089370][ T10] usb 2-1: SerialNumber: syz [ 111.255295][ T5728] r8152-cfgselector 1-1: USB disconnect, device number 8 [ 111.340215][ T10] usb 2-1: 1:0 : does not exist [ 111.357031][ T10] usb 2-1: BAAD GENERIC IO: no channels? [ 111.665637][ T10] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 111.746055][ T10] usb 2-1: USB disconnect, device number 14 [ 111.795031][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.829646][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.862755][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.386662][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 112.590083][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 112.629565][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 112.676862][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.700739][ T10] usb 2-1: Product: syz [ 112.722036][ T10] usb 2-1: Manufacturer: syz [ 112.732216][ T10] usb 2-1: SerialNumber: syz [ 112.746666][ T5726] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.887349][ T5726] usb 4-1: device descriptor read/64, error -71 [ 113.003111][ T10] usb 2-1: found format II with max.bitrate = 9, frame size=2 [ 113.024401][ T10] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 113.037355][ T10] usb 2-1: found format II with max.bitrate = 9, frame size=2 [ 113.047444][ T10] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 113.103986][ T10] usb 2-1: unit 4 not found! [ 113.155037][ T6247] netlink: 48 bytes leftover after parsing attributes in process `syz.2.141'. [ 113.170550][ T5726] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 113.326510][ T5726] usb 4-1: device descriptor read/64, error -71 [ 113.433230][ T10] usb 2-1: USB disconnect, device number 15 [ 113.460467][ T5726] usb usb4-port1: attempt power cycle [ 113.613557][ T6282] udevd[6282]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.877795][ T5726] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 113.927326][ T5726] usb 4-1: device descriptor read/8, error -71 [ 114.156568][ T29] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 114.206621][ T5726] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 114.229230][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 114.248439][ T5726] usb 4-1: device descriptor read/8, error -71 [ 114.326484][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 114.340748][ T29] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 114.370297][ T5726] usb usb4-port1: unable to enumerate USB device [ 114.379486][ T29] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 114.396952][ T10] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 114.397018][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.397045][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.414541][ T29] usb 3-1: Product: syz [ 114.453117][ T29] usb 3-1: Manufacturer: syz [ 114.458469][ T29] usb 3-1: SerialNumber: syz [ 114.490825][ T10] usb 2-1: Product: syz [ 114.503741][ T10] usb 2-1: Manufacturer: syz [ 114.515259][ T10] usb 2-1: SerialNumber: syz [ 114.688385][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.718488][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.774726][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.798015][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.933386][ T29] usb 3-1: USB disconnect, device number 12 [ 114.982037][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.064796][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.100670][ T10] usb 2-1: USB disconnect, device number 16 [ 115.626801][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 115.756863][ T10] usb 3-1: device descriptor read/64, error -71 [ 115.771678][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 115.771693][ T30] audit: type=1326 audit(1780414937.143:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6298 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c9b39ce59 code=0x0 [ 116.007048][ T10] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 116.056794][ T5728] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 116.067372][ T5719] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.148361][ T10] usb 3-1: device descriptor read/64, error -71 [ 116.226545][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 116.236270][ T5728] usb 2-1: config 0 has no interfaces? [ 116.242390][ T5719] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.250960][ T5719] usb 1-1: config 0 has no interface number 0 [ 116.258545][ T10] usb usb3-port1: attempt power cycle [ 116.267554][ T5719] usb 1-1: too many endpoints for config 0 interface 1 altsetting 34: 166, using maximum allowed: 30 [ 116.280738][ T5719] usb 1-1: config 0 interface 1 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 166 [ 116.294394][ T5728] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 116.303799][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.311965][ T5719] usb 1-1: config 0 interface 1 has no altsetting 0 [ 116.318814][ T5728] usb 2-1: Product: syz [ 116.324283][ T5728] usb 2-1: Manufacturer: syz [ 116.329410][ T5728] usb 2-1: SerialNumber: syz [ 116.336305][ T5719] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 116.350298][ T5728] usb 2-1: config 0 descriptor?? [ 116.356555][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.364928][ T5719] usb 1-1: Product: syz [ 116.369679][ T5719] usb 1-1: Manufacturer: syz [ 116.376335][ T5719] usb 1-1: SerialNumber: syz [ 116.387045][ T5719] usb 1-1: config 0 descriptor?? [ 116.616567][ T10] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 116.637107][ T10] usb 3-1: device descriptor read/8, error -71 [ 116.640175][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.679035][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.765260][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 116.784982][ T6324] ipvlan2: entered allmulticast mode [ 116.790468][ T6324] syz_tun: entered allmulticast mode [ 116.906854][ T10] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 116.927653][ T10] usb 3-1: device descriptor read/8, error -71 [ 116.976880][ T5726] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 117.037519][ T10] usb usb3-port1: unable to enumerate USB device [ 117.126618][ T5726] usb 4-1: device descriptor read/64, error -71 [ 117.199888][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.210468][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.221600][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.244239][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.376570][ T5726] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 117.506547][ T5726] usb 4-1: device descriptor read/64, error -71 [ 117.618335][ T5726] usb usb4-port1: attempt power cycle [ 117.966509][ T5726] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 117.998106][ T5726] usb 4-1: device descriptor read/8, error -71 [ 118.256850][ T5726] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 118.298533][ T5726] usb 4-1: device descriptor read/8, error -71 [ 118.351955][ T5719] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 118.367720][ T5719] gspca_spca1528: reg_w err -71 [ 118.397074][ T5719] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 118.417269][ T5726] usb usb4-port1: unable to enumerate USB device [ 118.429423][ T5719] usb 1-1: USB disconnect, device number 9 [ 118.710978][ T30] audit: type=1326 audit(1780414940.083:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 118.786468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 118.976793][ T30] audit: type=1326 audit(1780414940.083:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 119.019613][ T6342] fuse: Bad value for 'fd' [ 119.138819][ T30] audit: type=1326 audit(1780414940.093:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 119.146687][ T29] usb 2-1: USB disconnect, device number 17 [ 119.254393][ T30] audit: type=1326 audit(1780414940.093:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 119.379177][ T30] audit: type=1326 audit(1780414940.093:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 119.413708][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 119.445912][ T6359] ipvlan2: entered allmulticast mode [ 119.455636][ T6359] syz_tun: entered allmulticast mode [ 119.505616][ T30] audit: type=1326 audit(1780414940.113:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 119.624841][ T30] audit: type=1326 audit(1780414940.113:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 119.723560][ T30] audit: type=1326 audit(1780414940.203:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 119.803703][ T30] audit: type=1326 audit(1780414940.233:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.4.166" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09eeb9ce59 code=0x7ffc0000 [ 119.875767][ T6354] xt_hashlimit: size too large, truncated to 1048576 [ 119.896096][ T6354] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 120.200501][ T6370] program syz.3.176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.426606][ T5719] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 120.606620][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 120.622054][ T5719] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 120.649902][ T5719] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 120.660300][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.673323][ T5719] usb 2-1: Product: syz [ 120.679356][ T5719] usb 2-1: Manufacturer: syz [ 120.685089][ T5719] usb 2-1: SerialNumber: syz [ 120.922172][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.939392][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.160057][ T5719] usb 2-1: USB disconnect, device number 18 [ 121.229349][ T6384] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 121.257820][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.368900][ T6384] netlink: 'syz.3.179': attribute type 4 has an invalid length. [ 121.572360][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 121.572388][ T30] audit: type=1326 audit(1780414942.943:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6389 comm="syz.3.180" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b5099ce59 code=0x80000000 [ 121.748760][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.759434][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.986522][ T5728] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 122.854432][ T6420] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 122.927098][ T6422] input: syz0 as /devices/virtual/input/input7 [ 123.301638][ T6420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.390830][ T6417] xt_hashlimit: size too large, truncated to 1048576 [ 124.416990][ T6417] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 124.766799][ T6441] veth1_to_bond: entered allmulticast mode [ 124.784826][ T6439] veth1_to_bond: left allmulticast mode [ 125.564285][ T6448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.603330][ T6448] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 125.766997][ T6469] input: syz0 as /devices/virtual/input/input8 [ 125.776542][ T6448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.800964][ T6448] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 125.826596][ T809] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 125.933963][ T6448] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.951483][ T6448] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 126.006297][ T6448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.039813][ T809] usb 3-1: config 0 has no interfaces? [ 126.047881][ T6448] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 126.084748][ T809] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 126.118626][ T5726] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 126.140246][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.190405][ T6448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.213466][ T809] usb 3-1: Product: syz [ 126.228729][ T809] usb 3-1: Manufacturer: syz [ 126.238859][ T6448] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 126.264171][ T809] usb 3-1: SerialNumber: syz [ 126.299559][ T809] usb 3-1: config 0 descriptor?? [ 126.348874][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 126.365356][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.393820][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.412721][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.426268][ T5726] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 126.438666][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 126.457600][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.506172][ T5726] usb 4-1: config 0 descriptor?? [ 126.527398][ T809] usb 3-1: USB disconnect, device number 17 [ 126.618230][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 126.630302][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.646854][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.657938][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 126.668402][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.684471][ T24] usb 1-1: config 0 descriptor?? [ 127.009923][ T5726] lenovo 0003:17EF:6067.0005: unknown global tag 0xc [ 127.038142][ T5726] lenovo 0003:17EF:6067.0005: item 0 4 1 12 parsing failed [ 127.086594][ T5726] lenovo 0003:17EF:6067.0005: hid_parse failed [ 127.113401][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 127.125545][ T5726] lenovo 0003:17EF:6067.0005: probe with driver lenovo failed with error -22 [ 127.145793][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 127.186097][ T24] usb 1-1: USB disconnect, device number 10 [ 127.243674][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.266921][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.311242][ T809] usb 4-1: USB disconnect, device number 17 [ 127.394319][ T1073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.554763][ T6502] veth1_to_bond: entered allmulticast mode [ 127.606250][ T1073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.704227][ T6500] veth1_to_bond: left allmulticast mode [ 127.798771][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.808553][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.820490][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.841785][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.851641][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.897694][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.909660][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.918183][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.929863][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.941696][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.992710][ T1073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.339299][ T1073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.412429][ T6510] trusted_key: encrypted_key: insufficient parameters specified [ 128.507152][ T6524] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.211'. [ 128.821154][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.901929][ T6544] loop5: detected capacity change from 0 to 7 [ 128.922062][ T6544] Dev loop5: unable to read RDB block 7 [ 128.953360][ T6544] loop5: unable to read partition table [ 128.971614][ T6544] loop5: partition table beyond EOD, truncated [ 128.999911][ T6544] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 129.073155][ T6510] team0: Port device batadv1 added [ 129.520389][ T6555] FAULT_INJECTION: forcing a failure. [ 129.520389][ T6555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.589573][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.4.216 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.589598][ T6555] Tainted: [L]=SOFTLOCKUP [ 129.589602][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.589607][ T6555] Call Trace: [ 129.589612][ T6555] [ 129.589617][ T6555] dump_stack_lvl+0xe8/0x150 [ 129.589639][ T6555] should_fail_ex+0x412/0x560 [ 129.589658][ T6555] _copy_to_user+0x31/0xb0 [ 129.589679][ T6555] cp_new_stat+0x3c3/0x540 [ 129.589701][ T6555] ? __pfx_cp_new_stat+0x10/0x10 [ 129.589729][ T6555] ? lockdep_hardirqs_on+0x7a/0x110 [ 129.589750][ T6555] ? __x64_sys_newlstat+0x130/0x1e0 [ 129.589765][ T6555] ? kmem_cache_free+0x182/0x650 [ 129.589790][ T6555] __x64_sys_newlstat+0x155/0x1e0 [ 129.589801][ T6555] ? __pfx___x64_sys_newlstat+0x10/0x10 [ 129.589820][ T6555] ? __pfx_ksys_write+0x10/0x10 [ 129.589837][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.589850][ T6555] do_syscall_64+0x174/0x580 [ 129.589872][ T6555] ? trace_irq_disable+0x3b/0x140 [ 129.589893][ T6555] ? clear_bhb_loop+0x40/0x90 [ 129.589912][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.589926][ T6555] RIP: 0033:0x7f09eeb9ce59 [ 129.589950][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.589962][ T6555] RSP: 002b:00007f09efa58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 129.589978][ T6555] RAX: ffffffffffffffda RBX: 00007f09eee15fa0 RCX: 00007f09eeb9ce59 [ 129.589987][ T6555] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000080 [ 129.589992][ T6555] RBP: 00007f09efa58090 R08: 0000000000000000 R09: 0000000000000000 [ 129.589998][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.590003][ T6555] R13: 00007f09eee16038 R14: 00007f09eee15fa0 R15: 00007f09eef3fa48 [ 129.590017][ T6555] [ 130.035833][ T5635] Bluetooth: hci2: command tx timeout [ 130.046848][ T5719] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 130.238479][ T5719] usb 4-1: config 1 interface 0 has no altsetting 0 [ 130.258198][ T5719] usb 4-1: string descriptor 0 read error: -22 [ 130.282459][ T5719] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.40 [ 130.295386][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.362794][ T5728] usb 5-1: USB disconnect, device number 18 [ 130.378237][ T1073] bridge_slave_1: left allmulticast mode [ 130.388376][ T1073] bridge_slave_1: left promiscuous mode [ 130.414780][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.465578][ T1073] bridge_slave_0: left allmulticast mode [ 130.472357][ T1073] bridge_slave_0: left promiscuous mode [ 130.479683][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.551410][ T6558] program syz.3.217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.776522][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 130.905867][ T5719] sony 0003:054C:0374.0006: unknown main item tag 0x0 [ 130.922820][ T5719] sony 0003:054C:0374.0006: unknown main item tag 0x0 [ 130.950411][ T5719] sony 0003:054C:0374.0006: unknown main item tag 0x0 [ 130.956689][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 130.969509][ T5719] sony 0003:054C:0374.0006: unknown main item tag 0x0 [ 130.993098][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 131.000979][ T5719] sony 0003:054C:0374.0006: unknown main item tag 0x0 [ 131.046801][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 131.064931][ T5719] sony 0003:054C:0374.0006: unknown main item tag 0x0 [ 131.091294][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 131.121710][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 131.135991][ T5719] sony 0003:054C:0374.0006: unknown main item tag 0x0 [ 131.164076][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 131.186108][ T5719] sony 0003:054C:0374.0006: unknown main item tag 0x0 [ 131.213217][ T24] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 131.230526][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.245118][ T5719] sony 0003:054C:0374.0006: unknown main item tag 0x0 [ 131.247488][ T24] usb 3-1: Product: syz [ 131.266773][ T5719] sony 0003:054C:0374.0006: unknown main item tag 0x0 [ 131.295174][ T24] usb 3-1: Manufacturer: syz [ 131.312748][ T24] usb 3-1: SerialNumber: syz [ 131.351274][ T24] usb 3-1: config 0 descriptor?? [ 131.403907][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.414209][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.423878][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.435448][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.451010][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.505591][ T5719] sony 0003:054C:0374.0006: hiddev0,hidraw0: USB HID v0.05 Device [HID 054c:0374] on usb-dummy_hcd.3-1/input0 [ 131.532704][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.548638][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 131.560880][ T5719] sony 0003:054C:0374.0006: failed to claim input [ 131.573298][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 131.587614][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.605306][ T5719] usb 4-1: USB disconnect, device number 18 [ 131.622247][ T1073] bond0 (unregistering): Released all slaves [ 131.704937][ T6583] fido_id[6583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 132.112550][ T5634] Bluetooth: hci2: command tx timeout [ 132.183342][ T6596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.287964][ T5698] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 132.296974][ T6596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.427930][ T24] iforce 3-1:0.0: usb_submit_urb failed: -110 [ 132.449280][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.473347][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.499882][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.501823][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.514765][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.530499][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.546904][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.555484][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.558342][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.578450][ T6517] bridge_slave_0: entered allmulticast mode [ 132.590717][ T6517] bridge_slave_0: entered promiscuous mode [ 132.601856][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.634597][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.638531][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.662843][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.673867][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.681357][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.694304][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.703629][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.707911][ T6517] bridge_slave_1: entered allmulticast mode [ 132.716355][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.728198][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.730294][ T6517] bridge_slave_1: entered promiscuous mode [ 132.744625][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.760949][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768954][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.778487][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.792243][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.807959][ T24] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 132.817873][ T24] input input9: Timeout waiting for response from device. [ 132.850251][ T1073] hsr_slave_0: left promiscuous mode [ 132.863605][ T1073] hsr_slave_1: left promiscuous mode [ 132.874883][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.886799][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.900766][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.911990][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.981788][ T1073] veth1_macvtap: left promiscuous mode [ 132.996575][ T1073] veth0_macvtap: left promiscuous mode [ 133.006987][ T1073] veth1_vlan: left promiscuous mode [ 133.018586][ T1073] veth0_vlan: left promiscuous mode [ 133.386010][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 133.413143][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 133.429667][ T24] usb 3-1: USB disconnect, device number 18 [ 133.546785][ T5634] Bluetooth: hci0: command tx timeout [ 133.620816][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.661139][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.842489][ T6517] team0: Port device team_slave_0 added [ 133.888843][ T6517] team0: Port device team_slave_1 added [ 134.023977][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.061513][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.069083][ T5698] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 134.145915][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.188415][ T5634] Bluetooth: hci2: command tx timeout [ 134.204742][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.228050][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.254501][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.463716][ T5698] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 134.503475][ T5698] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 134.586174][ T5698] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 134.632151][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.671707][ T5698] usb 1-1: Product: syz [ 134.687776][ T5698] usb 1-1: Manufacturer: syz [ 134.701506][ T5698] usb 1-1: SerialNumber: syz [ 134.765009][ T6517] hsr_slave_0: entered promiscuous mode [ 134.792534][ T6517] hsr_slave_1: entered promiscuous mode [ 134.816950][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 134.817597][ T6517] debugfs: 'hsr0' already exists in 'hsr' [ 134.869888][ T6517] Cannot create hsr debugfs directory [ 134.996459][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 135.018346][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 135.051056][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.085850][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.115015][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.149869][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.165627][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.175021][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.264273][ T1073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.395329][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 135.410832][ T24] usbtmc 3-1:16.0: can't read capabilities [ 135.531983][ T5698] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 135.562323][ T5698] usb 1-1: unit 6 not found! [ 135.584285][ T1073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.626590][ T5634] Bluetooth: hci0: command tx timeout [ 135.771589][ T5698] usb 1-1: USB disconnect, device number 11 [ 135.791322][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 135.808469][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.829317][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.847995][ T6581] bridge_slave_0: entered allmulticast mode [ 135.873664][ T6581] bridge_slave_0: entered promiscuous mode [ 135.957132][ T1073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.982952][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.990358][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.000568][ T6581] bridge_slave_1: entered allmulticast mode [ 136.013135][ T6581] bridge_slave_1: entered promiscuous mode [ 136.094612][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.107826][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.181737][ T6581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.254993][ T1073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.266557][ T5634] Bluetooth: hci2: command tx timeout [ 136.327023][ T6581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.389312][ T6581] team0: Port device team_slave_0 added [ 136.406321][ T6581] team0: Port device team_slave_1 added [ 136.429882][ T6676] xt_hashlimit: size too large, truncated to 1048576 [ 136.465748][ T6676] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 136.882903][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.898416][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.955527][ T6581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.973155][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.991999][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.043915][ T6581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.418287][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 137.609745][ T5719] usb 3-1: USB disconnect, device number 19 [ 137.614256][ T6581] hsr_slave_0: entered promiscuous mode [ 137.684498][ T6581] hsr_slave_1: entered promiscuous mode [ 137.707093][ T5634] Bluetooth: hci0: command tx timeout [ 137.717836][ T6581] debugfs: 'hsr0' already exists in 'hsr' [ 137.743952][ T6581] Cannot create hsr debugfs directory [ 137.768790][ T6517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.830559][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.907090][ T1073] bridge_slave_1: left allmulticast mode [ 137.921931][ T1073] bridge_slave_1: left promiscuous mode [ 137.937558][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.980417][ T1073] bridge_slave_0: left allmulticast mode [ 137.995798][ T1073] bridge_slave_0: left promiscuous mode [ 138.008700][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.605201][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.649852][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.672809][ T1073] bond0 (unregistering): Released all slaves [ 138.757825][ T6517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.802361][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.819423][ T6517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 138.847251][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 138.954353][ T6517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 138.975251][ T6517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 138.987484][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 139.335910][ T1073] hsr_slave_0: left promiscuous mode [ 139.355671][ T1073] hsr_slave_1: left promiscuous mode [ 139.376092][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.402965][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.422970][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.436538][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.469824][ T1073] veth1_macvtap: left promiscuous mode [ 139.483985][ T1073] veth0_macvtap: left promiscuous mode [ 139.499805][ T1073] veth1_vlan: left promiscuous mode [ 139.514926][ T1073] veth0_vlan: left promiscuous mode [ 139.616738][ T24] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 139.778813][ T24] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 139.787311][ T5634] Bluetooth: hci0: command tx timeout [ 139.808862][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.825778][ T24] usb 4-1: config 0 has no interface number 0 [ 139.833263][ T24] usb 4-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.859839][ T24] usb 4-1: config 0 interface 200 has no altsetting 0 [ 139.869239][ T809] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 139.891672][ T24] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 139.907493][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.928247][ T24] usb 4-1: Product: syz [ 139.933732][ T24] usb 4-1: Manufacturer: syz [ 139.938680][ T24] usb 4-1: SerialNumber: syz [ 139.954521][ T24] usb 4-1: config 0 descriptor?? [ 140.017443][ T809] usb 1-1: device descriptor read/64, error -71 [ 140.081972][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 140.103034][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 140.269938][ T809] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 140.342089][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 140.401332][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 140.416698][ T809] usb 1-1: device descriptor read/64, error -71 [ 140.481210][ T24] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 140.502905][ T24] usb 4-1: USB disconnect, device number 20 [ 140.546818][ T809] usb usb1-port1: attempt power cycle [ 140.719642][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.810234][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.838476][ T6581] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 140.861304][ T6581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.890623][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.897872][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.906224][ T809] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.938224][ T6581] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 140.949026][ T809] usb 1-1: device descriptor read/8, error -71 [ 140.959097][ T6581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.977404][ T6581] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 140.991927][ T6581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.014481][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.021755][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.053794][ T6581] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 141.094580][ T6581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.187645][ T809] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 141.229941][ T809] usb 1-1: device descriptor read/8, error -71 [ 141.347592][ T809] usb usb1-port1: unable to enumerate USB device [ 141.372884][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 141.387094][ T6781] netlink: 92 bytes leftover after parsing attributes in process `syz.3.246'. [ 141.399218][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 141.420050][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.246'. [ 141.452721][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.521741][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.598757][ T6581] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.635756][ T6517] veth0_vlan: entered promiscuous mode [ 141.654514][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.661729][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.715093][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.722332][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.773925][ T6517] veth1_vlan: entered promiscuous mode [ 141.914939][ T6795] loop5: detected capacity change from 0 to 7 [ 141.939478][ T6517] veth0_macvtap: entered promiscuous mode [ 141.941554][ T6795] Dev loop5: unable to read RDB block 7 [ 141.952051][ T6795] loop5: unable to read partition table [ 141.960929][ T6795] loop5: partition table beyond EOD, truncated [ 141.969906][ T6795] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 141.984103][ T6517] veth1_macvtap: entered promiscuous mode [ 142.033609][ T6581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.103011][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.142137][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.185020][ T6800] loop8: detected capacity change from 0 to 8 [ 142.205206][ T1073] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.224921][ T1073] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.239736][ T6800] Dev loop8: unable to read RDB block 8 [ 142.260509][ T6800] loop8: unable to read partition table [ 142.264889][ T1178] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.280811][ T6800] loop8: partition table beyond EOD, truncated [ 142.294380][ T6581] veth0_vlan: entered promiscuous mode [ 142.309384][ T6800] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 142.312960][ T1178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.374435][ T6581] veth1_vlan: entered promiscuous mode [ 142.501549][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.533855][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.638192][ T6581] veth0_macvtap: entered promiscuous mode [ 142.659303][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 142.674151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.708105][ T6581] veth1_macvtap: entered promiscuous mode [ 142.713925][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.797953][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.848505][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.876352][ T6816] fuse: root generation should be zero [ 142.885621][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.896008][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.914003][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.936485][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.106975][ T5719] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 143.139204][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.159710][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.203284][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.216277][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.271553][ T5719] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.286824][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 143.301322][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.322067][ T5719] usb 1-1: Product: syz [ 143.330631][ T5719] usb 1-1: Manufacturer: syz [ 143.340655][ T5719] usb 1-1: SerialNumber: syz [ 143.360121][ T5719] usb 1-1: config 0 descriptor?? [ 143.461517][ T10] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 143.472755][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.485702][ T10] usb 6-1: config 0 has no interface number 0 [ 143.494513][ T10] usb 6-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.508213][ T10] usb 6-1: config 0 interface 200 has no altsetting 0 [ 143.519772][ T10] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 143.530537][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.549820][ T10] usb 6-1: Product: syz [ 143.557125][ T10] usb 6-1: Manufacturer: syz [ 143.567888][ T10] usb 6-1: SerialNumber: syz [ 143.587941][ T5719] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.604705][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 143.617281][ T10] usb 6-1: config 0 descriptor?? [ 143.882012][ T6843] netlink: 'syz.3.255': attribute type 5 has an invalid length. [ 143.922929][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.205'. [ 143.947334][ T10] usbhid 6-1:0.200: couldn't find an input interrupt endpoint [ 143.968471][ T10] usb 6-1: USB disconnect, device number 2 [ 144.065171][ T6815] kvm: pic: non byte read [ 144.120709][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.149210][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.620156][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 144.832257][ T5719] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 145.549708][ T5698] usb 1-1: USB disconnect, device number 16 [ 145.802625][ T6865] xt_hashlimit: size too large, truncated to 1048576 [ 145.828532][ T6865] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 146.276857][ T29] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 146.465352][ T29] usb 7-1: not running at top speed; connect to a high speed hub [ 146.498747][ T29] usb 7-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 146.521457][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.541348][ T29] usb 7-1: Product: syz [ 146.558738][ T29] usb 7-1: Manufacturer: syz [ 146.566791][ T29] usb 7-1: SerialNumber: syz [ 146.572336][ T6907] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 147.376799][ T6927] netlink: 'syz.3.271': attribute type 4 has an invalid length. [ 147.465077][ T6932] netlink: 'syz.3.271': attribute type 4 has an invalid length. [ 147.549502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 147.767020][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 147.869194][ T5719] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 147.961927][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 148.002082][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.040475][ T9] usb 3-1: config 0 has no interface number 0 [ 148.047809][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 148.069303][ T5719] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.081857][ T9] usb 3-1: config 0 interface 1 has no altsetting 0 [ 148.094475][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 148.105438][ T5719] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.133149][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.146858][ T5719] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 148.171141][ T9] usb 3-1: Product: syz [ 148.190471][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.203148][ T9] usb 3-1: Manufacturer: syz [ 148.215123][ T9] usb 3-1: SerialNumber: syz [ 148.254883][ T5719] usb 1-1: config 0 descriptor?? [ 148.290265][ T9] usb 3-1: config 0 descriptor?? [ 148.523338][ T9] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 148.568248][ T9] usb 3-1: USB disconnect, device number 20 [ 148.579567][ T5728] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 148.722054][ T5719] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 148.750634][ T5728] usb 4-1: device descriptor read/64, error -71 [ 148.919961][ T5690] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 148.996625][ T5728] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 149.086530][ T5690] usb 6-1: Using ep0 maxpacket: 16 [ 149.110918][ T10] usb 1-1: USB disconnect, device number 17 [ 149.125335][ T5690] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 149.147720][ T5728] usb 4-1: device descriptor read/64, error -71 [ 149.164578][ T5690] usb 6-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 149.181697][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.196928][ T5690] usb 6-1: Product: syz [ 149.203837][ T5690] usb 6-1: Manufacturer: syz [ 149.229132][ T5690] usb 6-1: SerialNumber: syz [ 149.267869][ T6947] loop5: detected capacity change from 0 to 7 [ 149.286050][ T6947] Dev loop5: unable to read RDB block 7 [ 149.292504][ T5728] usb usb4-port1: attempt power cycle [ 149.302763][ T6947] loop5: unable to read partition table [ 149.315193][ T6947] loop5: partition table beyond EOD, truncated [ 149.332858][ T6947] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 149.656795][ T5728] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 149.713593][ T5728] usb 4-1: device descriptor read/8, error -71 [ 149.752165][ T6952] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 149.791996][ T6951] binder: 6950:6951 ioctl c0306201 200000000040 returned -14 [ 149.846055][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.863274][ T5690] usb 6-1: USB disconnect, device number 3 [ 149.888370][ T29] usb 7-1: MIDIStreaming interface descriptor not found [ 149.920204][ T6283] udevd[6283]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.998935][ T5728] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 150.057252][ T5728] usb 4-1: device descriptor read/8, error -71 [ 150.104709][ T29] usb 7-1: USB disconnect, device number 2 [ 150.198698][ T5728] usb usb4-port1: unable to enumerate USB device [ 150.520965][ T6965] netlink: 76 bytes leftover after parsing attributes in process `syz.5.283'. [ 150.558702][ T6965] netlink: 72 bytes leftover after parsing attributes in process `syz.5.283'. [ 150.575272][ T6965] netlink: 'syz.5.283': attribute type 3 has an invalid length. [ 150.604994][ T6965] netlink: 11 bytes leftover after parsing attributes in process `syz.5.283'. [ 151.186533][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 151.364257][ T29] usb 6-1: config 1 interface 0 has no altsetting 0 [ 151.404301][ T29] usb 6-1: string descriptor 0 read error: -22 [ 151.415107][ T29] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.40 [ 151.450901][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.499882][ T6986] netlink: 80 bytes leftover after parsing attributes in process `syz.3.289'. [ 151.551810][ T6986] netlink: 80 bytes leftover after parsing attributes in process `syz.3.289'. [ 151.746607][ T809] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 151.779509][ T6994] loop5: detected capacity change from 0 to 7 [ 151.793697][ T6994] Dev loop5: unable to read RDB block 7 [ 151.806007][ T6994] loop5: unable to read partition table [ 151.821485][ T6994] loop5: partition table beyond EOD, truncated [ 151.843080][ T6994] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 151.936531][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 151.955639][ T809] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.979466][ T809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.995924][ T809] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 152.006294][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.022019][ T809] usb 3-1: config 0 descriptor?? [ 152.286786][ T5755] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 152.447218][ T5755] usb 7-1: Using ep0 maxpacket: 16 [ 152.456919][ T5728] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 152.489606][ T5755] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 152.525600][ T809] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 152.559740][ T5755] usb 7-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 152.571581][ T5755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.581629][ T5755] usb 7-1: Product: syz [ 152.585885][ T5755] usb 7-1: Manufacturer: syz [ 152.602516][ T5755] usb 7-1: SerialNumber: syz [ 152.640409][ T5728] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 152.667255][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.703546][ T5728] usb 1-1: config 0 has no interface number 0 [ 152.714049][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 152.724851][ T5728] usb 1-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.755338][ T5728] usb 1-1: config 0 interface 200 has no altsetting 0 [ 152.779212][ T5728] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 152.794035][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.814716][ T5728] usb 1-1: Product: syz [ 152.831586][ T5728] usb 1-1: Manufacturer: syz [ 152.841970][ T5728] usb 1-1: SerialNumber: syz [ 152.862994][ T5728] usb 1-1: config 0 descriptor?? [ 152.875038][ T24] usb 3-1: USB disconnect, device number 21 [ 153.111559][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 153.171373][ T5728] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 153.199505][ T5755] usb 7-1: USB disconnect, device number 3 [ 153.215109][ T5728] usb 1-1: USB disconnect, device number 18 [ 153.269394][ T6283] udevd[6283]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.472976][ T7016] netlink: 68 bytes leftover after parsing attributes in process `syz.3.297'. [ 153.824239][ T29] usbhid 6-1:1.0: can't add hid device: -71 [ 153.860448][ T29] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 153.902584][ T29] usb 6-1: USB disconnect, device number 4 [ 154.167820][ T7031] netlink: 80 bytes leftover after parsing attributes in process `syz.6.302'. [ 154.215584][ T7031] netlink: 80 bytes leftover after parsing attributes in process `syz.6.302'. [ 154.478598][ T7038] loop5: detected capacity change from 0 to 7 [ 154.531914][ T7038] Dev loop5: unable to read RDB block 7 [ 154.555273][ T7038] loop5: unable to read partition table [ 154.579759][ T7038] loop5: partition table beyond EOD, truncated [ 154.601052][ T7038] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 154.856235][ T7046] tipc: Started in network mode [ 154.868616][ T7046] tipc: Node identity 821e1a9acd37, cluster identity 4711 [ 154.887935][ T7046] tipc: Enabled bearer , priority 0 [ 154.898479][ T7046] syzkaller0: entered promiscuous mode [ 154.907768][ T7046] syzkaller0: entered allmulticast mode [ 154.923475][ T7046] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 154.964445][ T7046] tipc: Resetting bearer [ 155.001535][ T7045] tipc: Resetting bearer [ 155.096806][ T7045] tipc: Disabling bearer [ 155.357237][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 155.375092][ T7057] ipvlan2: entered allmulticast mode [ 155.390012][ T7057] syz_tun: entered allmulticast mode [ 155.556484][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 155.579837][ T29] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 155.625170][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 155.651953][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.678500][ T29] usb 6-1: Product: syz [ 155.688985][ T29] usb 6-1: Manufacturer: syz [ 155.701108][ T29] usb 6-1: SerialNumber: syz [ 155.779140][ T7048] __nla_validate_parse: 1 callbacks suppressed [ 155.779457][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 156.020492][ T7069] xt_l2tp: v2 doesn't support IP mode [ 156.352854][ T7075] netlink: 80 bytes leftover after parsing attributes in process `syz.2.314'. [ 156.386605][ T7075] netlink: 80 bytes leftover after parsing attributes in process `syz.2.314'. [ 156.549844][ T29] usb 6-1: USB disconnect, device number 5 [ 156.591410][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.672004][ T7067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.695577][ T7067] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 156.738883][ T7067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.765433][ T7067] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 156.988392][ T7099] loop8: detected capacity change from 0 to 8 [ 157.009553][ T7099] Dev loop8: unable to read RDB block 8 [ 157.027655][ T7099] loop8: unable to read partition table [ 157.040316][ T7099] loop8: partition table beyond EOD, truncated [ 157.065913][ T7099] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 157.187356][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 157.226181][ T7105] loop5: detected capacity change from 0 to 7 [ 157.255053][ T7105] Dev loop5: unable to read RDB block 7 [ 157.275957][ T7105] loop5: unable to read partition table [ 157.283377][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.322'. [ 157.302707][ T7105] loop5: partition table beyond EOD, truncated [ 157.325300][ T7108] ipvlan2: entered allmulticast mode [ 157.336326][ T7105] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 157.350062][ T7108] syz_tun: entered allmulticast mode [ 157.379639][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 157.441191][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 157.457084][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 157.466614][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.474814][ T24] usb 3-1: Product: syz [ 157.539320][ T24] usb 3-1: Manufacturer: syz [ 157.555448][ T24] usb 3-1: SerialNumber: syz [ 157.572495][ T24] usb 3-1: config 0 descriptor?? [ 157.594185][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 157.609585][ T7112] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 157.617780][ T24] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 158.457718][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 158.613761][ T24] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 158.696745][ T24] em28xx 3-1:0.0: board has no eeprom [ 158.831819][ T7149] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 158.839454][ T7149] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 158.858854][ T24] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 158.890607][ T24] em28xx 3-1:0.0: dvb set to bulk mode. [ 158.908532][ T5755] em28xx 3-1:0.0: Binding DVB extension [ 158.953059][ T24] usb 3-1: USB disconnect, device number 22 [ 159.040536][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 159.180628][ T5728] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 159.266117][ T5755] em28xx 3-1:0.0: Registering input extension [ 159.296881][ T24] em28xx 3-1:0.0: Closing input extension [ 159.297092][ T7160] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 159.378885][ T5728] usb 7-1: Using ep0 maxpacket: 16 [ 159.415257][ T5728] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 159.482761][ T5728] usb 7-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 159.519889][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.548195][ T5728] usb 7-1: Product: syz [ 159.570940][ T5728] usb 7-1: Manufacturer: syz [ 159.603752][ T5728] usb 7-1: SerialNumber: syz [ 160.030606][ T24] em28xx 3-1:0.0: Freeing device [ 160.325649][ T7181] netlink: 'syz.3.334': attribute type 4 has an invalid length. [ 160.437140][ T7185] netlink: 'syz.3.334': attribute type 4 has an invalid length. [ 160.671291][ T5728] usb 7-1: USB disconnect, device number 4 [ 160.730072][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.208845][ T7201] loop5: detected capacity change from 0 to 7 [ 161.245273][ T7201] Dev loop5: unable to read RDB block 7 [ 161.277838][ T7201] loop5: unable to read partition table [ 161.305228][ T7201] loop5: partition table beyond EOD, truncated [ 161.348529][ T7201] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 161.706335][ T7220] netlink: 'syz.3.344': attribute type 26 has an invalid length. [ 162.076471][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 162.076619][ T5719] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 162.227103][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 162.246737][ T809] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 162.269147][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.269816][ T7240] netlink: 76 bytes leftover after parsing attributes in process `syz.2.349'. [ 162.286179][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 162.292386][ T24] usb 1-1: config 9 has an invalid interface number: 111 but max is 0 [ 162.303609][ T5719] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 162.309520][ T24] usb 1-1: config 9 has no interface number 0 [ 162.314564][ T5719] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 162.329554][ T24] usb 1-1: config 9 interface 111 has no altsetting 0 [ 162.337587][ T7240] netlink: 72 bytes leftover after parsing attributes in process `syz.2.349'. [ 162.342174][ T24] usb 1-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=f7.35 [ 162.360122][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.370517][ T7240] netlink: 'syz.2.349': attribute type 3 has an invalid length. [ 162.378488][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.381346][ T5719] usb 4-1: Product: syz [ 162.393612][ T7240] netlink: 11 bytes leftover after parsing attributes in process `syz.2.349'. [ 162.400360][ T24] usb 1-1: Product: syz [ 162.412738][ T24] usb 1-1: Manufacturer: syz [ 162.413148][ T5719] usb 4-1: Manufacturer: syz [ 162.423701][ T5719] usb 4-1: SerialNumber: syz [ 162.425489][ T24] usb 1-1: SerialNumber: syz [ 162.448061][ T809] usb 6-1: Using ep0 maxpacket: 16 [ 162.460747][ T5719] r8152-cfgselector 4-1: Unknown version 0x0000 [ 162.464558][ T809] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.473591][ T5719] r8152-cfgselector 4-1: config 0 descriptor?? [ 162.486669][ T809] usb 6-1: config 0 interface 0 has no altsetting 0 [ 162.493380][ T809] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 162.502890][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.515404][ T809] usb 6-1: config 0 descriptor?? [ 162.649674][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.667715][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.698521][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.723770][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.724245][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.755757][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.834223][ T24] peak_usb 1-1:9.111 can0: unable to request usb[type=0 value=1] err=-71 [ 162.842832][ T24] peak_usb 1-1:9.111: unable to read PCAN-USB Pro FD firmware info (err -71) [ 162.867525][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 162.918946][ T24] peak_usb 1-1:9.111: probe with driver peak_usb failed with error -71 [ 162.964174][ T809] uclogic 0003:145F:0212.0009: interface is invalid, ignoring [ 162.982343][ T24] usb 1-1: USB disconnect, device number 19 [ 163.038252][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 163.054960][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 163.096126][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 163.105564][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.115496][ T10] usb 3-1: Product: syz [ 163.121656][ T10] usb 3-1: Manufacturer: syz [ 163.133572][ T10] usb 3-1: SerialNumber: syz [ 163.202424][ T24] usb 6-1: USB disconnect, device number 6 [ 163.343543][ T7267] netlink: 76 bytes leftover after parsing attributes in process `syz.6.351'. [ 163.388591][ T7267] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 163.460142][ T7270] loop5: detected capacity change from 0 to 7 [ 163.476747][ T7270] Dev loop5: unable to read RDB block 7 [ 163.493826][ T7270] loop5: unable to read partition table [ 163.513162][ T7270] loop5: partition table beyond EOD, truncated [ 163.525124][ T7270] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 163.746277][ T10] usb 3-1: USB disconnect, device number 23 [ 163.806103][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.825438][ T7281] loop5: detected capacity change from 0 to 7 [ 163.859947][ T7281] Dev loop5: unable to read RDB block 7 [ 163.883464][ T7281] loop5: unable to read partition table [ 163.916024][ T7281] loop5: partition table beyond EOD, truncated [ 163.924474][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.355'. [ 163.940401][ T7281] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 164.016693][ T7288] ipvlan2: entered allmulticast mode [ 164.183539][ T7294] loop5: detected capacity change from 0 to 7 [ 164.194740][ T7294] Dev loop5: unable to read RDB block 7 [ 164.222314][ T7294] loop5: unable to read partition table [ 164.254205][ T7294] loop5: partition table beyond EOD, truncated [ 164.303169][ T7294] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 164.576503][ T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 164.637521][ T809] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 164.753895][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 164.782640][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.791306][ T5719] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 164.811139][ T809] usb 6-1: Invalid ep0 maxpacket: 64 [ 164.815171][ T10] usb 1-1: Product: syz [ 164.828667][ T10] usb 1-1: Manufacturer: syz [ 164.854346][ T10] usb 1-1: SerialNumber: syz [ 164.878754][ T10] usb 1-1: config 0 descriptor?? [ 164.956483][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 164.964657][ T809] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 165.095363][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 165.126732][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 165.132718][ T809] usb 6-1: Invalid ep0 maxpacket: 64 [ 165.145717][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.153969][ T809] usb usb6-port1: attempt power cycle [ 165.168431][ T24] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 165.179642][ T24] usb 3-1: config 4 has no interface number 0 [ 165.196548][ T24] usb 3-1: config 4 interface 127 has no altsetting 0 [ 165.203479][ T5726] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 165.217658][ T24] usb 3-1: language id specifier not provided by device, defaulting to English [ 165.243325][ T24] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 165.263071][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.281952][ T24] usb 3-1: Product: syz [ 165.293491][ T24] usb 3-1: SerialNumber: syz [ 165.356522][ T5726] usb 7-1: device descriptor read/64, error -71 [ 165.516507][ T809] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 165.568090][ T809] usb 6-1: Invalid ep0 maxpacket: 64 [ 165.597102][ T5726] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 165.620927][ T24] usb 3-1: USB disconnect, device number 24 [ 165.716547][ T809] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 165.747213][ T809] usb 6-1: Invalid ep0 maxpacket: 64 [ 165.755648][ T809] usb usb6-port1: unable to enumerate USB device [ 165.762196][ T5726] usb 7-1: device descriptor read/64, error -71 [ 165.876766][ T5726] usb usb7-port1: attempt power cycle [ 165.906519][ T29] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 166.066560][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 166.078321][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 166.111914][ T29] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 166.131223][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.146584][ T29] usb 4-1: Product: syz [ 166.161048][ T29] usb 4-1: Manufacturer: syz [ 166.171154][ T29] usb 4-1: SerialNumber: syz [ 166.226491][ T5726] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 166.267338][ T5726] usb 7-1: device descriptor read/8, error -71 [ 166.516843][ T5726] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 166.519446][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 166.552302][ T10] usb 1-1: USB disconnect, device number 20 [ 166.572512][ T5726] usb 7-1: device descriptor read/8, error -71 [ 166.625788][ T29] usb 4-1: USB disconnect, device number 26 [ 166.657882][ T6283] udevd[6283]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.696888][ T5726] usb usb7-port1: unable to enumerate USB device [ 166.812039][ T7362] loop8: detected capacity change from 0 to 8 [ 166.822635][ T7362] Dev loop8: unable to read RDB block 8 [ 166.828967][ T7362] loop8: unable to read partition table [ 166.834898][ T7362] loop8: partition table beyond EOD, truncated [ 166.841553][ T7362] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 167.176544][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 167.182866][ T7370] syzkaller0: entered promiscuous mode [ 167.189735][ T7370] syzkaller0: entered allmulticast mode [ 167.209019][ T7370] tipc: Started in network mode [ 167.213888][ T7370] tipc: Node identity fe05d289bb24, cluster identity 4711 [ 167.221919][ T7370] tipc: Enabled bearer , priority 0 [ 167.230562][ T7369] tipc: Resetting bearer [ 167.248961][ T7369] tipc: Disabling bearer [ 167.328131][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.341487][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 167.353276][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.364826][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.379865][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 167.391169][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.402132][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.419117][ T10] usb 3-1: config 0 descriptor?? [ 167.434506][ T7366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.549685][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 167.563749][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 167.575197][ T9] usb 4-1: config 220 has no interface number 2 [ 167.582317][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 167.601883][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 167.613164][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 167.621776][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 167.647878][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 167.666612][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.674850][ T9] usb 4-1: Product: syz [ 167.680557][ T9] usb 4-1: Manufacturer: syz [ 167.685306][ T9] usb 4-1: SerialNumber: syz [ 167.824521][ T7391] loop8: detected capacity change from 0 to 8 [ 167.848094][ T7391] Dev loop8: unable to read RDB block 8 [ 167.854086][ T7391] loop8: unable to read partition table [ 167.860713][ T7391] loop8: partition table beyond EOD, truncated [ 167.872402][ T10] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 167.880076][ T7391] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 167.946308][ T10] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 167.952555][ T7368] binder: 7367:7368 ioctl c0306201 2000000009c0 returned -14 [ 168.074740][ T7368] pim6reg: entered allmulticast mode [ 168.120457][ T7401] syzkaller1: entered promiscuous mode [ 168.127358][ T7401] syzkaller1: entered allmulticast mode [ 168.142765][ T10] usb 3-1: USB disconnect, device number 25 [ 168.164998][ T7403] syzkaller0: entered promiscuous mode [ 168.165019][ T9] usb 4-1: selecting invalid altsetting 0 [ 168.179035][ T7403] syzkaller0: entered allmulticast mode [ 168.193573][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 168.206497][ T5719] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 168.214174][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 168.243521][ T9] usb 4-1: selecting invalid altsetting 0 [ 168.249508][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 168.265193][ T9] usb 4-1: USB disconnect, device number 27 [ 168.273637][ T7403] tipc: Enabled bearer , priority 0 [ 168.292861][ T7402] tipc: Resetting bearer [ 168.349875][ T7402] tipc: Disabling bearer [ 168.386710][ T5719] usb 7-1: Using ep0 maxpacket: 16 [ 168.396641][ T5719] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 168.420565][ T5719] usb 7-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 168.431157][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.439386][ T5719] usb 7-1: Product: syz [ 168.444884][ T5719] usb 7-1: Manufacturer: syz [ 168.454299][ T5719] usb 7-1: SerialNumber: syz [ 168.656532][ T809] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 168.736639][ T29] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 168.826868][ T809] usb 6-1: Using ep0 maxpacket: 8 [ 168.844171][ T809] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.855314][ T809] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.867447][ T809] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.878900][ T809] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.893022][ T809] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.908126][ T29] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 168.909951][ T5719] usb 7-1: USB disconnect, device number 9 [ 168.928646][ T29] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 168.948891][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.962768][ T29] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 168.977112][ T29] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 156, setting to 64 [ 168.992017][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.997655][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 169.009718][ T29] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 169.035733][ T29] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 169.060205][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.072792][ T29] usb 1-1: Product: syz [ 169.083580][ T29] usb 1-1: Manufacturer: syz [ 169.089882][ T29] usb 1-1: SerialNumber: syz [ 169.104799][ T7414] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 169.120879][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 169.135983][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input13 [ 169.196498][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 169.203340][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 169.212423][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.222756][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.245328][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.245361][ T809] usb 6-1: GET_CAPABILITIES returned 0 [ 169.254695][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.254729][ T9] usb 3-1: Product: syz [ 169.254742][ T9] usb 3-1: Manufacturer: syz [ 169.254755][ T9] usb 3-1: SerialNumber: syz [ 169.263904][ T9] usb 3-1: 0:2 : does not exist [ 169.286509][ T809] usbtmc 6-1:16.0: can't read capabilities [ 169.496859][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.541925][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.604027][ T7423] IPv6: Can't replace route, no match found [ 169.634552][ T29] imon:send_packet: packet tx failed (-71) [ 169.686559][ T29] imon 1-1:155.0: panel buttons/knobs setup failed [ 169.700100][ T29] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 169.725403][ T29] (id 0x00) [ 169.800062][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.842505][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.851621][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.860734][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.869826][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.926703][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.935854][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.944961][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.954057][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.963382][ T29] rc_core: IR keymap rc-imon-pad not found [ 169.969499][ T29] Registered IR keymap rc-empty [ 169.974453][ T29] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 169.984781][ T29] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 170.003764][ T29] imon:send_packet: packet tx failed (-71) [ 170.018354][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 170.027462][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 170.046734][ T29] imon 1-1:155.0: remote input dev register failed [ 170.053445][ T29] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 170.062402][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 170.071513][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 170.080585][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 170.089649][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 170.109672][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 170.213108][ T29] imon 1-1:155.0: unable to initialize intf0, err 0 [ 170.220849][ T29] imon:imon_probe: failed to initialize context! [ 170.228302][ T29] imon 1-1:155.0: unable to register, err -19 [ 170.270914][ T29] usb 1-1: USB disconnect, device number 21 [ 170.289764][ T7416] syzkaller0: entered promiscuous mode [ 170.347833][ T7416] syzkaller0: entered allmulticast mode [ 170.877802][ T9] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 170.890634][ T7454] syzkaller0: entered promiscuous mode [ 170.896269][ T7454] syzkaller0: entered allmulticast mode [ 170.961417][ T7454] tipc: Enabled bearer , priority 0 [ 170.967678][ T9] usb 3-1: USB disconnect, device number 26 [ 170.988097][ T7453] tipc: Resetting bearer [ 171.031716][ T7453] tipc: Disabling bearer [ 171.038145][ T809] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 171.171522][ T7460] netlink: 76 bytes leftover after parsing attributes in process `syz.0.402'. [ 171.181186][ T7460] netlink: 72 bytes leftover after parsing attributes in process `syz.0.402'. [ 171.191122][ T7460] netlink: 'syz.0.402': attribute type 3 has an invalid length. [ 171.198875][ T7460] netlink: 11 bytes leftover after parsing attributes in process `syz.0.402'. [ 171.216526][ T809] usb 7-1: Using ep0 maxpacket: 32 [ 171.226932][ T809] usb 7-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 171.237186][ T5726] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 171.249921][ T809] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 171.266536][ T809] usb 7-1: config 0 has no interface number 0 [ 171.273278][ T809] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.287285][ T809] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.297897][ T809] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 171.310726][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.324203][ T809] usb 7-1: config 0 descriptor?? [ 171.419619][ T5726] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 171.430281][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.445462][ T5726] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.465005][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 171.475235][ T5726] usb 4-1: Product: syz [ 171.480260][ T5726] usb 4-1: Manufacturer: syz [ 171.485055][ T5726] usb 4-1: SerialNumber: syz [ 171.500034][ T5726] usb 4-1: config 0 descriptor?? [ 171.510187][ T7456] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 171.538122][ T5726] usb 4-1: selecting invalid altsetting 0 [ 171.558754][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 171.592344][ T29] usb 6-1: USB disconnect, device number 11 [ 171.717054][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 171.734152][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 171.753112][ T7456] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 171.778477][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 171.785808][ T809] hid_parser_main: 4003 callbacks suppressed [ 171.785829][ T809] corsair 0003:1B1C:1B34.000B: unknown main item tag 0x0 [ 171.813179][ T29] usb 4-1: USB disconnect, device number 28 [ 171.815752][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.830399][ T10] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 171.842934][ T809] corsair 0003:1B1C:1B34.000B: unknown main item tag 0x0 [ 171.849235][ T9] usb 1-1: Product: syz [ 171.861591][ T9] usb 1-1: Manufacturer: syz [ 171.865208][ T809] corsair 0003:1B1C:1B34.000B: failed to start in urb: -90 [ 171.872621][ T9] usb 1-1: SerialNumber: syz [ 171.915792][ T809] corsair 0003:1B1C:1B34.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.6-1/input1 [ 171.988774][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 172.021813][ T10] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.049033][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.057161][ T10] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 172.068866][ T7479] netlink: 80 bytes leftover after parsing attributes in process `syz.5.408'. [ 172.078517][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.106109][ T10] usb 3-1: config 0 descriptor?? [ 172.106441][ T7479] netlink: 80 bytes leftover after parsing attributes in process `syz.5.408'. [ 172.120678][ T7468] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 172.321696][ T9] usb 1-1: USB disconnect, device number 22 [ 172.367694][ T6283] udevd[6283]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.511022][ T7485] netlink: 'syz.3.410': attribute type 4 has an invalid length. [ 172.548869][ T10] samsung 0003:0419:0001.000C: unexpected long global item [ 172.563199][ T7485] netlink: 'syz.3.410': attribute type 4 has an invalid length. [ 172.574856][ T10] samsung 0003:0419:0001.000C: parse failed [ 172.582737][ T10] samsung 0003:0419:0001.000C: probe with driver samsung failed with error -22 [ 172.756157][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.789959][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.888863][ T7490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.930743][ T7487] xt_hashlimit: size too large, truncated to 1048576 [ 172.943162][ T7490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.976841][ T7487] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 173.710418][ T7508] loop5: detected capacity change from 0 to 7 [ 173.720970][ T7508] Dev loop5: unable to read RDB block 7 [ 173.731602][ T7508] loop5: unable to read partition table [ 173.737953][ T7508] loop5: partition table beyond EOD, truncated [ 173.744303][ T7508] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 173.756929][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 173.927454][ T5755] usb 7-1: USB disconnect, device number 10 [ 173.949332][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.960453][ T29] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 173.973218][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.002446][ T29] usb 6-1: config 0 descriptor?? [ 174.220139][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 174.232657][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 174.253834][ T29] usb 6-1: USB disconnect, device number 12 [ 174.460615][ T7509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.626558][ T5755] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 174.737670][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 174.787270][ T5755] usb 1-1: Using ep0 maxpacket: 16 [ 174.804276][ T5755] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 174.825298][ T5755] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 174.843977][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.852450][ T5755] usb 1-1: Product: syz [ 174.857660][ T5755] usb 1-1: Manufacturer: syz [ 174.862492][ T5755] usb 1-1: SerialNumber: syz [ 174.929551][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.941058][ T29] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.954082][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.968305][ T29] usb 6-1: config 0 descriptor?? [ 175.022063][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 175.064681][ T7468] [U]  [ 175.087593][ T10] usb 3-1: USB disconnect, device number 27 [ 175.196894][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 175.220382][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 175.226215][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 175.250495][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 175.273051][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 175.303601][ T29] usb 6-1: USB disconnect, device number 13 [ 175.304054][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.341838][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.371423][ T9] usb 4-1: Product: 랱텗뗝鷴ጣ댺扩ꨣ罗訿㋩ꪳ珪ꭴ艦ج칐금袵ዴꗴ꬏嵍䘮䖌硔٦뷡㼀ゞ [ 175.393271][ T9] usb 4-1: Manufacturer: Ⰹ [ 175.398296][ T9] usb 4-1: SerialNumber: Ь [ 175.649558][ T5755] usb 1-1: USB disconnect, device number 23 [ 175.705909][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.746529][ T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 175.754783][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.425'. [ 175.894093][ T9] cdc_ncm 4-1:1.0: bind() failure [ 175.929734][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 175.946150][ T29] usb 6-1: no configurations [ 175.953513][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 175.958030][ T29] usb 6-1: can't read configurations, error -22 [ 176.004236][ T9] cdc_ncm 4-1:1.1: bind() failure [ 176.093043][ T9] usb 4-1: USB disconnect, device number 29 [ 176.108575][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 176.282516][ T5755] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 176.293984][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 176.325852][ T29] usb 6-1: no configurations [ 176.333172][ T29] usb 6-1: can't read configurations, error -22 [ 176.347615][ T29] usb usb6-port1: attempt power cycle [ 176.489140][ T5755] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.521897][ T5755] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 176.545654][ T5755] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.595371][ T5755] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.625274][ T5755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.635417][ T5755] usb 7-1: Product: syz [ 176.646032][ T5755] usb 7-1: Manufacturer: syz [ 176.651423][ T5755] usb 7-1: SerialNumber: syz [ 176.692377][ T5755] cdc_ncm 7-1:1.0: skipping garbage [ 176.697795][ T29] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 176.708183][ T5755] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 176.726854][ T5755] cdc_ncm 7-1:1.0: bind() failure [ 176.737931][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 176.747029][ T29] usb 6-1: no configurations [ 176.763335][ T29] usb 6-1: can't read configurations, error -22 [ 176.907653][ T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 176.947037][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 176.955677][ T29] usb 6-1: no configurations [ 176.965515][ T29] usb 6-1: can't read configurations, error -22 [ 176.980246][ T29] usb usb6-port1: unable to enumerate USB device [ 177.097099][ T5755] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 177.265412][ T5755] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 177.287627][ T5755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.316632][ T5755] usb 3-1: config 0 has no interface number 0 [ 177.340948][ T5755] usb 3-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.371931][ T5755] usb 3-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.403443][ T5755] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 177.441826][ T5755] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 177.464268][ T5755] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 177.476277][ T5755] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 177.508965][ T5755] usb 3-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 177.532533][ T5755] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 177.545072][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.580084][ T5755] usb 3-1: config 0 descriptor?? [ 177.612378][ T7575] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 179.143097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 179.183137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 183.316414][ C0] sched: DL replenish lagged too much [ 185.753290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 185.793125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 185.809623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 196.017624][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.030760][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.450721][ T5755] usb 3-1: string descriptor 0 read error: -71 [ 256.186491][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.199618][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.376344][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 311.383324][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5649/1:b..l [ 311.391667][ C1] rcu: (detected by 1, t=10503 jiffies, g=34429, q=1916 ncpus=2) [ 311.399496][ C1] task:syz-executor state:R running task stack:22384 pid:5649 tgid:5649 ppid:5628 task_flags:0x400140 flags:0x00080000 [ 311.414108][ C1] Call Trace: [ 311.417400][ C1] [ 311.420340][ C1] __schedule+0x1821/0x5740 [ 311.424880][ C1] ? kmem_cache_free+0x182/0x650 [ 311.429831][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 311.435217][ C1] ? NF_HOOK+0x21f/0x3c0 [ 311.439470][ C1] ? NF_HOOK+0x336/0x3c0 [ 311.443722][ C1] ? process_backlog+0xaa3/0x1950 [ 311.448753][ C1] ? __napi_poll+0xae/0x340 [ 311.453263][ C1] ? net_rx_action+0x627/0xf70 [ 311.458042][ C1] ? __pfx___schedule+0x10/0x10 [ 311.462913][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 311.467870][ C1] preempt_schedule_irq+0x4d/0xa0 [ 311.472988][ C1] irqentry_exit+0x14f/0x8b0 [ 311.477591][ C1] ? trace_irq_disable+0x3b/0x140 [ 311.482643][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.488641][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 311.493946][ C1] Code: ff ff ff e8 31 af 05 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b 9a 96 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 18 e2 91 [ 311.513819][ C1] RSP: 0018:ffffc90003c9f298 EFLAGS: 00000282 [ 311.519909][ C1] RAX: c33a9046f1ce0100 RBX: 0000000000000000 RCX: 0000000000000046 [ 311.527892][ C1] RDX: 000000000973479e RSI: ffffffff8e2168c0 RDI: ffffffff8c28b760 [ 311.536045][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 311.544031][ C1] R10: ffffc90003c9f458 R11: fffff52000793e8d R12: 0000000000000002 [ 311.552015][ C1] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 311.560000][ C1] ? unwind_next_frame+0xa6/0x2550 [ 311.565133][ C1] ? unwind_next_frame+0xa6/0x2550 [ 311.570260][ C1] ? arch_stack_walk+0xe3/0x150 [ 311.575390][ C1] ? unwind_next_frame+0xa6/0x2550 [ 311.580529][ C1] unwind_next_frame+0xc3/0x2550 [ 311.585486][ C1] ? unwind_next_frame+0xa6/0x2550 [ 311.590617][ C1] ? unwind_next_frame+0xa6/0x2550 [ 311.595753][ C1] ? __unwind_start+0xf7/0x760 [ 311.600534][ C1] __unwind_start+0x5b8/0x760 [ 311.605232][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 311.611400][ C1] arch_stack_walk+0xe3/0x150 [ 311.616108][ C1] ? arch_stack_walk+0xe3/0x150 [ 311.620973][ C1] stack_trace_save+0xa9/0x100 [ 311.625754][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 311.631150][ C1] save_stack+0x122/0x230 [ 311.635492][ C1] ? __pfx_save_stack+0x10/0x10 [ 311.640376][ C1] __reset_page_owner+0x71/0x1f0 [ 311.645334][ C1] __free_frozen_pages+0xc1c/0xd30 [ 311.650471][ C1] __slab_free+0x274/0x2c0 [ 311.654908][ C1] ? qlist_free_all+0x8e/0x100 [ 311.659688][ C1] qlist_free_all+0x99/0x100 [ 311.664296][ C1] ? security_file_alloc+0x34/0x310 [ 311.669505][ C1] kasan_quarantine_reduce+0x148/0x160 [ 311.674980][ C1] __kasan_slab_alloc+0x22/0x80 [ 311.679955][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 311.685457][ C1] ? security_file_alloc+0x34/0x310 [ 311.690666][ C1] ? rcu_is_watching+0x15/0xb0 [ 311.695445][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 311.701117][ C1] security_file_alloc+0x34/0x310 [ 311.706191][ C1] init_file+0x90/0x2b0 [ 311.710469][ C1] alloc_empty_file+0x74/0x1d0 [ 311.715249][ C1] path_openat+0x10f/0x3860 [ 311.719770][ C1] ? arch_stack_walk+0xfb/0x150 [ 311.724646][ C1] ? do_getname+0x2e/0x250 [ 311.729087][ C1] ? stack_trace_save+0xa9/0x100 [ 311.734125][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 311.739616][ C1] ? do_getname+0x2e/0x250 [ 311.744216][ C1] ? stack_depot_save_flags+0x33/0x810 [ 311.749735][ C1] ? do_getname+0x2e/0x250 [ 311.754286][ C1] ? kasan_save_track+0x4f/0x80 [ 311.759159][ C1] ? kasan_save_track+0x3e/0x80 [ 311.764029][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 311.769080][ C1] ? __pfx_path_openat+0x10/0x10 [ 311.774036][ C1] ? __x64_sys_openat+0x138/0x170 [ 311.779085][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 311.784216][ C1] do_file_open+0x23e/0x4a0 [ 311.788742][ C1] ? __pfx_do_file_open+0x10/0x10 [ 311.793802][ C1] ? _raw_spin_unlock+0x28/0x50 [ 311.798668][ C1] ? alloc_fd+0x64b/0x6c0 [ 311.803021][ C1] do_sys_openat2+0x113/0x200 [ 311.807713][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 311.812924][ C1] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 311.818658][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 311.824740][ C1] __x64_sys_openat+0x138/0x170 [ 311.829605][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.835681][ C1] do_syscall_64+0x174/0x580 [ 311.840303][ C1] ? clear_bhb_loop+0x40/0x90 [ 311.844995][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.850894][ C1] RIP: 0033:0x7f5b5099c17c [ 311.855311][ C1] RSP: 002b:00007f5b50d3fd40 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 311.863731][ C1] RAX: ffffffffffffffda RBX: 0000000000000143 RCX: 00007f5b5099c17c [ 311.871711][ C1] RDX: 0000000000090800 RSI: 00007f5b50a326b1 RDI: 00000000ffffff9c [ 311.879700][ C1] RBP: 00007f5b50d3fdec R08: 0000000000000000 R09: 0000000000000000 [ 311.887694][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000064 [ 311.895674][ C1] R13: 0000000000000000 R14: 000000000002b9b2 R15: 00007f5b50d3fe40 [ 311.903670][ C1] [ 311.906706][ C1] rcu: rcu_preempt kthread starved for 2285 jiffies! g34429 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 311.917835][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 311.927810][ C1] rcu: RCU grace-period kthread stack dump: [ 311.933703][ C1] task:rcu_preempt state:R running task stack:27968 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 311.947291][ C1] Call Trace: [ 311.950576][ C1] [ 311.953517][ C1] __schedule+0x1821/0x5740 [ 311.958062][ C1] ? __pfx___schedule+0x10/0x10 [ 311.962934][ C1] ? schedule+0x90/0x360 [ 311.967190][ C1] schedule+0x164/0x360 [ 311.971358][ C1] schedule_timeout+0x158/0x2c0 [ 311.976263][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 311.981643][ C1] ? __pfx_process_timeout+0x10/0x10 [ 311.986953][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 311.992775][ C1] ? prepare_to_swait_event+0x340/0x370 [ 311.998341][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 312.003211][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 312.009403][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 312.014789][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 312.020004][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 312.025833][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 312.030438][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 312.035641][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 312.041476][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 312.046431][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 312.051554][ C1] kthread+0x389/0x470 [ 312.055632][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 312.060835][ C1] ? __pfx_kthread+0x10/0x10 [ 312.065625][ C1] ret_from_fork+0x514/0xb70 [ 312.070324][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 312.075446][ C1] ? __switch_to+0xc79/0x1410 [ 312.080145][ C1] ? __pfx_kthread+0x10/0x10 [ 312.084757][ C1] ret_from_fork_asm+0x1a/0x30 [ 312.089545][ C1] [ 312.092564][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 312.098890][ C1] CPU: 1 UID: 0 PID: 5683 Comm: kworker/R-wg-cr Tainted: G L syzkaller #0 PREEMPT(full) [ 312.110206][ C1] Tainted: [L]=SOFTLOCKUP [ 312.114534][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.124593][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 312.131112][ C1] RIP: 0010:deref_stack_reg+0x1cf/0x230 [ 312.136680][ C1] Code: 24 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 23 02 ba 00 4c 89 33 b0 01 eb 02 31 c0 48 83 c4 20 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 80 c1 03 38 c1 [ 312.156292][ C1] RSP: 0018:ffffc90000a07d58 EFLAGS: 00000282 [ 312.162367][ C1] RAX: 1ffff92000140f01 RBX: ffffffff9150051c RCX: 0000000000000001 [ 312.170785][ C1] RDX: ffffc90000a07e88 RSI: dffffc0000000000 RDI: ffffc90000a083d0 [ 312.179297][ C1] RBP: 1ffff92000140fc9 R08: ffffc90000a083d0 R09: 0000000000000000 [ 312.187286][ C1] R10: ffffc90000a07e98 R11: fffff52000140fd5 R12: ffffc90000a083d0 [ 312.195282][ C1] R13: 1ffff92000140fcb R14: ffffc90000a084b0 R15: dffffc0000000000 [ 312.203360][ C1] FS: 0000000000000000(0000) GS:ffff88812539c000(0000) knlGS:0000000000000000 [ 312.212305][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.218899][ C1] CR2: 00007f7bad2ce6df CR3: 0000000074cf0000 CR4: 00000000003526f0 [ 312.227057][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 08c5d32ffc85c5bc [ 312.235040][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 312.243028][ C1] Call Trace: [ 312.246315][ C1] [ 312.249165][ C1] unwind_next_frame+0x19d5/0x2550 [ 312.254299][ C1] ? unwind_next_frame+0xa6/0x2550 [ 312.259433][ C1] ? synproxy_send_client_synack+0x172/0xe30 [ 312.265427][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 312.271600][ C1] arch_stack_walk+0x11b/0x150 [ 312.276380][ C1] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 312.281785][ C1] stack_trace_save+0xa9/0x100 [ 312.287093][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 312.292490][ C1] ? unwind_next_frame+0xa6/0x2550 [ 312.297615][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 312.302567][ C1] kasan_save_track+0x3e/0x80 [ 312.307260][ C1] ? kasan_save_track+0x3e/0x80 [ 312.312122][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 312.317163][ C1] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 312.323245][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 312.327844][ C1] ? synproxy_send_client_synack+0x172/0xe30 [ 312.333875][ C1] __kasan_slab_alloc+0x6c/0x80 [ 312.338743][ C1] kmem_cache_alloc_node_noprof+0x384/0x690 [ 312.344650][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 312.349256][ C1] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 312.355347][ C1] __alloc_skb+0x1d0/0x7d0 [ 312.359789][ C1] synproxy_send_client_synack+0x172/0xe30 [ 312.365616][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 312.371949][ C1] ? nft_tproxy_eval+0x1470/0x1c40 [ 312.377068][ C1] ? synproxy_pernet+0x45/0x270 [ 312.381936][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 312.387155][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 312.392889][ C1] ? nf_ip_checksum+0x13c/0x510 [ 312.397755][ C1] nft_synproxy_do_eval+0x305/0x580 [ 312.402970][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 312.408698][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 312.413741][ C1] nft_do_chain+0x48d/0x1ae0 [ 312.418362][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 312.423417][ C1] ? ipt_do_table+0x2b2/0x1630 [ 312.428212][ C1] ? nf_nat_inet_fn+0x95b/0xbf0 [ 312.433260][ C1] nft_do_chain_inet+0x360/0x4b0 [ 312.438215][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 312.443683][ C1] ? ipt_do_table+0x2b2/0x1630 [ 312.448462][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 312.453951][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 312.459425][ C1] nf_hook_slow+0xc5/0x220 [ 312.463854][ C1] NF_HOOK+0x21f/0x3c0 [ 312.467933][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 312.473931][ C1] ? NF_HOOK+0x9e/0x3c0 [ 312.478105][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 312.482713][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 312.488012][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 312.494008][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 312.499043][ C1] NF_HOOK+0x336/0x3c0 [ 312.503123][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.508326][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 312.513453][ C1] ? NF_HOOK+0x9e/0x3c0 [ 312.517804][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 312.522408][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 312.527546][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 312.532057][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 312.536570][ C1] ? process_backlog+0x3eb/0x1950 [ 312.541614][ C1] process_backlog+0xaa3/0x1950 [ 312.546535][ C1] __napi_poll+0xae/0x340 [ 312.551064][ C1] ? skb_defer_free_flush+0x233/0x260 [ 312.556639][ C1] net_rx_action+0x627/0xf70 [ 312.561270][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 312.566405][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 312.571537][ C1] ? try_to_wake_up+0x7f2/0x1380 [ 312.576504][ C1] handle_softirqs+0x22a/0x840 [ 312.581317][ C1] ? do_softirq+0x76/0xd0 [ 312.585656][ C1] ? wg_packet_decrypt_worker+0xd01/0xd80 [ 312.591383][ C1] do_softirq+0x76/0xd0 [ 312.595563][ C1] [ 312.598499][ C1] [ 312.601428][ C1] __local_bh_enable_ip+0xf8/0x130 [ 312.606543][ C1] wg_packet_decrypt_worker+0xd01/0xd80 [ 312.612137][ C1] ? ip_output+0x5b/0x450 [ 312.616470][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 312.622546][ C1] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 312.628114][ C1] ? __asan_memset+0x22/0x50 [ 312.632714][ C1] ? __enqueue_entity+0x27f/0xb70 [ 312.637744][ C1] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 312.643302][ C1] ? update_load_avg+0x1b0/0x1eb0 [ 312.648343][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 312.653285][ C1] ? look_up_lock_class+0x57/0x110 [ 312.658402][ C1] ? register_lock_class+0x31/0x2e0 [ 312.663609][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 312.668587][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 312.673616][ C1] ? lock_acquire+0x106/0x350 [ 312.678385][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 312.683769][ C1] ? process_scheduled_works+0xa70/0x1860 [ 312.689497][ C1] ? process_scheduled_works+0xa70/0x1860 [ 312.695228][ C1] ? process_scheduled_works+0xa70/0x1860 [ 312.700954][ C1] ? process_scheduled_works+0xa70/0x1860 [ 312.706683][ C1] process_scheduled_works+0xb5d/0x1860 [ 312.712259][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.718242][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 312.723294][ C1] rescuer_thread+0x827/0x1130 [ 312.728074][ C1] ? rescuer_thread+0xbb/0x1130 [ 312.732944][ C1] kthread+0x389/0x470 [ 312.737021][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 312.742221][ C1] ? __pfx_kthread+0x10/0x10 [ 312.746819][ C1] ret_from_fork+0x514/0xb70 [ 312.751501][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 312.756620][ C1] ? __switch_to+0xc79/0x1410 [ 312.761309][ C1] ? __pfx_kthread+0x10/0x10 [ 312.765998][ C1] ret_from_fork_asm+0x1a/0x30 [ 312.770784][ C1] [ 319.110980][ T1318] ieee802154 phy0 wpan0: encryption failed: -22