last executing test programs: 8m53.856087193s ago: executing program 32 (id=143): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904", @ANYRES32=0x0, @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x6, 0x100) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff0}, {0xfff2, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x4040024) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0xa4, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x7, 0x5}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x70, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_gact={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x840000, 0x3, 0x2, 0xfffffffb}}, @TCA_GACT_PARMS={0x4d, 0x2, {0x3, 0x7, 0x5, 0xd97e, 0xbac}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x3f, 0x3, 0x2}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x20044044) landlock_create_ruleset(0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902780003010000060904000000010100000a24010200000201020a24080304004000000009040100000102000009040101010102000009050109100001fc0b0725018107010809040200000102000009040201010102000008240206000547ba07240106040210090582090004"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000280)={0x0, 0x9, 0x11, "d20016a275b1e8d60dd5fa0000012d938e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="4000009100"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x13a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_usb_control_io$uac1(r0, &(0x7f0000000740)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)={0x0, 0x3, 0x5d, @string={0x5d, 0x3, "da140385a7d97e280de6c6e2e935c6d23b9470c5a2b040c9c34edbc474cf2a7983c678db85e7e37b03f54af085a380e37a9c913d5cbfea9fcafc242bbfb03236dd37d70e2ddffe9dfbef66203d2155f4ec595de478878e0ed5276e"}}}, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x40, 0x16, 0x12, "7efb5cb72e393c1a814f4c70fca7bab84821"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000840)={0x20, 0x81, 0x2, "ba0c"}, &(0x7f0000000880)={0x20, 0x82, 0x1, "12"}, &(0x7f00000008c0)={0x20, 0x83, 0x1, 'A'}, &(0x7f0000000900)={0x20, 0x84, 0x1, "f8"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "7920fe"}}) socket$packet(0x11, 0x3, 0x300) 8m51.963525805s ago: executing program 4 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3}, {0xffe0, 0xffff}, {0x6, 0x6}}, [@TCA_INGRESS_BLOCK]}, 0xfffffffffffffebb}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x9, 0xbffc}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote, r10}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r10, {}, {0xffff, 0xfff3}, {0xfff3, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) socket$kcm(0x10, 0x400000002, 0x0) 8m51.484523279s ago: executing program 4 (id=157): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00001f2000/0x4000)=nil) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="38cd5165db9496c63200"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000053030000060000008c080000", @ANYRES32=0x1, @ANYBLOB="030000000000000000009e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000030000000e"], 0x50) r4 = io_uring_setup(0x524, &(0x7f00000002c0)={0x0, 0x3cb1, 0x4000, 0x2, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r6, 0x0, 0xf8, 0x8, 0x7ff, 0x3, {0x8, 0x8, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000200)={r6, 0x0, 0x0, 0x7fff, 0x4}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 8m50.848386445s ago: executing program 33 (id=157): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00001f2000/0x4000)=nil) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="38cd5165db9496c63200"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000053030000060000008c080000", @ANYRES32=0x1, @ANYBLOB="030000000000000000009e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000030000000e"], 0x50) r4 = io_uring_setup(0x524, &(0x7f00000002c0)={0x0, 0x3cb1, 0x4000, 0x2, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r6, 0x0, 0xf8, 0x8, 0x7ff, 0x3, {0x8, 0x8, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000200)={r6, 0x0, 0x0, 0x7fff, 0x4}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 6m38.073553114s ago: executing program 2 (id=810): socket$inet(0x2, 0x801, 0x100) socket$inet(0x2, 0x4, 0x8) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x1, 0x70bd2c, 0x0, {0x23, 0x0, 0x0, 0x1, {0x4e22, 0x0, [0xffffff7f, 0x0, 0xffffffff], [0x0, 0x6, 0x0, 0x3]}, 0x2}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) 6m37.588161913s ago: executing program 2 (id=812): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 6m37.517275054s ago: executing program 2 (id=813): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0xfffc) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg(r3, 0x0, 0x14) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r4) 6m36.412034386s ago: executing program 2 (id=819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x5]}, 0x8, 0x80800) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x18, 0x4932, 0x82, 0x1, 0x1}, 0x50) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000040)={0x1, 0x9, 0x2}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, &(0x7f0000002740), 0x0}, 0x20) getpeername$packet(r1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 64) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 64) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) (async) r9 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@wrmsr={0x65, 0x20, {0x40000073, 0xda75}}], 0x20}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x2}]}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x106, 0x3}}, 0x20) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x188, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xfff2}, {0x0, 0xf}}, [@TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x35, 0xff, 0x800, 0x37a1ddb0, 0x1, 0x7ff, 0x8a6, 0x9}}, {0x16, 0x2, [0x80, 0xffc6, 0x3, 0x4, 0x8001, 0xfff9, 0x5, 0x5ad, 0x9]}}, {{0x1c, 0x1, {0x3, 0x6, 0x2, 0x7fffffff, 0x2, 0x1ff, 0x6, 0x8}}, {0x14, 0x2, [0x3, 0x401, 0x5c, 0x7ff, 0x4, 0x5fbb, 0x3ff, 0xa]}}, {{0x1c, 0x1, {0x9, 0xaa, 0x7, 0x2, 0x2, 0x0, 0x5, 0x3}}, {0xa, 0x2, [0x60, 0x3, 0x2]}}, {{0x1c, 0x1, {0x6, 0x1, 0x6000, 0x5, 0x0, 0xd6d, 0x4, 0x1}}, {0x6, 0x2, [0xc2]}}, {{0x1c, 0x1, {0x4, 0x0, 0x6, 0xb, 0x0, 0xa, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x5]}}, {{0x1c, 0x1, {0x2, 0x5, 0x3, 0x10, 0x1, 0x3, 0x3, 0xa}}, {0x18, 0x2, [0x9, 0x7, 0x8, 0x3, 0xfbff, 0x6b0, 0x8, 0x6, 0x9, 0x0]}}, {{0x1c, 0x1, {0x5, 0x7, 0x156a, 0xfff, 0x1, 0x9, 0x83c5, 0x4}}, {0xc, 0x2, [0x7, 0xeab, 0x0, 0x65]}}, {{0x1c, 0x1, {0x2, 0xea, 0x4111, 0x8, 0x0, 0x140000, 0x3, 0x8}}, {0x14, 0x2, [0x8, 0x2, 0x0, 0x6, 0x1, 0x8, 0x75, 0x9]}}]}]}, 0x188}}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6m36.024472984s ago: executing program 2 (id=820): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x210, 0x2c, 0xca, 0x20, 0x8, 0x61d, 0xc1a0, 0x4c13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf8, 0x5, 0x80, 0xd}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1c01}}, {0x87, &(0x7f0000000040)=ANY=[@ANYBLOB="8703a6c26e440252224ba4d3afe2decc67edca23ea9f701d3ccd18ea7196e153ab360351782c8404541b8ea9fd30a030beb87fa9e07075f3fa9eee182651aa5b4c61b239298bcba2d337ca798809d7e50feff8b9466f4a3745f9b394c419a9b87e5de3faa98051ef03151b969668373d0c69159fb8de88d9"]}]}) 6m35.500081198s ago: executing program 2 (id=823): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 6m34.895355936s ago: executing program 34 (id=823): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 2m48.137178689s ago: executing program 1 (id=1852): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000002000, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$uid(0x3, 0x0, 0x0) 2m47.98236977s ago: executing program 1 (id=1853): r0 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) shutdown(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 2m46.921606396s ago: executing program 1 (id=1857): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x40c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x1, 0x20008000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000300)={0xfffffffd, 0x1ff, 0xfa84, 0x9, 0xe, "62b00000ae8600"}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2003, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) ppoll(&(0x7f0000000140)=[{r5, 0x4002}], 0x1, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000005c0)={0x10, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x844}, 0x8080) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x81, 0x0, 0x81, 0x1, 0x2}}) 2m43.686074739s ago: executing program 1 (id=1868): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0x4, 0x40000000000, 0xffffffffffffffff, 0x8, 0x0, 0x4, 0x0, 0x7, 0x2000000000000004, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x2000000, 0x3, 0x80000000, 0x3, 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7385, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000002, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffff7fffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x100000000000, 0x4000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x48a, 0x4, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) 2m43.487727925s ago: executing program 1 (id=1869): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @vbi={0x0, 0xc00, 0x1, 0x38414262, [0x2, 0xf], [0x5, 0x6], 0x1}}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000080)=""/25, 0x19}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000240)={0x10001, 0x6, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x3}) (async) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000040)) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001340)) (async) socket$inet_mptcp(0x2, 0x1, 0x106) 2m43.125006963s ago: executing program 1 (id=1870): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) r2 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffff4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008}, 0x80c4) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xb0, 0x0, 0xfff7fffffffffff7, [{{0x4, 0x0, 0x6, 0xc8, 0xfffffff3, 0xe, {0x0, 0xffffffffffffffff, 0x3, 0x6, 0x7f, 0x0, 0x401, 0x2, 0x80000007, 0x4000, 0x5, r5, r6, 0x1, 0x2}}, {0x0, 0x1c13, 0x4, 0x9, '!$)\x8d'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000300)) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x5d686000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x3) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x13, 0x2, 0x1, 0x4000, 0x3, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101401, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) 2m36.235776926s ago: executing program 3 (id=1894): connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x180, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, 0x0, 0x0, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x4, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}, {{0x3, 0x2, 0x6, 0x7, 0x3c88, 0x9, {0x4, 0x5, 0x382b, 0x1, 0x0, 0x12e, 0x7, 0x7, 0xfffffffa, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x8, '&+%*!\xeb(^-@\x00'}}]}, 0x0, 0x0, 0x0}) r0 = gettid() getresgid(&(0x7f0000004940)=0x0, &(0x7f0000004980), &(0x7f00000049c0)) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000004a00)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004ac0)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000004bc0)=0xe8) getresgid(&(0x7f0000004c00), &(0x7f0000004c40), &(0x7f0000004c80)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000005000)=0x0) statx(0xffffffffffffff9c, &(0x7f0000005040)='./file0\x00', 0x0, 0x10, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000005180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0xffffffffffffffff) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) newfstatat(0xffffffffffffff9c, &(0x7f0000005240)='./file0\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getresgid(&(0x7f0000005300), &(0x7f0000005340), &(0x7f0000005380)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005780)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="4d21633af1ce633bca0287", 0xb}], 0x1, &(0x7f0000004cc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r1}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}], 0x100, 0x10}}, {{&(0x7f0000004dc0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000053c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x60, 0x40}}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000005440)="060321212b0bb87eeaa0c3071971bb650b0b1b299a948b43c20dd5aa5ef8b7c27e9dd12ea177822213237988be2b3bfe7d21b954e763aa8a0033be5862832dfa8ecbda3bf718a5a2b146c09d7955fc741875cf172beae532136e3f7dc24fdf08a0ae19e164645263411a5baaff466320f66bc965ea7b0a00a6bf66b27990c1894ef834da72701d6569dceb86914354f15f9473920fc0dd332029c1debf095d77ec27", 0xa2}, {&(0x7f00000055c0)="691a5829bbcbfcb25e9cee384911cccacdcf8030d5d10f29f5a4bb7ddb07d04d6036c7cb70728f4107d4c726376c2c2e887e6a8071d73c1fbba4ec31f6454523c735ed62372b16e5c1946a574233e317d5f638df9eb2bed0d1267269ec1301edb8148fbd2e0970739668a850d82c8e15ddc1f4a5bbdecf11c873713697d3e94b8222152a2a4faa4a192305af124b9d6876af54aabf1708abd8e00229a0413070f68c1cf2428e3da805e7967c56c8c2191f2ca7233cabc900d401a21e3a4ae494a8496a6575f14f0031f45cb4e55cdbe0d669be8ad14068f4fa165bda071e0348", 0xe0}, {&(0x7f00000056c0)="29fd8e2a780f90b14f442f1683a78c8d831ae872e5f8b035016f5eccd42b645b852afb0ca5559581d58ca7c2b32352c10eee5135a3f2596a3cd7824bba20f4ddeb81", 0x42}], 0x3, 0x0, 0x0, 0x840}}], 0x3, 0x40000) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) 2m36.067684555s ago: executing program 3 (id=1896): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'ip6erspan0\x00', 0x2}, 0x18) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x3, @loopback}, 0x1c) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20050000000046c03e37297819c515d425f6f636f06f57132d8b7663fdf51080a44af1f858b550772bb107b4e9fd67d702674e32e252d7cd3ac61aeee21cec33f59238efcf035e0a9ad12324212a641f3b00b2d6f63b5fa6fa0c2bf5ecaeaa8fdabf02d5900b2f815df31cac9d8cde72e9e13171e00f40705d68a66179b5893f6e349a49441728b70a981118b7d224234235c9ec48bdfd22abfb78726c95c3fc4f25"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m33.32846895s ago: executing program 3 (id=1904): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0x4c09, 0x0) 2m32.863562594s ago: executing program 3 (id=1905): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000000c80)="6fead4df3c124b3c2b55fed650f7804383c4e37a3018bbf00229f22933b04a64b054c1e468e3be56a0bb90a829d770c3af1f9cf41a40978615de9d651477d2e99e27f7c620319c056c423e4f41d6c381bdfb7a488f23e04316ab5a5d882de8155d4535f87782003746164d8509c8ed645319b03c1347ad509816199de1f2e92b9a5861c1f6b8ba02f6b435685d373ddd01452fbaa6541e6fd18ff6dbd54e18429bce1b7eafbd7866a0084c1a78c2d8", 0xaf}, {&(0x7f0000000d40)="6bcbbf5f8629fba7ff5074f33a6d3dedbc20eb50161bad0c1e627fbd2b0f1a9a4048782b7051d20ded92f6f6e9f3318392d4acec69bd49e863ebd528c880d2fe41584951e30af9fbd7cec49276480e005386021e9a27a41758b96acb57d723c717a08f708ca0f40fe9ed454fcf1d3d21329a0cdc1d63e1469d4d9190f4b2df7a820b8df0ffe496165fe9ad75df490005837f0aeec8de02258312ea0f0e21de586cb1764ed860c5b967e0d3d1aa429c92edebe562325c185c8c", 0xb9}, {&(0x7f0000000e00)="ff878ea1a92417767cebbb68e0329515cfcf896156853f8415bca2aaa9e410b1d8a129c5c9fac75820d8b0aa27543710a184b46d4bdbb6e1402812ac7c98899177b4", 0x42}], 0x3}}], 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="0100ffffffff0000400001"], 0x3c}, 0x1, 0x620b}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1}]}) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000340)={0x28, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100000001}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6d, 0x1d, 0x9f, '\x00', 0x100000001}) ioctl$KVM_SET_FPU(r10, 0x41a0ae8d, &(0x7f0000000480)={'\x00', 0x4, 0x4, 0x9d, 0x0, 0x5, 0x4002, 0xc000, '\x00', 0x3}) ioctl$KVM_RUN(r10, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xa0000001}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 2m31.483517583s ago: executing program 3 (id=1911): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@hyper, 0x1}) syz_emit_ethernet(0x56, &(0x7f00000018c0)={@local, @broadcast, @void, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "735b003c1fb80a974c5f0e3d68618aeb97f80e283290e8084be5e287216f8680a95543e989fee15d56d1b238e4fd5e19fe1327c2fefb3d28f65f3413a3fc3bc6"}}}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000500)={&(0x7f00000000c0)={{@host, 0x7fffffff}, {@any, 0x9}, 0x400, "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"}, 0x418}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x1f, 0x1, 0x4}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xe}, @hci_rp_le_set_cig_params={{0x3}, {0x4, 0x7, 0x8000000000000098, [0xc8, 0xc8, 0xc9, 0xc9]}}}}, 0x11) fsopen(&(0x7f0000000040)='virtiofs\x00', 0x0) 2m31.276676142s ago: executing program 3 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="02"], 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40408b4}, 0x24000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xb, 0xd623, 0x0, 0x6}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a23ee7ad8dc44615bb62010029bd7000fbe9df250b0000000c0005800700010069620000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000019", @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x4005054) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r12, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fddbdf254f00000008000300", @ANYRES32=r11, @ANYBLOB="0100c49e2305820080879f249241601edf119e69b3ed26963d91a4c5204684d0988c7f9c02eaa3bf71d38d53c9cb4180c295a1c32969904b70631c953bcaea829b96701af8d642d6344d5b41015fb77fe8f4d2837bd1dd1a76482123cd64fd375c2122624ade815527d19922a966b82813b40c5e26f3bba050a695e4cefd2cd924b78f6e078b8c7c95d0c4c482ffc2f5ad80f62e825df7784172711fde1b770e00000000000000471a814119d2f0544e7c454605f45da4710e0b8688beeefbbb761ee79b36809b35a953433a454910cc9f756542bcafefc08ccc110ea6860cc600"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0097699e4800ae75fcdbdf251000000008000300482055e7ac6f5917b7d3ca1fa2c828e71acecdcc91060fe085c4112629d791ddf20d072936531340931dc0181c79472254cf481a9edfbf8aa3b93d4afd5dfe6ea964911c38e7579d3725eb9d19ab99a6574eea8a", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x8830) 2m27.937413861s ago: executing program 35 (id=1870): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) r2 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffff4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008}, 0x80c4) syz_fuse_handle_req(r3, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xb0, 0x0, 0xfff7fffffffffff7, [{{0x4, 0x0, 0x6, 0xc8, 0xfffffff3, 0xe, {0x0, 0xffffffffffffffff, 0x3, 0x6, 0x7f, 0x0, 0x401, 0x2, 0x80000007, 0x4000, 0x5, r5, r6, 0x1, 0x2}}, {0x0, 0x1c13, 0x4, 0x9, '!$)\x8d'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000300)) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x6031, 0xffffffffffffffff, 0x5d686000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x3) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x13, 0x2, 0x1, 0x4000, 0x3, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101401, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) 2m21.43018748s ago: executing program 8 (id=1939): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) poll(&(0x7f0000000080)=[{r0, 0x101}, {r0, 0x100}], 0x2, 0x400) (async, rerun: 64) shutdown(r0, 0x0) (rerun: 64) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac05e7c677621302030109022d0001080540040904270102fffd0100"], 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000080), 0x10) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) (async) fanotify_init(0x200, 0x0) close(r1) syz_usb_connect$uac1(0x1, 0xc6, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff6a0801004000010203010902b400030106200b0904000000010100000a240109003e000201020b2407030000009650af57082404041022000daf2f052404040805240502090624040505f9c0283806040504000a000a0000010200000904010101010200000924020110f8e40ffe0a240201060403048c3d0d240201e1048102abbf6e84490905010910000a0001072a010809000209040200000102000009040201010102000009058209400005fa0007250104cc0900"], &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x5, 0x0, 0x9, 0x0, 0x2}, 0x7c, &(0x7f0000000180)={0x5, 0xf, 0x7c, 0x5, [@generic={0x53, 0x10, 0x3, "8708d57b95f406bd81b0aaf118407d9ea615150941c05e723f6a1169f735df6b71bdf0094b5fcb2d8772184fdf2ea2d4ee4cbe57800333952d17efd2bc2478aec0f843e039db053f578523909e9c03d5"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x9, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x4, 0x7700, 0x68}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x8, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x26, 0x8, 0x4, 0x5}]}}) 2m19.870756726s ago: executing program 8 (id=1947): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x4000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/110) r1 = inotify_init1(0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000180)=@assoc_value, &(0x7f0000000040)=0x2e554796293dd2b6) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xf16751c0634e678c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r4 = inotify_init1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40441, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708008000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES64=r5], 0x0) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) r6 = syz_open_dev$video4linux(&(0x7f0000000380), 0x5, 0x0) poll(&(0x7f0000000480)=[{r6, 0x220}], 0x1, 0x7f) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x400017e) 2m18.377365324s ago: executing program 8 (id=1951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@gettaction={0x7c, 0x32, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40088}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e4377206465ff4300000000009f2527b90075737465643a734b2a000000000000ff4a30303030303030303400"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) openat(0xffffffffffffffff, 0x0, 0x501980, 0x5c) syz_open_procfs(0xffffffffffffffff, 0x0) msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) timer_create(0x0, 0x0, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) 2m17.944515132s ago: executing program 8 (id=1954): r0 = syz_open_pts(0xffffffffffffffff, 0x10000) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) syz_usb_connect(0x2, 0x122, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0xd3, 0x21, 0xd7, 0x10, 0x58b, 0x28, 0xe8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x1, 0x0, 0x6, 0x5395dbe5051f32b4, 0x8, "", [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xf7, 0x60, 0x3, 0x10, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "a6"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1000, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x638, 0x30}, [@mbim={0xc, 0x24, 0x1b, 0x8a54, 0x6, 0x9, 0x4, 0xe, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xa0}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x1, 0xfff}, @mdlm_detail={0x9a, 0x24, 0x13, 0x2, "660d873824f404434d1e31947bc18c90da23e7faa79c04b28cbe72bad0ff200ac1f4d69ca17deb1aef9d1a24090dfe5907a0e67210e063b9cb52d3860c1543b9b7b6ca0e0c73ed889446dac61f8616b6b4df7f301f747a85ed6336c95b30f93789f538da4493e7e719ec7526260ca38140e32f9d2c403e8cb6462c9d2f6ceb67dfd2422dbcce78ce5f47935a0286de4abb16c2c6e30b"}]}, @uac_control={{0xa, 0x24, 0x1, 0x6, 0x2d}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x10, "c22e7abec1ca"}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x6, 0x5, [0x2, 0x3, 0x1, 0x5, 0x9], 0x81}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x5, 0x0, [], 0x6}]}]}}]}}]}}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) 2m16.480121308s ago: executing program 8 (id=1961): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25700000000c00990098000000110000000a00060008021100000000000a00060008021100000000000a00fdff0802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x880) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r3 = fsopen(&(0x7f0000000340)='jfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x10) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000080)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r5, 0x0, 0x0, 0xf}]) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r7) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='\x00', 0x89901) fchdir(r8) close(r8) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r9 = socket$key(0xf, 0x3, 0x2) recvmmsg(r9, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x9, 0x9, 0x40, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x1, 0x800}}) r11 = signalfd(r10, &(0x7f0000000000)={[0xef]}, 0x8) ioctl$VHOST_VDPA_GET_STATUS(r11, 0x8001af71, &(0x7f0000000040)) 2m16.132790369s ago: executing program 36 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="02"], 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40408b4}, 0x24000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xb, 0xd623, 0x0, 0x6}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a23ee7ad8dc44615bb62010029bd7000fbe9df250b0000000c0005800700010069620000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000019", @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x4005054) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$can_j1939(0x1d, 0x2, 0x7) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r12, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fddbdf254f00000008000300", @ANYRES32=r11, @ANYBLOB="0100c49e2305820080879f249241601edf119e69b3ed26963d91a4c5204684d0988c7f9c02eaa3bf71d38d53c9cb4180c295a1c32969904b70631c953bcaea829b96701af8d642d6344d5b41015fb77fe8f4d2837bd1dd1a76482123cd64fd375c2122624ade815527d19922a966b82813b40c5e26f3bba050a695e4cefd2cd924b78f6e078b8c7c95d0c4c482ffc2f5ad80f62e825df7784172711fde1b770e00000000000000471a814119d2f0544e7c454605f45da4710e0b8688beeefbbb761ee79b36809b35a953433a454910cc9f756542bcafefc08ccc110ea6860cc600"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0097699e4800ae75fcdbdf251000000008000300482055e7ac6f5917b7d3ca1fa2c828e71acecdcc91060fe085c4112629d791ddf20d072936531340931dc0181c79472254cf481a9edfbf8aa3b93d4afd5dfe6ea964911c38e7579d3725eb9d19ab99a6574eea8a", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x8830) 2m15.38392355s ago: executing program 8 (id=1965): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="8900", 0x2}], 0x1}, 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001120010000200010000000000000000a59f61772e74b5a6c97944f064fc31cc727519d407de04f3d98cd9d39b5e8bbadaf1f040242d220a9a8401c43439ed20fceeb"], 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) 2m0.259730953s ago: executing program 37 (id=1965): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="8900", 0x2}], 0x1}, 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001120010000200010000000000000000a59f61772e74b5a6c97944f064fc31cc727519d407de04f3d98cd9d39b5e8bbadaf1f040242d220a9a8401c43439ed20fceeb"], 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) 40.331738426s ago: executing program 6 (id=2188): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x80, 0x20203843, 0x2, [0x2], [0x80ffdc, 0x0, 0x300], [], [0x3ffffffffffffff]}) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) setitimer(0x2, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) unshare(0x40000000) setrlimit(0x0, &(0x7f0000000040)={0x7, 0xfffffffffffffffc}) splice(r4, 0x0, r1, 0x0, 0x9, 0x1200000000000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x801, 0x6000000, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) mknodat(0xffffffffffffffff, 0x0, 0xa154, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newpolicy={0xb8, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@private=0xa010102, 0x0, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}}, 0xb8}}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 38.887936797s ago: executing program 6 (id=2194): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 38.130233835s ago: executing program 6 (id=2197): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x2, 0xa, 0x300) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="0300000041000b05d25a806c8c6394f90324fc6010e575125ebd57b4ad0000003582c137153e3704020180fc5409000c0000726fdd93", 0x36}, {&(0x7f0000000240)="c7295d3c066b720a02e0cb386922f7f63caadba2e69e468125dded7c2f23914aa84e10372494a49526b00202d3a15287ffcd72e98c8e9d8bc214e466b26789f487db2422ba315b0fb4a579ff56f6c6910f2880358eb5dc6c8ac70f534922a719450aea27733976e8ca98b76e224571522641050aff94d3f539c280e82f6372aa300adbf26b63dc5c1bc9824b844ccb7ddb0ec5e52082c482ececb7da7434f105e201d6df9cf5e075c6fd0455dd00afa05c77d16bbe6f2df9025203ad8e3717", 0xbf}], 0x2}, 0x0) write$tun(r1, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x7fff}}}}, 0x36) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket(0x2, 0xa, 0x300) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="0300000041000b05d25a806c8c6394f90324fc6010e575125ebd57b4ad0000003582c137153e3704020180fc5409000c0000726fdd93", 0x36}, {&(0x7f0000000240)="c7295d3c066b720a02e0cb386922f7f63caadba2e69e468125dded7c2f23914aa84e10372494a49526b00202d3a15287ffcd72e98c8e9d8bc214e466b26789f487db2422ba315b0fb4a579ff56f6c6910f2880358eb5dc6c8ac70f534922a719450aea27733976e8ca98b76e224571522641050aff94d3f539c280e82f6372aa300adbf26b63dc5c1bc9824b844ccb7ddb0ec5e52082c482ececb7da7434f105e201d6df9cf5e075c6fd0455dd00afa05c77d16bbe6f2df9025203ad8e3717", 0xbf}], 0x2}, 0x0) (async) write$tun(r1, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x7fff}}}}, 0x36) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) (async) 36.33945443s ago: executing program 6 (id=2202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0xffffff86}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7d}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008006) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x4]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xf4, 0x7, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x886c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x40054) 35.068050174s ago: executing program 6 (id=2204): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0xfffc, 0x0, &(0x7f00000002c0)}) 34.810734031s ago: executing program 6 (id=2206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000040)={0x2, 0x0, [{0x203, 0x0, 0x3}, {0x119, 0x0, 0x10000}]}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "8a0674b98afe5a45cd4cbabed5a6e1a6"}) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000000)={0x7, [0x1f84, 0x4, 0xc, 0x2, 0x8000000000000001, 0x0, 0x9]}) recvfrom(r0, &(0x7f00000022c0)=""/4111, 0x100f, 0x80000001, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 19.613636048s ago: executing program 38 (id=2206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000040)={0x2, 0x0, [{0x203, 0x0, 0x3}, {0x119, 0x0, 0x10000}]}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "8a0674b98afe5a45cd4cbabed5a6e1a6"}) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000000)={0x7, [0x1f84, 0x4, 0xc, 0x2, 0x8000000000000001, 0x0, 0x9]}) recvfrom(r0, &(0x7f00000022c0)=""/4111, 0x100f, 0x80000001, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 9.713770514s ago: executing program 5 (id=2298): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r1, 0x1) 9.29728921s ago: executing program 5 (id=2302): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x20) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 8.887962046s ago: executing program 5 (id=2305): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x2000f4) 7.921660415s ago: executing program 5 (id=2311): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) 7.659175844s ago: executing program 0 (id=2312): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='./file0\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x39) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={r4, 0x1ff}, &(0x7f0000000280)=0x8) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000080)=0xf, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc0046686, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f00000001c0)={0x4184, r2}, 0x0) recvmmsg(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xcd}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.87618105s ago: executing program 7 (id=2316): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 5.32771437s ago: executing program 7 (id=2317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250afff40008000300", @ANYRES32=r2, @ANYBLOB="050008000000"], 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x40000c0) 4.88032686s ago: executing program 7 (id=2318): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x9}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r3, &(0x7f0000000380)=""/144, 0x90) syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x2000c044) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) openat$vga_arbiter(0xffffff9c, 0x0, 0x62000, 0x0) io_uring_setup(0x1de0, 0x0) pwrite64(r3, 0x0, 0x0, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.234230309s ago: executing program 4 (id=2268): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.042487073s ago: executing program 0 (id=2320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001c00)="bc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)='>+', 0x2}], 0x1}}], 0x3, 0x0) shutdown(r0, 0x1) 3.92779664s ago: executing program 9 (id=2321): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) accept4(r0, 0x0, 0x0, 0x800) 3.927226401s ago: executing program 4 (id=2322): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x220582, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000140), 0x8) sendmmsg$sock(r7, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x10, 0x1, 0x24, 0x10000}}], 0x10}}, {{&(0x7f0000000180)=@x25, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000580)="1add1b09e4acffcaaa902cbf9608b2338ffacfd4972bbf15cd7114a3f111d55ce25cfbf21a21321a619a3e87a3a747472fb7d513818fc7db382e7f452a571b25530f499c44577e0cd10e7ad43aa3d2bde8ee424d8bf27284122f40c07bc80ebc5e133b49a635dcd6be8e1efa92464b6d5085a1e05021d379e3acc4e3504c41a14d9e3a0c88ca4021b5af116f1ec7d1479ba1b46b5153f857d24e43b7a6d9a4c8", 0xa0}, {&(0x7f0000000640)="647391549d5afeb87053f5bf41c3de2af4e9202a38481be87ec8febefc28e7f0040ab4dc5590131ef569", 0x2a}, {&(0x7f0000000680)="38cf01d1666c85ce6e07d59b4b400e2083aefcca288a695e6852f64b2981ca217306dc05ed14821f725f641cb69264a2f5266f067bc0895ac5e53425a9e89d8b549b0c1952d3763e64714085c00f13cc7f133ec70eed14384eee742ffce6649a9d19bf5ba621b5c2e02a22e9c84be1203c4e98f471c6a1d69e98d2dc84428635108d625c196b0e41ecbb68b197dbd36dd54c5429eaf637", 0x97}, {&(0x7f0000000740)="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", 0x1000}, {0x0}], 0x5}}], 0x2, 0x800) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000440)={{0x1, 0x401}, 0x100, './file0\x00'}) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) 3.751821922s ago: executing program 5 (id=2323): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 3.654480873s ago: executing program 9 (id=2324): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.619083004s ago: executing program 0 (id=2325): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0xad, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0x4, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @mss={0x2, 0x4}]}}}}}}}, 0x0) 3.410050288s ago: executing program 9 (id=2326): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 3.175736977s ago: executing program 9 (id=2327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0a00f5"], 0x70}}, 0x0) 2.921439019s ago: executing program 9 (id=2328): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="080026040a00010000"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) 2.556461043s ago: executing program 9 (id=2329): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) io_setup(0x1ff, 0x0) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000, 0xa00}]) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x30c, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2dc, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x258, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 2.495696885s ago: executing program 0 (id=2330): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)) 2.071925446s ago: executing program 5 (id=2331): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{}, {0x6, 0xc8}}}, 0xa) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = memfd_create(&(0x7f0000000180)='u\xdf\x14\\\x8e|K\x0f\x14[\x82?=7#\xfa\x02\xdc\xb1mk\x16\xa6D\x90\xdc \xc0R) \xc3\xb1\x85z\xce\x84\xf1@\x10\x9b\\\xc7\xd0\xd2i\x1aX\xc6\xb8\xb5\v\x90\xc7\xea', 0x6) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x200002, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_io_uring_setup(0x6519, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x393}, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x7c) openat$rtc(0xffffffffffffff9c, &(0x7f0000001400), 0x8002, 0x0) r5 = syz_io_uring_setup(0x2f99, &(0x7f0000000200)={0x0, 0x8904, 0x4000, 0x3, 0x246, 0x0, 0x0}, &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000340)) io_uring_enter(r5, 0x7ec5, 0x9f84, 0x24, 0x0, 0x0) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0x36) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) unshare(0x44060200) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000100)={0xff00, 0x5533, 0x4, 0x7f, 0x800, 0x40}) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) close_range(r7, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)="69e26b52f958da9560a9325768b9086c07e012d05af61edd263a90d717884485c60277dfe5aba0", 0x27}, {0x0}], 0x2}}], 0x1, 0x2090) sysfs$1(0x1, &(0x7f0000001840)='mqueue\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000040)=0x12, 0x4) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0001000007000000000000000b0e8138425aa010000280040012000600"], 0x40}}, 0x0) 1.472322685s ago: executing program 7 (id=2332): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) 1.31652084s ago: executing program 0 (id=2333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x48040) 887.754677ms ago: executing program 7 (id=2334): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 842.396404ms ago: executing program 0 (id=2335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x10000038}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x0) 699.55889ms ago: executing program 7 (id=2336): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpgrp(0x0) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000680)={0x2, {{0xa, 0x4e24, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x8c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@setlink={0x40, 0x13, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x31000, 0x18400}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, 0x40}, 0x1, 0x0, 0x0, 0x640d5}, 0x10000040) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r6 = openat$dir(0xffffff9c, &(0x7f0000000200)='./file0\x00', 0x82040, 0x4) open_tree(r6, &(0x7f0000000280)='./file0\x00', 0x1000) openat$ppp(0xffffff9c, &(0x7f0000000180), 0x2c2082, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xc}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0x6000, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 379.443845ms ago: executing program 4 (id=2337): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 0s ago: executing program 4 (id=2338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00006000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}, {0x0}, {0x0}], 0x3}, 0x8bb3a301eb080b) kernel console output (not intermixed with test programs): evice [ 504.169334][T12310] netlink: 'syz.6.1920': attribute type 1 has an invalid length. [ 504.250057][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1920'. [ 504.398363][T12310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 504.602036][ T9554] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 504.794743][ T9554] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.833890][ T9554] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 504.885387][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 504.897337][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 504.915541][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 504.925770][ T9554] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.938640][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 504.946565][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 504.983986][ T9554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.009863][ T9554] usb 6-1: Product: syz [ 505.048257][ T9554] usb 6-1: Manufacturer: syz [ 505.068016][ T9554] usb 6-1: SerialNumber: syz [ 505.102434][T12316] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 505.165653][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1926'. [ 505.552363][ T5773] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 505.641472][T12323] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.651156][T12323] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.658831][T12323] bridge_slave_0: entered allmulticast mode [ 505.674040][T12323] bridge_slave_0: entered promiscuous mode [ 505.688845][T12323] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.698885][T12323] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.708336][T12323] bridge_slave_1: entered allmulticast mode [ 505.718182][T12323] bridge_slave_1: entered promiscuous mode [ 505.730447][ T5773] usb 7-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 505.752006][ T5773] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.769507][ T5773] usb 7-1: Product: syz [ 505.776120][ T5773] usb 7-1: Manufacturer: syz [ 505.790591][ T5773] usb 7-1: SerialNumber: syz [ 505.816104][ T5773] usb 7-1: config 0 descriptor?? [ 505.835701][ T5773] hub 7-1:0.0: bad descriptor, ignoring hub [ 505.850588][T12323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.860178][ T5773] hub 7-1:0.0: probe with driver hub failed with error -5 [ 505.873557][ T5773] usbsevseg 7-1:0.0: USB 7 Segment device now attached [ 505.883391][T12323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.975328][T12323] team0: Port device team_slave_0 added [ 505.997101][T12323] team0: Port device team_slave_1 added [ 506.079584][T12323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.086821][T12323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.116147][T12323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.139585][T12323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.150432][ T9554] cdc_ncm 6-1:1.0: bind() failure [ 506.165297][T12323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.176929][ T9554] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 506.193054][T12323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.252138][ T9554] cdc_ncm 6-1:1.1: bind() failure [ 506.282679][ T9554] usb 6-1: USB disconnect, device number 101 [ 506.330050][T12323] hsr_slave_0: entered promiscuous mode [ 506.341821][T12323] hsr_slave_1: entered promiscuous mode [ 506.370639][T12323] debugfs: 'hsr0' already exists in 'hsr' [ 506.380071][T12323] Cannot create hsr debugfs directory [ 506.713645][ T9547] usb 7-1: USB disconnect, device number 104 [ 506.725624][ T9547] usbsevseg 7-1:0.0: USB 7 Segment now disconnected [ 507.025256][ T5624] Bluetooth: hci5: command tx timeout [ 507.052066][ T9550] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 507.076416][T12323] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 507.090924][T12323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.099952][T12323] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 507.116362][T12323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.125589][T12323] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 507.156276][T12323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.176222][T12323] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 507.199529][T12323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.233865][ T9550] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 507.264340][ T9550] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.293592][ T9550] usb 7-1: config 0 descriptor?? [ 507.314694][ T9550] cp210x 7-1:0.0: cp210x converter detected [ 507.420931][T12323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.457559][T12323] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.476660][T11701] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.483860][T11701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.502921][ T5773] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 507.556747][T11701] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.563979][T11701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.671355][ T5773] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.726178][ T5773] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.746358][ T9550] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 507.790797][ T5773] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 507.829621][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.849482][ T9550] usb 7-1: cp210x converter now attached to ttyUSB0 [ 507.853449][ T5773] usb 6-1: Product: syz [ 507.878281][ T5773] usb 6-1: Manufacturer: syz [ 507.901473][ T5773] usb 6-1: SerialNumber: syz [ 507.920454][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1930'. [ 507.953584][T12323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.177917][T12323] veth0_vlan: entered promiscuous mode [ 508.241264][T12323] veth1_vlan: entered promiscuous mode [ 508.428918][T12323] veth0_macvtap: entered promiscuous mode [ 508.470110][T12323] veth1_macvtap: entered promiscuous mode [ 508.553942][T12323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.597344][T12323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.647391][T11711] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.679020][T11711] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.717234][T11711] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.745893][T11711] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.066770][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.100671][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.108681][ T5624] Bluetooth: hci5: command tx timeout [ 509.186106][T11703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.198373][T11703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.797513][ T5773] usb 6-1: 0:1 : does not exist [ 509.825646][ T5773] usb 6-1: BAAD SPEAKER p_chmask mismatch [ 509.848917][ T9568] usb 7-1: USB disconnect, device number 105 [ 509.882238][ T9572] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 509.915970][ T9568] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 509.960179][ T9568] cp210x 7-1:0.0: device disconnected [ 510.057897][ T9572] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.091702][ T9572] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.115485][ T9572] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 510.130231][T12374] netlink: 'syz.6.1934': attribute type 1 has an invalid length. [ 510.156907][ T5773] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 510.166516][ T9572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 510.180419][ T9572] usb 9-1: SerialNumber: syz [ 510.189988][ T5773] usb 6-1: USB disconnect, device number 102 [ 510.228425][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1934'. [ 510.291657][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.436889][T12374] 8021q: adding VLAN 0 to HW filter on device bond6 [ 510.484550][ T9572] usb 9-1: 0:2 : does not exist [ 510.647828][T12378] loop9: detected capacity change from 0 to 524287999 [ 510.700502][ T9572] usb 9-1: USB disconnect, device number 2 [ 511.093331][ T9547] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 511.268702][ T9547] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 511.319748][ T9547] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.382027][ T9547] usb 7-1: config 0 descriptor?? [ 511.392430][ T9572] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 511.414129][ T9547] cp210x 7-1:0.0: cp210x converter detected [ 511.504037][ T5624] Bluetooth: hci5: command tx timeout [ 511.583778][ T9572] usb 9-1: Using ep0 maxpacket: 16 [ 511.594195][ T9572] usb 9-1: config 8 has an invalid interface number: 39 but max is 0 [ 511.606102][ T9572] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 511.623774][ T9572] usb 9-1: config 8 has no interface number 0 [ 511.647755][ T9572] usb 9-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 511.698713][ T9572] usb 9-1: config 8 interface 39 has no altsetting 0 [ 511.726678][ T9572] usb 9-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77 [ 511.748352][ T9572] usb 9-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 511.757083][ T9572] usb 9-1: Product: syz [ 511.761528][ T9572] usb 9-1: Manufacturer: syz [ 511.767387][ T9572] usb 9-1: SerialNumber: syz [ 511.824309][ T9547] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 511.869721][ T9547] usb 7-1: cp210x converter now attached to ttyUSB0 [ 512.003812][ T9572] ipheth 9-1:8.39: Unable to find endpoints [ 512.029052][ T9572] usb 9-1: USB disconnect, device number 3 [ 512.953065][ T9572] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 513.139319][ T9572] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.150407][ T9572] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 513.164788][ T9572] usb 9-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 513.174491][ T9572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 513.187811][ T9572] usb 9-1: SerialNumber: syz [ 513.484419][ T9572] usb 9-1: 0:2 : does not exist [ 513.558733][ T9572] usb 9-1: USB disconnect, device number 4 [ 513.646472][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.837878][ T9572] usb 7-1: USB disconnect, device number 106 [ 513.870069][ T9572] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 513.932554][ T9572] cp210x 7-1:0.0: device disconnected [ 514.376923][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1950'. [ 514.661993][ T9572] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 514.825260][ T9572] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.832182][ T9554] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 514.835732][ T9572] usb 7-1: config 0 has no interfaces? [ 514.857021][ T9572] usb 7-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 514.874839][ T9572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.906409][ T9572] usb 7-1: config 0 descriptor?? [ 515.027429][ T9554] usb 9-1: unable to get BOS descriptor or descriptor too short [ 515.052926][ T9554] usb 9-1: not running at top speed; connect to a high speed hub [ 515.072512][ T9554] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.092028][ T9554] usb 9-1: config 0 has no interface number 0 [ 515.107645][ T9554] usb 9-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice= e.8a [ 515.122062][ T9554] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.141998][ T9572] usb 7-1: USB disconnect, device number 107 [ 515.152061][ T9554] usb 9-1: Product: syz [ 515.161255][ T9554] usb 9-1: Manufacturer: syz [ 515.182467][ T9554] usb 9-1: SerialNumber: syz [ 515.196481][ T9554] usb 9-1: config 0 descriptor?? [ 515.438024][ T9554] ftdi_sio 9-1:0.1: FTDI USB Serial Device converter detected [ 515.467898][ T9554] ftdi_sio ttyUSB0: unknown device type: 0xe8a [ 515.503841][ T9554] usb 9-1: USB disconnect, device number 5 [ 515.524053][ T9554] ftdi_sio 9-1:0.1: device disconnected [ 516.063897][ T5773] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 516.251347][ T5773] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 516.295469][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.355167][ T5773] usb 6-1: config 0 descriptor?? [ 516.397012][ T5773] cp210x 6-1:0.0: cp210x converter detected [ 516.790013][ T5773] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 516.890823][ T5773] usb 6-1: cp210x converter now attached to ttyUSB0 [ 516.938000][ T5632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 516.952843][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 516.966034][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 516.975009][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 516.986205][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 517.886587][T12460] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.903969][T12460] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.925245][T12460] bridge_slave_0: entered allmulticast mode [ 517.947004][T12460] bridge_slave_0: entered promiscuous mode [ 517.994027][T12460] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.018682][T12460] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.038450][T12460] bridge_slave_1: entered allmulticast mode [ 518.048581][T12460] bridge_slave_1: entered promiscuous mode [ 518.117624][T12460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.136312][T12460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.211736][T12460] team0: Port device team_slave_0 added [ 518.225403][T12460] team0: Port device team_slave_1 added [ 518.291707][T12460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.299198][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.338398][T12460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.354858][T12460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.364194][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.397660][T12460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.490715][T12460] hsr_slave_0: entered promiscuous mode [ 518.498447][T12460] hsr_slave_1: entered promiscuous mode [ 518.508261][T12460] debugfs: 'hsr0' already exists in 'hsr' [ 518.514866][T12460] Cannot create hsr debugfs directory [ 518.889433][ T5773] usb 6-1: USB disconnect, device number 103 [ 518.934570][ T5773] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 519.008102][ T5773] cp210x 6-1:0.0: device disconnected [ 519.024072][ T5624] Bluetooth: hci6: command tx timeout [ 519.289669][T12487] netlink: 'syz.5.1969': attribute type 1 has an invalid length. [ 519.372039][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 519.408894][T12491] qrtr: Invalid version 18 [ 519.464294][T12487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.636109][ T5773] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 519.883833][T12495] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 519.907879][T12460] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 519.975707][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.009879][T12460] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 520.058635][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 520.101688][T12460] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 520.141136][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 520.157245][T12460] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 520.168429][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 520.368330][T12501] netlink: 'syz.5.1974': attribute type 8 has an invalid length. [ 520.457606][T12460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.472054][ T5773] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 520.535168][T12460] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.573070][T11701] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.580302][T11701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.632680][ T5773] usb 7-1: Using ep0 maxpacket: 32 [ 520.650403][ T5773] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.660998][ T9547] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 520.683061][T11712] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.690349][T11712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.700366][ T5773] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 520.728468][ T5773] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 520.758960][ T5773] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.793760][ T5773] usb 7-1: config 1 interface 1 has no altsetting 0 [ 520.815050][ T5773] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.846024][ T5773] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.871401][ T5773] usb 7-1: Product: syz [ 520.883288][ T9547] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.908578][ T5773] usb 7-1: Manufacturer: syz [ 520.916839][ T9547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 520.929676][ T5773] usb 7-1: SerialNumber: syz [ 520.955551][ T9547] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.997479][ T5773] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 521.016877][ T9547] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 521.036191][ T5773] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 521.053140][ T9547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.070349][T12460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.083985][ T9547] usb 6-1: config 0 descriptor?? [ 521.102475][ T5624] Bluetooth: hci6: command tx timeout [ 521.251293][T12460] veth0_vlan: entered promiscuous mode [ 521.282284][T12460] veth1_vlan: entered promiscuous mode [ 521.381562][ T5773] usb 7-1: USB disconnect, device number 109 [ 521.470143][T12460] veth0_macvtap: entered promiscuous mode [ 521.514361][T12460] veth1_macvtap: entered promiscuous mode [ 521.590089][T12460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.660001][T12460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.726123][T11701] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.766828][T11701] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.812353][T11701] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.879652][T11701] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.239601][T11706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.264514][T11706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.368820][T11706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.391461][T11706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.412245][ T9554] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 522.585261][ T9554] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 522.612258][ T9554] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.646191][ T9554] usb 7-1: config 0 descriptor?? [ 522.669331][ T9554] cp210x 7-1:0.0: cp210x converter detected [ 523.081188][ T9554] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 523.112559][ T9554] usb 7-1: cp210x converter now attached to ttyUSB0 [ 523.182394][ T5624] Bluetooth: hci6: command tx timeout [ 523.208787][ T9554] usb 6-1: USB disconnect, device number 104 [ 524.151960][ T9572] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 524.324177][ T9572] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.364842][ T9572] usb 10-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 524.391636][ T9572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.425097][ T9572] usb 10-1: Product: syz [ 524.440357][ T9572] usb 10-1: Manufacturer: syz [ 524.460287][ T9572] usb 10-1: SerialNumber: syz [ 524.496872][ T9572] usb 10-1: config 0 descriptor?? [ 524.650987][T12549] net_ratelimit: 10 callbacks suppressed [ 524.651008][T12549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.727425][ T9572] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 524.740776][ T9572] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 524.758359][T12552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.759524][ T9572] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 524.779212][ T9572] usb 10-1: media controller created [ 524.798636][ T9572] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.853204][T12549] bridge_slave_1: left allmulticast mode [ 524.873869][ T9572] DVB: Unable to find symbol dib7000p_attach() [ 524.875808][T12549] bridge_slave_1: left promiscuous mode [ 524.880374][ T9572] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 524.908612][ T9572] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 524.921059][T12549] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.921478][ T9572] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 524.939237][ T9572] usb 10-1: media controller created [ 524.949528][ T9572] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.976914][T12549] bond0: (slave bond_slave_0): Releasing backup interface [ 525.006006][T12549] bond0: (slave bond_slave_1): Releasing backup interface [ 525.036355][ T9572] dib0700: the master dib7090 has to be initialized first [ 525.056830][ T9572] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 525.092803][T12549] team0: Port device team_slave_0 removed [ 525.133026][T12549] team0: Port device team_slave_1 removed [ 525.148765][T12549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.176052][T12549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.198361][ T9547] usb 7-1: USB disconnect, device number 110 [ 525.243545][T12549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.263802][ T5624] Bluetooth: hci6: command tx timeout [ 525.269345][ T9572] rc_core: IR keymap rc-dib0700-rc5 not found [ 525.280948][ T9547] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 525.292922][T12549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.300707][ T9572] Registered IR keymap rc-empty [ 525.316121][ T9572] dvb-usb: could not initialize remote control. [ 525.332709][ T9547] cp210x 7-1:0.0: device disconnected [ 525.338298][ T9572] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 525.354441][T12549] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 525.616412][ T5773] usb 10-1: USB disconnect, device number 2 [ 525.696447][ T5773] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 525.701551][T12567] netlink: 'syz.5.1983': attribute type 1 has an invalid length. [ 525.782285][ T9547] usb 7-1: new full-speed USB device number 111 using dummy_hcd [ 525.805371][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1983'. [ 525.858697][T12567] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.947054][ T9547] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 525.972433][ T9547] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.024648][ T9547] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.075960][ T9547] usb 7-1: config 0 interface 0 has no altsetting 0 [ 526.091655][ T9547] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 526.105676][T12575] netlink: 'syz.5.1984': attribute type 21 has an invalid length. [ 526.119659][ T9547] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.129367][T12575] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1984'. [ 526.168683][ T9547] usb 7-1: config 0 descriptor?? [ 526.176256][T12575] netlink: 'syz.5.1984': attribute type 5 has an invalid length. [ 526.202559][T12575] netlink: 'syz.5.1984': attribute type 6 has an invalid length. [ 526.252550][T12575] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1984'. [ 526.771592][T12596] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1982'. [ 527.044623][T12603] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1987'. [ 527.378592][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1989'. [ 527.762041][ T5773] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 527.922023][ T9572] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 527.947123][ T5773] usb 6-1: config index 0 descriptor too short (expected 63186, got 210) [ 527.971781][ T5773] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 527.996771][ T5773] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.028129][ T5773] usb 6-1: config 0 has no interface number 0 [ 528.051471][ T5773] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 528.079700][ T5773] usb 6-1: config 0 interface 106 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.092688][ T5773] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 528.112295][ T9572] usb 10-1: Using ep0 maxpacket: 16 [ 528.118493][ T5773] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 528.140644][ T9572] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 528.152649][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.169347][ T9572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.193989][ T5773] usb 6-1: config 0 descriptor?? [ 528.208973][ T9572] usb 10-1: Product: syz [ 528.232830][ T9572] usb 10-1: Manufacturer: syz [ 528.254316][ T9572] usb 10-1: SerialNumber: syz [ 528.277851][ T5773] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 528.324794][ T9572] r8152-cfgselector 10-1: Unknown version 0x0000 [ 528.342311][ T9572] r8152-cfgselector 10-1: config 0 descriptor?? [ 528.438861][ T48] usb 6-1: Failed to submit usb control message: -71 [ 528.448518][ T5773] usb 6-1: USB disconnect, device number 105 [ 528.476567][ T48] usb 6-1: unable to send the bmi data to the device: -71 [ 528.510059][ T48] usb 6-1: unable to get target info from device [ 528.539703][ T48] usb 6-1: could not get target info (-71) [ 528.557771][ T48] usb 6-1: could not probe fw (-71) [ 528.846482][ T5773] r8152-cfgselector 10-1: USB disconnect, device number 3 [ 528.862411][T12628] netlink: 'syz.7.1994': attribute type 1 has an invalid length. [ 528.919862][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1994'. [ 529.020951][T12628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.220071][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1995'. [ 529.354647][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1996'. [ 529.385410][T12633] binder: 12631:12633 ioctl c0306201 200000000600 returned -14 [ 529.643192][T12639] loop9: detected capacity change from 0 to 524287936 [ 529.714578][ T5705] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 529.892640][ T5705] usb 6-1: Using ep0 maxpacket: 16 [ 529.919957][ T5705] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.943811][ T9569] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 529.958526][ T5705] usb 6-1: config 0 interface 0 has no altsetting 0 [ 529.977746][ T5705] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 530.003899][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.038489][ T5705] usb 6-1: config 0 descriptor?? [ 530.119414][ T9569] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 530.144305][ T9569] usb 10-1: config 0 has no interface number 0 [ 530.167487][ T9569] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.201768][ T9569] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 530.216140][ T9569] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.229698][ T9569] usb 10-1: Product: syz [ 530.234534][ T9569] usb 10-1: Manufacturer: syz [ 530.239365][ T9569] usb 10-1: SerialNumber: syz [ 530.255237][ T9569] usb 10-1: config 0 descriptor?? [ 530.286845][ T9569] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 530.416231][T12646] syzkaller0: entered promiscuous mode [ 530.432888][T12646] syzkaller0: entered allmulticast mode [ 530.498044][ T5705] mcp2221 0003:04D8:00DD.002B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 530.699714][ T9550] usb 6-1: USB disconnect, device number 106 [ 530.735414][ T5705] usb 10-1: USB disconnect, device number 4 [ 531.070097][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2002'. [ 531.988226][ T9547] usbhid 7-1:0.0: can't add hid device: -32 [ 531.994594][ T9547] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 532.081413][ T9547] usb 7-1: USB disconnect, device number 111 [ 532.364109][T12664] netlink: 'syz.6.2006': attribute type 1 has an invalid length. [ 532.475594][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2006'. [ 532.562272][ T5705] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 532.580998][ T5632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 532.597724][ T5632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 532.615477][ T5632] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 532.629423][ T5632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 532.644143][ T5632] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 532.682560][T12664] 8021q: adding VLAN 0 to HW filter on device bond7 [ 532.773004][ T9547] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 532.941035][ T9547] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 532.962624][ T9547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.991203][ T9547] usb 6-1: config 0 descriptor?? [ 533.013437][ T9547] cp210x 6-1:0.0: cp210x converter detected [ 533.111977][ T9569] usb 7-1: new low-speed USB device number 112 using dummy_hcd [ 533.252097][ T9569] usb 7-1: device descriptor read/64, error -71 [ 533.414335][ T9547] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 533.462918][T12678] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 533.489268][ T9547] usb 6-1: cp210x converter now attached to ttyUSB0 [ 533.514140][ T9569] usb 7-1: new low-speed USB device number 113 using dummy_hcd [ 533.671967][ T9569] usb 7-1: device descriptor read/64, error -71 [ 533.815429][ T9569] usb usb7-port1: attempt power cycle [ 533.880522][T12686] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2010'. [ 533.905235][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.918788][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.937426][T12670] bridge_slave_0: entered allmulticast mode [ 533.957727][T12670] bridge_slave_0: entered promiscuous mode [ 533.993206][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.018422][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.050862][T12670] bridge_slave_1: entered allmulticast mode [ 534.083123][T12670] bridge_slave_1: entered promiscuous mode [ 534.161950][ T9569] usb 7-1: new low-speed USB device number 114 using dummy_hcd [ 534.192759][ T9569] usb 7-1: device descriptor read/8, error -71 [ 534.236782][T12670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.286088][T12670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.414345][T12670] team0: Port device team_slave_0 added [ 534.431436][T12670] team0: Port device team_slave_1 added [ 534.452030][ T9569] usb 7-1: new low-speed USB device number 115 using dummy_hcd [ 534.483049][ T9569] usb 7-1: device descriptor read/8, error -71 [ 534.524932][T12670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.537055][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.565485][T12670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.580650][T12670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.589562][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.591013][T12690] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2012'. [ 534.626285][ T9569] usb usb7-port1: unable to enumerate USB device [ 534.634254][T12670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.703300][ T5632] Bluetooth: hci7: command tx timeout [ 534.721431][T12691] m>e5n: entered promiscuous mode [ 534.895540][T12670] hsr_slave_0: entered promiscuous mode [ 534.903473][T12670] hsr_slave_1: entered promiscuous mode [ 534.910232][T12670] debugfs: 'hsr0' already exists in 'hsr' [ 534.916729][T12670] Cannot create hsr debugfs directory [ 535.328250][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2014'. [ 535.607509][ T9569] usb 6-1: USB disconnect, device number 107 [ 535.677858][ T9569] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 535.770733][ T9569] cp210x 6-1:0.0: device disconnected [ 536.279065][T12712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.729079][ T9554] usb 7-1: new full-speed USB device number 116 using dummy_hcd [ 536.783348][ T5632] Bluetooth: hci7: command tx timeout [ 536.989338][T12723] trusted_key: encrypted_key: master key parameter 'deC' is invalid [ 537.071096][ T9554] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 537.113316][ T9554] usb 7-1: config 0 has no interface number 0 [ 537.145344][ T9554] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 537.188202][ T9554] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 537.239417][ T9554] usb 7-1: config 0 interface 113 has no altsetting 0 [ 537.278089][ T9554] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 537.324533][ T9554] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.365878][ T9554] usb 7-1: Product: syz [ 537.384672][T12729] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2020'. [ 537.390614][ T9554] usb 7-1: Manufacturer: syz [ 537.445419][ T9554] usb 7-1: SerialNumber: syz [ 537.483578][ T9554] usb 7-1: config 0 descriptor?? [ 537.540556][ C0] usb 7-1: NFC: Urb failure (status -71) [ 537.553030][ T9554] usb 7-1: NFC: Unable to get FW version [ 537.588822][ T9554] pn533_usb 7-1:0.113: probe with driver pn533_usb failed with error -90 [ 538.144591][ T9569] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 538.314291][ T9569] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.365538][ T9569] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.449365][ T9569] usb 10-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 538.525682][ T9569] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.647996][T12744] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2023'. [ 538.688876][ T9569] usb 10-1: config 0 descriptor?? [ 538.862356][ T5632] Bluetooth: hci7: command tx timeout [ 538.981539][ T5632] Bluetooth: hci6: Malformed LE Event: 0x1b [ 538.997028][ T9569] usb 10-1: USB disconnect, device number 5 [ 539.304624][ T5785] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 539.420957][T12670] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 539.464127][T12670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.496744][T12670] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 539.535106][ T5785] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 539.557037][T12670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.584419][ T5785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.587198][T12670] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 539.634484][ T5785] usb 6-1: config 0 descriptor?? [ 539.680764][ T5785] cp210x 6-1:0.0: cp210x converter detected [ 539.690737][T12670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.745621][T12670] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 539.831468][T12670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.073548][ T5785] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 540.141337][ T5785] usb 6-1: cp210x converter now attached to ttyUSB0 [ 540.197438][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2027'. [ 540.808676][ T9569] usb 7-1: USB disconnect, device number 116 [ 540.941951][ T5632] Bluetooth: hci7: command tx timeout [ 541.031340][T12785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.357675][T12795] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2030'. [ 541.540750][T12670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.776686][T12670] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.838170][T11703] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.845356][T11703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.950377][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.957569][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.042542][ T9569] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 542.095933][ T5785] usb 6-1: USB disconnect, device number 108 [ 542.145353][ T5785] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 542.223287][ T5785] cp210x 6-1:0.0: device disconnected [ 542.249960][ T9569] usb 7-1: Using ep0 maxpacket: 16 [ 542.277499][ T9569] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 542.320483][ T9569] usb 7-1: config 0 has no interface number 0 [ 542.369348][ T9569] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 542.441047][ T9569] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 542.474469][ T9569] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 542.483861][ T9547] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 542.489565][T12670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.541714][ T9569] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 542.579245][ T9569] usb 7-1: Product: syz [ 542.606305][ T9569] usb 7-1: SerialNumber: syz [ 542.654887][ T9569] usb 7-1: config 0 descriptor?? [ 542.670474][ T9547] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.701040][ T9569] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 542.722697][ T9547] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 542.756534][ T9569] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input90 [ 542.768853][ T9547] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.828669][ T9547] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 542.856003][T12670] veth0_vlan: entered promiscuous mode [ 542.879339][ T9547] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.934328][ T9547] usb 10-1: Product: syz [ 542.951039][ T9547] usb 10-1: Manufacturer: syz [ 542.958921][T12670] veth1_vlan: entered promiscuous mode [ 542.973081][ T9547] usb 10-1: SerialNumber: syz [ 542.985616][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 542.995943][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 543.003533][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 543.012559][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 543.021199][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 543.029172][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 543.037221][ T9569] usb 7-1: USB disconnect, device number 117 [ 543.043462][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 543.043494][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 543.109516][ T9569] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 543.148721][T12670] veth0_macvtap: entered promiscuous mode [ 543.206692][T12670] veth1_macvtap: entered promiscuous mode [ 543.299643][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2034'. [ 543.328409][T12670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.411609][T12670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.539669][ T9547] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 543.556980][ T9547] cdc_ncm 10-1:1.0: bind() failure [ 543.618169][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.639047][ T9547] usb 10-1: USB disconnect, device number 6 [ 543.659766][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.724252][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.909111][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.042430][ T9569] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 544.242409][ T9569] usb 7-1: Using ep0 maxpacket: 32 [ 544.257804][ T9569] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 544.301967][ T9569] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 544.336121][ T9569] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 544.369040][ T9569] usb 7-1: Product: syz [ 544.376957][ T9569] usb 7-1: Manufacturer: syz [ 544.381738][ T9569] usb 7-1: SerialNumber: syz [ 544.492202][ T9569] usb 7-1: config 0 descriptor?? [ 544.514140][T12823] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 544.555535][ T5632] Bluetooth: hci6: unexpected event 0x10 length: 7 > 1 [ 544.556916][ T5624] Bluetooth: hci6: hardware error 0x00 [ 544.587704][ T9569] hub 7-1:0.0: bad descriptor, ignoring hub [ 544.630248][ T9569] hub 7-1:0.0: probe with driver hub failed with error -5 [ 544.788007][T11706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.851996][T11706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.020913][T11706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.057107][T11706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.074516][ T9569] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 545.249760][ T9569] usb 6-1: Using ep0 maxpacket: 8 [ 545.274546][ T9569] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 545.309000][ T9569] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 545.356642][ T9569] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 545.396800][ T9569] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 545.446219][ T9569] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.495011][ T9569] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 545.533666][ T9569] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.597005][T11711] raw-gadget.1 gadget.6: failed to queue suspend event [ 545.684607][T12823] raw-gadget.1 gadget.6: failed to queue resume event [ 545.728237][ T48] raw-gadget.1 gadget.6: failed to queue suspend event [ 545.789638][ T9569] usb 6-1: usb_control_msg returned -32 [ 545.812263][ T9569] usbtmc 6-1:16.0: can't read capabilities [ 545.843245][T12823] raw-gadget.1 gadget.6: failed to queue resume event [ 545.921646][T11706] raw-gadget.1 gadget.6: failed to queue suspend event [ 546.002552][ T9569] usb 6-1: USB disconnect, device number 109 [ 546.022705][T12823] raw-gadget.1 gadget.6: failed to queue resume event [ 546.023150][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2041'. [ 546.112993][ T48] raw-gadget.1 gadget.6: failed to queue suspend event [ 546.212062][T12823] raw-gadget.1 gadget.6: failed to queue resume event [ 546.233606][T11706] raw-gadget.1 gadget.6: failed to queue suspend event [ 546.322017][T12823] raw-gadget.1 gadget.6: failed to queue resume event [ 546.353698][T11706] raw-gadget.1 gadget.6: failed to queue suspend event [ 546.442110][T12823] raw-gadget.1 gadget.6: failed to queue resume event [ 546.477946][T11711] raw-gadget.1 gadget.6: failed to queue suspend event [ 546.582003][T12823] raw-gadget.1 gadget.6: failed to queue resume event [ 546.619614][T11706] raw-gadget.1 gadget.6: failed to queue suspend event [ 546.626948][ T5624] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 546.723308][T12823] raw-gadget.1 gadget.6: failed to queue resume event [ 546.788143][ T3362] raw-gadget.1 gadget.6: failed to queue suspend event [ 546.896283][T12866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2042'. [ 546.970192][T12823] raw-gadget.1 gadget.6: failed to queue disconnect event [ 547.088413][ T9547] usb 7-1: USB disconnect, device number 118 [ 547.573449][ T9547] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 547.624721][T12883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.645077][T12884] trusted_key: encrypted_key: master key parameter 'deC' is invalid [ 547.772707][ T9547] usb 7-1: Using ep0 maxpacket: 16 [ 547.787220][ T9547] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.833701][ T9547] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 547.887314][ T9547] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 547.921153][ T9547] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.976504][ T9547] usb 7-1: config 0 descriptor?? [ 548.013683][ T9547] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 548.034776][ T5785] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 548.142313][ T5705] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 548.237731][ T5785] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 548.282096][ T5785] usb 1-1: config 0 has no interface number 0 [ 548.304391][ T5785] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 548.349104][ T5785] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 548.380284][ T5705] usb 6-1: Using ep0 maxpacket: 8 [ 548.384238][ T5785] usb 1-1: config 0 interface 113 has no altsetting 0 [ 548.427636][ T5785] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 548.451288][ T5705] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 548.466817][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.497748][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.524574][ T5785] usb 1-1: Product: syz [ 548.550494][ T5785] usb 1-1: Manufacturer: syz [ 548.555594][ T5705] usb 6-1: Product: syz [ 548.574646][ T5705] usb 6-1: Manufacturer: syz [ 548.578042][ T5785] usb 1-1: SerialNumber: syz [ 548.614053][ T5705] usb 6-1: SerialNumber: syz [ 548.640757][ T5785] usb 1-1: config 0 descriptor?? [ 548.671612][ T5705] usb 6-1: config 0 descriptor?? [ 548.679819][ C0] usb 1-1: NFC: Urb failure (status -71) [ 548.693538][ T5785] usb 1-1: NFC: Unable to get FW version [ 548.724237][ T5785] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 548.779680][ T5705] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 548.792815][T12899] netlink: 'syz.9.2050': attribute type 1 has an invalid length. [ 548.818768][ T5705] pctv452e: pctv452e_power_ctrl: 1 [ 548.818768][ T5705] [ 548.850129][ T5705] usb 6-1: selecting invalid altsetting 3 [ 548.887386][ T5705] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 548.887386][ T5705] [ 548.918694][ T5705] dvb-usb: bulk message failed: -22 (5/0) [ 548.987082][ T5705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 549.043305][ T5705] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 549.081081][ T5705] usb 6-1: media controller created [ 549.219381][ T5705] dvb-usb: bulk message failed: -22 (8/0) [ 549.249464][ T5705] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 549.320764][ T5705] dvb-usb: MAC address reading failed. [ 549.400558][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.542038][ T9569] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 549.632430][ T5705] DVB: Unable to find symbol stb0899_attach() [ 549.657185][ T5705] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 549.724154][ T9569] usb 10-1: Using ep0 maxpacket: 8 [ 549.755917][ T9569] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.801598][ T9569] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.842464][ T9569] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.864871][ T9569] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.883181][ T5705] rc_core: IR keymap rc-tt-1500 not found [ 549.889786][ T9569] usb 10-1: Product: syz [ 549.898584][ T5705] Registered IR keymap rc-empty [ 549.908738][ T9569] usb 10-1: Manufacturer: syz [ 549.924164][ T9569] usb 10-1: SerialNumber: syz [ 549.932438][ T5705] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 549.965994][ T9569] usb 10-1: 0:2 : does not exist [ 549.978357][ T5705] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input91 [ 550.016308][ T5705] dvb-usb: schedule remote query interval to 100 msecs. [ 550.038737][ T5705] pctv452e: pctv452e_power_ctrl: 0 [ 550.038737][ T5705] [ 550.065714][ T5705] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 550.131566][ T5705] usb 6-1: USB disconnect, device number 110 [ 550.174367][ T9547] dvb-usb: bulk message failed: -22 (4/0) [ 550.238704][ T9547] dvb-usb: error -22 while querying for an remote control event. [ 551.071884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 551.111182][ T9550] usb 1-1: USB disconnect, device number 11 [ 551.217109][ T5785] usb 7-1: USB disconnect, device number 119 [ 551.385624][ T5705] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 551.663384][ T9550] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 551.762143][ T5785] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 551.832182][ T9550] usb 1-1: Using ep0 maxpacket: 8 [ 551.874288][ T9550] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 551.893128][ T9550] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.930505][ T9550] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.971309][ T9550] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.022165][ T5785] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.032496][ T9550] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.066132][ T5785] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.100519][ T9550] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 552.144155][ T5785] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 552.153413][ T9550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.180917][ T5785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.256673][ T5785] usb 7-1: config 0 descriptor?? [ 552.309988][ T5705] usb 10-1: USB disconnect, device number 7 [ 552.410572][ T9550] usb 1-1: usb_control_msg returned -32 [ 552.468919][ T9550] usbtmc 1-1:16.0: can't read capabilities [ 552.625198][ T9550] usb 1-1: USB disconnect, device number 12 [ 552.688295][ T9547] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 552.712712][ T5785] ath6kl: Unsupported hardware version: 0x0 [ 552.744827][ T5785] ath6kl: Failed to init ath6kl core: -22 [ 552.765946][ T5785] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 552.834412][ T5705] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 552.878815][ T9547] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.901471][ T9547] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.935214][ T9547] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 552.960002][T12929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.977918][ T9547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.991152][T12929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.002725][ T5705] usb 10-1: Using ep0 maxpacket: 8 [ 553.017025][ T5705] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 553.039316][T12929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.055082][ T9547] usb 6-1: config 0 descriptor?? [ 553.062304][ T5705] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.077242][T12929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.096353][ T5705] usb 10-1: Product: syz [ 553.106476][ T5705] usb 10-1: Manufacturer: syz [ 553.119479][ T5705] usb 10-1: SerialNumber: syz [ 553.135256][ T9572] usb 7-1: USB disconnect, device number 120 [ 553.170349][ T5705] usb 10-1: config 0 descriptor?? [ 553.291430][ T9569] usb 6-1: USB disconnect, device number 111 [ 553.397793][ T5705] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 554.033182][ T9550] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 554.152060][ T9572] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 554.204796][ T9550] usb 1-1: Using ep0 maxpacket: 16 [ 554.243707][ T9550] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 554.271619][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2062'. [ 554.281918][ T9550] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 554.281959][ T9550] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.281990][ T9550] usb 1-1: config 1 interface 0 has no altsetting 0 [ 554.285400][ T9550] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 554.300999][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2062'. [ 554.356227][ T9550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.363300][ T9572] usb 7-1: Using ep0 maxpacket: 32 [ 554.389792][ T9572] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.394218][ T9550] usb 1-1: Product: syz [ 554.404658][ T9572] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.437423][ T9572] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 554.474241][ T9550] usb 1-1: Manufacturer: syz [ 554.475951][ T9572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.492941][ T9550] usb 1-1: SerialNumber: syz [ 554.560853][ T9572] usb 7-1: config 0 descriptor?? [ 554.742975][ T9550] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 554.909257][T12979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.004135][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.075953][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.129053][ T9547] usb 1-1: USB disconnect, device number 13 [ 555.377284][T12957] usblp0: removed [ 555.907947][ T5705] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 556.448813][ T9551] usb 10-1: USB disconnect, device number 8 [ 556.514884][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 556.514904][ T30] audit: type=1800 audit(1777467942.691:1356): pid=13000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2067" name=06 dev="tmpfs" ino=58 res=0 errno=0 [ 557.110066][ T9569] usb 7-1: USB disconnect, device number 121 [ 560.252469][ T9551] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 560.442553][ T9551] usb 1-1: Using ep0 maxpacket: 32 [ 560.464947][ T9551] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.503719][ T9551] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 560.537984][ T9551] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 560.569264][ T9551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.631008][ T9551] usb 1-1: config 0 descriptor?? [ 561.310751][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2082'. [ 561.475152][ T9569] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 561.654036][ T9569] usb 7-1: Using ep0 maxpacket: 16 [ 561.666270][ T9569] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.666308][ T9569] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.666332][ T9569] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 561.666378][ T9569] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 561.666404][ T9569] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.687156][ T9569] usb 7-1: config 0 descriptor?? [ 561.817190][T13092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2084'. [ 562.103526][ T9569] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 562.128562][ T9569] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 562.136651][ T9569] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 562.151587][ T9569] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 562.168907][ T9569] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 562.224813][ T9569] appleir 0003:05AC:8241.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 562.422108][ T5785] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 562.597284][ T5785] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.630621][ T5785] usb 10-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 562.657693][ T5785] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.683612][ T5785] usb 10-1: Product: syz [ 562.698459][ T5785] usb 10-1: Manufacturer: syz [ 562.719017][ T5785] usb 10-1: SerialNumber: syz [ 562.743518][ T5785] usb 10-1: config 0 descriptor?? [ 562.821995][ T9551] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 562.968801][ T5785] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 562.982075][ T9551] usb 6-1: Using ep0 maxpacket: 16 [ 563.003986][ T9551] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 563.033455][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 563.052063][ T9551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.056469][ T9569] usb 1-1: USB disconnect, device number 14 [ 563.067277][ T5785] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 563.081686][ T9551] usb 6-1: Product: syz [ 563.093913][ T9551] usb 6-1: Manufacturer: syz [ 563.103339][ T5785] usb 10-1: media controller created [ 563.106258][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.114976][ T9551] usb 6-1: SerialNumber: syz [ 563.115565][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.145797][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.199133][ T9551] r8152-cfgselector 6-1: Unknown version 0x0000 [ 563.233684][ T9551] r8152-cfgselector 6-1: config 0 descriptor?? [ 563.458176][ T5785] DVB: Unable to find symbol dib7000p_attach() [ 563.490307][ T5785] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 563.530363][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 563.559995][ T5785] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 563.589837][ T5785] usb 10-1: media controller created [ 563.592916][ T9569] usb 7-1: reset high-speed USB device number 122 using dummy_hcd [ 563.618197][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.694486][ T5785] dib0700: the master dib7090 has to be initialized first [ 563.718510][ T5785] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 563.810241][ T5705] r8152-cfgselector 6-1: USB disconnect, device number 112 [ 563.935551][ T5785] rc_core: IR keymap rc-dib0700-rc5 not found [ 563.948465][ T5785] Registered IR keymap rc-empty [ 563.965712][ T5785] dvb-usb: could not initialize remote control. [ 563.985477][ T5785] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 564.317518][ T5773] usb 10-1: USB disconnect, device number 9 [ 564.473036][ T5773] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 564.862371][ T9550] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 564.973982][ T9572] usb 7-1: USB disconnect, device number 122 [ 565.072477][ T9550] usb 6-1: Using ep0 maxpacket: 8 [ 565.167282][ T9550] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 565.207355][ T9550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.248495][ T9550] usb 6-1: Product: syz [ 565.270428][ T9550] usb 6-1: Manufacturer: syz [ 565.310389][ T9550] usb 6-1: SerialNumber: syz [ 565.341375][ T9550] usb 6-1: config 0 descriptor?? [ 565.386449][ T9550] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 565.472282][ T9547] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 565.652486][ T9547] usb 10-1: Using ep0 maxpacket: 8 [ 565.708776][ T9547] usb 10-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 565.735006][ T9547] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 565.758711][ T9547] usb 10-1: Product: syz [ 565.770102][ T9547] usb 10-1: Manufacturer: syz [ 565.789557][ T9547] usb 10-1: SerialNumber: syz [ 565.810221][ T9547] usb 10-1: config 0 descriptor?? [ 565.841648][ T9547] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 566.084014][ T9550] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 566.115351][ T9550] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 566.149611][ T9550] usb 6-1: USB disconnect, device number 113 [ 566.334749][T13177] sctp: [Deprecated]: syz.9.2095 (pid 13177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.334749][T13177] Use struct sctp_sack_info instead [ 566.380951][ T9547] gspca_sn9c2028: read1 error -110 [ 566.400605][ T9547] gspca_sn9c2028: read1 error -32 [ 566.413557][ T9547] gspca_sn9c2028: read1 error -32 [ 566.429859][ T9547] sn9c2028 10-1:0.0: probe with driver sn9c2028 failed with error -32 [ 566.792050][ T9547] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 566.979550][ T9547] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 567.010488][ T9547] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.037786][ T9547] usb 1-1: config 0 has no interface number 0 [ 567.066552][ T9547] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 567.085568][ T9547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.104034][ T9547] usb 1-1: Product: syz [ 567.114217][ T9547] usb 1-1: Manufacturer: syz [ 567.125887][ T9547] usb 1-1: SerialNumber: syz [ 567.127937][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2104'. [ 567.180931][ T9547] usb 1-1: config 0 descriptor?? [ 567.226772][ T9547] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 567.238028][ T30] audit: type=1326 audit(1777467953.401:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1340f9cdd9 code=0x7ffc0000 [ 567.324037][ T30] audit: type=1326 audit(1777467953.401:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f1340f9cdd9 code=0x7ffc0000 [ 567.355447][ T9547] uvcvideo 1-1:0.31: No valid video chain found. [ 567.419823][ T30] audit: type=1326 audit(1777467953.401:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1340f9cdd9 code=0x7ffc0000 [ 567.526560][T13200] FAULT_INJECTION: forcing a failure. [ 567.526560][T13200] name failslab, interval 1, probability 0, space 0, times 0 [ 567.544186][ T30] audit: type=1326 audit(1777467953.401:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1340f9cdd9 code=0x7ffc0000 [ 567.557253][T13200] CPU: 1 UID: 0 PID: 13200 Comm: syz.5.2105 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.557286][T13200] Tainted: [L]=SOFTLOCKUP [ 567.557293][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 567.557304][T13200] Call Trace: [ 567.557313][T13200] [ 567.557321][T13200] dump_stack_lvl+0xe8/0x150 [ 567.557349][T13200] should_fail_ex+0x412/0x560 [ 567.557378][T13200] should_failslab+0xa8/0x100 [ 567.557407][T13200] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 567.557434][T13200] ? __alloc_skb+0x1d0/0x7d0 [ 567.557453][T13200] ? __local_bh_enable_ip+0xd0/0x130 [ 567.557486][T13200] __alloc_skb+0x1d0/0x7d0 [ 567.557512][T13200] __ip_append_data+0x2a95/0x3d30 [ 567.557557][T13200] ? __pfx_raw_getfrag+0x10/0x10 [ 567.557596][T13200] ? __kasan_kmalloc+0x93/0xb0 [ 567.557632][T13200] ? __pfx___ip_append_data+0x10/0x10 [ 567.557660][T13200] ? __asan_memcpy+0x40/0x70 [ 567.557683][T13200] ? ip_setup_cork+0x57e/0xa50 [ 567.557709][T13200] ip_append_data+0x10d/0x190 [ 567.557738][T13200] ? __pfx_raw_getfrag+0x10/0x10 [ 567.557764][T13200] raw_sendmsg+0x14be/0x1a50 [ 567.557804][T13200] ? __pfx_raw_sendmsg+0x10/0x10 [ 567.557843][T13200] ? aa_sk_perm+0x6d5/0x900 [ 567.557880][T13200] ? __pfx_aa_sk_perm+0x10/0x10 [ 567.557906][T13200] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 567.557936][T13200] ? sock_rps_record_flow+0x19/0x350 [ 567.557963][T13200] ? inet_sendmsg+0x2f4/0x370 [ 567.557987][T13200] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 567.558015][T13200] ____sys_sendmsg+0x80a/0x9f0 [ 567.558047][T13200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.558079][T13200] ? import_iovec+0x73/0xa0 [ 567.558108][T13200] ___sys_sendmsg+0x2a5/0x360 [ 567.558130][T13200] ? __lock_acquire+0x6b5/0x2cf0 [ 567.558154][T13200] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.558211][T13200] ? __fget_files+0x2a/0x420 [ 567.558237][T13200] ? __fget_files+0x3a0/0x420 [ 567.558268][T13200] __x64_sys_sendmsg+0x1bd/0x2a0 [ 567.558294][T13200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.558326][T13200] ? __pfx_ksys_write+0x10/0x10 [ 567.558360][T13200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.558380][T13200] do_syscall_64+0x15f/0xf80 [ 567.558401][T13200] ? trace_irq_disable+0x3b/0x140 [ 567.558427][T13200] ? clear_bhb_loop+0x40/0x90 [ 567.558450][T13200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.558476][T13200] RIP: 0033:0x7f342af9cdd9 [ 567.558494][T13200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.558510][T13200] RSP: 002b:00007f34291f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.558532][T13200] RAX: ffffffffffffffda RBX: 00007f342b215fa0 RCX: 00007f342af9cdd9 [ 567.558546][T13200] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 567.558558][T13200] RBP: 00007f34291f6090 R08: 0000000000000000 R09: 0000000000000000 [ 567.558569][T13200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.558580][T13200] R13: 00007f342b216038 R14: 00007f342b215fa0 R15: 00007f342b33fa48 [ 567.558610][T13200] [ 568.628866][ T30] audit: type=1326 audit(1777467953.401:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1340f9cdd9 code=0x7ffc0000 [ 568.789787][ T9547] usb 10-1: USB disconnect, device number 10 [ 568.823581][ T30] audit: type=1326 audit(1777467953.401:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1340f9cdd9 code=0x7ffc0000 [ 568.941901][ T30] audit: type=1326 audit(1777467953.401:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1340f9cdd9 code=0x7ffc0000 [ 569.048411][ T30] audit: type=1326 audit(1777467953.401:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1340f9cdd9 code=0x7ffc0000 [ 569.161387][ T30] audit: type=1326 audit(1777467953.401:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1340f9cdd9 code=0x7ffc0000 [ 569.377251][ T30] audit: type=1326 audit(1777467953.401:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13184 comm="syz.6.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1340f9cdd9 code=0x7ffc0000 [ 569.573380][ T9547] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 569.678768][ T5773] usb 1-1: USB disconnect, device number 15 [ 569.736640][ T9547] usb 10-1: device descriptor read/64, error -71 [ 569.986412][T13234] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2112'. [ 570.010190][ T9547] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 570.152206][ T9547] usb 10-1: device descriptor read/64, error -71 [ 570.283050][ T9547] usb usb10-port1: attempt power cycle [ 570.653724][ T9547] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 570.714284][ T9547] usb 10-1: device descriptor read/8, error -71 [ 571.002007][ T9547] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 571.085921][ T9547] usb 10-1: device descriptor read/8, error -71 [ 571.222759][ T9547] usb usb10-port1: unable to enumerate USB device [ 571.633697][ T9547] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 571.701988][ T9572] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 571.855920][ T9547] usb 6-1: Using ep0 maxpacket: 16 [ 571.874664][ T9547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.920553][ T9572] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 571.933632][ T9547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.945482][ T9572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.955976][ T9547] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 571.972784][ T9572] usb 1-1: Product: syz [ 571.981173][ T9572] usb 1-1: Manufacturer: syz [ 571.989365][ T9572] usb 1-1: SerialNumber: syz [ 572.028295][ T9547] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 572.067852][ T9547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.093499][ T9572] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 572.109977][ T9547] usb 6-1: config 0 descriptor?? [ 572.446811][ T9569] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 572.592269][ T9547] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 572.630443][ T9547] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 572.696810][ T9547] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 572.735749][ T9547] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 572.755965][ T9547] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 572.772071][ T9572] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 572.780569][ T9547] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 572.802400][T13256] netlink: 408 bytes leftover after parsing attributes in process `syz.5.2116'. [ 572.817662][ T9547] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 572.847687][ T9547] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 572.868572][ T9547] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 572.893601][ T9547] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 572.950488][ T9547] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.002D/input/input93 [ 572.965543][ T9572] usb 10-1: Using ep0 maxpacket: 8 [ 572.996099][ T9572] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 573.035765][ T9572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.085388][ T9572] usb 10-1: Product: syz [ 573.128167][ T9572] usb 10-1: Manufacturer: syz [ 573.159740][ T9572] usb 10-1: SerialNumber: syz [ 573.182058][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.216606][ T9572] usb 10-1: config 0 descriptor?? [ 573.223322][ T9547] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 573.240673][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.269146][ T9572] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244) [ 573.298365][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.368502][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.387381][ T9547] usb 6-1: USB disconnect, device number 114 [ 573.664896][ T5773] usb 1-1: USB disconnect, device number 16 [ 573.735454][ T9572] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 573.757532][T13283] fido_id[13283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 573.829708][ T9572] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 573.866215][ T9572] usb 10-1: USB disconnect, device number 15 [ 574.462569][ T9569] usb 1-1: Service connection timeout for: 258 [ 574.489430][ T9569] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 574.563753][ T9569] ath9k_htc: Failed to initialize the device [ 574.577826][ T5773] usb 1-1: ath9k_htc: USB layer deinitialized [ 574.940399][ T5773] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 575.224469][ T5773] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 575.264042][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.325984][ T5773] usb 1-1: config 0 descriptor?? [ 575.348714][ T5773] cp210x 1-1:0.0: cp210x converter detected [ 575.755218][ T5773] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 575.794901][ T5773] usb 1-1: cp210x converter now attached to ttyUSB0 [ 577.478059][ T5773] usb 1-1: USB disconnect, device number 17 [ 577.626473][ T5773] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 577.668105][ T5773] cp210x 1-1:0.0: device disconnected [ 585.121449][T13316] FAULT_INJECTION: forcing a failure. [ 585.121449][T13316] name failslab, interval 1, probability 0, space 0, times 0 [ 585.192696][T13316] CPU: 1 UID: 0 PID: 13316 Comm: syz.7.2126 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.192732][T13316] Tainted: [L]=SOFTLOCKUP [ 585.192740][T13316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.192753][T13316] Call Trace: [ 585.192762][T13316] [ 585.192771][T13316] dump_stack_lvl+0xe8/0x150 [ 585.192803][T13316] should_fail_ex+0x412/0x560 [ 585.192835][T13316] should_failslab+0xa8/0x100 [ 585.192866][T13316] ? skb_clone+0x212/0x3a0 [ 585.192894][T13316] kmem_cache_alloc_noprof+0x87/0x650 [ 585.192922][T13316] ? __netlink_lookup+0xc6/0x8b0 [ 585.192954][T13316] skb_clone+0x212/0x3a0 [ 585.192986][T13316] __netlink_deliver_tap+0x404/0x850 [ 585.193024][T13316] ? netlink_deliver_tap+0x2e/0x1b0 [ 585.193060][T13316] netlink_deliver_tap+0x19c/0x1b0 [ 585.193086][T13316] netlink_unicast+0x730/0x8e0 [ 585.193121][T13316] netlink_sendmsg+0x813/0xb40 [ 585.193157][T13316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.193187][T13316] ? aa_sock_msg_perm+0xf1/0x1b0 [ 585.193215][T13316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.193247][T13316] ____sys_sendmsg+0x972/0x9f0 [ 585.193275][T13316] ? __might_fault+0xaf/0x130 [ 585.193307][T13316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.193345][T13316] ? import_iovec+0x73/0xa0 [ 585.193378][T13316] ___sys_sendmsg+0x2a5/0x360 [ 585.193403][T13316] ? __lock_acquire+0x6b5/0x2cf0 [ 585.193430][T13316] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.193495][T13316] ? __fget_files+0x2a/0x420 [ 585.193519][T13316] ? __fget_files+0x3a0/0x420 [ 585.193555][T13316] __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.193585][T13316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.193620][T13316] ? __pfx_ksys_write+0x10/0x10 [ 585.193659][T13316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.193682][T13316] do_syscall_64+0x15f/0xf80 [ 585.193704][T13316] ? trace_irq_disable+0x3b/0x140 [ 585.193734][T13316] ? clear_bhb_loop+0x40/0x90 [ 585.193760][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.193780][T13316] RIP: 0033:0x7fb60a99cdd9 [ 585.193801][T13316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.193818][T13316] RSP: 002b:00007fb60b8e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.193843][T13316] RAX: ffffffffffffffda RBX: 00007fb60ac15fa0 RCX: 00007fb60a99cdd9 [ 585.193858][T13316] RDX: 0000000020040084 RSI: 00002000000012c0 RDI: 0000000000000003 [ 585.193872][T13316] RBP: 00007fb60b8e5090 R08: 0000000000000000 R09: 0000000000000000 [ 585.193885][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.193898][T13316] R13: 00007fb60ac16038 R14: 00007fb60ac15fa0 R15: 00007fb60ad3fa48 [ 585.193932][T13316] [ 585.543977][T13314] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2125'. [ 585.693399][ T9572] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 585.854461][ T9572] usb 10-1: unable to get BOS descriptor or descriptor too short [ 585.871396][ T9572] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 585.935065][ T9572] usb 10-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 585.941969][ T9549] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 585.967804][ T9572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.005336][ T9572] usb 10-1: Product: syz [ 586.021346][ T9572] usb 10-1: Manufacturer: syz [ 586.030092][ T9572] usb 10-1: SerialNumber: syz [ 586.121935][ T9549] usb 1-1: Using ep0 maxpacket: 8 [ 586.135580][ T9549] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 586.162646][ T9549] usb 1-1: config 2 has no interface number 0 [ 586.182943][ T9549] usb 1-1: config 2 interface 31 has no altsetting 0 [ 586.204680][ T9549] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 586.232033][ T9549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.262192][ T9549] usb 1-1: Product: syz [ 586.268509][ T9549] usb 1-1: Manufacturer: syz [ 586.292043][ T9549] usb 1-1: SerialNumber: syz [ 586.367095][T13339] input: syz1 as /devices/virtual/input/input94 [ 586.748394][ T9549] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 586.796050][ T9549] usb 1-1: USB disconnect, device number 18 [ 587.833396][ T9572] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.850101][ T9572] usb 10-1: MIDIStreaming interface descriptor not found [ 587.923630][ T9572] usb 10-1: USB disconnect, device number 16 [ 588.108326][T13347] udevd[13347]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.516573][T13357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.617397][T13363] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 596.617397][T13363] The task syz.5.2131 (13363) triggered the difference, watch for misbehavior. [ 596.742420][ T9547] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 596.761964][ T9572] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 596.922273][ T9547] usb 7-1: Using ep0 maxpacket: 8 [ 596.963987][ T9572] usb 1-1: Using ep0 maxpacket: 32 [ 596.981706][ T9547] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 597.000458][ T9572] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 597.017132][ T9547] usb 7-1: config 2 has no interface number 0 [ 597.042034][ T9547] usb 7-1: config 2 interface 31 has no altsetting 0 [ 597.056472][ T9547] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 597.067404][ T9547] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.076426][ T9572] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 597.087139][ T9547] usb 7-1: Product: syz [ 597.091394][ T9547] usb 7-1: Manufacturer: syz [ 597.096348][ T9572] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 597.105347][ T9547] usb 7-1: SerialNumber: syz [ 597.110089][ T9572] usb 1-1: Product: syz [ 597.126730][ T9572] usb 1-1: Manufacturer: syz [ 597.155142][ T9572] usb 1-1: SerialNumber: syz [ 597.206256][ T9572] usb 1-1: config 0 descriptor?? [ 597.227067][T13356] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 597.310571][ T9572] hub 1-1:0.0: bad descriptor, ignoring hub [ 597.340350][ T9572] hub 1-1:0.0: probe with driver hub failed with error -5 [ 597.652513][ T9550] usb 1-1: USB disconnect, device number 19 [ 597.768602][ T9547] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 597.852960][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2139'. [ 597.893952][ T9547] usb 7-1: USB disconnect, device number 123 [ 598.200806][T13383] netlink: 'syz.0.2141': attribute type 1 has an invalid length. [ 598.242075][T13385] netlink: 'syz.5.2142': attribute type 1 has an invalid length. [ 598.309188][T13387] FAULT_INJECTION: forcing a failure. [ 598.309188][T13387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.346920][T13387] CPU: 1 UID: 0 PID: 13387 Comm: syz.5.2142 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.346950][T13387] Tainted: [L]=SOFTLOCKUP [ 598.346955][T13387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.346962][T13387] Call Trace: [ 598.346967][T13387] [ 598.346977][T13387] dump_stack_lvl+0xe8/0x150 [ 598.346998][T13387] should_fail_ex+0x412/0x560 [ 598.347017][T13387] _copy_from_user+0x2d/0xb0 [ 598.347035][T13387] ___sys_sendmsg+0x1c6/0x360 [ 598.347051][T13387] ? __lock_acquire+0x6b5/0x2cf0 [ 598.347067][T13387] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.347102][T13387] ? __fget_files+0x2a/0x420 [ 598.347116][T13387] ? __fget_files+0x3a0/0x420 [ 598.347135][T13387] __x64_sys_sendmsg+0x1bd/0x2a0 [ 598.347152][T13387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.347173][T13387] ? __pfx_ksys_write+0x10/0x10 [ 598.347197][T13387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.347211][T13387] do_syscall_64+0x15f/0xf80 [ 598.347225][T13387] ? trace_irq_disable+0x3b/0x140 [ 598.347242][T13387] ? clear_bhb_loop+0x40/0x90 [ 598.347257][T13387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.347270][T13387] RIP: 0033:0x7f342af9cdd9 [ 598.347283][T13387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.347293][T13387] RSP: 002b:00007f34291d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.347308][T13387] RAX: ffffffffffffffda RBX: 00007f342b216090 RCX: 00007f342af9cdd9 [ 598.347318][T13387] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 598.347326][T13387] RBP: 00007f34291d5090 R08: 0000000000000000 R09: 0000000000000000 [ 598.347334][T13387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.347341][T13387] R13: 00007f342b216128 R14: 00007f342b216090 R15: 00007f342b33fa48 [ 598.347360][T13387] [ 598.572082][ T9572] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 598.744645][ T9572] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.756815][ T9572] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 598.766693][ T9572] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 598.776891][ T9572] usb 10-1: config 1 interface 0 has no altsetting 0 [ 598.787028][T13385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 598.789071][ T9572] usb 10-1: string descriptor 0 read error: -22 [ 598.800709][ T9572] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 598.877299][ T9572] usb 10-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 599.006425][T13383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 599.015623][ T9572] usb 10-1: 0:2 : does not exist [ 599.307659][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.352546][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.481082][ T9572] usb-storage 10-1:1.1: USB Mass Storage device detected [ 599.839373][ T9572] usb 10-1: us122l: couldn't allocate write buffer [ 599.953074][ T9572] snd-usb-us122l 10-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 599.998668][ T9572] usb 10-1: USB disconnect, device number 17 [ 600.197599][ T9547] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 600.371973][ T9547] usb 6-1: Using ep0 maxpacket: 8 [ 600.434549][ T9547] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.516620][ T9547] usb 6-1: config 0 has no interfaces? [ 600.540050][ T9547] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.560637][ T9547] usb 6-1: config 0 has no interfaces? [ 600.601578][ T9547] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.641858][ T9547] usb 6-1: config 0 has no interfaces? [ 600.661653][ T9547] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.686204][ T9547] usb 6-1: config 0 has no interfaces? [ 600.702133][ T9547] usb 6-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 600.727843][ T9547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.755849][ T9547] usb 6-1: config 0 descriptor?? [ 600.862677][ T9572] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 601.036665][ T9572] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 601.078240][ T9572] usb 10-1: config 0 has no interface number 0 [ 601.110750][ T9572] usb 10-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 601.143965][ T9572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.169149][ T9572] usb 10-1: Product: syz [ 601.194612][ T9572] usb 10-1: Manufacturer: syz [ 601.210894][ T9572] usb 10-1: SerialNumber: syz [ 601.238819][ T9572] usb 10-1: config 0 descriptor?? [ 601.274920][ T9572] usb 10-1: selecting invalid altsetting 1 [ 601.310970][ T9572] dvb_ttusb_budget: ttusb_init_controller: error [ 601.328636][ T9572] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 601.545811][ T9572] DVB: Unable to find symbol stv0299_attach() [ 601.733891][ T9572] DVB: Unable to find symbol tda8083_attach() [ 601.764906][ T9572] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 601.806317][ T9572] usb 10-1: USB disconnect, device number 18 [ 602.972830][ T9572] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 603.130716][ T9569] usb 6-1: USB disconnect, device number 115 [ 603.152075][ T9572] usb 1-1: Using ep0 maxpacket: 32 [ 603.186229][ T9572] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 603.241570][ T9572] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 603.271414][ T9572] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 603.290817][ T9572] usb 1-1: Product: syz [ 603.300365][ T9572] usb 1-1: Manufacturer: syz [ 603.311184][ T9572] usb 1-1: SerialNumber: syz [ 603.338139][ T9572] usb 1-1: config 0 descriptor?? [ 603.357577][T13422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 603.385469][ T9572] hub 1-1:0.0: bad descriptor, ignoring hub [ 603.406707][ T9572] hub 1-1:0.0: probe with driver hub failed with error -5 [ 603.872062][ T9549] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 603.963250][ T9572] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 604.042119][ T9569] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 604.052060][ T9549] usb 6-1: Using ep0 maxpacket: 32 [ 604.075887][ T9549] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 604.101997][ T9549] usb 6-1: config 0 has no interface number 0 [ 604.122012][ T9549] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 604.134337][ T9572] usb 10-1: Using ep0 maxpacket: 16 [ 604.149768][ T9549] usb 6-1: config 0 interface 89 has no altsetting 0 [ 604.154128][ T9572] usb 10-1: too many configurations: 112, using maximum allowed: 8 [ 604.185482][ T9549] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 604.214539][ T9569] usb 7-1: Using ep0 maxpacket: 16 [ 604.227668][ T9549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.241690][ T9569] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1088, setting to 1024 [ 604.251589][ T9549] usb 6-1: Product: syz [ 604.262604][ T9549] usb 6-1: Manufacturer: syz [ 604.263576][ T9572] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 604.283198][ T9549] usb 6-1: SerialNumber: syz [ 604.286852][ T9569] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 604.301299][ T9572] usb 10-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 604.316462][ T9569] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 604.320686][ T9549] usb 6-1: config 0 descriptor?? [ 604.334327][ T9572] usb 10-1: Product: syz [ 604.341230][ T9572] usb 10-1: Manufacturer: syz [ 604.350967][ T9569] usb 7-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 604.361029][ T9569] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.375650][ T9569] usb 7-1: Product: ꀞ휥屫ꊆ橩橵ﻑ㑪㪲Lj飱屃Ꮜ읣紇Ἓ瓖胳潯臧࿤⮇ĺ峱夓꧸棨㎠穇䋼젒軇ࠈ跞㨊䥖뀐礴霰鏼ㅥ慮귑￱鐧ፈ贓쇪Ῐ೐㫍泠뇆ꃧ䀢煫숔衟㈐䦩✱抓㻏ᢉ힚鹖홑ⳏﺿ扖⼿刏髶跡鏥釒铜⎶懻ẉꦌ깮ᤛ໐塂畐墑컉ầ⫃鋦ሆ琨؆麤ꢆ찘荃＀쵟埿㖂ܽᒪ‹ﴐ뇹᳤ [ 604.418482][ T9569] usb 7-1: Manufacturer: 瑋즂莦ᷓ㵞鮩鼾㧬㽔峗タ丬ᕆᄋ攗䀜➕㧉灥驡淗⯡鿬桇礗耮蝹炉莯਍睆䒐癈其꺵褉怈犇㥦븮甿዇꡾愮骦扶虴㰣퇑֖ꦼ๫䨳ॡ඄ᇬ㤙襭谪廸⊙湌烔퉤ʹ팄ﳁ⋁ᘉ끱蘻﵌䗵疛钣繳Α뇣섡挺ﱽᢓ⿪䫸ᘏ殉譀盙ꓢ钘 [ 604.418482][ T9569] 㜡쎇簲욕쎤캛與張黎㡠췔뛥뇜 [ 604.436679][ T9549] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 604.492565][ T9572] r8152-cfgselector 10-1: Unknown version 0x0000 [ 604.499358][ T9572] r8152-cfgselector 10-1: config 0 descriptor?? [ 604.532338][ T9549] em28xx 6-1:0.89: Video interface 89 found: [ 604.535353][ T9572] cdc_acm 10-1:0.0: Zero length descriptor references [ 604.564300][ T9572] cdc_acm 10-1:0.0: probe with driver cdc_acm failed with error -22 [ 604.586226][ T9569] usb 7-1: SerialNumber: 䦙ⴠꤐ되里䏙䴲晜왪뮅뮐挻澙ť⦼鑵䃉郷뒯Êน쪙곾Ⴝ〹篪狲㢼銯埊徨눜쓞⒎罁酉쯅骄脄炒ꁲ꒯荔쑀➗䡾폌욝䶺僈랸错代Ⲥ꛱⑕铜썽햛냠隿磏娚솨 [ 604.688685][ T48] raw-gadget.1 gadget.0: failed to queue suspend event [ 604.763759][T13422] raw-gadget.1 gadget.0: failed to queue resume event [ 604.774685][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 604.774706][ T30] audit: type=1400 audit(1777467990.951:1377): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13429 comm="syz.9.2156" [ 604.777575][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2156'. [ 604.827005][T13428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.867647][ T48] raw-gadget.1 gadget.0: failed to queue suspend event [ 604.876691][T13428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.880503][ T9569] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 604.931681][T13428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.962492][T13422] raw-gadget.1 gadget.0: failed to queue resume event [ 604.984652][T13428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.007252][ T48] raw-gadget.1 gadget.0: failed to queue suspend event [ 605.024630][T13428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.093711][T13422] raw-gadget.1 gadget.0: failed to queue resume event [ 605.093888][ T9549] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 605.122496][T13428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.185892][T11699] raw-gadget.1 gadget.0: failed to queue suspend event [ 605.236260][ T9547] r8152-cfgselector 10-1: USB disconnect, device number 19 [ 605.273543][T13422] raw-gadget.1 gadget.0: failed to queue resume event [ 605.288972][ T9569] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 605.323271][T11711] raw-gadget.1 gadget.0: failed to queue suspend event [ 605.326873][T13359] udevd[13359]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.331728][ T9569] usb 7-1: USB disconnect, device number 124 [ 605.423686][T13422] raw-gadget.1 gadget.0: failed to queue resume event [ 605.492445][ T9549] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 605.508011][T11711] raw-gadget.1 gadget.0: failed to queue suspend event [ 605.521290][ T9549] em28xx 6-1:0.89: board has no eeprom [ 605.602282][ T9549] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 605.612066][T13422] raw-gadget.1 gadget.0: failed to queue resume event [ 605.628355][ T9549] em28xx 6-1:0.89: analog set to bulk mode. [ 605.652605][ T9550] em28xx 6-1:0.89: Registering V4L2 extension [ 605.653275][T11711] raw-gadget.1 gadget.0: failed to queue suspend event [ 605.696196][ T9549] usb 6-1: USB disconnect, device number 116 [ 605.755224][ T9549] em28xx 6-1:0.89: Disconnecting em28xx [ 605.786788][T13422] raw-gadget.1 gadget.0: failed to queue disconnect event [ 605.890125][ T9550] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 605.902993][ T9547] usb 1-1: USB disconnect, device number 20 [ 605.925817][ T9550] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 605.952255][ T9569] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 605.956709][ T9550] em28xx 6-1:0.89: No AC97 audio processor [ 606.092358][ T9550] usb 6-1: Decoder not found [ 606.121735][ T9550] em28xx 6-1:0.89: failed to create media graph [ 606.142912][ T9569] usb 7-1: Using ep0 maxpacket: 16 [ 606.149532][ T9550] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 606.149580][T13457] gretap0: entered promiscuous mode [ 606.181326][ T9569] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.204866][T13457] vlan3: entered promiscuous mode [ 606.215535][ T9569] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.259727][ T9569] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 606.298280][ T9550] em28xx 6-1:0.89: Registering snapshot button... [ 606.316416][ T9569] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 606.358218][ T9569] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.440408][ T9550] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input95 [ 606.442394][ T9569] usb 7-1: config 0 descriptor?? [ 606.571438][ T9550] em28xx 6-1:0.89: Remote control support is not available for this card. [ 606.641876][ T9549] em28xx 6-1:0.89: Closing input extension [ 606.680243][ T9549] em28xx 6-1:0.89: Deregistering snapshot button [ 606.932991][ T9549] em28xx 6-1:0.89: Freeing device [ 607.283893][ T9549] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 607.465224][ T9549] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.508300][ T9549] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.511544][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2169'. [ 607.544395][ T9549] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 607.584548][ T9549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.629136][ T9549] usb 6-1: config 0 descriptor?? [ 607.666238][ T9569] usbhid 7-1:0.0: can't add hid device: -71 [ 607.690109][ T9569] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 607.734523][ T9569] usb 7-1: USB disconnect, device number 125 [ 607.886950][ T5773] usb 6-1: USB disconnect, device number 117 [ 608.676859][T13496] sg_write: data in/out 406494/562 bytes for SCSI command 0x0-- guessing data in; [ 608.676859][T13496] program syz.5.2176 not setting count and/or reply_len properly [ 608.852015][ T5773] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 609.072028][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 609.103232][ T5773] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 609.151684][ T5773] usb 1-1: config 0 has no interface number 0 [ 609.195883][ T5773] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 609.231489][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.278758][ T5773] usb 1-1: Product: syz [ 609.295987][ T5773] usb 1-1: Manufacturer: syz [ 609.316487][ T5773] usb 1-1: SerialNumber: syz [ 609.370744][ T5773] usb 1-1: config 0 descriptor?? [ 609.420236][ T5773] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 609.657331][ T5773] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 609.776812][ T5773] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 609.876047][T13493] xt_hashlimit: max too large, truncated to 1048576 [ 609.949518][T13493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.011272][T13493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.162325][T13514] loop9: detected capacity change from 0 to 524287936 [ 611.251426][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 611.266477][ T5773] usb 1-1: USB disconnect, device number 21 [ 611.393271][ T5773] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 611.474296][ T5773] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 611.551386][ T5773] quatech2 1-1:0.51: device disconnected [ 612.401963][ T5773] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 612.596256][ T5773] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 612.631545][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.664971][ T5773] usb 1-1: config 0 descriptor?? [ 612.915516][T13552] fuse: Bad value for 'group_id' [ 612.933230][T13552] fuse: Bad value for 'group_id' [ 613.346467][T13533] tipc: Trying to set illegal importance in message [ 613.398732][ T5773] usb 1-1: Cannot set autoneg [ 613.435106][ T5773] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 613.468096][ T5773] usb 1-1: USB disconnect, device number 22 [ 613.719717][T13562] netlink: 'syz.6.2194': attribute type 1 has an invalid length. [ 613.862411][ T5773] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 614.054631][ T5773] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 614.079869][T13562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 614.108787][ T5773] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 614.138142][T13568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.215463][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 614.275738][ T5773] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 614.351737][ T5773] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 614.391605][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.424209][ T5773] usb 1-1: Product: syz [ 614.450741][ T5773] usb 1-1: Manufacturer: syz [ 614.460701][ T5773] usb 1-1: SerialNumber: syz [ 614.499671][ T5773] usb 1-1: config 0 descriptor?? [ 614.508196][T13533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 614.524990][ T5773] usb 1-1: ucan: probing device on interface #0 [ 614.537000][ T5773] usb 1-1: ucan: invalid in_ep MaxPacketSize [ 614.553657][ T5773] usb 1-1: ucan: probe failed; try to update the device firmware [ 614.652100][ T9550] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 614.812035][ T9550] usb 7-1: Using ep0 maxpacket: 16 [ 614.844877][ T9550] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.895058][ T9550] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.933250][ T9550] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 614.984026][ T9550] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 615.019487][ T9550] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.060178][ T9550] usb 7-1: config 0 descriptor?? [ 615.422408][ T9569] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 615.486070][ T5785] usb 1-1: USB disconnect, device number 23 [ 615.492674][T13571] syzkaller1: entered promiscuous mode [ 615.524161][T13571] syzkaller1: entered allmulticast mode [ 615.591122][ T9550] microsoft 0003:045E:07DA.002E: unknown main item tag 0x2 [ 615.619298][ T9569] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.639419][ T9550] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 615.674536][ T9569] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 615.708140][ T9550] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 615.715016][ T9569] usb 10-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 615.765195][ T9550] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 615.794645][ T9569] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.820844][ T9550] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 615.856110][ T9569] usb 10-1: config 0 descriptor?? [ 615.859383][ T9550] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 615.914749][ T9550] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 615.975802][ T9550] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 616.002152][ T9550] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 616.061229][ T9550] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.002E/input/input96 [ 616.083888][ T5785] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 616.187033][ T9569] usb 10-1: USB disconnect, device number 20 [ 616.204173][ T9550] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 616.284421][ T5785] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 616.302426][ T9550] usb 7-1: USB disconnect, device number 126 [ 616.339029][T13591] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2202'. [ 616.349944][ T5785] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.389749][ T5785] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.463884][ T5785] usb 1-1: config 0 interface 0 has no altsetting 0 [ 616.499549][ T5785] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 616.559043][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.620973][ T5785] usb 1-1: config 0 descriptor?? [ 616.721651][T13592] fido_id[13592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 617.052896][ T9549] IPVS: starting estimator thread 0... [ 617.095459][T13585] syzkaller0: entered promiscuous mode [ 617.117823][T13585] syzkaller0: entered allmulticast mode [ 617.157455][ T5785] holtek 0003:1241:5015.002F: ignoring exceeding usage max [ 617.174954][T13595] IPVS: using max 26 ests per chain, 62400 per kthread [ 617.199086][ T5785] holtek 0003:1241:5015.002F: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 617.237782][ T5785] holtek 0003:1241:5015.002F: no inputs found [ 617.393966][ T9550] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 617.565565][ T5785] usb 1-1: USB disconnect, device number 24 [ 618.072065][ T9550] usb 10-1: device descriptor read/64, error -71 [ 618.322156][ T9550] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 618.502239][ T9550] usb 10-1: Using ep0 maxpacket: 16 [ 618.526273][ T9550] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.562789][ T9550] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 618.582412][ T9547] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 618.612409][ T9550] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 618.646198][ T9550] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 618.679234][ T9550] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.730241][ T9550] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 618.758305][ T9550] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 618.785911][ T9550] usb 10-1: Manufacturer: syz [ 618.804024][ T9547] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 618.825383][ T9550] usb 10-1: config 0 descriptor?? [ 618.848916][ T9547] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 618.880679][ T9547] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 618.906770][ T9547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.981020][T13614] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 619.035750][ T9547] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 619.407782][ T9547] usb 1-1: USB disconnect, device number 25 [ 619.412101][ T9550] rc_core: IR keymap rc-hauppauge not found [ 619.476186][ T9550] Registered IR keymap rc-empty [ 619.495451][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 619.553278][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 619.612306][ T9550] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 619.714639][ T9550] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input97 [ 619.775532][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 619.823526][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 619.872161][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 619.914933][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 619.968897][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 620.016537][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 620.067065][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 620.112089][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 620.157355][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 620.202013][ T9550] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 620.261411][ T9550] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 620.292260][ T9550] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 620.341634][ T9550] usb 10-1: USB disconnect, device number 22 [ 620.780651][T13629] trusted_key: encrypted_key: master key parameter 'deC' is invalid [ 621.741514][T13644] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2218'. [ 621.767922][T13644] loop9: detected capacity change from 0 to 524287936 [ 621.841043][T13646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.776005][T13669] __vm_enough_memory: pid: 13669, comm: syz.9.2225, bytes: 4503599627366400 not enough memory for the allocation [ 623.892067][ T5785] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 624.084313][ T5785] usb 1-1: config 6 has an invalid interface number: 104 but max is 0 [ 624.110241][ T5785] usb 1-1: config 6 has no interface number 0 [ 624.135743][ T5785] usb 1-1: config 6 interface 104 has no altsetting 0 [ 624.161427][ T5785] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=23.79 [ 624.183858][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.211855][ T5785] usb 1-1: Product: syz [ 624.227299][ T5785] usb 1-1: Manufacturer: syz [ 624.244009][ T5785] usb 1-1: SerialNumber: syz [ 624.478708][ T5785] sierra 1-1:6.104: Sierra USB modem converter detected [ 624.509789][ T5785] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 624.547347][ T5785] usb 1-1: USB disconnect, device number 26 [ 624.547541][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.563789][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.582110][ T5785] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 624.602032][ T9547] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 624.616214][ T5785] sierra 1-1:6.104: device disconnected [ 624.772077][ T9547] usb 10-1: Using ep0 maxpacket: 8 [ 624.791682][ T9547] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 624.836029][ T9547] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.852563][ T9547] usb 10-1: Product: syz [ 624.858186][ T9547] usb 10-1: Manufacturer: syz [ 624.867436][ T9547] usb 10-1: SerialNumber: syz [ 624.879960][ T9547] usb 10-1: config 0 descriptor?? [ 624.907793][ T9547] radio-usb-si4713 10-1:0.0: Si4713 development board discovered: (10C4:8244) [ 624.971048][T13678] netlink: 'syz.5.2228': attribute type 1 has an invalid length. [ 625.022794][T13678] 8021q: adding VLAN 0 to HW filter on device bond6 [ 625.155837][ T9547] radio-usb-si4713 10-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 625.168490][ T9547] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 625.194628][ T9547] usb 10-1: USB disconnect, device number 23 [ 625.885849][T13695] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2235'. [ 626.200064][T13704] random: crng reseeded on system resumption [ 626.994515][T13714] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2241'. [ 628.627936][T13737] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 628.648350][ T9572] team_slave_0: entered promiscuous mode [ 628.656288][ T9572] team_slave_1: entered promiscuous mode [ 628.917806][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2252'. [ 628.930889][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2252'. [ 629.256896][T13755] syzkaller0: entered promiscuous mode [ 629.288640][T13755] syzkaller0: entered allmulticast mode [ 630.804779][T13768] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 630.934454][T13767] input: syz0 as /devices/virtual/input/input98 [ 633.842055][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 633.850661][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 633.855869][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 633.857572][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 633.858534][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 633.992567][ T9550] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 634.142398][ T9550] usb 6-1: Using ep0 maxpacket: 32 [ 634.144769][ T9550] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 634.144845][ T9550] usb 6-1: config 0 has no interface number 0 [ 634.144886][ T9550] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 634.144908][ T9550] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 634.144937][ T9550] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 634.144962][ T9550] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 42757, setting to 1024 [ 634.144990][ T9550] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.147774][ T9550] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 634.147808][ T9550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.147832][ T9550] usb 6-1: Product: syz [ 634.147849][ T9550] usb 6-1: Manufacturer: syz [ 634.147867][ T9550] usb 6-1: SerialNumber: syz [ 634.153810][ T9550] usb 6-1: config 0 descriptor?? [ 634.194683][ T9550] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input99 [ 634.373268][ T9550] usb 6-1: USB disconnect, device number 118 [ 635.514119][T13817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2273'. [ 635.729537][T13819] loop9: detected capacity change from 0 to 524287935 [ 635.984277][ T5624] Bluetooth: hci5: command tx timeout [ 636.512193][T13805] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.512324][T13805] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.512557][T13805] bridge_slave_0: entered allmulticast mode [ 636.528762][T13805] bridge_slave_0: entered promiscuous mode [ 636.541508][T13805] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.541644][T13805] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.543099][T13805] bridge_slave_1: entered allmulticast mode [ 636.545275][T13805] bridge_slave_1: entered promiscuous mode [ 636.730603][T13805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.756274][T13805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.840389][T13805] team0: Port device team_slave_0 added [ 636.843295][T13805] team0: Port device team_slave_1 added [ 636.904686][T13805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.904702][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.904719][T13805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.906323][T13805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.906336][T13805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.906353][T13805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.985023][T13805] hsr_slave_0: entered promiscuous mode [ 636.985863][T13805] hsr_slave_1: entered promiscuous mode [ 636.986446][T13805] debugfs: 'hsr0' already exists in 'hsr' [ 636.986462][T13805] Cannot create hsr debugfs directory [ 638.072954][ T5624] Bluetooth: hci5: command tx timeout [ 638.516791][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 639.087467][T13851] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 640.144231][ T5624] Bluetooth: hci5: command tx timeout [ 640.439578][T13872] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2288'. [ 640.548876][T13872] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2288'. [ 640.661053][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2290'. [ 641.025592][T13882] loop4: detected capacity change from 0 to 7 [ 641.314389][T13882] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 641.431473][T13882] loop4: partition table partially beyond EOD, truncated [ 641.522730][T13882] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 642.074480][T13805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 642.167691][T13805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.211079][T13805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 642.222931][ T5624] Bluetooth: hci5: command tx timeout [ 642.280605][T13805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.363501][T13805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 642.467902][T13805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.533513][T13805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 642.589106][T13805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.256758][T13924] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2301'. [ 643.275176][T13805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.410616][T13805] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.490866][T11711] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.498226][T11711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.601484][T11711] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.608779][T11711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.070876][T13805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.678187][T13805] veth0_vlan: entered promiscuous mode [ 645.095944][T13805] veth1_vlan: entered promiscuous mode [ 645.565445][T13805] veth0_macvtap: entered promiscuous mode [ 645.626423][T13805] veth1_macvtap: entered promiscuous mode [ 645.807721][T13805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.895322][T13805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.040771][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.081094][T13971] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.2313'. [ 646.166246][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.251488][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.382781][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.345294][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2317'. [ 647.435585][T11711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.479315][T11711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.744173][T11706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.791270][T11706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.057528][T13997] syzkaller0: entered promiscuous mode [ 648.086060][T13997] syzkaller0: entered allmulticast mode [ 648.930123][T14017] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.2324'. [ 649.389087][T14026] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2327'. [ 650.797998][T14044] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2331'. [ 651.415638][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 652.702733][ T31] INFO: task syz.1.1870:12154 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 652.759604][T14068] syzkaller0: entered promiscuous mode [ 652.806520][ T31] Tainted: G L syzkaller #0 [ 652.854033][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.915390][ T31] task:syz.1.1870 state:D stack:28120 pid:12154 tgid:12153 ppid:5643 task_flags:0x400040 flags:0x00080002 [ 653.033110][ T31] Call Trace: [ 653.053824][ T31] [ 653.075726][ T31] __schedule+0x17b4/0x5680 [ 653.112096][ T31] ? __pfx___schedule+0x10/0x10 [ 653.156178][ T31] ? schedule+0x90/0x360 [ 653.206972][ T31] schedule+0x164/0x360 [ 653.240141][ T31] schedule_preempt_disabled+0x13/0x30 [ 653.285809][ T31] __mutex_lock+0x7f7/0x1550 [ 653.339676][ T31] ? __mutex_lock+0x608/0x1550 [ 653.397126][ T31] ? usbdev_open+0x182/0x770 [ 653.447138][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 653.509205][ T31] ? bus_find_device+0x27d/0x2d0 [ 653.568411][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 653.617984][ T31] ? usbdev_open+0xa7/0x770 [ 653.651063][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 653.676282][ T31] usbdev_open+0x182/0x770 [ 653.700433][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 653.738307][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 653.774021][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 653.804286][ T31] chrdev_open+0x4cd/0x5e0 [ 653.836619][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 653.853136][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 653.884102][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 653.903421][ T31] do_dentry_open+0x785/0x14e0 [ 653.909374][ T31] vfs_open+0x3b/0x340 [ 653.930187][ T31] ? path_openat+0x2df0/0x3860 [ 653.949915][ T31] path_openat+0x2e08/0x3860 [ 653.982806][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 654.023289][ T31] ? stack_depot_save_flags+0x33/0x810 [ 654.043228][ T31] ? __pfx_path_openat+0x10/0x10 [ 654.060810][ T31] ? __x64_sys_openat+0x138/0x170 [ 654.077860][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 654.096774][ T31] do_file_open+0x23e/0x4a0 [ 654.113527][ T31] ? __pfx_do_file_open+0x10/0x10 [ 654.141734][ T31] ? _raw_spin_unlock+0x28/0x50 [ 654.172580][ T31] ? alloc_fd+0x64b/0x6c0 [ 654.190617][ T31] do_sys_openat2+0x113/0x200 [ 654.212195][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 654.244933][ T31] __x64_sys_openat+0x138/0x170 [ 654.266383][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.282851][ T31] do_syscall_64+0x15f/0xf80 [ 654.308952][ T31] ? trace_irq_disable+0x3b/0x140 [ 654.323549][ T31] ? clear_bhb_loop+0x40/0x90 [ 654.329875][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.336038][ T31] RIP: 0033:0x7f146755d60e [ 654.340585][ T31] RSP: 002b:00007f1468478b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 654.350270][ T31] RAX: ffffffffffffffda RBX: 00007f14684796c0 RCX: 00007f146755d60e [ 654.358616][ T31] RDX: 0000000000101301 RSI: 00007f1468478c00 RDI: ffffffffffffff9c [ 654.367063][ T31] RBP: 00007f1468478c00 R08: 0000000000000000 R09: 0000000000000000 [ 654.392084][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 654.402089][ T31] R13: 00007f1467816038 R14: 00007f1467815fa0 R15: 00007f146793fa48 [ 654.421073][ T31] [ 654.431996][ T31] INFO: task syz.3.1913:12281 blocked for more than 145 seconds. [ 654.449222][ T31] Tainted: G L syzkaller #0 [ 654.461996][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.484922][ T31] task:syz.3.1913 state:D stack:26216 pid:12281 tgid:12280 ppid:5640 task_flags:0x400140 flags:0x00080002 [ 654.515540][ T31] Call Trace: [ 654.518998][ T31] [ 654.525028][ T31] __schedule+0x17b4/0x5680 [ 654.529843][ T31] ? __pfx___schedule+0x10/0x10 [ 654.543584][ T31] ? schedule+0x90/0x360 [ 654.556724][ T31] schedule+0x164/0x360 [ 654.571880][ T31] schedule_preempt_disabled+0x13/0x30 [ 654.577529][ T31] __mutex_lock+0x7f7/0x1550 [ 654.591893][ T31] ? __mutex_lock+0x608/0x1550 [ 654.596775][ T31] ? usbdev_open+0x182/0x770 [ 654.601428][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 654.621367][ T31] ? bus_find_device+0x27d/0x2d0 [ 654.630219][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 654.649394][ T31] ? usbdev_open+0xa7/0x770 [ 654.656199][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 654.666123][ T31] usbdev_open+0x182/0x770 [ 654.670824][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 654.683362][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 654.688379][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 654.693613][ T31] chrdev_open+0x4cd/0x5e0 [ 654.698964][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 654.709265][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 654.725489][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 654.731356][ T31] do_dentry_open+0x785/0x14e0 [ 654.738096][ T31] vfs_open+0x3b/0x340 [ 654.744106][ T31] ? path_openat+0x2df0/0x3860 [ 654.748958][ T31] path_openat+0x2e08/0x3860 [ 654.757678][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 654.764455][ T31] ? stack_depot_save_flags+0x33/0x810 [ 654.770194][ T31] ? __pfx_path_openat+0x10/0x10 [ 654.778495][ T31] ? __x64_sys_openat+0x138/0x170 [ 654.785597][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 654.790670][ T31] do_file_open+0x23e/0x4a0 [ 654.795587][ T31] ? __pfx_do_file_open+0x10/0x10 [ 654.800805][ T31] ? _raw_spin_unlock+0x28/0x50 [ 654.806336][ T31] ? alloc_fd+0x64b/0x6c0 [ 654.810766][ T31] do_sys_openat2+0x113/0x200 [ 654.815822][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 654.821116][ T31] __x64_sys_openat+0x138/0x170 [ 654.826522][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.833688][ T31] do_syscall_64+0x15f/0xf80 [ 654.838447][ T31] ? trace_irq_disable+0x3b/0x140 [ 654.844956][ T31] ? clear_bhb_loop+0x40/0x90 [ 654.849820][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.857929][ T31] RIP: 0033:0x7f2bb315d60e [ 654.867536][ T31] RSP: 002b:00007f2bb3f82b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 654.889703][ T31] RAX: ffffffffffffffda RBX: 00007f2bb3f836c0 RCX: 00007f2bb315d60e [ 654.898541][ T31] RDX: 0000000000020182 RSI: 00007f2bb3f82c00 RDI: ffffffffffffff9c [ 654.907246][ T31] RBP: 00007f2bb3f82c00 R08: 0000000000000000 R09: 0000000000000000 [ 654.916585][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 654.925165][ T31] R13: 00007f2bb3416038 R14: 00007f2bb3415fa0 R15: 00007f2bb353fa48 [ 654.934350][ T31] [ 654.937528][ T31] [ 654.937528][ T31] Showing all locks held in the system: [ 655.081941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 655.090465][ T31] 1 lock held by khungtaskd/31: [ 655.116486][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 655.150785][ T31] 6 locks held by kworker/0:2/1220: [ 655.171466][ T31] 2 locks held by getty/5381: [ 655.189062][ T31] #0: ffff8880360e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 655.237213][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 655.283080][ T31] 5 locks held by kworker/0:6/5785: [ 655.315739][ T31] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 655.372028][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 655.410722][ T31] #2: ffff88804e60d0a0 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_decrypt_worker+0x8d7/0xd80 [ 655.467763][ T31] #3: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 655.514975][ T31] #4: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd4/0x340 [ 655.555265][ T31] 1 lock held by syz.5.1354/10498: [ 655.595818][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 655.624788][ T31] 1 lock held by syz.1.1870/12154: [ 655.642278][ T31] #0: ffff88802a6361d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 655.661836][ T31] 1 lock held by syz.3.1913/12281: [ 655.669028][ T31] #0: ffff88802a6361d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 655.704546][ T31] 1 lock held by syz.8.1965/12463: [ 655.711907][ T31] #0: ffff88802a6361d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 655.721157][ T31] 1 lock held by syz.6.2206/13607: [ 655.726512][ T31] #0: ffff88802a6361d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 655.737685][ T31] 1 lock held by syz.9.2329/14046: [ 655.757678][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 655.770309][ T31] 2 locks held by syz.5.2331/14043: [ 655.775808][ T31] #0: ffffffff8fdbfe08 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 655.786731][ T31] #1: ffffffff8e962f38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 655.799229][ T31] 2 locks held by syz.0.2335/14058: [ 655.804641][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 655.815695][ T31] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 655.829128][ T31] 1 lock held by syz.7.2336/14066: [ 655.834503][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 655.845545][ T31] 1 lock held by syz.4.2338/14082: [ 655.850734][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 655.860591][ T31] 1 lock held by syz.4.2338/14083: [ 655.866316][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 655.900139][ T31] [ 655.930318][ T31] ============================================= [ 655.930318][ T31] [ 655.941237][ T31] NMI backtrace for cpu 1 [ 655.941262][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 655.941289][ T31] Tainted: [L]=SOFTLOCKUP [ 655.941297][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 655.941309][ T31] Call Trace: [ 655.941318][ T31] [ 655.941328][ T31] dump_stack_lvl+0xe8/0x150 [ 655.941357][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 655.941387][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 655.941411][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 655.941442][ T31] sys_info+0x135/0x170 [ 655.941472][ T31] watchdog+0xfd3/0x1030 [ 655.941508][ T31] ? watchdog+0x1c9/0x1030 [ 655.941541][ T31] kthread+0x388/0x470 [ 655.941567][ T31] ? __pfx_watchdog+0x10/0x10 [ 655.941593][ T31] ? __pfx_kthread+0x10/0x10 [ 655.941619][ T31] ret_from_fork+0x514/0xb70 [ 655.941644][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 655.941664][ T31] ? __switch_to+0xc79/0x1410 [ 655.941695][ T31] ? __pfx_kthread+0x10/0x10 [ 655.941732][ T31] ret_from_fork_asm+0x1a/0x30 [ 655.941770][ T31] [ 656.056321][ T31] Sending NMI from CPU 1 to CPUs 0: [ 656.062021][ C0] NMI backtrace for cpu 0 [ 656.062044][ C0] CPU: 0 UID: 0 PID: 1220 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.062067][ C0] Tainted: [L]=SOFTLOCKUP [ 656.062074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 656.062085][ C0] Workqueue: usb_hub_wq hub_event [ 656.062109][ C0] RIP: 0010:pie_calculate_probability+0x2d7/0x7e0 [ 656.062130][ C0] Code: ec 09 e8 9c 69 0f f8 eb 1c 49 c1 ef 0b 49 c1 ec 0b e8 8d 69 0f f8 eb 0d 49 c1 ef 0d 49 c1 ec 0d e8 7e 69 0f f8 48 8b 5c 24 08 <4c> 89 74 24 48 48 89 d9 48 c1 e9 03 48 b8 00 00 00 00 00 fc ff df [ 656.062144][ C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00000207 [ 656.062158][ C0] RAX: ffffffff89b64250 RBX: ffff8880542fc2c0 RCX: ffff8880294a9ec0 [ 656.062170][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 00000010c6f7a0b5 [ 656.062182][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 656.062193][ C0] R10: dffffc0000000000 R11: fffff52000000f70 R12: 00000000002af31d [ 656.062205][ C0] R13: 0019999999999998 R14: ffffc9001f6e9820 R15: 0000000000044b82 [ 656.062217][ C0] FS: 0000000000000000(0000) GS:ffff888125293000(0000) knlGS:0000000000000000 [ 656.062231][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.062243][ C0] CR2: 00007ffe070baff8 CR3: 0000000067980000 CR4: 00000000003526f0 [ 656.062260][ C0] Call Trace: [ 656.062267][ C0] [ 656.062281][ C0] fq_pie_timer+0x288/0x5b0 [ 656.062300][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 656.062318][ C0] call_timer_fn+0x192/0x5e0 [ 656.062337][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 656.062352][ C0] ? call_timer_fn+0xd4/0x5e0 [ 656.062369][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 656.062391][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.062408][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 656.062431][ C0] __run_timer_base+0x652/0x8b0 [ 656.062453][ C0] ? ktime_get+0x45/0x220 [ 656.062480][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 656.062503][ C0] run_timer_softirq+0xb7/0x170 [ 656.062520][ C0] handle_softirqs+0x22a/0x840 [ 656.062539][ C0] ? __irq_exit_rcu+0xca/0x220 [ 656.062558][ C0] __irq_exit_rcu+0xca/0x220 [ 656.062575][ C0] irq_exit_rcu+0x9/0x30 [ 656.062590][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 656.062607][ C0] [ 656.062613][ C0] [ 656.062619][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 656.062649][ C0] RIP: 0010:unwind_get_return_address+0x67/0x90 [ 656.062669][ C0] Code: 48 89 df e8 7b 06 ba 00 48 8b 3b e8 e3 d8 18 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 60 06 ba 00 48 8b 03 eb 02 31 c0 <5b> 41 5e 41 5f e9 cf e6 33 0a cc 89 d9 80 e1 07 80 c1 03 38 c1 7c [ 656.062682][ C0] RSP: 0018:ffffc90005e3e5e8 EFLAGS: 00000246 [ 656.062696][ C0] RAX: ffffffff81b0d819 RBX: ffffc90005e3e650 RCX: 0000000000000000 [ 656.062707][ C0] RDX: ffffc90005e3e601 RSI: dffffc0000000000 RDI: ffffffff81b0d819 [ 656.062719][ C0] RBP: ffffc90005e3e690 R08: ffffc90005e3e690 R09: 0000000000000000 [ 656.062730][ C0] R10: ffffc90005e3e658 R11: fffff52000bc7ccd R12: ffff8880294a9ec0 [ 656.062743][ C0] R13: ffff88804db0f500 R14: dffffc0000000000 R15: 1ffff92000bc7cca [ 656.062758][ C0] ? stack_trace_save+0xa9/0x100 [ 656.062781][ C0] ? stack_trace_save+0xa9/0x100 [ 656.062805][ C0] ? unwind_get_return_address+0x4d/0x90 [ 656.062823][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 656.062846][ C0] arch_stack_walk+0xfb/0x150 [ 656.062868][ C0] ? stack_trace_save+0xa9/0x100 [ 656.062891][ C0] stack_trace_save+0xa9/0x100 [ 656.062912][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 656.062935][ C0] ? arch_stack_walk+0x11b/0x150 [ 656.062957][ C0] kasan_save_track+0x3e/0x80 [ 656.062997][ C0] ? rcu_is_watching+0x15/0xb0 [ 656.063017][ C0] __kasan_kmalloc+0x93/0xb0 [ 656.063039][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 656.063062][ C0] ? dummy_urb_enqueue+0x7c/0x780 [ 656.063081][ C0] ? __kmalloc_cache_noprof+0x15b/0x660 [ 656.063103][ C0] dummy_urb_enqueue+0x7c/0x780 [ 656.063122][ C0] ? usb_hcd_map_urb_for_dma+0x44f/0xd40 [ 656.063145][ C0] usb_hcd_submit_urb+0x328/0x1b70 [ 656.063168][ C0] ath6kl_usb_post_recv_transfers+0x3cd/0x6f0 [ 656.063194][ C0] ath6kl_usb_power_on+0x6a/0x280 [ 656.063211][ C0] ath6kl_core_init+0x1e1/0x10b0 [ 656.063235][ C0] ? rcu_is_watching+0x15/0xb0 [ 656.063254][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 656.063277][ C0] ? __pfx_ath6kl_core_init+0x10/0x10 [ 656.063300][ C0] ? __asan_memcpy+0x40/0x70 [ 656.063319][ C0] ? ath6kl_core_create+0x7de/0x980 [ 656.063343][ C0] ath6kl_usb_probe+0x14a6/0x15a0 [ 656.063365][ C0] usb_probe_interface+0x659/0xc70 [ 656.063390][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 656.063408][ C0] really_probe+0x267/0xaf0 [ 656.063430][ C0] __driver_probe_device+0x1ef/0x380 [ 656.063450][ C0] driver_probe_device+0x4f/0x240 [ 656.063470][ C0] __device_attach_driver+0x279/0x430 [ 656.063491][ C0] bus_for_each_drv+0x258/0x2f0 [ 656.063513][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 656.063532][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 656.063555][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 656.063572][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 656.063590][ C0] __device_attach+0x2c5/0x450 [ 656.063609][ C0] ? __pfx___device_attach+0x10/0x10 [ 656.063629][ C0] ? _raw_spin_unlock+0x28/0x50 [ 656.063652][ C0] device_initial_probe+0xa1/0xd0 [ 656.063671][ C0] bus_probe_device+0x12a/0x220 [ 656.063694][ C0] device_add+0x7e9/0xbb0 [ 656.063713][ C0] usb_set_configuration+0x1a87/0x2110 [ 656.063742][ C0] usb_generic_driver_probe+0x8d/0x150 [ 656.063760][ C0] usb_probe_device+0x1c4/0x3b0 [ 656.063780][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 656.063798][ C0] really_probe+0x267/0xaf0 [ 656.063819][ C0] __driver_probe_device+0x1ef/0x380 [ 656.063839][ C0] driver_probe_device+0x4f/0x240 [ 656.063859][ C0] __device_attach_driver+0x279/0x430 [ 656.063880][ C0] bus_for_each_drv+0x258/0x2f0 [ 656.063903][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 656.063922][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 656.063945][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 656.063962][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 656.063980][ C0] __device_attach+0x2c5/0x450 [ 656.063999][ C0] ? __pfx___device_attach+0x10/0x10 [ 656.064018][ C0] ? _raw_spin_unlock+0x28/0x50 [ 656.064035][ C0] device_initial_probe+0xa1/0xd0 [ 656.064054][ C0] bus_probe_device+0x12a/0x220 [ 656.064077][ C0] device_add+0x7e9/0xbb0 [ 656.064095][ C0] usb_new_device+0xa08/0x16f0 [ 656.064123][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 656.064148][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.064165][ C0] hub_event+0x2a1c/0x4f30 [ 656.064201][ C0] ? __pfx_hub_event+0x10/0x10 [ 656.064218][ C0] ? process_scheduled_works+0xa70/0x1860 [ 656.064238][ C0] ? process_scheduled_works+0xa70/0x1860 [ 656.064253][ C0] ? process_scheduled_works+0xa70/0x1860 [ 656.064270][ C0] process_scheduled_works+0xb5d/0x1860 [ 656.064298][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.064318][ C0] ? assign_work+0x3d5/0x5e0 [ 656.064335][ C0] worker_thread+0xa53/0xfc0 [ 656.064364][ C0] kthread+0x388/0x470 [ 656.064383][ C0] ? __pfx_worker_thread+0x10/0x10 [ 656.064399][ C0] ? __pfx_kthread+0x10/0x10 [ 656.064419][ C0] ret_from_fork+0x514/0xb70 [ 656.064438][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 656.064454][ C0] ? __switch_to+0xc79/0x1410 [ 656.064477][ C0] ? __pfx_kthread+0x10/0x10 [ 656.064497][ C0] ret_from_fork_asm+0x1a/0x30 [ 656.064522][ C0] [ 656.818707][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 656.825727][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 656.836710][ T31] Tainted: [L]=SOFTLOCKUP [ 656.841159][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 656.851867][ T31] Call Trace: [ 656.855198][ T31] [ 656.858175][ T31] vpanic+0x56c/0xa60 [ 656.862212][ T31] ? __pfx___schedule+0x10/0x10 [ 656.867367][ T31] ? __pfx_vpanic+0x10/0x10 [ 656.871917][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 656.878118][ T31] panic+0xc5/0xd0 [ 656.881869][ T31] ? __pfx_panic+0x10/0x10 [ 656.886410][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 656.891824][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 656.898391][ T31] watchdog+0x102c/0x1030 [ 656.902775][ T31] ? watchdog+0x1c9/0x1030 [ 656.907320][ T31] kthread+0x388/0x470 [ 656.911409][ T31] ? __pfx_watchdog+0x10/0x10 [ 656.916288][ T31] ? __pfx_kthread+0x10/0x10 [ 656.921327][ T31] ret_from_fork+0x514/0xb70 [ 656.926107][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 656.931249][ T31] ? __switch_to+0xc79/0x1410 [ 656.935954][ T31] ? __pfx_kthread+0x10/0x10 [ 656.940561][ T31] ret_from_fork_asm+0x1a/0x30 [ 656.945358][ T31] [ 656.948894][ T31] Kernel Offset: disabled [ 656.953236][ T31] Rebooting in 86400 seconds..